Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Accelerating Nuclear Facility Mission Completion Through an Improved Chemical Hazard Control Strategy - 20460

Code of Federal Regulation (CFR) 10 CFR 830, Nuclear Safety Management [1], explicitly identifies hazardous materials in addition to radioactive materials when establishing the scope of materials that must be evaluated in Hazard Category (HC) 1, 2, and 3 nuclear facilities. This inclusion has led to a near decade-long progression of more and more rigorous application of chemical hazard controls in these facilities. The progressive addition of more rigorous chemical hazard controls has occurred across the Department of Energy (DOE) Complex, having been driven by contractors and regulators alike. However, chemical hazards in other DOE facilities have been, and continue to be, controlled using traditional industrial safety centered strategies. Thus, identical chemical hazards are controlled using dramatically different approaches based solely on the facility type. Not only are the controls different, the analysis and derivation rigor and requirements are also significantly different. In particular, chemical control derivation and application in non-nuclear facilities are much less onerous than the comprehensive hazard analysis process used in nuclear facilities, even in circumstances in which chemicals are not initiators to, or do not exacerbate a nuclear event. While the derivation and control approaches used in these two types of facilities are disparate, the safety results are similarly effective based on a review of reported chemical events from 2014 through 2018. While both approaches achieve comparable safety outcomes, the approach used in nuclear facilities results in significantly greater preparation costs and implementation costs. Furthermore, the problem with the differing approach is not relegated to the control preparation and implementation burden. The operational impact of potentially unnecessary controls slows mission completion without a corresponding increase in safety, not to mention the dilution of the importance of Technical Safety Requirements. The proposed solution must first include a critical and thorough examination of DOE Complex and top-tier chemical industry chemical hazard control practices, coupled with a similar examination of the driving facility regulatory requirements. Results from the examination can then be used to fuel a bold departure from current chemical control practices in Hazard Category 1, 2, and 3 nuclear facilities. Development of an improved and consistent chemical hazard control process would follow, one that continues to ensure safety while accelerating mission completion and significantly reducing the burden associated with chemical hazard control development and implementation. The improved process must establish a hierarchy where radiological hazards are addressed using safety class and safety significant controls and chemical hazards are addressed using overarching safety management programs (with limited unique exceptions). The improved Hazard Category 1,2, and 3 nuclear facility chemical hazard control strategy, while compliant with 10 CFR 830 [1], would be founded on the requirements in 10 CFR 851, Worker Safety and Health Program [2], and the complementary DOE O 151.1D, Comprehensive Emergency Management System [3]. In this way, the Hazard Category 1, 2, and 3 nuclear facility chemical hazard control strategy would, wherever appropriate, be the same process used at other DOE Complex facilities. Ultimately, the improved process will maintain safety and significantly reduce costs and life cycle risk through faster mission completion. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

R&D DC Electrical Safety [Slides]

Objectives: Recognize DC and pulsed electrical hazards; Improve risk assessment skills; Concepts to improve worker safety; Engineered vs. administrative controls; tools of the trade.

42 ENGINEERING↗
DOE OSTI2025

A Predictive Deep-Reinforcement-Learning-Based Connected Automated Vehicle Anticipatory Longitudinal Control in a Mixed Traffic Lane Change Condition

Maintaining safety and efficiency for mixed traffic consisting of connected automated vehicles (CAVs) and human-driven vehicles (HDVs) is an arduous task due to the inherent HDVs’ stochasticity. Especially for longitudinal control, which is the basic function of vehicle automation, prevailing research primarily considers CAV’s car-following control merely the acceleration and deceleration of leading vehicles. However, this approach overlooks the potential disruptions caused by surrounding vehicles executing lane changes, which can significantly impact the control vehicle’s stability and overall safety. Hence, our study introduces a predictive deep reinforcement learning (DRL) longitudinal CAV controller. This innovative approach leverages prediction from a physics-informed neural network as well as the control capability of DRL to better anticipate and mitigate issues arising from lane-changing, enhancing the safety and efficiency of CAVs in such scenarios. Finally, validated by the numerical simulations embedded with the real-world data, the results indicate that the proposed controller significantly enhances the safety and efficiency of CAVs in situations involving lane changes by other vehicles, showcasing its potential as a valuable tool in advancing CAV technology in mixed traffic.

