Search NASA⌕ Search

SEARCH · Search NASA

Results for “Probabilistic risk analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Investigation of the Use of Dynamic Probabilistic Risk Assessment Methodologies for Identifying Digital I&C System Common Cause Failures

Digital Instrumentation and Control (I&C) systems have a key role in nuclear power plants in the upgrade of aging analog systems. Digital systems improve plant safety and reliability through features such as increased hardware reliability and stability and improved failure detection capability. There is no consensus on which of the current probabilistic risk assessment methods are most suitable for use in the reliability analysis of digital I&C systems. While the traditional event-tree/fault-tree (ET/FT) approach is still used for their reliability modeling, there are concerns regarding this approach in properly accounting for dynamic interactions among system components since potentially significant dependencies among failure events may not be identified and/or their likelihood may not be properly quantified. Dynamic methodologies are expected to provide a much more accurate representation of probabilistic evolution of the I&C systems in time due to their capability to more properly account for complex interactions than the static approach. The applicability of dynamic PRA methodologies for digital I&C system is investigated using the criteria presented in the NUREG/CR-6901, and the comparisons made in NUREG/CR-6901 are updated in light of the latest studies. The Dynamic Event Tree (DET) approach has been identified as one of the top dynamic methods when evaluated against the requirements for the reliability modeling of digital I&C systems. The DET method is a strong candidate for integration into existing PRA studies, as it bears many similarities to the traditional ET approach. In this study, the DET approach has been applied to the Plant Protection System of the APR1400 design, and the results are compared to results from its available traditional ET/FT analysis. Possible approaches to evaluate and quantify the effects of common cause failures on system safety using dynamic methods are also examined.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Modeling interconnections of safety and financial performance of nuclear power plants, part 3: Spatiotemporal probabilistic physics-of-failure analysis and its connection to safety and financial performance

Here, this paper is a byproduct of a line of research by the authors to analyze interrelationships of safety and financial performance of nuclear power plants (NPPs). The result of this line of research is summarized in three parts: Part 1 covers a categorical review of relevant literature and the theoretical bases that support the methodological developments in Part 2. Part 2 introduces an Integrated Enterprise Risk Management (I-ERM) methodological framework to quantify the interconnections of safety and financial performance with a focus on operation and maintenance (O&M) of NPPs. Part 2 has also demonstrated the applicability and values of the I-ERM methodology through an NPP case study. This paper is Part 3, where detailed development and implementation of one of the I-ERM modules, i.e., probabilistic physics-of-failure (PPoF) analysis, and its connection with safety and financial performance is reported. In this article, the physical failure modeling for hardware components is advanced by incorporating finite element analysis (FEA) into PPoF analysis and coupling the FEA-based PPoF with the maintenance performance through a renewal process model. This article covers two scientific contributions: (i) first-of-its-kind incorporation of FEA into the PPoF model of thermal fatigue for NPP components; and (ii) advancing the interface between the PPoF analysis and the renewal process model in order to deal with spatiotemporal FEA outputs and to efficiently estimate the physical transition rates even when the PPoF outputs are dominated by success data. Through the incorporation of FEA, the resolution of the PPoF analysis is enhanced as spatiotemporal conditions such as stress and temperature can be considered explicitly instead of relying on simplified assumptions or analytical models with reduced spatiotemporal dimensions. To demonstrate an application of the FEA-based PPoF analysis and its coupling with maintenance through the renewal process model, a case study is conducted using excess letdown elbow piping in the chemical and volume control system of a Pressurized Water Reactor.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Stakeholder Engagement Review Meeting Summary Report

Sustainability in the context of the Light Water Reactor Sustainability (LWRS) Program is the ability to maintain the safe and economic operation of the existing fleet of nuclear power plants now and in the future. It has two objectives with respect to long-term operations: (1) to provide science and technology-based solutions to industry to safely enhance the economical operation of power reactors; and (2) to manage the aging of systems, structures, and components (SSCs) so that nuclear power plants can continue to operate safely and cost-effectively.

