Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Independent Reliability Assessment of the Laser Transmitter for the ESA-NASA Laser Interferometer Space Antenna (LISA) Program

As part of the laser development process, NASA’s Goddard Space Flight Center (GSFC) requested support from the NASA Engineering and Safety Center (NESC) to independently assess the Technology Readiness Level (TRL) of the LISA Laser System (LS). The independent assessment included the following tasks: (a) assess the design for weaknesses and suggest improvements to mitigate risks, (b) assess the laser reliability plan for weaknesses and suggest improvements to mitigate risks and improve effectiveness, and (c) assess the current redundancy plan on laser subsystems for weaknesses and suggest improvements to mitigate risks and improve effectiveness. The presentation will focus on the assessment findings and the current development progress of the LISA laser to meet the mission requirements with a delivery of a form, fit, and functional TRL6 laser to the LISA mission by late 2023.

Laser Interferometry↗
DOE OSTI2022

SFM - Sandia Fireball Model

SAND2022-13231 O Sandia Fireball Model is used in the assessment of liquid propellant fireballs in the source term analysis for space nuclear systems launch safety. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Powers, Dana↗
DOE OSTI2019

Current State-of-Practice in Dam Safety Risk Assessment

Dams provide significant benefits to the nation, serving as critical infrastructure to deliver water retention and control throughout the United States (US). Major cities could not function without the fresh water supply stored in dammed reservoirs, and many electrical systems rely on dependable hydroelectric power supply. Dams on rivers across the country protect communities against destructive flood impacts while providing navigable waters for transportation, irrigation for agriculture, and various opportunities for recreation. While dams provide many essential services, dam failure flooding can present significant risks to property and life. Over decades of experience, dam safety practices, including risk assessment, have evolved as engineering knowledge, scientific understanding, and technological advancements grow. This project summarizes the current state-of-practice in dam safety risk assessment.

13 HYDRO ENERGY↗
DOE OSTI2019

Current State-of-Practice in Dam Safety Risk Assessment

Dams provide significant benefits to the nation, serving as critical infrastructure to deliver water retention and control throughout the United States (US). Major cities could not function without the fresh water supply stored in dammed reservoirs, and many electrical systems rely on dependable hydroelectric power supply. Dams on rivers across the country protect communities against destructive flood impacts while providing navigable waters for transportation, irrigation for agriculture, and various opportunities for recreation. While dams provide many essential services, dam failure flooding can present significant risks to property and life. Over decades of experience, dam safety practices, including risk assessment, have evolved as engineering knowledge, scientific understanding, and technological advancements grow. This project summarizes the current state-of-practice in dam safety risk assessment.

42 ENGINEERING↗
NASA NTRSDate not supplied

Towards Computational Functional Hazard Assessment (CFHA): A Gap Analysis and Concept for Emerging Aviation Systems

Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.

Seydou Mbaye↗
NASA NTRSDate not supplied

Towards Functional Hazard Assessment (CFHA): A Gap Analysis and Concept for Emerging Aviation Systems

Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.

Seydou Mbaye↗
NASA NTRS2015

Planning the Unplanned Experiment: Assessing the Efficacy of Standards for Safety Critical Software

We need well-founded means of determining whether software is t for use in safety-critical applications. While software in industries such as aviation has an excellent safety record, the fact that software aws have contributed to deaths illustrates the need for justi ably high con dence in software. It is often argued that software is t for safety-critical use because it conforms to a standard for software in safety-critical systems. But little is known about whether such standards `work.' Reliance upon a standard without knowing whether it works is an experiment; without collecting data to assess the standard, this experiment is unplanned. This paper reports on a workshop intended to explore how standards could practicably be assessed. Planning the Unplanned Experiment: Assessing the Ecacy of Standards for Safety Critical Software (AESSCS) was held on 13 May 2014 in conjunction with the European Dependable Computing Conference (EDCC). We summarize and elaborate on the workshop's discussion of the topic, including both the presented positions and the dialogue that ensued.

