Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 703 records · Page 39

Probabilistic Analysis of a Composite Crew Module

An approach for conducting reliability-based analysis (RBA) of a Composite Crew Module (CCM) is presented. The goal is to identify and quantify the benefits of probabilistic design methods for the CCM and future space vehicles. The coarse finite element model from a previous NASA Engineering and Safety Center (NESC) project is used as the baseline deterministic analysis model to evaluate the performance of the CCM using a strength-based failure index. The first step in the probabilistic analysis process is the determination of the uncertainty distributions for key parameters in the model. Analytical data from water landing simulations are used to develop an uncertainty distribution, but such data were unavailable for other load cases. The uncertainty distributions for the other load scale factors and the strength allowables are generated based on assumed coefficients of variation. Probability of first-ply failure is estimated using three methods: the first order reliability method (FORM), Monte Carlo simulation, and conditional sampling. Results for the three methods were consistent. The reliability is shown to be driven by first ply failure in one region of the CCM at the high altitude abort load set. The final predicted probability of failure is on the order of 10-11 due to the conservative nature of the factors of safety on the deterministic loads.

FROM↗

UAM Instrument Flight Procedure Design and Evaluation in the Joby Flight Simulator

NASA’s Advanced Air Mobility (AAM) National Campaign (NC) partnered with Joby Aviation to test and evaluate different developmental candidate Urban Air Mobility (UAM) Instrument Flight Procedure (IFP) designs including new departure, enroute, approach and missed approach architectures using Joby’s high-fidelity engineering aircraft simulator. In conjunction with the simulator testing, this effort also evaluated related aspects such as charting, coding, and adherence to flight planning criteria. The test objectives were to assess the safety, efficiency, passenger comfort and noise of the different variations of the developmental IFPs. Safety-related measures include clearance from terrain and vertical obstructions, procedure flyability, and flight path conformance. Efficiency-related measures included time required, airspace volume required, and battery energy required. Passenger comfort and ride quality measures include roll/pitch angles, roll/pitch attitude change rates, and airspeeds prior to aggressive maneuvers, subjective pilot/passenger responses and acceleration forces. The noise impacts of the different IFPs will be interpolated/extrapolated using data from the simulator fed into a separate Joby acoustic software-based tool. Overall, several tradeoffs were identified and characterized between the different variations of the developmental IFP profiles. No single version of the developmental IFP structure scored highest across all measures listed above; rather, different IFP variations proved optimal for different measures, confirming that the best IFP depends on which specific measures are prioritized for a given aircraft, location and operation.

National Campaign↗

Innovative approach to counterfeit and noncompliant refrigerant detection: A cost-effective, portable solution

The increasing prevalence of counterfeit and incompatible refrigerants presents significant risks to Heating, Ventilation, Air Conditioning, and Refrigeration (HVAC&R) systems, including compromised equipment performance, safety hazards, and non-compliance. This article details the development of a novel, cost-effective, and portable detection device designed to accurately verify refrigerants. The device utilizes a controlled gas sampling and analysis system within a sealed chamber, ensuring precise measurements while maintaining safety through a purging mechanism. The system features a high-sensitivity sensor integrated with an onboard control module that analyzes gas composition in real-time, providing feedback within a 2-minute duration. Laboratory validation demonstrated the device’s high accuracy (>95 % based on correct identification of compliant vs. non-compliant blends) in detecting unauthorized refrigerant blends. The projected cost of the product stands at ∼ $150, based on the retail pricing of individual components. Laboratory validation demonstrated the device’s high accuracy (>95 % for composition identification, 100 % rejection of tested counterfeit/incorrect blends) in detecting unauthorized refrigerant blends with a response time <2 min. The device correctly identified authentic R-454A/B/C blends and reliably rejected R-407F and closely related counterfeit mixtures. Key advantages include affordability, ease of use, rapid response time, and compatibility with a wide range of refrigerants. This solution supports compliance with regulatory frameworks, enhances safety in HVAC&R operations, and mitigates the risks associated with counterfeit refrigerants.

