Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

Integration of a computerized two-finger gripper for robot workstation safety

A microprocessor-based controller has been developed that continuously monitors and adjusts the gripping force applied by a special two-finger gripper. This computerized force sensing gripper system enables the endeffector gripping action to be independently detected and corrected. The gripping force applied to a manipulated object is real-time monitored for problem situations, situations which can occur during both planned and errant robot arm manipulation. When unspecified force conditions occur at the gripper, the gripping force controller initiates specific reactions to cause dynamic corrections to the continuously variable gripping action. The force controller for this intelligent gripper has been interfaced to the controller of an industrial robot. The gripper and robot controllers communicate to accomplish the successful completion of normal gripper operations as well as unexpected hazardous situations. An example of an unexpected gripping condition would be the sudden deformation of the object being manipulated by the robot. The capabilities of the interfaced gripper-robot system to apply workstation safety measures (e.g., stop the robot) when these unexpected gripping effects occur have been assessed.

Sneckenberger, John E.↗

Five-Segment Reusable Solid Rocket Booster Upgrade

The Five Segment Reusable Solid Rocket Booster (RSRB) feasibility status is presented in viewgraph form. The Five Segment Booster (FSB) objective is to provide a low cost, low risk approach to increase reliability and safety of the Shuttle system. Topics include: booster upgrade requirements; design summary; reliability issues; booster trajectories; launch site assessment; and enhanced abort modes.

Sauvageau, Don↗

Structures and Materials Technologies for Extreme Environments Applied to Reusable Launch Vehicles

This paper provides an overview of the evolution of structures and materials technology approaches to survive the challenging extreme environments encountered by earth-to-orbit space transportation systems, with emphasis on more recent developments in the USA. The evolution of technology requirements and experience in the various approaches to meeting these requirements has significantly influenced the technology approaches. While previous goals were primarily performance driven, more recently dramatic improvements in costs/operations and in safety have been paramount goals. Technologies that focus on the cost/operations and safety goals in the area of hot structures and thermal protection systems for reusable launch vehicles are presented. Assessments of the potential ability of the various technologies to satisfy the technology requirements, and their current technology readiness status are also presented.

Scotti, Stephen J.↗

Impact of Pilot Delay and Non-Responsiveness on the Safety Performance of Airborne Separation

Assessing the safety effects of prediction errors and uncertainty on automationsupported functions in the Next Generation Air Transportation System concept of operations is of foremost importance, particularly safety critical functions such as separation that involve human decision-making. Both ground-based and airborne, the automation of separation functions must be designed to account for, and mitigate the impact of, information uncertainty and varying human response. This paper describes an experiment that addresses the potential impact of operator delay when interacting with separation support systems. In this study, we evaluated an airborne separation capability operated by a simulated pilot. The experimental runs are part of the Safety Performance of Airborne Separation (SPAS) experiment suite that examines the safety implications of prediction errors and system uncertainties on airborne separation assistance systems. Pilot actions required by the airborne separation automation to resolve traffic conflicts were delayed within a wide range, varying from five to 240 seconds while a percentage of randomly selected pilots were programmed to completely miss the conflict alerts and therefore take no action. Results indicate that the strategicAirborne Separation Assistance System (ASAS) functions exercised in the experiment can sustain pilot response delays of up to 90 seconds and more, depending on the traffic density. However, when pilots or operators fail to respond to conflict alerts the safety effects are substantial, particularly at higher traffic densities.

Consiglio, Maria↗

Failure-Tolerant Avionics for Crewed Space Systems Recommended Best Practices

This paper provides an overview of some of the major steps needed to mature and justify the design of an avionics system for crewed spacecraft. It is organized as a collection of artifacts or pieces of evidence that NASA needs to assess the system at design reviews, including a functional failure modes and effects analysis (FFMEA), fault containment region (FCR) definitions, the failure hypothesis, and reliability analysis. This paper is intended as a reference for designers working on NASA crewed spaceflight projects, reliability engineers responsible for avionics system assessments, and program managers wanting to understand what evidence is required at design reviews to ensure crew safety and mission success.

