Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS1981

Dish stirling solar receiver combustor test program

The operational and energy transfer characteristics of the Dish Stirling Solar Receiver (DSSR) combustor/heat exchanger system was evaluated. The DSSR is designed to operate with fossil fuel augmentation utilizing a swirl combustor and cross flow heat exchanger consisting of a single row of 4 closely spaced tubes that are curved into a conical shape. The performance of the combustor/heat exchanger system without a Stirling engine was studied over a range of operating conditions and output levels using water as the working fluid. Results show that the combustor may be started under cold conditions, controlled safety, and operated at a constant air/fuel ratio (10 percent excess air) over the required range of firing rates. Furthermore, nondimensional heat transfer coefficients based on total heat transfer are plotted versus Reynolds number and compared with literature data taken for single rows of closely spaced tubes perpendicular to cross flow. The data show enhanced heat transfer for the present geometry and test conditions. Analysis of the results shows that the present system meets specified thermal requirements, thus verifying the feasibility of the DSSR combustor design for final prototype fabrication.

Bankston, C. P.↗
NASA NTRS1985

Human factors in space station architecture 1: Space station program implications for human factors research

The space station program is based on a set of premises on mission requirements and the operational capabilities of the space shuttle. These premises will influence the human behavioral factors and conditions on board the space station. These include: launch in the STS Orbiter payload bay, orbital characteristics, power supply, microgravity environment, autonomy from the ground, crew make-up and organization, distributed command control, safety, and logistics resupply. The most immediate design impacts of these premises will be upon the architectural organization and internal environment of the space station.

Cohen, M. M.↗
NASA NTRS1987

Definition of a space transportation systems cargo element (Shuttle-C). Orientation

The Martin Marietta Shuttle-C project organization has been tailored to fit the tasks required for the Phase B study. Lead responsibilities have been assigned for Program Control, Safety, Reliability, and Quality Assurance (SR and QA); Systems Engineering and Integration (SE and I); Design and Analysis; Production and Test; and Operations. Details of the Performance Review and Orientation Program of November 1987 are given.

Source record↗
NASA NTRS2007

Applying MDA to SDR for Space to Model Real-time Issues

NASA space communications systems have the challenge of designing SDRs with highly-constrained Size, Weight and Power (SWaP) resources. A study is being conducted to assess the effectiveness of applying the MDA Platform-Independent Model (PIM) and one or more Platform-Specific Models (PSM) specifically to address NASA space domain real-time issues. This paper will summarize our experiences with applying MDA to SDR for Space to model real-time issues. Real-time issues to be examined, measured, and analyzed are: meeting waveform timing requirements and efficiently applying Real-time Operating System (RTOS) scheduling algorithms, applying safety control measures, and SWaP verification. Real-time waveform algorithms benchmarked with the worst case environment conditions under the heaviest workload will drive the SDR for Space real-time PSM design.

Blaser, Tammy M.↗
NASA NTRS2010

An Adaptive Control Technology for Safety of a GTM-like Aircraft

An adaptive control architecture for safe performance of a transport aircraft subject to various adverse conditions is proposed and verified in this report. This architecture combines a nominal controller based on a Linear Quadratic Regulator with integral action, and an adaptive controller that accommodates actuator saturation and bounded disturbances. The effectiveness of the baseline controller and its adaptive augmentation are evaluated using a stand-alone control veri fication methodology. Case studies that pair individual parameter uncertainties with critical flight maneuvers are studied. The resilience of the controllers is determined by evaluating the degradation in closed-loop performance resulting from increasingly larger deviations in the uncertain parameters from their nominal values. Symmetric and asymmetric actuator failures, flight upsets, and center of gravity displacements, are some of the uncertainties considered.

Matsutani, Megumi↗
DOE OSTI2024

Hybrid model predictive control techniques for safety factor profile and stored energy regulation while incorporating NBI constraints

Abstract A novel hybrid Model Predictive Control (MPC) algorithm has been designed for simultaneous safety factor ( q ) profile and stored energy ( w ) control while incorporating the pulse-width-modulation constraints associated with the neutral beam injection (NBI) system. Regulation of the q -profile has been extensively shown to be a key factor for improved confinement as well as non-inductive sustainment of the plasma current. Simultaneous control of w is necessary to prevent the triggering of pressure-driven magnetohydrodynamic instabilities as the controller shapes the q profile. Conventional MPC schemes proposed for q -profile control have considered the NBI powers as continuous-time signals, ignoring the discrete-time nature of these actuators and leading in some cases to performance loss. The hybrid MPC scheme in this work has the capability of incorporating the discrete-time actuator dynamics as additional constraints. In nonlinear simulations, the proposed hybrid MPC scheme demonstrates improved q -profile+ w control performance for NSTX-U operating scenarios.