Counterfeit refrigerants↗

Safety envelope for load tolerance of structural element design based on multi-stage testing

Structural elements, such as stiffened panels and lap joints, are basic components of aircraft structures. For aircraft structural design, designers select predesigned elements satisfying the design load requirement based on their load-carrying capabilities. Therefore, estimation of safety envelope of structural elements for load tolerances would be a good investment for design purpose. In this article, a method of estimating safety envelope is presented using probabilistic classification, which can estimate a specific level of failure probability under both aleatory and epistemic uncertainties. An important contribution of this article is that the calculation uncertainty is reflected in building a safety envelope using Gaussian process, and the effect of element test data on reducing the calculation uncertainty is incorporated by updating the Gaussian process model with the element test data. It is shown that even one element test can significantly reduce the calculation uncertainty due to lacking knowledge of actual physics, so that conservativeness in a safety envelope is significantly reduced. The proposed approach was demonstrated with a cantilever beam example, which represents a structural element. The example shows that calculation uncertainty provides about 93% conservativeness against the uncertainty due to a few element tests. As a result, it is shown that even a single element test can increase the load tolerance modeled with the safety envelope by 20%.

42 ENGINEERING↗

Sensitivity Analysis of Lbloca In Response To 10 Cfr50.46c New Rulemaking

The Nuclear Regulatory Commission (NRC) is proposing a new rulemaking on emergency core system/loss-of-coolant accident (LOCA) performance analysis. In the proposed rulemaking, designated as 10 CFR 50.46c, the US NRC puts forward an equivalent cladding oxidation criterion as a function of cladding pre-transient hydrogen content. The proposed rulemaking imposes more restrictive and burnupdependent cladding embrittlement criteria; consequently more fuel rods need to be analyzed under LOCA conditions to maintain the safety margin, in contrast to the current practice with which only one hot rod needs to be analyzed. New multi-physics analysis methods are required to provide a thorough characterization of the reactor core in order to identify the locations of the limiting rods and quantify safety margins under LOCA conditions. The U.S. DOE’s Light Water Reactor Sustainability (LWRS) Program has initiated a project to develop multi-physics analytical capabilities, called LOTUS, to support the industry in the transition to the proposed rule. An approach to uncertainty quantification and sensitivity analysis with LOTUS was developed. A typical four-loop PWR plant model was developed and simulated by RELAP5-3D with inputs generated from core design and fuel performance analyses, and uncertainty quantification and sensitivity analysis were performed with seventeen uncertain input parameters. The maximum equivalent cladding reacted ratio (ECRR) and peak clad temperature ratio (PCTR) were selected as the figures of merit (FOM). Pearson, Spearman, partial correlation coefficients, and Sobol indices were considered for all of the figures of merit in the sensitivity analysis.

10CFR50.46c↗

Consequence analyses of sabotage-induced radiological releases in high-temperature helium-cooled prismatic microreactors

Here, this study analyzes the radiological dose consequences of sabotage-induced accidents at three high-temperature helium-cooled prismatic microreactors (HTPMs) with thermal power ratings of 1, 10, and 50 MWt. Each HTPM employs uranium oxycarbide tristructural isotropic fuel enriched to 19.75 wt% high-assay low-enriched uranium. Simulations were conducted to estimate reactor core inventory at the point of fuel discharge––when the effective multiplication factor reduced to less than 1––representing peak radionuclide inventory. Postulated sabotage scenarios leading to reactor shutdown were analyzed at two intervals: immediately post-shutdown (0 h) and 3 days after shutdown using the SCALE code for radionuclide inventories and the RASCAL tool for dose consequences. Results show that although HTPMs benefit from inherent safety features and robust fuel design, radiological consequences scale with reactor power because of increased source term inventories. Smaller microreactors exhibited proportionally lower dose consequences. To support the economic and regulatory feasibility of microreactor deployment, this study emphasizes the value of a risk-informed, performance-based approach, as supported by regulations like 10 CFR Parts 100 and 53 in the United States. Microreactor developers should perform site-specific assessments of potential sabotage or low-probability, high-consequence events, especially when considering minimal on-site or full off-site emergency response.

Consequence↗

Prospect and Reality of Concentration Gradient Cathode of Lithium-ion Batteries

Li[Ni x Co y Mn z ]O 2 cathodes are currently the most practicable materials in the timing of developing high performance rechargeable batteries for next generation technologies. With the ever growing demand for energy density, a significant breakthrough has been achieved by the controllable concentration design forming core shell and con centration gradient structures to push Li[Ni x Co y Mn z ]O 2 toward higher energy density, longer lifetime and safety. In this paper, we review the recent progress on advanced concentration gradient cathode materials. Furthermore, we prospect that this novel approach w ill continuously extend its advantages in developing extremely fast charging and Co free cathode materials in the near future.