42 ENGINEERING↗

AUTOMATIC GENERATION OF EVENT TREES AND FAULT TREES: A MODEL-BASED APPROACH

In the past few decades, increasing complexity in modern engineering systems has been driven by the integration of a large number of components and by the fact that the system operations involve many disciplines (e.g., thermal-hydraulics, plant operations, cyber-security). Current safety/reliability modeling approaches to such systems are labor intensive, difficult to learn, and rely heavily on simplistic Boolean logic to depict failure propagation and accident progression. While these methods serve well for simple systems (i.e., linear causal systems with limited small inter- and intra-system interactions), their results are difficult to verify when modeling complex systems (typically performed through the extensive use of modeling assumptions). The development of new methods is addressed to meet these challenges through a model-based system engineering (MBSE) lens. Under MBSE philosophy, every aspect of the system (form or function) is represented by a model that completely characterizes its architecture or behavior. MBSE approach greatly improves the management of design, analysis and verification of complex systems. An integration of Dynamic Probabilistic Risk Assessment (DPRA) methods with MBSE models is proposed to perform safety/reliability analyses of engineering systems. In particular, MBSE representation of the system (performed using Systems Modeling Language [SysML]) is coupled with DPRA methods to automatically generate event trees and fault trees.

97 - MATHEMATICS AND COMPUTING↗

RAVEN User Manual

RAVEN is a generic software framework to perform parametric and probabilistic analysis based on the response of complex system codes. The initial development was aimed to provide dynamic risk analysis capabilities to the Thermo-Hydraulic code RELAP-7, currently under development at the Idaho National Laboratory (INL). Although the initial goal has been fully accomplished, RAVEN is now a multi-purpose probabilistic and uncertainty quantification platform, capable to agnostically communicate with any system code. This agnosticism includes providing Application Programming Interfaces (APIs). These APIs are used to allow RAVEN to interact with any code as long as all the parameters that need to be perturbed are accessible by inputs files or via python interfaces. RAVEN is capable of investigating the system response, and investigating the input space using Monte Carlo, Grid, or Latin Hyper Cube sampling schemes, but its strength is focused to- ward system feature discovery, such as limit surfaces, separating regions of the input space leading to system failure, using dynamic supervised learning techniques. The development of RAVEN has started in 2012, when, within the Nuclear Energy Advanced Modeling and Simulation (NEAMS) program, the need to provide a modern risk evaluation framework became stronger. RAVEN principal assignment is to provide the necessary software and algorithms in order to employ the concept developed by the Risk Informed Safety Margin Characterization (RISMC) program. RISMC is one of the pathways defined within the Light Water Reactor Sustainability (LWRS) program. In the RISMC approach, the goal is not just the individuation of the frequency of an event potentially leading to a system failure, but the closeness (or not) to key safety-related events. Hence, the approach is interested in identifying and increasing the safety margins related to those events. A safety margin is a numerical value quantifying the probability that a safety metric (e.g. for an important process such as peak pressure in a pipe) is exceeded under certain conditions. The initial development of RAVEN has been focused on providing dynamic risk assessment capability to RELAP-7, currently under development at the INL and, likely, future replacement of the RELAP5-3D code. Most the capabilities that have been implemented having RELAP-7 as principal focus are easily deployable for other system codes. For this reason, several side activates are currently ongoing for coupling RAVEN with soft- ware such as RELAP5-3D, etc. The aim of this document is the explanation of the input requirements, focalizing on the input structure.

