Search NASA⌕ Search

SEARCH · Search NASA

Results for “dynamic safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Approaches for Synthesis and Deployment of Controller Models on Automated Vehicles for Car-following in Mixed Autonomy

This paper describes the software design patterns and vehicle interfaces that were employed to transition vehicle controllers from simulation environments to open-road field experiments. The approach relies on a life cycle that utilizes model-based design and code generation, along with agile software development, and both software and hardware-in-the-loop testing, with additional safety margins. Autonomous designs should consider the dynamics of mixed autonomy in traffic to safely operate among humans. The software that provides a vehicle’s behavior intelligence is often developed through simulation, which may have a mismatch between dynamics, or as a result of a reinforcement learning workflow, which may be a black box with challenges to analyze. In each of these cases, it is important to have research interfaces that provide strongly typed data streams accessible to researchers who are not software experts while continuing to satisfy safety and liveness constraints. This paper describes how we design the hardware platform interfaces and software design process for a mixed autonomy traffic experiment with a leader-follower scenario. Controller synthesis for these vehicles requires clearly articulated vehicle interfaces and software design patterns for successful onboard deployment. Testing strategies for such controllers are also described before algorithms are transitioned to full-scale field experiments with safety operators for the vehicles. Testing strategies include software-in-the-loop simulation testing, hardware-in-the-loop simulation, ghost-car testing, and read-only testing in live traffic. With our approach, we were not only able to validate our controller synthesized in scripts and simulation, but also able to scale deployment to multiple vehicles.

Bhadani, Rahul↗

Space Suit CO2 Washout During Intravehicular Activity

Space suit carbon dioxide (CO2) washout refers to the removal of CO2 gas from the oral-nasal area of a suited astronaut's (or crewmember's) helmet using the suit's ventilation system. Inadequate washout of gases can result in diminished mental/cognitive abilities as well as headaches and light headedness. In addition to general discomfort, these ailments can impair an astronaut s ability to perform mission-critical tasks ranging from flying the space vehicle to performing lunar extravehicular activities (EVAs). During design development for NASA s Constellation Program (CxP), conflicting requirements arose between the volume of air flow that the new Orion manned space vehicle is allocated to provide to the suited crewmember and the amount of air required to achieve CO2 washout in a space suit. Historically, space suits receive 6.0 actual cubic feet per minute (acfm) of air flow, which has adequately washed out CO2 for EVAs. For CxP, the Orion vehicle will provide 4.5 acfm of air flow to the suit. A group of subject matter experts (SM Es) among the EVA Systems community came to an early consensus that 4.5 acfm may be acceptable for low metabolic rate activities. However, this value appears very risky for high metabolic rates, hence the need for further analysis and testing. An analysis was performed to validate the 4.5 acfm value and to determine if adequate CO2 washout can be achieved with the new suit helmet design concepts. The analysis included computational fluid dynamic (CFD) modeling cases, which modeled the air flow and breathing characteristics of a human wearing suit helmets. Helmet testing was performed at the National Institute of Occupational Safety and Health (NIOSH) in Pittsburgh, Pennsylvania, to provide a gross-level validation of the CFD models. Although there was not a direct data correlation between the helmet testing and the CFD modeling, the testing data showed trends that are very similar to the CFD modeling. Overall, the analysis yielded results that were better than anticipated, with a few unexpected findings that could not easily be explained. Results indicate that 4.5 acfm is acceptable for CO2 washout and helmet design. This paper summarizes the results of this CO2 washout study.

Augustine, Phillip M.↗

Safety Risk Knowledge Elicitation in Support of Aeronautical R and D Portfolio Management: A Case Study

