Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

Addressing Unison and Uniqueness of Reliability and Safety for Better Integration

For a long time, both in theory and in practice, safety and reliability have not been clearly differentiated, which leads to confusion, inefficiency, and sometime counter-productive practices in executing each of these two disciplines. It is imperative to address the uniqueness and the unison of these two disciplines to help both disciplines become more effective and to promote a better integration of the two for enhancing safety and reliability in our products as an overall objective. There are two purposes of this paper. First, it will investigate the uniqueness and unison of each discipline and discuss the interrelationship between the two for awareness and clarification. Second, after clearly understanding the unique roles and interrelationship between the two in a product design and development life cycle, we offer suggestions to enhance the disciplines with distinguished and focused roles, to better integrate the two, and to improve unique sets of skills and tools of reliability and safety processes. From the uniqueness aspect, the paper identifies and discusses the respective uniqueness of reliability and safety from their roles, accountability, nature of requirements, technical scopes, detailed technical approaches, and analysis boundaries. It is misleading to equate unreliable to unsafe, since a safety hazard may or may not be related to the component, sub-system, or system functions, which are primarily what reliability addresses. Similarly, failing-to-function may or may not lead to hazard events. Examples will be given in the paper from aerospace, defense, and consumer products to illustrate the uniqueness and differences between reliability and safety. From the unison aspect, the paper discusses what the commonalities between reliability and safety are, and how these two disciplines are linked, integrated, and supplemented with each other to accomplish the customer requirements and product goals. In addition to understanding the uniqueness in reliability and safety, a better understanding of unison and commonalities will further help in understanding the interaction between reliability and safety. This paper discusses the unison and uniqueness of reliability and safety. It presents some suggestions for better integration of the two disciplines in terms of technical approaches, tools, techniques, and skills to enhance the role of reliability and safety in supporting a product design and development life cycle. The paper also discusses eliminating the redundant effort and minimizing the overlap of reliability and safety analyses for an efficient implementation of the two disciplines.

Huang, Zhaofeng↗

Evaluating the Performance of the NASA LaRC CMF Motion Base Safety Devices

This paper describes the initial measured performance results of the previously documented NASA Langley Research Center (LaRC) Cockpit Motion Facility (CMF) motion base hardware safety devices. These safety systems are required to prevent excessive accelerations that could injure personnel and damage simulator cockpits or the motion base structure. Excessive accelerations may be caused by erroneous commands or hardware failures driving an actuator to the end of its travel at high velocity, stepping a servo valve, or instantly reversing servo direction. Such commands may result from single order failures of electrical or hydraulic components within the control system itself, or from aggressive or improper cueing commands from the host simulation computer. The safety systems must mitigate these high acceleration events while minimizing the negative performance impacts. The system accomplishes this by controlling the rate of change of valve signals to limit excessive commanded accelerations. It also aids hydraulic cushion performance by limiting valve command authority as the actuator approaches its end of travel. The design takes advantage of inherent motion base hydraulic characteristics to implement all safety features using hardware only solutions.

Gupton, Lawrence E.↗

Radiochemical transport analysis of gamma spectroscopic data to support estimation of molten salt reactor off-gas inventories

This work introduces a novel application of radiochronometry to estimate nuclide inventories in molten salt reactor off-gas systems based on gamma spectroscopic data from the Molten Salt Reactor Experiment. By analyzing isotopic, isobaric, and isomeric activity ratios, key depletion model parameters related to species transport within the reactor system could be inferred. The findings demonstrate the potential of leveraging a limited subset of gamma spectroscopy measurements to accurately estimate nuclide inventories throughout the off-gas system. The approach can be useful in reactor design activities and support analyses relevant to operations, safety, security, and safeguards.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Assessment and Control of Spacecraft Charging Risks on the International Space Station

