Search NASA⌕ Search

SEARCH · Search NASA

Results for “certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36

Perceived Noise Analysis for Offset Jets Applied to Commercial Supersonic Aircraft

A systems analysis was performed with experimental jet noise data, engine/aircraft performance codes and aircraft noise prediction codes to assess takeoff noise levels and mission range for conceptual supersonic commercial aircraft. A parametric study was done to identify viable engine cycles that meet NASA's N+2 goals for noise and performance. Model scale data from offset jets were used as input to the aircraft noise prediction code to determine the expected sound levels for the lateral certification point where jet noise dominates over all other noise sources. The noise predictions were used to determine the optimal orientation of the offset nozzles to minimize the noise at the lateral microphone location. An alternative takeoff procedure called "programmed lapse rate" was evaluated for noise reduction benefits. Results show there are two types of engines that provide acceptable mission range performance; one is a conventional mixed-flow turbofan and the other is a three-stream variable-cycle engine. Separate flow offset nozzles reduce the noise directed toward the thicker side of the outer flow stream, but have less benefit as the core nozzle pressure ratio is reduced. At the systems level for a three-engine N+2 aircraft with full throttle takeoff, there is a 1.4 EPNdB margin to Chapter 3 noise regulations predicted for the lateral certification point (assuming jet noise dominates). With a 10% reduction in thrust just after clearing the runway, the margin increases to 5.5 EPNdB. Margins to Chapter 4 and Chapter 14 levels will depend on the cumulative split between the three certification points, but it appears that low specific thrust engines with a 10% reduction in thrust (programmed lapse rate) can come close to meeting Chapter 14 noise levels. Further noise reduction is possible with engine oversizing and derated takeoff, but more detailed mission studies are needed to investigate the range impacts as well as the practical limits for safety and takeoff regulations.

Turbofans↗

Auralization of NASA N+2 Aircraft Concepts from System Noise Predictions

Auralization of aircraft flyover noise provides an auditory experience that complements integrated metrics obtained from system noise predictions. Recent efforts have focused on auralization methods development, specifically the process by which source noise information obtained from semi-empirical models, computational aeroacoustic analyses, and wind tunnel and flight test data, are used for simulated flyover noise at a receiver on the ground. The primary focus of this work, however, is to develop full vehicle auralizations in order to explore the distinguishing features of NASA's N+2 aircraft vis-à-vis current fleet reference vehicles for single-aisle and large twin-aisle classes. Some features can be seen in metric time histories associated with aircraft noise certification, e.g., tone-corrected perceived noise level used in the calculation of effective perceived noise level. Other features can be observed in sound quality metrics, e.g., loudness, sharpness, roughness, fluctuation strength and tone-to-noise ratio. A psychoacoustic annoyance model is employed to establish the relationship between sound quality metrics and noise certification metrics. Finally, the auralizations will serve as the basis for a separate psychoacoustic study aimed at assessing how well aircraft noise certification metrics predict human annoyance for these advanced vehicle concepts.

Rizzi, Stephen A.↗

Perceived Noise Analysis for Offset Jets Applied to Commercial Supersonic Aircraft

