Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Combined Experimental and Modeling Study of the Interactions of Acid Gas with Common Spacecraft Surfaces for Fire Safety Applications

A fire in a spacecraft poses detrimental consequences and risks mission success in addition to crew safety. This is compounded during long-duration missions when the crew has limited options to recover from a fire. A common spacecraft fire concern is the smoldering of wire insulation, typically made from Polyvinyl chloride (PVC) or Polytetrafluoroethylene (PTFE). This creates acid gases such as Hydrogen Chloride (HCl), Hydrogen Fluoride (HF) and Hydrogen Cyanide (HCN). These poisonous gases are hazardous to the crew. They also interact with common surfaces within the spacecraft more than dominant combustion products such as CO2 and H2O. This makes them more difficult to track for potential fire detection techniques, or for postfire clean-up. It is imperative to be able to understand and predict the fate of these poisonous species in a microgravity environment in order to design a safe vehicle. HCl interacts with a number of materials inside a spacecraft. Primary among these materials is aluminum, which is abundantly used due to its strong and light weight nature. Aluminum has a natural oxide layer that protects it from corrosion but is typically treated to enhance this oxide layer. Among these treatments is a chromate conversion coating (CCC), which provides a thin enough protective oxide layer to still conduct electricity, and a traditional anodized material that has a thicker oxide layer that does not conduct electricity. Nomex is another common material found inside a spacecraft. It is a flame-resistant woven polymer that is related to nylon. This commercially available material is used for cargo storage bags and as a fire barrier. Physics-based models were developed to predict the uptake of HCl by these materials. The ultimate objective of these models is to predict the fate of HCl within the spacecraft so that sensors can be placed in meaningful locations in future missions based on the model predictions. To support these modeling efforts, experiments were performed in a cast acrylic test cell that measured the difference between the inlet and outlet concentration of HCl after inserting a sample rod of the test material. Different uptake capacities were realized for each type of sample tested. A computational fluid dynamics model (CFD) model of the reactor was then constructed that used a one-step global reaction rate with calibratable reaction (or kinetic) constants. These constants were calibrated to match the HCl uptake on the CCC aluminum samples, and the same kinetic constants were then tested for the stock and anodized aluminum samples. Model predictions matched the experimental data for the stock aluminum, and to a much lesser extent, the anodized aluminum. The model was additionally validated at different flow rates, sample surface areas, and inlet concentrations, and showed good agreement for all stock and CCC samples. The model did not accurately predict the HCl uptake in the anodized samples compared to the other two types of aluminum. Adjusting the kinetic constants and transport properties did little to improve the prediction. X-Ray Photoelectron Spectroscopy (XPS) was used to determine that the oxide layer thickness of anodized aluminum is approximately 5,000 nm, compared to 250 nm for CCC and 50 nm for stock. XPS also revealed presence of chlorine further down in the aluminum oxide layer in anodized samples than CCC and stock samples after the samples were saturated with HCl, indicating that accounting for diffusion of HCl into the oxide layer is important for accurate prediction of HCl uptake onto anodized aluminum. Consequently, a multi-scale model was developed and tested. First, a single pore inside the anodized aluminum oxide layer was modeled and is referred to as the pore-scale model. In this model, HCl diffused through the pore and reacted with the aluminum oxide pore wall to create aluminum chloride. The sample was then saturated when the mass transfer resistance through the growing aluminum chloride layer became too large for the HCl to reach the aluminum oxide wall and continue the reaction. This pore-scale model was coupled to the reactor-scale model using a concentration-dependent diffusion coefficient, resulting in much more accurate predictions (approximately half the sum square error of the aforementioned reactor-scale model that produced good agreement for stock and CCC) for a variety of operating conditions. The amount of water vapor or relative humidity (RH) in the flow during a reactor experiment was determined to influence HCl uptake. Experiments were performed to understand the interaction of gaseous HCl with aluminum surfaces in the presence of water vapor. The results show that increasing levels of RH increased the capacity of aluminum to adsorb HCl but decreased the capacity of Nomex to uptake HCl. A series of tests were performed on individual aluminum samples after they had been saturated with a fixed concentration of HCl in dry air conditions with the goal of determining how their HCl uptake capacity changes after various treatments with water relative to the original saturation tests. HCl-saturated aluminum samples subjected to a second dry air flow at the same HCl concentration as the original test had an uptake of 23.5% of the original sample with no treatment in between. Saturated aluminum samples subjected to an air flow with a RH of 90% in between tests had an uptake of 35.6% of the original. Saturated aluminum samples submerged in distilled water for 12 hours in between tests had an uptake of 82.2% of the original sample. Previously saturated aluminum tested with HCl and a 50% RH air flow resulted in similar uptake characteristics in multiple repeated tests. The experiments show the profound effect water vapor has on HCl uptake onto aluminum surfaces. In the samples subjected to water vapor or liquid water, capillary condensation and capillary diffusion alters the transport of HCl significantly. A model was proposed that developed a relationship between RH and the coefficient of HCl diffusion in aluminum chloride. This produced an “S-shaped” curve with diffusion coefficient as a function of RH, with 45% RH represented as the point where the diffusion coefficient is halfway between no water saturation and 100% water saturation in the aluminum chloride product layer. No difference in uptake characteristics for the experiment or model were realized between 50% and 62% RH. The results from the large-scale microgravity experiment, Saffire, are discussed as they pertain to the fate of HCl throughout a spacecraft. HCl was released, both as a standalone event, and in concurrence with the burning of a structured cloth. These events only produced a small response in the far field HCl sensor, while a PMMA burn that did not produce HCl had a significantly greater response. A ground-based large-scale facility was constructed to flow acid gas at the scale and configuration realized in the Saffire experiments. A CFD model of this duct was constructed to test kinetic parameters developed in this work at a larger scale and different geometric configuration and to predict the results of the large-scale facility. The models developed in this work were used to interpret the results of the microgravity tests and lead the discussion on what further experiments and models are needed in order to predict the fate of acid gas in a spacecraft environment. To summarize, the major contributions of this work are as follows: the capacity to uptake HCl, with and without the presence of water vapor, was measured for a variety of real spacecraft surfaces. Several different models (single reactor-scale, multiscale, spacecraft-scale) were developed and with the aid of modeling, the rate of uptake for those surfaces was also predicted and validated. The kinetic parameters determined from the small-scale reactor experiments and models were used to predict large-scale and microgravity tests. Conclusions from this research will be used in the design of spacecraft vehicles and large-scale microgravity fire safety experiments. The models built by this work will aid designers in sensor placement and could be used to predict acid gas transport from fires in partial gravity, as would be seen in Lunar and Martian habitats.

