Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
NASA NTRS2008

How Past Loss of Control Accidents May Inform Safety Cases for Advanced Control Systems on Commercial Aircraft

This paper describes five loss of control accidents involving commercial aircraft, and derives from those accidents three principles to consider when developing a potential safety case for an advanced flight control system for commercial aircraft. One, among the foundational evidence needed to support a safety case is the availability to the control system of accurate and timely information about the status and health of relevant systems and components. Two, an essential argument to be sustained in the safety case is that pilots are provided with adequate information about the control system to enable them to understand the capabilities that it provides. Three, another essential argument is that the advanced control system will not perform less safely than a good pilot.

Holloway, C. M.↗
NASA NTRS1998

Modeling Controller Tasks for Safety Analysis

As control systems become more complex, the use of automated control has increased. At the same time, the role of the human operator has changed from primary system controller to supervisor or monitor. Safe design of the human computer interaction becomes more difficult. In this paper, we present a visual task modeling language that can be used by system designers to model human-computer interactions. The visual models can be translated into SpecTRM-RL, a blackbox specification language for modeling the automated portion of the control system. The SpecTRM-RL suite of analysis tools allow the designer to perform formal and informal safety analyses on the task model in isolation or integrated with the rest of the modeled system.

Brown, Molly↗
DOE OSTI2020

Coordinated frequency regulation among asynchronous AC grids with an MTDC system

With the increasing penetration level of renewable power, the power systems’ inertias are decreasing. To ensure that the frequency is above the threshold of the under frequency load shedding, one effective way is to share the spinning reserves among asynchronous AC grids through HVDC systems. In this paper, a coordinated frequency regulation scheme that enables spinning reserves sharing is proposed for such hybrid AC/DC grids. This scheme is a communication-free method that consists of the droop control, the inertia emulation control and the frequency safety control. The combined response of the three controls can increase not only the frequency nadir but also the settled frequency of the disturbed grid. In addition, the hysteresis comparators and the power injection limits are adopted in the frequency regulation scheme to reduce the coupling effect among AC grids. Thus, under small and harmless disturbance, the frequency regulation scheme will be inactive; the disturbance in strong AC grids would not affect the weak AC systems. The frequency regulation scheme coordinates well with the automatic generation control of the grids. Furthermore, the feasibility and effectiveness of the proposed frequency regulation scheme are verified through simulation studies.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

SNS Credited Beam Power Limit System Preliminary Design

The Controls Group at the Spallation Neutron Source (SNS) is designing a programmable signal processor based credited safety control that calculates pulsed beam power based on beam kinetic energy and charge. The system must reliably shut off the beam if the average power exceeds 2.145 MW averaged over 60 seconds. This paper discusses architecture and design choices needed to develop the system under the auspices of a programmable radiation-safety credit control.

Deibele, Craig↗
DOE OSTI2024

Improving Cost and Efficiency of the Scalable Solid Oxide Fuel Cells Power System

The objective of this project was to design and develop a 20kW range small-scale solid oxide fuel cells (SOFC) power system for applications such as data centers and commercial buildings. The original plan included a 5,000 hours demonstration and a Techno-Economic Analysis (TEA) which were dropped as part of project termination. The original project plan was to use a stack with a cross-flow cell design which had previously been tested for 500 hours at a community college in Malta, NY. However, it was decided to move to the advanced R-SOFC co-flow cell developed under Department of Energy Award DE-FE0031971. The advanced cell design has the advantage of a larger active area for the same manufacturing footprint which results in fewer required cells for the same stack power, hence a higher volumetric power density (kW/L) and lower cost per kW than the original cross-flow cell design. A full SOFC system Simulink model was developed and calibrated with testing data from a fuel cell stack and BOP (balance of plant) components. The simulation results from the calibrated model showed an acceptable match with the experimental data. A structural analysis conducted for various load scenarios indicated no high stress areas for all spatial directions. Major electrical system components were acquired, built and successfully tested. System sensors were verified and validated against controls. Safety checks, a diagnostic check, PID tuning, and control software commissioning tasks were also conducted. The power electronics prototype was delivered and trial testing completed. Balance of Plant component testing and simulation work was conducted to characterize Reformer-Heat Exchanger heat transfer and backpressure and reformer catalyst methane conversion and product selectivity. Simulations were conducted to design the Anode and Cathode fluid passages and size the air-air and fuel-fuel heat exchangers. A Burner operation map was created from test data and the Anode Gas Recirculation blower was tested to evaluate its durability. The SOFC system used a horizontal style design where components sit directly on a casting with a direct connection to the skid. This design has efficient packaging and a small footprint with approximate dimensions of 750 mm x 700 mm x 1700 mm. An SOFC system was built and successfully tested at the Malta, NY facility The system for over 500 hours under load of which over 300 hours was at full load of 20 kW.