A systems analysis was performed with experimental jet noise data, engine/aircraft performance codes and aircraft noise prediction codes to assess takeoff noise levels and mission range for conceptual supersonic commercial aircraft. A parametric study was done to identify viable engine cycles that meet NASAs N+2 goals for noise and performance. Model scale data from offset jets was used as input to the aircraft noise prediction code to determine the expected sound levels for the lateral certification point where jet noise dominates over all other noise sources. The noise predictions were used to determine the optimal orientation of the offset nozzles to minimize the noise at the lateral microphone location. An alternative takeoff procedure called programmed lapse rate was evaluated for noise reduction benefits. Results show there are two types of engines that provide acceptable range performance; one is a standard mixed-flow turbofan with a single-stage fan, and the other is a three-stream variable-cycle engine with a multi-stage fan. The engine with a single-stage fan has a lower specific thrust and is 8 to 10 EPNdB quieter for takeoff. Offset nozzles reduce the noise directed toward the thicker side of the outer flow stream, but have less benefit as the core nozzle pressure ratio is reduced and the bypass-to-core area ratio increases. At the systems level for a three-engine N+2 aircraft with full throttle takeoff, there is a 1.4 EPNdB margin to Chapter 3 noise regulations predicted for the lateral certification point (assuming jet noise dominates). With a 10 reduction in thrust just after takeoff rotation, the margin increases to 5.5 EPNdB. Margins to Chapter 4 and Chapter 14 levels will depend on the cumulative split between the three certification points, but it appears that low specific thrust engines with a 10 reduction in thrust (programmed lapse rate) can come close to meeting Chapter 14 noise levels. Further noise reduction is possible with additional reduction in takeoff thrust using programmed lapse rate, but studies are needed to investigate the practical limits for safety and takeoff regulations.

Turbofans↗

Argument-Based Airworthiness Assurance of Small UAS

Presently, there are three avenues by which Unmanned Aircraft System (UAS) operations are authorized in the U.S. National Airspace System (NAS): obtaining either (i) a certificate of authorization (COA), or (ii) a special airworthiness certificate (SAC) in either the experimental, or the restricted category, or (iii) an exemption from an airworthiness certificate together with a civil COA. The first is meant primarily for public entities, such as NASA; the remaining two are the only available means for civil UAS operations. Recently, the Federal Aviation Administration (FAA) has also proposed a regulatory framework targeted for certain small UAS, specifically those weighing 55 pounds or less, although final rulemaking remains pending. We have previously shown how an assurance case can aggregate heterogeneous reasoning and safety evidence, with application to UAS safety. In this paper, we describe how assurance cases can serve as a common framework to justify overall system safety, unifying both operational aspects and airworthiness, in particular system design assurance. We also show how this approach can coexist with, and augment, existing safety analysis processes and best-practices, by transforming the artifacts they produce into structured assurance arguments. To illustrate the applicability and utility of our approach, we have been applying it for the design assurance of an unmanned rotorcraft system, intended for precision agriculture operations, as part of the NASA Unmanned Aircraft System (UAS) Integration in the National Airspace System (NAS) project.

Rotocraft↗

Thermal Protection Systems Technology Transfer from Apollo and Space Shuttle to the Orion Program