fire safety↗

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

99 GENERAL AND MISCELLANEOUS↗

Impact of Pressure-Dependent Interfacial Tension and Contact Angle on Capillary Heterogeneity Trapping of CO2 in Storage Aquifers

Summary Carbon dioxide (CO2) capillary trapping increases the total amount of CO2 that can be effectively immobilized in storage aquifers. This trapping, manifesting itself as accumulated CO2 columns at a continuum scale, is because of capillary threshold effects that occur below low-permeability barriers. Considering that capillary pressure is dictated by heterogeneous pore throat size, the trapped CO2 column height and associated CO2 saturation will vary spatially within a storage aquifer. This variation will be influenced by two pressure-dependent interfacial parameters—CO2/brine interfacial tension (IFT) and CO2/brine/rock contact angle. Our objective is to understand how the pressure dependence of these two parameters affects the heterogeneity of capillary trapped CO2 at a continuum scale. Our conceptual model is a 1D two-zone system with the upper zone being a flow barrier (low permeability) and the lower zone being a flow path (high permeability). The inputs to this model include microfacies-dependent capillary pressure vs. saturation curves and permeability values. The input capillary pressure curves were collected in the literature that represents carbonate microfacies (e.g., dolograinstone) in a prevalent formation in the Permian Basin. We then used the Leverett j-function to scale the capillary pressure curve for the two zones that are assigned with the same or different microfacies. During scaling, we considered the influence of pressure on both the IFT and contact angle of CO2/brine/dolomite systems. We varied the zone permeability contrast ratio from 2 to 50. We then assumed capillary gravity equilibriums and calculated the CO2 saturation buildup corresponding to various trapped CO2 column heights. The CO2 saturation buildup is defined as the CO2 saturation in the lower layer minus that in the upper one. We found that the saturation buildup can be doubled when varying pressure in a storage aquifer, after considering pressure-dependent IFT and contact angles. Thus, assuming these two parameters to be constant across such aquifers would cause large errors in the quantification of capillary trapping of CO2. The whole study demonstrates the importance of considering pressure-dependent interfacial properties in predicting the vertical distribution of capillary trapped CO2. It has important implications in developing a better understanding of leakage risks and consequent storage safety.