The International Space Station (ISS) operates in the F2 region of Earth's ionosphere, orbiting at altitudes ranging from 350 to 450 km at an inclination of 51.6 degrees. The relatively dense, cool F2 ionospheric plasma suppresses surface charging processes much of the time, and the flux of relativistic electrons is low enough to preclude deep dielectric charging processes. The most important spacecraft charging processes in the ISS orbital environment are: 1) ISS electrical power system interactions with the F2 plasma, 2) magnetic induction processes resulting from flight through the geomagnetic field and, 3) charging processes that result from interaction with auroral electrons at high latitude. Recently, the continuing review and evaluation of putative ISS charging hazards required by the ISS Program Office revealed that ISS charging could produce an electrical shock hazard to the ISS crew during extravehicular activity (EVA). ISS charging risks are being evaluated in an ongoing measurement and analysis campaign. The results of ISS charging measurements are combined with a recently developed model of ISS charging (the Plasma Interaction Model) and an exhaustive analysis of historical ionospheric variability data (ISS Ionospheric Specification) to evaluate ISS charging risks using Probabilistic Risk Assessment (PRA) methods. The PRA combines estimates of the frequency of occurrence and severity of the charging hazards with estimates of the reliability of various hazard controls systems, as required by NASA s safety and risk management programs, to enable design and selection of a hazard control approach that minimizes overall programmatic and personnel risk. The PRA provides a quantitative methodology for incorporating the results of the ISS charging measurement and analysis campaigns into the necessary hazard reports, EVA procedures, and ISS flight rules required for operating ISS in a safe and productive manner.

Koontz, Steve↗

Probabilistic Risk-Based Approach to Aeropropulsion System Assessment Developed

In an era of shrinking development budgets and resources, where there is also an emphasis on reducing the product development cycle, the role of system assessment, performed in the early stages of an engine development program, becomes very critical to the successful development of new aeropropulsion systems. A reliable system assessment not only helps to identify the best propulsion system concept among several candidates, it can also identify which technologies are worth pursuing. This is particularly important for advanced aeropropulsion technology development programs, which require an enormous amount of resources. In the current practice of deterministic, or point-design, approaches, the uncertainties of design variables are either unaccounted for or accounted for by safety factors. This could often result in an assessment with unknown and unquantifiable reliability. Consequently, it would fail to provide additional insight into the risks associated with the new technologies, which are often needed by decisionmakers to determine the feasibility and return-on-investment of a new aircraft engine.

Tong, Michael T.↗

Safety Verification of the Small Aircraft Transportation System Concept of Operations

A critical factor in the adoption of any new aeronautical technology or concept of operation is safety. Traditionally, safety is accomplished through a rigorous process that involves human factors, low and high fidelity simulations, and flight experiments. As this process is usually performed on final products or functional prototypes, concept modifications resulting from this process are very expensive to implement. This paper describe an approach to system safety that can take place at early stages of a concept design. It is based on a set of mathematical techniques and tools known as formal methods. In contrast to testing and simulation, formal methods provide the capability of exhaustive state exploration analysis. We present the safety analysis and verification performed for the Small Aircraft Transportation System (SATS) Concept of Operations (ConOps). The concept of operations is modeled using discrete and hybrid mathematical models. These models are then analyzed using formal methods. The objective of the analysis is to show, in a mathematical framework, that the concept of operation complies with a set of safety requirements. It is also shown that the ConOps has some desirable characteristic such as liveness and absence of dead-lock. The analysis and verification is performed in the Prototype Verification System (PVS), which is a computer based specification language and a theorem proving assistant.

