Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

CMIP7 data request: land and land ice priorities and opportunities

The Land and Land Ice Theme in the Coupled Model Intercomparison Project Phase 7 (CMIP7) represents the current understanding of physical processes in land surface ecosystems, hydrology, cryosphere, and their physical interactions with other Earth system components. Simulations from Earth system models (ESMs) could provide crucial information for assessing planetary safety, such as critical tipping elements, and be used to inform climate risks for improving climate impact assessments and policy decisions. This paper presents a collaborative effort to identify scientific opportunities in the Land and Land Ice Theme of the CMIP7 Data Request. The proposed opportunities build upon advances in ESMs, including new freshwater system and land ice processes being included in CMIP7, as well as the scientific community's demand for high-frequency and sub-grid-scale land surface outputs. In total, 25 variable groups that contain 716 variables have been identified to be potentially available to the broad scientific audience for performing analysis in land–atmosphere coupling, hydrological processes and freshwater systems, glacier and ice sheet mass balance and their influence on the sea levels, land use, and plant phenology. Key reflections from this data request effort include advocacy for closer engagement between the user community and modeling groups, reduction in the technical barriers to tracking existing parameters and defining new variables, and more streamlined variable management. These will be essential to enhance the usability and reliability of CMIP7 outputs for climate and Earth system research and applications to a broad audience that relies on the CMIP7 endeavor.

Li, Yue [Univ. of California, Los Angeles, CA (Uni↗

Survey of Methods to Predict Controller Workload for Real-Time Monitoring of Airspace Safety

The Real Time Safety Monitoring (RTSM) approach allows for assessment and prediction of the safety margin in the National Airspace System (NAS) to help preempt incidents and accidents, rather than having to reactively mitigate them. In RTSM, the NAS is modeled using state variables, and safety metrics are defined in terms of these state variables. The safety metrics have been classified as weather-related, airspace-related, and human-related. Many of the formulated human-related safety metrics need an estimate of the controller workload for their computation. However, this computation is not trivial. Hence, in this report, we perform a literature survey to identify the different factors that enable the computation of controller workload and categorize these factors. Next, we describe studies undertaken to determine a minimal set of factors that pro- vide a correct assessment of controller workload. Lastly, we survey approaches for evaluating how well the selected factors correlate with the controllers' subjective assessment of their workload. Based on this survey, we present factors beneficial to computing and predicting controller workload in real time, and discuss the status of data sources necessary for these computations.

National Airspace System↗

Annex H - SORA & UTM

This is a briefing to provide an overview of the contents of the Annex H of the Specific Operation Risk Assessment (SORA) document. This annex focuses on the application of UTM to SORA methodology.

UTM (Unmanned Aviation Systems)↗

Development of a Digital Twin for Hydrogen Dispersion and Safety Assessment in an Electrolyzer-Based Hydrogen Production Facility: Preprint

Digital twin models are virtual representations of physical systems that use real-time data to simulate and optimize performance. This study presents the development and initial implementation of a digital twin (DT) for the electrolyzer-based hydrogen production facility at the National Renewable Energy Laboratory (NREL)'s Advanced Research on Integrated Energy Systems (ARIES), focused on enhancing safety and optimizing sensor placement through physics-based simulations and metadata integration. The DT incorporates detailed facility-specific information, including component layout, leak locations, and controlled release parameters, to model hydrogen dispersion under varying environmental conditions. Using steady-state computational fluid dynamics (CFD) simulations informed by real meteorological data, such as wind speed, direction, and vertical wind profiles, the DT enables visualization of hydrogen plume behavior and spatial concentration distributions. Comparative analysis between high and low wind speed scenarios illustrates the significant influence of wind dynamics on plume shape and extent, with horizontal momentum dominating dispersion at higher speeds, while buoyancy effects become more prominent under low wind conditions. These simulations generate a rich dataset embedded within the DT, allowing users to assess potential leak outcomes and identify optimal sensor locations based on concentration thresholds. The model supports scenario-based analysis to guide safety strategies and equipment deployment for open-area hydrogen infrastructure. The digital twin thus serves as a dynamic platform for virtual prototyping, providing predictive insight into hydrogen behavior and enhancing risk-informed decision-making. This initial phase establishes a validated foundation for future integration of transient, uncontrolled leak scenarios and real-time sensor feedback, positioning the DT as a critical tool for safety design, operational planning, and adaptive monitoring in hydrogen systems. Overall, the approach demonstrates the value of combining environmental data with digital simulations to inform safer and more efficient deployment of hydrogen technologies.