Engineering↗

The Resilience Planning Landscape for Communities and Electric Utilities

Synapse Energy Economics has conducted structured interviews to better characterize the current landscape of resilience planning within and across jurisdictions. Synapse interviewed representatives of a diverse group of communities and their electric utilities. The resulting case studies span geographies and utility regulatory structures and represent a range of threats. They also vary in terms of population density and size. This report summarizes our approach and the findings gleaned from these conversations. All the communities and utilities we interviewed see increased interest in and commitment of resources for energy-related resilience. The risks and consequences these communities and utilities faced in the past, face now, and will face in the future drove them to improve engagement, advance processes, further decision-making, and in many cases invest in projects. While no process used by communities and utilities was the same, the different processes used by communities and utilities allowed each one to make progress in its own way. Several approaches are emerging that can provide good models for other communities and utilities with an interest in improving resilience.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Quantifying Uncertainty in PV Energy Estimates Final Report

Uncertainty in PV energy estimates is "one of the most critical areas of lack of understanding" according to independent engineers, financiers, PV model developers, and other industry stakeholders. The primary problem is a lack of rigorous, transparent, widely accepted methods for quantifying uncertainty in energy production estimates. Uncertainty in energy production estimates arises from variability of the solar resource, inexact PV performance models and their parameters, and system reliability considerations. Uncertainty in annual energy production is frequently calculated for larger projects in order to quantify financial risk. Key statistics for energy, such as the P-values "P50" and "P90" (the annual energy values that are exceeded in future years with 50\% and 90\% probability, respectively) are used by financing institutions to calculate the repayment risk for the project. The current methods to estimate these statistics are typically proprietary, specialized, and involve significant post-processing of commercial performance model results. This black-box approach leads to inconsistent P-value estimates from different parties, which reduces investors' confidence in the results. Since the financial community bases its risk assessment on these estimates, reduced confidence increases perceived project risk, and consequently financing costs. The goal of this project was to establish a set of best practices for quantifying uncertainty in energy production estimates, including identifying what sources of uncertainty must be considered with clear definitions and metrics, determining which sources are the biggest drivers of uncertainty, and providing a computationally efficient framework for combining different sources of uncertainty that is flexible enough to accommodate substitutions of data or methods when better information is available. We engaged a wide set of stakeholders to ensure industry endorsement and adoption, and leveraged complementary projects investigating individual sources of uncertainty in great detail, as well as others' work that started down this path.

ENERGY PLANNING, POLICY, AND ECONOMY,SOLAR ENERGY↗

Data Management for Digital Twin Implementation: Enhancing Existing SCADA Architecture for INL's CITRC Test Distribution System

The United States power grid will continue to experience stress from aging infrastructure, extreme weather, and increasing loads. In order to strengthen resiliency, researchers need to run tests and simulations that model real-life infrastructure. Idaho National Laboratory (INL) is creating a digital twin of its Critical Infrastructure Test Range Complex (CITRC). CITRC is an at-scale grid testbed which can be configured in utility-realistic distribution scenarios for a variety of tests, such as advanced grid protection and control. A digital twin of this infrastructure would support in-depth tests/simulations without risking physical consequences, before trialing devices under test at-scale. This project focuses on the data acquisition part of constructing a digital twin. It investigates the Supervisory Data Acquisition and Control (SCADA) system of CITRC and explores ways to utilize this system for the twin. Future “ideal” at-scale implementations such as upgraded equipment, modern communication protocols, and automation applications are also explored.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Advanced stitching technology