Aviation is a problem domain characterized by a high level of system complexity and uncertainty. Safety risk analysis in such a domain is especially challenging given the multitude of operations and diverse stakeholders. The Federal Aviation Administration (FAA) projects that by 2025 air traffic will increase by more than 50 percent with 1.1 billion passengers a year and more than 85,000 flights every 24 hours contributing to further delays and congestion in the sky (Circelli, 2011). This increased system complexity necessitates the application of structured safety risk analysis methods to understand and eliminate where possible, reduce, and/or mitigate risk factors. The use of expert judgments for probabilistic safety analysis in such a complex domain is necessary especially when evaluating the projected impact of future technologies, capabilities, and procedures for which current operational data may be scarce. Management of an R&D product portfolio in such a dynamic domain needs a systematic process to elicit these expert judgments, process modeling results, perform sensitivity analyses, and efficiently communicate the modeling results to decision makers. In this paper a case study focusing on the application of an R&D portfolio of aeronautical products intended to mitigate aircraft Loss of Control (LOC) accidents is presented. In particular, the knowledge elicitation process with three subject matter experts who contributed to the safety risk model is emphasized. The application and refinement of a verbal-numerical scale for conditional probability elicitation in a Bayesian Belief Network (BBN) is discussed. The preliminary findings from this initial step of a three-part elicitation are important to project management practitioners as they illustrate the vital contribution of systematic knowledge elicitation in complex domains.

Shih, Ann T.↗

Sizing and Selection of Pressure Relief Valves for High-Pressure Thermal–Hydraulic Systems

This study covers the critical concerns related to the sizing, selection, installation, maintenance, and testing of pressure safety valves (PSVs). The aim is to ensure the safety of pressurized systems, hydrostatic transmission systems, and hydraulic plants, including process plants, thermal power plants, and nuclear reactor systems. PSVs are devices that ensure the safety and reliability of pressurized vessels, lines, and systems during overpressure events. The task of selecting which PSV features are of greatest value for a specific purpose is complex—especially in the design of a high-pressure experimental thermal–hydraulic facility for hydrostatic and transient testing of the reactor system—when the systems are in the design and development phases and require qualification and demonstration to prove that they have reached a given level of technological readiness. The present study highlights the required steps for users to follow the associated rules, guidelines, and recommendations. As a part of this research, case studies are presented to help readers better understand the applicable strategy and standards. A discussion and a review of PSV performance degradation and failure are summarized to provide a better understanding of varied process applications and conditions, including fluid flow dynamics, boundary-layer formation and pressure drops, gas bubble formation and collapse, geometric configurations, inlet/outlet piping, abrupt pressure fluctuations, and acoustic resonance. Moreover, this study discusses the servicing and testing of PSVs in a multiphase pressurized system. Overall, it provides a basic overview of how PSVs ensure the safety of pressurized systems, supported by case studies and industrial practices.

02 PETROLEUM↗

Bayesian Optimization of Non-Invariant Systems with Constraints Developed for Application to the ECR Ion Source VENUS

In this work, we consider the optimization of non-invariant systems with both safety and control constraints. We present a new approach based on Bayesian optimization for the dynamic, safe and controlled optimization of such systems. Although there are other possible use cases, we focus on the application to the electron cyclotron resonance ion source VENUS. From experimental data, we have observed that VENUS behaves to first order as a non-invariant dynamic system with moving areas of instability. Our novel approach aims at providing a tool that can maintain system optimization in a safe way. This is accomplished by making sure the objective function, the beam current in the case of VENUS, does not fall under an operational minimum, while simultaneously requiring the optimization to avoid areas where VENUS is unstable. We compare the result of our approach on synthetic data modeled to mimic the behavior of VENUS with two methods from the literature, a standard Bayesian optimizer and a safe Bayesian optimizer, both adapted to deal with dynamic systems. A cross Student T-test is conducted to show the significance of the improvement given by the new method we introduce here, regarding the two preexisting methods we compared to. The results of the tests conducted on synthetic data show that the proposed method succeeds at maintaining the system optimized and obeys the predefined constraints better than the literature methods explored.

Bayesian optimization↗

Risk-Informed ATF and FLEX Analysis for an Enhanced Resilient BWR Under Design-Basis and Beyond-Design-Basis Accidents

