SEARCH · Search NASA

Results for “Probabilistic risk”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20

All sources NASA NTRS DOE OSTI

DOE OSTI2022

Evaluation of Physical Security Risk for Potential Implementation of FLEX using Dynamic Simulation Methods

The requirements for United States nuclear power plants to maintain a large onsite physical security force contribute to their large operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability Program Physical Security Pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. This pathway will analyze and minimize the conservatisms built into current security postures in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within this pathway has successfully developed a dynamic force-on-force (FOF) modeling framework using various computer simulation tools and integrated them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an overview of lessons learned in applying a dynamic computational framework that links results from a commercially available FOF simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework. Previous reports described how a user could integrate their plant-specific FOF models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as Computer Aided Fault Tree Analysis System or Systems Analysis Programs for Hands-on Integrated Reliability Evaluations, and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance of the use of the framework. Such an assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants. NOTE: The work performed in this report is based on a generic EMRALD model with actual plant data used for the analysis. However, only the generic model and general results of the analysis are in the report. No plant’s sensitive information is discussed in this report. The discussion shows examples of insights that can be obtained from the MASS-DEF methodology.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

Summary of Technical Peer Review on the Risk Assessment Framework proposed in Report INL/RPT-22-68656 for Digital Instrumentation and Control Systems

This report summarizes the peer review activities initiated by Idaho National Laboratory (INL) during fiscal year (FY) 2023 for the evaluation and improvement of the methodology developed under the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective and secure DI&C technologies for digital upgrades/designs. A framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk-informed capability to quantitatively and accurately estimate the risk impact of plant modernization, considering the introduction of high safety-significant safety-related (HSSSR) DI&C systems, (2) support and supplement existing risk-informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of HSSSR DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. The R&D efforts of this project from FY 2019 through FY 2022 were focused on methodology improvement and demonstration of the proposed framework for the risk assessment and design optimization of safety-critical DI&C systems. Collaborations with the nuclear industry have been initiated to support the reliability and risk assessment of their DI&C systems by using the proposed framework. In FY 2023, the framework has reached to a point for a technical peer review and obtain stakeholder feedback. This peer review activity includes coordination of the reviews performed by a group of industry stakeholders, documentation of the peer review suggestions, providing resolutions and responses to the peer review comments. The objective of this technical peer review is to obtain representative feedback on the proposed framework to improve the technical qualities of its methodology and readiness for deployment to the industry. Feedback may identify potential areas for improvement and further development. The Subject Matter experts were invited to review the latest project report documenting the methodology developed in the project and provide evaluations of the technical qualities of the proposed framework and relevant methods. The reviewed project report is “An Integrated Framework for Risk Assessment of High Safety-significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology and Demonstration” INL/RPT-22-68656 (short as “INL/RPT-22-68656” in this report). This peer review report documents the technical questions provided for technical peer review and introduces the technical peer reviewers from the stakeholders including nuclear utilities, regulators, and universities. Comments from technical peer reviewers and the resolutions and responses to these comments are outlined. Insights and lessons learned from the technical peer review are summarized in conclusions and future work. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2023

Plant-specific Model and Data Analysis using Dynamic Security Modeling and Simulation

The requirements for U.S. nuclear power plants to maintain a large on-site physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an update on the progress in applying a dynamic computational framework that links results from a commercially available force-on-force simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework or MASS-DEF. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report does not contain any plant's sensitive information and/or Safeguards Information. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2026

Validating a Dynamic PWR Safety and Security Model?