In the design of textile composites, the selection of materials and constructional techniques must be matched with product performance, productivity, and cost requirements. Constructional techniques vary. A classification of various textile composite systems is given. In general, the chopped fiber system is not suitable for structural composite applications because of fiber discontinuity, uncontrolled fiber orientation and a lack of fiber integration or entanglement. Linear filament yarn systems are acceptable for structural components which are exposed to simple tension in their applications. To qualify for more general use as structural components, filament yarn systems must be multi-directionally positioned. With the most sophisticated filament winding and laying techniques, however, the Type 2 systems have limited potential for general load-bearing applications because of a lack of filament integration or entanglement, which means vulnerability to splitting and delamination among filament layers. The laminar systems (Type 3) represented by a variety of simple fabrics (woven, knitted, braided and nonwoven) are especially suitable for load-bearing panels in flat form and for beams in a roled up to wound form. The totally integrated, advanced fabric system (Type 4) are thought to be the most reliable for general load-bearing applications because of fiber continuity and because of controlled multiaxial fiber orientation and entanglement. Consequently, the risk of splitting and delamination is minimized and practically omitted. Type 4 systems can be woven, knitted, braided or stitched through with very special equipment. Multiaxial fabric technologies are discussed.

Scardino, Frank L.↗

Environmental Impact Statement for the Cassini Mission

This Final Supplemental Environmental Impact Statement (FSEIS) to the 1995 Cassini mission Environmental Impact Statement (EIS) focuses on information recently made available from updated mission safety analyses. This information is pertinent to the consequence and risk analyses of potential accidents during the launch and cruise phases of the mission that were addressed in the EIS. The type of accidents evaluated are those which could potentially result in a release of plutonium dioxide from the three Radioisotope Thermoelectric Generators (RTGS) and the up to 129 Radioisotope Heater Units (RHUS) onboard the Cassini spacecraft. The RTGs use the heat of decay of plutonium dioxide to generate electric power for the spacecraft and instruments. The RHUs, each of which contains a small amount of plutonium dioxide, provide heat for controlling the thermal environment of the spacecraft and several of its instruments. The planned Cassini mission is an international cooperative effort of the National Aeronautics and Space Administration (NASA), the European Space Agency (ESA), and the Italian Space Agency (ASI) to conduct a 4-year scientific exploration of the planet Saturn, its atmosphere, moons, rings, and magnetosphere.

Source record↗

World, We Have Problems: Simulation for Large Complex, Risky Projects, and Events

Prior to a spacewalk during the NASA STS/129 mission in November 2009, Columbia Broadcasting System (CBS) correspondent William Harwood reported astronauts, "were awakened again", as they had been the day previously. Fearing something not properly connected was causing a leak, the crew, both on the ground and in space, stopped and checked everything. The alarm proved false. The crew did complete its work ahead of schedule, but the incident reminds us that correctly connecting hundreds and thousands of entities, subsystems and systems, finding leaks, loosening stuck valves, and adding replacements to very large complex systems over time does not occur magically. Everywhere major projects present similar pressures. Lives are at - risk. Responsibility is heavy. Large natural and human-created disasters introduce parallel difficulties as people work across boundaries their countries, disciplines, languages, and cultures with known immediate dangers as well as the unexpected. NASA has long accepted that when humans have to go where humans cannot go that simulation is the sole solution. The Agency uses simulation to achieve consensus, reduce ambiguity and uncertainty, understand problems, make decisions, support design, do planning and troubleshooting, as well as for operations, training, testing, and evaluation. Simulation is at the heart of all such complex systems, products, projects, programs, and events. Difficult, hazardous short and, especially, long-term activities have a persistent need for simulation from the first insight into a possibly workable idea or answer until the final report perhaps beyond our lifetime is put in the archive. With simulation we create a common mental model, try-out breakdowns of machinery or teamwork, and find opportunity for improvement. Lifecycle simulation proves to be increasingly important as risks and consequences intensify. Across the world, disasters are increasing. We anticipate more of them, as the results of global warming prove more and more ominous-glaciers melting in Bolivia, floods in Saudi Arabia, the Maldives sinking and salt rising along the Nile. Fear grows about potential asteroid crashes and nightly television images raise awareness of victims of floods, hurricanes, cyclones and typhoons, fire, tornado, tsunami, bombings, landslides, and cross-boundary criminality. The Red Cross says that disasters impact 250 million people each year. That means that 700,000 people are having a very bad day today. Modeling and simulation is and must be part of the solution.