33 ADVANCED PROPULSION SYSTEMS↗
NASA NTRS1971

Fault tree applications within the safety program of Idaho Nuclear Corporation

Computerized fault tree analyses are used to obtain both qualitative and quantitative information about the safety and reliability of an electrical control system that shuts the reactor down when certain safety criteria are exceeded, in the design of a nuclear plant protection system, and in an investigation of a backup emergency system for reactor shutdown. The fault tree yields the modes by which the system failure or accident will occur, the most critical failure or accident causing areas, detailed failure probabilities, and the response of safety or reliability to design modifications and maintenance schemes.

W. E. Vesely↗
NASA NTRS2009

A Belief-Based Model of Air Traffic Controllers Performing Separation Assurance

A model of an air traffic controller performing a separation assurance task was produced. The model was designed to be simple to use and deploy in a simulator, but still provide realistic behavior. The model is based upon an evaluation of the safety function of the controller for separation assurance, and utilizes fast and frugal heuristics and belief networks to establish a knowledge set for the controller model. Based on this knowledge set, the controller acts to keep aircraft separated. Validation results are provided to demonstrate the model s performance.

Landry, S.J.↗
NASA NTRSDate not supplied

Safety & Mission Assurance (SMA) Activities in Support of Artemis I and Plans for Artemis II

The Artemis I mission in 2022 accomplished humanity’s first venture beyond Low-Earth Orbit (LEO) with a human-rated spacecraft in over fifty years. Artemis comprises several key Program elements – Multi-Purpose Crew Vehicle (MPCV) Orion Crew Module, Service Module, Launch Abort System; the Space Launch System (SLS) and the Exploration Ground System (EGS). Much of our human spaceflight experience with crewed lunar missions is captured in historical program documents, but first-hand knowledge is limited to a few spaceflight veterans. Missions to LEO have offered the opportunity of direct, near-instantaneous communications and assistance, and the ability to return to Earth within a matter of hours in case of emergency. Outward-bound missions do not have these features and will require a more autonomous and reliable spacecraft. The assessment of compliance with applicable safety requirements and adequacy of hazard controls and verifications is the responsibility of the MPCV Safety and Engineering Review Panel (MSERP), along with a Joint [NASA/ESA] Safety and Engineering Review Panel (JSERP) for the review of the European Service Module (ESM). The MSERP has two features that are relatively unique amongst NASA safety panels. First, NASA Engineering was added as a Panel co-chair, which enhanced the Engineering organization’s engagement and level of understanding of hazard analysis methodology and results. The MSERP has representation from each office, including Flight Operations Directorate (FOD) and Health and Medical Technical Authority, supporting the Orion Program in addition to the Engineering and Safety Technical Authority co-chairs. Second, the JSERP has a second set of co-chairs from ESA Engineering and ESA Product Assurance and Safety organizations, which recognizes the international arrangement as one of partnership. This paper will focus on SMA processes, activities, and plans for the Orion element and explore unique challenges associated with Artemis II as we approach the flight of the first crewed Orion vehicle.

Paul J. Collier↗
NASA NTRS2014

NASA Engineering and Safety Center Technical Bulletin No. 14-02: Aerodynamic Reaction Control System (RCS) Orientation and Jet Interaction (JI) Model Validation

Careful consideration should be given to placement and orientation of RCS jet thrusters on hypersonic entry vehicles in order to minimize adverse RCS JI. Modern state-of-the-art computational fluid dynamics (CFD) tools should be able to predict the RCS effectiveness and JI accurately when coupled with verification and validation studies, including the use of appropriately designed experimental wind tunnel testing.