Nuclear power plants (NPPs) are assessed for safety and security using separate models that cannot capture how an attacker's decisions and a plant's response unfold together in real time, leaving regulators and operators without a complete picture of true plant vulnerability. Traditional probabilistic risk assessment (PRA) methods treat adversarial events as fixed initiators with predetermined outcomes, and are structurally incapable of representing the time-dependent interplay between physical security events, safety system response, and operator mitigative actions. At Idaho National Laboratory (INL), I contributed to the development and validation of Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF). Where static PRA relies on event-tree logic that cannot evolve mid-scenario, MASS-DEF couples a time-dependent dynamic PRA tool EMRALD (Event Modeling Risk Assessment using Linked Diagrams) with attack simulation software, allowing attacker behavior, plant system states, and operator actions to interact across time. My work focused on validating a general Pressurized Water Reactor (PWR) model. I traced model logic against PWR plant to identified errors in logic and confirm accuracy. I then built and tested attack scenarios against a general PWR model to verify that the model produced expected outcomes across all logical pathways. I also contributed a section to a related technical paper applying the same EMRALD platform to radiation dose modeling. Results show that MASS-DEF can quantitatively demonstrate that many plants exceed their regulatory security thresholds. This demonstrated margin provides a technically defensible basis for reducing the number of guards without compromising regulatory compliance. Physical security costs represent roughly 10% of annual operating budgets, making such reductions directly meaningful to INL's mission of sustaining existing commercial NPPs. This internship strengthened my understanding of nuclear systems, probabilistic modeling, and technical writing, and has solidified my pursuit of a career at a national laboratory.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

NASA NTRSDate not supplied

Supply and Resource Management to Progressively Enable EIMO

BACKGROUND: Current medical operations in Low Earth Orbit (LEO) allow for real-time audio-video communication with a flight surgeon at mission control, resupply, and medical evacuation to earth on the order of hours. As mission profiles change from LEO to the Moon, Mars, and beyond, medical risk as a contribution to overall mission risk is anticipated to rise substantially. Concurrently, due to the distance, the medical systems on board vehicles proposed for these mission types are expected to have reduced mass and volume allocation. Together, astronaut crews will be at a higher risk of major medical events, be required to perform a broader set of tasks, and have substantially reduced resources and support to do so. Earth Independent Medical Operations (EIMO) aims to identify and fill the gaps present in this progressively changing paradigm. OVERVIEW: Medical supplies, resources, and skills are central to spaceflight medical systems. Vehicles used for non-LEO missions are anticipated to be smaller and thus the medical system will also need to have reduced mass, volume, and power. Medical resources are another form of consumable and may need resupply or pre-deployment to meet crew needs. One particular concern is the degradation of medications which become less efficacious and potentially toxic with time, particularly given environmental conditions such as temperature, humidity, oxygen, and radiation which have not yet been fully studied. Supply and resource management in LEO is dependent on resupply, however the supply chain of transporting equipment does not yet have a clear infrastructure for missions beyond LEO. DISCUSSION: EIMO is intended to systemically identify and fill these gaps with forward-looking solutions. In mission monitoring of resources with technology like RFID, improving medical resource longevity, targeted resupply and careful pre-mission planning will be central to facilitate crew health and performance. One approach to optimizing resources is the Informing Mission Planning via Analysis of Complex Tradespaces (IMPACT) tool, which uses probabilistic risk assessment (PRA) to quantitatively predict medical risk and identify resources and skills that mitigate this risk. This evidence based, quantitative analysis prediction tool and several other approaches to meeting the challenge of supply and resource management are discussed.

Arian Anderson↗

NASA NTRSDate not supplied

Assessing Crew Medical Officer Preparedness for International Space Station Missions

INTRODUCTION Astronaut crew medical officers (CMO) undergo additional, specialized training to provide medical support onboard the International Space Station (ISS). CMO training focuses on utilizing resources on-station and optimizing communication with ground-based expertise to manage both common minor conditions as well as emergency/trauma situations. As NASA moves towards future Artemis and exploration class missions, we sought CMO perspectives on past, present, and future CMO training and medical resourcing to help inform mission planners regarding medical risk mitigation considerations. We present an interview-based qualitative assessment of CMO preparedness for the International Space Station with the aim to help iterate future training flows for Low Earth Orbit, Artemis, and exploration-class missions. METHODS A semi-structured interview tool was developed to assess CMO experience and their recommendations for future mission training considerations. Participants were recruited from former or current US astronauts who were designated as CMO and subsequently flew to the International Space Station. 10 former CMOs took part in the study. Interview transcripts were deidentified and evaluated for qualitative thematic analysis by two independent coders with NVivo Software suite (Lumivero, Denver, CO), and emergent themes were compiled. RESULTS Former CMO crew expressed appropriate preparedness for current ISS medical capabilities and requirements. They identified the role of the CMO as serving as a healthcare extender to ground-based flight surgeons for ISS and other LEO missions. Individuals with prior medical experience were preferred though not felt to be necessary for LEO missions. For exploration class missions with limitations in ground communication, a physician-as-CMO and more rigorous training curricula for both the CMO and astronaut crew were desired. DISCUSSION Former NASA astronaut crew were interviewed to retrospectively assess their preparedness as ISS crew medical officers and hypothesize future medical knowledge, skill, and ability needs. Along with medical operations subject matter expert opinion and advanced probabilistic risk assessment modeling, past CMO experience can help inform future CMO training considerations and responsibilities for future Artemis and exploration class missions.