This paper describes how the Orion program is utilizing the Thermal Protection System (TPS) experience from the Apollo and Space Shuttle programs to reduce program risk and improve affordability to meet NASA's future manned exploration missions. The Orion program successfully completed the Exploration Flight Test (EFT-1) mission in 2014 and is currently assembling, integrating, and testing the next spacecraft for the Exploration Mission (EM-1) to meet the flight test objectives of an unmanned orbital mission to the moon and return to earth in 2019. The Orion spacecraft production operations are located in the Neil Armstrong Operations and Checkout (O&C) facility at the Kennedy Space Center (KSC) providing an affordable and seamless delivery approach of vehicles directly to the launch site eliminating spacecraft transportation and additional checkout testing. Innovative vehicle design, manufacturing and test operations approaches are maturing and evolving with each Orion vehicle build to support the challenging NASA exploration mission requirements beyond Low Earth Orbit (LEO) while reducing program cost and schedule impacts. An example of Orion's evolution is the incorporation of an improved heat shield design, assembly and testing approach to meet the higher re-entry velocities for a lunar return for the EM-1 mission. The EFT- 1 heat shield was based on the Apollo heat shield manufacturing processes and was assembled at a supplier location and then transported to KSC for final integration. The EM-1 heat shield is now manufactured, assembled, tested, and installed into the spacecraft at the O&C facility reducing program cost and production schedules. The transition of the Space Shuttle TPS capabilities has enabled Orion to provide a human rated capsule design using proven materials and processes established over years of orbiter re-entry missions. The Orion Crew Module (CM) TPS configuration is derived from the Apollo CM approach utilizing improved materials and processes developed from the Space Shuttle program. The Orion EFT-1 heat shield utilized the Avcoat ablative material from Apollo which was injected into a honeycomb substrate and has been updated for EM-1 incorporating a block configuration bonded to a composite shell structure. This approach utilizes the proven Avcoat material for the heat shield ablator and is utilizing derived bonding and inspection methods and techniques from the Space Shuttle tile experience. The Orion back shell TPS configuration is based on Space Shuttle tile designs using proven tile materials and coatings. The Orion forward bay cover utilizes the high temperature tiles similar to the back shell tiles and low temperature blankets derived from the Space Shuttle program reducing weight impacts. Space Shuttle Multi-Layer Insulation (MLI) is installed in the Orion capsule to control the interior temperature environment providing a light weight design. These TPS design approaches have performed successfully on the Orion first flight test on EFT-1 and are incorporated in the configuration for the next flight test for EM-1. Completion of these two flight tests will certify the TPS for the Orion program for human rated exploration missions and has reduced the development cost to the Orion program. In addition to transitioning the Space Shuttle TPS design configurations to Orion, the supporting manufacturing infrastructure, manufacturing processes, and inspection methods are also incorporated into the Orion assembly operations at KSC. This has avoided significant startup schedule and costs impacts of new capabilities and development of support operations necessary to fabricate, install, inspect, and validate the TPS installations for the Orion spacecraft. The Thermal Protection System Facility (TPSF) which supported the Space Shuttle program provides the heat shield Avcoat blocks and the back shell AETB-8 tiles for Orion program. Extending the existing Space Shuttle TPS operations at KSC provides onsite support to the Orion spacecraft assembly operations. A significant benefit to the Orion program is the transition of the Space Shuttle technician work force at KSC. This highly skilled workforce was able to transition to the Orion program and immediately support the TPS installation operations. They brought with them the human rated manufacturing and assembly operations culture that was critical to the Space Shuttle success avoiding the retraining cost and schedule impacts of a new workforce to Orion. The technician skills certification program from the Space Shuttle was found to be compatible with the Lockheed Martin technician certification programs enabling a seamless training process utilizing process similarity avoiding the cost of retraining the work force to Orion standards. The existing workforce is certificated for multiple processes enabling reassignment of technicians to other tasks in the Orion AI&P operations reducing the overall touch labor manpower requirements. Additional benefits of using the Space Shuttle workforce is the incorporation of the lessons learned from Space Shuttle processes to improve the Orion TPS processes. This has resulted in a continuous evolution of TPS processes to improve the producibility and reduce the program cost for the TPS for the Orion program. Transitioning the Apollo and Space Shuttle TPS designs, processes, and technician workforce has been instrumental in enabling Orion to successfully meet the program challenges for NASA's exploration missions of the future.

Stewart, Michael↗

Perceived Noise Analysis for Offset Jets Applied to Commercial Supersonic Aircraft

