Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Designing the Space Transfer Vehicle (STV)

An evolutionary approach to develop STV system features that provide modularity, design margines, and simple interfaces is presented. A modular design minimizes modifications and requalification for block changes. Since several subsystems do not have to be modified in response to a change in another subsystem, design margins provide options for growth. It is concluded that the approach will lower program schedule and cost risk, while enhancing safety and reliability.

Austin, Robert E.↗

Space Technology Mission Directorate Game Changing Development Program Astrobee

The HET2/Astrobee project is developing a new free-flying robot to succeed the existing SPHERES facility as a guest science research platform and to perform IVA work on the ISS. Relevance: The project will increase the capabilities of robots to perform IVA/EVA work in space and will increase the efficiency of human explorers by allowing routine, repetitive work to be off-loaded to robots. Approach: The project conducted incremental design and development of a robotic free flyer that meets project, stakeholder, and ISS interface and safety requirements. Results: 3 free flyers are on-orbit. The first robot has been unpacked and has begun flying autonomously within the ISS under crew supervision. Commissioning activities to validate the system continue.

Astrobee↗

eVTOL Vehicle-Agnostic Instrument Flight Procedures Test Plan

NASA Advanced Air Mobility National Campaign is researching the utility of electric vertical takeoff and land (eVTOL) advanced air mobility (AAM) instrument flight procedures. The result will be dynamic and tailored procedures that align to the following modus operandi: maximize safety, optimize efficiency, support passenger comfort and minimize acoustics. This is achieved through dynamic airspace procedure design, which is a modular approach to create an airspace construct that customizes procedures to vehicle design and configuration, operation and environmental conditions. The test plan supports different eVTOL platforms and envisioned operations for flight test or simulation and may be leveraged by AAM aircraft manufacturers and operators for any given aircraft, location and operation.

eVTOL test plan↗

Addressing Uniqueness and Unison of Reliability and Safety for a Better Integration

Over time, it has been observed that Safety and Reliability have not been clearly differentiated, which leads to confusion, inefficiency, and, sometimes, counter-productive practices in executing each of these two disciplines. It is imperative to address this situation to help Reliability and Safety disciplines improve their effectiveness and efficiency. The paper poses an important question to address, "Safety and Reliability - Are they unique or unisonous?" To answer the question, the paper reviewed several most commonly used analyses from each of the disciplines, namely, FMEA, reliability allocation and prediction, reliability design involvement, system safety hazard analysis, Fault Tree Analysis, and Probabilistic Risk Assessment. The paper pointed out uniqueness and unison of Safety and Reliability in their respective roles, requirements, approaches, and tools, and presented some suggestions for enhancing and improving the individual disciplines, as well as promoting the integration of the two. The paper concludes that Safety and Reliability are unique, but compensating each other in many aspects, and need to be integrated. Particularly, the individual roles of Safety and Reliability need to be differentiated, that is, Safety is to ensure and assure the product meets safety requirements, goals, or desires, and Reliability is to ensure and assure maximum achievability of intended design functions. With the integration of Safety and Reliability, personnel can be shared, tools and analyses have to be integrated, and skill sets can be possessed by the same person with the purpose of providing the best value to a product development.

Huang, Zhaofeng↗

Pilot evaluation of experimental flight trajectories in the near-terminal area

Advanced cockpit avionics systems now under development at NASA Langley Research Center will provide the means for effectively utilizing MLS technology to achieve a number of important objectives in the near-terminal airspace. A simulator study has recently been completed at NASA Langley Research Center in which guest pilots from a number of airlines were asked to fly curved ground tracks designed to avoid population centers in four airport communities. Eight two-man crews comprised of commercial line pilots, and three NASA crews each evaluated a total of eight departures and eight approaches on the basis of such factors as workload, safety, passenger acceptance, controllability, and piloting skill. Various physical measurements were also made, including cross-track errors, altitude errors, bank angles, and fuel flow rates. Half of the trajectories were curved and designed to be population-minimal, and half were designed to represent conventional ground tracks. The objective of the study was to determine if statistically significant differences could be detected between curved and conventional ground tracks on the basis of these parameters.

