Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20

A Distributed Trajectory-Oriented Approach to Managing Traffic Complexity

In order to handle the expected increase in air traffic volume, the next generation air transportation system is moving towards a distributed control architecture, in which ground-based service providers such as controllers and traffic managers and air-based users such as pilots share responsibility for aircraft trajectory generation and management. While its architecture becomes more distributed, the goal of the Air Traffic Management (ATM) system remains to achieve objectives such as maintaining safety and efficiency. It is, therefore, critical to design appropriate control elements to ensure that aircraft and groundbased actions result in achieving these objectives without unduly restricting user-preferred trajectories. This paper presents a trajectory-oriented approach containing two such elements. One is a trajectory flexibility preservation function, by which aircraft plan their trajectories to preserve flexibility to accommodate unforeseen events. And the other is a trajectory constraint minimization function by which ground-based agents, in collaboration with air-based agents, impose just-enough restrictions on trajectories to achieve ATM objectives, such as separation assurance and flow management. The underlying hypothesis is that preserving trajectory flexibility of each individual aircraft naturally achieves the aggregate objective of avoiding excessive traffic complexity, and that trajectory flexibility is increased by minimizing constraints without jeopardizing the intended ATM objectives. The paper presents conceptually how the two functions operate in a distributed control architecture that includes self separation. The paper illustrates the concept through hypothetical scenarios involving conflict resolution and flow management. It presents a functional analysis of the interaction and information flow between the functions. It also presents an analytical framework for defining metrics and developing methods to preserve trajectory flexibility and minimize its constraints. In this framework flexibility is defined in terms of robustness and adaptability to disturbances and the impact of constraints is illustrated through analysis of a trajectory solution space with limited degrees of freedom and in simple constraint situations involving meeting multiple times of arrival and resolving a conflict.

Idris, Husni↗

Opportunities and data requirements for data-driven prognostics and health management in liquid hydrogen storage systems

During the past decade, Prognostics and Health Management (PHM) has become an important set of tools in various areas of industry and academic reliability engineering. PHM consists of a variety of mathematical and computational methods used to support data-driven decision-making to increase the safety, availability, and reliability of complex engineering systems. In particular, PHM can provide crucial insight into reliability and safety design improvements for developing technologies where historical performance and failure data are limited. This is the case of hydrogen fueling and storage technologies. This work presents a high-level approach for designing data-driven PHM applications for bulk liquid hydrogen (LH 2 ) storage systems for hydrogen fueling stations. This paper addresses core aspects of the design, development, and implementation of data-driven PHM applications that can improve the reliability assessment of hydrogen components. The analysis focuses on the relationship between data availability and diagnostic/prognostic capabilities; potential challenges; and integration schemes for current risk mitigation measures. We identify potential condition-monitoring data sources for key components in an LH 2 storage system, including storage tanks, piping, and pumps. Further, we determine that the short-term goals for the implementation of data-driven models in PHM frameworks in hydrogen systems should focus on developing adequate data collection and analysis strategies, as well as exploring the effect on reliability, safety, and regulations for hydrogen systems.

08 HYDROGEN↗

Advanced Reactor Cyber Analysis and Development Environment (ARCADE) for System-Level Design Analysis