Avionics↗

Reusable Rocket Engine Advanced Health Management System. Architecture and Technology Evaluation: Summary

In this study, we proposed an Advanced Health Management System (AHMS) functional architecture and conducted a technology assessment for liquid propellant rocket engine lifecycle health management. The purpose of the AHMS is to improve reusable rocket engine safety and to reduce between-flight maintenance. During the study, past and current reusable rocket engine health management-related projects were reviewed, data structures and health management processes of current rocket engine programs were assessed, and in-depth interviews with rocket engine lifecycle and system experts were conducted. A generic AHMS functional architecture, with primary focus on real-time health monitoring, was developed. Fourteen categories of technology tasks and development needs for implementation of the AHMS were identified, based on the functional architecture and our assessment of current rocket engine programs. Five key technology areas were recommended for immediate development, which (1) would provide immediate benefits to current engine programs, and (2) could be implemented with minimal impact on the current Space Shuttle Main Engine (SSME) and Reusable Launch Vehicle (RLV) engine controllers.

Pettit, C. D.↗

A feasibility assessment of nuclear reactor power system concepts for the NASA Growth Space Station

A preliminary feasibility assessment of the integration of reactor power system concepts with a projected growth Space Station architecture was conducted to address a variety of installation, operational, disposition and safety issues. A previous NASA sponsored study, which showed the advantages of Space Station - attached concepts, served as the basis for this study. A study methodology was defined and implemented to assess compatible combinations of reactor power installation concepts, disposal destinations, and propulsion methods. Three installation concepts that met a set of integration criteria were characterized from a configuration and operational viewpoint, with end-of-life disposal mass identified. Disposal destinations that met current aerospace nuclear safety criteria were identified and characterized from an operational and energy requirements viewpoint, with delta-V energy requirement as a key parameter. Chemical propulsion methods that met current and near-term application criteria were identified and payload mass and delta-V capabilities were characterized. These capabilities were matched against concept disposal mass and destination delta-V requirements to provide a feasibility of each combination.

Bloomfield, H. S.↗

A feasibility assessment of installation, operation and disposal options for nuclear reactor power system concepts for a NASA growth space station

A preliminary feasibility assessment of the integration of reactor power system concepts with a projected growth space station architecture was conducted to address a variety of installation, operational disposition, and safety issues. A previous NASA sponsored study, which showed the advantages of space station - attached concepts, served as the basis for this study. A study methodology was defined and implemented to assess compatible combinations of reactor power installation concepts, disposal destinations, and propulsion methods. Three installation concepts that met a set of integration criteria were characterized from a configuration and operational viewpoint, with end-of-life disposal mass identified. Disposal destinations that met current aerospace nuclear safety criteria were identified and characterized from an operational and energy requirements viewpoint, with delta-V energy requirement as a key parameter. Chemical propulsion methods that met current and near-term application criteria were identified and payload mass and delta-V capabilities were characterized. These capabilities were matched against concept disposal mass and destination delta-V requirements to provide the feasibility of each combination.

Bloomfield, Harvey S.↗

Case Study of Meteoroid Fluence on a Mars Sample Return Mission

The Mars Sample Return Campaign must satisfy a Back Planetary Protection requirement that limits the risk of biological contamination of the Earth by Martian microbes. The Earth Re-turn Orbiter (ERO), being developed by the European Space Agency (ESA), will carry a Capture, Containment and Return System (CCRS), which is being developed by NASA to retrieve orbiting samples (OS) from Mars orbit, surround them with two containment layers to create a Contained OS (COS), and transfer the COS to the Earth Entry System (EES), which will be re-leased by ERO to carry the samples through entry, descent and landing at the Utah Test and Training Range. Micrometeoroid impact damage to the Thermal Protection System (TPS) of the EES, which may occur at any time in the ERO mission, is recognized as a potential risk driver for loss of sample containment that needs to be rigorously assessed. A Micrometeoroid Protection System (MMPS) will be implemented to limit that risk. The MMPS consists of a shield covering the TPS called the Micrometeoroid Garage (MMG) and a system of cameras to inspect the TPS. An extensive study was performed by the CCRS Project in collaboration with the NASA Engineering and Safety Center (NESC)to assess the probability of damage to the MMG and TPS by meteoroids over the entire ERO mission. This included the computation of the meteoroid fluence on the MMG and directly on the TPS after EES separation, and assessment of damage to the MMG and TPS via hypervelocity impact tests, hydrocode simulations, and empirical damage prediction and ballistic limit equations (BLEs). The focus of this paper is the meteoroid fluence on the MMG.