Deloach, R.↗

Approaches for Synthesis and Deployment of Controller Models on Automated Vehicles for Car-following in Mixed Autonomy

This paper describes the software design patterns and vehicle interfaces that were employed to transition vehicle controllers from simulation environments to open-road field experiments. The approach relies on a life cycle that utilizes model-based design and code generation, along with agile software development, and both software and hardware-in-the-loop testing, with additional safety margins. Autonomous designs should consider the dynamics of mixed autonomy in traffic to safely operate among humans. The software that provides a vehicle’s behavior intelligence is often developed through simulation, which may have a mismatch between dynamics, or as a result of a reinforcement learning workflow, which may be a black box with challenges to analyze. In each of these cases, it is important to have research interfaces that provide strongly typed data streams accessible to researchers who are not software experts while continuing to satisfy safety and liveness constraints. This paper describes how we design the hardware platform interfaces and software design process for a mixed autonomy traffic experiment with a leader-follower scenario. Controller synthesis for these vehicles requires clearly articulated vehicle interfaces and software design patterns for successful onboard deployment. Testing strategies for such controllers are also described before algorithms are transitioned to full-scale field experiments with safety operators for the vehicles. Testing strategies include software-in-the-loop simulation testing, hardware-in-the-loop simulation, ghost-car testing, and read-only testing in live traffic. With our approach, we were not only able to validate our controller synthesized in scripts and simulation, but also able to scale deployment to multiple vehicles.

Bhadani, Rahul↗

A review of modern approaches to fatigue reliability analysis and design

Metal fatigue is a principal mode of failure in components of mechanical systems. But fatigue design factors (e.g., stress, fatigue strength) are subject to considerable uncertainty. Therefore, relative to fatigue, reliability methods are appropriate for purposes of safety checking of designs, risk assessment, failure analysis, and development of code statements. Described herein are four methods which can be effectively employed for fatigue reliability analysis, (1) Monte Carlo methods, (2) the lognormal format, (3) the Weibull format, (4) the Rackwitz-Fiessler algorithm. Examples of the application of each are presented. In summary, no general reliability method can be recommended for all situations involving fatigue. The approach has to be tailored to the problem.

Wirsching, P. H.↗

Intelligent Life-Extending Controls for Aircraft Engines Studied

Current aircraft engine controllers are designed and operated to provide desired performance and stability margins. Except for the hard limits for extreme conditions, engine controllers do not usually take engine component life into consideration during the controller design and operation. The end result is that aircraft pilots regularly operate engines under unnecessarily harsh conditions to strive for optimum performance. The NASA Glenn Research Center and its industrial and academic partners have been working together toward an intelligent control concept that will include engine life as part of the controller design criteria. This research includes the study of the relationship between control action and engine component life as well as the design of an intelligent control algorithm to provide proper tradeoffs between performance and engine life. This approach is expected to maintain operating safety while minimizing overall operating costs. In this study, the thermomechanical fatigue (TMF) of a critical component was selected to demonstrate how an intelligent engine control algorithm can significantly extend engine life with only a very small sacrifice in performance. An intelligent engine control scheme based on modifying the high-pressure spool speed (NH) was proposed to reduce TMF damage from ground idle to takeoff. The NH acceleration schedule was optimized to minimize the TMF damage for a given rise-time constraint, which represents the performance requirement. The intelligent engine control scheme was used to simulate a commercial short-haul aircraft engine.

Guo, Ten-Huei↗

Fission Surface Power Technology Development Status

Power is a critical consideration in planning exploration of the surfaces of the Moon, Mars, and beyond. Nuclear power is an important option, especially for locations in the solar system where sunlight is limited in availability or intensity. NASA is maintaining the option for fission surface power for the Moon and Mars by developing and demonstrating technology for an affordable fission surface power system. Because affordability drove the determination of the system concept that this technology will make possible, low development and recurring costs result, while required safety standards are maintained. However, an affordable approach to fission surface power also provides the benefits of simplicity, robustness, and conservatism in design. This paper will illuminate the multiplicity of benefits to an affordable approach to fission surface power, and will describe how the foundation for these benefits is being developed and demonstrated in the Exploration Technology Development Program s Fission Surface Power Project.