30 DIRECT ENERGY CONVERSION↗
DOE OSTI2024

Calibration of the analog beam-signal hardware for the credited engineered beam power limit system at the Proton Power Upgrade Project at the Spallation Neutron Source

A programmable signal processor-based credited safety control that calculates pulsed beam power based on beam kinetic energy and charge was designed as part of the Proton Power Upgrade (PPU) project at the Spallation Neutron Source (SNS). The system must reliably shut off the beam if the average power exceeds 2.145 MW averaging over 60 seconds. System calibration requires pedigree in measurements, calibration setup, and calculations. This paper discusses the calibration of the analog beam signal components up to and including the Analog Digital Convertors (ADCs) for implementation into the Safety Programmable Logic Controllers (PLCs) and Field Programmable Gate Arrays (FPGAs).

Bobrek, Miljko↗
NASA NTRS1991

Memory Metals (MEMRYSAFE, FIRECHEK, ULTRAVALVE)

A NASA contract led Memry Corporation to the development of commercial products based upon Shape Memory Effect, or the ability of certain metal alloys to change from one shape to another with temperature changes. MEMRYSAFE instantly restricts water flow in shower or sinks before scalding. ULTRAVALVE allows a user to preselect a bathing temperature. FIRECHEK is a fire control safety valve that detects unsafe temperatures and shuts off pneumatic pressure that operates control valves in industrial process lines containing hazardous gases or fluids.

Source record↗
NASA NTRS2012

Hard and Soft Safety Verifications

The purpose of this paper is to examine the differences between and the effects of hard and soft safety verifications. Initially, the terminology should be defined and clarified. A hard safety verification is datum which demonstrates how a safety control is enacted. An example of this is relief valve testing. A soft safety verification is something which is usually described as nice to have but it is not necessary to prove safe operation. An example of a soft verification is the loss of the Solid Rocket Booster (SRB) casings from Shuttle flight, STS-4. When the main parachutes failed, the casings impacted the water and sank. In the nose cap of the SRBs, video cameras recorded the release of the parachutes to determine safe operation and to provide information for potential anomaly resolution. Generally, examination of the casings and nozzles contributed to understanding of the newly developed boosters and their operation. Safety verification of SRB operation was demonstrated by examination for erosion or wear of the casings and nozzle. Loss of the SRBs and associated data did not delay the launch of the next Shuttle flight.

Wetherholt, Jon↗
NASA NTRS2005

Online fault adaptive control for efficient resource management in Advanced Life Support Systems

This article presents the design and implementation of a controller scheme for efficient resource management in Advanced Life Support Systems. In the proposed approach, a switching hybrid system model is used to represent the dynamics of the system components and their interactions. The operational specifications for the controller are represented by utility functions, and the corresponding resource management problem is formulated as a safety control problem. The controller is designed as a limited-horizon online supervisory controller that performs a limited forward search on the state-space of the system at each time step, and uses the utility functions to decide on the best action. The feasibility and accuracy of the online algorithm can be assessed at design time. We demonstrate the effectiveness of the scheme by running a set of experiments on the Reverse Osmosis (RO) subsystem of the Water Recovery System (WRS).