08 HYDROGEN↗

System Architectural Considerations on Reliable Guidance, Navigation, and Control (GN and C) for Constellation Program (CxP) Spacecraft

This final report summarizes the results of a comparative assessment of the fault tolerance and reliability of different Guidance, Navigation and Control (GN&C) architectural approaches. This study was proactively performed by a combined Massachusetts Institute of Technology (MIT) and Draper Laboratory team as a GN&C "Discipline-Advancing" activity sponsored by the NASA Engineering and Safety Center (NESC). This systematic comparative assessment of GN&C system architectural approaches was undertaken as a fundamental step towards understanding the opportunities for, and limitations of, architecting highly reliable and fault tolerant GN&C systems composed of common avionic components. The primary goal of this study was to obtain architectural 'rules of thumb' that could positively influence future designs in the direction of an optimized (i.e., most reliable and cost-efficient) GN&C system. A secondary goal was to demonstrate the application and the utility of a systematic modeling approach that maps the entire possible architecture solution space.

Dennehy, Cornelius J.↗

ARC-100 Reactor Security-by-Design Summary 2025

This report applies the security-by-design methodology developed in a previous National Nuclear Security Administration–sponsored work to the ARC-100, a sodium-cooled fast reactor (SFR) being developed by ARC Clean Technology, Inc (ARC). The report contains no proprietary information specific to the ARC 100 reactor. The insights developed in this report are high-level, and generally applicable to other sodium fast reactor designs. The information presented here is the result of a qualitative safety-based analysis and would not inform any potential adversary beyond what would be found in a docketed safety analysis report. The scope of this present report covers ARC-100’s reactor core, used fuel storage, used fuel assembly wash station, cesium trap, sodium cold trap, noble gas decay tanks, used fuel dry storage facility, damaged fuel storage facility, and radioactive waste building. These systems are also compared to a generic SFR design assumed in the previous study. The security assessment results show changes in structures, systems, and components (SSCs) safety importance relative to the generic SFR SSCs. Several SSCs have higher importance rankings than others, and it is recommended that protection efforts are prioritized for these SSCs. Results from this work will furnish a technical justification for the feasibility of these solutions for the ARC reactor's design and, where applicable, identify any regulatory benefits conferred by the proactive design aspect within a risk management framework. This initiative will contribute to a more secure design of the ARC reactor and support its licensing process.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Effects of Aircraft Health on Airspace Safety

This manuscript investigates the effects of aircraft health on the surrounding airspace, and proposes a methodology to understand how different aircraft-level faults (system faults, communication faults, etc.) can adversely affect the safety of the airspace, and qualitatively assess the impact of such faults on airspace safety metrics (such as congestion, controller/pilot workload, etc.). The topic of systems health management deals with continuously monitoring the performance of an engineering system, identifying and detecting the presence of faults, predicting the growth/progression of faults, computing the remaining useful life, and aiding online decision-making for the robust, continued operation of such engineering systems. The topic of real-time airspace modeling and safety analysis deals with defining and computing safety metrics for airspace operations in order to support risk-informed decision-making activities for various airspace entities including pilots, air traffic controllers, airlines, etc. This report presents recent research efforts that focus on combining multiple aspects of the aforementioned topics, and investigates the impact of aircraft-level faults on the airspace safety