M A Labarbera↗

NASA NTRS2014

Application of Fault Management Theory to the Quantitative Selection of a Launch Vehicle Abort Trigger Suite

The theory of System Health Management (SHM) and of its operational subset Fault Management (FM) states that FM is implemented as a "meta" control loop, known as an FM Control Loop (FMCL). The FMCL detects that all or part of a system is now failed, or in the future will fail (that is, cannot be controlled within acceptable limits to achieve its objectives), and takes a control action (a response) to return the system to a controllable state. In terms of control theory, the effectiveness of each FMCL is estimated based on its ability to correctly estimate the system state, and on the speed of its response to the current or impending failure effects. This paper describes how this theory has been successfully applied on the National Aeronautics and Space Administration's (NASA) Space Launch System (SLS) Program to quantitatively estimate the effectiveness of proposed abort triggers so as to select the most effective suite to protect the astronauts from catastrophic failure of the SLS. The premise behind this process is to be able to quantitatively provide the value versus risk trade‐off for any given abort trigger, allowing decision makers to make more informed decisions. All current and planned crewed launch vehicles have some form of vehicle health management system integrated with an emergency launch abort system to ensure crew safety. While the design can vary, the underlying principle is the same: detect imminent catastrophic vehicle failure, initiate launch abort, and extract the crew to safety. Abort triggers are the detection mechanisms that identify that a catastrophic launch vehicle failure is occurring or is imminent and cause the initiation of a notification to the crew vehicle that the escape system must be activated. While ensuring that the abort triggers provide this function, designers must also ensure that the abort triggers do not signal that a catastrophic failure is imminent when in fact the launch vehicle can successfully achieve orbit. That is, the abort triggers must have low false negative rates to be sure that real crew‐threatening failures are detected, and also low false positive rates to ensure that the crew does not abort from non‐crew‐threatening launch vehicle behaviors. The analysis process described in this paper is a compilation of over six years of lessons learned and refinements from experiences developing abort triggers for NASA's Constellation Program (Ares I Project) and the SLS Program, as well as the simultaneous development of SHM/FM theory. The paper will describe the abort analysis concepts and process, developed in conjunction with SLS Safety and Mission Assurance (S&MA) to define a common set of mission phase, failure scenario, and Loss of Mission Environment (LOME) combinations upon which the SLS Loss of Mission (LOM) Probabilistic Risk Assessment (PRA) models are built. This abort analysis also requires strong coordination with the Multi‐Purpose Crew Vehicle (MPCV) and SLS Structures and Environments (STE) to formulate a series of abortability tables that encapsulate explosion dynamics over the ascent mission phase. The design and assessment of abort conditions and triggers to estimate their Loss of Crew (LOC) Benefits also requires in‐depth integration with other groups, including Avionics, Guidance, Navigation and Control(GN&C), the Crew Office, Mission Operations, and Ground Systems. The outputs of this analysis are a critical input to SLS S&MA's LOC PRA models. The process described here may well be the first full quantitative application of SHM/FM theory to the selection of a sensor suite for any aerospace system.

Lo, Yunnhon↗

NASA NTRSDate not supplied

Summary of Technical Interchange Meetings (TIMs) Designed to Enable Earth Independent Medical Operations (EIMO)

