Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Incorporating Elevation in Traffic-Vehicle CO-Simulation: Issues, Impacts, and Solutions

Traffic-vehicle co-simulation couples microscopic traffic simulation with full-body vehicle dynamics to assess system-level impacts on mobility, energy, and safety with greater realism. Incorporating elevation is critical for accurately modeling vehicle behavior and energy use, especially for gradient-sensitive vehicles such as electric and heavy-duty trucks. However, raw elevation data often contain noise, discontinuities, and inconsistencies. While such issues may be negligible in traditional traffic simulations, they significantly affect traffic-vehicle co-simulations where vehicle dynamics are sensitive to road grade variations. This paper investigates the impact of unprocessed elevation data on vehicle behavior and energy consumption using a 42-mile simulation along Interstate 81. We propose an elevation processing workflow that can mitigate the effects stem from elevation data issues, improving the realism and stability of traffic-vehicle co-simulation. Results show that the method effectively removes noise and abrupt elevation transitions while preserving roadway geometry.

Xu, Guanhao [ORNL] (ORCID:0000000214326357)↗
NASA NTRS1992

Developing a safe on-orbit cryogenic depot

New U.S. space initiatives will require technology to realize planned programs such as piloted lunar and Mars missions. Key to the optimal execution of such missions are high performance orbit transfer vehicles and propellant storage facilities. Large amounts of liquid hydrogen and oxygen demand a uniquely designed on-orbit cryogenic propellant depot. Because of the inherent dangers in propellant storage and handling, a comprehensive system safety program must be established. This paper shows how the myriad and complex hazards demonstrate the need for an integrated safety effort to be applied from program conception through operational use. Even though the cryogenic depot is still in the conceptual stage, many of the hazards have been identified, including fatigue due to heavy thermal loading from environmental and operating temperature extremes, micrometeoroid and/or depot ancillary equipment impact (this is an important problem due to the large surface area needed to house the large quantities of propellant), docking and maintenance hazards, and hazards associated with extended extravehicular activity. Various safety analysis techniques were presented for each program phase. Specific system safety implementation steps were also listed. Enhanced risk assessment was demonstrated through the incorporation of these methods.

Bahr, Nicholas J.↗
NASA NTRS2003

A Survey of Logic Formalisms to Support Mishap Analysis

Mishap investigations provide important information about adverse events and near miss incidents. They are intended to help avoid any recurrence of previous failures. Over time, they can also yield statistical information about incident frequencies that helps to detect patterns of failure and can validate risk assessments. However, the increasing complexity of many safety critical systems is posing new challenges for mishap analysis. Similarly, the recognition that many failures have complex, systemic causes has helped to widen the scope of many mishap investigations. These two factors have combined to pose new challenges for the analysis of adverse events. A new generation of formal and semi-formal techniques have been proposed to help investigators address these problems. We introduce the term mishap logics to collectively describe these notations that might be applied to support the analysis of mishaps. The proponents of these notations have argued that they can be used to formally prove that certain events created the necessary and sufficient causes for a mishap to occur. These proofs can be used to reduce the bias that is often perceived to effect the interpretation of adverse events. Others have argued that one cannot use logic formalisms to prove causes in the same way that one might prove propositions or theorems. Such mechanisms cannot accurately capture the wealth of inductive, deductive and statistical forms of inference that investigators must use in their analysis of adverse events. This paper provides an overview of these mishap logics. It also identifies several additional classes of logic that might also be used to support mishap analysis.

Johnson, Chris↗
NASA NTRS2010

Distributed Impact Detector System (DIDS) Health Monitoring System Evaluation

Damage due to impacts from micrometeoroids and orbital debris is one of the most significant on-orbit hazards for spacecraft. Impacts to thermal protection systems must be detected and the damage evaluated to determine if repairs are needed to allow safe re-entry. To address this issue for the International Space Station Program, Langley Research Center and Johnson Space Center technologists have been working to develop and implement advanced methods for detecting impacts and resultant leaks. LaRC funded a Small Business Innovative Research contract to Invocon, Inc. to develop special wireless sensor systems that are compact, light weight, and have long battery lifetimes to enable applications to long duration space structures. These sensor systems are known as distributed impact detection systems (DIDS). In an assessment, the NASA Engineering and Safety Center procured two prototype DIDS sensor units to evaluate their capabilities in laboratory testing and field testing in an ISS Node 1 structural test article. This document contains the findings of the assessment.