Aircraft Health↗

Risk management for the Space Exploration Initiative

Probabilistic Risk Assessment (PRA) is a quantitative engineering process that provides the analytic structure and decision-making framework for total programmatic risk management. Ideally, it is initiated in the conceptual design phase and used throughout the program life cycle. Although PRA was developed for assessment of safety, reliability, and availability risk, it has far greater application. Throughout the design phase, PRA can guide trade-off studies among system performance, safety, reliability, cost, and schedule. These studies are based on the assessment of the risk of meeting each parameter goal, with full consideration of the uncertainties. Quantitative trade-off studies are essential, but without full identification, propagation, and display of uncertainties, poor decisions may result. PRA also can focus attention on risk drivers in situations where risk is too high. For example, if safety risk is unacceptable, the PRA prioritizes the risk contributors to guide the use of resources for risk mitigation. PRA is used in the Space Exploration Initiative (SEI) Program. To meet the stringent requirements of the SEI mission, within strict budgetary constraints, the PRA structure supports informed and traceable decision-making. This paper briefly describes the SEI PRA process.

Buchbinder, Ben↗

End-to-End Assessment of Artemis-1 Development Flight Instrumentation

As the space industry continues to strive for more efficient launch vehicles they must rely on increasingly accurate predictive models. Verification of models typically requires physical testing. Flight data measurements offer the most real and therefore the most accurate data for model correlation. As NASA prepares for the inaugural launch of their new Space Launch System (SLS), Artemis-1, they must rely heavily on predictive system models to ensure flight safety. Artemis-1 will be an unmanned scientific mission with the intent of blazing a trail for future manned missions. NASA has implemented a system of Development Flight Instrumentation (DFI) in the hopes of recovering useful flight data during liftoff and ascent to aid in correlating their predictive models to ensure human safety in future missions. An end-to-end assessment of the DFI system was performed to verify data acquired during Artemis-1 would be adequate for the targeted flight test objectives (FTOs). This was accomplished using a computational simulation of all sensors and Data Acquisition (DAQ) parameters to investigate any potential problem areas in the current architecture. Input nominal signals were approximated and injected into the system model. Synthesized acquired signals were recovered to verify FTO success.

Flight measurement↗

A Model-Based Systems Engineering Evaluation of the Evolution to an In-Time Aviation Safety Management System

In 2018, as result of a recommendation from the National Academies, NASA began to prototype an In-Time Aviation Safety Management System(IASMS). The purpose of the IASMS is to enable innovative aviation operations and greater heterogeneity of the overall National Airspace (NAS) by automating much of the safety monitoring, assessment, and risk and hazard mitigation functionspresent in today’s Safety Management Systems (SMS). NASA has worked together with early industry collaborators to understand how such a system might work and has published several early Concepts of Operation (ConOps) and other technical memoranda that illustrate the primary considerations for selected aviation domains. The shift from an SMS to an IASMS is predicated on several assumptions, including: 1.) automating safety functions will decrease the amount of time necessary for risk and hazard identification and analysis, making it more likely that safety concerns are understood ‘in-time’ to mitigate them, and 2.) an IASMS will allow easier tailoring of safety management processes to the particular risks and hazards inherent to that aviation operation. In this paper, we begin to validate these assumptions through the use of Model-Based Systems Engineering (MBSE).

In-time Aviation Safety Management System↗

A Probabilistic Approach of Incorporating Safety and Reliability in System Designs for a Manned Mission to Mars

Conceptual stages in mission design often lack the input of quantitative safety and reliability assessments, simply because failure rates or other data are not yet available for systems that have not yet been designed. Absence of such data should not, however, prevent the development of a quantitative risk models with placeholders for missing data. Functions (that is, actions the systems must perform) in mission design will eventually require system probabilities of success, and there could be much learned from surrogate data, adequately bounded in uncertainty, used in a large event tree model of a complex mission.

