Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Prognostics of Power Electronics, Methods and Validation Experiments

Abstract Failure of electronic devices is a concern for future electric aircrafts that will see an increase of electronics to drive and control safety-critical equipment throughout the aircraft. As a result, investigation of precursors to failure in electronics and prediction of remaining life of electronic components is of key importance. DC-DC power converters are power electronics systems employed typically as sourcing elements for avionics equipment. Current research efforts in prognostics for these power systems focuses on the identification of failure mechanisms and the development of accelerated aging methodologies and systems to accelerate the aging process of test devices, while continuously measuring key electrical and thermal parameters. Preliminary model-based prognostics algorithms have been developed making use of empirical degradation models and physics-inspired degradation model with focus on key components like electrolytic capacitors and power MOSFETs (metal-oxide-semiconductor-field-effect-transistor). This paper presents current results on the development of validation methods for prognostics algorithms of power electrolytic capacitors. Particularly, in the use of accelerated aging systems for algorithm validation. Validation of prognostics algorithms present difficulties in practice due to the lack of run-to-failure experiments in deployed systems. By using accelerated experiments, we circumvent this problem in order to define initial validation activities.

Kulkarni, Chetan S.↗

Motorized Beam Alignment of a Commercial X-ray Diffractometer

X-ray diffraction (XRD) is a powerful analysis method that allows researchers to noninvasively probe the crystalline structure of a material. This includes the ability to determine the crystalline phases present, quantify surface residual stresses, and measure the distribution of crystallographic orientations. The Structures and Materials Division at the NASA Glenn Research Center (GRC) heavily uses the on-site XRD lab to characterize advanced metal alloys, ceramics, and polymers. One of the x-ray diffractometers in the XRD lab (Bruker D8 Discover) uses three different x-ray tubes (Cu, Cr, and Mn) for optimal performance over numerous material types and various experimental techniques. This requires that the tubes be switched out and aligned between experiments. This alignment maximizes the x-ray tube s output through an iterative process involving four set screws. However, the output of the x-ray tube cannot be monitored during the adjustment process due to standard radiation safety engineering controls that prevent exposure to the x-ray beam when the diffractometer doors are open. Therefore, the adjustment process is a very tedious series of blind adjustments, each followed by measurement of the output beam using a PIN diode after the enclosure doors are shut. This process can take up to 4 hr to perform. This technical memorandum documents an in-house project to motorize this alignment process. Unlike a human, motors are not harmed by x-ray radiation of the energy range used in this instrument. Therefore, using motors to adjust the set screws will allow the researcher to monitor the x-ray tube s output while making interactive adjustments from outside the diffractometer. The motorized alignment system consists of four motors, a motor controller, and a hand-held user interface module. Our goal was to reduce the alignment time to less than 30 min. The time available was the 10-week span of the Lewis' Educational and Research Collaborative Internship Project (LERCIP) summer internship program and the budget goal was $1200. In this report, we will describe our motorization design and discuss the results of its implementation.

Van Zandt, Noah R.↗

Range Safety Flight Elevation Limit Calculation Software

This program was developed to fill a need within the Wallops Flight Facility workflow for automation of the development of vertical plan limit lines used by flight safety officers during the conduct of expendable launch vehicle missions. Vertical plane present-position-based destruct lines have been used by range safety organizations at numerous launch ranges to mitigate launch vehicle risks during the early phase of flight. Various ranges have implemented data submittal and processing workflows to develop these destruct lines. As such, there is significant prior art in this field. The ElLimits program was developed at NASA's Wallops Flight Facility to automate the process for developing vertical plane limit lines using current computing technologies. The ElLimits program is used to configure launch-phase range safety flight control lines for guided missiles. The name of the program derives itself from the fundamental quantity that is computed - flight elevation limits. The user specifies the extent and resolution of a grid in the vertical plane oriented along the launch azimuth. At each grid point, the program computes the maximum velocity vector flight elevation that can be permitted without endangering a specified back-range location. Vertical plane x-y limit lines that can be utilized on a present position display are derived from the flight elevation limit data by numerically propagating 'streamlines' through the grid. The failure turn and debris propagation simulation technique used by the application is common to all of its analysis options. A simulation is initialized at a vertical plane grid point chosen by the program. A powered flight failure turn is then propagated in the plane for the duration of the so-called RSO reaction time. At the end of the turn, a delta-velocity is imparted, and a ballistic trajectory is propagated to impact. While the program possesses capability for powered flight failure turn modeling, it does not require extensive user inputs of vehicle characteristics (e.g., thrust and aerodynamic data), nor does it require reams of turn data after the traditional fashion of the Air Force ranges. The program requires a nominal trajectory table (time, altitude, range, velocity, and flight elevation) and makes heavy use of it to initialize and model a failure turn.

