SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
CloudSat safety operations at Vendenberg AFB is given. The topics include: 1) CloudSat Project Overview; 2) Vandenberg Ground Operations; 3) Delta II Launch Vehicle; 4) The A-Train; 5) System Safety Management; 6) CALIPSO Hazards Assessment; 7) CALIPSO Supplemental Safeguards; 8) Joint System Safety Operations; 9) Extended Stand-down; 10) Launch Delay Safety Concerns; and 11) Lessons Learned.
A comparative analysis of health and safety risks is presented for the Satellite Power System and five alternative baseload electrical generation systems: a low-Btu coal gasification system with an open-cycle gas turbine combined with a steam topping cycle; a light water fission reactor system without fuel reprocessing; a liquid metal fast breeder fission reactor system; a central station terrestrial photovoltaic system; and a first generation fusion system with magnetic confinement. For comparison, risk from a decentralized roof-top photovoltaic system with battery storage is also evaluated. Quantified estimates of public and occupational risks within ranges of uncertainty were developed for each phase of the energy system. The potential significance of related major health and safety issues that remain unquantitied are also discussed.
This report validates and documents the detailed features and practical application of the framework for software intensive digital systems risk assessment and risk-informed safety assurance presented in the NASA PRA Procedures Guide for Managers and Practitioner. This framework, called herein the "Context-based Software Risk Model" (CSRM), enables the assessment of the contribution of software and software-intensive digital systems to overall system risk, in a manner which is entirely compatible and integrated with the format of a "standard" Probabilistic Risk Assessment (PRA), as currently documented and applied for NASA missions and applications. The CSRM also provides a risk-informed path and criteria for conducting organized and systematic digital system and software testing so that, within this risk-informed paradigm, the achievement of a quantitatively defined level of safety and mission success assurance may be targeted and demonstrated. The framework is based on the concept of context-dependent software risk scenarios and on the modeling of such scenarios via the use of traditional PRA techniques - i.e., event trees and fault trees - in combination with more advanced modeling devices such as the Dynamic Flowgraph Methodology (DFM) or other dynamic logic-modeling representations. The scenarios can be synthesized and quantified in a conditional logic and probabilistic formulation. The application of the CSRM method documented in this report refers to the MiniAERCam system designed and developed by the NASA Johnson Space Center.
An In-time Aviation Safety Management System (IASMS) [1,2] is a set of services, functions, and capabilities (SFCs) necessary for monitoring known hazards and emergent risks, assessing safety data for anomalies, precursors, and trends, mitigating hazards that reach safety thresholds, and assuring efficacy of controls in mitigating hazards. An IASMS will continually monitor the NAS to collect data on the status of aircraft, air traffic management systems, weather, and airports. Within the NASA Aeronautics Research Mission Directorate (ARMD) System-Wide Safety (SWS) project’s technical challenge called In-time Aviation Safety Management Systems (IASMS) for Commercial Aviation Operations, which we often refer to as Technical Challenge 6 (TC-6), we have performed an assessment of several aviation data sources we have found that are relevant to assessing the safety of the National Airspace System (NAS) in the context of an IASMS. This assessment includes understanding the nature of the data themselves and using some data analytics tools on these data to show how they can be used to identify potential safety issues. We also describe how the data and analytics are part of a system that can allow for other data and analytics to be performed and for the results to be visualized for use by appropriate operators to identify potential safety issues and develop mitigations. This report is a step toward the ultimate goal of TC-6, which is to develop a prototype IASMS system that demonstrates the potential of an IASMS and inspire operators to build analogous systems to make the best possible use of the significant investments that they make in collecting, storing, and managingdata related to their operations.