Cybersecurity is a persistent concern to the safety and security of Nuclear Power Plants (NPPs), but has lacked data-driven, evidence-based research. Rigorous cybersecurity analysis is critical for the licensing of advanced reactors using a performance-based approach. One tool that enables cybersecurity analysis is modeling and simulation. The nuclear industry makes extensive use of modeling and simulation throughout the decision process but lacks a method to incorporate cybersecurity analysis with existing models. To meet this need, the Advanced Reactor Cyber Analysis and Development Environment (ARCADE) was developed. ARCADE is a suite of publicly available tools that can be used to develop emulations of industrial control system devices and networks and integrate those emulations with physics simulators. This integration of cyber emulations and physics models enables rigorous cyber-physical analysis of cyber-attacks on NPP systems. This report provides an overview of key considerations for using ARCADE with existing physics models and demonstrates ARCADE’s capabilities for cybersecurity analysis. Using a model of the Small Modular Advanced High Temperature Reactor (SmAHTR), ARCADE was able to determine the sensitivity of the primary heat exchangers (PHX) to coordinated cyber-attacks. The analysis determined that while the PHX’s failures cause disruption to the reactor, they did not cause any safety limits to be exceeded because of the plant design, including passive safety features. Further development of ARCADE will enable rigorous, repeatable, and automated cyber-physical analysis of advanced reactor control systems. These efforts will also help reduce regulatory uncertainty by presenting similar types of cybersecurity analyses in a common format, driving standard approaches and reporting.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Model Based Mission Assurance: NASA's Assurance Future

Model Based Systems Engineering (MBSE) is seeing increased application in planning and design of NASA’s missions. This suggests the question: what will be the corresponding practice of Model Based Mission Assurance (MBMA)? Contemporaneously, NASA’s Office of Safety and Mission Assurance (OSMA) is evaluating a new objectives based approach to standards to ensure that the Safety and Mission Assurance disciplines and programs are addressing the challenges of NASA’s changing missions, acquisition and engineering practices, and technology. MBSE is a prominent example of a changing engineering practice. We use NASA’s objectives-based strategy for Reliability and Maintainability as a means to examine how MBSE will affect assurance. We surveyed MBSE literature to look specifically for these affects, and find a variety of them discussed (some are anticipated, some are reported from applications to date). Predominantly these apply to the early stages of design, although there are also extrapolations of how MBSE practices will have benefits for testing phases. As the effort to develop MBMA continues, it will need to clearly and unambiguously establish the roles of uncertainty and risk in the system model. This will enable a variety of uncertainty-based analyses to be performed much more rapidly than ever before and has the promise to increase the integration of CRM (Continuous Risk Management) and PRA (Probabilistic Risk Analyses) even more fully into the project development life cycle. Various views and viewpoints will be required for assurance disciplines, and an over-arching viewpoint will then be able to more completely characterize the state of the project/program as well as (possibly) enabling the safety case approach for overall risk awareness and communication.

Evans, John↗

Chapter 12 - Flight Envelope

The term "flight envelope" is used to refer to the boundaries of aircraft loading and flight conditions within which operation of the aircraft is satisfactory, and beyond which some aspect becomes unacceptable. This flight envelope represents, in fact, the limiting conditions arising from a matrix of inter-related flight envelopes covering the appropriate variables. Thus, for each loading (i.e., external stores configuration and its associated range of weight and center of gravity (c.g.) position) and aircraft configuration (i.e., position of undercarriage (u/c), flaps, slats, etc.), the envelopes of airspeed versus altitude, airspeed versus load factor, angle of attack versus angle of sideslip, etc., must be investigated to establish the limits within which all aspects such as handling qualities, engine behavior, structural loads, etc., remain acceptable. Flight testing of new or derivative aircraft models is carried out with the initial purpose of defining a flight envelope which is, first and foremost, safe and secondarily, which enables the effective use of the vehicle for its intended purpose. Flight testing occurs only after numerous reviews of the design and review of results from ground tests and predictions of flight characteristics in such areas as structures, aerodynamics, stability and control, flight controls (particularly fly-by-wire control systems, propulsion, etc.). Accordingly, opening and expanding the envelope is a task that must be approached cautiously, systematically, and with coordination and cooperation of the many disciplines involved in the design and test of an airplane. (Sections 8 and 10 cover test planning and safety of flight considerations, respectively). The fundamental tenet in establishing a flight envelope via flight test is risk reduction. This is reflected in the typical sequence of events leading to initial flight test - design reviews (both hardware and software), then ground test involving singular disciplines (windtunnel tests for aerodynamics, structurally loading the wing/fuselage/nacelle on a ground test article with loads anticipated to occur in flight, flight control system control law checkout, propulsion test cell runs and/or flying test bed tests, etc.), and then ground tests involving multi-disciplines (See Section 9). Only after these have been accomplished will an initial, limited, low-risk, flight envelope be established. The limited envelope will typically be in the middle of the projected final flight envelope. Subsequent flight tests will then be devoted to expanding the initial envelope by operating the airplane at increasing ranges - representing increasing risk - of engine operation, airspeeds both fast and slow, altitude, load factor both above and below 1g, centers of gravity (fore and aft), and with system/subsystem failures. Whether flight tests are to define a flight envelope on a new model airplane with the attendant new airframe, new engine(s), and new subsystems (hydraulics, pressurization, etc.), or on an airplane involving only a few of these areas such as new engines in an old airframe, the fundamental approach to establishing an envelope is the same.