Graydon, Patrick J.↗
NASA NTRS2000

Safety Metrics for Human-Computer Controlled Systems

The rapid growth of computer technology and innovation has played a significant role in the rise of computer automation of human tasks in modem production systems across all industries. Although the rationale for automation has been to eliminate "human error" or to relieve humans from manual repetitive tasks, various computer-related hazards and accidents have emerged as a direct result of increased system complexity attributed to computer automation. The risk assessment techniques utilized for electromechanical systems are not suitable for today's software-intensive systems or complex human-computer controlled systems.This thesis will propose a new systemic model-based framework for analyzing risk in safety-critical systems where both computers and humans are controlling safety-critical functions. A new systems accident model will be developed based upon modem systems theory and human cognitive processes to better characterize system accidents, the role of human operators, and the influence of software in its direct control of significant system functions Better risk assessments will then be achievable through the application of this new framework to complex human-computer controlled systems.

Leveson, Nancy G↗
NASA NTRS2023

In-time Safety Management Capabilities for Wildland Fire Management Aircraft Operations - A Gap Assessment

This study assesses the in-time safety management services, functions, and capabilities (SFCs)being investigated by NASA’s System Wide Safety (SWS) project to determine applicability to the project’s planned safety demonstrator (SD-1) for wildland fire management. The purpose of this work is to evaluate how effectively existing SFCs address the different hazards presented by a safety demonstrator operating in a wildland fire management scenario. This will help inform decision makers which SFCs would provide the most cost-effective solutions to fill the hazard gaps for further research. Hazards for the safety demonstrator wildland fire management scenario were collated, and the SFCs were evaluated for each hazard based on how applicable and effective the unmodified SFCs are at addressing the hazard. The SFCs are also evaluated for the gap type that needs to be addressed to improve the SFC effectiveness for the given hazard. The key finding of this assessment is that all the existing SFCs require at least some research and development to adapt to the safety demonstrator. No single SFC fully addresses any of the safety demonstrator operation hazards. The result of this study will be used to determine the performance of current SFCs and suggest strategies to adapt existing SFCs or add new SFCs.

Patricia Revolinsky↗
DOE OSTI2022

4D electrical resistivity tomography for assessing the influence of vegetation and subsurface moisture on railway cutting condition

Instability of slopes, embankments, and cuttings on the railway network is increasingly prevalent globally. Monitoring vulnerable infrastructure aids in geotechnical asset management, and improvements to transport safety and efficiency. Here, we examine the use of a novel, near-real-time Electrical Resistivity Tomography (ERT) monitoring system for assessing the stability of a railway cutting in Leicestershire, United Kingdom. In 2015, an ERT monitoring system was installed across a relict landslide (grassed) and an area of more stable ground on either side (wooded), to monitor changes in electrical resistivity through time and space, and to assess the influence of different types of vegetation on the stability of transportation infrastructure. Two years of 4-Dimensional ERT monitoring results are presented here, and petrophysical relationships developed in the laboratory are applied to calibrate the resistivity models in order to provide an insight into hydrogeological pathways within a railway cutting. The influence of vegetation type on subsurface moisture pathways and on slope stability is also assessed – here we find that seasonal subsurface changes in moisture content and soil suction are exacerbated by the presence of trees (wooded area). This results in shrink-swell behaviour of the clays comprising the railway cutting, resulting in fissuring and a reduction in shear strength, leading to instability. As such, it is proposed that on slopes comprised of expansive soils, grassed slopes are beneficial for stability. Insights into the use of 4-D ERT for monitoring railway infrastructure gained from this study may be applied to the monitoring of critical geotechnical assets elsewhere.

58 GEOSCIENCES↗
NASA NTRS1996

A Risk Assessment Model for Reduced Aircraft Separation: A Quantitative Method to Evaluate the Safety of Free Flight