25 ENERGY STORAGE↗

Multidisciplinary Design of an Innovative Natural Draft, Forced Diffusion Cookstove for Woody and Herbaceous Biomass Fuels in East Africa

The goal of the project was to develop a commercially viable, natural draft cookstove that exceeds ISO tier 4 criteria while meeting the needs of rural and urban cooks in East Africa. The cookstove should be market ready that meets the manufacturing cost and usability expectations of the final users, including durability, safety, comfort, aspirational value and compatibility with local fuels, foods, and customs. The cleaner burning cookstove product was designed to replace open fires and inefficient stoves so that it can enhance indoor air quality, personal health, livelihoods, and the environment. The stove was developed using integrated and multidisciplinary design approach that included field based user research and focus groups, empirically verified computational fluid dynamics and heat transfer modeling, lab and field based emission and efficiency measurements, design for manufacturability, as well as in-home user product evaluations.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Achieving Verifiable and High Integrity Instrumentation and Control Systems through Complexity Awareness and Constrained Design. Final Report

While most process control industries have been able to embrace digital Instrumentation and Control (I&C) technology to improve performance, reliability, maintainability, and efficiency of production, the nuclear industry has been relatively slow to adopt digital I&C for safety critical plant functions. There are a variety of reasons for this, but in general the nuclear industry takes a conservative stance that new technologies must mature before adoption. A deeper underlying reason for not fully realizing digital I&C and automation in nuclear power is associated with the complexity that can manifest in software-based systems that is different in nature from the complexity of their analog predecessors. Accordingly, this research pursued the development of innovative architectures and methods to “constrain complexity” to enhance verifiability of digital I&C devices. These constraints can positively impact the reduction of Software Common Cause Failures (SCCF) and other systematic errors. The architectural concept developed in this research effort is called SymPLe. SymPLe is specifically aimed at safety critical functions within Nuclear Power Plants and other critical infrastructure where constraining device complexity to support verifiability and safety case arguments is important. The SymPLe architecture is designed to promote “accessible verification” between OEM/utility engineers and the regulatory agencies who review and license nuclear power plant I&C systems. The major contributions of this work to the nuclear industry are: Demonstration of SymPLe as a viable approach to “complexity aware” I&C systems and Embedded Digital Devices.Comprehensive use of model-based design and engineering to produce verifiable I&C systems for the nuclear industry with clear findings on the usability of model-based engineering. Employ comprehensive use of model-based engineering, testing, and verification in an IEC 61508 workflow in support of design assurance. Gathered evidence of “difficult to find” design flaws found using model-based design and testing methods. Detailed the nature of these SCCFs including where they were introduced, the triggers, and how they were found. Gathered evidence on the synergistic use of practical formal methods and testing and how these methods can be used to significantly increase assurance of reduction and avoidance of design flaws.

Testing↗

Scenario Exploration and Timeline Analysis for Advanced Reactors [Slides]

Slides created to discuss the report "Approach and Model Used to Represent a Timeline Analysis for Security Design Enhancements" (August 2022 INL/ RPT-22-68664) for an upcoming DOE security workshop. Advanced reactors will be able to use risk insights for many design aspects. We need realistic scenarios for input into the licensing basis safety-case. These scenarios must include timing and physics. We need to automate the safety-case creation as much as possible.

97 MATHEMATICS AND COMPUTING↗

X-29A aircraft structural loads flight testing

The X-29A research and technology demonstrator aircraft has completed a highly successful multiphase flight test program. The primary research objective was to safely explore, evaluate, and validate a number of aerodynamic, structural, and flight control technologies, all highly integrated into the vehicle design. Most of these advanced technologies, particularly the forward-swept-wing platform, had a major impact on the structural design. Throughout the flight test program, structural loads clearance was an ongoing activity to provide a safe maneuvering envelope sufficient to accomplish the research objectives. An overview is presented of the technologies, flight test approach, key results, and lessons learned from the structural flight loads perspective. The overall design methodology was considered validated, but a number of structural load characteristics were either not adequately predicted or totally unanticipated prior to flight test. While conventional flight testing techniques were adequate to insure flight safety, advanced analysis tools played a key role in understanding some of the structural load characteristics, and in maximizing flight test productivity.

