Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Composites for Advanced Drive Systems, A Systems Analysis-Revolutionary Vertical Lift Technology (RVLT)

Rotorcraft propulsion systems are continually looking to improve power density; that is reducing weight and increasing power throughput. In order to advance rotorcraft propulsion system technology, NASA Glenn Research Center (NGRC) contracted Boeing Vertical Lift (Contract #NNA15AB12B, Task Order NNA16BE07T) to perform system level benefit assessments for incorporation of composite materials into rotorcraft transmission gear and shaft systems, in the rotating frame. In general, the environment inside a typical rotorcraft transmission is aggressive for typical composite materials. Design challenges in the rotating frame and related safety risks must be understood and accounted for in the design. Boeing developed a technical approach that evaluated a relatively large population of rotorcraft main transmissions. This technical approach took rotorcraft from various size classes and configurations and applied parametric weight estimating principles to assess the performance impact of composite hybrid technologies inside transmissions, in the rotating frame. Parametric weight estimates showed that composite hybrid technologies account for an average 9% weight savings over the baseline transmissions. More weight savings may be observed when accounting for quantity of transmissions in an aircraft configuration and benefits to airframe, landing gear, and fuel systems. A weight reduction of 595 lbs was calculated for NASA's Large Civil Tilt Rotor (LCTR2) by utilizing composite hybrid components inside the Prop-Rotor Transmission in the rotating frame and accounting for design changes to the airframe, landing gear, and fuel system. In order to develop composite hybrid technologies, sub-scale and full-scale testing should continue, building on the work that NGRC has begun. Design and testing efforts should focus on technical challenges, such as joint and attachment interfaces, temperature effects, inspection procedures, and fault detection. It is recommended to address technical challenges with targeted research and development efforts, conducted at relevant scale, prior to incorporating composite hybrid technologies within the rotating frame of helicopter transmissions.

Darmstadt, Patrick R.↗

Developing Controlled Conductive Boundaries for JWST Cryogenic Testing

In 2017, the James Webb Space Telescope (JWST) underwent functional testing and optical metrology verification of the combined Optical Telescope Element and Integrated Science Instrument Module (OTIS) under cryogenic vacuum conditions in Chamber A at the Johnson Space Center. Maintaining flight-like thermal boundary conditions was a critical requirement for optical testing and required unique and challenging Ground Support Equipment (GSE) design solutions. Two such GSE systems, the Integrated Science Instrument Module (ISIM) Precool Straps and the Hardpoint Struts were direct conduction interfaces to the flight hardware. Hardware safety during cooldown required detailed design of their conductivity, and thermal balance testing required "zero-Q" (0-Q) heater implementation to bring the heat flow to zero, thereby cutting off these non-flight conductive links after operating temperatures were achieved. This paper describes the design considerations and approach implemented to achieve the required flight hardware cool down and return to ambient conditions, ensure flight hardware safety, and minimize the non-flight-like heat flows to or from the observatory during cryo-stable testing.

Cooke, D.↗

Developing Controlled Conductive Boundaries for JWST Cryogenic Testing

In 2017, the James Webb Space Telescope (JWST) underwent functional testing and optical metrology verification of the combined Optical Telescope Element and Integrated Science Instrument Module (OTIS) under cryogenic vacuum conditions in Chamber A at the Johnson Space Center. Maintaining flight-like thermal boundary conditions was a critical requirement for optical testing and required unique and challenging Ground Support Equipment (GSE) design solutions. Two such GSE systems, the Integrated Science Instrument Module (ISIM) Precool Straps and the Hardpoint Struts were direct conduction interfaces to the flight hardware. Hardware safety during cooldown required detailed design of their conductivity, and thermal balance testing required zero-Q (0-Q) heater implementation to bring the heat flow to zero, thereby cutting off these non-flight conductive links after operating temperatures were achieved. This paper describes the design considerations and approach implemented to achieve the required flight hardware cool down and return to ambient conditions, ensure flight hardware safety, and minimize the non-flight-like heat flows to or from the observatory during cryo-stable testing.