Lanzi, Raymond J↗

Communications System Concept of Operations (ConOp) for Supporting Second Shift (SS) Operations

Wildland fires take place most often in remote areas without access to communications infrastructure. Communication during wildfire operations is crucial for safe and effective command and control of air assets, ground-based firefighters, and fire management. Without connectivity, Incident Command (IC) cannot exchange information, receive alerts or work with all parties involved in the wildfire suppression operation. Current policy directs IC to use voice radio communications, which require no prior infrastructure, to provide information needed for the command, control and safety of personnel and resources. Cellular communications are used only for logistical purposes unless no other method is available. To address some of the shortcomings of the current state of communications, the Advanced Capabilities for Emergency Response Operations (ACERO) Second Shift (SS) technical team is developing characteristics of an air-to-ground Mesh Radio System (MRS) and preparing for a future demonstration. The MRS will allow air and ground assets to automatically join a radio network without relying on existing infrastructure and exchange information critical to maintaining situation awareness and air traffic management by the onsite IC. The MRS will also give users more options for communications in addition to voice communications.

David Fuller↗

Technology Advancement and Insertion into Operating Nuclear Facilities

Key challenges in the NNSA modernization effort are centered around the selection of new processing / production technologies to deploy in existing, operating, and oftentimes, aging nuclear facilities. New uranium processing technologies may offer significant improvements in worker and environmental safety, material control and accountability, and production efficiencies, but adaptation of these technologies into existing facilities presents unique (and usually, difficult) engineering solutions for each new technology. This presentation discusses approaches utilized at Y-12 to mature and demonstrate new processing and production technologies for deployment into nuclear facilities. The technology advancement lifecycle (from concept to deployment) of uranium electrorefining technologies will be reviewed, as a prototypical example, to describe steps and approaches utilized at Y-12 (and NNSA Sites) to (i) mature technologies and manufacturing strategies, (ii) establish testbed capabilities for full-scale process demonstrations, and (iii) reduce risks associated with operational disruptions when commissioning new uranium processing technologies.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Technology Advancement and Insertion into Operating Nuclear Facilities

Key challenges in the NNSA modernization effort are centered around the selection of new processing / production technologies to deploy in existing, operating, and oftentimes, aging nuclear facilities. New uranium processing technologies may offer significant improvements in worker and environmental safety, material control and accountability, and production efficiencies, but adaptation of these technologies into existing facilities presents unique (and usually, difficult) engineering solutions for each new technology. This presentation discusses approaches utilized at Y-12 to mature and demonstrate new processing and production technologies for deployment into aging nuclear facilities. The technology advancement lifecycle (from concept to deployment) of uranium electrorefining technologies will be reviewed, as a prototypical example, to describe steps and approaches utilized at Y-12 (and NNSA Sites) to (i) mature technologies and manufacturing strategies, (ii) establish testbed capabilities for full-scale process demonstrations, and (iii) reduce risks associated with operational disruptions when commissioning new uranium processing technologies.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Connecting Electric Vehicle Charging Infrastructure to Commercial Buildings

Electric vehicles (EVs) are growing in popularity and gaining meaningful market share with record sales year over year in the last decade. EV charging equipment, also known as EV chargers (EVC) or EV supply equipment (EVSE), must proportionally match the growing number of new EVs on the road for a comparable experience to gas-powered vehicles. The majority of EV charging currently happens at residential buildings. However, demand for EV charging at commercial buildings will significantly increase with wider mainstream EV adoption and as businesses return to more normal operation following COVID-19 pandemic disruptions. Charging equipment can include various sub-systems like power conditioning module, control software, safety devices, metering, communication, cooling, connectors, and its wiring. EV charging at commercial buildings could be used for public, workplace, and commercial fleet charging. This document aims to describe how EVC can be connected to commercial buildings, including considerations for facility managers, and the effects that charging will have on the buildings electrical distribution system. More specifically, this resource provides an overview of: understanding EV charging basics: how charging equipment connects to the building and to EVs; required infrastructure updates needed at the building site to connect EVC to existing distribution systems; network strategies for cost-effective operation; metering and utility considerations for billing and incentives; charging equipment ownership options; future trends in EVC connection to buildings.