97 MATHEMATICS AND COMPUTING↗

Human reliability analysis studies from simulator experiments using Bayesian inference

Probabilistic Safety Assessment (PSA) of complex facilities is performed to arrive at the risk posed by them. PSA also accounts for the contribution of the human errors towards the overall risk through Human Reliability Analysis (HRA) in terms of Human Error Probability (HEP). Human operators are part of the system and do not work in isolation. Their performance is influenced by the context in which the actions are performed. As a result, quantification of HEP requires operator performance data under the given context. Some good sources of operator performance data are plant‘s operation data, simulator data and expert judgement. The plant operation data pertaining to HRA is generally sparse. In this situation, a full scope plant simulator provides a good alternative for operator performance data generation. Many of the currently practiced HRA methods have been developed by combining the empirical evidence with expert judgement and contain a lot of uncertainty in their estimates. Bayesian inference is suitable for updating the prior HRA estimates with the simulator evidence to obtain the posterior HEP. Here, posterior HEP has been calculated for postulated accident scenarios in advanced reactor (first of its kind) at design stage, using plant simulator.

97 MATHEMATICS AND COMPUTING↗

The research challenges in security and safeguards for nuclear fission batteries

This paper discusses the nuclear security and safeguards research challenges presented by the development and deployment of nuclear fission batteries. These are defined as easily transportable and deployable nuclear systems which are designed to operate either unattended or autonomously. We start by defining the current landscape of domestic and international safeguards and security and discuss how it can be affected by the introduction these new nuclear systems. We then specifically discuss the technology gaps and technologies to be developed to facilitate their practical deployment. We find that, as expected, we can leverage conclusions from existing security and safeguards studies for small modular rectors and develop bespoke target set analyses to inform security postures based on probabilistic risk assessment. We find also that specific fission battery security economic analysis tools are needed and security by design must be applied early. However, the most important finding is that these new systems will require a new comprehensive set of cyber tools covering transportation, installation, operation, maintenance security of the fission battery systems. Altogether, we find that the development of the necessary security and safeguards requirements at the design phase of such a technology will be of great benefit in the smooth deployment of this modern nuclear energy system.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

SOSAT: Geohazard Risk Assessment in Carbon Sequestration Operations

Like all operations in which fluids are injected into the subsurface, geologic carbon storage (GCS) presents inherit risks that must be assessed and mitigated to successfully deploy such technology in the field. For example, alterations to pore pressure and the stress state due to fluid injection may trigger certain geohazards, such as potential fault activation and induced seismicity or unintentional hydraulic fracturing. Here we present capabilities for assessing these potential risks using the State of Stress Analysis Tool (SOSAT): a Python library and web-based application capable of probabilistically estimating the subsurface state of stress informed by various field observations. Using posterior distributions of principal stress components, SOSAT can assess the risk of fault activation within the injection formation for either a critically oriented fault or a fault with a user-prescribed orientation. Additionally, SOSAT can estimate the probability of unintentional hydraulic fracturing of the intact reservoir rock. Here, we demonstrate these SOSAT capabilities using a hypothetical GCS site. This type of risk assessment can assist with the effective deployment of GCS technology in the field by informing safe design and management practices.

Haagenson, Ryan J.↗

Estimating the Likelihood of GHG Concentration Scenarios From Probabilistic Integrated Assessment Model Simulations

The climate scenarios that form the basis for current climate risk assessments have no assigned probabilities, and this impedes the analysis of future climate risks. This paper proposes an approach to estimate the probability of carbon dioxide (CO 2 ) concentration scenarios used in key climate change modeling experiments. It computes the CO 2 emissions compatible with the concentrations prescribed by Coupled Model Intercomparison Project Phase 5 (CMIP5) and CMIP6 experiments. The distribution of these compatible cumulative emissions is interpreted as the likelihood of future emissions given a concentration pathway. Using Bayesian analysis, the probability of each pathway can be estimated from a probabilistic sample of future emissions. The approach is demonstrated with five probabilistic CO 2 emission simulation ensembles from four Integrated Assessment Models (IAM), leading to independent estimates of the likelihood of the CO 2 concentration of Representative Concentration Pathways (RCP) and Shared Socioeconomic Pathways (SSP). Results suggest that SSP5-8.5 is unlikely for the second half of the 21st century, but offer no clear consensus on which of the remaining scenarios is most likely. Estimates of likelihoods of CO 2 concentrations associated with RCP and SSP scenarios are affected by sampling errors, differences in emission sources simulated by the IAMs, and a lack of a common experimental framework for IAM simulations. These shortcomings, along with a small IAM ensemble size, limit the applicability of the results presented here. Novel joint IAM and the Earth System Model experiments are needed to deliver actionable probabilistic climate risk assessments.