Micrometeoroid↗

Case Study of Meteoroid Fluence on a Mars Sample Return Mission

The Mars Sample Return Campaign must satisfy a Back Planetary Protection requirement that limits the risk of biological contamination of the Earth by Martian microbes. The Earth Re-turn Orbiter (ERO), being developed by the European Space Agency (ESA), will carry a Capture, Containment and Return System (CCRS), which is being developed by NASA to retrieve orbiting samples (OS) from Mars orbit, surround them with two containment layers to create a Contained OS (COS), and transfer the COS to the Earth Entry System (EES), which will be re-leased by ERO to carry the samples through entry, descent and landing at the Utah Test and Training Range. Micrometeoroid impact damage to the Thermal Protection System (TPS) of the EES, which may occur at any time in the ERO mission, is recognized as a potential risk driver for loss of sample containment that needs to be rigorously assessed. A Micrometeoroid Protection System (MMPS) will be implemented to limit that risk. The MMPS consists of a shield covering the TPS called the Micrometeoroid Garage (MMG) and a system of cameras to inspect the TPS. An extensive study was performed by the CCRS Project in collaboration with the NASA Engineering and Safety Center (NESC)to assess the probability of damage to the MMG and TPS by meteoroids over the entire ERO mission. This included the computation of the meteoroid fluence on the MMG and directly on the TPS after EES separation, and assessment of damage to the MMG and TPS via hypervelocity impact tests, hydrocode simulations, and empirical damage prediction and ballistic limit equations (BLEs). The focus of this paper is the meteoroid fluence on the MMG.

micrometeoroid↗

In-Time Non-Participant Casualty Risk Assessment to Support Onboard Decision Making for Autonomous Unmanned Aircraft

Numerous operational paradigms, technologies, and missions are emerging as newcomers to the National Airspace System (NAS) develop small Unmanned Aircraft Systems (sUAS), personal air vehicles and other Urban Air Mobility (UAM) concepts. As the list of applications expands, maintaining the safety of the current airspace system remains one of the core concerns preventing widespread commercial implementation of these concepts. Further, the risks associated with unmanned aircraft operations themselves have to be recognized and mitigated in a timely manner. Safety-critical risks include, but are not limited to, flight outside of approved airspace, unsafe proximity to people or property, critical system failures, loss-of control, and cyber-security related risks. Instead of reacting to accidents, a set of predictive and data-driven risk monitoring, assessment, and mitigation capabilities are envisioned to help capture and eliminate hazards as these systems become operational. NASA’s System-wide Safety project is performing R&D on such a safety assurance concept. As part of this concept, this paper describes an architecture that continuously monitors a diverse set of onboard and ground-based sources to estimate and predict non-participant casualty risk during flight. Timely identification of the changing nature of this risk can inform decision making processes to mitigate current and impending situations.

Ancel, Ersin↗

Human Systems Integration (HSI) for Safety- Critical Range Operations at Wallops Flight Facility (WFF)

The NASA Engineering and Safety Center (NESC) Human Factors (HF) Technical Discipline Team (TDT) funded a preliminary study in 2017 that was narrowly focused within the Range Data Display System (RDDS) scope of display design requirements based on schedule and resources. Wallops Flight Facility (WFF) personnel involved in the previous study asked for a broader Human Systems Integration (HSI) involvement that would span both the RDDS and Flight Termination System (FTS) projects and assist with identifying HSI best practices, via appropriate standards and guidelines, that if properly implemented should result in a more effective and efficient Range Safety Operations. WFF Range Safety Operations has expressed a need to assess the roles, responsibilities, and functions of the various personnel on console during launches to identify existing and potential efficiencies and incorporate them in the new system design. This assessment addresses that need.