The Exploration Medical Capability Element (ExMC) in NASA’s Human Research Program hosted a series of TIMs in 2023-2024 designed to stimulate discussion around specific topics with the goal of enabling EIMO. In context of the thematic constituent elements of EIMO, namely pre-mission planning, acute/emergent/prolonged medical decision making, supply/resource management and task load management, subject matter experts from industry, academia and government (NASA and other Agencies) provided valuable and actionable guidance and recommendations. Earth-based medical experts will remain indispensable for pre-mission planning, however, management of acute/emergent medical contingencies will require a gradual transition of medical care and decision making from terrestrial to space-based assets to enable support of astronaut health and performance and reduce overall mission risk. Key to achieving these enhancements is providing an integrated data system platform capable of utilizing multiple data streams in concert with a variety of on-board databases and passive monitoring of video and wearable sensors to enable a multi-modal, agentic AI-based clinical decision support system (CDSS) to support crew medical officer (CMO) medical decision-making. The EIMO series of TIMs (I-V) have proven to be instructive and portend a significant paradigm shift will be necessary to maintain crew health and performance on exploration class missions. Importantly, since the expected paradigm shift will be significantly different from the methods of operation that have been employed for the majority of missions from the inception of human spaceflight to date, any proposed methods must be deployed in the setting of ongoing operations early and be “tested, reviewed and practiced” while reliable back-up is available to facilitate an Enterprise-wide level of comfort and acceptance. Serious constraints on data transmission coupled with a large and expanding universe of on-board medical informatics data streams will necessitate implementation of a CDSS to supplant the current reliance on support provided by ground-based SMEs. Establishment of trust in the system by CMO/crew and the ground-based medical support team will be essential. Co-development of a CDSS with industry partners will assure that state of the art tools can be employed, and industry efficiencies can be leveraged. Training regimens, materials and tools must evolve to be responsive (just-in-time training) and facilitate autonomous execution of procedures. Proficiency metrics should be established and be based on validated competencies or milestones as opposed to a prescribed number of training hours. Training should be prioritized for broad, translatable skills that have universal application across a variety of medical conditions. Repetition was deemed to be the key to achieving proficiency and emphasis should lie in procedural training which is known to extinguish more rapidly than diagnostic skills. Advanced tools, e.g., extended reality, can provide more realistic and effective training. Use of advanced probabilistic risk assessment tools will be essential to optimize the medical system capability while carefully balancing risk relative to mass/power/volume limitations. Importance of factoring use-life of medical supplies and maintaining awareness of redundancy and opportunity to re-purpose under off nominal situations was emphasized. Consideration of adopting optimized performance standards vs. “good-enough” performance thresholds is warranted. The use of legacy systems as opposed to creating new systems may be preferable. Managing task load and associated cognitive load will be essential to maintain operational safety and behavioral health. ExMC aspires to create a shared EIMO paradigm and strategic vision for advancing medical system design through novel technologies, training, protocols, and support capabilities, built upon the spirit of successful strategies and innovations over the past six decades of space medicine operations.

Jay Lemery↗

DOE OSTI2022

A framework to implement human reliability analysis during early design stages of advanced reactors

Nuclear power plants require human actions throughout their lifecycle from design, construction, operation, and decommissioning. However, for advanced reactors (e.g., Generation IV), the reliance on human intervention in safety-related actions is expected to be reduced or completely replaced by automated actions. The Probabilistic Risk Assessment (PRA) Standard for Advanced Non-LWR Nuclear Power Plants requires that the impacts of all operator actions are captured and incorporated in the risk of the modeled plant. Moreover, the Modernization of Technical Requirements for Licensing Advanced Reactors requires human reliability analysis (HRA) to be included throughout all design and PRA development stages. However, due to the lack of details during the early design stages, HRA is often postponed until the design is mature enough. Conducting HRA in later design stages, though it may be adequate in capturing pre-, at-, and post-initiators comes short of informing the design itself in the iterative design lifecycle. Hence, this paper presents a framework to include HRA during the design's early stages, pre-conceptual or conceptual. The proposed framework provides a process for the removal of operator actions that do not contribute to the risk and the identification of all key operator actions that are critical to the safety of the design. The results of this framework are then used to inform the design of those safety-related operator actions to update the design further. Then, using information from the updated design, this framework can be reapplied to investigate the impact of the design update on human reliability. The PRA model of the X-energy's pre-conceptual Xe-100 high-temperature gas-cooled pebble-bed reactor (HTGR-PB) design is used to demonstrate the approach. In the pre-conceptual Xe-100 PRA model, also called Phase 0 PRA model, human actions were considered an integral part of analyzing the plant response to different initiating events. Hence, in this paper, all possible human actions in the Xe-100 PRA model are identified, analyzed, and removed to emulate a design relying only on the available automated control systems. The preliminary results of this assessment show how safe the Xe-100 design is even without crediting any human actions. The results also list necessary sequences in which operator actions are critical to the risk profile of the design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