ADVANCED PROPULSION SYSTEMS,ENERGY CONSERVATION, C↗

FY23 ION Based Approaches to Address Labor and Knowledge Retention

This study will seek to outline the current problem facing the nuclear industry related to staffing, training, and retaining the necessary workforce for long-term sustainability. A review of published reports and knowledge gained by working in the nuclear energy sector will form the basis for this scoping study. This study will not seek to draw any conclusions regarding the underlying causes of these personnel issues but will attempt to ask questions and help outline future research. The Integrated Operations for Nuclear business model provides opportunities to partially mitigate some of the current issues facing staffing the nuclear fleet. Upgrading safety and control systems from analog to digital as advocated by the Integrated Operations for Nuclear process allows the nuclear facility to compete for the best and brightest candidates and offers them a broad and sustainable career path where their skills can be valued and utilized in the broader industrial sectors. This study will seek to identify the primary reasons that the nuclear industry is facing this labor crisis and seek to identify possible solutions that will be fully evaluated in future research.

42 ENGINEERING↗

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗

Survey of Methods to Predict Controller Workload for Real-Time Monitoring of Airspace Safety

The Real Time Safety Monitoring (RTSM) approach allows for assessment and prediction of the safety margin in the National Airspace System (NAS) to help preempt incidents and accidents, rather than having to reactively mitigate them. In RTSM, the NAS is modeled using state variables, and safety metrics are defined in terms of these state variables. The safety metrics have been classified as weather-related, airspace-related, and human-related. Many of the formulated human-related safety metrics need an estimate of the controller workload for their computation. However, this computation is not trivial. Hence, in this report, we perform a literature survey to identify the different factors that enable the computation of controller workload and categorize these factors. Next, we describe studies undertaken to determine a minimal set of factors that pro- vide a correct assessment of controller workload. Lastly, we survey approaches for evaluating how well the selected factors correlate with the controllers' subjective assessment of their workload. Based on this survey, we present factors beneficial to computing and predicting controller workload in real time, and discuss the status of data sources necessary for these computations.

National Airspace System↗

Designing Graceful Degradation into Complex Systems: Identification of Causes of Degradation, Interactions, and Mitigation of Degradation in Air Traffic Control

System resilience is critical to safety in air traffic control. An important element of maintaining resilience is the ability of systems to degrade gracefully. Of the available graceful degradation research, a majority of studies have focused primarily on technological causes of degradation only, limiting an ecologically valid understanding of the causes of degradation in air traffic control, and the preventative and mitigative strategies that enable graceful degradation. The current study aimed to address this research gap by investigating causes of degradation in air traffic control across the broad categories of technology, the environment, and the human operator, and the potential interactions between these causes. 12 retired controllers participated in semi-structured interviews focused on previous experience of causes of degradation and mitigation strategies. Findings provide an understanding of causation of degradation in air traffic control, and the prevention and mitigation strategies that moderate the relationship between cause and system effect. Findings confirmed that causes appear to interact to create compound, multiple effects on overall system performance. Findings also revealed prevention and mitigation strategies utilized to moderate the effect of the cause on the system. In order to gain an ecologically valid understanding of the causes of degradation, and effective prevention or mitigation strategies, causes from multiple categories, and the interactions between them, must be identified. Findings have implications for designers of future air traffic control systems to ensure the ability of the system to gracefully degrade, as well as risk assessment and system validation processes.

human performance↗

A Mathematical Model for Railway Control Systems

We present a general method for modeling safety aspects of railway control systems. Using our modeling method, one can progressively refine an abstract railway safety model, sucessively adding layers of detail about how a real system actually operates, while maintaining a safety property that refines the original abstract safety property. This method supports a top-down approach to specification of railway control systems and to proof of a variety of safety-related properties. We demonstrate our method by proving safety of the classical block control system.

Hoover, D. N.↗

Coordinated Thermal Safety Attack and Defense on EV Battery Management Systems

Battery temperature sensor and battery current sensor data which are key sensing inputs to the Battery Management Controllers in electric vehicles, are vulnerable to possible cyber/ physical manipulation due to known vulnerabilities inherited from CAN bus technology that is used for in-vehicle communications between electronic control units that transfer sensing and control data. In this paper, we first create a simulation that enables us to evaluate impact of cyber physical attacks on electric vehicle battery management system in a controlled environment that violates thermal safety. Specifically, we emulate a Level 3 - DC fast charging system with SAE J1772/CCS, integrated with standard charging controls and thermal safety controls on EVs, and various sensing data flows. Second, we propose a coordinated current and battery temperature attack that has crippling economic, and safety impacts. Third, we quantify the usability, economic and safety impacts of such attacks as a function of the extent of data manipulation. Finally, we propose a physics model driven detection technique to detect presence of such attacks.