As new technologies and procedures are introduced into the National Airspace System, whether they are intended to improve efficiency, capacity, or safety level, the quantification of potential changes in safety levels is of vital concern. Applications of technology can improve safety levels and allow the reduction of separation standards. An excellent example is the Precision Runway Monitor (PRM). By taking advantage of the surveillance and display advances of PRM, airports can run instrument parallel approaches to runways separated by 3400 feet with the same level of safety as parallel approaches to runways separated by 4300 feet using the standard technology. Despite a wealth of information from flight operations and testing programs, there is no readily quantifiable relationship between numerical safety levels and the separation standards that apply to aircraft on final approach. This paper presents a modeling approach to quantify the risk associated with reducing separation on final approach. Reducing aircraft separation, both laterally and longitudinally, has been the goal of several aviation R&D programs over the past several years. Many of these programs have focused on technological solutions to improve navigation accuracy, surveillance accuracy, aircraft situational awareness, controller situational awareness, and other technical and operational factors that are vital to maintaining flight safety. The risk assessment model relates different types of potential aircraft accidents and incidents and their contribution to overall accident risk. The framework links accident risks to a hierarchy of failsafe mechanisms characterized by procedures and interventions. The model will be used to assess the overall level of safety associated with reducing separation standards and the introduction of new technology and procedures, as envisaged under the Free Flight concept. The model framework can be applied to various aircraft scenarios, including parallel and in-trail approaches. This research was performed under contract to NASA and in cooperation with the FAA's Safety Division (ASY).

Cassell, Rick↗
NASA NTRSDate not supplied

A Technology Maturation Plan for the Development of Nuclear Electric Propulsion

Over the last two years NASA’s Space Nuclear Propulsion (SNP) Project formulated a Technology Maturation Plan (TMP) for development of the sub-systems needed for a MW-class Nuclear Electric Propulsion (NEP) system which, combined with a high thrust chemical propulsion stage, would be suitable for human missions to Mars. Two recent assessments, independently conducted by the National Academies for Science, Engineering, and Medicine and the NASA Engineering & Safety Center, concluded that the technologies required for a high-power NEP system are immature and the attendant risks insufficiently quantified to justify initiating a flight project. For NEP to be available as a viable option to meet flight opportunities in the late 2030s / 2040s time frame, development of the key sub-systems must begin now. SNP has subdivided the NEP system into five Critical Technology Elements (CTE): the nuclear reactor, power conversion, power management and distribution, electric propulsion sub-system, and the primary heat rejection system. Development plans for each of these CTEs have been drafted which will serve as the template for a focused milestone-driven research and development campaign intended to advance each CTE to Technology Readiness Level (TRL) 5. This will be accomplished by building and testing hardware at relevant power levels (~ 1 MW) and for relevant durations (2,500 hours, ~10% of the required operational lifetime) and conducting numerical modeling of the CTEs anchored by the accumulated test data to predict system performance and reliability. Concurrent with this work, high-level coupled system/mission modeling will be carried out to refine the key performance parameters that the various CTEs must achieve. Non-advocate reviews will be held at milestone points to assess progress and inform down-select decisions. The strategy for formulating the TMP was described previously; this paper describes ongoing progress on the drafting and baselining of the plan, including key specific details.

Space Nuclear Propulsion↗
NASA NTRSDate not supplied

A Technology Maturation Plan for the Development of Nuclear Electric Propulsion

Over the last two years NASA’s Space Nuclear Propulsion (SNP) Project formulated a Technology Maturation Plan (TMP) for development of the sub-systems needed for a MW-class Nuclear Electric Propulsion (NEP) system which, combined with a high thrust chemical propulsion stage, would be suitable for human missions to Mars. Two recent assessments, independently conducted by the National Academies for Science, Engineering, and Medicine and the NASA Engineering & Safety Center, concluded that the technologies required for a high-power NEP system are immature and the attendant risks insufficiently quantified to justify initiating a flight project. For NEP to be available as a viable option to meet flight opportunities in the late 2030s / 2040s time frame, development of the key sub-systems must begin now. SNP has subdivided the NEP system into five Critical Technology Elements (CTE): the nuclear reactor, power conversion, power management and distribution, electric propulsion sub-system, and the primary heat rejection system. Development plans for each of these CTEs have been drafted which will serve as the template for a focused milestone-driven research and development campaign intended to advance each CTE to Technology Readiness Level (TRL) 5. This will be accomplished by building and testing hardware at relevant power levels (~ 1 MW) and for relevant durations (2,500 hours, ~10% of the required operational lifetime) and conducting numerical modeling of the CTEs anchored by the accumulated test data to predict system performance and reliability. Concurrent with this work, high-level coupled system/mission modeling will be carried out to refine the key performance parameters that the various CTEs must achieve. Non-advocate reviews will be held at milestone points to assess progress and inform down-select decisions. The strategy for formulating the TMP was described previously*; this paper describes ongoing progress on the drafting and baselining of the plan, including key specific details. * “Strategy for Developing Technologies for Megawatt-class Nuclear Electric Propulsion Systems”, K.A. Polzin, et. al., International Electric Propulsion Conference IEPC 2022, IEPC-2022-155