Physics↗
DOE OSTI2020

Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations

The commercial nuclear sector faces unprecedented financial challenges driven by low natural gas prices and subsidized renewables in a marketplace that does not reward carbon-free baseload capacity. These circumstances, along with increasingly antiquated labor-centric operating models and analog technology, have forced the premature closure of multiple nuclear facilities and placed a much larger population of nuclear power stations at risk. Nuclear plant economic survival in current and forecasted market conditions requires an efficient and technology-centric operating model that harvests the native efficiencies of advanced technology. This is analogous to transformations in nearly every other industry. In light of previous industry experience in modernizing safety Instrumentation and Controls (I&C) systems, nuclear utilities are reluctant to pursue these upgrades due to uncertainty in licensing and cost.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

A Systems Engineering Analysis of National Ignition Facility Industrial Controls Systems and Safety Interlock Systems Remote Input/Output Networking Migration from ControlNet to EtherNet/IP

The ControlNet industrial communications protocol and modules used in the Industrial Control System (ICS) and Safety Interlock System (SIS) at the National Ignition Facility (NIF) are no longer necessary and the ICS and SIS would be better served by migrating the communications structure to use EtherNet/Industrial Protocol (IP) and EtherNet bridge modules instead. By the admission of the vendor of ControlNet hardware, Rockwell Automation, in literature by Bill Petro [1], “Moving forward, customers will be able to optimize their asset utilization better using EtherNet/IP protocol than with ControlNet.” The NIF is one of the key elements of the Inertial Confinement Fusion (ICF) program at Lawrence Livermore National Laboratory (LLNL), a federally funded research and development center (FFRDC). The NIF contains the systems and provides the operational capacity to perform ICF, high energy density (HED), and discovery science experiments utilizing 192 individual beamlines, a host of diagnostics, and all the industrial systems required to facilitate these beamlines and diagnostics. The industrial systems are governed by the ICS and SIS, with the ICS providing control and the SIS providing monitoring and permissives. Construction on the NIF began in 1997 and was certified complete in 2009 and, as a result, the ICS and SIS were developed during this time using the tools that were available then. This includes the communications structure and protocols for these systems, much of which was, and still is, ControlNet. ControlNet, particularly during the time that the ICS and SIS were being built, has several attractive features. ControlNet hardware is exclusive to Rockwell Automation, which was the automation hardware chosen for the ICS and SIS. One feature that could be considered an advantage or a disadvantage depending on the communication needs of the system is that ControlNet also utilizes no active network components, excluding repeaters which are not always necessary. According to the architect of the ICS system at the NIF, Gordon Lau, one of the most attractive features of the ControlNet protocol during development of the ICS and SIS was that it is deterministic, providing timing of data transfer that is executed exactly as it is defined by the developer.

42 ENGINEERING↗
DOE OSTI2020

Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations

This LWRS research seeks to assist in breaking the impasse which has precluded digital safety system upgrades by generating and demonstrating a process and related business case tool to enable a Business Case Analysis (BCA). The purpose of a BCA is to show such upgrades can be economically justified. This BCA methodology first systematically establishes a forecast of expected lifecycle costs for I&C identified for upgrade by: • Definitively bounding the scope of current I&C systems envisioned for upgrade. • Collecting historical labor and material usage data that bound cost contributors related to the systems to be upgraded. • Synthesizing and analyzing the data to establish lifecycle cost forecasts for the current systems. In collaboration with engineers familiar with the attributes of the digital equipment to be used in the upgrade and how it is envisioned to be applied, cost savings categories and expected savings in those categories are then identified and applied using the analysis tools developed for this purpose. The result is an estimate NPV of savings enabled by the upgrade. This includes both direct cost savings (e.g., surveillance labor costs) as well as cost avoidance items (e.g., inventory carrying costs). Finally, when utility-provided digital upgrade costs estimates are included, the resultant BCA provides an NPV for the upgrade project. Development of a useful BCA methodology requires a real-world basis. With the cooperation of Exelon Generation (“Owner”), an Exelon-owned 2-Unit BWR Station (“Station”) was used as the foundation for this research. Exelon is pursuing a digital upgrade of current, first-echelon, safety-related I&C systems at these units, including the following: • Reactor Protection System (RPS) • Nuclear Steam Supply Shutoff System (N4S) • Emergency Core Cooling Systems (ECCS) • Anticipated Transient Without Scram (ATWS) Mitigation System