Cynthia H Null↗

Benchmark Gap Assessment for the Manufacturing of High-Assay Low-Enriched Uranium Fuels

This document develops basic critical conditions for spheres—moderated and unmoderated, as well as reflected and unreflected—in consideration of nuclear criticality safety of a potential fuel production facility producing high-assay low-enriched uranium (HALEU) fuel of several different types like tristructural-isotropic (TRISO), uranium metal and alloys, oxide and non-metallic forms. In addition to spherical arrangements, TRISO particle manufacturing process–specific equipment is modeled as it would be for the criticality safety analysis. The objective is to develop representative systems that can then be used for comparison with existing benchmarks. SCALE/TSUNAMI is used to assess the similarity index between these systems to assess validation gaps for possible fuel production applications of proposed advanced reactors. Several different fuel types were evaluated, including TRISO, uranium metal, uranium molybdenum, uranium zirconium, uranium dioxide, uranium nitride, uranium hydride, U-ZrH, and uranium chloride. This selection of fuel types covers a breadth of proposed reactor types, as well as intermediate steps in the production and fabrication of the fuel

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Cost‐benefit assessment framework for robotics‐driven inspection of floating offshore wind farms

Abstract Operations and maintenance (O&M) of floating offshore wind farms (FOWFs) poses various challenges in terms of greater distances from the shore, harsher weather conditions, and restricted mobility options. Robotic systems have the potential to automate some parts of the O&M leading to continuous feature‐rich data acquisition, operational efficiency, along with health and safety improvements. There remains a gap in assessing the techno‐economic feasibility of robotics in the FOWF sector. This paper investigates the costs and benefits of incorporating robotics into the O&M of a FOWF. A bottom‐up cost model is used to estimate the costs for a proposed multi‐robot platform (MRP). The MRP houses unmanned aerial vehicle (UAV) and remotely operated vehicle (ROV) to conduct the inspection of specific FOWF components. Emphasis is laid on the most conducive O&M activities for robotization and the associated technical and cost aspects. The simulation is conducted in Windfarm Operations and Maintenance cost‐Benefit Analysis Tool (WOMBAT), where the metrics of incurred operational expenditure (OPEX) and the inspection time are calculated and compared with those of a baseline case consisting of crew transfer vessels, rope‐access technicians, and divers. Results show that the MRP can reduce the inspection time incurred, but this reduction has dependency on the efficacy of the robotic system and the associated parameterization e.g., cost elements and the inspection rates. Conversely, the increased MRP day rate results in a higher annualized OPEX. Residual risk is calculated to assess the net benefit of incorporating the MRP. Furthermore, sensitivity analysis is conducted to find the key parameters influencing the OPEX and the inspection time variation. A key output of this work is a robust and realistic framework which can be used for the cost‐benefit assessment of future MRP systems for specific FOWF activities.

17 WIND ENERGY↗

A Briefing on Metrics and Risks for Autonomous Decision-Making in Aerospace Applications

Significant technology advances will enable future aerospace systems to safely and reliably make decisions autonomously, or without human interaction. The decision-making may result in actions that enable an aircraft or spacecraft in an off-nominal state or with slightly degraded components to achieve mission performance and safety goals while reducing or avoiding damage to the aircraft or spacecraft. Some key technology enablers for autonomous decision-making include: a continuous state awareness through the maturation of the prognostics health management field, novel sensor development, and the considerable gains made in computation power and data processing bandwidth versus system size. Sophisticated algorithms and physics based models coupled with these technological advances allow reliable assessment of a system, subsystem, or components. Decisions that balance mission objectives and constraints with remaining useful life predictions can be made autonomously to maintain safety requirements, optimal performance, and ensure mission objectives. This autonomous approach to decision-making will come with new risks and benefits, some of which will be examined in this paper. To start, an account of previous work to categorize or quantify autonomy in aerospace systems will be presented. In addition, a survey of perceived risks in autonomous decision-making in the context of piloted aircraft and remotely piloted or completely autonomous unmanned autonomous systems (UAS) will be presented based on interviews that were conducted with individuals from industry, academia, and government.

Frost, Susan↗

Hydrogen Plus Other Alternative Fuels Risk Assessment Models (HyRAM+) Version 4.1 Technical Reference Manual

