SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

All sources NASA NTRS DOE OSTI

DOE OSTI2025

Frequency Control and Disturbance Containment Using Grid-Forming Embedded Storage Networks

The paper presents a distributed approach for operating a network of inverter-based energy storage resources embedded in a bulk power system. Departing from their traditional role of steady-state reserves, the storage assets in the network are utilized as frequency-responsive resources shaping system dynamics. The power electronics converter systems interfacing the storage resources are equipped with local controllers designed to respond under transient disturbances. To this end, a safety-constrained distributed control strategy is explored. The paper compares the performance of converter-interfaced grid-forming and grid-following storage networks for fast frequency control and disturbance containment/localization. Sensitivity studies are performed to study the impact of storage size, steady-state dispatch, and controller design on dynamic performance. The findings are presented through case studies with results from the IEEE test systems.

Chatterjee, Kaustav (ORCID:0000000153273860)↗

NASA NTRS2005

Reaction Control System Thruster Cracking Consultation: NASA Engineering and Safety Center (NESC) Materials Super Problem Resolution Team (SPRT) Findings

The shuttle orbiter s reaction control system (RCS) primary thruster serial number 120 was found to contain cracks in the counter bores and relief radius after a chamber repair and rejuvenation was performed in April 2004. Relief radius cracking had been observed in the 1970s and 1980s in seven thrusters prior to flight; however, counter bore cracking had never been seen previously in RCS thrusters. Members of the Materials Super Problem Resolution Team (SPRT) of the NASA Engineering and Safety Center (NESC) conducted a detailed review of the relevant literature and of the documentation from the previous RCS thruster failure analyses. It was concluded that the previous failure analyses lacked sufficient documentation to support the conclusions that stress corrosion cracking or hot-salt cracking was the root cause of the thruster cracking and lacked reliable inspection controls to prevent cracked thrusters from entering the fleet. The NESC team identified and performed new materials characterization and mechanical tests. It was determined that the thruster intergranular cracking was due to hydrogen embrittlement and that the cracking was produced during manufacturing as a result of processing the thrusters with fluoride-containing acids. Testing and characterization demonstrated that appreciable environmental crack propagation does not occur after manufacturing.

MacKay, Rebecca A.↗

NASA NTRS1972

Systematic control of nonmetallic materials for improved fire safety

The elements of a systematic fire safety program are summarized and consist of fire safety criteria, design considerations, testing of materials, development of nonmetallic materials, nonmetallic materials information systems, design reviews, and change control. The system described in this report was developed for the Apollo spacecraft. The system can, however, be tailored to many industrial, commercial, and military activities.

Source record↗

NASA NTRS1994

HFE safety reviews of advanced nuclear power plant control rooms

Advanced control rooms (ACR's) will utilize human-system interface (HSI) technologies that may have significant implications for plant safety in that they will affect the operator's overall role and means of interacting with the system. The Nuclear Regulatory Commission (NRC) reviews the human factors engineering (HFE) aspects of HSI's to ensure that they are designed to good HFE principles and support performance and reliability in order to protect public health and safety. However, the only available NRC guidance was developed more than ten years ago, and does not adequately address the human performance issues and technology changes associated with ACR's. Accordingly, a new approach to ACR safety reviews was developed based upon the concept of 'convergent validity'. This approach to ACR safety reviews is described.