54 ENVIRONMENTAL SCIENCES↗

Geomechanical Characterization of the Mount Simon Sandstone and Eau Claire Formation of Northern Illinois Basin

The purpose of this paper is to analyze publicly available geomechanical data from two carbon storage sites in the Illinois Basin: the Illinois Basin-Decatur Project (IBDP) in Macon County, IL and the FutureGen2.0 project in Morgan County, IL, cancelled before injection began. This study estimates the magnitudes and directions of the least compressive principal stress gradient using hydraulic fracture-based stress measurement tests, borehole breakouts, and sonic logs in the Eau Claire Formation (primary confining zone) and the Mount Simon Sandstone (targeted reservoir). The range of stresses expected in the underlying Precambrian basement is also investigated. The evaluation of the state of stress is carried out in a probabilistic manner using the State of Stress Analysis Tool (SOSAT) developed under the National Risk Assessment Partnership (NRAP) program. Finally, the paper also provides a discussion on distinctions between fracture initiation pressure, propagation pressure, and fracture closure pressure, given that hydraulic fracture testing results show a significant difference between these three values. The discussion also addresses why the fracture closure pressure should be preferred in injection pressure determinations, a critical point in geological carbon storage projects.

de Toledo Camargo, Julia↗

Development and Validation of a Probabilistic Risk Assessment Model for a Generic Modular High Temperature Gas-Cooled Reactor

This study looks to develop and validate a probabilistic risk assessment (PRA) model for the modular high temperature gas-cooled reactor (MHTGR) using INL’s Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE) software. Validation against a General Atomics design involves matching event and fault trees to historical frequencies, with a goal of under 15% difference. The research aims to deliver a reliable PRA model to assess the safety of MHTGRs for use within high-temperature industrial applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

METHODOLOGY AND APPLICATION OF PHYSICAL SECURITY EFFECTIVENESS BASED ON DYNAMIC FORCE-ON-FORCE MODELING

This paper describes ongoing work within the Light Water Reactor Sustainability (LWRS) Program at Idaho National Laboratory (INL) to optimize security and cost of nuclear power plants (NPPs). It reviews the conservatisms in conventional physical security posture and regulations. It introduces the dynamic risk assessment tool developed at INL, Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The dynamic assessment methodology leverages EMRALD to process results of force-on-force (FOF) simulations and crediting safety mitigation actions from probabilistic risk assessment (PRA) models as well as diverse and flexible coping strategies (FLEX) mitigation strategies. Timing information from these simulations are compared against the available time to perform mitigations obtained from Reactor Excursion and Leak Analysis Program (RELAP5) simulations. To illustrate the methodology, a station blackout (SBO) attack scenario was modeled in commercially available FOF simulation tools. The simulation results provide valuable insights into possible attack outcomes and as the probabilistic risk of a core damage event given these outcomes. Safety mitigation procedures were modeled in EMRALD, and were dependent on the attack outcomes by considering human operator uncertainties. RELAP5 simulations incorporating human and hardware uncertainties were performed to estimate the distribution of time-to-core damage. The results demonstrate that, even in the extreme case of a successful adversarial attack, plant mitigation strategies provide significantly high-likelihood of preventing radiological release. The proposed modeling and simulation framework of integrating FLEX equipment with FOF models enables the NPPs to credit FLEX portable equipment in the plant security posture, resulting in an efficient and optimized physical security.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Markov Decision Processes for Intelligent, Risk-Informed Asset-Management Decision-Making