A viewgraph presentation on the flammability of spacecraft materials is shown. The topics include: 1) Spacecraft Fire Safety; 2) Materials Flammability Test; 3) Impetus for enhanced materials flammability characterization; 4) Exploration Atmosphere Working Group Recommendations; 5) Approach; and 6) Status of implementation
One of the foremost requirements for accurate in-flight safety monitoring of autonomous unmanned aerial vehicles (UAVs) is tracking of their flight trajectory. Existing UAVs leverage autonomous flight functionalities based on trajectory generation algorithms developed in robotic applications such as polynomial or spline curves in order to facilitate kinematic smoothness, minimum vibrations and fuel efficiency. However in practice, the actual path may be subjected to unexpected local weather conditions, unexpected obstacles along the path or abrupt traffic changes in the low-altitude airspace resulting in large errors of the predicted time-of-arrival at way-points. In this study, an approach to quantify and propagate uncertainty in 4D trajectories is proposed. The paper presents a simple error interval propagation method based on the expected cruise speed of the UAV and its associated uncertainty. The uncertainty is then propagated in time to estimate reasonable confidence intervals on the times-of-arrival of the vehicle at each way-point as well as along the entire flight-path. The uncertainty propagation is demonstrated on a state-of-the-art trajectory generation algorithm based on non-uniform rational B-spline (NURBS) curves. Further, the effect of a stationary wind field is incorporated in the uncertainty propagation approach. The proposed method is implemented on synthetic and real data obtained from flight experiments with a small UAV.
In the past few decades, the increasing complexity of modern engineering systems has been driven by the integration of a large number of components whose operations may involve many disciplines (e.g., thermal hydraulics, plant operations, cybersecurity). Most computational tools used by industry and regulators for system safety and reliability assessments are still based on the traditional fault tree (FT) and event tree (ET) approach, which may not be able to capture complex interactions among system constituents. The use of simulation tools has widely increased in the past few decades to improve the fidelity of the reliability and safety analyses. However, the direct use of simulation tools as part of dynamic probabilistic risk assessment (DPRA) methods is not getting traction since (1) modeling the whole system under consideration with DPRA methods may be computationally expensive and unnecessary, and (2) the manual integration of DPRA models into existing state-of-practice probabilistic risk assessment models (i.e., based on FTs and ETs) can be time consuming and prone to errors. Here, in this paper we propose a procedure to overcome this limitation by presenting several algorithms designed to automatically construct subsystem ETs and FTs from DPRA methods for integration into an existing ET/FT system model.
A methodology for developing and balancing quantitative design requirements for safety, reliability, and maintainability has been proposed. Conceived as the basis of a more rational approach to the design of spacecraft, the methodology would also be applicable to the design of automobiles, washing machines, television receivers, or almost any other commercial product. Heretofore, it has been common practice to start by determining the requirements for reliability of elements of a spacecraft or other system to ensure a given design life for the system. Next, safety requirements are determined by assessing the total reliability of the system and adding redundant components and subsystems necessary to attain safety goals. As thus described, common practice leaves the maintainability burden to fall to chance; therefore, there is no control of recurring costs or of the responsiveness of the system. The means that have been used in assessing maintainability have been oriented toward determining the logistical sparing of components so that the components are available when needed. The process established for developing and balancing quantitative requirements for safety (S), reliability (R), and maintainability (M) derives and integrates NASA s top-level safety requirements and the controls needed to obtain program key objectives for safety and recurring cost (see figure). Being quantitative, the process conveniently uses common mathematical models. Even though the process is shown as being worked from the top down, it can also be worked from the bottom up. This process uses three math models: (1) the binomial distribution (greaterthan- or-equal-to case), (2) reliability for a series system, and (3) the Poisson distribution (less-than-or-equal-to case). The zero-fail case for the binomial distribution approximates the commonly known exponential distribution or "constant failure rate" distribution. Either model can be used. The binomial distribution was selected for modeling flexibility because it conveniently addresses both the zero-fail and failure cases. The failure case is typically used for unmanned spacecraft as with missiles.