Prosser, William H.↗
NASA NTRS2011

How Can You Support RIDM/CRM/RM Through the Use of PRA

Probabilistic Risk Assessment (PRA) is one of key Risk Informed Decision Making (RIDM) tools. It is a scenario-based methodology aimed at identifying and assessing Safety and Technical Performance risks in complex technological systems.

DoVemto. Tpmu↗
NASA NTRS2015

Simplified Methodology to Estimate the Maximum Liquid Helium (LHe) Cryostat Pressure from a Vacuum Jacket Failure

The aircraft-based Stratospheric Observatory for Infrared Astronomy (SOFIA) is a platform for multiple infrared astronomical observation experiments. These experiments carry sensors cooled to liquid helium temperatures. The liquid helium supply is contained in large (i.e., 10 liters or more) vacuum-insulated dewars. Should the dewar vacuum insulation fail, the inrushing air will condense and freeze on the dewar wall, resulting in a large heat flux on the dewar's contents. The heat flux results in a rise in pressure and the actuation of the dewar pressure relief system. A previous NASA Engineering and Safety Center (NESC) assessment provided recommendations for the wall heat flux that would be expected from a loss of vacuum and detailed an appropriate method to use in calculating the maximum pressure that would occur in a loss of vacuum event. This method involved building a detailed supercritical helium compressible flow thermal/fluid model of the vent stack and exercising the model over the appropriate range of parameters. The experimenters designing science instruments for SOFIA are not experts in compressible supercritical flows and do not generally have access to the thermal/fluid modeling packages that are required to build detailed models of the vent stacks. Therefore, the SOFIA Program engaged the NESC to develop a simplified methodology to estimate the maximum pressure in a liquid helium dewar after the loss of vacuum insulation. The method would allow the university-based science instrument development teams to conservatively determine the cryostat's vent neck sizing during preliminary design of new SOFIA Science Instruments. This report details the development of the simplified method, the method itself, and the limits of its applicability. The simplified methodology provides an estimate of the dewar pressure after a loss of vacuum insulation that can be used for the initial design of the liquid helium dewar vent stacks. However, since it is not an exact tool, final verification of the dewar pressure vessel design requires a complete, detailed real fluid compressible flow model of the vent stack. The wall heat flux resulting from a loss of vacuum insulation increases the dewar pressure, which actuates the pressure relief mechanism and results in high-speed flow through the dewar vent stack. At high pressures, the flow can be choked at the vent stack inlet, at the exit, or at an intermediate transition or restriction. During previous SOFIA analyses, it was observed that there was generally a readily identifiable section of the vent stack that would limit the flow – e.g., a small diameter entrance or an orifice. It was also found that when the supercritical helium was approximated as an ideal gas at the dewar condition, the calculated mass flow rate based on choking at the limiting entrance or transition was less than the mass flow rate calculated using the detailed real fluid model2. Using this lower mass flow rate would yield a conservative prediction of the dewar’s wall heat flux capability. The simplified method of the current work was developed by building on this observation.

Ungar, Eugene K.↗
NASA NTRS2024

Control Effectiveness: Metric Development and Application to Resilient Lunar Habitat Design

System safety engineering in its bare essence involves identifying, assessing, and mitigating, or controlling, hazards. Appropriate safety controls are selected using hazard reduction precedence principles, prior experience, or by assessing their impact on residual risk (together with other factors like cost). We propose a control effectiveness metric as one way to systematically and consistently evaluate potential safety controls individually and thereby facilitate selecting a shortlist of potential controls for subsequent integrated evaluation. The control effectiveness metric considers a safety control’s availability when needed, the probability that its design is adequate in addressing the targeted hazard, the probability that the design will be implemented as intended, and the relationship between the time it takes for the safety control to address its target hazard and the time before the hazard propagates. We demonstrated the use of our metric on a lunar habitat design using a physics-based habitat simulator. High control effectiveness and safety controls result in a habitat with high resilience, while low control effectiveness results in lower resilience.