Ohara, John↗

DOE OSTI2020

Control-Oriented Modeling of Lithium-Ion Batteries

Battery management systems (BMSs), which monitor and optimize performance while ensuring safety, require control-oriented models, i.e., models tailored to the design and implementation of estimation and control algorithms. Physics-based electrochemical models describe detailed battery phenomena, but are too computationally intensive for use in estimation and control applications. Single particle models (SPMs), which retain some of the physics of electrochemical models, are often used for control-oriented battery modeling since they are computationally efficient; however, they are only valid over very low frequency ranges and C-rates. Empirical equivalent circuit models (ECMs) are also used for control-oriented battery modeling since they are computationally efficient and can describe battery behavior over wide frequency ranges; however, they provide no physical understanding of the battery and, therefore, have limited applicability. Further, fractional order terms (e.g., Warburg impedances) are often employed, making the models unwieldy for use in the time domain. This work provides a control-oriented battery model that combines the benefits of SPM and ECM models, while overcoming their limitations. The proposed model incorporates some of the battery physics found in electrochemical models, can easily be used in both the time and frequency domains, and describes battery behavior over its entire frequency range. A linearized single particle model, which incorporates key electrochemical parameters, is used for modeling battery physics at very low frequencies. For low frequencies, integer-order linear systems are used to approximate diffusion physics described by Warburg impedances, and high frequency behavior is modeled by the double layer capacitance effect. The proposed battery model is more computationally efficient than full electrochemical models since it does not require the solution of PDEs, is accurate for a wider frequency range than the SPM considered in this paper, and does not suffer from the unwieldiness and limited applicability of empirical ECMs. Finally, the model is validated in the time and frequency domains via a comparison to pseudo-two-dimensional (P2D) model simulations and experimental data.

25 ENERGY STORAGE↗

NASA NTRS1974

Adaptations of advanced safety and reliability techniques to petroleum and other industries

The underlying philosophy of the general approach to failure reduction and control is presented. Safety and reliability management techniques developed in the industries which have participated in the U.S. space and defense programs are described along with adaptations to nonaerospace activities. The examples given illustrate the scope of applicability of these techniques. It is indicated that any activity treated as a 'system' is a potential user of aerospace safety and reliability management techniques.

Purser, P. E.↗

NASA NTRS2018

Investigation of a Verification and Validation Tool with a Turbofan Aircraft Engine Application

The development of more advanced control architectures for turbofan aircraft engines can yield gains in performance and efficiency over the lifetime of an engine. However, the implementation of these increasingly complex controllers is contingent on their ability to provide safe, reliable engine operation. Therefore, having the means to verify the safety of new control algorithms is crucial. As a step towards this goal, CoCoSim, a publicly available verification tool for Simulink, is used to analyze C-MAPSS40k, a 40,000 lbf class turbo-fan engine model developed at NASA for testing new control algorithms. Due to current limitations of the verification software, several modifications are made to C-MAPSS40k to achieve compatibility with CoCoSim. Some of these modifications sacrifice fidelity to the original model. Several safety and performance requirements typical for turbofan engines are identified and constructed into a verification framework. Preliminary results using an industry standard baseline controller for these requirements are presented. While verification capabilities are demonstrated, a truly comprehensive analysis will require further development of the verification tool.

V&↗

NASA NTRS1990

The procedure safety system

Telerobotic operations, whether under autonomous or teleoperated control, require a much more sophisticated safety system than that needed for most industrial applications. Industrial robots generally perform very repetitive tasks in a controlled, static environment. The safety system in that case can be as simple as shutting down the robot if a human enters the work area, or even simply building a cage around the work space. Telerobotic operations, however, will take place in a dynamic, sometimes unpredictable environment, and will involve complicated and perhaps unrehearsed manipulations. This creates a much greater potential for damage to the robot or objects in its vicinity. The Procedural Safety System (PSS) collects data from external sensors and the robot, then processes it through an expert system shell to determine whether an unsafe condition or potential unsafe condition exists. Unsafe conditions could include exceeding velocity, acceleration, torque, or joint limits, imminent collision, exceeding temperature limits, and robot or sensor component failure. If a threat to safety exists, the operator is warned. If the threat is serious enough, the robot is halted. The PSS, therefore, uses expert system technology to enhance safety thus reducing operator work load, allowing him/her to focus on performing the task at hand without the distraction of worrying about violating safety criteria.

Obrien, Maureen E.↗

NASA NTRS1980

MOD-0A 200 kW wind turbine generator design and analysis report

The design, analysis, and initial performance of the MOD-OA 200 kW wind turbine generator at Clayton, NM is documented. The MOD-OA was designed and built to obtain operation and performance data and experience in utility environments. The project requirements, approach, system description, design requirements, design, analysis, system tests, installation, safety considerations, failure modes and effects analysis, data acquisition, and initial performance for the wind turbine are discussed. The design and analysis of the rotor, drive train, nacelle equipment, yaw drive mechanism and brake, tower, foundation, electricl system, and control systems are presented. The rotor includes the blades, hub, and pitch change mechanism. The drive train includes the low speed shaft, speed increaser, high speed shaft, and rotor brake. The electrical system includes the generator, switchgear, transformer, and utility connection. The control systems are the blade pitch, yaw, and generator control, and the safety system. Manual, automatic, and remote control are discussed. Systems analyses on dynamic loads and fatigue are presented.