This report documents the activities performed by the Idaho National Laboratory (INL) during fiscal year (FY) 2020 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk-Informed System Analysis (RISA) Pathway, Enhanced Resilient Plant (ERP) Systems research. The purpose of the RISA Pathway research and development is to support plant owner-operator decisions with the aim to improve the economics, reliability, and maintain the high levels of safety of current nuclear power plants over periods of extended plant operations. The concept of ERP refers to the combinations of accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, and the incorporation of augmented or new passive cooling systems, as well as improved fuel cycle efficiency. The objective of the ERP research effort is to use the RISA methods and toolkit in industry applications, including methods development and early demonstration of technologies, in order to enhance existing reactors’ safety features (both active and passive) and to substantially reduce operating costs through risk-informed approaches to plant design modifications to the plant and their characterization. One main focus of the FY 2020 efforts documented in this report was to extend the analyses conducted in FYs 2018 and 2019 for a pressurized water reactor (PWR) to a boiling water reactor (BWR). The same analysis process, risk analysis approaches, and analysis tools as in the previous work for PWR were used for a generic BWR with near-term ATF cladding (i.e., Iron-Chromium-Aluminum [FeCrAl] cladding and Chromium [Cr]-coated cladding) designs under the postulated station blackout (SBO) and medium loss-of-coolant (MLOCA) accident scenarios. In addition, a FLEX model was developed and incorporated into a generic BWR probabilistic risk assessment (PRA) model using the INL-developed software tool, Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE), to assess the risk impact from FLEX. The other main focus of the FY 2020 efforts was to advance analysis methods, including developing dynamic approach for FLEX human reliability analysis (HRA) using the INL-developed software tool, Event Modeling Risk Assessment using Linked Diagrams (EMRALD), as well as developing a multicriterion benefit evaluation (MCBE) method for evaluating costs and benefits of safety enhancements in nuclear power plants (NPPs). As a case study, the MCBE method was applied to evaluate the costs and benefits brought by FLEX implementation.

99 GENERAL AND MISCELLANEOUS↗

Linking classical PRA models to a dynamic PRA

Here, this paper presents a series of methods designed to incorporate classical Probabilistic Risk Assessment (PRA) models such as Event Trees (ETs) and Fault Trees (FTs) into dynamic PRA. In contrast to classical PRA, dynamic PRA couples stochastic methods with system simulators to determine the risks associated with complex systems such as nuclear power plants. Compared with classical PRA methods, they can evaluate with higher resolution the safety impact of timing and sequencing of events on the progression of the accident. As part of a dynamic PRA analysis, it is not uncommon that parts of the system to be analyzed might not require a computationally expensive simulation model. These parts could be in fact modeled by employing classical PRA models (e.g., a FT). Here, we present a set of methods and tools that can be used to link the most common classical PRA models (ETs, FTs, reliability block diagrams and Markov models) to simulation codes such as RELAP5-3D: creating a “hybrid PRA.” In order to show the potential of such an hybrid PRA we employ this method to verify ET modeling assumptions (e.g., success criteria) using a large break loss of coolant accident initiating event as a test case. In this respect, we link a set of FTs from the original PRA to the RELAP5-3D code and perform a hybrid PRA. The FTs are employed to model the control logic of several safety systems and to propagate component failures throughout the system. Provided the generated dynamic PRA data, we show how conservative assumptions in the original PRA can be identified and how such original PRA can be modified by updating success criteria captured by the set of RELAP5-3D simulation runs.

97 - MATHEMATICS AND COMPUTING↗

Real Time Quantitative 3-D Imaging of Diffusion Flame Species

A low-gravity environment, in space or ground-based facilities such as drop towers, provides a unique setting for study of combustion mechanisms. Understanding the physical phenomena controlling the ignition and spread of flames in microgravity has importance for space safety as well as better characterization of dynamical and chemical combustion processes which are normally masked by buoyancy and other gravity-related effects. Even the use of so-called 'limiting cases' or the construction of 1-D or 2-D models and experiments fail to make the analysis of combustion simultaneously simple and accurate. Ideally, to bridge the gap between chemistry and fluid mechanics in microgravity combustion, species concentrations and temperature profiles are needed throughout the flame. However, restrictions associated with performing measurements in reduced gravity, especially size and weight considerations, have generally limited microgravity combustion studies to the capture of flame emissions on film or video laser Schlieren imaging and (intrusive) temperature measurements using thermocouples. Given the development of detailed theoretical models, more sophisticated studies are needed to provide the kind of quantitative data necessary to characterize the properties of microgravity combustion processes as well as provide accurate feedback to improve the predictive capabilities of the computational models. While there have been a myriad of fluid mechanical visualization studies in microgravity combustion, little experimental work has been completed to obtain reactant and product concentrations within a microgravity flame. This is largely due to the fact that traditional sampling methods (quenching microprobes using GC and/or mass spec analysis) are too heavy, slow, and cumbersome for microgravity experiments. Non-intrusive optical spectroscopic techniques have - up until now - also required excessively bulky, power hungry equipment. However, with the advent of near-IR diode lasers, the possibility now exists to obtain reactant and product concentrations and temperatures non-intrusively in microgravity combustion studies. Over the past ten years, Southwest Sciences has focused its research on the high sensitivity, quantitative detection of gas phase species using diode lasers. Our research approach combines three innovations in an experimental system resulting in a new capability for nonintrusive measurement of major combustion species. FM spectroscopy or high frequency Wavelength Modulation Spectroscopy (WMS) have recently been applied to sensitive absorption measurements at Southwest Sciences and in other laboratories using GaAlAs or InGaAsP diode lasers in the visible or near-infrared as well as lead-salt lasers in the mid-infrared spectral region. Because these lasers exhibit essentially no source noise at the high detection frequencies employed with this technique, the achievement of sensitivity approaching the detector shot noise limit is possible.

