Search NASASearch

NASA NTRS · 20260002832

Application of System-Theoretic Process Analysis (STPA) to a NASA Concept Electric Aircraft Battery System

Abstract

System-Theoretic Process Analysis (STPA) is a systems-based hazard analysis method that identifies unsafe interactions and control deficiencies in complex systems but has been rarely used for NASA programs in favor of more well-established hazard analyses. To evaluate its applicability, a NASA Safety and Mission Assurance (SMA) team applied the STPA method to an early-stage hybrid electrified aircraft concept, focusing on the energy storage system and electric powertrain. Objectives include assessing STPA’s value relative to traditional methods and its suitability for early design phases. Activities include team training, system review, detailed STPA execution, and comparison with traditional analyses. Findings show STPA provides a structured, comprehensive hazard evaluation and can identify additional risks by expanding analysis boundaries. However, traditional methods can yield similar results when applied rigorously, though they typically require more mature designs. Overall, STPA is a valuable addition, particularly for early development, informing safety requirements and supporting preliminary hazard analyses. Further pilot applications are recommended.

Explore related subjects

Keep this discovery

BibTeXRIS

Matthew P Huffman, James M Green, Tinicia J Menifee. Application of System-Theoretic Process Analysis (STPA) to a NASA Concept Electric Aircraft Battery System. https://ntrs.nasa.gov/citations/20260002832

Cite the original work for its findings. Save a collection to share your selection of sources.

Discover connections

Connections use source metadata and explicit phrase matches, not verified experimental comparisons.

KEEP EXPLORING

Related discoveries

Dry Pressed, High Areal Loading Electrode Architectures Enabled by Holey Graphene

For future electric aviation, advanced battery cell chemistry beyond lithium ion batteries are required to meet mission requirements. High energy density battery concepts such as lithium-sulfur (Li-S) and lithiumoxygen (Li-O2) chemistries are being intensively investigated to realize their extraordinary theoretical promise in terms of energy density. Most fabrication methods of cathodes for these novel battery chemistries followed a conventional approach. In this approach, the active material is mixed with a polymer binder and a conductive carbon in a high-boiling organic solvent to form a slurry, followed by casting onto a current collector and solvent evaporation. The process is usually lengthy and poses environmental hazards due to the use of organic solvents.

Lin Yi

Hazard and risk analysis framework for nuclear power plant–based integrated energy systems

Employing integrated energy systems (IESs) with nuclear power plants (NPPs) can improve NPP utilization by leveraging dedicated thermal and electric power delivery, but it may also increase operational safety risks. This paper presents a framework to identify and quantify hazards and risks for such IESs. The framework combines accidentology to review past industrial accidents with failure modes and effects analysis (FMEA) to identify potential future incidents. Hydrogen explosion and toxic chemical release hazards are of particular concern. Explosion consequences are quantified using the Bauwens-Dorofeev (Bauwens) and trinitrotoluene equivalent mass (TNT-EM) methods, while chemical release consequences are computed using the Gaussian atmospheric dispersion method. Operational disturbances from direct electrical and thermal integration that may affect NPP safety are modeled using probabilistic risk analysis (PRA). Hazards and risks are then evaluated for regulatory compliance. The framework is applied to IESs comprising pressurized or boiling water reactors supplying three levels of thermal and electrical power to industrial customers. Case studies include high-temperature steam electrolysis hydrogen plants of varying capacities and a synthetic fuel production plant. Sensitivity analysis examines piping component failures in the PRA model as a precursor to cost estimation for thermal extraction line design. Additionally, Fussel-Vessely (FV) and risk increase importance (RII) measures identify risk-informed design improvements for the thermal extraction system. FMEA highlights hazards such as loss of offsite power, prompt loss of electrical load, loss of thermal output, and immediate steam diversion, in addition to hydrogen explosions and toxic chemical releases. Both Bauwens and TNT-EM methods suggest maintaining several hundred meters of separation between the NPP and hydrogen facility to mitigate explosion risks. PRA results show a maximum initiating event frequency increase of 1.15% and an overall risk increase of 0.28%. Importance measure analysis identifies upstream pipe leak isolation components as critical. Evaluating the results against safety regulations, it is concluded that hazards and risks can be managed to comply with regulations through risk-informed thermal and electrical connection designs, component selection, maintenance programs, and safe separation distances between NPPs and integrated industrial facilities.

08 - HYDROGEN

Biocybernetic Closed-Loop System for Mitigating Hazardous States of Awareness

The past century of passenger flight has seen continuous improvement in aviation safety by the aerospace industry. However, while commercial aviation accident rates have continued to decline, human error-related incident and accident rates remain remarkably constant across all types of aviation (Shappell, et al., 2007). Unfortunately, this level of human error is unacceptable when considering projections for increased traffic volume (FAA, 2009), and is likely to yield more incidents and accidents unless a more complete understanding of operator error is achieved and remediations are implemented. One area of interest highlighted by researchers is Hazardous States of Awareness (HSAs) that can result from deficiencies in the design and inappropriate use of human-machine interfaces. Identifying and mitigating HSAs is critical for reducing operator errors. One promising approach uses psychophysiological measures which enable automated systems to adapt to the operator?s state and modify modes of operation to support optimal human performance (Scerbo, 2007). This paper will survey previous research and describe future directions for the application of psychophysiological measures of operators derived from cortical and autonomic assessment to perform real-time adaptive modulation of human-automation task mode mixes. The authors will present a summary of previous work done at NASA LaRC and Old Dominion University using a Psychophysiologically Adaptive System (PAS) in which the level of automation of the NASA Multi-Attribute Task Battery was modulated based on Engagement Indices derived from the users? electroencephalogram (Pope, Bogart, & Bartolome, 1995; for review see, Scerbo, Freeman, & Mikulka, 2003). Future theoretical and methodological directions for this type of closed-loop research will be discussed. Specifically, the capacity for this type of PAS to maintain effective operator state and to enable validation of candidate physiological indices will be described. Consideration will also be given to critical system characteristics (e.g., engagement indices, methods for invoking changes among system states, individual differences among users, etc.) that have been or still need to be studied. The potential of the PAS approach for interactive system design and prototyping will also be described. Examples of adaptive automation flight deck concepts in recent experiments will be highlighted and discussed.

Chad L Stephens