Anderson, T. S.↗

NASA NTRS1990

A review of nuclear electric propulsion spacecraft system concepts

The last 25-30 years of system concepts and design philosophies for spacecraft employing nuclear-electric propulsion (NEP) are reviewed. NEP spacecraft-system design constraints and criteria are identified, including radiation exposure of humans and electronics, thermal control requirements, effluent contamination of spacecraft surfaces, surface erosion, launch-vehicle integration, operations and safety requirements, attitude control, EM interference, and power control and distribution. The impact on spacecraft design philosophy of these constraints and criteria is explored. Several NEP spacecraft are characterized and discussed with respect to the propulsion system used. The electric propulsion system catagories are electrothermal (arcjet), EM (magnetoplasmadynamic and pulsed-inductive thruster) and electrostatic (ion engine). A brief summary of the mission, nuclear power source, electric propulsion system, and spacecraft configuration are provided for each NEP spacecraft concept.

Deininger, W. D.↗

NASA NTRS1996

Development of an automated control center for the EUVE mission

The Automated Project Operations Control Center (APOCC) was developed to enable automated data acquisition, ground system management and spacecraft health and safety monitoring. The control center will be used for the Extreme Ultraviolet Explorer (EUVE) project to reduce operations staffing from three to one shift per day, while maintaining the science return and performing routine health and safety monitoring activities. The staff reduction is expected to yield a cost reduction of 250,000 dollars per year in comparison with a fully staffed, 24 hour/day operation. The APOCC infrastructure was designed to be reusable and extensible. Configurable data items are stored in data bases and spacecraft-specific information is stored in a health and safety monitoring knowledge base.

Penafiel, Catherine↗

NASA NTRS1980

The MOD-OA 200 kilowatt wind turbine generator design and analysis report

The project requirements, approach, system description, design requirements, design, analysis, system tests, installation safety considerations, failure modes and effects analysis, data acquisition, and initial performance for the MOD-OA 200 kw wind turbine generator are discussed. The components, the rotor, driven train, nacelle equipment, yaw drive mechanism and brake, tower, foundation, electrical system, and control systems are presented. The rotor includes the blades, hub and pitch change mechanism. The drive train includes the low speed shaft, speed increaser, high speed shaft, and rotor brake. The electrical system includes the generator, switchgear, transformer, and utility connection. The control systems are the blade pitch, yaw, and generator control, and the safety system. Manual, automatic, and remote control and Dynamic loads and fatigue are analyzed.

Andersen, T. S.↗

NASA NTRS2015

Cubesat Constellation Design for Air Traffic Monitoring

Suitably equipped global and local air traffic can be tracked. The tracking information may then be used for control from ground-based stations by receiving the Automatic Dependent Surveillance-Broadcast (ADS-B) signal. The ADS-B signal, emitted from the aircraft's Mode-S transponder, is currently tracked by terrestrial based receivers but not over remote oceans or sparsely populated regions such as Alaska or the Pacific Ocean. Lack of real-time aircraft time/location information in remote areas significantly hinders optimal planning and control because bigger "safety bubbles" (lateral and vertical separation) are required around the aircraft until they reach radar-controlled airspace. Moreover, it presents a search-and-rescue bottleneck. Aircraft in distress, e.g. Air France AF449 that crashed in 2009, take days to be located or cannot be located at all, e.g. Malaysia Airlines MH370 in 2014. In this paper, we describe a tool for designing a constellation of small satellites which demonstrates, through high-fidelity modeling based on simulated air traffic data, the value of space-based ADS-B monitoring and provides recommendations for cost-efficient deployment of a constellation of small satellites to increase safety and situational awareness in the currently poorly-served surveillance area of Alaska. Air traffic data has been obtained from the Future ATM Concepts Evaluation Tool (FACET), developed at NASA Ames Research Center, simulated over the Alaskan airspace over a period of one day. The simulation is driven by MATLAB with satellites propagated and coverage calculated using AGI's Satellite ToolKit(STK10).