Kane, Daniel J.↗

Explicit Dynamic Impact Analysis of the Building 3525 Packages

This report describes the methodology used for the safety basis analysis of the Building (Bldg.) 3525 casks and presents preliminary results for a selected geometry. The specific problem analyzed is a free fall load case onto an unyielding target at various orientations. The various orientations were analyzed to ensure that the packages were subjected to the orientation that causes the most damage. The analysis approach, material modeling, finite element modeling, and results for the selected case are presented, along with a brief discussion of conservatism and uncertainties. The results for the analyzed load cases show that through selected administrative controls, no breach of the container or loss of shielding will occur in the package.

42 ENGINEERING↗

Dynamic Structural Fault Detection and Identification

Aircraft structures are designed to guarantee safety of flight in some required operational envelope. When the aircraft becomes structurally impaired, safety of flight may not be guaranteed within that previously safe operational envelope. In this case the safe operational envelope must be redefined in-flight and a means to prevent excursion from this new envelope must be implemented. A specific structural failure mode that may result in a reduced safe operating envelope, the exceedance of which could lead to catastrophic structural failure of the aircraft, will be addressed. The goal of the DFEAP program is the detection of this failure mode coupled with flight controls adaptation to limit critical loads in the damaged aircraft structure. The DFEAP program is working with an F/A-18 aircraft model. The composite wing skins are bonded to metallic spars in the wing substructure. Over time, it is possible that this bonding can deteriorate due to fatigue. In this case, the ability of the wing spar to transfer loading between the wing skins is reduced. This failure mode can translate to a reduced allowable compressive strain on the wing skin and could lead to catastrophic wing buckling if load limiting of the wing structure is not applied. The DFEAP program will make use of a simplified wing strain model for the healthy aircraft. The outputs of this model will be compared in real-time to onboard strain measurements at several locations on the aircraft wing. A damage condition is declared at a given location when the strain measurements differ sufficiently from the strain model. Parameter identification of the damaged structure wing strain parameters will be employed to provide load limiting control adaptation for the aircraft. This paper will discuss the simplified strain models used in the implementation and their interaction with the strain sensor measurements. Also discussed will be the damage detection and identification schemes employed and the means by which the damaged aircraft parameters will be used to provide load limiting that keeps the aircraft within the safe operational envelope.

Smith, Timothy↗

Multicomponent gas mixture parametric CFD study of condensation heat transfer in small modular reactor system safety

Safety is always the primary concern for designing and analyzing nuclear reactor systems. The requirements for the safety margin for advanced small modular reactor (SMR) systems are targeted even higher than the conventional commercial large-scale nuclear reactors incorporating the passive and inherent safety systems. The SMR systems are designed with the condensation passive containment cooling system (PCCS), which plays a critical role in removing reactor heat during a steam release accident case. However, the presence of non-condensable gas (NCG), like air, reduces the heat transfer performance. This physics phenomenon becomes multifactorial for nuclear reactor containment during a fuel failure accident case that releases hydrogen gas. Besides, the mixture component of steam-air-hydrogen varies in reactor accident cases, which need simulation and validation keeping parameters of importance. Reviews showed that previous studies for SMR’s PCCCS did not cover the condensation heat transfer (CHT) in the presence of multicomponent NCG mixture parametric computational fluid dynamics (CFD) simulation and validation, making a research gap in the SMR design safety. A comprehensive CHT parametric CFD study was performed for SMR PCCS to fill this research gap. This study used experimental data as simulation 3D physics domain inlet and outlet boundary conditions. However, the wall boundary conditions were constant temperature, curve-fit, and annular coolant for verifying the turbulence models. Parametric simulations were performed, verified, and optimized for steam-NCGs mixtures. The multicomponent gases, multiphase mixtures, and fluid film condensation models were applied with associated turbulence models. The results of the parametric study were evaluated for realistic reactor conditions. Results showed that parametric study provided critical insight about the dependency of multicomponent gas mixture parameters that supports reactor safety design, analysis, and licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Performing Numerical Analysis of Cybersecurity Options Using Dynamic Risk Analysis Tool EMRALD