Carreno, Victor↗

Achieving the Proper Balance Between Crew and Public Safety

A paramount objective of all human-rated launch and reentry vehicle developers is to ensure that the risks to both the crew onboard and the public are minimized within reasonable cost, schedule, and technical constraints. Past experience has shown that proper attention to range safety requirements necessary to ensure public safety must be given early in the design phase to avoid additional operational complexities or threats to the safety of people onboard, and the design engineers must give these requirements the same consideration as crew safety requirements. For human spaceflight, the primary purpose and operational concept for any flight safety system is to protect the public while maximizing the likelihood of crew survival. This paper will outline the policy considerations, technical issues, and operational impacts regarding launch and reentry vehicle failure scenarios where crew and public safety are intertwined and thus addressed optimally in an integrated manner. An overview of existing range and crew safety policy requirements will be presented. Application of these requirements and lessons learned from both the Space Shuttle and Constellation Programs will also be discussed. Using these past programs as examples, the paper will detail operational, design, and analysis approaches to mitigate and balance the risks to people onboard and in the public. Manned vehicle perspectives from the Federal Aviation Administration (FAA) and Air Force organizations that oversee public safety will be summarized as well. Finally, the paper will emphasize the need to factor policy, operational, and analysis considerations into the early design trades of new vehicles to help ensure that both crew and public safety are maximized to the greatest extent possible.

Gowan, John↗

Assessment of Sodium Thermal Stratification Models Utilizing the TSTF Benchmark

As a result of certain transient scenarios, a thermally stratified layer of liquid sodium can develop in the bulk coolant volumes of a sodium-cooled fast reactor (SFR). In addition to the effects a stratification layer has on the temperature of the heat transport system, a stratification layer can also influence the transition to and establishment of natural circulation flow, which plays an important role in passive cooling and the inherent safety of a pool-type SFR. Therefore, the ability to accurately capture thermal stratification phenomena is important when demonstrating the safety basis of a pool-type SFR during transient sequences. The present work assesses various computational models with different fidelities in their ability to predict thermal stratification in the upper plenum of an SFR. Each computational model will be assessed using the data generated at the Thermal Stratification Test Facility (TSTF) located at the University of Wisconsin-Madison. Using measured flow rate and inlet temperature data, the measured temperature distributions of the tests are compared to the predictions of the lumped volume-based models in SAS4A/SASSYS-1, a 1D-based model in SAM, and a 3-D computational fluid dynamics (CFD) model using STAR-CCM+. The relative performance of the various computational methods is assessed with respect to key metrics such as bulk coolant temperature distribution and plenum exit temperature. A total of eight tests are analyzed, covering different combinations of flow rates (3 and 10 GPM) and upper internal structure (UIS) configurations (none, solid, porous, and open) The perfect mixing model of SAS4A/SASSYS-1 provides the highest accuracy when the flow rate is high and there is no UIS in the test vessel, as high flow rate injection promotes thermal mixing of the sodium in the test vessel. For most of the analyzed tests, the stratified volume model of SAS4A/SASSYS-1 is able to predict the delay in the outlet temperature drop and temperature distribution in the test vessel by a small number of layers to represent thermal stratification. However, the stratified volume model can only simulate a maximum of three temperature layers within a volume and when a layer approaches the elevation of the outlet, the predicted outlet temperature can demonstrate rapid, non-physical changes. The 1-D axial mixing model of SAM provides results that agree reasonably well with the measured data in the prediction of the temporal evolution of the outlet temperature with the exception of the case with a high flow rate and no UIS. The SAM 1-D model has a similar level of accuracy to CFD results when it comes to predicting the outlet temperature. CFD shows overall good agreement in predicting the temperature distribution in the test vessel and outlet temperature. As CFD can model the test vessel geometry in detail, it performs well in the cases of complex geometries such as tests that included a UIS and internal flow through the UIS resulting in active mixing of the coolant in the test vessel. Each of the models discussed in the present work has the potential to be useful during the various stages of reactor design, analysis, and licensing. The lumped-volume approach can be applied for fast turnaround safety calculations to obtain overall reactor behavior during transients. The 1-D models provide improved accuracy when stratification is expected for a relatively low increase in the computational cost. The CFD model can be utilized for confirmatory analysis of the 1-D model, when experimental measurements are not available.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Systems Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

