Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26
All sourcesNASA NTRSDOE OSTI
NASA NTRS2016

Multifactor Interactions and the Air Traffic Controller: The Interaction of Situation Awareness and Workload in Association with Automation

Air traffic controllers (ATCOs) must maintain a consistently high level of human performance in order to maintain flight safety and efficiency. In current control environments, performance-influencing factors such as workload, fatigue and situation awareness (SA) can co-occur, and interact, to affect performance. However, multifactor influences and the association with performance are under-researched. This study utilized a high fidelity human in the loop enroute air traffic control simulation to investigate the relationship between workload, situation awareness and ATCO performance. The study aimed to replicate and extend Edwards, Sharples, Wilson and Kirwan's (2012) previous study and confirm multifactor interactions with a participant sample of ex-controllers. The study also aimed to extend Edwards et al.'s previous research by comparing multifactor relationships across 4 automation conditions. Results suggest that workload and SA may interact to produce a cumulative impact on controller performance, although the effect of the interaction on performance may be dependent on the context and amount of automation present. Findings have implications for human-automation teaming in air traffic control, and the potential prediction and support of ATCO performance.

Workload↗
NASA NTRS2007

Propulsion Controls and Diagnostics Research at NASA Glenn Research Center

With the increased emphasis on aircraft safety, enhanced performance and affordability, and the need to reduce the environmental impact of aircraft, there are many new challenges being faced by the designers of aircraft propulsion systems. Also the propulsion systems required to enable the National Aeronautics and Space Administration (NASA) Vision for Space Exploration in an affordable manner will need to have high reliability, safety and autonomous operation capability. The Controls and Dynamics Branch (CDB) at NASA Glenn Research Center (GRC) in Cleveland, Ohio, is leading and participating in various projects in partnership with other organizations within GRC and across NASA, the U.S. aerospace industry, and academia to develop advanced controls and health management technologies that will help meet these challenges through the concept of Intelligent Propulsion Systems. This paper describes the current activities of the CDB under the NASA Aeronautics Research and Exploration Systems Missions. The programmatic structure of the CDB activities is described along with a brief overview of each of the CDB tasks including research objectives, technical challenges, and recent accomplishments. These tasks include active control of propulsion system components, intelligent propulsion diagnostics and control for reliable fault identification and accommodation, distributed engine control, and investigations into unsteady propulsion systems.

Garg, Sanjay↗
NASA NTRS2013

Evolution of International Space Station Program Safety Review Processes and Tools

The International Space Station Program at NASA is constantly seeking to improve the processes and systems that support safe space operations. To that end, the ISS Program decided to upgrade their Safety and Hazard data systems with 3 goals: make safety and hazard data more accessible; better support the interconnection of different types of safety data; and increase the efficiency (and compliance) of safety-related processes. These goals are accomplished by moving data into a web-based structured data system that includes strong process support and supports integration with other information systems. Along with the data systems, ISS is evolving its submission requirements and safety process requirements to support the improved model. In contrast to existing operations (where paper processes and electronic file repositories are used for safety data management) the web-based solution provides the program with dramatically faster access to records, the ability to search for and reference specific data within records, reduced workload for hazard updates and approval, and process support including digital signatures and controlled record workflow. In addition, integration with other key data systems provides assistance with assessments of flight readiness, more efficient review and approval of operational controls and better tracking of international safety certifications. This approach will also provide new opportunities to streamline the sharing of data with ISS international partners while maintaining compliance with applicable laws and respecting restrictions on proprietary data. One goal of this paper is to outline the approach taken by the ISS Progrm to determine requirements for the new system and to devise a practical and efficient implementation strategy. From conception through implementation, ISS and NASA partners utilized a user-centered software development approach focused on user research and iterative design methods. The user-centered approach used on the new ISS hazard system utilized focused user research and iterative design methods employed by the Human Computer Interaction Group at NASA Ames Research Center. Particularly, the approach emphasized the reduction of workload associated with document and data management activities so more resources can be allocated to the operational use of data in problem solving, safety analysis, and recurrence control. The methods and techniques used to understand existing processes and systems, to recognize opportunities for improvement, and to design and review improvements are described with the intent that similar techniques can be employed elsewhere in safety operations. A second goal of this paper is to provide and overview of the web-based data system implemented by ISS. The software selected for the ISS hazard systemMission Assurance System (MAS)is a NASA-customized vairant of the open source software project Bugzilla. The origin and history of MAS as a NASA software project and the rationale for (and advantages of) using open-source software are documented elsewhere (Green, et al., 2009).

