Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Implementing an Objectives-Driven, Risk-Informed, and Case-Assured Approach to Safety and Mission Success at NASA

NASA is developing a “Standard for Assurance of Space Flight Safety and Mission Success” that implements an objectives-driven, risk-informed, and case-assured approach to safety and mission success (S&MS) for NASA space flight programs and projects. The standard aligns with the philosophy of risk leadership that has recently been established in NASA policy to assure acceptable levels of flight crew safety and mission success risk. It is consistent with existing NASA risk management requirements and is compatible with NASA program management and systems engineering requirements. The methodology described in the standard is presented in terms of an S&MS assurance framework that is designed to allow substantial flexibility in the specific means by which programs and projects achieve acceptable mission S&MS risk. Such flexibility is necessary to accommodate the increasingly broad range of acquisition strategies employed by NASA, including commercial transportation services, as well as to accommodate the increasingly rapid evolution of space flight-related technologies and practices. A key feature of the S&MS assurance framework is the specification of S&MS success criteria for each life-cycle review (LCR). The S&MS assurance case is structured around these criteria, the satisfaction of which indicates that the program/project is adhering to the S&MS risk posture. This enables the evolving S&MS assurance case to be used as a fundamental program/project submittal at each LCR, where its inherent structure of argument, supported by evidence, directly supports the evaluation of the program/project with respect to the S&MS success criteria, and by extension, the S&MS risk posture. As such, the S&MS assurance case is integral to program/project systems engineering, risk management, and S&MS oversight activities, and provides the principal basis for S&MS risk acceptance by the Decision Authority throughout the program/project life cycle.

42 ENGINEERING↗
DOE OSTI2025

Safety Assurance Framework for Nuclear Digital Instrumentation and Control Software

Software in digital instrumentation and control (D&C) systems poses unique challenges for the safety assurance of nuclear power plants. Through a literature survey of 21 sources, we analyzed various claims, arguments, and evidence used in safety assurance cases across industries. These were organized into a Goal Structuring Notation (GSN) safety assurance case framework to organize and visualize the various arguments for DI&C safety. We developed a classification for the levels of the framework, which can be used in other safety assurance cases to improve clarity.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗
DOE OSTI2020

Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations

This LWRS research seeks to assist in breaking the impasse which has precluded digital safety system upgrades by generating and demonstrating a process and related business case tool to enable a Business Case Analysis (BCA). The purpose of a BCA is to show such upgrades can be economically justified. This BCA methodology first systematically establishes a forecast of expected lifecycle costs for I&C identified for upgrade by: • Definitively bounding the scope of current I&C systems envisioned for upgrade. • Collecting historical labor and material usage data that bound cost contributors related to the systems to be upgraded. • Synthesizing and analyzing the data to establish lifecycle cost forecasts for the current systems. In collaboration with engineers familiar with the attributes of the digital equipment to be used in the upgrade and how it is envisioned to be applied, cost savings categories and expected savings in those categories are then identified and applied using the analysis tools developed for this purpose. The result is an estimate NPV of savings enabled by the upgrade. This includes both direct cost savings (e.g., surveillance labor costs) as well as cost avoidance items (e.g., inventory carrying costs). Finally, when utility-provided digital upgrade costs estimates are included, the resultant BCA provides an NPV for the upgrade project. Development of a useful BCA methodology requires a real-world basis. With the cooperation of Exelon Generation (“Owner”), an Exelon-owned 2-Unit BWR Station (“Station”) was used as the foundation for this research. Exelon is pursuing a digital upgrade of current, first-echelon, safety-related I&C systems at these units, including the following: • Reactor Protection System (RPS) • Nuclear Steam Supply Shutoff System (N4S) • Emergency Core Cooling Systems (ECCS) • Anticipated Transient Without Scram (ATWS) Mitigation System

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Safety Assurance of Software and Machine Learning Development for Nuclear Instrumentation and Controls

Digital instrumentation and control (DI&C) systems monitor and control parameters in nuclear power plants. Ensuring their safety is a critical part of ensuring overall plant safety. Nuclear power plant licensing generates thousands of safety documents that could be organized more effectively using a safety assurance case (SAC). We conducted a literature survey of SACs and created a SAC framework for DI&C software using Goal Structuring Notation (GSN). This framework focuses on four software development processes: management & assurance, pre-developed software (PDS) qualification, the Software Development Life Cycle (SDLC), and the Machine Learning Development Life Cycle (MLDLC). We organized our framework using a novel level structure that can be applied to other SACs to improve their clarity. Finally, we demonstrate how our framework can be incorporated as part of a SAC for a larger reactor system.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗
DOE OSTI2020

Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations

The commercial nuclear sector faces unprecedented financial challenges driven by low natural gas prices and subsidized renewables in a marketplace that does not reward carbon-free baseload capacity. These circumstances, along with increasingly antiquated labor-centric operating models and analog technology, have forced the premature closure of multiple nuclear facilities and placed a much larger population of nuclear power stations at risk. Nuclear plant economic survival in current and forecasted market conditions requires an efficient and technology-centric operating model that harvests the native efficiencies of advanced technology. This is analogous to transformations in nearly every other industry. In light of previous industry experience in modernizing safety Instrumentation and Controls (I&C) systems, nuclear utilities are reluctant to pursue these upgrades due to uncertainty in licensing and cost.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