Rashi Jain↗
NASA NTRSDate not supplied

Smart Crop Farming Systems for Artemis Exploration Missions

Space crop production systems that mitigate risks of crew poor performance or illness due to inadequate food and nutrition are needed during manned Artemis exploration missions beyond LEO. Prototype farms must be designed for deployment on ISS and tested in manned platforms: Gateway, lunar habitats, and Mars trans-hab spacecraft in preparation for human missions to Mars. Food production must be optimal and safe for human consumption. Thus, plant growth facilities (i.e. Veggie and APH) can be enhanced with imaging systems (including hyperspectral, multispectral, lidar, and fluorescence imaging systems) for nondestructive monitoring of plant health, stress and assessing food safety. Databases of crop responses to stress obtained during ground studies can be used to develop novel artificial intelligence (AI) algorithms for optimizing crop production (i.e. environmental settings during growth) and for detecting crop indices that ensure food safety. Future farming systems should be sustainable and smart. Novel adaptive AI algorithms requiring limited data sets for calibration are needed for reducing crew intervention during plant cultivation except for maintenance and harvesting events. Eventually, AI driven control systems that include autonomous planting, growing, and harvesting as well as periodic sanitization need evaluation for supplementing crew diets with fresh produce during future Mars exploration missions.

O Monje↗
NASA NTRS2007

Strategies to Mitigate Ammonia Release on the International Space Station

International Space Station (ISS) is crucial to its continuous operation. Off-nominal situations can arise from virtually any aspect of ISS operations. One situation of particular concern is the inadvertent release of a chemical into the ISS atmosphere. In sufficient quantities, a chemical release can render the ISS uninhabitable regardless of the chemical s toxicity as a result of its effect on the hardware used to maintain the environment. This is certainly true with system chemicals which are integral components to the function and purpose of the system. Safeguards, such as design for minimum risk, multiple containment, hazard assessments, rigorous safety reviews, and others, are in place to minimize the probability of a chemical release to the ISS environment thereby allowing the benefits of system chemicals to outweigh the risks associated with them. The thermal control system is an example of such a system. Heat generated within the ISS is transferred from the internal thermal control system (ITCS) to the external thermal control system (ETCS) via two, single-barrier interface heat exchangers (IFHX). The ITCS and ETCS are closed-loop systems which utilize water and anhydrous ammonia, respectively, as heat-transfer fluids. There is approximately 1200 lbs. (208 gallons) of anhydrous ammonia in the ETCS circulating through the two heat exchangers, transferring heat from the ITCS water lines. At the amounts present in the ETCS, anhydrous ammonia is one system chemical that can easily overwhelm the station atmosphere scrubbing capabilities and render the ISS uninhabitable in the event of a catastrophic rupture. Although safeguards have certainly minimized the risk of an ammonia release into the Station atmosphere, credible release scenarios and controls to manage these scenarios are examined.

Macatangay, Ariel V.↗
DOE OSTI2024

GDSA Repository Systems Analysis Investigations in FY 2024

The Disposal Research and Development (R&D) Program of the US Department of Energy (DOE) office of Nuclear Energy (NE-8) Spent Fuel and Waste Science and Technology (SFWST) Campaign is to conduct R&D on disposal of spent nuclear fuel (SNF) and high-level waste (HLW). The goal of the Geologic Disposal Safety Assessment (GDSA) within this project is to develop a disposal system modeling and analysis capability that supports the integrated modeling of coupled processes controlling disposal system performance of deep geologic repositories, including uncertainty. This report describes specific activities in the Fiscal Year (FY) 2024 associated with the GDSA Repository Systems Analysis (RSA) work package. The overall objective of the GDSA RSA work package is to develop generic deep geologic repository concepts and repository system performance models in crystalline, argillite, salt, and unsaturated alluvium potential host-rock environments, and to simulate and analyze these generic repository concepts and models using GDSA Framework toolkit, and other tools as needed.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2019