Ratterman, Christian D.↗
NASA NTRS2019

International Space Station Spacecraft Charging Hazards: Hazard Identification, Management, and Control Methodologies, with Possible Applications to Human Spaceflight Beyond LEO

In this paper, we present an overview of how the International Space Station (ISS) safety engineering methodology directed to controlling extravehicular activity (EVA) crew electrical shock hazards, caused by ISS spacecraft charging, has evolved over the past 25+ years. Long-term measurements of ISS charging severity and frequency-of-occurrence, combined with detailed probabilistic analysis of EVA electric shock- circuit completion, led to a change in hazard control methodology. The requirement for two-fault tolerant EVA shock hazard control during all EVAs was replaced with a less operationally burdensome and risky EVA shock hazard detection and warning process. The applicability of event probability-based detection-and- warning processes to human spaceflight charging hazard control beyond low-earth orbit (LEO) is also considered.

Koontz, Steve↗
NASA NTRS2007

Ground Support for the Space-Based Range Flight Demonstration 2

The primary objective of the NASA Space-Based Range Demonstration and Certification program was to develop and demonstrate space-based range capabilities. The Flight Demonstration 2 flights at NASA Dryden Flight Research Center were conducted to support Range Safety (commanding and position reporting) and high-rate (5 Mbps) Range User (video and data) requirements. Required ground support infrastructure included a flight termination system computer, the ground-data distribution network to send range safety commands and receive range safety and range user telemetry data and video, and the ground processing systems at the Dryden Mission Control Center to process range safety and range user telemetry data and video.

Burkes, Darryl A.↗
DOE OSTI2024

NREL Hydrogen Sensor Testing Laboratory

Relevance: Detection is recognized as a critical element for hydrogen facility safety design and supports risk mitigation. Detection methodologies will support validation of H2 behavior research. Hydrogen point sensors play a critical role for safety and process monitoring, but other methodologies can be developed. Approach: NREL Sensor Laboratory tests and verifies sensor performance for manufacturers, developers, end-users, regulatory agencies and SDOs/CDOs NREL deployment activity supports regulatory requirement verification, hydrogen behavior models, and method development for use by stakeholders. Accomplishments and Progress: NREL's R&D accomplishments have supported developers, industry, and SDOs by providing sensor performance and deployment expertise not otherwise available. Development of alternative detection strategies for hydrogen applications have been initiated. HyWAM and advanced detection methodologies deployments at H2@Scale Facilities are being implemented. Collaborations: Collaboration with government laboratories, universities, private organizations and regulatory agencies has leveraged the NREL Sensor Laboratory's success in advancing hydrogen safety sensors and process control. Proposed Future Work: NREL will support hydrogen deployment by the proper implementation of hydrogen sensors and advanced detection strategies. NREL will continue to support science-based codes and standards. This effort will be guided by the needs of the hydrogen community.

codes and standards↗
DOE OSTI2025

Review of Reactor Facilities without Main Control Rooms

Small, advanced reactors may require few, if any, safety-related human actions (HAs) and fewer HAs to monitor and control the plant. In comparison to large light water reactors, these are significant changes that have implications for many aspects of an applicant's human factors engineering (HFE), including control room design, plant staffing, and the management of safety functions. To support the Nuclear Regulatory Commission's (NRC) ability to evaluate these changes, information needs to be developed addressing the characteristics and potential issues. The objectives of our research were to (1) identify when a traditional main control room (MCR) may not be necessary, (2) identify workplace design alternatives to traditional MCRs, and (3) develop guidance for reviewing an applicant's workplace designs with and without a MCR. We determined that the safety question isn't so much justifying why a design has no MCR, but rather verifying that important human actions can be accurately and reliably performed under a range of challenging conditions using the HSIs provided regardless of their location. We developed guidance to review alternatives to MCRs based on HFE analyses for determining workplace location and design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Bridging the Gap Between Modern UX Design and Particle Accelerator Control Room Interfaces