Palac, Donald T.↗

Criticality Safety Evaluation Project Development for University of California Berkely Nuclear Criticality Safety Pipeline Course

The Nuclear Criticality Safety Division at Lawrence Livermore National Laboratory (LLNL) has taken a unique approach to developing criticality safety evaluation topics in support of the University of California Berkeley criticality safety pipeline course. The evaluation topics are designed to go beyond the typical evaluation examples used for many training courses including vault storage and variations on storage arrays. These types of evaluations provide in-depth analysis into the fundamentals of criticality safety and are complex but may be far off from what a new criticality safety engineer may actually be evaluating. To provide more practical examples of criticality safety evaluation topics that are better fit for the knowledge level of a criticality safety engineer in-training, variations of current and future operations and research operations performed at LLNL are used as evaluation topics. Additionally, an emphasis on research is included in all evaluation topics as it allows students to take advantage of the concepts learned in class to apply them for process improvement, engineering equipment that is favorable for criticality safety, and negotiation tactics to work with operations personnel. The process used by LLNL to develop project topics for the pipeline course is provided in this paper. The intent is to provide an alternative technique for training students and potentially younger staff members in criticality safety on developing criticality safety evaluations.

42 ENGINEERING↗

Certification

Objective 1: Provide regulators with a methodology for development of airworthiness requirements for certification of UAS. a) Rationale: a comprehensive methodology does not currently exist to support development of regulation for certification of UAS. Regulation is essential to enable routine access to the NAS. b) Approach: 1) assess existing approaches and classification schemes for deriving acceptable means of compliance to airworthiness requirements. 2) investigate a service-based approach to classification of UAS. 3) conduct comparative analysis of different methodologies. 4) work with FAA to determine best approach and conduct case study. 5) participate in regulatory/standards organizations developing safety and performance requirements for UAS. Objective 2: Provide regulators and industry with hazard and risk-related data to support criteria for UAS type design. a) Rationale: There is presently little UAS specific data (incident, accident, and reliability), especially in a civil context, to support risk assessment and development of standards and regulation. b) Approach: Identify gaps in existing data, provide measured data as needed, and formulate recommendations by: 1) evaluating UAS incident/accident data collection efforts and determining additional support necessary for regulation. 2) assessing UAS-specific hazards and risks. 3) evaluating need for reliability data for UAS-unique systems, components and subsystem, and determining additional measurement requirements. 4) developing guidance and best practices for UAS type design.

Hayhurst, Kelly↗

Technical Assessment of Off-Gas System Technologies for Potential Use in Molten Salt Reactors

Molten salt reactors (MSRs) are a class of Generation IV advanced reactor technologies aimed to enhance and improve the safety, fuel utilization and cost-effectiveness of nuclear power generation. MSR concepts are based on using a molten salt mixture as a primary nuclear reactor coolant, while the fuel can be either directly dissolved in the coolant (i.e., fluid-fueled) or can be in a separate solid form (i.e., salt-cooled solid-fueled). MSRs can be operated in either thermal or fast neutron spectra, as simple fissile convertors, or breeder reactors (e.g., utilizing both fissile and fertile fuels), as well as accelerator-driven sub-critical reactors or transuranic element burners. Operation of MSRs will necessitate management and treatment of the off-gas streams released to the headspace of the reactor where, in some designs, a cover gas can be circulated to remove certain fission products and maintain an inert atmosphere. An inert MSR cover gas swept over or sparged into the salt will confine radionuclides emerging from the free surface, including radioactive noble and non-noble gases, aerosols, and volatile species. The elements and compounds of these species will have a wide range of thermochemical and physical properties, some of which will decay to different products in the off-gas stream. Therefore, system components used to manage and treat MSR off-gas streams will need to be robust under dynamic reactor and chemistry conditions to support adequate reactor performance by managing the composition and species in the salt coolant and cover gas space. Off-gas system components would perform as a radionuclide boundary to the reactor vessel and a primary means for preventing radionuclide release; therefore, they are of high safety significance for MSR operations. This report reviews various technologies and materials for potential implementation in the design of an MSR off-gas system per a general conceptual framework. The reviewed technologies operate based on scrubbing, capture, delay, or separation of species in the off-gas stream. These include molten hydroxide scrubbers, solid sorbents, delay off-gas systems, particle traps, and cryogenic distillation. Since aspects of an off-gas system will be design-specific, the approach is to provide general discussions on attributes of these technologies and materials, including target off-gas stream species, operational parameters and conditions of importance to decontamination factors, implementation maturity, system component monitoring, potential off-normal conditions and considerations for waste products. The information aims to support the U.S. Nuclear Regulatory Commission in their safety evaluations for MSR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Regulatory Treatment of Non-Core Sources of Radioactivity for Advanced Reactor Designs

