Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety property”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
NASA NTRS1971

Thermophysical property data and safety information

Precision measurements of the properties of oxygen over a wide range of temperature and pressure are complete. The primary remaining effort, which is in progress, is the representation of these data in the most usable format such as tables, equations, diagrams, and computer programs. In addition, safety data are essential to proper design, operation, and failure analysis. All of the available information on oxygen safety is being reviewed, evaluated and indexed for quick retrieval through the NASA Aerospace Safety Research and Data Institute program. The availability of data, where the major gaps in data occur, and retrieval of bibliographic information are discussed.

Kropschot, R. H.↗
NASA NTRS2004

Synthesizing Safety Conditions for Code Certification Using Meta-Level Programming

In code certification the code consumer publishes a safety policy and the code producer generates a proof that the produced code is in compliance with the published safety policy. In this paper, a novel viewpoint approach towards an implementational re-use oriented framework for code certification is taken. It adopts ingredients from Necula's approach for proof-carrying code, but in this work safety properties can be analyzed on a higher code level than assembly language instructions. It consists of three parts: (1) The specification language is extended to include generic pre-conditions that shall ensure safety at all states that can be reached during program execution. Actual safety requirements can be expressed by providing domain-specific definitions for the generic predicates which act as interface to the environment. (2) The Floyd-Hoare inductive assertion method is refined to obtain proof rules that allow the derivation of the proof obligations in terms of the generic safety predicates. (3) A meta-interpreter is designed and experimentally implemented that enables automatic synthesis of proof obligations for submitted programs by applying the modified Floyd-Hoare rules. The proof obligations have two separate conjuncts, one for functional correctness and another for the generic safety obligations. Proof of the generic obligations, having provided the actual safety definitions as context, ensures domain-specific safety of program execution in a particular environment and is simpler than full program verification.

Eusterbrock, Jutta↗
NASA NTRS2022

Chance-Constrained System Identification of Nonlinear Discrete Systems with Safety and Stability Guarantees

This paper presents a discrete-time nonlinear system identification method while satisfying the stability and safety properties of the system with high probability. An Extreme Learning Machine (ELM) is used with a Gaussian assumption on the function reconstruction error. A quadratically constrained quadratic program (QCQP) is developed with probabilistic safety and stability constraints that are only required to be satisfied at sampled points inside the invariant region. The proposed method is validated using two simulation examples: a two degrees-of-freedom (DoF) robot manipulator with constraints on joint angles whose trajectories are guaranteed to remain inside a safe set and on motion trajectories data of a hand-drawn shape.

Iman Salehi↗
NASA NTRS2013

Final Report - Regulatory Considerations for Adaptive Systems

This report documents the findings of a preliminary research study into new approaches to the software design assurance of adaptive systems. We suggest a methodology to overcome the software validation and verification difficulties posed by the underlying assumption of non-adaptive software in the requirementsbased- testing verification methods in RTCA/DO-178B and C. An analysis of the relevant RTCA/DO-178B and C objectives is presented showing the reasons for the difficulties that arise in showing satisfaction of the objectives and suggested additional means by which they could be satisfied. We suggest that the software design assurance problem for adaptive systems is principally one of developing correct and complete high level requirements and system level constraints that define the necessary system functional and safety properties to assure the safe use of adaptive systems. We show how analytical techniques such as model based design, mathematical modeling and formal or formal-like methods can be used to both validate the high level functional and safety requirements, establish necessary constraints and provide the verification evidence for the satisfaction of requirements and constraints that supplements conventional testing. Finally the report identifies the follow-on research topics needed to implement this methodology.

Wilkinson, Chris↗
DOE OSTI2023

Oxadiazole-based Heterocycles as Building Block for Material Property Control: Design, Synthesis, and Characterization of 3,4-Bis(3-(4-nitro-1,2,5-oxadiazol-3-yl)- 1,2,4-oxadiazol-5-yl)-1,2,5-oxadiazole (LLM-210)