Accelerator control systems often represent relatively complex and safety-sensitive human-machine interfaces within process control industries. These systems are technically robust and reflect the cumulative integration of solutions built and adapted across decades. One of the regular, unfortunate casualties of provisional accelerator control system updates is their human-system interfaces (HSIs) which often lag behind modern usability and design standards. An additional challenge is that although there is a multitude of established human factors (HF), and user experience (UX) principles for everyday digital applications, there are very few (if any) established principles for complex and safety-critical applications for an accelerator. This paper argues for the importance of established HF and UX principles (herein referred to as human-centered design principles) into the development of accelerator HSIs, emphasizing the need for clarity, consistency, responsiveness, and cognitive accessibility. Drawing from HF/UX best practices and human-centered design, this paper discusses how these approaches can enhance operator performance, reduce human error, and improve accelerator personnel collaboration. Case studies from Accelerator Control Operations Research Network (ACORN) at Fermilab are explored to demonstrate how interfaces built with human-centered design principles can scale with system complexity while remaining intuitive and efficient for diverse user roles including operators, machine experts, and engineers. By bridging the gap between traditional control system design and modern human-centered design methods, this paper provides a roadmap for evolving accelerator HSIs into more usable, maintainable, and effective tools.

Hill, Rachael [Idaho Natl. Lab.]↗
DOE OSTI2020

Linking classical PRA models to a dynamic PRA

Here, this paper presents a series of methods designed to incorporate classical Probabilistic Risk Assessment (PRA) models such as Event Trees (ETs) and Fault Trees (FTs) into dynamic PRA. In contrast to classical PRA, dynamic PRA couples stochastic methods with system simulators to determine the risks associated with complex systems such as nuclear power plants. Compared with classical PRA methods, they can evaluate with higher resolution the safety impact of timing and sequencing of events on the progression of the accident. As part of a dynamic PRA analysis, it is not uncommon that parts of the system to be analyzed might not require a computationally expensive simulation model. These parts could be in fact modeled by employing classical PRA models (e.g., a FT). Here, we present a set of methods and tools that can be used to link the most common classical PRA models (ETs, FTs, reliability block diagrams and Markov models) to simulation codes such as RELAP5-3D: creating a “hybrid PRA.” In order to show the potential of such an hybrid PRA we employ this method to verify ET modeling assumptions (e.g., success criteria) using a large break loss of coolant accident initiating event as a test case. In this respect, we link a set of FTs from the original PRA to the RELAP5-3D code and perform a hybrid PRA. The FTs are employed to model the control logic of several safety systems and to propagate component failures throughout the system. Provided the generated dynamic PRA data, we show how conservative assumptions in the original PRA can be identified and how such original PRA can be modified by updating success criteria captured by the set of RELAP5-3D simulation runs.

97 - MATHEMATICS AND COMPUTING↗
NASA NTRS2010

Advanced Vehicle Concepts and Implications for NextGen

This report presents the results of a major NASA study of advanced vehicle concepts and their implications for the Next Generation Air Transportation System (NextGen). Comprising the efforts of dozens of researchers at multiple institutions, the analyses presented here cover a broad range of topics including business-case development, vehicle design, avionics, procedure design, delay, safety, environmental impacts, and metrics. The study focuses on the following five new vehicle types: Cruise-efficient short takeoff and landing (CESTOL) vehicles Large commercial tiltrotor aircraft (LCTRs) Unmanned aircraft systems (UAS) Very light jets (VLJs) Supersonic transports (SST). The timeframe of the study spans the years 2025-2040, although some analyses are also presented for a 3X scenario that has roughly three times the number of flights as today. Full implementation of NextGen is assumed.