Advanced nuclear reactors are a promising option for aiding the world in achieving its net-zero carbon emission goals, however, there are significant challenges to attaining and maintaining economic competitiveness with other sources of electricity. To improve the economic competitiveness of advanced reactor designs, a project was initiated to explore the use of Markov Decision Processes (MDPs) to guide asset-management decision-making during advanced reactor operation. MDPs are a powerful tool for optimizing decision-making in complex environments and their application to advanced reactors can aid in planning maintenance and repair activities to minimize downtime and maximize generation. The described approach expands on previous work regarding the use of MDPs for operational decision-making through the direct incorporation of real-time plant information. The integral MDP analysis includes information from online component diagnostic tools and the plant’s real-time generation risk assessment (GRA) and probabilistic risk assessment (PRA), which evaluate plant risk from both an economic and safety perspective. The result is an asset-management optimization framework that is based on real-time data regarding plant component status and the current best-estimate of plant risk. The paper presents an overview of the theoretical framework to incorporate the different information pathways into an integral MDP analysis, along with example analyses.

Grabaskas, David↗

Incorporating FLEX Strategies in Multi-Unit Probabilistic Risk Assessment

The catastrophic Fukushima nuclear accident reminded nuclear community about the possibilities of extreme accident scenarios, including those involving multiple reactor units on the same site. As the responses to the Fukushima accident, the nuclear power industry developed and implemented a series of strategies, including the Diverse and Flexible Coping Strategies (FLEX), to enhance the coping capacities of nuclear power plants (NPPs) under extreme accidents. This study intends to examine the impact of FLEX strategies on the risk from all the reactor units on the same NPP site, including risks from accidents involving a single unit and from accidents involving multiple units. The fundamental, methodological element of this study is Multi-Unit Probabilistic Risk Assessment (MUPRA), which requires a shift in Probabilistic Risk Assessment (PRA) from a “one-reactor-at-a-time” mindset to a “considering all reactors sharing a site as a unity” one. An integrated modeling approach for multi-unit event sequence development will be leveraged to develop MUPRA model and address the intra-unit and inter-unit dependencies. Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE), a PRA software developed and maintained by Idaho National Laboratory (INL) for the U.S. Nuclear Regulatory Commission (NRC), will serve as the platform for MUPRA modeling. This study selects Loss Of Offsite Power (LOOP) as a representative initiating event, which may occur on a generic two-unit NPP site and impacts both reactor units on the site. First, an MUPRA model, including multi-unit event trees, will be developed to obtain single-unit and multi-unit accident scenarios. Next, different FLEX strategies will be assumed, including FLEX equipment for a unit cannot be used for another unit, FLEX equipment for multiple units can be used in a cross-connected manner, etc. Lastly, the effectiveness of each postulated FLEX strategy will be evaluated by incorporating the corresponding FLEX equipment and deployment logic in the MUPRA model.

99 GENERAL AND MISCELLANEOUS↗

Safety Analysis for the Versatile Test Reactor Conceptual Design

Safety analysis simulations have been carried out using the SAS4A/SASSYS-1 safety analysis code system to update the baseline set of results for the Versatile Test Reactor conceptual design. Results from a previous revision of this work provided input for the Conceptual Safety Design Report summarizing the overall safety basis for the VTR. This work will also support future analyses that will be required for Chapter 13, “Accident Analysis,” of a preliminary safety analysis report. A number of transients have been evaluated based on categories of postulated accident sequences suggested for consideration in NUREG-1537. Ultimately, the full spectrum of event initiators and subsequent accident sequences will be defined through a probabilistic risk assessment of the plant design following the implementation of the Licensing Modernization Project guidelines as described in the VTR Safety Design Strategy. Since that process is ongoing, the present analysis addresses several transients that are expected to be bounding accident scenarios that represent the three key ways to perturb a reactor: through changes to the core inlet temperature, mass flow rate, or reactivity. These correspond to a loss of heat sink (LOHS), loss of flow (LOF) or station blackout (SBO), and transient overpower (TOP), respectively. Both Protected and Unprotected versions of these transients have been evaluated, along with additional transients that include transient overpower with one stuck rod, pump coast-down failures, seismic events, and overcooling events. At the current stage of design, transient simulation results for the Versatile Test Reactor indicate that large safety margins exist for many event initiators. However, several “enabling” assumptions have been made, in terms of both design features and design limits, in order to perform the analyses; and these assumptions will need to be revised as the design matures. In addition, a larger spectrum of events needs to be evaluated as part of the on-going probabilistic risk assessment process.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Limitations of traditional tools for beyond design basis external hazard PRA