Human Performance Contributions to Safety in Commercial Aviation

Every day in aviation, pilots, air traffic controllers, and other front-line personnel perform countless correct judgments and actions in a variety of operational environments. These judgments and actions are often the difference between an accident and a non-event. Ironically, data on these behaviors are rarely collected or analyzed. Data-driven decisions about safety management and design of safety-critical systems are limited by the available data, which influence how decision makers characterize problems and identify solutions. Large volumes of data are collected on the failures and errors that result in infrequent incidents and accidents, but in the absence of data on behaviors that result in routine successful outcomes, safety management and system design decisions are based on a small sample of nonrepresentative safety data. This assessment aimed to find and document “safety successes” made possible by human operators. With many Aeronautics Research Mission Directorate (ARMD) Programs and Projects focusing on increased automation and autonomy and decreased human involvement, failure to fully consider the human contributions to successful system performance in civil aviation represents a significant risk — a risk that has not been recognized to date. Without understanding how humans contribute to safety, any estimate of predicted safety of autonomous capabilities is incomplete and inherently suspect. Furthermore, understanding the ways in which humans contribute to safety can promote strategic interactions among safety technologies, functions, procedures and the people using them. Without this understanding, the full benefits of an integrated, optimized human/technology or autonomous system will not be realized. Historically, safety has been consistently defined in terms of the occurrence of accidents or recognized risks (i.e., in terms of things that go wrong). These adverse outcomes are explained by identifying their causes, and safety is restored by eliminating or mitigating these causes. An alternative to this approach is to focus on what goes right and identify how to replicate that process. Focusing on the rare cases of failures attributed to “human error” provides little information about why human performance routinely prevents adverse events. Hollnagel has proposed that things go right because people continuously adjust their work to match their operating conditions. These adjustments become increasingly important as systems continue to grow in complexity. Thus, the definition of safety should reflect not only “avoiding things that go wrong” but “ensuring that things go right.” The basis for safety management requires developing an understanding of everyday activities. However, few mechanisms to monitor everyday work exist in the aviation domain, which limits opportunities to learn how designs function in reality. This concept of safety thinking and safety management is reflected in the emerging field of resilience engineering. According to Hollnagel, a system is resilient if it can sustain required operations under expected and unexpected conditions by adjusting its functioning prior to, during, or following changes, disturbances, and opportunities. To explore “positive” behaviors that contribute to resilient performance in commercial aviation, the assessment team examined a range of existing sources of data about pilot and air traffic control (ATC) tower controller performance, including subjective interviews with domain experts and objective aircraft flight data records. These data were used to identify strategies that support resilient performance, methods for exploring and refining those strategies in existing data, and proposed methods for capturing and analyzing new data.

Null, Cynthia H.↗
NASA NTRS2010

Constellation Program (CxP) Crew Exploration Vehicle (CEV) Parachute Assembly System (CPAS) Independent Design Reliability Assessment: Appendices - Volume 2

This document contains the Appendices to the report documenting the activities, findings, and NASA Engineering and Safety Center (NESC) recommendations of a multidiscipline team to independently assess the Constellation Program (CxP) Crew Exploration Vehicle (CEV) Parachute Assembly System (CPAS). The assessment occurred during a period of 15 noncontiguous months between December 2008 and April 2010, prior to the CPAS Project's Preliminary Design Review (PDR) in August 2010.

Kelly, Michael J.↗
NASA NTRSDate not supplied

A Model-Based Systems Engineering Evaluation of the Evolution to an In-Time Aviation Safety Management System

In 2018, as result of a recommendation from the National Academies, NASA began to prototype an In-Time Aviation Safety Management System (IASMS). The purpose of the IASMS is to enable innovative aviation operations and greater heterogeneity of the overall National Airspace (NAS) by automating much of the safety monitoring, assessment, and risk and hazard mitigation function present in today’s Safety Management Systems (SMS). NASA has worked together with early industry collaborators to understand how such a system might work and has published several early Concepts of Operation (ConOps) and other technical memoranda that illustrate the primary considerations for selected aviation domains. The shift from an SMS to an IASMS is predicated on several assumptions, including: 1.) automating safety functions will decrease the amount of time necessary for risk and hazard identification and analysis, making it more likely that safety concerns are understood ‘in-time’ to mitigate them, and 2.) an IASMS will allow easier tailoring of safety management processes to the particular risks and hazards inherent to that aviation operation. In this paper, we begin to validate these assumptions through the use of Model-Based Systems Engineering (MBSE).

