SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This presentation summarizes the concepts, development, and application of NASA's Bone Fracture Risk Module (BFxRM). The overview includes an assessmnet of strenghts and limitations of the BFxRM and proposes a numebr of discussion questions to the panel regarding future development avenues for this simulation system.
Explore the source record for details and available documents.
A preflight risk assessment system (SAFE) was developed at NASA-Ames Research Center for civil EMS operations to assist pilots in making a decision objectively to accept or decline a mission. The ability of the SAFE system to predict risk profiles was examined at an EMS operator. Results of this field study showed that the usefulness of SAFE was largely dependent on the type of mission flown.
Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems provides the foremost means to improve performance and reduce costs for existing light-water reactors (LWRs). However, qualification of digital technologies remains a challenge?especially the issue of software common cause failure (CCF), which has been difficult to address. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, software CCFs due to design flaws might become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multi-layer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission (NRC) licensing procedures. In 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy?s (DOE?s) Light Water Reactor Sustainability (LWRS) Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, secure DI&C technologies for digital upgrades/designs. An integrated risk assessment for the DI&C (RADIC) process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. This paper summarizes these RISA efforts in the risk analysis of safety-related DI& systems at Idaho National Laboratory.
Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems will greatly benefit existing light water reactors. However, the issue of software common cause failure (CCF) remains an obstacle in terms of qualification for digital technologies. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, design flaws could cause software CCFs to become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multilayer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission licensing procedures. In Fiscal Year 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy’s Light Water Reactor Sustainability Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades and designs. An integrated risk assessment for the DI&C process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. Here this paper summarizes these RISA efforts in the risk analysis of safety-related DI&C systems at Idaho National Laboratory.
Integration of inverter-based distributed energy resources (DERs) is reshaping the landscape of distribution grids to fulfill the socioeconomic, environmental, and sustainability goals. Addressing the technological challenges of DER grid integration requires an adaptive communication layer for efficient DER management and control. This transition has given rise to a cyberphysical system (CPS) architecture within the distribution system, causing new vulnerabilities for cyberphysical attacks. To better address potential threats, this paper presents a comprehensive risk assessment framework for cyberphysical security in distribution grids with grid-edge DERs. The framework incorporates a detailed CPS model accounting for dynamic DER characteristics within the distribution grid. It identifies vulnerabilities in DER communication systems, models attack scenarios, and addresses communication latency crucial for inverter control timescales. Subsequently, the quantification of attack impacts employs an attack probability model including both the vulnerability and criticality of cyber components. The proposed risk assessment framework was validated through testing on the modified IEEE 13-node and 123-node test feeders.
A summary of recent advancements in the detailed modeling of asteroid atmospheric entry processes made through NASA’s Asteroid Threat Assessment Project (ATAP) is presented. Understanding, and accurately modeling these processes and their associated uncertainties is critical to predicting all downstream impact effects, such as blast wave and thermal damage footprints. Furthermore, there is (perhaps thankfully) a dearth of empirical data for large impactors of the kind that would pose a threat to human populations, on which to anchor and/or validate models used in risk assessments. Therefore, we must rely heavily on detailed theoretical and numerical modeling to develop robust assessments for decision makers. To that end, ATAP has made some significant progress in advancing the capabilities in this area. Two areas in particular are highlighted in the present work: meteoroid ablation mechanisms, and bolide luminosity. The first research area – meteoroid ablation mechanisms – has focused on performing novel high-enthalpy wind tunnel experiments on meteorites and meteorite analogs, and utilizing the resulting data to develop high-fidelity models for impactor mass loss at scale. These efforts have resulted in several insights. Of note, these data suggest a differential vaporization process where volatiles are liberated preferentially when the asteroidal material is subject to high heat, while refractory components remain in the molten layer on the surface. A numerical model has been developed which considers this phenomena, and its effect on the bulk impactors effective heat of ablation is examined. The second research thrust that is discussed is focused on accurate modeling of impactor radiation phenomena. While another submission to the conference will discuss the application of our approach to thermal ground damage modeling, here, we present an overview of our extensive efforts to utilize available ground- and space-based observations of large bolides (~1m diameter, and above) to inform and validate our detailed modeling approaches. These methods have been shown to accurately reconstruct the detailed spectra for the Benesov bolide, as well as approximate the burn footprint for the Tunguska event. Recent effort has focused on reconciling light curve data from multiple sources (all-sky camera networks, GLM, US government sensors), using our validated model, and providing a calibrated model for luminous efficiency which can then be utilized to infer impactor properties such as shape, mass, and composition. This work will be demonstrated through an exemplar case study focusing on a large bolide event with observational data (e.g. Chelyabinsk, Flensburg, etc.). Finally, our team’s assessment on the current maturity of atmospheric entry models, and priorities for future research will be provided.