This paper presents an approach to novel oxadiazole-based melt-castable energetic material, LLM-210. Used in pour-in process and 3D printing, melt-castable energetic materials (MCEM) must possess required physical and safety properties of industry-standard energetic materials, also a narrow range of melting point between 80-100 °C. Melting point is difficult to accurately predict, therefore, searching for MCEM is challenging. 3,4-Bis(5-(4-nitro-1,2,5-oxadiazol-3-yl)-1,2,4-oxadiazol3-yl)-1,2,5-oxadiazole (LLM-205), composed of five-oxadiazole rings allied via carbon-carbon bonds, was selected as new MCEM candidate. The target molecule was synthesized and characterized, showing a density of 1.807g/cm3 ; thermal decomposing temperature at 299 °C; and insensitive to external stimuli, but the melting point of 104 °C was out of the rang. Based on the molecular properties and ab initio calculations, 3,4-bis(3-(4-nitro-1,2,5-oxadiazol-3-yl)-1,2,4-oxadiazol-5-yl)- 1,2,5-oxadiazole (LLM-210), an isomer of LLM-205, was designed and synthesized from a different way. LLM-210 was characterized as MCEM, possessing melting point of 87 °C; density of 1.812 g/cm3 ; and exothermally decomposing temperature at 314 °C; being insensitive to external stimuli. In this study, the relationship of molecular structure to properties of LLM-205 and LLM-210 based on the results of Density Functional Theory (DFT) and X-ray crystallographic analysis is also briefly discussed.

Chemistry - Chemical explosives↗
NASA NTRS2006

Safe Use of Hydrogen and Hydrogen Systems

This is a viewgraph presentation that is a course for teaching the safe use of hydrogen. The objectives of the course are 1. To familiarize the student with H2 safety properties 2. To enable the identification, evaluations and addressing of H2 system hazards 3. To teach: a. Safe practices for, b. Design, c. Materials selection, d. H2 system operation, e. Physical principles and empirical observations on which these safe practices are based, f. How to respond to emergency situations involving H2, g How to visualize safety concepts through in-class exercises, h. Identify numerous parameters important to H2 safety.

Maes, Miguel↗
NASA NTRS2004

Assume-Guarantee Verification of Source Code with Design-Level Assumptions

Model checking is an automated technique that can be used to determine whether a system satisfies certain required properties. To address the 'state explosion' problem associated with this technique, we propose to integrate assume-guarantee verification at different phases of system development. During design, developers build abstract behavioral models of the system components and use them to establish key properties of the system. To increase the scalability of model checking at this level, we have developed techniques that automatically decompose the verification task by generating component assumptions for the properties to hold. The design-level artifacts are subsequently used to guide the implementation of the system, but also to enable more efficient reasoning at the source code-level. In particular we propose to use design-level assumptions to similarly decompose the verification of the actual system implementation. We demonstrate our approach on a significant NASA application, where design-level models were used to identify; and correct a safety property violation, and design-level assumptions allowed us to check successfully that the property was presented by the implementation.

Giannakopoulou, Dimitra↗
NASA NTRS2017

Automated Analysis of Stateflow Models

Stateflow is a widely used modeling framework for embedded and cyber physical systems where control software interacts with physical processes. In this work, we present a framework a fully automated safety verification technique for Stateflow models. Our approach is two-folded: (i) we faithfully compile Stateflow models into hierarchical state machines, and (ii) we use automated logic-based verification engine to decide the validity of safety properties. The starting point of our approach is a denotational semantics of State flow. We propose a compilation process using continuation-passing style (CPS) denotational semantics. Our compilation technique preserves the structural and modal behavior of the system. The overall approach is implemented as an open source toolbox that can be integrated into the existing Mathworks Simulink Stateflow modeling framework. We present preliminary experimental evaluations that illustrate the effectiveness of our approach in code generation and safety verification of industrial scale Stateflow models.

Stateflow↗
NASA NTRS2004

Abstraction and Assume-Guarantee Reasoning for Automated Software Verification

Compositional verification and abstraction are the key techniques to address the state explosion problem associated with model checking of concurrent software. A promising compositional approach is to prove properties of a system by checking properties of its components in an assume-guarantee style. This article proposes a framework for performing abstraction and assume-guarantee reasoning of concurrent C code in an incremental and fully automated fashion. The framework uses predicate abstraction to extract and refine finite state models of software and it uses an automata learning algorithm to incrementally construct assumptions for the compositional verification of the abstract models. The framework can be instantiated with different assume-guarantee rules. We have implemented our approach in the COMFORT reasoning framework and we show how COMFORT out-performs several previous software model checking approaches when checking safety properties of non-trivial concurrent programs.