Nuclear Electric Propulsion↗
NASA NTRS1981

Distributed processing on the Space Shuttle - A case study

A Power Extension Package (PEP) has been designed to provide additional electrical power and energy during Shuttle sortie missions. The considered investigation was conducted to determine the most suitable allocation of PEP monitoring and control functions between the Orbiter's existing (centralized) Systems Management General Purpose Computer and an embedded PEP processor. PEP monitoring and control functions are examined, and a configuration definition is considered, taking into account the 'functional migration' process, function allocation criteria, and candidate functional configurations. A trade study is conducted, giving attention to an assessment of four candidate configurations. Assessment factors are related to cost, development risk, aspects of reliability and safety, PEP design complexity, PEP/STS integration complexity, flight operations, and launch/landing site operations. A thorough (subjective) assessment of the PEP system life cycle indicates substantial benefits from a distributed processing approach.

Schoonmaker, P. B.↗
NASA NTRS2009

Collaborative Approaches in Developing Environmental and Safety Management Systems for Commercial Space Transportation

The Federal Aviation Administration (FAA), Office of Commercial Space Transportation (AST) licenses and permits U.S. commercial space launch and reentry activities, and licenses the operation of non-federal launch and reentry sites. ASTs mission is to ensure the protection of the public, property, and the national security and foreign policy interests of the United States during commercial space transportation activities and to encourage, facilitate, and promote U.S. commercial space transportation. AST faces unique challenges of ensuring the protection of public health and safety while facilitating and promoting U.S. commercial space transportation. AST has developed an Environmental Management System (EMS) and a Safety Management System (SMS) to help meet its mission. Although the EMS and SMS were developed independently, the systems share similar elements. Both systems follow a Plan-Do-Act-Check model in identifying potential environmental aspects or public safety hazards, assessing significance in terms of severity and likelihood of occurrence, developing approaches to reduce risk, and verifying that the risk is reduced. This paper will describe the similarities between ASTs EMS and SMS elements and how AST is building a collaborative approach in environmental and safety management to reduce impacts to the environment and risks to the public.

Federal Aviation Administration (FAA)↗
DOE OSTI2020

System Health and Status Reporting is Used to Improve Infrastructure Systems at the Hanford Site - 20449

Reliable physical infrastructure systems are vital to completing the clean-up mission and the start-up and commissioning of new nuclear waste processing facilities at the Hanford Site. Key infrastructure systems at Hanford include water, sewer, and electrical utilities, roads, telecommunications/network systems, and fire systems. All of the infrastructure systems are non-nuclear, General Service systems that are being maintained under formal engineering configuration control and none are specifically credited in any documented safety analysis (DSA). Starting in calendar year 2017, the Hanford Site's infrastructure and services contractor started producing system health and status reports for a total of 15 critical infrastructure systems as means to get a better understanding of each system's health and how it could be improved to ensure better and more reliable service delivery. As the reporting, tracking, and use of the metrics has matured, the number of systems for which reports are being developed has been expanded to a total of 23. Each of the critical infrastructure systems are assigned primary and alternate design authorities that complete qualifications on each assigned system. The design authorities actively manage and maintain configuration control on each of their systems and track metrics associated with availability, maintenance (corrective and preventive), and configuration of the technical baseline. The metrics are based on the principles established in Chapter V of DOE O 420.1C, Facility Safety, [1] and have been tailored as appropriate to each of the key infrastructure systems. An overall assessment of system health is performed and documented on a routine basis (e.g., quarterly). Included in this documentation is a quantitative score for each of the metrics (i.e., availability, maintenance, configuration management) along with results of system walk-downs, description of any permanent design modifications, identification of new or emerging issues and vulnerabilities affecting the system, and an assessment by the design authority of actions necessary to improve the system health score. The overall status scores are calculated using a formula and based on a pre-determined grading scale, a color is assigned for simple presentation. The information gained from developing the reports is being used to (1) assist with making timely and better informed decisions through the use of solid technical bases that are increasing the overall reliability and capabilities of the Site's infrastructure systems as new expense and capital projects in the Reliability Projects Investment Portfolio (RPIP) are prioritized and executed; (2) feed the risk management program, and (3) integrate the technical content of Master Plans that describe the Site's needs for the system and the system's capabilities to meet those future needs. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2000