Cooke, Dwight A.↗

Risk-Informed ATF and FLEX Analysis for an Enhanced Resilient BWR Under Design-Basis and Beyond-Design-Basis Accidents

This report documents the activities performed by the Idaho National Laboratory (INL) during fiscal year (FY) 2020 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk-Informed System Analysis (RISA) Pathway, Enhanced Resilient Plant (ERP) Systems research. The purpose of the RISA Pathway research and development is to support plant owner-operator decisions with the aim to improve the economics, reliability, and maintain the high levels of safety of current nuclear power plants over periods of extended plant operations. The concept of ERP refers to the combinations of accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, and the incorporation of augmented or new passive cooling systems, as well as improved fuel cycle efficiency. The objective of the ERP research effort is to use the RISA methods and toolkit in industry applications, including methods development and early demonstration of technologies, in order to enhance existing reactors’ safety features (both active and passive) and to substantially reduce operating costs through risk-informed approaches to plant design modifications to the plant and their characterization. One main focus of the FY 2020 efforts documented in this report was to extend the analyses conducted in FYs 2018 and 2019 for a pressurized water reactor (PWR) to a boiling water reactor (BWR). The same analysis process, risk analysis approaches, and analysis tools as in the previous work for PWR were used for a generic BWR with near-term ATF cladding (i.e., Iron-Chromium-Aluminum [FeCrAl] cladding and Chromium [Cr]-coated cladding) designs under the postulated station blackout (SBO) and medium loss-of-coolant (MLOCA) accident scenarios. In addition, a FLEX model was developed and incorporated into a generic BWR probabilistic risk assessment (PRA) model using the INL-developed software tool, Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE), to assess the risk impact from FLEX. The other main focus of the FY 2020 efforts was to advance analysis methods, including developing dynamic approach for FLEX human reliability analysis (HRA) using the INL-developed software tool, Event Modeling Risk Assessment using Linked Diagrams (EMRALD), as well as developing a multicriterion benefit evaluation (MCBE) method for evaluating costs and benefits of safety enhancements in nuclear power plants (NPPs). As a case study, the MCBE method was applied to evaluate the costs and benefits brought by FLEX implementation.

99 GENERAL AND MISCELLANEOUS↗

Practical Application of PRA as an Integrated Design Tool for Space Systems

This paper presents the application of the first comprehensive Probabilistic Risk Assessment (PRA) during the design phase of a joint NASA/NOAA weather satellite program, Geostationary Operational Environmental Satellite Series R (GOES-R). GOES-R is the next generation weather satellite primarily to help understand the weather and help save human lives. PRA has been used at NASA for Human Space Flight for many years. PRA was initially adopted and implemented in the operational phase of manned space flight programs and more recently for the next generation human space systems. Since its first use at NASA, PRA has become recognized throughout the Agency as a method of assessing complex mission risks as part of an overall approach to assuring safety and mission success throughout project lifecycles. PRA is now included as a requirement during the design phase of both NASA next generation manned space vehicles as well as for high priority robotic missions. The influence of PRA on GOES-R design and operation concepts are discussed in detail. The GOES-R PRA is unique at NASA for its early implementation. It also represents a pioneering effort to integrate risks from both Spacecraft (SC) and Ground Segment (GS) to fully assess the probability of achieving mission objectives. PRA analysts were actively involved in system engineering and design engineering to ensure that a comprehensive set of technical risks were correctly identified and properly understood from a design and operations perspective. The analysis included an assessment of SC hardware and software, SC fault management system, GS hardware and software, common cause failures, human error, natural hazards, solar weather and infrastructure (such as network and telecommunications failures, fire). PRA findings directly resulted in design changes to reduce SC risk from micro-meteoroids. PRA results also led to design changes in several SC subsystems, e.g. propulsion, guidance, navigation and control (GNC), communications, mechanisms, and command and data handling (C&DH). The fault tree approach assisted in the development of the fault management system design. Human error analysis, which examined human response to failure, indicated areas where automation could reduce the overall probability of gaps in operation by half. In addition, the PRA brought to light many potential root causes of system disruptions, including earthquakes, inclement weather, solar storms, blackouts and other extreme conditions not considered in the typical reliability and availability analyses. Ultimately the PRA served to identify potential failures that, when mitigated, resulted in a more robust design, as well as to influence the program's concept of operations. The early and active integration of PRA with system and design engineering provided a well-managed approach for risk assessment that increased reliability and availability, optimized lifecyc1e costs, and unified the SC and GS developments.