Sims, Robert↗

The Aeronautical Data Link: Taxonomy, Architectural Analysis, and Optimization

The future Communication, Navigation, and Surveillance/Air Traffic Management (CNS/ATM) System will rely on global satellite navigation, and ground-based and satellite based communications via Multi-Protocol Networks (e.g. combined Aeronautical Telecommunications Network (ATN)/Internet Protocol (IP)) to bring about needed improvements in efficiency and safety of operations to meet increasing levels of air traffic. This paper will discuss the development of an approach that completely describes optimal data link architecture configuration and behavior to meet the multiple conflicting objectives of concurrent and different operations functions. The practical application of the approach enables the design and assessment of configurations relative to airspace operations phases. The approach includes a formal taxonomic classification, an architectural analysis methodology, and optimization techniques. The formal taxonomic classification provides a multidimensional correlation of data link performance with data link service, information protocol, spectrum, and technology mode; and to flight operations phase and environment. The architectural analysis methodology assesses the impact of a specific architecture configuration and behavior on the local ATM system performance. Deterministic and stochastic optimization techniques maximize architectural design effectiveness while addressing operational, technology, and policy constraints.

Morris, A. Terry↗

Validating the autonomous EO-1 science agent

This paper describes the validation process for the Autonomous Science Agent, a software agent that is currently flying onboard NASA EO-1 spacecraft. The agent autonomously collects, analyzes, and reacts to onboard science data. The Autonomous Science Agent has been designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfunction to the EO-1 spacecraft. This safe design has been thoroughly validated by informal validation methods supplemented by sub-system and system-level testing. This paper describes the analysis used to define agent safety, elements of the design that increase the safety of the agent, and the process used to validate agent safety.

software↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi-Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post-landing segment of the Flight Software (FSW). An in-depth trade study was completed to determine optimal characteristics of the touchdown detection method resulting in an algorithm monitoring filtered, lever-arm corrected, 200 Hz Inertial Measurement Unit (IMU) vehicle acceleration magnitude data against a tunable threshold using persistence counter logic. Following the design of the algorithm, high fidelity environment and vehicle simulations, coupled with the actual vehicle FSW, were used to tune the acceleration threshold and persistence counter value to result in adequate performance in detecting touchdown and sufficient safety margin against early detection while descending under parachutes. An analytical approach including Kriging and adaptive sampling allowed for a sufficient number of finite element analysis (FEA) impact simulations to be completed using minimal computation time. The combination of a persistence counter of 10 and an acceleration threshold of approximately 57.3 ft/s2 resulted in an impact performance factor of safety (FOS) of 1.0 and a safety FOS of approximately 2.6 for touchdown declaration. An RCS termination acceleration threshold of approximately 53.1 ft/s(exp)2 with a persistence counter of 10 resulted in an increased impact performance FOS of 1.2 at the expense of a lowered under-parachutes safety factor of 2.2. The resulting tuned algorithm was then tested on data from eight Capsule Parachute Assembly System (CPAS) flight tests, showing an experimental minimum safety FOS of 6.1. The formulated touchdown detection algorithm will be flown on the Orion MPCV FSW during the Exploration Flight Test 1 (EFT-1) mission in the second half of 2014.

Daum, Jared↗

Toward Certification of Machine-Learning Systems for Low Criticality Airborne Applications

The exceptional progress in the field of machine learning (ML) in recent years has attracted a lot of interest in using this technology in aviation. Possible airborne applications of ML include safety-critical functions, which must be developed in compliance with rigorous certification standards of the aviation industry. Current certification standards for the aviation industry were developed prior to the ML renaissance without taking specifics of ML technology into account. There are some fundamental incompatibilities between traditional design assurance approaches and certain aspects of ML-based systems. In this paper, we analyze the current airborne certification standards and show that all objectives of the standards can be achieved for a low-criticality ML-based system if certain assumptions about ML development workflow are applied.

Avionics↗

Ushering in the New Age of Laboratories: Smart Labs in Practice; Preprint

Ventilation is the first line of defense against airborne hazards produced during research activities in laboratories. A vital component to maintaining healthy, safe, indoor air quality, laboratory ventilation systems are often victim to ineffective operation, posing a risk to an organization's most important asset - the researchers. Furthermore, system inefficiencies can lead to up to 50% wasted energy. By providing a framework to improve the safety and energy efficiency through optimized ventilation and operations, the Smart Labs Toolkit guides laboratory stakeholders through a straight-forward, holistic approach to achieving a dynamic Smart Labs program. A Smart Labs program employs a combination of physical, administrative, and management techniques to plan, assess, optimize, and manage high-performance laboratories. Grounded in the Smart Labs methodology, the National Renewable Energy Laboratory (NREL) implemented a successful Smart Labs program to oversee the design, construction, maintenance, and operations of its laboratories. To accomplish this effort, NREL's key stakeholders created an internal partnership to align NREL's existing laboratories with Smart Labs principles and solidify organizational roles for the safe and efficient operation of laboratory assets. The program provides the groundwork for decarbonization strategies centered around building operation. This paper outlines best practices employed by NREL to develop a cross-cutting Smart Labs team, garner managerial support, and effectively communicate of goals around safety and energy. Strategies include specific Smart Labs best practices, such as implementing a Laboratory Ventilation Risk Assessment - a systematic process for identifying risk due to airborne hazards and informing dynamic, demand-based ventilation to optimize safety and efficiency.