The recent resurgence in advance (non-light water) reactor development has been paralleled by the development of risk-informed performance-based (RIPB) licensing pathways. Specifically, the creation of the RIPB Licensing Modernization Project (LMP) approach and subsequent endorsement by the U.S. Nuclear Regulatory Commission (NRC) now provides advanced reactor vendors with a defined RIPB method to develop an affirmative safety case for licensing. In addition, the Technology Inclusive Content of Applications Project (TICAP) has published guidance on developing a license application based on the LMP approach. To support the utilization of risk information as part of advanced reactor design and licensing efforts, the American Society of Mechanical Engineers (ASME)/American Nuclear Society (ANS) Joint Committee on Nuclear Risk Management (JCNRM) has developed a probabilistic risk assessment (PRA) standard for advanced reactors. The standard, which was formerly approved by the American National Standards Institute (ANSI) in 2021 and recently endorsed by the NRC in trial use Regulatory Guide (RG) 1.247, is an integral standard, covering from initiating events to offsite consequence. A major feature of the standard is that it permits the inclusion of any source of radioactivity material at the site within the plant PRA. Therefore, non-core sources of radioactivity, such as fuel storage, fuel processing, and purification systems, can be included within a single comprehensive plant PRA. For those advanced reactor vendors utilizing a RIPB licensing approach, there is an opportunity to include the non-core sources of radioactivity within the RIPB framework for licensing decision-making, such as the categorization of events, classification of structures, systems, and components (SSCs), and evaluation of the adequacy of defense-in-depth (DID). For advanced reactor designs that contain multiple non-core sources of radioactivity, or for monolithic plant sites that include associated fuel facilities, this approach could potentially simplify licensing applications through the use of a single, uniform, and consistent decision-making framework across all radioactive sources at the site. In addition, a RIPB approach could provide additional insights regarding plant behavior, flexibility regarding licensing decision-making, and potentially allow the use of risk information as part of the plant oversight process. Risk-informing these aspects of advanced reactor licensing would also be consistent with the NRC’s risk policy statement. However, there is diverse regulation and guidance regarding the licensing of non-core sources of radioactivity and generally limited experience using RIPB approaches for the evaluation as part of licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Advancing Li-plating detection: Motivating a multi-signal correlation approach

Facilitating fast charging in lithium-ion batteries (LiBs) is often linked to Li-plating, which harms performance, longevity, and safety. Early detection of Li-plating is essential for rapid technological development and for preventing performance deterioration and ensuring safety during operation. Fast and real-time detection, using commonly collected measurements like voltage (V), current (I), temperature (T), and pressure (P), is highly desirable. Existing standalone methods relying on electrochemical and mechanical signatures, using half, smaller, or specially designed cells often operated at lower temperatures, fail to account for real-world fast-charging conditions. These signatures may also have inherent unreliability in aged LiBs, a phenomenon currently not-well understood. All these uncertainties have complicated practical implementation of a robust Li-plating detection technique. This study, through multiple case studies involving real-world fast-charging conditions using automotive-grade 11.6 Ah LiBs, shows that many single signal-based diagnostic techniques may be inadequate to detect Li-plating. Among various signatures, end-of-charge rest pressure, differential pressure-sensing, and end-of-charge rest voltage were identified as particularly useful in detecting Li-plating. Furthermore, A multi-signal-based detection technique is shown to be more robust in detecting Li-plating. Using both fresh and aged cells, the results and analysis highlight how detection capabilities are influenced by various factors, including battery design, size, charging speed, operating temperature, and degradation level. Adopting such a multi-signal Li-plating detection approach may be instrumental in the rapid development of battery technology in laboratories, as well as ensuring the enhanced safety of next-generation LiBs in real-world fast-charging applications.