The research challenges in security and safeguards for nuclear fission batteries

This paper discusses the nuclear security and safeguards research challenges presented by the development and deployment of nuclear fission batteries. These are defined as easily transportable and deployable nuclear systems which are designed to operate either unattended or autonomously. We start by defining the current landscape of domestic and international safeguards and security and discuss how it can be affected by the introduction these new nuclear systems. We then specifically discuss the technology gaps and technologies to be developed to facilitate their practical deployment. We find that, as expected, we can leverage conclusions from existing security and safeguards studies for small modular rectors and develop bespoke target set analyses to inform security postures based on probabilistic risk assessment. We find also that specific fission battery security economic analysis tools are needed and security by design must be applied early. However, the most important finding is that these new systems will require a new comprehensive set of cyber tools covering transportation, installation, operation, maintenance security of the fission battery systems. Altogether, we find that the development of the necessary security and safeguards requirements at the design phase of such a technology will be of great benefit in the smooth deployment of this modern nuclear energy system.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2020

Analytical Solutions for Seismic Fluid-Structure Interaction of Head-Supported Cylindrical Tanks

Fluid-structure interaction (FSI) of earthquake shaking is a design consideration in the civil, nuclear, chemical, and mechanical industries. Preliminary sizing of structures and components in these industries will often use analytical solutions because there is insufficient information to warrant the analysis of numerical models. Here, this study extends prior analytical work on seismic FSI of base-supported tanks in the 1980s to accommodate head-supported tanks with geometries similar to those proposed for new-build, liquid (fluid)-filled, advanced reactors. Analytical solutions are derived for flexible, head-supported, cylindrical tanks subjected to small-amplitude, unidirectional, horizontal seismic motion, and address frequencies of lateral motions of the tank, hydrodynamic pressures, frequencies of waves, wave heights, and reactions at the head support. Solutions are presented for a range of tank dimensions and could be used for a) preliminary design of head-supported cylindrical tanks and their supporting structures with idealized seismic input, and b) verification of numerical models to be used for final seismic analysis, design, and probabilistic risk assessment.

42 ENGINEERING↗

DOE OSTI2020

Dynamic PRA-Based Estimation of PWR Coping Time Using a Surrogate Model for Accident Tolerant Fuel

In this study, we propose an interpolation-based response surface surrogate methodology to manage a large number of scenarios in dynamic probabilistic risk assessment. It adopts the shape Dynamic Time Warping algorithm to cluster the interpolation neighborhood from time series sample data. The interpolation method was adapted from Taylor Kriging to allow a reduced-order model of the Taylor series. In order to demonstrate its applicability to complex issues in risk assessment for nuclear engineering, an example risk response surface to estimate emergency core cooling system (ECCS) criteria for triplex silicon carbide (SiC) accident-tolerant fuel was constructed. The response surface was exploited to estimate the cumulative failure probability of the fuel cladding structure due to the uncertainties in operator actions and safety systems. The functional failures were assessed based on a combination of individual layer failures computed by coupling Risk Analysis Virtual Environment software with a pressurized water reactor 1000-MW(electric) RELAP5 model and the in-house fuel performance assessment module. Results showed that SiC cladding failure probability spiked less than 1 min after a large-break loss-of- coolant accident whenever the current ECCS criteria for Zircaloy-4 (Zr-4) cladding was used. However, it still provides an increased safety margin of three orders of magnitude compared to Zr-4. This positive margin could be utilized to relax active ECCS requirements by allowing deviations of up to 450 s in its actuation time. The proposed surrogate methodology generated a response surface of SiC cladding failure probability reasonably well, with a significant savings of computation time. This methodology is expected to be useful in the analysis of system response with complex uncertainty sources.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2025

Hierarchical Estimation For Planetary Protection

The software uses Bayes' theorem to describe the probability of an event based on prior knowledge of conditions that might be related to the event. The purpose of Bayesian analysis is to determine posterior probabilities based on prior probabilities where new information can be used in the decision-making process as additional data is gathered. The software will be used in Probabilistic Risk Assessments (PRAs) related to the Europa Clipper mission, which is one of NASA’s top priorities. Ultimately, the mission entails sending the Europa Clipper spacecraft to Jupiter’s Europa moon to orbit the planet and collect data for research and development. Europa is the smallest of the four Galilean moons orbiting Jupiter and is believed by researchers to be the most promising place to look for present-day environments suitable for life. Europa is thought to have an iron core, a rocky mantle, and a salt-water ocean covered by an ice-layered surface.