Kalia, Prince↗

Safety Functions and Features, Events and Processes for the E-Area Performance Assessment

The DOE Technical Standard, “Disposal Authorization Statement and Tank Closure Documentation,” (DOE 2017) recommends the use of safety functions and features, events and processes (FEPs) to support development of conceptual models and identification of scenarios to be considered in a performance assessment (PA). The FEP process provides a means to describe how a PA considers and addresses the factors that could influence the performance of key barriers. Understanding the roles of barriers in terms of limiting migration helps to focus on how changes in the system could lead to a situation where those roles cannot be fulfilled and there is the potential for compromised performance. The FEPs screening and review process was used to identify FEPs that are relevant for the EArea Low-Level Waste Facility (LLWF) and specifically those FEPs that could have a detrimental impact on the effectiveness of a given safety function. For this PA, a default list of FEPs developed at the International Atomic Energy Agency (IAEA 2004) and an approach implemented for PAs at the Hanford and Idaho sites (Mehta et al. 2016, DOE-ID 2019) are used to identify processes and events that could influence the effectiveness of a given safety function for the E-Area LLWF (e.g., subsidence can impact the safety function of the cover system and lead to increased infiltration). The Hanford and Idaho PAs represent two of the most recent applications of this approach. The PA evaluates the potential impacts of changes in performance of different features of the system and demonstrates that the safety functions represent multiple and redundant barriers. Barrier analyses, assuming a safety function is not present, also test the robustness of the system in the event of the loss of one or more safety functions. Such evaluations also support a qualitative illustration of the concept of defense in depth. The safety concept for closure of the E-Area LLWF (generically referred to as “E-Area”) encompasses a variety of different features (i.e., administrative controls, natural site features, and engineered barriers) that reduce the potential impacts on human health and the environment from the residual waste that will remain after closure. These features can be represented as a collection of safety functions acting independently and as a system to provide for overall safety. In some applications, there have been attempts to assign numerical expectations to specific safety functions, but that is not the intent in this case. The concept of safety functions is used more qualitatively in two ways for this PA: 1. To illustrate the robustness of the E-Area design, operational practices and closure approach by documenting features that are and are not credited in different modeling cases. 2. To identify the roles of the different features and potential processes and events that could compromise the performance of safety features and need to be considered when developing the modeling approach. This report addresses both safety functions and FEPs for the E-Area PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Methodology and Tool for the Physical Security Analysis of Micro and Advanced Reactors