25 ENERGY STORAGE↗

Probabilistic Design Analysis (PDA) Approach to Determine the Probability of Cross-System Failures for a Space Launch Vehicle

Quantifying the probability of significant launch vehicle failure scenarios for a given design, while still in the design process, is critical to mission success and to the safety of the astronauts. Probabilistic risk assessment (PRA) is chosen from many system safety and reliability tools to verify the loss of mission (LOM) and loss of crew (LOC) requirements set by the NASA Program Office. To support the integrated vehicle PRA, probabilistic design analysis (PDA) models are developed by using vehicle design and operation data to better quantify failure probabilities and to better understand the characteristics of a failure and its outcome. This PDA approach uses a physics-based model to describe the system behavior and response for a given failure scenario. Each driving parameter in the model is treated as a random variable with a distribution function. Monte Carlo simulation is used to perform probabilistic calculations to statistically obtain the failure probability. Sensitivity analyses are performed to show how input parameters affect the predicted failure probability, providing insight for potential design improvements to mitigate the risk. The paper discusses the application of the PDA approach in determining the probability of failure for two scenarios from the NASA Ares I project

Shih, Ann T.↗

National launch system core vehicle

A new launch system is being defined to provide significant improvements in the national launch capability. The most challenging requirements are to reduce operational cost and increase system reliability, dependability, responsiveness while maintaining acceptable mission performance. System architecture studies have established that a family of vehicles is required to launch the required range of payloads. The vehicle design approach implements a design process that identifies the system design criteria and design concepts that enable the vehicle to meet the objectives of cost, reliability, safety and performance. The vehicle design features for the 50 to 100 K payload capability will utilize cost effective elements derived from existing vehicles, emerging technology and lessons learned to enable the system to be developed at a reasonable investment and to deliver payloads in an operationally efficient manner with high reliability.

Worlund, Armis L.↗

Science Goals in Radiation Protection for Exploration

Space radiation presents major challenges to future missions to the Earth s moon or Mars. Health risks of concern include cancer, degenerative and performance risks to the central nervous system, heart and lens, and the acute radiation syndromes. The galactic cosmic rays (GCR) contain high energy and charge (HZE) nuclei, which have been shown to cause qualitatively distinct biological damage compared to terresterial radiation, such as X-rays or gamma-rays, causing risk estimates to be highly uncertain. The biological effects of solar particle events (SPE) are similar to terresterial radiation except for their biological dose-rate modifiers; however the onset and size of SPEs are difficult to predict. The high energies of GCR reduce the effectiveness of shielding, while SPE s can be shielded however the current gap in radiobiological knowledge hinders optimization. Methods used to project risks on Earth must be modified because of the large uncertainties in projecting health risks from space radiation, and thus impact mission requirements and costs. We describe NASA s unique approach to radiation safety that applies probabilistic risk assessments and uncertainty based criteria within the occupational health program for astronauts and to mission design. The two terrestrial criteria of a point estimate of maximum acceptable level of risk and application of the principle of As Low As Reasonably Achievable (ALARA) are supplemented by a third requirement that protects against risk projection uncertainties using the upper 95% confidence level (CL) in radiation risk projection models. Exploration science goals in radiation protection are centered on ground-based research to achieve the necessary biological knowledge, and in the development of new technologies to improve SPE monitoring and optimize shielding. Radiobiology research is centered on a ground based program investigating the radiobiology of high-energy protons and HZE nuclei at the NASA Space Radiation Laboratory (NSRL) located at DoE s Brookhaven National Laboratory in Upton, NY. We describe recent NSRL results that are closing the knowledge gap in HZE radiobiology and improving exploration risk estimates. Linking probabilistic risk assessment to research goals makes it possible to express risk management objectives in terms of quantitative metrics, which include the number of days in space without exceeding a given risk level within well defined confidence limits, and probabilistic assessments of the effectiveness of design trade spaces such as material type, mass, solar cycle, crew selection criteria, and biological countermeasures. New research in SPE alert and risk assessment, individual radiation sensitivity, and biological countermeasure development are described.

Cucinotta, Francs A.↗

Defining and Reasoning about Model-based Safety Analysis: A Review

Model-based safety analysis (MBSA) has been around for over two decades. The benefits of MBSA have been well-documented in the literature, such as tackling complexity, introducing Formal Methods to eliminate the ambiguity in the traditional safety analysis, using automation to replace the error-prone manual safety modeling process, and ensuring consistency between the design model and the safety model. However, there is still a lack of consensus on what MBSA even is. This paper provides an approach towards developing such a consensus

model-based↗