Elfrey, Priscilla↗

Analysis of a Hypergolic Propellant Explosion During Processing of Launch Vehicles in the VAB

NASA is developing launch vehicles to support missions to Low Earth Orbit (LEO), the moon and deep space. Whether manned or unmanned, the vehicle components will likely be integrated in the Vehicle Assembly Building (VAB) at Kennedy Space Center (KSC) and typically include a fueled spacecraft (SC) that sits on top of one or more stages. The processing of a fueled SC involves hazardous operations when it is brought into the VAB Transfer Aisle and lifted a significant height for mating with lower stages. Accidents resulting from these hazardous operations could impact unrelated personnel working in buildings adjacent to the VAB. Safe separation distances based on the DOD Explosives Standards Quantity-Distance (Q-D) approach result in large IBD arcs. This paper presents site-specific air blast and fragmentation hazard analyses for comparison with the Q-D arcs as well as consequence and risk analyses to provide added information for the decision maker. A new physics-based fragmentation model is presented that includes: a) the development of a primary fragment list (which defines the fragment characteristics) associated with a hypergolic propellant explosion, b) a description of a 3D fragment bounce model, c) the results of probabilistic Monte-Carlo simulations (that include uncertainties in the fragment characteristics) to determine: i) the hazardous fragment density distance, ii) the expected number of wall/roof impacts and penetrations to over 40 buildings adjacent to the VAB, and iii) the risk to building occupants.

Chrostowski, Jon D.↗

Understanding Pre-Quantitative Risk in Projects

Standard approaches to risk management in projects depend on the ability of teams to identify risks and quantify the probabilities and consequences of these risks (e.g., the 5 x 5 risk matrix). However, long before quantification does - or even can - occur, and long after, teams make decisions based on their pre-quantitative understanding of risk. These decisions can have long-lasting impacts on the project. While significant research has looked at the process of how to quantify risk, our understanding of how teams conceive of and manage pre-quantitative risk is lacking. This paper introduces the concept of pre-quantitative risk and discusses the implications of addressing pre-quantitative risk in projects.

risk levels.↗

Genetic Algorithm-Based Optimization to Match Asteroid Energy Deposition Curves

An asteroid entering Earth's atmosphere deposits energy along its path due to thermal ablation and dissipative forces that can be measured by ground-based and spaceborne instruments. Inference of pre-entry asteroid properties and characterization of the atmospheric breakup is facilitated by using an analytic fragment-cloud model (FCM) in conjunction with a Genetic Algorithm (GA). This optimization technique is used to inversely solve for the asteroid's entry properties, such as diameter, density, strength, velocity, entry angle, and strength scaling, from simulations using FCM. The previous parameters' fitness evaluation involves minimizing error to ascertain the best match between the physics-based calculated energy deposition and the observed meteors. This steady-state GA provided sets of solutions agreeing with literature, such as the meteor from Chelyabinsk, Russia in 2013 and Tagish Lake, Canada in 2000, which were used as case studies in order to validate the optimization routine. The assisted exploration and exploitation of this multi-dimensional search space enables inference and uncertainty analysis that can inform studies of near-Earth asteroids and consequently improve risk assessment.