NASA Discipline Life Support Systems↗
NASA NTRS1972

Safety margins in the implementation of planetary quarantine requirements

The formulation of planetary quarantine requirements, and their implementation as determined by a risk allocation model, is discussed. The model defines control safety margins with particular emphasis on utility in achieving the desired minimization of excessive margins, and their effect on implementation procedures.

Schalkowsky, S.↗
DOE OSTI2020

2020 Transportation Research Board Workshop: Infrastructure Spatial Sensing at Intersections: The Potential to Enhance Safety and Enable Automation

The sensing technology that is enabling vehicle automation also can revolutionize traffic intersection safety, control, and efficiency. Infrastructure spatial sensing technology refers to the deployment of sensors that can detect and track all objects in the field of view - for example, mounting lidar sensors, radar, and video imaging at an intersection and fusing the data to produce a three-dimensional dynamic operational awareness. Combining such sensing capability with fail-safe vehicle communications can facilitate applications such as eco-approach and departure, optimizing efficient vehicle-signal coordination, and reducing traffic accidents through increasing safety. Furthermore, evidence is mounting suggesting that infrastructure-based sensing is needed in order to safely deploy automated public mobility alongside the normal vehicle and pedestrian traffic in our cities. Six speakers were invited to present their work from various aspects (safety, efficiency, and automation) addressing infrastructure-based sensing at the workshop on Infrastructure Spatial Sensing hosted in Washington DC as part of the Transportation Research Board Annual Meeting in January 12, 2019. A summary of the presentation are included herein.

47 OTHER INSTRUMENTATION↗
DOE OSTI2020

A Simple, Revolutionary Approach to Waste Packaging Utilizing Proven Technology - 20201

Historically, removing hazardous waste from gloveboxes involves the use of bags as the primary containment method. This method can prove tedious, repetitive, and time consuming to ensure the process follows all safeguards required to contain the waste and mitigate any breach of containment. Layers of bags, yards of tape, and multiple filters are added to the waste stream in order to transfer the hazardous waste from the glovebox safely into the drum package. Then, finally, it can be shipped and disposed of. The process to cut, tie, and tape each bag for disposal involves manual effort by multiple operators. Following Administrative Safety Controls, good operators are able to safely perform those tasks; but, since the bag is the only confinement layer, incidents can occur. Operators, in some cases, are also at close proximity to this waste which may increase the risk of radiation exposure. Once the waste is transferred out through these bags, it is nearly impossible to remove packaged waste that may contain higher dosage levels, thus increasing drum disposal costs incurred by the facility. Exceeding the allowable radiation levels, and drums not fully filled, both contribute significantly to excess disposal costs. Central Research Laboratories (CRL), based in Red Wing Minnesota, has developed the Waste Drum Transfer System (WDTS) building upon the proven technology and containment of the Rapid Transfer Port (RTP) as an alternate, more efficient method of waste transfer. This solution consists of an RTP Alpha port mounted inside a glovebox and Beta assembly unit composed of a drum liner fitted inside a standard 55 gallon drum. The use of the Beta drum liner bypasses the typical use of bags, sleeves or tape to provide leak tight containment. The process to connect and disconnect a drum from the glovebox is achieved by the self-docking and rotating system controls of the RTP Alpha, all done with only one operator standing in an upright ergonomic position. This system also allows for greater flexibility in available Beta connection options, expanding the overall functionality of the system. This system can be disconnected and reconnected multiple times to maximize volume containment. This will minimize drum disposal costs and reduce the overall volume of waste output by more efficiently filling the drums. Radiation levels inside each drum can be monitored and adjusted more efficiently by operators utilizing the reconnect option. Minimal As Low As Reasonably Achievable (ALARA) levels are also achievable with this system. This paper will show how highly efficient packaging and disposal of hazardous waste can be accomplished in a cost-effective manner utilizing the proven RTP technology. Maximized operator productivity and safety, as well as minimized radiation dose exposure, are all attainable through the system's engineered controls. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2014

Initial Evaluations of LoC Prediction Algorithms Using the NASA Vertical Motion Simulator