Cyberattacks can have many different attack paths, durations, and goals. There are also many different mitigation options involving hardware, software, and/or humans. Considering a cyber threat should involve defense-in-depth methods and a quantitative or numerical evaluation of overall effectiveness against dynamic, time-dependent attacks to make cost and risk-informed decisions. Typical cyberattack modeling methods only provide a qualitative evaluation. The main areas of cybersecurity are confidentiality, integrity, and availability. For companies with cyber-physical systems such as advanced nuclear reactors, cyber-related safety is a requirement set by North American Electric Reliability and the U.S. Nuclear Regulatory Commission. They are also concerned about availability or reliability as a business case. As cyber threats are evolving to a business-for-hire structure, more attacks may focus on disrupting business success and reliability, causing financial and economic stability risk. Companies want to know business reliability and recovery from those threats, and that requires modeling physical behavior of the targets. Dynamic-state-based and Markov-based modeling provides a method for better cyber scenario modeling with different tools having issues such as state-base explosion. Dynamic modeling enables time and conditional features not found in other numerical evaluation methods. EMRALD (Event Modeling Risk Assessment using Lined Diagrams) is a dynamic risk analysis modeling and simulation tool and has features that reduce modeling issues. It has been used to model different time-dependent events including plant behavior and operator procedures. As a general modeling tool, EMRALD can also be used to model cyberattack scenarios with varying mitigation options and quantify effectiveness, producing numerical data for risk-informed decisions. This paper uses EMRALD to demonstrate that dynamic numerical risk analysis can be used for cyber threat modeling to provide insights for design decision-making and optimize defense strategies. Keywords: cyber modeling; cyber-physical systems; numerical cyber modeling

97 - MATHEMATICS AND COMPUTING↗

Aeroelastic Stability Assessment Methodology and Application to Slat Noise Treatments on the High-Lift Common Research Model

This work supports a larger effort at NASA to reduce airframe noise and, thus, environmental noise around airports. The leading-edge slat of conventional high-lift systems is a prominent source of airframe noise, and two technologies were previously identified as promising for noise reduction without significant aerodynamic or weight penalty: the slat cove filler (SCF) and the slat gap filler (SGF). NASA fabricated a 10%-scale semispan aircraft model for wind tunnel testing based upon the High-Lift Common Research Model (CRM-HL). NASA embarked on a test campaign with the 10% CRM-HL to determine the noise reduction effectiveness and other performance metrics of 3D SCF and SGF treatments in flow conditions representative of flight. The highly flexible SCF and SGF treatments posed a risk to the model and aeroelastic instability would compromise research integrity, so aeroelastic stability assessment was required. This work briefly describes the 10% CRM-HL, design of the SCF and SGF treatments to the model, and supporting fluid structure interaction (FSI) research. Relations for static and dynamic aeroelastic similitude are then developed for convenience of reference, and simplifications are introduced of particular utility to the cases considered in this study. The similitude relations are employed to assess the stability of the treatments under wind tunnel flow conditions based upon known behaviors from the supporting research. It is shown that the treatments are safe for test under the anticipated wind tunnel flow conditions with significant margins/factors of safety. It is furthermore demonstrated that the SCF is more susceptible to aeroelastic instability than the SGF, which has implications for flight feasibility.