A Reference Governor for Plasma-Shape Control in Tokamaks

Tokamaks are torus-shaped devices where a high-temperature, ionized gas (i.e. a plasma) is confined by means of helical magnetic fields. The ultimate goal of tokamaks is producing net electrical energy by means of nuclear-fusion reactions within the plasma. The shape of the plasma inside the tokamak is closely related with its confinement characteristics and, therefore, with the produced fusion power. In order to achieve and maintain plasma shapes that maximize the fusion yield, feedback controllers have been successfully developed during the years. However, machine-protection and plasma-stability requirements impose hard constraints on the plasma-shape targets that can be safely achieved by a feedback controller. In this work, a reference governor is proposed to provide, in real time, plasma-shape targets that fulfill the aforementioned safety requirements. The reference governor calculates such plasma-shape targets in response to changes in the state of the closed-loop system, as well as disturbances in the plasma energy and current. Here, the reference-governor design is based on a dynamical model of the plasma electromagnetic response. Simulation tests of the reference governor have been carried out for different plasma scenarios in the DIII-D tokamak to emulate realistic cases where safety may be compromised.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2021

Thermal analyses of high-power advanced thermoacoustic radioisotope power system for future space exploration missions

This paper presents the results of 3-D thermal analyses of the heat source assembly of a 440 We advanced radioisotope power system (RPS) for future space exploration missions. This high thermal efficiency RPS employs a heat source assembly of eight Step 2 General Purpose Heat Source (GPHS) modules and four Thermoacoustic Power Converter (TAPC) units. Each unit is thermally coupled to two GPHS modules. Here, the analyses investigated the temperatures of the Iridium (Ir) alloy cladding of the 238 PuO 2 fuel pellets and the surface of the Fine Weave Pierced Fabric (FWPF) aeroshell in the GPHS modules to ensure reliable operation and safety in case of an unlikely reentry. Conductive coupling of the GPHS modules to the heater heads of the TAPC units produces relatively uniform axial and azimuthal distributions of heat flux and temperature. However, for this case the temperature of the Ir alloy cladding is lower than the desired values of 1173 K to maintain sufficient ductility. Adding a 5 mm wide He filled gap and decreasing the thickness of the graphite sleeve to 10 mm increased Ir cladding temperature to 1197–1174 K, which are in the desired range. The maximum surface temperatures of the FWPF graphite aeroshell of 1022–1131 K is well below the NASA specified limit of 1373 K. In addition, the total mass of the heat source assembly decreased by 19.6 kg, ~43% saving compared to original design.

42 ENGINEERING↗
DOE OSTI2024

Scenario development for safety assessment in deep geologic disposal of high-level radioactive waste and spent nuclear fuel: A review

Radiation and radioactive substances result in the production of radioactive wastes which require safe management and disposal to avoid risks to human health and the environment. To ensure permanent safe disposal, the performance of a deep geological repository for radioactive waste is assessed against internationally agreed risk-based standards. Assessing postclosure safety of the future system's evolution includes screening of features, events, and processes (FEPs) relevant to the situation, their subsequent development into scenarios, and finally the development and execution of safety assessment (SA) models. Global FEP catalogs describe important natural and man-made repository system features and identify events and processes that may affect these features into the future. By combining FEPs, many of which are uncertain, different possible future system evolution scenarios are derived. Repository licensing should consider both the reference or “base” evolution as well as alternative futures that may lead to radiation release, pollution, or exposures. Scenarios are used to derive and consider both base and alternative evolutions, often through production of scenario-specific SA models and the recombination of their results into an assessment of the risk of harm. Furthermore, while the FEP-based scenario development process outlined here has evolved somewhat since its development in the 1980s, the fundamental ideas remain unchanged. A spectrum of common approaches is given here (e.g., bottom–up vs. top–down scenario development, probabilistic vs. bounding handling of uncertainty), related to how individual numerical models for possible futures are converted into a determination as to whether the system is safe (i.e., how aleatoric uncertainty and scenarios are integrated through bounding or Monte Carlo approaches).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

The RF Protection Interlock System Prototype Verification

The Radio Frequency Protection Interlock system plays vital role in the LLRF related/dependent accelerator sections Protection. It’s main role is to collect information from number different sensors and indicators around nearest cavities and cryomodule and provide instant RF signal termination in case of safety thresholds violation. This submission describes newly designed RFPI system tailored to the Proton Improvement Plan II (PIP-II) requirements. The proof of concept prototype of this system has been build. The paper includes also the CMTF environment evaluation tests results and findings as an input to the next full-scope prototype design.