Railsback, Jan W.↗

Generalized implementation of software safety policies

As part of a research program in the engineering of software for safety-critical systems, we are performing two case studies. The first case study, which is well underway, is a safety-critical medical application. The second, which is just starting, is a digital control system for a nuclear research reactor. Our goal is to use these case studies to permit us to obtain a better understanding of the issues facing developers of safety-critical systems, and to provide a vehicle for the assessment of research ideas. The case studies are not based on the analysis of existing software development by others. Instead, we are attempting to create software for new and novel systems in a process that ultimately will involve all phases of the software lifecycle. In this abstract, we summarize our results to date in a small part of this project, namely the determination and classification of policies related to software safety that must be enforced to ensure safe operation. We hypothesize that this classification will permit a general approach to the implementation of a policy enforcement mechanism.

Knight, John C.↗

GN&C Engineering Best Practices For Human-Rated Spacecraft Systems

The NASA Engineering and Safety Center (NESC) recently completed an in-depth assessment to identify a comprehensive set of engineering considerations for the Design, Development, Test and Evaluation (DDT&E) of safe and reliable human-rated spacecraft systems. Reliability subject matter experts, discipline experts, and systems engineering experts were brought together to synthesize the current "best practices" both at the spacecraft system and subsystems levels. The objective of this paper is to summarize, for the larger Community of Practice, the initial set of Guidance, Navigation and Control (GN&C) engineering Best Practices as identified by this NESC assessment process.

Dennehy, Cornelius J.↗

GN&C Engineering Best Practices for Human-Rated Spacecraft Systems

The NASA Engineering and Safety Center (NESC) recently completed an in-depth assessment to identify a comprehensive set of engineering considerations for the Design, Development, Test and Evaluation (DDT&E) of safe and reliable human-rated spacecraft systems. Reliability subject matter experts, discipline experts, and systems engineering experts were brought together to synthesize the current "best practices" both at the spacecraft system and subsystems levels. The objective of this paper is to summarize, for the larger Community of Practice, the initial set of Guidance, Navigation and Control (GN&C) engineering Best Practices as identified by this NESC assessment process.

Dennehy, Cornelius J.↗

GN&C Engineering Best Practices for Human-Rated Spacecraft System

The NASA Engineering and Safety Center (NESC) recently completed an in-depth assessment to identify a comprehensive set of engineering considerations for the Design, Development, Test and Evaluation (DDT&E) of safe and reliable human-rated spacecraft systems. Reliability subject matter experts, discipline experts, and systems engineering experts were brought together to synthesize the current "best practices" both at the spacecraft system and subsystems levels. The objective of this paper is to summarize, for the larger Community of Practice, the initial set of Guidance, Navigation and Control (GN&C) engineering Best Practices as identified by this NESC assessment process.

Dennehy, Cornelius J.↗

Large-scale Hydrogen Storage – Risk Assessment Seattle City Light and Port of Seattle [Abstract]