This work proposes a dynamic evaluation methodology to relax the conservatism in physical security evaluation, by leveraging an ongoing work in the Light Water Reactor Sustainability pathway. This methodology is implemented in a dynamic risk assessment tool named Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The work extends EMRALD’s capability to support a sandbox feature where analysts can easily create attack scenarios and modify advanced/small modular reactor (A/SMR) security and safety features using templates. This approach saves time and cost since the analysis does not require creating detailed computer-aided design models, as is commonly required in commercial force-on-force software tools. EMRALD is completely free to use at https://emraldapp.inl.gov. We have developed basic templates including physical barriers, intrusion sensors, physical areas, and safety actions, that can be downloaded from EMRALD’s GitHub site: https://github.com/idaholab/EMRALD. These templates use generic data commonly used for training purposes, which do not reflect any actual operating nuclear reactor. Users may adjust the data in the templates with their own dataset and/or create new templates in EMRALD. The proposed methodology combines security and safety by assessing sabotage effects up to the radiological consequence to the public instead of merely the core damage state. This practice follows the industry standard for advanced non-light-water reactors currently proposed for endorsement by the Nuclear Regulatory Commission. The combination of security and safety is expressed in an achievability-consequence chart. EMRALD can be used to generate data for this chart. A hypothetical case study using a representative sodium-cooled fast reactor (SFR) facility is presented in this report to demonstrate this methodology. This case study does not contain any actual nuclear plant information. This work will benefit A/SMR vendors and utilities to implement security by design during the reactor design iteration phase, such that they do not have to perform upgrades and retrofits to the reactor after it is installed to improve its physical protection system. The tool may also be used to analyze domestic or foreign reactor designs to support the International Nuclear Security Techniques for Advanced Reactors (INSTAR) bilateral missions. Future works are planned to implement the methodology on a reference SFR reactor and a reference high-temperature gas-cooled reactor to obtain insights and lessons-learned for the A/SMR community.

97 MATHEMATICS AND COMPUTING↗

Reliability and Maintainability Engineering - A Major Driver for Safety and Affordability

The United States National Aeronautics and Space Administration (NASA) is in the midst of an effort to design and build a safe and affordable heavy lift vehicle to go to the moon and beyond. To achieve that, NASA is seeking more innovative and efficient approaches to reduce cost while maintaining an acceptable level of safety and mission success. One area that has the potential to contribute significantly to achieving NASA safety and affordability goals is Reliability and Maintainability (R&M) engineering. Inadequate reliability or failure of critical safety items may directly jeopardize the safety of the user(s) and result in a loss of life. Inadequate reliability of equipment may directly jeopardize mission success. Systems designed to be more reliable (fewer failures) and maintainable (fewer resources needed) can lower the total life cycle cost. The Department of Defense (DOD) and industry experience has shown that optimized and adequate levels of R&M are critical for achieving a high level of safety and mission success, and low sustainment cost. Also, lessons learned from the Space Shuttle program clearly demonstrated the importance of R&M engineering in designing and operating safe and affordable launch systems. The Challenger and Columbia accidents are examples of the severe impact of design unreliability and process induced failures on system safety and mission success. These accidents demonstrated the criticality of reliability engineering in understanding component failure mechanisms and integrated system failures across the system elements interfaces. Experience from the shuttle program also shows that insufficient Reliability, Maintainability, and Supportability (RMS) engineering analyses upfront in the design phase can significantly increase the sustainment cost and, thereby, the total life cycle cost. Emphasis on RMS during the design phase is critical for identifying the design features and characteristics needed for time efficient processing, improved operational availability, and optimized maintenance and logistic support infrastructure. This paper discusses the role of R&M in a program acquisition phase and the potential impact of R&M on safety, mission success, operational availability, and affordability. This includes discussion of the R&M elements that need to be addressed and the R&M analyses that need to be performed in order to support a safe and affordable system design. The paper also provides some lessons learned from the Space Shuttle program on the impact of R&M on safety and affordability.

Safie, Fayssal M.↗

Airframe Design and Integration

The objectives of the project this viewgraph presentation summarizes include the following: (1) Decompose operational, safety, and cost requirements into a comprehensive and consistent set of design criteria for different structural and material concepts for Reusable Launch Vehicles (RLVs); (2) Develop compliance methods to ensure that different structural and material concepts are assessed at a consistent and adequate level of fidelity and safety; (3) Develop and assess weight reduction potential of integrated airframe concepts for RLVs, e.g., Thermal Protection System (TPS)/TPS Support/Cryogenic Tank System; (4) Compare performance and weight of various airframe structural and material concepts and structural arrangements and identify technology development needs; and (5) Develop high fidelity parametric models that include airframe structural interactions and major design drivers. The approaches taken to complete these objectives include the definition of vehicle requirements, airframe structural design requirements, load conditions, factors of safety, and integrated concepts.