Chaki, S.↗
DOE OSTI2020

Dynamic Response of a Semiactive Suspension System with Hysteretic Nonlinear Energy Sink Based on Random Excitation by means of Computer Simulation

This paper aims to investigate the property and behavior of the hysteretic nonlinear energy sink (HNES) coupled to a half vehicle system which is a nine-degree-of-freedom, nonlinear, and semiactive suspension system in order to improve the ride comfort and increase the stability in shock mitigation by using the computer simulation method. The HNES model is a semiactive suspension device, which comprises the famous Bouc–Wen (B-W) model employed to describe the force produced by both the purely hysteretic spring and linear elastic spring of potentially negative stiffness connected in parallel, for the half vehicle system. Nine nonlinear motion equations of the half vehicle system are derived in terms of the seven displacements and the two dimensionless hysteretic variables, which are integrated numerically by employing the direct time integration method for studying both the variables of vertical displacements, velocities, accelerations, chassis pitch angle, and the ride comfort and driver safety, respectively, based on the bump and random road inputs of the pseudoexcitation method as excitation signal. Simulation results show that, compared with the HNES model and the magnetorheological (MR) model coupled to the half vehicle system, the ride comfort and stability have been evidently improved. A successful validation process has been performed, which indicated that both the ride comfort and driver safety properties of the HNES model coupled to half vehicle significantly improved.

Chen, Hui↗
DOE OSTI2024

Towards Provable Security in Industrial Control Systems Via Dynamic Protocol Attestation

Industrial control systems (ICSs) increasingly rely on digital technologies vulnerable to cyber attacks. Cyber attackers can infiltrate ICSs and execute malicious actions. Individually, each action seems innocuous. But taken together, they cause the system to enter an unsafe state. These attacks have resulted in dramatic consequences such as physical damage, economic loss, and environmental catastrophes. This paper introduces a methodology that restricts actions using protocols. These protocols only allow safe actions to execute. Protocols are written in a domain specific language we have embedded in an interactive theorem prover (ITP). The ITP enables formal, machine-checked proofs to ensure protocols maintain safety properties. We use dynamic attestation to ensure ICSs conform to their protocol even if an adversary compromises a component. Since protocol conformance prevents unsafe actions, the previously mentioned cyber attacks become impossible. We demonstrate the effectiveness of our methodology using an example from the Fischertechnik Industry 4.0 platform. We measure dynamic attestation's impact on latency and throughput. Our approach is a starting point for studying how to combine formal methods and protocol design to thwart attacks intended to cripple ICSs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Effect of lot microstructure variations on detonation performance of the triaminotrinitrobenzene (TATB)-Based insensitive high explosive PBX 9502

PBX 9502 is an important insensitive high explosive due to its combination of safety properties and detonation performance. It is a polymer-bonded formulation consisting of 95 wt.% 1,3,5-triamino-2,4,6-trinitrobenzene (TATB) as the high explosive crystal, bound with Kel F-800 (FK-800), a co-polymer of chlorotrifluoroethylene and vinylidene-fluoride. Two different types are used, one known as virgin that uses only pristine manufactured TATB, and a second known as recycled that has 50 wt.% of its TATB reclaimed from machining scraps of previously pressed virgin PBX 9502. Recycled lots have a higher percentage of fine particles compared to virgin lots, due to the fracturing and damage sustained by TATB crystals during pressing. We examine the influence that this TATB microstructure difference between virgin and recycled PBX 9502 has on detonation performance properties. New rate-stick geometry diameter effect, detonation front shape and cylinder expansion test data are obtained for two previously uncharacterized virgin lots and one recycled lot of PBX 9502. This is combined with previously published data for one virgin and one recycled lot for evaluation purposes. Detonation shock dynamics model calibrations are conducted on each of the five lots to provide an assessment of the detonation timing characteristics of virgin versus recycled PBX 9502 lots. For two of the virgin lots, detonations propagate slower in the rate-stick geometry than those in the two recycled lots. However, the other virgin lot tested has propagation rates comparable to that of the recycled lots for larger diameter rate-sticks. The latter result, though, is shown to be geometry dependent and depends on the range of detonation curvatures accessed in different geometries. New copper-confined, cylinder expansion tests are conducted on each of the three virgin and two recycled lots to obtain detonation product Jones-Wilkins-Lee equations of state, enabling an assessment of the metal push capabilities for each of the five lots. We find that the metal push capabilities, characterized by the evolution of the heat of detonation with volume, are similar between the virgin and recycled lots. Thus, changes in microstructure between different PBX 9502 lots seemingly affect the rate of reaction, but not the overall energy content.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2020