Similitude↗

Evaluation of AI-enabled Digital Documented Safety Analysis

The National Reactor Innovation Center (NRIC) is leading a transformative initiative to accelerate advanced reactor deployment by fundamentally reimagining how nuclear safety basis documentation is developed, reviewed, and maintained. Traditional Documented Safety Analysis (DSA) processes for DOE-authorized facilities rely on static, document-centric workflows that consume significant time and resources, exemplified by recent major licensing efforts requiring hundreds of thousands of staff hours and millions of pages of documentation review. These conventional approaches create barriers to the rapid, cost-effective deployment of advanced reactors that America's future energy needs demand. NRIC's DOE Authorization Digital Transformation Project addresses these challenges through an innovative framework that integrates artificial intelligence (AI), digital engineering, and systems-based data management into a cohesive digital ecosystem. This white paper presents NRIC's methodology for evaluating AI-enabled document generation capabilities within this broader digital infrastructure, using the Demonstration of Microreactor Experiments (DOME) facility as a pilot case study. The evaluation will assess an AI tool's ability to generate a Preliminary Documented Safety Analysis (PDSA) through progressive integration stages—from standalone document processing to full digital thread connectivity—while maintaining rigorous verification, validation, and regulatory acceptance standards. By establishing dynamic, traceable connections between design data and safety documentation, NRIC's approach has the potential to reduce both document development time and regulatory review cycles by as much as 50%, while simultaneously improving accuracy, consistency, and traceability. This initiative represents a critical step toward establishing reusable digital infrastructure that reactor developers can leverage to accelerate their path from concept to commercial operation, directly supporting NRIC's mission to demonstrate and deploy advanced nuclear energy technologies.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

PSA 2025 DPRA for Cyber Optimization

Cyberattacks can have many different attack paths, durations, and goals. There are also many different mitigation options involving hardware, software, and/or humans. Evaluating defense options should include quantitative evaluation of overall effectiveness to make cost and risk-informed decisions. Typical cyberattack modeling methods only provide a qualitative evaluation and have difficulty with time dependent scenarios. The main areas of cybersecurity are confidentiality, integrity, and availability. For companies with cyber-physical systems such as advanced nuclear reactors, cyber-related integrity is a requirement set by the U.S. Nuclear Regulatory Commission. But companies are also concerned about availability or reliability as a business case. As cyber threats are evolving to a business-for-hire structure, more attacks focus on disrupting business success and reliability, causing financial and economic stability risk. Companies want reliability analysis while optimizing cost, which requires more than safety modeling methods. Dynamic-state-based and Markov-based modeling provides a method for better cyber scenario modeling with timing and conditional features not found in other numerical evaluation methods. EMRALD (Event Modeling Risk Assessment using Lined Diagrams) is a dynamic risk analysis modeling and simulation tool and has features that reduce modeling issues such as state-base explosion found in Markov-based tools. It has been used to model different time-dependent events including plant behavior and operator procedures. As a general modeling tool, EMRALD can also be used to model cyberattack scenarios with varying mitigation options and quantify effectiveness, producing numerical data for risk-informed decisions. This paper uses EMRALD to demonstrate that dynamic risk analysis can be used for cyber threat modeling to provide insights for design decision-making and optimize defense strategies.

97 - MATHEMATICS AND COMPUTING↗

Support for Reactor Operators in Case of Cyber-Security Threats (NEUP Final Report)