A systems analysis was performed with experimental jet noise data, engineaircraft performance codes and aircraft noise prediction codes to assess takeoff noise levels and mission range for conceptual supersonic commercial aircraft. A parametric study was done to identify viable engine cycles that meet NASAs N+2 goals for noise and performance. Model scale data from offset jets was used as input to the aircraft noise prediction code to determine the expected sound levels for the lateral certification point where jet noise dominates over all other noise sources. The noise predictions were used to determine the optimal orientation of the offset nozzles to minimize the noise at the lateral microphone location. An alternative takeoff procedure called programmed lapse rate was evaluated for noise reduction benefits. Results show there are two types of engines that provide acceptable range performance; one is a standard mixed-flow turbofan with a single-stage fan, and the other is a three-stream variable-cycle engine with a multi-stage fan. The engine with a single-stage fan has a lower specific thrust and is 8 to 10 EPNdB quieter for takeoff. Offset nozzles reduce the noise directed toward the thicker side of the outer flow stream, but have less benefit as the core nozzle pressure ratio is reduced and the bypass-to-core area ratio increases. At the systems level for a three-engine N+2 aircraft with full throttle takeoff, there is a 1.4 EPNdB margin to Chapter 3 noise regulations predicted for the lateral certification point (assuming jet noise dominates). With a 10 reduction in thrust just after takeoff rotation, the margin increases to 5.5 EPNdB. Margins to Chapter 4 and Chapter 14 levels will depend on the cumulative split between the three certification points, but it appears that low specific thrust engines with a 10 reduction in thrust (programmed lapse rate) can come close to meeting Chapter 14 noise levels. Further noise reduction is possible with additional reduction in takeoff thrust using programmed lapse rate, but studies are needed to investigate the practical limits for safety and takeoff regulations.

Jet Noise↗

Fracture Control for Additively Manufactured Spacecraft Structures

This paper describes how the intent of current NASA fracture control requirements may be applied to “fracture critical” additively manufactured spacecraft hardware. Fracture control is a multi-discipline design and certification methodology that is applied in order to mitigate catastrophic failure of structures resulting from growth of an undetected crack-like defect. The methodology is defined in existing NASA standards and is required on all human-rated space structures. As legacy spacecraft structures have been built using primarily metallic and composite materials manufactured using well established methods, guidance for application of fracture control to parts composed of these material types has been established and is documented in several NASA requirements. Additive manufactured structures offer advantages in design flexibility and manufacturing efficiency and as a result are expected to continue to be used more and more in the future. Recently, relevant guidance has been published by NASA to define materials and processes requirements for certain additive manufactured hardware, but procedures for fracture control are not addressed yet in any requirements or guidance document. While use of additive manufactured parts in non-critical scenarios may be of relatively low concern in current structural certification processes, there is a need for new fracture control guidance in order to use and certify additively manufacture hardware that is “fracture critical” where failure of the part may result in loss of life or loss of vehicle. Assurance of damage tolerance, i.e., that as-built flaws in a given part either do not exist or will not grow to become catastrophic, is of particular interest to the fracture control community. This poses a challenge due to the fact that damage tolerance behavior is not well understood in additive manufactured parts compared to legacy material types and manufacturing techniques. The discussion contained herein is necessary at this time as new guidance in this area should be founded collaboratively by the technical community at large. Different hardware types (e.g., pressure vessel, structural member) are described to highlight specific challenges and solutions for each. The discussion concludes with considering specific disciplines within fracture control (non-destructive evaluation, materials & processes, fracture mechanics, and structural certification) in a proposed extension of existing fracture control requirements to additive manufactured parts.

McElroy, Mark↗

Fracture Control for Additive Manufactured Spacecraft Structures

This paper describes how the intent of current NASA fracture control requirements may be applied to “fracture critical” additively manufactured spacecraft hardware. Fracture control is a multi-discipline design and certification methodology that is applied in order to mitigate catastrophic failure of structures resulting from growth of an undetected crack-like defect. The methodology is defined in existing NASA standards and is required on all human-rated space structures. As legacy spacecraft structures have been built using primarily metallic and composite materials manufactured using well established methods, guidance for application of fracture control to parts composed of these material types has been established and is documented in several NASA requirements. Additive manufactured structures offer advantages in design flexibility and manufacturing efficiency and as a result are expected to continue to be used more and more in the future. Recently, relevant guidance has been published by NASA to define materials and processes requirements for certain additive manufactured hardware, but procedures for fracture control are not addressed yet in any requirements or guidance document. While use of additive manufactured parts in non-critical scenarios may be of relatively low concern in current structural certification processes, there is a need for new fracture control guidance in order to use and certify additively manufacture hardware that is “fracture critical” where failure of the part may result in loss of life or loss of vehicle. Assurance of damage tolerance, i.e., that as-built flaws in a given part either do not exist or will not grow to become catastrophic, is of particular interest to the fracture control community. This poses a challenge due to the fact that damage tolerance behavior is not well understood in additive manufactured parts compared to legacy material types and manufacturing techniques. The discussion contained herein is necessary at this time as new guidance in this area should be founded collaboratively by the technical community at large. Different hardware types (e.g., pressure vessel, structural member) are described to highlight specific challenges and solutions for each. The discussion concludes with considering specific disciplines within fracture control (non-destructive evaluation, materials & processes, fracture mechanics, and structural certification) in a proposed extension of existing fracture control requirements to additive manufactured parts.