decarbonization↗

A Year of Progress: NASA's Space Launch System Approaches Critical Design Review

NASA's Space Launch System (SLS) made significant progress on the manufacturing floor and on the test stand in 2014 and positioned itself for a successful Critical Design Review in mid-2015. SLS, the world's only exploration-class heavy lift rocket, has the capability to dramatically increase the mass and volume of human and robotic exploration. Additionally, it will decrease overall mission risk, increase safety, and simplify ground and mission operations - all significant considerations for crewed missions and unique high-value national payloads. Development now is focused on configuration with 70 metric tons (t) of payload to low Earth orbit (LEO), more than double the payload of the retired Space Shuttle program or current operational vehicles. This "Block 1" design will launch NASA's Orion Multi-Purpose Crew Vehicle (MPCV) on an uncrewed flight beyond the Moon and back and the first crewed flight around the Moon. The current design has a direct evolutionary path to a vehicle with a 130t lift capability that offers even more flexibility to reduce planetary trip times, simplify payload design cycles, and provide new capabilities such as planetary sample returns. Every major element of SLS has successfully completed its Critical Design Review and now has hardware in production or testing. In fact, the SLS MPCV-to-Stage-Adapter (MSA) flew successfully on the Exploration Flight Test (EFT) 1 launch of a Delta IV and Orion spacecraft in December 2014. The SLS Program is currently working toward vehicle Critical Design Review in mid-2015. This paper will discuss these and other technical and programmatic successes and challenges over the past year and provide a preview of work ahead before the first flight of this new capability.

Askins, Bruce↗

Compressor Stall Recovery Through Tip Injection Assessed

Aerodynamic stability is a fundamental limit in the compressor design process. The development of robust techniques for increasing stability has several benefits: enabling higher loading and fewer blades, increasing safety throughout a mission, increasing tolerance to stage mismatch during part-speed operation and speed transients, and providing an opportunity to match stages at the compressor maximum efficiency point, thus reducing fuel burn. Mass injection upstream of the tip of a high-speed axial compressor rotor is a stability enhancement approach known to be effective in suppressing stall in tip-critical rotors if the injection is activated before stall occurs. This approach to stall suppression requires that a reliable stall warning system be available. Tests have recently been performed to assess whether steady injection can also be used to recover from fully developed stall. If mass injection is effective in recovering from stall quickly enough to avoid structural damage or loss of engine power, then a stall warning system may not be required. The stall recovery tests were performed on a transonic compressor rotor at its design tip speed of 1475 ft/sec using four injectors evenly spaced around the compressor case upstream of the rotor. The injectors were connected to an external air source. In an actual engine application, the injected air would be supplied with compressor bleed air. The injectors were isolated from the air source by a fast-acting butterfly valve. With the injectors turned off, the compressor was throttled into stall. Air injection was then activated with no change in throttle setting by opening the butterfly valve. The compressor recovered from stall at a fixed throttle setting with the aid of tip injection. The unsteady operating characteristic of the rotor was measured during these tests using high-response pressure sensors located upstream and downstream of the rotor. The figure shows the results, where the unsteady pressure and mass flow are superimposed on the steady operating characteristic. The total injected mass flow was equal to 1.3 percent of the compressor flow. The solid line with no solid squares on it denotes the operating point during the beginning of throttle closure and the initial drop into stall. The gray traces denote the operating point during an additional throttle closure that occurred over the next 1200 rotor revolutions (4 sec). The dashed line denotes the recovery from stall that occurred during 90 rotor revolutions (0.3 sec) after the injectors were activated with no change in throttle setting. Tip injection not only recovers the compressor from stall, but also restores the compressor to its pre-stall level of pressure rise. In contrast, standard stall recovery schemes such as compressor bleed, stator vane actuation, or engine throttle modulation result in a loss of pressure rise across the compressor, which results in a loss of engine power.

Suder, Ken L.↗