Aerodynamic Reaction Control System↗
NASA NTRS2010

Generic Airspace Concepts and Research

The purpose of this study was to evaluate methods for reducing the training and memorization required to manage air traffic in mid-term, Next Generation Air Transportation System (NextGen) airspace. We contrasted the performance of controllers using a sector information display and NextGen automation tools while working with familiar and unfamiliar sectors. The airspace included five sectors from Oakland and Salt Lake City Centers configured as a "generic center" called "West High Center." The Controller Information Tool was used to present essential information for managing these sectors. The Multi Aircraft Control System air traffic control simulator provided data link and conflict detection and resolution. There were five experienced air traffic controller participants. Each was familiar with one or two of the five sectors, but not the others. The participants rotated through all five sectors during the ten data collection runs. The results addressing workload, traffic management, and safety, as well as controller and observer comments, supported the generic sector concept. The unfamiliar sectors were comparable to the familiar sectors on all relevant measures.

Mogford, Richard H.↗
DOE OSTI2026

Autonomous Hydrogen Fueling Station

This project “Autonomous Hydrogen Fueling Station” covered the autonomous refueling with both gaseous hydrogen and liquid hydrogen. The part on gaseous hydrogen focused on the development of an autonomous robotic fueling arm that would couple to a fuel cell engine for hydrogen refueling without guidance from the forklift operator and budget period. Research was also covered for the robotic fueling with a commercial vehicle. The second phase of the project created the baseline for an autonomous liquid hydrogen transfer system that would minimize boil off losses by operating at thermodynamically efficient state points. For the development of the robotic fueling arm, testing was conducted to establish a baseline measurement of the accuracy and repeatability of a human operator positioning a lift truck in front of a dispenser. The goal was to establish the range of motion required for an autonomous fueling mechanism to mate a hydrogen nozzle with a receptacle on a fuel cell system installed in a forklift. The final design comprised a selective compliance articulated robot arm (SCARA)-type mechanism with two arms for horizontal motion and a ball screw for vertical movement and color and LIDAR cameras were used for marker identification and proximity awareness to guide the robotic arm to its target receptacle. Initial tests resulted in 199 out of 200 successful attempts at autonomous coupling of the dispensing coupler and a fuel cell engine, without hydrogen. The dispenser prototype was modified to include tubing for both hydrogen fuel and air purge lines, but subsequent tests were confounded by the shoulder motor over current errors which limited the robot from getting to the fully inserted position to achieve a positive latch. Robotic hydrogen refueling was successfully demonstrated over 1.5 hours of testing, Plug completed 29 successful latches with an average number of 4 sequential latches before failure. However, a robot capable of placing the nozzle with more force is required for higher reliability. For budget period two, a small scale (10 kg / transfer) automated control system was designed that would operate valves to control pressure and flow of liquid nitrogen between a source and receiving tank with an aim to minimize boil off losses by operating at the most thermodynamically efficient state points. Control system logic flow and a P&ID were developed prior to system safety characterization via HAZOP. A control narrative and system state points were defined. Delays in approval for a change of project objective and procurement issues precluded the construction and test of the final prototype system.

08 HYDROGEN↗
NASA NTRS2004

Autonomous Propulsion System Technology Being Developed to Optimize Engine Performance Throughout the Lifecycle