McElroy, Mark↗

Optically Enhanced Bonding Workstation for Robust Bonding

Process control is one of the methods recommended by the FAA to reduce risk in fabrication of structurally bonded composite joints for aircraft structure based on guidance provided in circular AC-107B for certification of structurally bonded joints. An Optically Enhanced Bonding Workstation is presented here that reduces the risk in bonded joint fabrication. Results will be presented demonstrating the benefits of process monitoring and its ability to reduce risk in performing pre-bond composite surface preparation steps. This supports reduction in the timeline to certification of bonded composite structures through development of a robust bonding process upstream of any part certification steps. Sanding surface preparation has been identified as a high risk process step that is known to impact bond performance. Control of sanding during surface preparation can be performed using portable surface analysis tools previously identified including included gloss, color, Fourier Transform Infrared spectroscopy (FTIR) and optically stimulated electron emissions (OSEE). Threshold limits for the surface analysis tool measurements were determined based on an example objective bonding system utilizing a common EA9394 paste adhesive measured using standard double cantilever beam fracture toughness testing. The patented Optically Enhanced Bonding Workstation (OEBW), was tailored to monitor and control the epoxy composite surface preparation step. Surface analysis tool threshold limits were incorporated into the OEBW to demonstrate improved composite bond performance through process control. The surface analysis tools investigated here can easily be incorporated into an automated system due to their applicability to rapidly quantify the composite sanded surface treatment and their portability.

Kutscha, Eileen O.↗

Variable Noise Reduction Systems for a Notional Supersonic Business Jet

A variable noise reduction system consists of equipment on board an airplane that is designed to reduce noise in the vicinity of airports. They are anticipated to be used on supersonic civil aircraft currently under development by industry. They are investigated in this paper for a notional 55-tonne supersonic business jet. The airplane concept was developed by NASA for use in environmental impact studies conducted by the International Civil Aviation Organization. The variable noise reduction system investigated implements a programmed thrust lapse procedure and a programmed flap retraction procedure. The procedures are expected to reduce noise in aircraft certification as well as in operational practice. Behavior of the aircraft in a noise certification setting is considered. Variables of the procedures are optimized to reduce noise levels. Certification considerations unique to these systems are discussed for transport-category large airplanes and for jet-powered airplanes. A novel method for evaluating lateral noise is used.

Aircraft noise↗

Soyuz Landing Reconstructions

Introduction: Recent data show a landing-attributed injury rate among Soyuz crew members to be higher than predicted in original certification analysis. New vehicles being developed for NASA are being certified using analytical tools to quantify injury risk. This assessment will provide data to allow the Agency to evaluate whether these tools are able to capture true injury risk and allow a comparison between Soyuz landings and upcoming vehicles. Methods: A finite element model (FEM) of the Soyuz descent module (DM) and its landing environment were developed to recreate Soyuz landing conditions. Occupant breakout models composed of the Soyuz seat and Sokol helmet were then developed to evaluate occupant response. These models included both anthropomorphic test device (ATD) and human body model (HBM) surrogates in three anthropometric sizes. A generalized distribution analysis of the Soyuz landing environment was performed using landing variable distributions from available literature. Results were used to identify trends in vehicle landing acceleration with landing conditions and to compare landing model injury risk predictions with those estimated in vehicle certification analysis. Next, historic Soyuz landings identified as inducing occupant injury during were reconstructed using the developed landing model and estimated landing conditions. Results and Discussion: This assessment demonstrated the capability of certification metrics, which include a combination of vehicle- and occupant-level injury risk analysis, to identify elevated injury risk landing conditions. However, the developed landing load predictions were limited by available vehicle and landing condition data. Additional data, particularly landing acceleration data specific to historic Soyuz landing conditions, would greatly enhance this assessment’s findings.