There is considerable interest in developing silicon-based telescopes because of their compactness and low power requirements. Three such telescopes have been flown on board the Space Shuttle to measure the linear energy transfer spectra of trapped, galactic cosmic ray, and solar energetic particles. Dosimeters based on single silicon detectors have also been flown on the Mir orbital station. A comparison of the absorbed dose and radiation quality factors calculated from these telescopes with that estimated from measurements made with a tissue equivalent proportional counter show differences which need to be fully understood if these telescopes are to be used for astronaut radiation risk assessments. Instrument performance is complicated by a variety of factors. A Monte Carlo-based technique was developed to model the behavior of both single element detectors in a proton beam, and the performance of a two-element, wide-angle telescope, in the trapped belt proton field inside the Space Shuttle. The technique is based on: (1) radiation transport intranuclear-evaporation model that takes into account the charge and angular distribution of target fragments, (2) Landau-Vavilov distribution of energy deposition allowing for electron escape, (3) true detector geometry of the telescope, (4) coincidence and discriminator settings, (5) spacecraft shielding geometry, and (6) the external space radiation environment, including albedo protons. The value of such detailed modeling and its implications in astronaut risk assessment is addressed. c2001 Elsevier Science B.V. All rights reserved.
PRA (Probabilistic Risk Assessment) adds the "probability" dimension to the traditional "deterministic" dimension of engineering and safety analyses. Although PRA, as a discipline, has been the evolutionary product of only the last couple of decades, much of the underlying methodology has been in use for a long time. In fact, the concept of probability for describing the likelihood that rare events happen is ancient and dates from Ancient Greece. Our vision is for NASA to achieve world-class state-of-the-art capability in performing and using PRA in technical and management decisions. Since NASA is a leader in many technical fields in which it is involved, we hope, before long, to see NASA become a leader in this field also.
For the purpose of performing safety analysis and risk assessment for a potential off-nominal atmospheric reentry resulting in vehicle breakup, a synthesis of trajectory propagation coupled with thermal analysis and the evaluation of node failure is required to predict the sequence of events, the timeline, and the progressive demise of spacecraft components. To provide this capability, the Simulation for Prediction of Entry Article Demise (SPEAD) analysis tool was developed. The software and methodology have been validated against actual flights, telemetry data, and validated software, and safety/risk analyses were performed for various programs using SPEAD. This report discusses the capabilities, modeling, validation, and application of the SPEAD analysis tool.
It is acutely recognized in the Probabilistic Risk assessment (PRA) field that software plays a defining role in overall system reliability for all modern systems across a wide variety of industries. Regardless if the software is embedded firmware for working components or elements, part of a Human-Machine-Interface, or automated command and control logic, the success of the software to fulfill its function under nominal and off-nominal environments will be a dominant contributor to system reliability. It is also recognized that software reliability prediction and estimation is one of the more challenging and questionable aspects of any PRA or system analyses due to the nature of software and its integration with physics based systems. Irrespective of this dichotomy, any incorporation of software reliability methods requires that the contributions are accountable, quantitative, and tractable. This paper provides a brief overview of software reliability methods, establishes some minimum requirements that the methods should incorporate for completeness, and provides a logic structure for applying software reliability. Model resolution will be discussed that supports current testing plans and trade studies. We will provide initial recommendations for use in the NASA PRA and present a future dynamic option for software and PRA. Space Launch Vehicle Software is recognized to be reliable in static conditions, yet relatively vulnerable to a set of failure modes in changing environments/flight phases. Two quantitative methods were chosen to incorporate software reliability into a Space Launch Vehicle PRA accounting for phase adjustments. One method predicts latent software failure using statistical methods, and the second provides estimates of coding errors and software operating system failures based on test and historical data, respectively. Software uncertainty will also be discussed. We determined that recommendations for PRA software reliability should be modeled at the software module level where multiple software components compose a module and combinations of the software architecture can lead to a functional failure.