H Walgemoed↗

Brilliant Execution of Smart Labs: Employing Best Practices to Improve Safety and Reduce Energy for Sustainable Labs: Preprint

Laboratory buildings often dominate the energy use on research campuses, consuming three to four times the energy of a typical office building. In most cases, these facilities are defined as “mission critical,” with excessive energy use as simply an unfortunate truth that cannot be avoided without compromising safety. However, case studies indicate cost savings opportunities of up to 40% in laboratories (compared to standard practices) by employing energy efficient design strategies that also improve the safety of lab spaces (Better Buildings 2018). To help stakeholders implement improvement measures, the Smart Labs Toolkit describes a proven approach to optimizing performance of laboratories and critical control environments in new or existing facilities. The Toolkit outlines distinct phases for building a successful Smart Labs program that include: Plan, Assess, Optimize, and Manage. Each phase has specific tasks, training videos, and resources to educate users, support the efforts of key stakeholders, and maximize benefits for the organization in implementing high-performance labs. The Toolkit also includes case studies from the 17 Better Buildings Smart Labs Accelerator partners, sharing lessons learned and supporting the Smart Labs approach to safe, efficient world class science. This paper reviews the technology choices for implementing Smart Labs ventilation strategies, controls, and other efficiency measures. Better Building Smart Lab Accelerator partners provide case study examples of safety and energy-savings results of using Smart Labs approaches.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Loss-of-Coolant Accident Analysis of a High-Burnup Pressurized Water Reactor Core Design Using Gadolinia-Doped UO 2

High-burnup and extended enrichment fuels are of interest for extending the cycle lengths of pressurized water reactors from 18 to 24 months. Changes to the fuel design and core loading scheme have potentially significant safety implications due to power distribution effects, reduced thermal conductivity, and/or increased plenum pressures due to additional burnable poison loadings. Additionally, higher burnups result in increased material degradation and risk of fuel fragmentation, relocation, and dispersal (FFRD). A representative 24-month core design using gadolinia-doped UO 2 was analyzed for performance under large-break (LB) loss-of-coolant accident (LOCA) conditions using PARCS, RELAP5-3D, and BISON. Furthermore, all considered acceptance criteria were met, with no cases exceeding the 1477 K maximum cladding temperature or the post-quench ductility oxidation limit of 17% equivalent cladding reacted. Full-core FFRD susceptibility was estimated to be approximately 455 kg, though high uncertainties exist with current approaches for computing susceptibility. Undoped fuel rods are more likely to be limiting due to higher linear heat rates. Relatively high burnup and linear heat rate rods located in second batch assemblies are of greatest safety significance during LB LOCA for this high-burnup core design.

High burnup↗

Space fusion energy conversion using a field reversed configuration reactor: A new technical approach for space propulsion and power

The fusion energy conversion design approach, the Field Reversed Configuration (FRC) - when burning deuterium and helium-3, offers a new method and concept for space transportation with high energy demanding programs, like the Manned Mars Mission and planetary science outpost missions require. FRC's will increase safety, reduce costs, and enable new missions by providing a high specific power propulsion system from a high performance fusion engine system that can be optimally designed. By using spacecraft powered by FRC's the space program can fulfill High Energy Space Missions (HESM) in a manner not otherwise possible. FRC's can potentially enable the attainment of high payload mass fractions while doing so within shorter flight times.