Preston Greenhalgh↗

Event Report for The Ethical Artificial Intelligence Quantification Workshop

Artificial Intelligence (AI) is a powerful emerging technology area which requires special attention to using it ethically. AI ethics is still an emerging field, and the partners for this workshop and report seek to move AI ethics discussion ahead by experimenting with ways to measure AI ethics criteria. The following document describes the outcomes and learnings from The Ethical Artificial Intelligence Quantification Workshop held at the National Institute for Aerospace (NIA), Hampton, Virginia on May 12th, 2022. The purpose of the workshop was for participants to evaluate and experiment-with the methodology and process presented by AIEthics.World in cooperation with Intel Corporation. The meeting participants learned about the Ethical AI Certification and Maturity Model™ and applied the methodology to selected notional AI systems. The workshop facilitated the evaluation of the maturity of the AI system according to ethical considerations relevant to NASA, NIA and other participants. The workshop consisted of three main phases. The first phase focused on understanding and summarizing NASA’s ethical approaches, mission and values based on published documentation, discussions and individual insights & opinions of participants. This information was prioritized, weighted, ordered, and quantified in phase two, to formulate an alignment between human values (ethics) and their applicability to AI systems during all lifecycle phases. The first two phases were summarized as a form of ethical genealogy for artificial intelligence, specific to NASA’s ethical approaches. In the third and last phase of the workshop the participants evaluated notional examples of artificial intelligence to qualify and quantify its ability to adhere to the organizational ethics approaches, using the Ethical AI Certification and Maturity Model™. The workshop uses the concept of genealogy, in the traditional sense: the study and traceability of lines of ancestors in the process of evolutionary development from earlier forms. However, as it is applied to an Ethical AI definition, it is providing the insights to the necessary and mandatory traceability of content, data, metrics, telemetry, elements, and structures which are used in the AI’s lifecycle to foster and measure AI ethics in all steps of its lifecycle. The Ethical Artificial Intelligence Quantification Workshop provided NASA with the opportunity to apply the Ethical AI Certification and Maturity Model™, in combination with existing and well-known decision-making and quality control methods to identify the metrics and measurements for an Ethical AI and assess its ethical condition and quality aligned with NASA ethics approaches. The result of the workshop is the capacity for NASA to apply the maturity model assessment to its AI Systems as desired and if necessary, publish the ability of these AI Systems to adhere to the organizational ethical goals. AI ethics frameworks need to be customized for each application domain, for example, individual NASA Mission Directorates. General principles that work in one area such as AI/Machine Learning-based text analysis (the ethics of information-extraction) may need to be adapted for another such as sense-and-avoid decision-making in a flight environment. The workshop was conducted among approximately twenty NASA subject matter experts, so the elements noted above should be considered examples, not definitive NASA ethical AI principles, genealogy, etc. Generating a definitive AI ethics framework for an organization as diverse as NASA would require far more discussion, debate, review, etc. However, the workshop provided valuable insight into mechanisms and processes for quantifying AI ethical qualities.