Gribok, Andrei [Idaho National Laboratory (INL), I↗

DOE OSTI2020

Technical and Licensing Considerations for Micro-Reactors

The U.S. Nuclear Regulatory Commission (NRC) has interacted with vendors pursuing the commercialization of micro-reactors (i.e., reactors capable of producing about 1 MW(th) to 20 MW(th) of energy from nuclear fission). It is envisioned that micro-reactors could be assembled and fueled in a factory and shipped to a site. Many of the sites are expected to be remote locations requiring off-grid power or in some cases military bases. The objective of this effort is to explore the technical issues and the approach required to reach a finding of "reasonable assurance of public health and safety" for this new and different class of reactors. The analysis performed here leverages available micro-reactor design and testing data available from national laboratory experience as well as commercial design information to explore technical issues. Some factors considered include source term, accidents that would need to be analyzed, and the extent of the probabilistic risk assessment (PRA). The technical evaluation was performed within the framework of the Licensing Modernization Project (LMP) to identify licensing basis events, classification of structures, systems and components, and defense-in-depth needed to provide regulatory certainty. With this framework and technical evaluation in mind, the scope and content of a micro-reactor licensing application is discussed.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2020

Enhanced Component Performance Study: Emergency Diesel Generators 1998–2018

This report presents an enhanced performance evaluation of emergency diesel generators (EDGs) at U.S. commercial nuclear power plants. This report evaluates component performance over time using (1) Institute of Nuclear Power Operations (INPO) Consolidated Events Database (ICES) data from 1998 through 2018 and (2) maintenance unavailability (UA) performance data from Mitigating Systems Performance Index (MSPI) Basis Document data from 2002 through 2018. The objective is to show estimates of current failure probabilities and rates related to EDGs, trend these data on an annual basis, determine if the current data are consistent with the probability distributions currently recommended for use in NRC probabilistic risk assessments, show how the reliability data differ for different EDG manufacturers and for EDGs with different ratings; and summarize the subcomponents, causes, detection methods, and recovery associated with each EDG failure mode. Engineering analyses were performed with respect to time period and failure mode without regard to the actual number of EDGs at each plant. The factors analyzed are: sub-component, failure cause, detection method, recovery, manufacturer, and EDG rating. A statistically significant increasing trend was identified in the frequency of FTLR demands for emergency power system (EPS) and high pressure core spray (HPCS) EDGs and a statistically significant decreasing trend was identified in the frequency of run > 1H hours for EPS and HPCS EDGs.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2020

Economic Model for Estimation of GDP Losses in the MACCS Offsite Consequence Analysis Code