Schulze, Norman R.↗

Online fault adaptive control for efficient resource management in Advanced Life Support Systems

This article presents the design and implementation of a controller scheme for efficient resource management in Advanced Life Support Systems. In the proposed approach, a switching hybrid system model is used to represent the dynamics of the system components and their interactions. The operational specifications for the controller are represented by utility functions, and the corresponding resource management problem is formulated as a safety control problem. The controller is designed as a limited-horizon online supervisory controller that performs a limited forward search on the state-space of the system at each time step, and uses the utility functions to decide on the best action. The feasibility and accuracy of the online algorithm can be assessed at design time. We demonstrate the effectiveness of the scheme by running a set of experiments on the Reverse Osmosis (RO) subsystem of the Water Recovery System (WRS).

NASA Discipline Life Support Systems↗

Catalyst Layer Design, Manufacturing and In-line Quality Control

In this project we successfully demonstrated the capabilities of the Reactive Spray Deposition Technology (RSDT) to fabricate large-scale CCMs for advanced PEMWEs that have one-order of magnitude lower PGM loading in their catalyst layers, and performance comparable with the commercial state-of-the-art CCMs. The RSDT is a unique methodology that combines the catalyst synthesis and CCM fabrication in one step and reduces dramatically the time for CCM manufacturing. As fabricated large-scale CCMs with geometric area of 680 cm2 demonstrated excellent activity and durability performance, and the novel duo-recombination layer design paves the way for solving the safety concerns related to PEMWEs. In addition, excellent activity and durability performance has been demonstrated with RSDT fabricated CCMs with thinner membranes and duo RL design. This is a novel approach for further performance improvement of the MEAs for PEMWEs that has been successfully demonstrated for the first time in this project. The integration of the in-situ laser diagnostics system along with the in-line optical quality control system within the RSDT that has been achieved and demonstrated in this project, is an example for possibility of designing and building advanced manufacturing technologies that can meet the requirements of the future manufacturing. Therefore, the RSDT offers a precise real-time monitoring and control of the particles size, composition, loading, porosity, thickness, and defects in the catalysts’ layers, which render this technology as the best candidate for manufacturing of cost effective CCMs for PEMWEs. By using RSDT we successfully met all project’s milestones, Go/No-Go decision, objectives, goals, and deliverables.

08 HYDROGEN↗

A hazard control system for robot manipulators

A robot for space applications will be required to complete a variety of tasks in an uncertain, harsh environment. This fact presents unusual and highly difficult challenges to ensuring the safety of astronauts and keeping the equipment they depend on from becoming damaged. The systematic approach being taken to control hazards that could result from introducing robotics technology in the space environment is described. First, system safety management and engineering principles, techniques, and requirements are discussed as they relate to Shuttle payload design and operation in general. The concepts of hazard, hazard category, and hazard control, as defined by the Shuttle payload safety requirements, is explained. Next, it is shown how these general safety management and engineering principles are being implemented on an actual project. An example is presented of a hazard control system for controlling one of the hazards identified for the Development Test Flight (DTF-1) of NASA's Flight Telerobotic Servicer, a teleoperated space robot. How these schemes can be applied to terrestrial robots is discussed as well. The same software monitoring and control approach will insure the safe operation of a slave manipulator under teleoperated or autonomous control in undersea, nuclear, or manufacturing applications where the manipulator is working in the vicinity of humans or critical hardware.