Artificial Intelligence↗

X-57 Maxwell Airworthiness Validation Plan

This report is a Final Airworthiness Validation Plan (AVP) and describes how an aircraft like X-57 does (and does not) meet current airworthiness standards. The objective of this report is to create an example certification basis, associated means of compliance (MoC), and method of compliance for a distributed electric propulsion airplane under 14 Code of Federal Regulations (CFR) Part 21, “Certification Procedures for Products and Articles,” and its associated relevant sections of 14 CFR for “Airworthiness Standards” of Part 23, “Normal Category Airplanes,” Part 33 “Aircraft Engines,” and Part 35 “Propellers.” The approach to meet the objective is to use NASA’s X-57 Modification (Mod) IV flight demonstrator as an example and categorize its applicability to the regulations and standards according to the following three conditions: 1. Identify, where applicable, that the MoC and methods of compliance can be associated with existing Standard Specifications and Standard Practices of (ASTM) Committee F39 on Aircraft Systems and ASTM Committee F44 on General Aviation Aircraft; 2. If relevant ASTM standards do not exist, identify means and-or methods of compliance from appropriate Federal Aviation Administration (FAA) Advisory Circulars and other sources to use for the X-57 Mod IV vehicle; or 3. If no relevant certification rule, MoC, or method of compliance exists, highlight this omission and provide recommendations.

Herbert W Schlickenmaier↗

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗

Building a Credible and Updated WIPP Performance Assessment - New Knowledge Versus Conservative Assumptions and FEP Analysis, A Balancing Act - 16299

Conservative assumptions are important components in conceptual model development where limited data is available. And, as appropriate, during the early 1990's Department of Energy (DOE) adopted many conservative assumptions in the development of the Waste Isolation Pilot Plant's (WIPP's) 24 Conceptual Models incorporated in DOE's 1996 Compliance Certification Application (CCA) performance assessment (PA). Many of these assumptions were formulated and documented in the WIPP relevant features, events and processes (FEPs) analyses; others were adopted when developing input parameter values and their distributions that were used as inputs to computer models. The Agency accepted these conservative assumptions during their 1996 CCA assessment for several reasons; 1) at the time there was a scarcity of data related to long-term behavior of many parameters needed to be incorporated in the PA, 2) sensitivity studies performed during this time period determined that the affected 'conservative' assumptions adopted for some parameters had minimal to no impact on repository performance; and, 3) DOE could demonstrate compliance with EPA's radioactive waste disposal regulations while adopting conservative assumptions and data. Since the initial 1996 CCA DOE has modified the repository panel closure design, and the repository footprint in the experimental areas has expanded. These modifications were incorporated into DOE's 2014 Compliance Re-certification Application for WIPP. Additionally, there have been numerous investigations related to both the short- and long-term behavior of salt in a repository setting. As a result, the Agency is reassessing the use of these conservative assumptions and the continued applicability of the original FEP analyses, primarily developed during DOE's 1996 PA and carried forward to the current re-certification. This paper examines some of these analyses. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Content Addition and Testing for 2017 NRC Amendment for the Versa-Pac Type A Fissile Packaging - 18120