Scotti, Stephen↗

A review of wiring system safety in space power systems

Wiring system failures have resulted from arc propagation in the wiring harnesses of current aerospace vehicles. These failures occur when the insulation becomes conductive upon the initiation of an arc. In some cases, the conductive path of the carbon arc track displays a high enough resistance such that the current is limited, and therefore may be difficult to detect using conventional circuit protection. Often, such wiring failures are not simply the result of insulation failure, but are due to a combination of wiring system factors. Inadequate circuit protection, unforgiving system designs, and careless maintenance procedures can contribute to a wiring system failure. This paper approaches the problem with respect to the overall wiring system, in order to determine what steps can be taken to improve the reliability, maintainability, and safety of space power systems. Power system technologies, system designs, and maintenance procedures which have led to past wiring system failures will be discussed. New technologies, design processes, and management techniques which may lead to improved wiring system safety will be introduced.

Stavnes, Mark W.↗

Interchangeable Tools for Remote Manipulators

Report presents concepts and specifications for set of interchangeable end-effector tools used on remotely operated manipulator to work on satellites in orbit. Tools make urgent repairs, do routine maintenance, transfer fluids, construct and assemble satellites, and deploy and retract appendages. With modifications, tool concepts and systematic approach to tool design applicable to such terrestrial uses as industrial robots, manually operated tools, and safety equipment. Report discusses concept for tool-storage system that holds tools securely when not used but kept accessible to manipulator.

Cody, J. C.↗

Urban Aerial Mobility Networks using Amphibious Vertical Takeoff and Landing Vehicles

This study considers novel urban aerial mobility (UAM) networks that address some of the key operator and community acceptance challenges inherent in proposed UAM operations. This paper seeks to examine three possible approaches to improve operator and community acceptance – specifically targeting cost, safety, and noise. First, the conceptual design space will be examined for VTOL amphibious vehicle technologies, including the implications of onwater versus in-flight time/speed. Second, the implications of minimizing community overflights by flying over-water will be examined. Third, the implications of the partial use of onwater, or near-shore/littoral, vertiports on UAM network performance will be examined. This study considers an alternate design trade space for urban aerial mobility systems. A large number of cities in the United States are located near or surround large bodies of water. Many of these same cities are considered to be candidates for metropolitan aerial transportation systems so as to moderate the impact of urban ground-transportation congestion. This paper will expand discussion and study of notional amphibious VTOL vehicles. There is nothing particularly new with regards to helicopters with amphibious takeoff and landing capability. For example, light rotorcraft have been outfitted with pontoons since the 1950s. Larger utility helicopters – used for carrying offshore oil-rig crew – have been designed, with varying degrees of success, to emergency land in rough waters in case of onboard mechanical system failures. The unique difference for the proposed amphibious UAM vehicles, as compared to these earlier amphibious rotorcraft, is that water operation is the norm rather than the exception and that, further, the water-born operation (and design) of such vehicles can be optimized to yield significant economic and operational benefits over solely UAM land-based stations and operations. Various different amphibious UAM networks will be discussed. A first-order set of analyses – employing novel mission metrics – is presented in this paper that will examine the operational performance of these amphibious networks. In particular, amphibious operations might address critical safety and community acceptance issues. An examination of the aerodynamic and hydrodynamic characteristics of amphibious VTOL UAM vehicles will be presented in this paper. One possible conceptual design for an amphibious UAM vehicle is a hybrid synchropter/hydroplane vehicle. As interest in urban aerial mobility grows, it is worthwhile to consider whether or not amphibious vertical takeoff and landing vehicles can play an important role in providing such mobility.