Carter, Ruth Chiang↗

A safety and licensing roadmap to identify the research and development gaps of commercial molten salt reactors

Molten salt reactors (MSRs) both inherently and through good design possess highly desirable safety attributes. Successful commercial deployment of MSRs is heavily dependent on establishing their safety characteristics in a well-coordinated licensing requirements program. The approach outlined is based on adapting the MSR licensing process to the current LWR–based NRC process that exists today, which has been the traditional approach used by new technologies such as the Pebble Bed Reactor licensing application, the Clinch River Breeder Reactor licensing application, and more recently the NuScale licensing application. NRC has recognized some of the unique passively safe aspects of advanced non-LWR reactors and has introduced an advanced reactor strategic plan which will address policy issues that need to be addressed to accommodate advanced reactor concepts within the existing regulatory framework. Examples of some of these policy issues are the use of functional containment, the use of mechanistic source terms, and more reliance on performance-based and risk-informed regulatory processes, such as the Licensing Modernization Project, which emphasizes the use of risk-informed processes to select licensing basis events, safety categorization of SSC, and well-defined defense-in-depth systems. Applying performance-based, risk-informed regulatory processes is, consequently, vital to substantially decreasing the cost, time, and uncertainty of commercial MSR reactor licensing while providing for the health and safety of the public and protecting the environment. This document is intended to provide a roadmap for the MSR licensing and safety activities necessary to provide a success path to commercialization.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

System safety education focused on industrial engineering

An educational program, designed to train students with the specific skills needed to become safety specialists, is described. The discussion concentrates on application, selection, and utilization of various system safety analytical approaches. Emphasis is also placed on the management of a system safety program, its relationship with other disciplines, and new developments and applications of system safety techniques.

W. L. Johnston↗

System Guidelines for EMC Safety-Critical Circuits: Design, Selection, and Margin Demonstration

Demonstration of required safety margins on critical electrical/electronic circuits in large complex systems has become an implementation and cost problem. These margins are the difference between the activation level of the circuit and the electrical noise on the circuit in the actual operating environment. This document discusses the origin of the requirement and gives a detailed process flow for the identification of the system electromagnetic compatibility (EMC) critical circuit list. The process flow discusses the roles of engineering disciplines such as systems engineering, safety, and EMC. Design and analysis guidelines are provided to assist the designer in assuring the system design has a high probability of meeting the margin requirements. Examples of approaches used on actual programs (Skylab and Space Shuttle Solid Rocket Booster) are provided to show how variations of the approach can be used successfully.

Lawton, R. M.↗

An Investigation of Candidate Sensor-Observable Wake Vortex Strength Parameters for the NASA Aircraft Vortex Spacing System (AVOSS)

The counter-rotating pair of wake vortices shed by flying aircraft can pose a threat to ensuing aircraft, particularly on landing approach. To allow adequate time for the vortices to disperse/decay, landing aircraft are required to maintain certain fixed separation distances. The Aircraft Vortex Spacing System (AVOSS), under development at NASA, is designed to prescribe safe aircraft landing approach separation distances appropriate to the ambient weather conditions. A key component of the AVOSS is a ground sensor, to ensure, safety by making wake observations to verify predicted behavior. This task requires knowledge of a flowfield strength metric which gauges the severity of disturbance an encountering aircraft could potentially experience. Several proposed strength metric concepts are defined and evaluated for various combinations of metric parameters and sensor line-of-sight elevation angles. Representative populations of generating and following aircraft types are selected, and their associated wake flowfields are modeled using various wake geometry definitions. Strength metric candidates are then rated and compared based on the correspondence of their computed values to associated aircraft response values, using basic statistical analyses.

Tatnall, Chistopher R.↗

Evaluation of a Treadmill with Vibration Isolation and Stabilization (TVIS) for Use on the International Space Station

A treadmill with vibration isolation and stabilization designed for the International Space Station (ISS) was evaluated during Shuttle mission STS-81. Three crew members ran and walked on the device, which floats freely in zero gravity. For the majority of the more than 2 hours of locomotion studied, the treadmill showed peak to peak linear and angular displacements of less than 2.5 cm and 2.5 deg, respectively. Vibration transmitted to the vehicle was within the microgravity allocation limits that are defined for the ISS. Refinements to the treadmill and harness system are discussed. This approach to treadmill design offers the possibility of generating 1G-like loads on the lower extremities while preserving the microgravity environment of the ISS for structural safety and vibration free experimental conditions.