Increasing use of digital technology in nuclear power plants (NPPs) poses cyber-security as a crucial threat to public safety and to continuous energy production. Cyber-security risks are comprised of complex known and unknown interactions between various entities, system vulnerabilities, network protocols, human users and malicious attacks. There is little understanding or research geared towards plant operators’ response under cyber-security threats and operational procedures to cope with such threats. This is particularly critical when a cyber-security event masquerades as a safety incident or an evolving accident. Instead of leading operators to the remediation of the accident, the masked cyber event may lead them to circumvent the safety mechanisms of the plant. Given these challenges, the objective of this project is to develop a tool to characterize abnormal NPP events as “cyber” or “safety” incidents, and to further develop this tool as a real-time operator aid to assist in response to the incident. This NEUP Final Report summarizes the research efforts towards the above goals and the results in the following three aspects. First, a methodology for classifying abnormal NPP events as cyber-attacks or safety incidents was developed. This provides the basis for responding to potential cyber-attacks. In this methodology, the causal relationships between various variables (i.e., physical variables, network variables, and control variables) for a nuclear system under consideration are modeled using dynamic Bayesian networks. Based on observations of certain variables (i.e., the evidence), inference is performed to identify the state of hidden variables, which helps indicate the occurrence of cyber-attacks or safety incidents. The proposed methodology was applied to the full scope NPP simulator system at The Ohio State University as a case study. The result shows that the proposed methodology is capable of distinguishing between cyber-attacks and safety incidents. Second, a game-theoretic approach for responding to cyber-attacks on nuclear power plants was developed. This is the second major goal of the project, and the method is used to recommend optimal responses to reactor operators in the case of cyber-attacks. We consider two cases in this research. In the first case, the interaction between the defender (i.e., the reactor operator) and the attacker is modeled as a two-player, nonzero-sum, Markov game with an infinite time horizon. In the second case, we consider a semi-Markov game between the defender and the attacker within a finite time horizon. The model in the second case enables us to consider the time sensitive response of the defender. In each case, the method for deriving the Nash equilibrium is developed. The Nash Equilibrium of the game provides the valid prediction of both players’ actions because no single player can benefit from unilaterally deviating from the equilibrium policy if the other player adheres to his/hers, hence it provides the best response of the defender to cyber-attacks. The proposed method in each case is demonstrated through a simplified benchmark digital feedwater control system. Third, a prototype display is developed to integrate the above information. The prototype display depicts the communication information to the operator and incorporates the cyber-security tool developed by the team into the interface. It consists of the regular display in current control rooms, as well as a panel used to indicate the occurrence of cyber-attacks or safety events and a panel used to guide the operator’s response to detected cyber-attacks.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

The importance of cycle-by-cycle data in performing rapid battery technology development and validation

Lithium-ion battery (LiB) technology is playing a crucial role in transforming the predominantly fossil fuel-based transportation and stationary storage sectors to achieve a low-carbon economy. Rapid innovation in the LiB materials to electrode to cell design is happening to satisfy the performance, life, and safety metrics required by those myriads of applications. Lately, advanced analytics, such as machine-learning or artificial intelligence (ML/AI) techniques, are being used more frequently to aid in expedited LiB technology development, performance validation, and life prediction. The success of these techniques often relies on a large volume of well-defined and high-quality battery test data. On the other hand, most battery developers and research and development (R&D) communities are still following a classical approach to develop batteries, which is running calendar- and/or cycle-aging tests, performing reference performance tests (RPTs), and conducting post-mortem analyses periodically without paying attention to the wealth of data often not collected during the calendar or cycle life aging tests. This sparse data collection approach is time- and resource-intensive, requiring data capture and evaluation of months to years of RPT data to diagnose accurate battery state of performance, health, and safety. Even so, the underlying aging modes and mechanisms can be missed. If collected properly, battery test data during cycling or calendaring can be efficiently combined with ML/AI techniques to create powerful tools in the rapid diagnosis of battery state of performance, health, and safety along with insights into underlying aging modes and mechanisms. In this report, we discuss the importance of effective cycle-by-cycle (CBC) data collection with example case studies. Within a reasonable timeframe, RPT data are often inadequate in capturing many of the crucial battery aging dynamics, which often predominantly show up in CBC test data. Finally, we also show examples of ML/AI techniques that use CBC data in rapid diagnosis and projection of LiB state of health (SOH) to motivate the scientific community in collecting and using CBC data to facilitate expeditious technology development and validation.

25 ENERGY STORAGE↗

Reactivity initiated accident uncertainty quantification for fuel assembly with subchannel code

UNIST CORE lab has developed a multiphysics coupling framework (MPCORE) consisting of Neutronics, Thermal Hydraulics and Fuel Performance modules. It can accommodate one-dimensional as well as sub-channel code Thermal Hydraulics (TH) module. Generally, running a transient requires more computational power due to the convergence of modules with each other. The difference between one-dimensional and sub-channel TH modules is studied in this research for a Reactivity Initiated Accident (RIA). Both TH modules are compared for a RIA uncertainty propagation in a single VERA fuel assembly with 2.11% enrichment. MPCORE is capable of analyzing the transient at any burnup point but for current work, only fresh fuel has been considered. The results have been obtained using dynamic gap heat conductance in FRAPTRAN. Peak centerline temperature, fuel enthalpy and DNBR are compared for both the approaches. The results indicate that the use of sub-channel code lead to greater safety margin for critical parameters. Computation time comparison is also presented for both the cases. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