The HyRAM+ software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen, methane, and propane systems. HyRAM+ is designed to facilitate the use of state-of-the-art models to conduct robust, repeatable assessments of safety, hazards, and risk. HyRAM+ integrates deterministic and probabilistic models for quantifying accident scenarios, predicting physical effects, characterizing hazards (thermal effects from jet fires, overpressure effects from delayed ignition), and assessing impacts on people. HyRAM+ is developed at Sandia National Laboratories to support the development and revision of national and international codes and standards, and to provide developed models in a publicly-accessible toolkit usable by all stakeholders. This document provides a description of the methodology and models contained in HyRAM+ version 4.1. The two most significant changes for HyRAM+ version 4.1 from HyRAM+ version 4.0 are direct incorporation of unconfined overpressure into the QRA calculations and modification of the models for cryogenic liquid flow through an orifice. In QRA mode, the user no longer needs to input peak overpressure and impulse values that were calculated separately; rather, the unconfined overpressure is estimated for the given system inputs, leak size, and occupant location. The orifice flow model now solves for the maximum mass flux through the orifice at constant entropy while conserving energy, which does not require a direct speed of sound calculation. This does not affect the mass flow for all-gaseous releases; the method results in the same speed of sound for choked flow. However, this method does result in a higher (and more realistic) mass flow rate for a given leak size for liquid releases than was previously calculated.

08 HYDROGEN↗

Capability Enhancements for System-level thermal Hydraulic Modeling of Lead Fast Reactors

This project has focused on the use, assessment, and development of the SAS4A/SASSYS-1 (SAS) safety analysis software. Although SAS was originally intended as a safety analysis tool for Liquid Metal cooled Fast Reactors (LMFRs), which includes both Sodium Fast Reactors (SFRs) and Lead Fast Reactors (LFRs), the vast majority of its recent development and customization has been tailored to SFRs. In general, enhancements that are made to the software for SFRs are applicable to LFRs, however, the fuel composition and corrosive nature of lead requires careful consideration when performing safety analysis of an LFR. In this project an emphasis was placed on closing gaps that are associated with modeling LFRs using SAS. The principal objective of the project was to enhance the ability of SAS as a licensing tool for LFRs. This objective was to be accomplished through three tasks: 1) Enhance the ability of SAS to couple with external software; 2) Improve the underlying physics models in SAS, with priority given to models that are highly relevant to LFRs; 3) Extend the Verification and Validation (V&V) basis of the software

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Autonomous Assessment and Predictive Capabilities for Low-Altitude Urban Flight Operations

The integration of unmanned aerial vehicles in the national airspace will introduce new vehicle types, technologies, and operational paradigms for which safety must be maintained and hazards mitigated. One approach is to attempt to design for possible hazards and unsafe incidents that can occur at different phases of flight (pre-flight, in-flight, and post-flight) and during ground operations. Another is to mitigate safety incidents by implementing changes to policies, procedures, regulations, and design to cover personnel, equipment, and aircraft during operations. These and other techniques, not described herein, are typically conservative or adhoc in that they reduce the likelihood of risk after safety incidents have occurred. In this work, the goal is to develop a more predictive capability to monitor and mitigate risk and hazards to safety “in-time” enough for decisions to be made. In line with NASA’s Aeronautics Mission Directorate Strategic Thrust 5 [1] (In-Time System-Wide Safety Assurance), the System-Wide Safety (SWS) project under which this work falls, is developing and demonstrating innovative and safety-oriented solutions that enable modernization and aviation transformation. To that effect, this work will detail data-driven efforts on the SWS project to develop a number of safety-critical services for in-time monitoring and mitigation of hazards to low-altitude flight operations. First, hazards to these operations are identified based on previous work by NASA [2,3] and others in the aerospace industry. These hazards include (i) unsafe proximity to other vehicles, property, and people on the ground, (ii) critical system failures such as communication signal/GPS loss, unexpected propulsion system degradation, engine/power failure, and (iii) operational/environmental issues such as severe weather and gusty winds. For these hazards, safety metrics, which can be quantified and assessed are defined, models to monitor and predict them are developed, and flight test data is generated to develop, validate, and test these models, considering the complex interplay of the different hazards that define them [4-6]. In addition, the uncertainty in the non-deterministic effects that cannot be modeled nor predicted and unknown unknowns that arise after design/testing and during operations must be handled in rigorous manner. As a result, for each of the developed safety metrics, their dependencies on one another are characterized and a framework for handling the uncertainties inherent in the modeling, algorithms, and measurements required for prediction is also developed [7]. To that effect, this presentation will describe the safety metrics and services already developed and underway under the System-Wide Safety project that utilize data-driven techniques for the identification of anomalies, precursors, and trends (APTs) to monitor and mitigate hazards to safety, in-time, for urban flight operations in low-altitude airspace.

Okolo, Wendy A.↗