The Versa-Pac is a certified Type A, fissile packaging (USA NRC Certificate no. USA/9342/AF-96), often used as a waste package for one time use. Continuous content additions have improved the versatility of the package resulting in expanded uses for the nuclear industry. Principal design of the Versa-Pac packaging maintains the use of an inner liner positioned inside a 55-gallon (VP-55) or 110-gallon drum (VP-110), as used for decades in the transport and disposal of Type A fissile materials. The Versa-Pac is used directly or in conjunction with pails, pipe containers, poly bottles, and a variety of smaller containers, inserts and vessels. The Versa-Pac content developments assist the industry with site shutdown, decommissioning, and cleanup operations, allowing for removal, transport, and storage options for the residual waste materials. A 2017 NRC license amendment application adds new capabilities to the Versa-Pac that include a low 1.25 wt% {sup 235}U enriched uranium loading, small quantities of UF{sub 6} in the form of 1S and 2S cylinders, and a payload mass increase from 250 to 350 pounds for the Versa-Pac 55-gallon version (VP-55). The lower uranium enrichment loading of 1.25 wt% {sup 235}U allows for a higher uranium mass limit. The inclusion of 1S and 2S UF{sub 6} cylinders fills an industry need to remove and dispose of long-stored material during site cleanup activities. The content payload mass limit is increased for low contaminated or radioactive heavy metal contents, such as cut plant components and ingots. Regulatory certification of new contents is demonstrated by test, analysis, and a combination of these techniques to show that the design function of the Versa-Pac as a Type A fissile package remains unchanged. Specific UF{sub 6} criticality and thermal analysis upgrades are added to the design documentation to accommodate 1S and 2S UF{sub 6} cylinders. The parameters for criticality analyses are simplified, ensuring no credit for cylinder containment is required for HAC thus reducing the reliance on a single specific shoring device. An upgrade of the Versa-Pac thermal analysis demonstrates compliance with ANSI N14.1 UF{sub 6} cylinder thermal limits. A new drop test sequence for the VP-55 was performed, documenting the addition of the 350-pound payload and demonstrating the VP-55 maintains structural integrity during the NCT and HAC drop, crush and puncture events as defined by 10 CFR 71. The testing and analyses show no loss of the material occurs and the package maintains the material in a subcritical state. This paper traces the engineering and licensing efforts involved in expanding the Versa-Pac's versatility for the 2017 NRC amendment application; summarizing the new testing and results for the payload increase, the content addition criticality and thermal evaluations, and content description for the Versa-Pac Safety Analysis Report. The NRC license amendment is scheduled for Winter 2017. Testing and supporting analyses reported in the Versa-Pac Safety Analysis Report demonstrates the content developments met the performance requirements of 10 CFR 71 for a Type A fissile package. A revision of the NRC Certificate of Compliance is expected in Spring 2018. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Fermilab's Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. The grid workload management system GlideinWMS which is also based on HTCondor was updated to use tokens for pilot job submission. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility, but some experiments are beginning to transition to stop using them.

Dykstra, Dave [Fermilab] (ORCID:0000000326539015)↗

ORNL Package Testing Program Overview

Radioactive materials are widespread in our everyday activities which are used in many different types of industries: Consumer products, Medicine, Industry, Energy, and Defense. In the United States there is about 3 million shipments of radioactive materials per year. With radioactive material being very widespread the number of new applications to ship these quantities increases daily. As such, ensuring the safe and secure transport of these materials is paramount, necessitating stringent packaging, transportation, and certification requirements. Shipments of radioactive materials have been made from Oak Ridge National Laboratory (ORNL) for the past 65 years. Since the 1940s ORNL has been at the forefront of the early development of regulations pertaining to the transport of radioactive shipments and associated regulatory testing. The early involvement resulted in ORNL being one of the leaders in the development of regulations and testing standards pertaining to the testing and design of packages. Today all package testing activities are conducted under the Package Testing Program (PTP) at ORNL at the Package Evaluation Facility (PEF). The PTP develops and evaluates testing solutions – ensuring that they are safe, efficient, and meet regulatory requirements ORNL PTP has extensive experience in the regulatory testing of radioactive material packages, supporting certification of Type A, Type, B, Type AF, and special form packages. The PEF serves as a one-stop-shop for design, testing, and certification of a wide variety of packages needed for shipment of radioactive materials. The facility provides the space, expertise, and equipment necessary to conduct rigorous performance testing under both normal and accident conditions or transport environments including free drop, dynamic crush, puncture, penetration, compression, vibration, water spray, water immersion, and thermal test. The PTP remains a key contributor to the safety and compliance of radioactive material transportation. This presentation will provide an overview of the program’s history, capabilities, and its ongoing role in advancing regulatory standards and transportation safety.

Martinez, Oscar [ORNL] (ORCID:0000000181814046)↗