25 ENERGY STORAGE↗

Safety issues of manipulator systems under computer control

An overview of the development test flight (DTF-1) mission is presented, and the system design, safety requirements, and safety features are described. The lessons that were learned during the design and early development stages are also presented. The DTF-1 mission objectives are to evaluate: the overall man-machine performance in zero G, Flight Telerobotic Service manipulator design, and workstation design, including handcontrollers and displays. The payload bay and aft flight deck elements, and computer control of the DTF-1 are described. Recommendations for developing and implementing a safety system are presented, and some design alternatives for the next space-qualified telerobotic system are suggested.

Andary, James F.↗

Post-closure Nuclear Criticality Safety Evaluations for Disposition of Criticality Control Overpacks at the Waste Isolation Pilot Plant

The Waste Isolation Pilot Plant (WIPP) is a geological repository in southern New Mexico that provides for disposal of transuranic (TRU) wastes from atomic energy defense activities. The Sandia National Laboratories (Sandia) Report, Consideration of Nuclear Criticality When Disposing of Transuranic Waste at the Waste Isolation Pilot Plant, addresses nuclear criticality safety based on the projected inventory characteristics for the initial compliance certification application of WIPP in 1996. As the inventory, waste forms, and disposal package designs change, revised or new analyses are necessary to demonstrate acceptability for these configurations within the WIPP safety basis and compliance with 10,000-year post-closure standards of the US Environmental Protection Agency (EPA). Saylor and Scaglione evaluated criticality control overpacks (CCOs) in 2017 based on conservative assumptions for post-closure repository structural conditions with resulting effects on containers and container spacing, The Saylor and Scaglione evaluation of CCOs addressed a single waste configuration that represents the Surplus Plutonium Disposition Program’s dilute and dispose waste form and composition. This initial CCO study demonstrated that 50 grams of boron carbide (B 4 C) per CCO is sufficient to ensure post-closure criticality safety based on a well-mixed waste composition, and Oak Ridge National Laboratory (ORNL) subsequently determined that this amount of B 4 C does not require constraints on moisture or plastic present as moderator. The Saylor and Scaglione analysis conservatively assumes repository room closure that eliminates all space between fissile gram equivalent (FGE) 239 Pu masses. The close-packed array was selected based on limited availability of repository salt creep modeling results at that time. In 2019, Brickner provided additional evaluations for pipe overpack containers (POCs), building on the conservative basis provided by Saylor and Scaglione. Brickner’s 2019 analysis made use of new geomechanical data for post-closure spacing that rely on advances in repository modeling as documented in the work by Reedlunn and Bean. This current CCO evaluation for generic waste materials expands on earlier work performed at ORNL and includes evaluation of CCOs across a much broader range of possible waste compositions and geometries. This evaluation is intended to provide input for the required feature, event and process (FEP) screening to determine if post-closure criticality must be included as an event in the 10,000-year regulatory evaluation. As such, the approach to modeling post-closure criticality presented in this report has been coordinated with the Sandia team responsible for FEP screening. The resulting analysis supports disposition of fissile materials in the CCO containing up to 380 FGE 239 Pu and expands conditions acceptable for disposal of fissile material in CCOs. This evaluation builds on the methodology of Saylor and Scaglione and Brickner, using the most recently available geomechanical data for CCO spacing under salt creep compaction scenarios provided by Reedlunn and Bean. The broad range of fissile material configurations analyzed in this report are intended to account for configurations that may occur during the post-closure disposal time period, and it also includes waste configurations that are not physically possible to support analysis of conditions that influence neutron fluence.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Integrated Operations for Nuclear: Work Reduction Opportunity Demonstration Strategy

EXECUTIVE SUMMARY The Light Water Reactor Sustainability Program Plant Modernization Pathway has been working with industry for a number of years to leverage digital technology to extend the life and improve the performance of the existing fleet through modernized technologies and improved processes for plant operation and power generation. This includes development of modernization solutions to improve reliability and economic performance while addressing US nuclear industry’s aging and obsolescence challenges. The objective of these efforts is to deliver a sustainable business model that enables US nuclear industry to remain competitive. Digital Infrastructure (DI) research has established a technical foundation for these efforts. This effort began with technical analysis and support for a safety-related instrumentation and control (I&C) pilot upgrade being performed at Constellation Energy Generation’s Limerick Nuclear Plant. The following publicly available reports were produced as part of this effort. • INL/EXT-20-61079, Vendor-Independent Design Requirements for a Boiling Water Reactor Safety System Upgrade [1] • INL/EXT-20-59371, Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations [2] • INL/EXT-20-59809, “Safety-Related Instrumentation and Control Pilot Upgrade: Initial Scoping Phase Implementation Report and Lessons Learned [3] • INL/RPT-23-72105, Safety-Related Instrumentation and Control Upgrade: Conceptual – Detailed Design Phase Report and Lessons Learned [4]

99 GENERAL AND MISCELLANEOUS↗