Urban Aerial Mobility↗

Unique safety features and licensing requirements of the NuScale small modular reactor

Small modular reactors (SMR) offer a novel approach to the construction and operation of nuclear power plants. The NuScale VOYGR™ plant uses a simplified SMR design that is based on proven light-water reactor technology with substantial improvements in nuclear safety. It consists of a 250 MWt reactor core housed with other primary system components in an integral reactor pressure vessel surrounded by a steel containment vessel, all of which is immersed in a large pool of water that also serves as the ultimate heat sink. At the core of the NuScale safety case are three primary safety systems: the decay heat removal system, the emergency core cooling system, and the containment. The ability of the NuScale Power Module (NPM) passive safety systems to remove core decay heat for an unlimited duration is demonstrated through analysis of a beyond-design-basis extended loss of AC power with no replenishment of water to the ultimate heat sink or operator actions. The NuScale methodology to evaluate an indefinite loss of AC power uses the proprietary NRELAP5 systems analysis computer code. Analysis results show that the reactor coolant system liquid level above the core is maintained and that containment pressure remains below the vessel design pressure. Once full passive air cooling is established, containment pressure and temperature will decrease over time with decreasing core decay heat. NuScale received standard design approval in September 2020 and design certification in January 2023 for its 50 MWe NPM configured as a 12 module plant. NuScale is currently seeking standard design approval to increase its core power to 250 MWt, nominally 77 MWe per module, in a 6-module plant (VOYGR™-6) configuration. The high-level safety of NuScale’s SMR technology is foundational to a new standard of nuclear power plant resilience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Biomimetic Optical Sensor for Real-Time Aircraft Wing Deflection Measurement

Reducing the environmental impact of aviation is a primary goal of NASA aeronautics research. One approach to achieve this goal is to build lighter weight aircraft, which presents complex challenges due to a corresponding increase in structural flexibility. Wing flexibility can adversely affect aircraft performance from the perspective of aerodynamic efficiency and safety. Knowledge of the wing position during flight can aid active control methods designed to mitigate problems due to increased wing flexibility. Current approaches to measuring wing deflection, including strain measurement devices, accelerometers, or GPS solutions, and new technologies such as fiber optic strain sensors, have limitations for their practical application to flexible aircraft control. Hence, it was proposed to use a bio-mimetic optical sensor based on the fly-eye to track wing deflection in real-time. The fly-eye sensor has several advantages over conventional sensors used for this application, including light weight, low power requirements, fast computation, and a small form factor. This paper reports on the fly-eye sensor development and its application to real-time wing deflection measurement.

Frost, Susan A.↗

Advancing Electric Propulsion Aircraft Evaluation for Urban Air Mobility: Insights from NASA-Ames

This presentation delves into a recent evaluation conducted at NASA-Ames on the Vertical Motion Simulator, focusing on the handling qualities of Distributed Electric Propulsion VTOL (eVTOL) aircraft, specifically tailored for Urban Air Mobility (UAM) applications. The presentation will focus on the recent effort to adapt and refine use of the Aeronautical Design Standard -33 (ADS-33) rotorcraft handling qualities developed by the U.S. Army and NASA to meet the diverse needs of civilian (eVTOL) concept evaluation. A brief discussion of the author’s personal test pilot insights in the early development of military Fly-By-Wire evaluation methods will also be provided. The emergence of innovative eVTOL designs with unique lift capabilities and flight control systems, present both opportunities and challenges, particularly in ensuring safety amidst technological complexity. To navigate these challenges, our investigation examined evaluation criteria designed to accommodate the varied configurations and advanced automation systems inherent in modern eVTOL aircraft. By establishing a standardized approach to evaluation, our research not only fosters innovation but also upholds safety standards in the dynamic landscape of urban air mobility. Through this endeavor, we help to facilitate the seamless integration of novel aircraft capabilities into new operations, contributing to a new era of safe and efficient aerial transportation.