The goal of the Autonomous Propulsion System Technology (APST) project is to reduce pilot workload under both normal and anomalous conditions. Ongoing work under APST develops and leverages technologies that provide autonomous engine monitoring, diagnosing, and controller adaptation functions, resulting in an integrated suite of algorithms that maintain the propulsion system's performance and safety throughout its life. Engine-to-engine performance variation occurs among new engines because of manufacturing tolerances and assembly practices. As an engine wears, the performance changes as operability limits are reached. In addition to these normal phenomena, other unanticipated events such as sensor failures, bird ingestion, or component faults may occur, affecting pilot workload as well as compromising safety. APST will adapt the controller as necessary to achieve optimal performance for a normal aging engine, and the safety net of APST algorithms will examine and interpret data from a variety of onboard sources to detect, isolate, and if possible, accommodate faults. Situations that cannot be accommodated within the faulted engine itself will be referred to a higher level vehicle management system. This system will have the authority to redistribute the faulted engine's functionality among other engines, or to replan the mission based on this new engine health information. Work is currently underway in the areas of adaptive control to compensate for engine degradation due to aging, data fusion for diagnostics and prognostics of specific sensor and component faults, and foreign object ingestion detection. In addition, a framework is being defined for integrating all the components of APST into a unified system. A multivariable, adaptive, multimode control algorithm has been developed that accommodates degradation-induced thrust disturbances during throttle transients. The baseline controller of the engine model currently being investigated has multiple control modes that are selected according to some performance or operational criteria. As the engine degrades, parameters shift from their nominal values. Thus, when a new control mode is swapped in, a variable that is being brought under control might have an excessive initial error. The new adaptive algorithm adjusts the controller gains on the basis of the level of degradation to minimize the disruptive influence of the large error on other variables and to recover the desired thrust response.

Litt, Jonathan S.↗
DOE OSTI2025

Safe Physics-Informed Machine Learning for Dynamics and Control

This tutorial paper focuses on safe physics-informed machine learning in the context of dynamics and control, providing a comprehensive overview of how to integrate physical models and safety guarantees. As machine learning techniques enhance the modeling and control of complex dynamical systems, ensuring safety and stability remains a critical challenge, especially in safety-critical applications like autonomous vehicles, robotics, medical decision-making, and energy systems. We explore various approaches for embedding and ensuring safety constraints, including structural priors, Lyapunov and Control Barrier Functions, predictive control, projections, and robust optimization techniques. Additionally, we delve into methods for uncertainty quantification and safety verification, including reachability analysis and neural network verification tools, which help validate that control policies remain within safe operating bounds even in uncertain environments. The paper includes illustrative examples demonstrating the implementation aspects of safe learning frameworks that combine the strengths of data-driven approaches with the rigor of physical principles, offering a path toward the safe control of complex dynamical systems.

Drgona, Jan↗
NASA NTRS2016

Technical Capability Upgrades to the NASA Langley Research Center 8 ft. by 15 ft. Thermal Vacuum Chamber

The 8 ft. by 15 ft. thermal vacuum chamber (TVAC), housed in Building 1250 at the NASA Langley Research Center (LaRC), and managed by the Systems Integration and Test Branch within the Engineering Directorate, has undergone several significant modifications to increase testing capability, safety, and quality of measurements of articles under environmental test. Significant modifications include: a new nitrogen distribution manifold for supplying the shroud and other cold surfaces to liquid nitrogen temperatures; a new power supply and distribution system for accurately controlling a quartz IR lamp suite; a suite of contamination monitoring sensors for outgassing measurements and species identification; a new test article support system; signal and power feed-throughs; elimination of unnecessary penetrations; and a new data acquisition and control commanding system including safety interlocks. This paper will provide a general overview of the LaRC 8 ft. by 15 ft. TVAC chamber, an overview of the new technical capabilities, and will illustrate each upgrade in detail, in terms of mechanical design and predicted performance. Additionally, an overview of the scope of tests currently being performed in the chamber will be documented, and sensor plots from tests will be provided to show chamber temperature and pressure performance with actual flight hardware under test.

Thornblom, Mark N.↗
NASA NTRS2014

Simulation Helps Improve Atmosphere Revitalization Systems for Manned Spacecraft

Life support systems for manned spacecraft must provide breathable air and drinkable water for the astronauts. Through the Atmosphere Revitalization Recovery and Environmental Monitoring (ARREM) project, engineers at NASA are developing atmosphere control devices for the safety of the onboard crew. The atmosphere in a manned spacecraft needs to be regularly revitalized in order to ensure the safety of the astronauts and the success of the space mission. For missions lasting a few months, this means air is continuously dehumidified, water collected for re-use, and carbon dioxide (CO2) ejected. One component of the onboard atmosphere control system is a water-saving device that Jim Knox, aerospace engineer at NASA, is optimizing through the Atmosphere Revitalization Recovery and Environmental Monitoring (ARREM) project. He is leading a team at the Marshall Space Flight Center (Huntsville, Alabama) that is aiming to make the assembly more cost-effective and efficient by reducing its power usage and maximizing the water saved; their goal is to save 80-90% of the water in the air. They hope to offer flight system developers at NASA an integrated approach to atmosphere revitalization and water collection that will ultimately increase the time and distance space missions can travel.