Flying near the edge of the safe operating envelope is an inherently unsafe proposition. Edge of the envelope here implies that small changes or disturbances in system state or system dynamics can take the system out of the safe envelope in a short time and could result in loss-of-control events. This study evaluated approaches to predicting loss-of-control safety margins as the aircraft gets closer to the edge of the safe operating envelope. The goal of the approach is to provide the pilot aural, visual, and tactile cues focused on maintaining the pilot's control action within predicted loss-of-control boundaries. Our predictive architecture combines quantitative loss-of-control boundaries, an adaptive prediction method to estimate in real-time Markov model parameters and associated stability margins, and a real-time data-based predictive control margins estimation algorithm. The combined architecture is applied to a nonlinear transport class aircraft. Evaluations of various feedback cues using both test and commercial pilots in the NASA Ames Vertical Motion-base Simulator (VMS) were conducted in the summer of 2013. The paper presents results of this evaluation focused on effectiveness of these approaches and the cues in preventing the pilots from entering a loss-of-control event.

Pilot Cue↗
NASA NTRS2002

Human Factors Process Task Analysis Liquid Oxygen Pump Acceptance Test Procedure for the Advanced Technology Development Center

A process task analysis effort was undertaken by Dynacs Inc. commencing in June 2002 under contract from NASA YA-D6. Funding was provided through NASA's Ames Research Center (ARC), Code M/HQ, and Industrial Engineering and Safety (IES). The John F. Kennedy Space Center (KSC) Engineering Development Contract (EDC) Task Order was 5SMA768. The scope of the effort was to conduct a Human Factors Process Failure Modes and Effects Analysis (HF PFMEA) of a hazardous activity and provide recommendations to eliminate or reduce the effects of errors caused by human factors. The Liquid Oxygen (LOX) Pump Acceptance Test Procedure (ATP) was selected for this analysis. The HF PFMEA table (see appendix A) provides an analysis of six major categories evaluated for this study. These categories include Personnel Certification, Test Procedure Format, Test Procedure Safety Controls, Test Article Data, Instrumentation, and Voice Communication. For each specific requirement listed in appendix A, the following topics were addressed: Requirement, Potential Human Error, Performance-Shaping Factors, Potential Effects of the Error, Barriers and Controls, Risk Priority Numbers, and Recommended Actions. This report summarizes findings and gives recommendations as determined by the data contained in appendix A. It also includes a discussion of technology barriers and challenges to performing task analyses, as well as lessons learned. The HF PFMEA table in appendix A recommends the use of accepted and required safety criteria in order to reduce the risk of human error. The items with the highest risk priority numbers should receive the greatest amount of consideration. Implementation of the recommendations will result in a safer operation for all personnel.

Diorio, Kimberly A.↗
DOE OSTI2022

Concept of Operations of Next-Generation Traffic Control Utilizing Infrastructure-Based Cooperative Perception: Preprint

This paper puts forth a system architecture for an infrastructure-based cooperative perception (CP) fusion engine, to provide a complete state-space digital representation, with measurable accuracy, to support a wide-range of applications. The architecture includes the inputs, functional flow, data standardization recommendations, outputs and supported applications. The CP engine addresses critical needs with respect to accelerating the benefits of automation through intelligent roadway infrastructure (IRI), that complements and accelerates connected and automated vehicle (CAV) technology. that the CP acquires and fuses information from sensors (radar, LiDAR, and cameras), and CAVs to intelligently perceive roadway traffic states of all moving objects, create a complete three-dimensional digital representation of that state-space, and communicate it to downstream application such as intelligent signal control, safety and energy applications, and cooperate driving applications for CAVs as examples. The IRI approach, as opposed to a vehicle centric approach, is found to be more scalable in that it can deployed to the roughly 300,000 signalized intersections more readily than the over 300 million vehicles in the US, and accrues early-stage benefits equitable to all roadway users addressing safety, equity, fuel efficiency, and GHG reduction.

ADVANCED PROPULSION SYSTEMS↗