Anion and cation co-doping of Na 4 SnS 4 as sodium superionic conductors

Na based all-solid-state batteries are one of the most promising candidates for large-scale electrochemical energy storage owing to their low cost and outstanding safety properties. The key enabler of this technology is solid electrolyte with sufficiently high ionic conductivity at room temperature. In this work, the design, synthesis, characterization and testing of a series of novel fast Na-ion conductors, Na 4-x-y Sn 1-x A x S 4-y X y with aliovalent cation (P 5+ /Sb 5+ ) and anion substitutions (Cl - /Br - ) of the parent compound Na 4 SnS 4 are reported. The doped samples crystalize in a new phase with space group I4 1 /acd and show ionic conductivities that are one to four orders of magnitude higher than that of undoped Na 4 SnS 4 . R. t. conductivity of 0.64 mS cm -1 is achieved in Na 3.7 Sn 0.8 Sb 0.2 S 3.9 Cl 0.1 with a low activation energy of 0.26 eV. Furthermore, Rietveld refinement against high resolution synchrotron X-ray powder diffraction data reveals that the distribution of the doping ions and the resulted Na vacancies are underlying cause of the enhanced conductivity.

36 MATERIALS SCIENCE↗
DOE OSTI2025

Illinois Storage Corridor CarbonSAFE Phase III: Stakeholder Engagement and Outreach Plan

The Stakeholder Engagement and Outreach Plan provides a comprehensive framework for engaging stakeholders of the Illinois Storage Corridor (ISC) project. The ISC project is a CarbonSAFE Phase III project designed to facilitate commercial deployment of carbon capture, utilization, and storage (CCUS) in Illinois. The project aims to establish a multi-industry carbon storage corridor through development of storage sites near the One Earth Energy (OEE) ethanol production facility in north-central Illinois and the Prairie State Generating Company (PSGC) coal-fired power plant in south-central Illinois, with combined annual CO 2 capture ultimately exceeding 8.6 million tons per year. Stakeholder engagement is recognized as a critical component for successful CCUS deployment, alongside technical and economic considerations. As an emerging technology, CCUS may not be well understood by the general population, and lack of public awareness can lead to opposition that poses significant barriers to project development. This plan addresses this challenge through systematic stakeholder identification, analysis, planning, and implementation of engagement actions. The plan is structured around four main sections: Communication, Stakeholder Analysis, Stakeholder Engagement, and Environmental Justice. Activities will be conducted under Tasks 1 and 4 of the project's Statement of Project Objectives, with two key subtasks: (1) developing a stakeholder analysis and engagement plan through face-to-face meetings, facilitated discussions, and surveys; and (2) implementing stakeholder engagement and public outreach activities including meetings, open houses, and permit hearings. The Illinois State Geological Survey (ISGS) will manage engagement activities following DOE-NETL best practices, focusing on providing objective, fact-based information about CCUS and the ISC project. A comprehensive Communication Plan establishes protocols for media contacts, site visits, and crisis communications. The stakeholder analysis follows a structured workflow process divided into Pre-feasibility and Feasibility phases, incorporating contextual understanding, assessment, data collection, and analysis. Key stakeholder groups include government bodies, educational organizations, conservation and environmental groups, agricultural communities, and religious organizations. The plan addresses common stakeholder questions regarding project risks, benefits, safety, property values, liability, and environmental impacts. Recommendations emphasize developing clear messaging, creating informational materials, and preparing to address both project-specific and broader environmental concerns to ensure transparent communication and build stakeholder support throughout project implementation.