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1998

Microfabricated Chemical Sensors for Safety and Emission Control Applications

Chemical sensor technology is being developed for leak detection, emission monitoring, and fire safety applications. The development of these sensors is based on progress in two types of technology: 1) Micromachining and microfabrication (MicroElectroMechanical Systems (MEMS)-based) technology to fabricate miniaturized sensors. 2) The development of high temperature semiconductors, especially silicon carbide. Using these technologies, sensors to measure hydrogen, hydrocarbons, nitrogen oxides, carbon monoxide, oxygen, and carbon dioxide are being developed. A description is given of each sensor type and its present stage of development. It is concluded that microfabricated sensor technology has significant potential for use in a range of aerospace applications.

Hunter, G. W.↗
NASA NTRS1997

IV and V Issues in Achieving High Reliability and Safety in Critical Control System Software

Risk analysis and integrated verification and validation are two important elements in a plan for ensuring the safety of critical software systems. We describe an approach we are currently developing for integrating risk analysis, and metrics analysis, and propose a fault predictor that would integrate the results of these activities. Practical difficulties associated with our approach are also discussed, as are limitations of the proposed predictor. We conclude with a discussion of what as been learned to date, and with suggestions for future work.

validation software reliability software risk asse↗
DOE OSTI2024

Nonlinear control of the minimum safety factor in tokamaks by optimal allocation of spatially moving electron cyclotron current drive

The minimum value of the safety factor profile is related to the magnetohydrodynamic (MHD) stability of the plasma confined in a tokamak. Therefore, active control of the minimum safety factor may mitigate MHD instabilities that can degrade or even terminate plasma confinement. Typically, in most tokamak scenarios, the minimum safety factor evolves spatially with time, i.e., the location at which the safety factor achieves the minimum value changes with time. In addition to the inherent nonlinearities in the minimum safety factor evolution, its spatial variation makes the control design challenging. In particular, complexity in control design may arise from the need for time-dependent nonlinear models that account for spatial variation of the minimum safety factor. Furthermore, the minimum safety factor may drift to locations where the actuator authority is low. The problem of minimum safety factor control with target location tracking and moving electron cyclotron current drive (ECCD) is addressed in this work. A nonlinear time-dependent model that incorporates the spatial variation of the minimum safety factor is presented. A nonlinear controller based on optimal feedback linearization is developed to track a target minimum safety factor. The proposed controller treats the ECCD position as a controllable variable. In other words, the controller prescribes the ECCD position (in addition to the non-inductive powers) in real time based on an optimal criterion that is defined a priori. This work also presents the steps necessary to integrate the minimum safety factor controller with a total energy controller to achieve multiple control objectives simultaneously. In conclusion, the proposed integrated control algorithm is tested using nonlinear simulations in the Control Oriented Transport SIMulator (COTSIM) for a DIII-D tokamak scenario.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2020

Safety-Related Instrumentation & Control Pilot Upgrade Initiation Phase Implementation Report

This research report (1) describes the process followed and products developed during the SR I&C Pilot Project Initial Scoping Phase, and (2) captures lessons learned. Exelon Generation and LWRS collaborated to develop a Digital Transformation Strategy as part of a larger Advanced Concept of Operations. The proposed SR I&C Pilot Upgrade provides a foundation stone for this Digital Transformation that will improve plant safety, reliability, and operational performance while lowering plant Total Cost of Ownership (TCO). Initial Scoping Phase activities for this Pilot Project have been performed in accordance with industry processes that have been adapted to better support digital upgrades. These processes include IP-ENG-001, Standard Design Process (SDP) [Reference 2], NISP-EN-04, Standard Digital Engineering Process (SDEP) [Reference 3], and Electric Power Research Institute (EPRI) Report 3002011816, Digital Engineering Guide (DEG). Completing Initial Scoping Phase Engineering and Operations, Licensing, and Project Management Activities was necessary to sufficiently bound the scope, schedule, and estimated cost of the Project to enable utility management to authorize moving into the Conceptual Design Phase. A significant finding of the Business Case Analysis (BCA) methodology developed and applied as part of this effort was that the growth rate of material costs for sustaining the operation of obsolete SR I&C equipment is accelerating. This directly contributed to the Project Economic Analysis created to justify continuing the Project. Project Initial Scoping Phase lessons learned have also been captured to assist the larger industry in understanding the Digital Transformation Strategy and SR I&C Pilot Project Initial Scoping Phase efforts. This is in keeping with the public/private partnership that has been established between the Department of Energy (DOE) and Exelon for this effort with engagement from the NRC. By addressing first-of-a-kind (FOAK) risks and capturing lessons learned, the SR I&C Pilot Upgrade Project addresses technical, regulatory, and business risks to enable subsequent implementers of similar upgrades.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Distributed Transient Safety Verification via Robust Control Invariant Sets: A Microgrid Application