This report documents activities performed by Idaho National Laboratory (INL) during fiscal year (FY) 2024 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, Digital Instrumentation and Control (DI&C) Risk Assessment project. The goal of the RISA Pathway is to optimize safety margins and minimize uncertainties to achieve economic efficiencies while maintaining high levels of safety. This is accomplished by providing scientific basis to better represent safety margins and factors that contribute to cost and safety, and by developing new technologies that reduce operating costs. The research efforts for FY 2024 encompass methodology refinement and exploration. The efforts include: (1) The implementation of a natural language processing tool to expedite key aspects of the reliability analysis methods developed by INL; (2) advances to support intersystem CCF analysis by providing guidance for and identification of coupling mechanisms that may contribute to CCF; (3) the investigation of how generative artificial intelligence tools can aid in hazard analysis and diversity and defense in depth (i.e., D3) assessments; (4) Industry collaboration, allowing the demonstration of and INL's risk assessment tools to support risk assessment of DI&C systems at early and late stages of development; (4) a roadmap for the development of a software for each of INL's risk assessment tools; (5) The development of a theory and methodology manual for a risk quantification methodology; (6) the development of a reliability analysis for machine learning (ML)-integrated control systems.
This report describes specific activities in the Fiscal Year (FY) 2023 associated with the Geologic Disposal Safety Assessment (GDSA) Repository Systems Analysis (RSA) work package funded by the Spent Fuel and Waste Science and Technology (SFWST) Campaign of the U.S. Department of Energy Office of Nuclear Energy (DOE-NE), Office of Spent Fuel and Waste Disposition (SFWD).
This presentation is prepared for the 2023 NRC Fall Risk Forum held on 09/12/2023. Han Bao will attend a panel on "CCF Analysis of Digital Systems" as one panelist. The slides gives an overview about the LWRS program research on DI&C risk assessment.
The Spent Fuel and Waste Science and Technology (SFWST) Campaign of the U.S. Department of Energy Office of Nuclear Energy, Office of Spent Fuel and Waste Disposition (SFWD), has been conducting research and development on generic deep geologic disposal systems (i.e., geologic repositories). This report describes specific activities in the Fiscal Year (FY) 2020 associated with the Geologic Disposal Safety Assessment (GDSA) Repository Systems Analysis (RSA) work package within the SFWST Campaign. The overall objective of the GDSA RSA work package is to develop generic deep geologic repository concepts and system performance assessment (PA) models in several host-rock environments, and to simulate and analyze these generic repository concepts and models using the GDSA Framework toolkit, and other tools as needed.
The Spent Fuel and Waste Science and Technology (SFWST) Campaign of the U.S. Department of Energy Office of Nuclear Energy, Office of Spent Fuel and Waste Disposition (SFWD), has been conducting research and development on generic deep geologic disposal systems (i.e., geologic repositories). This report describes specific activities in the Fiscal Year (FY) 2021 associated with the Geologic Disposal Safety Assessment (GDSA) Repository Systems Analysis (RSA) work package within the SFWST Campaign. The overall objective of the GDSA RSA work package is to develop generic deep geologic repository concepts and system performance assessment (PA) models in several host-rock environments, and to simulate and analyze these generic repository concepts and models using the GDSA Framework toolkit, and other tools as needed.
The Spent Fuel and Waste Science and Technology (SFWST) Campaign of the U.S. Department of Energy Office of Nuclear Energy, Office of Spent Fuel and Waste Disposition (SFWD), has been conducting research and development on generic deep geologic disposal systems (i.e., geologic repositories). This report describes specific activities in the Fiscal Year (FY) 2022 associated with the Geologic Disposal Safety Assessment (GDSA) Repository Systems Analysis (RSA) work package within the SFWST Campaign. The overall objective of the GDSA RSA work package is to develop generic deep geologic repository concepts and system performance assessment (PA) models in several host-rock environments, and to simulate and analyze these generic repository concepts and models using the GDSA Framework toolkit, and other tools as needed.