25 ENERGY STORAGE↗
NASA NTRS1978

Alternate working fluids for solar air conditioning applications

An experimental investigation of sixteen different refrigerant-absorbent fluid pairs has been carried out in order to determine their suitability as the working fluid in a solar-powered absorption cycle air conditioner. The criteria used in the initial selection of a refrigerant-absorbent pair included: high affinity (large negative deviation from Raoult's Law), high solubility, low specific heat, low viscosity, stability, corrosive properties, safety, and cost. For practical solar considerations of a fluid pair, refrigerants were selected with low boiling points whereas absorbent fluids were selected with a boiling point considerably above that of the refrigerant. Additional restrictions are determined by the operating temperatures of the absorber and the generator; these temperatures were specified as 100 F (39 C) and 170 F (77 C). Data are presented for a few selected pressures at the specified absorber and generator temperatures.

Evans, R. D.↗
NASA NTRS1989

Multi-version software reliability through fault-avoidance and fault-tolerance

A number of experimental and theoretical issues associated with the practical use of multi-version software to provide run-time tolerance to software faults were investigated. A specialized tool was developed and evaluated for measuring testing coverage for a variety of metrics. The tool was used to collect information on the relationships between software faults and coverage provided by the testing process as measured by different metrics (including data flow metrics). Considerable correlation was found between coverage provided by some higher metrics and the elimination of faults in the code. Back-to-back testing was continued as an efficient mechanism for removal of un-correlated faults, and common-cause faults of variable span. Software reliability estimation methods was also continued based on non-random sampling, and the relationship between software reliability and code coverage provided through testing. New fault tolerance models were formulated. Simulation studies of the Acceptance Voting and Multi-stage Voting algorithms were finished and it was found that these two schemes for software fault tolerance are superior in many respects to some commonly used schemes. Particularly encouraging are the safety properties of the Acceptance testing scheme.

Vouk, Mladen A.↗
NASA NTRS1990

Knowledge-based system verification and validation

The objective of this task is to develop and evaluate a methodology for verification and validation (V&V) of knowledge-based systems (KBS) for space station applications with high reliability requirements. The approach consists of three interrelated tasks. The first task is to evaluate the effectiveness of various validation methods for space station applications. The second task is to recommend requirements for KBS V&V for Space Station Freedom (SSF). The third task is to recommend modifications to the SSF to support the development of KBS using effectiveness software engineering and validation techniques. To accomplish the first task, three complementary techniques will be evaluated: (1) Sensitivity Analysis (Worchester Polytechnic Institute); (2) Formal Verification of Safety Properties (SRI International); and (3) Consistency and Completeness Checking (Lockheed AI Center). During FY89 and FY90, each contractor will independently demonstrate the user of his technique on the fault detection, isolation, and reconfiguration (FDIR) KBS or the manned maneuvering unit (MMU), a rule-based system implemented in LISP. During FY91, the application of each of the techniques to other knowledge representations and KBS architectures will be addressed. After evaluation of the results of the first task and examination of Space Station Freedom V&V requirements for conventional software, a comprehensive KBS V&V methodology will be developed and documented. Development of highly reliable KBS's cannot be accomplished without effective software engineering methods. Using the results of current in-house research to develop and assess software engineering methods for KBS's as well as assessment of techniques being developed elsewhere, an effective software engineering methodology for space station KBS's will be developed, and modification of the SSF to support these tools and methods will be addressed.

Johnson, Sally C.↗
NASA NTRS1995

AP reclamation and reuse in RSRM propellant

A solid propellant ingredient reclamation pilot plant has been evaluated at the Strategic Operations of Thiokol Corporation, located in Brigham City, Utah. The plant produces AP wet cake (95 percent AP, 5 percent water) for recycling at AP vendors. AP has been obtained from two standard propellant binder systems (PBAN and HTPB). Analytical work conducted at Thiokol indicates that the vendor-recrystallized AP meets Space Shuttle propellant specification requirements. Thiokol has processed 1-, 5-, and 600-gallon propellant mixes with the recrystallized AP. Processing, cast, cure, ballistic, mechanical, and safety properties have been evaluated. Phillips Laboratory static-test-fired 70-pound and 800-pound BATES motors. The data indicate that propellant processed with reclaimed AP has nominal properties.

Miks, Kathryn F.↗