Depositio↗

CNTR: Explanation of Propellant Flow and Description of Initial Experiments

The Centrifugal Nuclear Thermal Rocket (CNTR) is one of few designs that could enable extremely rapid missions to Mars using currently available technologies. McCarthy conducted the first conceptual study of high performance nuclear thermal propulsion (NTP) and published his findings in 1954. High performance NTP was further investigated by Princeton researchers in the early 1960s and continued by other researchers throughout the 60s, 70s, and 80s. An interagency panel conducted in 1991 demonstrated the potential of liquid core nuclear rockets, such as the Liquid Annular Reactor System (LARS), to reach temperatures up to 5000 K and specific impulses (Isp) up to 2000 s. A more recent study of versatile NTP asserts that a similar propulsion system, the Centrifugal Gas Core Reactor (CGCR), can reach an estimated Isp of 1800 s[4]. An Isp of that magnitude significantly reduces travel times and consequently health risks to flight crews. The CNTR seeks to build on the work of previous liquid core NTP systems and aims to reach an Isp in the range of 1500 s to 1800 s while using hydrogen as the propellant. However, the CNTR is not limited to hydrogen and can instead utilize other volatiles such as ammonia, methane, or water at about half the Isp of hydrogen. This flexibility expands the CNTR’s mission range considerably by providing propellant storability and the potential for directly using volatiles available in-situ.

Nuclear Thermal Propulsion Human Mars↗

Applying a One Health Approach in Global Health and Medicine: Enhancing Involvement of Medical Schools and Global Health Centers

Multidisciplinary and multisectoral approaches such as One Health and related concepts (e.g., Planetary Health, EcoHealth) offer opportunities for synergistic expertise to address complex health threats. The connections between humans, animals, and the environment necessitate collaboration among sectors to comprehensively understand and reduce risks and consequences on health and wellbeing. One Health approaches are increasingly emphasized for national and international plans and strategies related to zoonotic diseases, food safety, antimicrobial resistance, and climate change, but to date, the possible applications in clinical practice and benefits impacting human health are largely missing.

Catherine Machalaba↗

Starfleet Medical: Knowledge Skills and Abilities of Crew Medical Officers on Exploration Missions

Anticipating the medical skills necessary for deep space exploration missions is one of the greatest space medicine challenges. Spontaneous medical events unrelated to the space environment for which resourcing is severely limited. Novel medical events in the space environment for which are unknown unknowns. Exploration missions are remote, long duration, and low resource which increases the risk and consequences of medical events and require increased crew autonomy.

Levin, DR↗

Radiation Transport Models in Space: from Supernovae to Cells

Humans embarking on deep space exploration missions will encounter persistent exposure to galactic cosmic rays (GCR) - an energetic and highly complex radiation field that is unlike anything found on Earth. Exposure to such radiation fields is attributed to various adverse health effects, including cancer, cardiovascular disease, and cognitive impairment and is identified by NASA as one of the five main hazards of human spaceflight. It is therefore critical to be able to fully characterize the exposure received by humans behind shielding in space and project consequent health risks. A wide variety of computational models have been developed over the years to help meet this requirement. In this talk, an overview of the GCR environment in deep space is provided. Methods of propagating GCR fields through the shielding that protects humans in space are described along with simulation tools used to assess biological damage at the cellular scale. Finally, the NASA cancer risk model is briefly described, and risk projections are provided for various mission scenarios. Radiation transport models and solution methods pervade many aspects of this talk. For example, the GCR spectrum impinging on spacecraft is determined by solving the Fokker-Planck transport equation to propagate cosmic rays (believed to originate from supernovae) from the edge of the heliosphere to the vicinity of Earth. The Boltzmann transport equation is solved to transport this GCR spectrum through shielding and human tissue. Monte Carlo methods are used to simulate the transport of low energy electrons that dominate biological damage at the cellular scale. Progress and challenges in each of these areas will be highlighted.

Tony C. Slaba↗

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