Modern safety-critical energy infrastructures are increasingly operated in a hierarchical and modular control framework which allows for limited data exchange between the modules. In this context, it is important for each module to synthesize and communicate constraints on the values of exchanged information in order to assure system-wide safety. To ensure transient safety in inverter-based microgrids, we develop a set invariance-based distributed safety verification algorithm for each inverter module. Applying Nagumo's invariance condition, we construct a robust polynomial optimization problem to jointly search for safety-admissible set of control set-points and design parameters, under allowable disturbances from neighbors. We use sum-of-squares (SOS) programming to solve the verification problem and we perform numerical simulations using grid-forming inverters to illustrate the algorithm.

Bouvier, Jean-Baptiste H.↗
NASA NTRS2004

Use of Structure as a Basis for Abstraction in Air Traffic Control

The safety and efficiency of the air traffic control domain is highly dependent on the capabilities and limitations of its human controllers. Past research has indicated that structure provided by the airspace and procedures could aid in simplifying the controllers cognitive tasks. In this paper, observations, interviews, voice command data analyses, and radar analyses were conducted at the Boston Terminal Route Control (TRACON) facility to determine if there was evidence of controllers using structure to simplify their cognitive processes. The data suggest that controllers do use structure-based abstractions to simplify their cognitive processes, particularly the projection task. How structure simplifies the projection task and the implications of understanding the benefits structure provides to the projection task was discussed.

Davison, Hayley J.↗
DOE OSTI2023

Safety-Related Instrumentation and Control Pilot Upgrade: Conceptual - Detailed Design Phase Report and Lessons Learned

Historically, regulatory barriers have precluded nuclear plant safety-related (SR) Instrumentation and Control (I&C) system modernizations. These barriers have been largely addressed by industry and United States Nuclear Regulatory Commission (NRC) efforts, including development of the License Amendment Request (LAR) Alternate Review (AR) process for digital I&C upgrades. The U.S. Department of Energy (DOE) and the Idaho National Laboratory (INL) are supporting a SR I&C pilot upgrade at the Limerick Generating Station (LGS) to demonstrate this process and capturing associated lessons learned for the benefit of industry. In 2021, a paper summarizing lessons learned as captured in INL/EXT-20-59809, Safety Related Instrumentation & Control Pilot Upgrade Initial Scoping Phase Implementation Report and Lessons Learned was presented at the 12th NPIC & HMIT conference. It is recommended that readers of this paper review reference 1 or the associated Nuclear Journal paper for context. This paper summarizes activities performed and lessons learned for the conceptual design phase and portions of the detailed design phase as captured in INL/RPT-23-XXXX, “Safety-Related Instrumentation and Control Pilot Upgrade: Conceptual - Detailed Design Phase Report and Lessons Learned.” The portions of the effort covered by reference 2 include conceptual design phase activities from December 2020, through completion in November 2021, and detailed design activities through September 2022. These efforts and associated detailed documentation in reference 3 are intended to support similar industry upgrades as a foundation stone for a Digital Transformation that will improve plant safety, reliability, and operational performance while lowering plant total cost of ownership.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2024

Control Effectiveness: Metric Development and Application to Resilient Lunar Habitat Design

System safety engineering in its bare essence involves identifying, assessing, and mitigating, or controlling, hazards. Appropriate safety controls are selected using hazard reduction precedence principles, prior experience, or by assessing their impact on residual risk (together with other factors like cost). We propose a control effectiveness metric as one way to systematically and consistently evaluate potential safety controls individually and thereby facilitate selecting a shortlist of potential controls for subsequent integrated evaluation. The control effectiveness metric considers a safety control’s availability when needed, the probability that its design is adequate in addressing the targeted hazard, the probability that the design will be implemented as intended, and the relationship between the time it takes for the safety control to address its target hazard and the time before the hazard propagates. We demonstrated the use of our metric on a lunar habitat design using a physics-based habitat simulator. High control effectiveness and safety controls result in a habitat with high resilience, while low control effectiveness results in lower resilience.

Rashi Jain↗