cubesats↗

DOE OSTI2024

Nanoporous Carbon Coatings Direct Li Electrodeposition Morphology and Performance in Li Metal Anode Batteries

Li metal anodes could significantly improve battery energy density. However, Li generally electrodeposits in poorly controlled morphology, leading to safety and performance problems. One factor that controls Li anode performance and electrodeposition morphology is the nature of the electrolyte–current collector interface. Herein, we modify the Cu current collector interface by depositing precisely controlled nanoporous carbon (NPC) coatings using pulsed laser deposition to develop an understanding of how NPC coating density and thickness impact Li electrodeposition. We find that NPC density and thickness guide Li morphological evolution differently and dictate whether Li deposits at the NPC-Cu or NPC-electrolyte interface. NPC coatings generally lower overpotential for Li electrodeposition, though thicker NPC coatings limit kinetics when cycling at a high rate. Lower-density NPC enables the highest Coulombic efficiency (CE) during calendar aging tests, and higher-density NPC enables the highest CE during cycling tests.

25 ENERGY STORAGE↗

NASA NTRS2012

Investigation of Optimal Control Allocation for Gust Load Alleviation in Flight Control

Advances in sensors and avionics computation power suggest real-time structural load measurements could be used in flight control systems for improved safety and performance. A conventional transport flight control system determines the moments necessary to meet the pilot's command, while rejecting disturbances and maintaining stability of the aircraft. Control allocation is the problem of converting these desired moments into control effector commands. In this paper, a framework is proposed to incorporate real-time structural load feedback and structural load constraints in the control allocator. Constrained optimal control allocation can be used to achieve desired moments without exceeding specified limits on monitored load points. Minimization of structural loads by the control allocator is used to alleviate gust loads. The framework to incorporate structural loads in the flight control system and an optimal control allocation algorithm will be described and then demonstrated on a nonlinear simulation of a generic transport aircraft with flight dynamics and static structural loads.

Frost, Susan A.↗

DOE OSTI2020

Preliminary design of control rods in the single-fluid double-zone thorium molten salt reactor (SD-TMSR)

Recent studies on Molten Salt Reactors (MSRs) showed that the excess reactivity at the beginning of the operation is large for many fueling strategies and must be compensated by a reactivity control system. The current work introduces a reliable safety system based on control rods in addition to the online feed system reactivity control in the Single-fluid Double-zone Thorium-based Molten Salt Reactor (SD-TMSR). Three different initial fissile loadings are considered: 233 U, reactor-grade Pu, and transuranic (TRU) elements as a startup fuel. We applied six different absorbing materials to investigate the main operational and safety parameters in the SD-TMSR: natural B 4 C, enriched B 4 C with 90% 10 B, HfB 2 , HfH 1.62 , Eu 2 O 3 , and Gd 2 O 3 . The present work focuses on control rod design, integral and differential control rod worth, shutdown margin, and shadowing effects at steady-state. We employed the SERPENT-2 Monte-Carlo code to calculate the reactivity worth and analyze the performance of the reactivity control system. We showed that 233 U and reactor-grade Pu startup cores maintain adequate shutdown margin with all considered absorbers. Finally, this report proposes a design of control rod clusters that compensate the excess reactivity of the SD-TMSR loaded with different initial fissile material.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2024

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗

NASA NTRS2004

Verification and Validation Methodology of Real-Time Adaptive Neural Networks for Aerospace Applications

Recent research has shown that adaptive neural based control systems are very effective in restoring stability and control of an aircraft in the presence of damage or failures. The application of an adaptive neural network with a flight critical control system requires a thorough and proven process to ensure safe and proper flight operation. Unique testing tools have been developed as part of a process to perform verification and validation (V&V) of real time adaptive neural networks used in recent adaptive flight control system, to evaluate the performance of the on line trained neural networks. The tools will help in certification from FAA and will help in the successful deployment of neural network based adaptive controllers in safety-critical applications. The process to perform verification and validation is evaluated against a typical neural adaptive controller and the results are discussed.

Gupta, Pramod↗