Main Content

Launch Abort System

This example models a launch abort system for an orbiter intended for outer space. If a fault occurs during the launch, the orbiter initiates an abort sequence. Depending on the timing of the fault, the orbiter may: return to the launch site, head towards a designated downrange landing site, attempt a landing after completing one orbit around the Earth, or transition to a lower, stable orbit.

Monitor Orbiter Altitude

In this example, a Stateflow® chart monitors the flight of the orbiter and schedules the appropriate launch abort actions when the orbiter encounters an anomaly.

The chart consists of two parallel states: ModeLogic and Abort. The ModeLogic state contains four substates that describe the possible launch abort scenarios based on the altitude of the orbiter:

  • Return to Launch Site (RTLS) — If the altitude is less than 10,000 meters, the orbiter dumps the fuel, releases the solid rocket boosters and the external tank, and returns to the launch site.

  • Downrange landing (DRL) — If the altitude is between 10,000 and 100,000 meters, the orbiter releases the solid rocket boosters and the external tank and returns to a downrange landing site.

  • Abort Once Around (AOA) — If the altitude is between 100,000 and 400,000 meters, the orbiter releases the external tank, circles the Earth once, and proceeds to re-entry.

  • Abort to Orbit (ATO) — If the altitude is greater than 400,000 meters, the orbiter abandons the intended orbit and proceeds to a lower, stable orbit.

Schedule Launch Abort Actions

The Abort state controls the behavior of the orbiter when an anomaly is detected. If an anomaly occurs, the system transitions from the Normal substate to the AbortLogic subchart before transitioning to the AbortComplete substate.

The transition into the AbortLogic subchart connects to an entry port. Similarly, the transition out of the subchart begins at an exit port. Each port has a matching junction that marks the entry or exit point inside the subchart. The junctions isolate the internal logic of the subchart which, depending on the launch abort scenario, schedules three possible actions:

  • Dump the fuel.

  • Release the sold rocket boosters.

  • Release the external tank.

If the orbiter is in the ATO scenario, none of these actions is required.

For more information about entry and exit ports, see Create Entry and Exit Connections Across State Boundaries.

Simulate the Model

To simulate the model:

  1. Double-click the Inputs block. In the Signal Editor block dialog, select a launch abort scenario from the Active Scenario list. The default scenario is RTLS_Abort.

  2. Click Run.


Nelson, Douglas, John Bradford, and John Olds. "Abortability Metrics: Quantifying Intact Abort Mode Availability for Reusable Launch Vehicles." In Space 2006. San Jose, California: American Institute of Aeronautics and Astronautics, 2006.

Related Topics