The MACCS (MELCOR Accident Consequence Code System) code is the U.S. Nuclear Regulatory Commission (NRC) tool used to perform probabilistic health and economic consequence assessments for atmospheric releases of radionuclides. It is also used by international organizations, both reactor owners and regulators. It is intended and most commonly used for hypothetical accidents that could potentially occur in the future rather than to evaluate past accidents or to provide emergency response during an ongoing accident. It is designed to support probabilistic risk and consequence analyses and is used by the NRC, U.S. nuclear licensees, the Department of Energy, and international vendors, licensees, and regulators. This report describes the modeling framework, implementation, verification, and benchmarking of a GDP-based model for economic losses that has recently been developed as an alternative to the original cost-based economic loss model in MACCS. The GDP-based model has its roots in a code developed by Sandia National Laboratories for the Department of Homeland Security to estimate short-term losses from natural and manmade accidents, called the Regional Economic Accounting analysis tool (REAcct). This model was adapted and modified for MACCS and is now called the Regional Disruption Economic Impact Model (RDEIM). It is based on input-output theory, which is widely used in economic modeling. It accounts for direct losses to a disrupted region affected by an accident, indirect losses to the national economy due to disruption of the supply chain, and induced losses from reduced spending by displaced workers. RDEIM differs from REAcct in its treatment and estimation of indirect loss multipliers, elimination of double counting associated with inter-industry trade in the affected area, and that it is designed to be used to estimate impacts for extended periods that can occur from a major nuclear reactor accident, such as the one that occurred at the Fukushima Daiichi site in Japan. Most input-output models do not account for economic adaptation and recovery, and in this regard RDEIM differs from its parent, REAcct, because it allows for a user-definable national recovery period. Implementation of a recovery period was one of several recommendations made by an independent peer review panel to ensure that RDEIM is state-of-practice. For this and several other reasons, RDEIM differs from REAcct. Both the original and the RDEIM economic loss models account for costs from evacuation and relocation, decontamination, depreciation, and condemnation. Where the original model accounts for an expected rate of return, based on the value of property, that is lost during interdiction, the RDEIM model instead accounts for losses of GDP based on the industrial sectors located within a county. The original model includes costs for disposal of crops and milk that the RDEIM model currently does not, but these costs tend to contribute insignificantly to the overall losses. This document discusses three verification exercises to demonstrate that the RDEIM model is implemented correctly in MACCS. It also describes a benchmark study at five nuclear power plants chosen to represent the spectrum of U.S. commercial sites. The benchmarks provide perspective on the expected differences between the RDEIM and the original cost-based economic loss models. The RDEIM model is shown to consistently predict larger losses than the original model, probably in part because it accounts for national losses by including indirect and induced losses; whereas, the original model only accounts for regional losses. Nonetheless, the RDEIM model predicts losses that are remarkably consistent with the original cost-based model, differing by 16% at most for the five sites combined with three source terms considered in this benchmark.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2020

ADETS User Manual

ADETS (Automated DEpletion Transport System) calculates coupled neutronic/isotopic results for nuclear systems and produces a large number of criticality and burnup results based on various material feed/removal specifications, power(s), and time intervals. ADETS is a fully automated tool that links the LANL MCNP Monte Carlo transport code with the SCALE system, specifically ORIGEN-ARP (radioactive decay and burnup code). Additionally, ADETS can compute the dose at various distances of the reactor using a point gamma source, whose characteristics are computed by ORIGEN-ARP. In addition, ADETS is fully coupled with the Uncertanty Quantification, Probabilistic Risk Assessment, Parameter Optimization and Data Analysis code RAVEN (developed at the Idaho National Laboratory as well). RAVEN is released with ADETS but MCNP and SCALE (ORIGEN-ARP) are not included.

42 ENGINEERING↗

DOE OSTI2021

Analysis of Loss-of-Offsite-Power Events: Update

Loss-of-offsite power (LOOP) can have a negative impact on a nuclear power plant’s ability to achieve and maintain safe shutdown conditions. LOOP event frequencies and times required for subsequent restoration of offsite power are important inputs to plant probabilistic risk assessments. This report presents a statistical and engineering analysis of LOOP frequencies and durations at U.S. commercial nuclear power plants. The data used in this study were based on the operating experience during calendar years 1987–2020, while the most recent 15-year data (i.e., from 2006–2020) were used for most analyses in this report. LOOP events during critical operation that did not result in a reactor trip are not included. Frequencies and durations were determined for four LOOP event categories: plant-centered, switchyard-centered, grid-related, and weather related. Highly significant decreasing trends in the LOOP occurrence rates were identified for All-LOOPs during critical operation (p-value = 0.001) and switchyard-centered LOOPs during critical operation (p-value = 0.002) for the most recent 10-year period (2011–2020). Adverse trends in LOOP durations continue for switchyard-centered LOOPs (p-value = 0.005), All-LOOPs (p-value = 0.019), as well as All-LOOPs during shutdown operation (p-value = 0.003). Statistical tests show the LOOP counts are not uniformly distributed across the 12 months, and variation among the months exists for plant-centered LOOPs (p-value = 0.028), grid-related LOOPs (p-value = 0.021), All-LOOPs (p-value = 0.003), and All-LOOPs during critical operation (p-value = 0.008). The engineering analysis of LOOP data showed for the period of 2006–2020, the equipment failure events were dominated by failures of circuits and relay; human errors have been less frequent and occurred primarily in maintenance; and weather events were dominated by tornadoes and lightning.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