human-system integration↗

A Comparison of As-loaded Dose Calculations to Measured Dose Rates

Demonstrating that the radiation dose fields surrounding spent nuclear fuel (SNF) storage and transportation systems meet the applicable limits set forth in 10 CFR 72 for storage and 10 CFR 71 for transportation is essential for the safe handling of radioactive material. The Used Nuclear Fuel-Storage, Transportation, and Disposal Analysis Resource and Data System (UNF-ST&DARDS) [2] is used to provide realistic estimates of SNF-related safety margins. The UNF-ST&DARDS dose rate analysis approach differs from that used in typical licensing approaches, which use design-basis assemblies with bounding source term characteristics to demonstrate the packaging design complies with the regulations. These bounding licensing approaches can increase the time needed to qualify fuel for loading into dry storage and the time a loaded system must wait prior to transportation. UNF-ST&DARDS dose rate assessments allow quantification of realistic, uncredited safety margins associated with actual fuel loading compared with the regulatory limits. While realistic estimation of the dose field surrounding SNF systems may allow for additional flexibility in operations, it is essential to understand how these predictions compare to measured doses. The U.S. Department of Energy Office of Integrated Waste Management and the Prairie Island Indian Community conducted a transportation dose assessment to estimate the site-specific incident-free radiation doses from shipping SNF by rail from the Prairie Island Nuclear Generating Plant (PINGP) through the Prairie Island Indian Community Reservation and Trust Land [5,6]. For that effort, the dose rates were obtained for 50 TN-40 and TN-40HT systems in storage configurations. This work compares the predicted dose rates from UNF-ST&DARDS as-loaded calculations with dose rates measured from 50 SNF storage systems at PINGP. The remainder of this paper discusses the data obtained for the evaluation, the modeling methods, and the results of the calculations.

spent nuclear fuel (SNF), UNF-ST&DARDS, Validation↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

human-system integration↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

trajectory based operations↗

Risk-Informed Analysis for Enhanced Resilient Nuclear Power Plant with Initiatives including ATF, FLEX, and Advanced Battery Technology

This report documents the activities performed by the Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk-Informed Systems Analysis (RISA) Pathway, Enhanced Resilient Plant (ERP) Systems research. The purpose of the RISA Pathway research and development is to support plant owner-operator decisions with the aim to improve the economics, reliability, and maintain the high levels of safety of current nuclear power plants over periods of extended plant operations. The concept of ERP refers to the combinations of accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, the incorporation of augmented or new passive cooling systems, the advanced battery technology with extended capacity, as well as improved fuel cycle efficiency. The objective of the ERP research effort is to use the RISA methods and toolkit in industry applications, including methods development and early demonstration of technologies, in order to enhance existing reactors? safety features and to substantially reduce operating costs through risk-informed approaches to plant design modifications to the plant and their characterization. The ERP R&D efforts in FY 2021 are focused on three industry initiatives, including accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), and advanced battery technology with extended capacity.

99 GENERAL AND MISCELLANEOUS↗

Design and selection of bypass diodes

Topics concerning the design and use of bypass diodes are investigated. Energy output, service life, safety, cell mounting approach, thermal capability, and cost analysis are also considered.

Shepard, N. F., Jr.↗

Advanced EMU electrochemically regenerable CO2 and moisture absorber module breadboard

The applicability of the Electrochemically Regenerable Carbon Dioxide and Moisture Absorption Technology to the advanced extravehicular mobility unit was demonstrated by designing, fabricating, and testing a breadboard Absorber Module and an Electrochemical Regenerator. Test results indicated that the absorber module meets or exceeds the carbon dioxide removal requirements specified for the design and can meet the moisture removal requirement when proper cooling is provided. CO2 concentration in the vent gas stream was reduced from 0.52 to 0.027 kPa (3.9 to 0.20 mm Hg) for the full five hour test period. Vent gas dew point was reduced from inlet values of 294 K (69 F) to 278 K (41 F) at the outlet. The regeneration of expended absorbent was achieved by the electrochemical method employed in the testing. An absorbent bed using microporous hydrophobic membrane sheets with circulating absorbent is shown to be the best approach to the design of an Absorber Module based on sizing and performance. Absorber Module safety design, comparison of various absorbents and their characteristics, moisture absorption and cooling study and subsystem design and operation time-lining study were also performed.