Probabilistic risk assessment (PRA) is being used increasingly by the nuclear industry for safety during normal operations as well as for the protection against external hazards. Computation of total risk in an external hazard PRA is dependent on hazard assessment, fragility assessment, and systems analysis. A systems analysis for propagation of component fragilities is conducted using event and fault trees. The event and fault trees for an actual power plant can be fairly large in size, which imposes computational challenges. Hence, certain assumptions are employed for computational efficiency. These assumptions typically represent the conditions imposed during the design basis (DB) scenario. The traditional PRA tools based on these assumptions are also widely applied to perform risk assessment in the context of beyond design basis (BDB) scenarios. However, some of these assumptions may not be valid for certain BDB scenarios. In addition, the probability of dependent failures also increases in BDB scenarios due to common cause failures (CCF) which usually results from design modifications, human errors, etc. In this manuscript, a simple and a relatively more complex illustrative examples are used to show the limitation of these assumptions in the numerical quantification of risk for the case of BDB conditions. Case studies with CCF events across multiple fault trees are also presented to illustrate the effect of these assumptions when traditional approach is used in BDB risk assessment. It is shown that the assumptions are valid for the case of DB conditions but may lead to excessively conservative risk estimates in the case of BDB conditions. Finally, a Bayesian network based top-down algorithm is proposed as an alternative tool for accurate numerical quantification of total risk in systems analysis.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

GPS Spoofing Mitigation and Timing Risk Analysis in Networked Phasor Measurement Units via Stochastic Reachability

To address phasor measurement unit (PMU) vulnerability to spoofing, we propose the use of a set-valued state estimation technique known as stochastic reachability (SR)-based distributed Kalman filter (DKF) that computes secure global positioning system (GPS) timing across a network of receivers. Utilizing SR, we estimate not only GPS time but also its stochastic reachable set, which is parameterized by probabilistic zonotope (p-Zonotope). While requiring known measurement error bounds in only non-spoofed conditions, we designed a two-tiered approach. We first performed measurement-level spoofing mitigation via deviation of a measurement innovation from its expected p-Zonotope. We then performed state-level timing risk analysis via a determination of the intersection probability of the estimated p-Zonotope with an unsafe set that violates IEEE C37.118.1a-2014 standards. Finally, we validated our SR-DKF algorithm by subjecting it to a simulated receiver network to coordinate signal-level spoofing. We demonstrate improved timing accuracy and successful spoofing mitigation via the use of our SR-DKF algorithm. We also validated the robustness of the estimated timing risk as the number of receivers were varied.

47 OTHER INSTRUMENTATION↗

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway

Significant efforts are underway to develop and implement a risk-informed performance-based licensing framework for advanced reactors built on the establishment of an affirmative safety case. Such approaches offer the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. These methods include the comprehensive analysis of scenarios that have historically been addressed through conservative and deterministic licensing analysis approaches, such as the evaluation of event sequences at frequencies of occurrence beyond the design basis. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. The current project seeks to further explore the regulatory treatment of low frequency external events as part of a risk-informed performance-based framework. The goals are to identify the benefits and challenges of such approaches for advanced reactor vendors and to aid in the development of consistent and appropriate methodologies. As part of this effort, the current report summarizes initial project findings, with a focus on the evaluation of the seismic hazard. This includes an exploration of the implementation of a risk-informed performance-based approach through an example analysis. Based on the identified challenges associated with the probabilistic treatment of low frequency event sequences, additional performance-based methods were explored as complementary tools for demonstrating regulatory compliance. The report highlights key challenges and opportunities associated with the methods and outlines recommendations and future activities to assist with their implementation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