Loran Allen Haworth↗

Advancing Electric Propulsion Aircraft Evaluation for Urban Air Mobility: Insights from NASA Ames

This presentation delves into a recent evaluation conducted at NASA-Ames on the Vertical Motion Simulator, focusing on the handling qualities of Distributed Electric Propulsion VTOL (eVTOL) aircraft, specifically tailored for Urban Air Mobility (UAM) applications. The presentation will focus on the recent effort to adapt and refine use of the Aeronautical Design Standard -33 (ADS-33) rotorcraft handling qualities developed by the U.S. Army and NASA to meet the diverse needs of civilian (eVTOL) concept evaluation. A brief discussion of the author’s personal test pilot insights in the early development of military Fly-By-Wire evaluation methods will also be provided. The emergence of innovative eVTOL designs with unique lift capabilities and flight control systems, present both opportunities and challenges, particularly in ensuring safety amidst technological complexity. To navigate these challenges, our investigation examined evaluation criteria designed to accommodate the varied configurations and advanced automation systems inherent in modern eVTOL aircraft. By establishing a standardized approach to evaluation, our research not only fosters innovation but also upholds safety standards in the dynamic landscape of urban air mobility. Through this endeavor, we help to facilitate the seamless integration of novel aircraft capabilities into new operations, contributing to a new era of safe and efficient aerial transportation.

eVTOL↗

Uncertainty Propagation from Experiment Measurements to Modeling Approaches: A Case for SMR Steam Entrainment Testing

To license new and advanced reactor designs, regulators must be convinced that their unique safety cases—relative to existing large scale reactors—have been adequately addressed by the designed reactor protection systems. In water cooled small modular reactors (SMRs), droplet entrainment in steam flow has significant implications on the progression of accident scenarios due to its compact design features, which requires representative test data applicable to SMR designs. Computer code, modeling and simulation (M&S) tools and models require adequate verification, assessment, and qualification. This includes M&S results validation against scaled empirical data within allowable uncertainty bands to gain regulatory approvals during the various stages of reactor system design, demonstration, and commercialization. However, measurement uncertainty within the empirical datasets and test data applicability ranges requires careful consideration of M&S inputs (i.e., boundary conditions, and initial conditions), and verification and validation efforts. This study focuses on uncertainty quantification in designing scaled test facilities for SMR applications with appropriate measurements and a standard data-reduction method to estimate thermal hydraulics characteristics parameters that incorporate physics phenomena of interest. In addition, this study supports the evaluation model development and assessment process using M&S that interfaces with advanced computing tools and digital twin capabilities. This will allow synchronization between experiment and modeling approaches for droplet entrainment testing and analysis, improving diagnostics, prognostics, and decision-making to accelerate regulatory approval.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Verification and Validation of Safety-Critical Aircraft Systems Operating under Off-Nominal, Contingency, and Emergency Conditions

Verification and validation (V&V) of safety-critical technologies developed for loss of control (LOC) prevention and recovery and other aviation safety concerns pose significant challenges. Aircraft LOC can result from a wide spectrum of hazards, often occurring in combination, which cannot be fully replicated during evaluation. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of hazardous and uncertain conditions, and the verification and validation of these technologies must provide some measure of assurance that the new vehicle safety technologies do no harm (i.e., that they themselves do not introduce new safety risks). V&V technologies must also enable the identification of system limitations and constraints, as well as enable the identification of safe and unsafe operating conditions (and their boundaries). Additionally, the V&V of complex, increasingly autonomous systems is a fundamental concern. Scalable, reproducible and cost-effective techniques for the assurance of safety critical systems during their design and operation is a key barrier to fielding new systems or updating current systems. Moreover, these techniques need to provide artifacts that enable a comprehensive evidence-based approach to certification. This briefing summarizes research performed under NASA’s Aviation Safety Program and follow-on research for the V&V of safety-critical aircraft system technologies developed for LOC prevention and recovery and increasingly autonomous systems, and for a broad assurance capability in both current and emerging aviation applications. Note that, in this briefing, the term “validation” refers to a confirmation that the system implementation (e.g., algorithms etc.) is performing the intended function(s), as well as an affirmation of effectiveness in these functions. “Verification” refers to a confirmation that the system implementation in the software and hardware meets its (hopefully validated) specifications (e.g., correctly executes algorithms as designed).

Validation↗