Shuttle Upgrade Using 5-Segment Booster (FSB)

In support of NASA's continuing effort to improve the over-all safety and reliability of the Shuttle system- a 5-segment booster (FSB) has been identified as an approach to satisfy that overall objective. To assess the feasibility of a 5-segment booster approach, NASA issued a feasibility study contract to evaluate the potential of a 5-segment booster to improve the overall capability of the Shuttle system, especially evaluating the potential to increase the system reliability and safety. In order to effectively evaluate the feasibility of the 5-segment concept, a four-member contractor team was established under the direction of NASA Marshall Space Flight Center (MSFC). MSFC provided the overall program oversight and integration as well as program contractual management. The contractor team consisted of Thiokol, Boeing North American Huntington Beach (BNA), Lockheed Martin Michoud Space Systems (LMMSS) and United Space Alliance (USA) and their subcontractor bd Systems (Control Dynamics Division, Huntsville, AL). United Space Alliance included the former members of United Space Booster Incorporated (USBI) who managed the booster element portion of the current Shuttle solid rocket boosters. Thiokol was responsible for the overall integration and coordination of the contractor team across all of the booster elements. They were also responsible for all of the motor modification evaluations. Boeing North American (BNA) was responsible for all systems integration analyses, generation of loads and environments. and performance and abort mode capabilities. Lockheed Martin Michoud Space Systems (LMMSS) was responsible for evaluating the impacts of any changes to the booster on the external tank (ET), and evaluating any design changes on the external tank necessary to accommodate the FSB. USA. including the former USBI contingent. was responsible for evaluating any modifications to facilities at the launch site as well as any booster component design modifications.

Sauvageau, Donald R.↗
NASA NTRSDate not supplied

Simulating Microwave and Radar Signals in Severe Weather Conditions

The development of radiative transfer simulators for radar and microwave signals, spanning a range of frequencies from 10 to 800 GHz, is paramount for enhancing weather forecasting accuracy, particularly for severe weather events. These tools facilitate the assimilation of microwave and radar observations into numerical weather prediction models, thereby improving accuracy of weather forecasts. Additionally, they directly simulate radar signals crucial for autonomous vehicle operation, with frequencies commonly used in radar systems such as 24, 74, 77, and 79 GHz. However, these frequencies are susceptible to weather phenomena like severe rain and snow, which can significantly impact vehicle safety and performance. These simulation tools, including radiative transfer simulators, serve a dual purpose. Firstly, they enhance forecasts for severe weather events, contributing to autonomous vehicle safety by providing early warnings and risk assessments. Secondly, they enable the direct simulation of radar signals in autonomous vehicle driving systems, allowing researchers and engineers to evaluate radar system performance under various weather conditions. In addition to the radar signal simulator, this abstract discusses the incorporation of advanced scattering properties developed using the discrete dipole approximation (DDA). The DDA technique enhances scattering calculations for frozen hydrometeors at microwave frequencies, thereby improving the accuracy of radar signal simulations and enabling more accurate assessments of radar system performance in adverse weather conditions. In summary, this abstract explores the development and utilization of comprehensive simulation tools, emphasizing their significance in simulating microwave and radar signals and improving weather forecasts. Special attention is given to the simulation of radar signals at critical frequencies for autonomous vehicle sensing and navigation, addressing challenges posed by severe weather phenomena and their effects on signal propagation and detection

Isaac Moradi↗