It is acutely recognized in the Probabilistic Risk Assessment (PRA) field that software plays a defining role in overall system reliability for all modern systems across a wide variety of industries. Regardless of whether the software is embedded firmware for working components or elements, part of a Human-Machine-Interface, or automated command and control logic, the success of the software to fulfill its function under nominal and off-nominal environments will be a dominant contributor to system reliability. It is also recognized that software reliability prediction and estimation is one of the more challenging and questionable aspects of any PRA or system analyses due to the nature of software and its integration with physics based systems. Irrespective of this dichotomy, any incorporation of software reliability methods requires that the contributions are accountable, quantitative, and tractable. This paper provides a brief overview of software reliability methods, establishes some minimum requirements that the methods should incorporate for completeness, and provides a logic structure for applying software reliability. Model resolution will be discussed that supports current testing plans and trade studies. We will provide initial recommendations for use in the National Aeronautics and Space Administration (NASA) PRA and present a future dynamic option for software and PRA. Space Launch Vehicle software is recognized to be reliable in static conditions, yet relatively vulnerable to a set of failure modes in changing environments/flight phases. Two quantitative methods were chosen to incorporate software reliability into a Space Launch Vehicle PRA accounting for phase adjustments. One method predicts latent software failure using statistical methods, and the second provides estimates of coding errors and software operating system failures based on test and historical data. Software uncertainty will also be discussed. It is determined that recommendations for PRA software reliability should be modeled at the software module level where multiple software components compose a module and combinations of the software architecture can lead to a functional failure.
An important activity within Space Traffic Management is the detection and prevention of possible on-orbit collisions between space objects. The principal parameter for assessing collision likelihood is the probability of collision, which is widely accepted among conjunction assessment practitioners; but it possesses a known deficiency in that it can produce a false sense of safety when the orbital position uncertainties for the conjuncting objects are high. The probability of collision is said to be “diluted” in such a situation and to understate the possible risk; certain approaches have been recommended by researchers to provide (largely conservative) risk estimates and remediation methodologies in these cases. The present analysis explores two of the main proposals for quantifying and remediating possible risk in the dilution region and quantifies their operational implications. These implications with regard to imputed additional workload are considerable, especially in anticipating the conjunction event levels expected with the deployment of the USAF Space Fence radar. This effort has been undertaken as part of a larger enterprise that seeks to clarify the philosophical and statistical underpinnings of the conjunction risk assessment process. The analysis presented herein argues that a form of hypothesis testing is implicitly used in conjunction assessment risk analysis, and that there are a number of conceptual and practical reasons for constructing the associated null hypothesis to counsel against a satellite conjunction remediation action. In short, it is concluded that, for the purposes of determining whether a conjunction remediation action should be pursued, dilution-region probabilities of collision should be treated no differently from those produced under other circumstances.