Knox, James C.↗
NASA NTRS2013

Autonomous Control of Space Nuclear Reactors

Nuclear reactors to support future robotic and manned missions impose new and innovative technological requirements for their control and protection instrumentation. Long-duration surface missions necessitate reliable autonomous operation, and manned missions impose added requirements for failsafe reactor protection. There is a need for an advanced instrumentation and control system for space-nuclear reactors that addresses both aspects of autonomous operation and safety. The Reactor Instrumentation and Control System (RICS) consists of two functionally independent systems: the Reactor Protection System (RPS) and the Supervision and Control System (SCS). Through these two systems, the RICS both supervises and controls a nuclear reactor during normal operational states, as well as monitors the operation of the reactor and, upon sensing a system anomaly, automatically takes the appropriate actions to prevent an unsafe or potentially unsafe condition from occurring. The RPS encompasses all electrical and mechanical devices and circuitry, from sensors to actuation device output terminals. The SCS contains a comprehensive data acquisition system to measure continuously different groups of variables consisting of primary measurement elements, transmitters, or conditioning modules. These reactor control variables can be categorized into two groups: those directly related to the behavior of the core (known as nuclear variables) and those related to secondary systems (known as process variables). Reliable closed-loop reactor control is achieved by processing the acquired variables and actuating the appropriate device drivers to maintain the reactor in a safe operating state. The SCS must prevent a deviation from the reactor nominal conditions by managing limitation functions in order to avoid RPS actions. The RICS has four identical redundancies that comply with physical separation, electrical isolation, and functional independence. This architecture complies with the safety requirements of a nuclear reactor and provides high availability to the host system. The RICS is intended to interface with a host computer (the computer of the spacecraft where the reactor is mounted). The RICS leverages the safety features inherent in Earth-based reactors and also integrates the wide range neutron detector (WRND). A neutron detector provides the input that allows the RICS to do its job. The RICS is based on proven technology currently in use at a nuclear research facility. In its most basic form, the RICS is a ruggedized, compact data-acquisition and control system that could be adapted to support a wide variety of harsh environments. As such, the RICS could be a useful instrument outside the scope of a nuclear reactor, including military applications where failsafe data acquisition and control is required with stringent size, weight, and power constraints.

Merk, John↗
DOE OSTI2023

A Barrier-Certificated Reinforcement Learning Approach for Enhancing Power System Transient Stability

Increasing integration of renewable resources brings more flexibility and poses new challenges to modern power systems, leading to highly nonlinear and complex dynamics. Here, this paper aims to provide a general solution framework to traditional control problems, such as frequency control and voltage control, which attempt to maintain the stability of either synchronous generators-governed or inverter-governed systems when subjected to a disturbance and simultaneously guarantee operational constraints, providing a complete complement to existing works on control design. Building on reinforcement learning (RL) and control barrier functions, the framework includes two subsystems, i.e., a model-free controller and a barrier-certification system, which discover RL-based control actions and sequentially filter them using a barrier certificate to satisfy operational constraints. Calculating a barrier function is generally challenging for a complex power system. This is addressed by representing the barrier function using neural networks (NNs) and data-based approaches. An adaptive method is introduced to certify the neural barrier function that perseveres barrier conditions, which is more compatible with online implementation. The proposed framework synthesizes a stabilizing controller that satisfies predefined safety regions. The effectiveness of the proposed framework is demonstrated via several comparative case studies.

24 POWER TRANSMISSION AND DISTRIBUTION↗