This CRADA presents the strategy that Pacific Northwest National Laboratory (PNNL) and Sandia National Laboratories (SNL) will take to support Seattle City Light (SCL), and the Port of Seattle (Port) in performing a risk assessment of large-scale hydrogen storage. Risk assessment is often used to ensure that adequate measures are taken to protect workers and the public, the environment, infrastructure, and assets. A detailed risk assessment can also be used to direct funding and upgrades, to specific components and sub-systems in order to mitigate risks to the larger system. In this way risk assessments are often employed as a part of a larger risk management strategy, with the goal of minimizing the occurrence of hazards and to identify means to limit their consequences. Risk assessment is often used to engage and inform regulators, and to communicate how specific regulations are being met. However, it is important to note that the proposed work is not intended for SCL and the Port to use in order to gain regulatory acceptance for their proposed activities. The work performed as a part of this effort will be a preliminary risk assessment for early-stage component and system designs and should be considered research and development (R&D). As such, the proposed work will be performed to a quality level and design maturity consistent with R&D and is not considered appropriate for final safety analysis and regulatory compliance purposes. Previous and on-going work at SCL and the Port demonstrated the utility of deploying hydrogen systems at the Port. The deployment of hydrogen at the Port is a part of a larger vision of using hydrogen to address a range of issues for SCL and the Port. These include large-scale fueling of MD/HD vehicles, cargo-handling equipment (CHE), and harbor vessels to reduce emissions; support of adjacent LD vehicles; support of critical port operations during extreme events (i.e., resiliency); deferral of more capital- and time-intensive electrical distribution system upgrades while still supporting evolving port operations and decarbonization efforts; facilitating electrification by establishing energy storage as a grid resource, starting at strategic port locations; creation of a flexible market resource that can be used by SCL to generate revenue via arbitrage; support of planned future maritime operations that involve heavy use of hydrogen for ocean-going vessels; and future end-use applications involving natural gas pipeline hydrogen injection. Ultimately, the success of these activities is underpinned by the deployed storage capacity. Large-scale deployment of hydrogen systems will require hydrogen storage at a scale that has not been demonstrated. In addition, the ideal location for such multi-use systems is near the end user which will often necessitate deploying into urban and/or industrial areas. A detailed risk assessment using the Port as a test case is necessary to ensure the deployment of large-scale hydrogen is successful. Many technologies have been proposed for hydrogen storage; however, these technologies need to be analyzed as they apply to an actual site. The physical infrastructure and hydrogen use cases for the Port will be analyzed, and a risk assessment for compressed hydrogen, liquified hydrogen, and Liquid Organic Hydrogen Carrier (LOHC) storage will be performed. These risk assessments will be useful for understanding how each of these technologies would perform in terms of facility and public safety. The operating states of the proposed hydrogen systems at the Port will be analyzed and incorporated into the storage risk assessment. Scalability will also be analyzed to understand how future port uses would affect the overall risk assessment. Finally, using the risk assessment as a tool to inform engagement and to gain stakeholder acceptance will be explored.

08 HYDROGEN↗

Incorporating Elevation in Traffic-Vehicle CO-Simulation: Issues, Impacts, and Solutions

Traffic-vehicle co-simulation couples microscopic traffic simulation with full-body vehicle dynamics to assess system-level impacts on mobility, energy, and safety with greater realism. Incorporating elevation is critical for accurately modeling vehicle behavior and energy use, especially for gradient-sensitive vehicles such as electric and heavy-duty trucks. However, raw elevation data often contain noise, discontinuities, and inconsistencies. While such issues may be negligible in traditional traffic simulations, they significantly affect traffic-vehicle co-simulations where vehicle dynamics are sensitive to road grade variations. This paper investigates the impact of unprocessed elevation data on vehicle behavior and energy consumption using a 42-mile simulation along Interstate 81. We propose an elevation processing workflow that can mitigate the effects stem from elevation data issues, improving the realism and stability of traffic-vehicle co-simulation. Results show that the method effectively removes noise and abrupt elevation transitions while preserving roadway geometry.

Xu, Guanhao [ORNL] (ORCID:0000000214326357)↗

Developing a safe on-orbit cryogenic depot

New U.S. space initiatives will require technology to realize planned programs such as piloted lunar and Mars missions. Key to the optimal execution of such missions are high performance orbit transfer vehicles and propellant storage facilities. Large amounts of liquid hydrogen and oxygen demand a uniquely designed on-orbit cryogenic propellant depot. Because of the inherent dangers in propellant storage and handling, a comprehensive system safety program must be established. This paper shows how the myriad and complex hazards demonstrate the need for an integrated safety effort to be applied from program conception through operational use. Even though the cryogenic depot is still in the conceptual stage, many of the hazards have been identified, including fatigue due to heavy thermal loading from environmental and operating temperature extremes, micrometeoroid and/or depot ancillary equipment impact (this is an important problem due to the large surface area needed to house the large quantities of propellant), docking and maintenance hazards, and hazards associated with extended extravehicular activity. Various safety analysis techniques were presented for each program phase. Specific system safety implementation steps were also listed. Enhanced risk assessment was demonstrated through the incorporation of these methods.

Bahr, Nicholas J.↗