An Environmental Health and Safety (EH&S) Assessment was completed for operation of a pilot scale carbon dioxide (CO2) capture system (CCS) at the Louisville Gas & Electric (LG&E) and Kentucky Utilities (KU) Energy, LLC (LG&E-KU) E. W. Brown Generating Station in Harrodsburg, Mercer County, Kentucky. The pilot system was evaluated using two CO2 capture solvents, monoethanolamine (MEA) and Hitachi’s H3-1 solvent. The purpose of the EH&S Assessment was to determine if there were any unacceptable environmental, health or safety concerns that may prevent operation or environmental permitting of a larger scale pilot scale plant. The assessment included review of process flow diagrams, input and output flow rates for primary materials, literature describing similar processes and chemicals used or created during the process, actual air emission and wastewater test data and air emission calculations. The evaluation included identification of risks related to hazardous chemicals, air emissions, wastewater discharges, solid wastes generated and employee hazards. Most potential EH&S issues that were identified are commonly found and successfully managed at large industrial facilities. No risks were identified that could not be successfully managed or would likely prevent implementation or environmental permitting of the pilot or larger scale plant. Potential exposures and resulting health risks from exposure to low concentrations of nitrosamines generated from degradation of the Hitachi H3-1 and possibly MEA solvents may be a health concern for site workers, but additional investigation is needed to accurately assess this risk. Applying the information gained from operating the pilot plant, performing air emission testing and used solvent testing to a large-scale facility at a commercial coal-fired electric generating plant suggests additional air emission control measures may be necessary to reduce potential site worker health risks and possibly community risks. Depending upon the location and regional air quality, considerable effort may be required to obtain the necessary air permit for construction and operation of a similarly configured large-scale PCCCS facility.
Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems will greatly benefit existing light water reactors. However, the issue of software common cause failure (CCF) remains an obstacle in terms of qualification for digital technologies. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, design flaws could cause software CCFs to become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multilayer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission licensing procedures. In Fiscal Year 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy’s Light Water Reactor Sustainability Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades and designs. An integrated risk assessment for the DI&C process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. Here this paper summarizes these RISA efforts in the risk analysis of safety-related DI&C systems at Idaho National Laboratory.
An Environmental Health and Safety (EH&S) Assessment was completed for operation of a pilot scale carbon dioxide (CO 2 ) capture system (CCS) at the Louisville Gas & Electric (LG&E) and Kentucky Utilities (KU) Energy, LLC (LG&E-KU) E. W. Brown Generating Station in Harrodsburg, Mercer County, Kentucky. The pilot system was evaluated using two CO 2 capture solvents, monoethanolamine (MEA) and Hitachi’s H3-1 solvent. The purpose of the EH&S Assessment was to determine if there were any unacceptable environmental, health or safety concerns that may prevent operation or environmental permitting of a larger scale pilot scale plant. The assessment included review of process flow diagrams, input and output flow rates for primary materials, literature describing similar processes and chemicals used or created during the process, actual air emission and wastewater test data and air emission calculations. The evaluation included identification of risks related to hazardous chemicals, air emissions, wastewater discharges, solid wastes generated and employee hazards. Most potential EH&S issues that were identified are commonly found and successfully managed at large industrial facilities. No risks were identified that could not be successfully managed or would likely prevent implementation or environmental permitting of the pilot or larger scale plant. Potential exposures and resulting health risks from exposure to low concentrations of nitrosamines generated from degradation of the Hitachi H3-1 and possibly MEA solvents may be a health concern for site workers, but additional investigation is needed to accurately assess this risk. Applying the information gained from operating the pilot plant, performing air emission testing and used solvent testing to a large-scale facility at a commercial coal-fired electric generating plant suggests additional air emission control measures may be necessary to reduce potential site worker health risks and possibly community risks. Depending upon the location and regional air quality, considerable effort may be required to obtain the necessary air permit for construction and operation of a similarly configured large-scale PCCCS facility.
NextGen is a complex socio-technical system and, in many ways, it is expected to be more complex than the current system. It is vital to assess the safety impact of the NextGen elements (technologies, systems, and procedures) in a rigorous and systematic way and to ensure that they do not compromise safety. In this study, the NextGen elements in the form of Operational Improvements (OIs), Enablers, Research Activities, Development Activities, and Policy Issues were identified. The overall hazard situation in NextGen was outlined; a high-level hazard analysis was conducted with respect to multiple elements in a representative NextGen OI known as OI-0349 (Automation Support for Separation Management); and the hazards resulting from the highly dynamic complexity involved in an OI-0349 scenario were illustrated. A selected but representative set of the existing safety methods, tools, processes, and regulations was then reviewed and analyzed regarding whether they are sufficient to assess safety in the elements of that OI and ensure that safety will not be compromised and whether they might incur intolerably high costs.