Lee, M. C.↗

Five-Segment Reusable Solid Rocket Booster Upgrade

The Five Segment Reusable Solid Rocket Booster (RSRB) feasibility status is presented in viewgraph form. The Five Segment Booster (FSB) objective is to provide a low cost, low risk approach to increase reliability and safety of the Shuttle system. Topics include: booster upgrade requirements; design summary; reliability issues; booster trajectories; launch site assessment; and enhanced abort modes.

Sauvageau, Don↗

Composites for Advanced Drive Systems, A Systems Analysis-Revolutionary Vertical Lift Technology (RVLT)

Rotorcraft propulsion systems are continually looking to improve power density; that is reducing weight and increasing power throughput. In order to advance rotorcraft propulsion system technology, NASA Glenn Research Center (NGRC) contracted Boeing Vertical Lift (Contract #NNA15AB12B, Task Order NNA16BE07T) to perform system level benefit assessments for incorporation of composite materials into rotorcraft transmission gear and shaft systems, in the rotating frame. In general, the environment inside a typical rotorcraft transmission is aggressive for typical composite materials. Design challenges in the rotating frame and related safety risks must be understood and accounted for in the design. Boeing developed a technical approach that evaluated a relatively large population of rotorcraft main transmissions. This technical approach took rotorcraft from various size classes and configurations and applied parametric weight estimating principles to assess the performance impact of composite hybrid technologies inside transmissions, in the rotating frame. Parametric weight estimates showed that composite hybrid technologies account for an average 9% weight savings over the baseline transmissions. More weight savings may be observed when accounting for quantity of transmissions in an aircraft configuration and benefits to airframe, landing gear, and fuel systems. A weight reduction of 595 lbs was calculated for NASA's Large Civil Tilt Rotor (LCTR2) by utilizing composite hybrid components inside the Prop-Rotor Transmission in the rotating frame and accounting for design changes to the airframe, landing gear, and fuel system. In order to develop composite hybrid technologies, sub-scale and full-scale testing should continue, building on the work that NGRC has begun. Design and testing efforts should focus on technical challenges, such as joint and attachment interfaces, temperature effects, inspection procedures, and fault detection. It is recommended to address technical challenges with targeted research and development efforts, conducted at relevant scale, prior to incorporating composite hybrid technologies within the rotating frame of helicopter transmissions.

Darmstadt, Patrick R.↗

Developing Controlled Conductive Boundaries for JWST Cryogenic Testing

In 2017, the James Webb Space Telescope (JWST) underwent functional testing and optical metrology verification of the combined Optical Telescope Element and Integrated Science Instrument Module (OTIS) under cryogenic vacuum conditions in Chamber A at the Johnson Space Center. Maintaining flight-like thermal boundary conditions was a critical requirement for optical testing and required unique and challenging Ground Support Equipment (GSE) design solutions. Two such GSE systems, the Integrated Science Instrument Module (ISIM) Precool Straps and the Hardpoint Struts were direct conduction interfaces to the flight hardware. Hardware safety during cooldown required detailed design of their conductivity, and thermal balance testing required "zero-Q" (0-Q) heater implementation to bring the heat flow to zero, thereby cutting off these non-flight conductive links after operating temperatures were achieved. This paper describes the design considerations and approach implemented to achieve the required flight hardware cool down and return to ambient conditions, ensure flight hardware safety, and minimize the non-flight-like heat flows to or from the observatory during cryo-stable testing.

Cooke, D.↗