Air traffic control↗
DOE OSTI2020

A Bayesian modeling framework for crash severity effects of active traffic management systems

Transportation agencies utilize Active traffic management (ATM) systems to dynamically manage recurrent and non-recurrent congestion based on real-time conditions. While these systems have been shown to have some safety benefits, their impact on injury severity outcomes is currently uncertain. In this paper, we used full Bayesian mixed logit models to quantify the impact that ATM deployment had on crash severities. The estimation results revealed lower severities with ATM deployment. Marginal effects for ATM deployments that featured hard shoulder running (HSR) revealed lower likelihoods for severe and moderate injury crashes of 15.9 % and for minor injury crashes of 10.1 %. The likelihood of severe and moderate injury crashes and minor injury crashes reduced by 12.4 % and 8.33 % with ATM without HSR. The models were observed to be temporally transferable and had forecast error of 0.301 and 0.304 for the two models, revealing better performance with validation data. These results have implications for improving freeway crash risk at critical locations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Adaptive Power System Emergency Control using Deep Reinforcement Learning

Power system emergency control is generally regarded as the final safety net for grid security and resiliency. Existing emergency control schemes are usually designed off-line based on either the conceived “worst” case scenarios or a few typical operation scenarios. These schemes are facing significant adaptiveness and robustness issues as increasing uncertainties and variations occur in modern electrical grids. To address these challenges, for the first time, this paper proposes a novel adaptive emergency control scheme using deep reinforcement learning (DRL), by leveraging the high-dimensional feature extraction and non-linear generalization capabilities DRL has for complex systems with high-dimensional variations. Furthermore, an open-source platform named DeepGrid has been designed for the first time to assist the DRL development and benchmarking processes in power system emergency control. Details of the platform, DRL, and emergency control schemes that use dynamic braking or under-voltage load shedding are presented. Extensive case studies performed in both two-area four-machine system and IEEE 39-Bus system have demonstrated the excellent performance and robustness of the proposed schemes.

Deep reinforcement learning, emergency control, lo↗
NASA NTRS1994

Fault tolerant computer control for a Maglev transportation system

Magnetically levitated (Maglev) vehicles operating on dedicated guideways at speeds of 500 km/hr are an emerging transportation alternative to short-haul air and high-speed rail. They have the potential to offer a service significantly more dependable than air and with less operating cost than both air and high-speed rail. Maglev transportation derives these benefits by using magnetic forces to suspend a vehicle 8 to 200 mm above the guideway. Magnetic forces are also used for propulsion and guidance. The combination of high speed, short headways, stringent ride quality requirements, and a distributed offboard propulsion system necessitates high levels of automation for the Maglev control and operation. Very high levels of safety and availability will be required for the Maglev control system. This paper describes the mission scenario, functional requirements, and dependability and performance requirements of the Maglev command, control, and communications system. A distributed hierarchical architecture consisting of vehicle on-board computers, wayside zone computers, a central computer facility, and communication links between these entities was synthesized to meet the functional and dependability requirements on the maglev. Two variations of the basic architecture are described: the Smart Vehicle Architecture (SVA) and the Zone Control Architecture (ZCA). Preliminary dependability modeling results are also presented.