IASMS↗
NASA NTRS2022

Assessing Several Non-Traditional Data Sources for Value in Aviation Safety

The NASA System-Wide Safety (SWS) project and its predecessor projects have been developing Machine Learning (ML) algorithms for commercial aviation safety for many years. These algorithms have been applied to Flight Operations Quality Assurance (FOQA); radar track data (e.g., Threaded Track); and safety reports, including Aviation Safety Reporting System (ASRS) and Aviation Safety Action Plan (ASAP). SWS is working with partners to get access to other data that air carriers provide, such as maintenance data, and has been assisting carriers in working with other data, such as Line Operations Safety Audit (LOSA) data, using manual methods. However, the project has discussed whether there are other data that are not traditionally used in aviation safety analysis that may be useful. This paper discusses four sets of data and models that are not traditionally used in aviation safety but that have shown promise for such use. In the future, we plan to incorporate such data into ML algorithms to use with data that we have used before and determine the additional benefit that is actually achieved under different contexts from the inclusion of these non-traditional data sources.

Nikunj C. Oza↗
NASA NTRS2013

Systems Analysis of NASA Aviation Safety Program: Final Report

A three-month study (February to April 2010) of the NASA Aviation Safety (AvSafe) program was conducted. This study comprised three components: (1) a statistical analysis of currently available civilian subsonic aircraft data from the National Transportation Safety Board (NTSB), the Federal Aviation Administration (FAA), and the Aviation Safety Information Analysis and Sharing (ASIAS) system to identify any significant or overlooked aviation safety issues; (2) a high-level qualitative identification of future safety risks, with an assessment of the potential impact of the NASA AvSafe research on the National Airspace System (NAS) based on these risks; and (3) a detailed, top-down analysis of the NASA AvSafe program using an established and peer-reviewed systems analysis methodology. The statistical analysis identified the top aviation "tall poles" based on NTSB accident and FAA incident data from 1997 to 2006. A separate examination of medical helicopter accidents in the United States was also conducted. Multiple external sources were used to develop a compilation of ten "tall poles" in future safety issues/risks. The top-down analysis of the AvSafe was conducted by using a modification of the Gibson methodology. Of the 17 challenging safety issues that were identified, 11 were directly addressed by the AvSafe program research portfolio.

Jones, Sharon M.↗
NASA NTRSDate not supplied

TPSAS-NF1676L-18493-DND

The Air Traffic Operations Lab is a multi-fidelity, part-task, aircraft and air traffic operations simulation facility. Used to explore interactions between new airborne and ground-based tools in a NextGeneration ATC environment, including: - Concept-level flight operations research, looking at human decision making, situation awareness, transfer of authority/responsibility, etc. - Performance impact assessments of new operational concepts on the National Airspace System (NAS) - Rapid prototyping of new flight deck tools and automation - Concept-level safety assessments - Identification and evaluation of future communication, navigation, and surveillance (CNS) infrastructure requirements - Controller-pilot data link - Precision trajectory-based ops - Air-to-air data exchange

Michael T Palmer↗
NASA NTRS2014

Some Challenges in the Design of Human-Automation Interaction for Safety-Critical Systems

Increasing amounts of automation are being introduced to safety-critical domains. While the introduction of automation has led to an overall increase in reliability and improved safety, it has also introduced a class of failure modes, and new challenges in risk assessment for the new systems, particularly in the assessment of rare events resulting from complex inter-related factors. Designing successful human-automation systems is challenging, and the challenges go beyond good interface development (e.g., Roth, Malin, & Schreckenghost 1997; Christoffersen & Woods, 2002). Human-automation design is particularly challenging when the underlying automation technology generates behavior that is difficult for the user to anticipate or understand. These challenges have been recognized in several safety-critical domains, and have resulted in increased efforts to develop training, procedures, regulations and guidance material (CAST, 2008, IAEA, 2001, FAA, 2013, ICAO, 2012). This paper points to the continuing need for new methods to describe and characterize the operational environment within which new automation concepts are being presented. We will describe challenges to the successful development and evaluation of human-automation systems in safety-critical domains, and describe some approaches that could be used to address these challenges. We will draw from experience with the aviation, spaceflight and nuclear power domains.

systems engineering↗