Ambitious international greenhouse gas emissions reduction targets demand a rapid transformation to a low-carbon economy. This transformation includes the accelerated adoption of carbon dioxide (CO2) capture and storage (CCS) technology. However, as with any large-scale engineering enterprise, the widespread commercial-scale deployment of geologic carbon storage (GCS) raises important questions about technology and cost-effectiveness, safety, environmental risk, and long-term liability. Effectively assessing and managing risks and liability associated with GCS projects is a key technical need throughout the project life cycle-from site selection and permitting to monitoring design, operational risk management, and post-operational site closure. This presentation highlights recent advancements in tools for quantitative risk assessment, being developed by the National Risk Assessment Partnership (NRAP). NRAP is a multi-year, multinational laboratory research collaboration sponsored by the U.S. Department of Energy's Office of Fossil Energy and Carbon Management. Our focus will be on these tools' applications in addressing critical stakeholder questions related to supporting permitting to ensure secure and environmentally protective storage; designing effective and efficient monitoring plans; evaluating the effectiveness of remedial actions and risk management alternatives; and informing liability assessment and investment decisions. This paper will detail the key functionality of NRAP’s Open-Source Integrated Assessment Model (NRAP-Open-IAM), a computational framework for assessing leakage risk and containment assurance. This model features streamlined workflows for calculating leakage risk profiles, delineating risk-based area of review, and assessing contingency plans and post-injection site care requirements. ORION is an open-source, observation-based ensemble forecasting toolkit to help operators assess the seismic hazard at a carbon storage site. The State of Stress Analysis Tool (SOSAT), designed to assess subsurface stress conditions and evaluate geomechanical risk resulting from CO2 injection in an area of interest will also be presented. We will also introduce a prototype model to evaluate storage project costs and liability associated with risk management. The Technoeconomic and Liability Evaluation for Storage (TALES) model uses results from forecasts of leakage and induced seismicity risk to estimate the lifecycle cost of managing risk. Finally, a preliminary example of how the NRAP Risk-based Adaptive Monitoring Plan (RAMP) tool can be used to design efficient and effective site monitoring plans and estimate the detectability of fluid leakage will be provided. The relevance of these tools for addressing key stakeholder questions amidst uncertainty will be emphasized.
This presentation is prepared for the 2023 NRC Fall Risk Forum held on 09/12/2023. Han Bao will attend a panel on "CCF Analysis of Digital Systems" as one panelist. The slides gives an overview about the LWRS program research on DI&C risk assessment.
This plan proposes a strategy for licensing a transportable nuclear power plant, containing its unirradiated and irradiated fuel, as a transportation package for maritime transport using a probabilistic risk assessment framework in order to meet the regulatory requirements of 10 CFR Part 71. It is anticipated that initially, the deterministic transportation package licensing approach will be challenging due to the functional requirements of the transportable nuclear power plant. As such, a partial exemption request from the U.S. Nuclear Regulatory Commission coupled with applied compensatory measures are anticipated in support of providing equivalent safety to the public, worker, and environment. A plan is outlined as to how this would be demonstrated and a pathway is primarily outlined using the accompanying low accident rates which in turn support very low probabilities of release for a maritime application. Wherever possible, the proposed plan is supported by actual accident (casualty) data. Additional supporting information regarding a highway transportation probabilistic risk assessment in support of the Project Pele demonstration reactor that is currently under development is also referenced and discussed.
Abstract Background On 20 September 2022, the Ugandan Ministry of Health declared an outbreak of Ebola disease caused by Sudan ebolavirus. Methods From 6 October 2022 to 10 January 2023, Centers for Disease Control and Prevention (CDC) staff conducted public health assessments at five US ports of entry for travellers identified as having been in Uganda in the past 21 days. CDC also recommended that state, local and territorial health departments (‘health departments’) conduct post-arrival monitoring of these travellers. CDC provided traveller contact information, daily to 58 health departments, and collected health department data regarding monitoring outcomes. Results Among 11 583 travellers screened, 132 (1%) required additional assessment due to potential exposures or symptoms of concern. Fifty-three (91%) health departments reported receiving traveller data from CDC for 10 114 (87%) travellers, of whom 8499 (84%) were contacted for monitoring, 1547 (15%) could not be contacted and 68 (1%) had no reported outcomes. No travellers with high-risk exposures or Ebola disease were identified. Conclusion Entry risk assessment and post-arrival monitoring of travellers are resource-intensive activities that had low demonstrated yield during this and previous outbreaks. The efficiency of future responses could be improved by incorporating an assessment of risk of importation of disease, accounting for individual travellers’ potential for exposure, and expanded use of methods that reduce burden to federal agencies, health departments, and travellers.
A probabilistic methodology for evaluating failure risk, assessing service life, and establishing design parameters for structures subject to fatigue failure has been developed.