Lala, Jaynarayan H.↗
NASA NTRS2009

Implementation of an Adaptive Controller System from Concept to Flight Test

The National Aeronautics and Space Administration (NASA) at the Dryden Flight Research Center (DFRC) has been conducting flight-test research using an F-15 aircraft (figure 1). This aircraft has been specially modified to interface a neural net (NN) controller as part of a single-string Airborne Research Test System (ARTS) computer with the existing quad-redundant flight control system (FCC) shown in figure 2. The NN commands are passed to FCC channels 2 and 4 and are cross channel data linked (CCDL) to the other computers as shown. Numerous types of fault-detection monitors exist in the FCC when the NN mode is engaged; these monitors would cause an automatic disengagement of the NN in the event of a triggering fault. Unfortunately, these monitors still may not prevent a possible NN hard-over command from coming through to the control laws. Therefore, an additional and unique safety monitor was designed for a single-string source that allows authority at maximum actuator rates but protects the pilot and structural loads against excessive g-limits in the case of a NN hard-over command input. This additional monitor resides in the FCCs and is executed before the control laws are computed. This presentation describes a "floating limiter" (FL) concept that was developed and successfully test-flown for this program (figure 3). The FL computes the rate of change of the NN commands that are input to the FCC from the ARTS. A window is created with upper and lower boundaries, which is constantly "floating" and trying to stay centered as the NN command rates are changing. The limiter works by only allowing the window to move at a much slower rate than those of the NN commands. Anywhere within the window, however, full rates are allowed. If a rate persists in one direction, it will eventually "hit" the boundary and be rate-limited to the floating limiter rate. When this happens, a persistent counter begins and after a limit is reached, a NN disengage command is generated. The tunable metrics for the FL are (1) window size, (2) drift rate, and (3) persistence counter. Ultimate range limits are also included in case the NN command should drift slowly to a limit value that would cause the FL to be defeated. The FL has proven to work as intended. Both high-g transients and excessive structural loads are controlled with NN hard-over commands. This presentation discusses the FL design features and presents test cases. Simulation runs are included to illustrate the dramatic improvement made to the control of NN hard-over effects. A mission control room display from a flight playback is presented to illustrate the neural net fault display representation. The FL is very adaptable to various requirements and is independent of flight condition. It should be considered as a cost-effective safety monitor to control single-string inputs in general.

Larson, Richard R.↗
NASA NTRS2016

Task Demand Variation in Air Traffic Control: Implications for Workload, Fatigue, and Performance

In air traffic control, task demand and workload have important implications for the safety and efficiency of air traffic, and remain dominant considerations. Within air traffic control, task demand is dynamic. However, research on demand transitions and subsequent controller perception and performance is limited. This research uses an air traffic control simulation to investigate the effect of task demand transitions, and the direction of those transitions, on workload and fatigue and one efficiency performance measure. Results indicate that a change in task demand appears to affect both workload and fatigue ratings, although not necessarily performance. In addition, participants' workload and fatigue ratings in equivalent task demand periods appear to change depending on the demand period preceding the time of the current ratings. Further research is needed to enhance understanding of demand transition and workload history effects on operator experience and performance, in both air traffic control and other safety-critical domains.

workload history↗
NASA NTRS2016

Task Demand Variation in Air Traffic Control: Implications for Controller Workload, Fatigue, and Performance

In air traffic control, task demand and workload have important implications for the safety and efficiency of air traffic, and remain dominant considerations. Within air traffic control, task demand is dynamic. However, research on demand transitions and subsequent controller perception and performance is limited. This research uses an air traffic control simulation to investigate the effect of task demand transitions, and the direction of those transitions, on workload and fatigue and one efficiency performance measure. Results indicate that a change in task demand appears to affect both workload and fatigue ratings, although not necessarily performance. In addition, participants workload and fatigue ratings in equivalent task demand periods appear to change depending on the demand period preceding the time of the current ratings. Further research is needed to enhance understanding of demand transition and workload history effects on operator experience and performance, in both air traffic control and other safety-critical domains.

workload history↗
DOE OSTI2023

Knowledge-driven design of solid-electrolyte interphases on lithium metal via multiscale modelling

Abstract Due to its high energy density, lithium metal is a promising electrode for future energy storage. However, its practical capacity, cyclability and safety heavily depend on controlling its reactivity in contact with liquid electrolytes, which leads to the formation of a solid electrolyte interphase (SEI). In particular, there is a lack of fundamental mechanistic understanding of how the electrolyte composition impacts the SEI formation and its governing processes. Here, we present an in-depth model-based analysis of the initial SEI formation on lithium metal in a carbonate-based electrolyte. Thereby we reach for significantly larger length and time scales than comparable molecular dynamic studies. Our multiscale kinetic Monte Carlo/continuum model shows a layered, mostly inorganic SEI consisting of LiF on top of Li 2 CO 3 and Li after 1 µs. Its formation is traced back to a complex interplay of various electrolyte and salt decomposition processes. We further reveal that low local Li + concentrations result in a more mosaic-like, partly organic SEI and that a faster passivation of the lithium metal surface can be achieved by increasing the salt concentration. Based on this we suggest design strategies for SEI on lithium metal and make an important step towards knowledge-driven SEI engineering.

25 ENERGY STORAGE↗