McCrory, Jean L.↗

Safety Culture at the World’s Premier Multi-User Spaceport

NASA’s Agency-wide Safety Culture is implemented at the Kennedy Space Center (KSC) using a unique strategy due an unparalleled approach in making human spaceflight history. Kennedy Space Center, the world’s premier multi-user spaceport, enables U.S. government and commercial space access, while providing the world a resource to allow the exploration of and the ability to work in space. A consistently healthy safety culture at KSC is imperative for mission success: desired achievements, protection of space flight hardware, and ultimately, the preservation of human life requires the support of a healthy safety culture. Emphasis on the NASA Agency-wide development of Safety Culture began with the conception of the NASA Agency Safety Culture Working Group. After the devastating loss of life and mission of the Space Shuttle Colombia, a broken safety culture was identified as an organizational cause by the Columbia Accident Investigation Board Report. Thus, the Agency Safety Culture Working Group was developed in 2009 to assess the status of the Agency’s Safety Culture, while addressing safety culture concerns at the NASA Center-level. A Five-factor model was developed to serve as the guiding principles for Safety Culture: 1) Reporting Culture, 2) Just Culture, 3) Flexible Culture, 4) Learning Culture, and 5) Engaged Culture. These five factors are included in the NASA Safety Culture logo, which was intentionally designed as a DNA double helix to prompt the permeation of safety into day-to-day work. KSC specifically implements the NASA Agency-wide Safety Culture principles in a tailored approach that is relevant to the diversity of work being performed. An emphasis is placed on the implementation to include safety at home, not exclusively at work. This emphasis is a KSC-specific element that has been intentionally added to promote a closed loop Safety Culture. To advertise the safety culture, various safety and health events are held throughout the calendar year, providing innovative speakers and engaging activities, while also promoting a wide range of curated safety initiatives. Development and continuous improvement of the KSC safety tracking database, allows for advanced tracking-to-closure, along with providing data sets used to identify areas of emphasis. Other safety initiatives rely solely on employee participation, such as the photo challenges; participants are encouraged to identify and capture themselves, coworkers, or family members participating in safe or healthy activities to share with others within the Center and at Agency levels. Fabrication of exclusive videos and graphics are utilized to advertise and inform employee of safety initiatives, upcoming safety events, and general dispersion of safety information. In addition, an anonymous Agency-wide Safety Culture Survey is advertised, administered, and analyzed at Kennedy Space Center, with the purpose of receiving basic feedback on Safety Culture perceptions to help prevent future incidents from occurring. Through these briefly identified means, and many other forms of employee engagement, Kennedy Space Center aims to maintain safety in the forefront, while creating an environment where everyone trusts that safety is a priority.

Larrin E. Moody↗

The Regulatory Treatment of Low Frequency External Events as Part of a Risk-Informed, Performance-Based Approach

To assist the developing advanced reactor industry in future licensing efforts, the U.S. Department of Energy Advanced Reactor Demonstration Program Regulatory Development area initiated a project at Argonne National Laboratory to examine the regulatory treatment of external hazards as part of a risk-informed performance-based (RIPB) licensing framework. A RIPB licensing framework for advanced reactors built on establishing an affirmative safety case offers the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. Historically, reactor licensing addressed events of very low frequency primarily through the application of design margin and defense-in-depth philosophy. In contrast, RIPB approaches attempt to evaluate these scenarios at a level of detail commensurate with their risk, which often necessitates an explicit treatment of their frequency and associated consequence. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. This project aims to identify the benefits and challenges of such approaches for advanced reactor vendors and aid in the development of consistent and appropriate analysis methodologies. The paper summarizes project findings and explores the application of various approaches for different external hazards. In addition, the current work also evaluates the application of the quantitative health objectives as a limit on external event risk, as they are a potential regulatory requirement under the current draft 10 CFR Part 53, which is a new technology-neutral reactor licensing pathway in the U.S.

Grabaskas, David↗