43 PARTICLE ACCELERATORS↗
DOE OSTI2023

Evaluation of the first version of the new RFPI system dedicated to PIP-II project accelerator

The Low-Level Radio Frequency (LLRF) control system is one of the most critical superconducting linac infrastructures responsible for the parameters of the beam acceleration. The LLRF system mainly focuses on the electromagnetic field parameters inside the cavity. While it incorporates fast feedback algorithms to optimize energy transfer to the passing particle beam it does not follow other cryomodule or cavity parameter changes. The Radio Frequency Protection Interlock (RFPI) system closely monitors various factors (like cryomodule vacuum, beamline vacuum, field emission probe current level, temperature, RF signal leakage, etc). Its simple but reliable logic has to provide an instant decision about the LLRF system or high-power amplifier output signal blocking in case of safety region excitation. This contribution presents a new version of the RFPI system which logic is implemented in the FPGA chip. The initial work on the prototype of the new system design resulted in the PoC (Proof of Concept) device. The PoC offers the possibility of various protection logic configurations, input signals parameters evaluation, and modularity aspects verification. The structure and test results from the device evaluation are summarized and discussed in this contribution.

43 PARTICLE ACCELERATORS↗
DOE OSTI2025

The PIP-II dedicated RFPI system final design

The Radio Frequency Protection Interlock (RFPI) system main responsibility is to collect predefined set of signals and to protect each RF station. In case of safety limits violations from any of this input signals the RFPI has to instantenously drop permits for the LLRF or RF amplifier (eq. Solid State Amplifier - SSA or klystron) operation.This paper presents an overview of the final design of the RFPI system dedicated for Proton Improvement Plan II (PIP-II) at Fermilab.

Cichalewski, Wojciech [Lodz, Tech. U.; Lodz U.]↗
DOE OSTI2020

Verification of the sensitivity and uncertainty-based criticality safety validation techniques: ORNL’s SCALE case study

The use of sensitivity and uncertainty-based techniques has been well-developed in the neutronic community for criticality safety applications. Sensitivity techniques calculate the first-order relative variations in keff due to relative cross-section variations by isotope, reaction type, and incident neutron energy. The result is a vector of sensitivity coefficients which is folded with prior cross-section uncertainties to calculate the so-called similarity indices. Similarity indices are integral quantities which serve as useful mathematical measures for assessing the relevance of existing or new experiments to given application conditions, representing design systems for which the models are to be validated. Despite their importance for a wide range of validation activities, the peer-reviewed literature is non-existent on the development of rigorous verification analysis for their calculated values. Thus, this manuscript proposes a simple non-intrusive method to calculate similarity indices, serving as an independent verification tool for their evaluation. The manuscript derives the theoretical basis for the proposed verification analysis. Next, the verification analysis is applied to the ORNL’s SCALE code suite which employs adjoint-based methods to calculate similarity indices. Numerical experiments using a number of well-known benchmark experiments are employed to verify the calculation of the similarity indices.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

UO 2 -liquid metal suspension fuel concept for enhanced passive safety of LWRs: A heat pipe case study

This work proposes a novel fuel concept for use in light-water type reactors (LWRs): UO 2 particles suspended in a low-melting-point liquid metal (LM). This new fuel form offers lower energy density and higher thermal conductivity, thus enhancing the fuel’s thermal performance compared to sintered UO 2 pellets. Two candidate alloys for the LM are proposed based on previous studies into accident-tolerant fuels: Bi-Pb-Sn and Pb-Sn. Ten research questions are provided to guide future development of this fuel. A simple heat pipe model was constructed by coupling a reactor physics code to a heat transport code and other physics modules. Scoping calculations were performed on this model core as a preliminary investigation into five of the research questions. A fuel with 13 wt% UO 2 was shown to maintain a steady-state peak coolant channel wall temperature below 400 °C, and maintain criticality via self-regulating reactivity feedback. Shortcomings of the present model are discussed in this work, along with proposed future model improvements and fuel development. The appendix provides an example of a reactor concept that could be developed to utilize this fuel, but more modeling and experimental work are needed before a full reactor concept can be developed.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2020

Safety Functions and Features, Events and Processes for the E-Area Performance Assessment

The DOE Technical Standard, “Disposal Authorization Statement and Tank Closure Documentation,” (DOE 2017) recommends the use of safety functions and features, events and processes (FEPs) to support development of conceptual models and identification of scenarios to be considered in a performance assessment (PA). The FEP process provides a means to describe how a PA considers and addresses the factors that could influence the performance of key barriers. Understanding the roles of barriers in terms of limiting migration helps to focus on how changes in the system could lead to a situation where those roles cannot be fulfilled and there is the potential for compromised performance. The FEPs screening and review process was used to identify FEPs that are relevant for the EArea Low-Level Waste Facility (LLWF) and specifically those FEPs that could have a detrimental impact on the effectiveness of a given safety function. For this PA, a default list of FEPs developed at the International Atomic Energy Agency (IAEA 2004) and an approach implemented for PAs at the Hanford and Idaho sites (Mehta et al. 2016, DOE-ID 2019) are used to identify processes and events that could influence the effectiveness of a given safety function for the E-Area LLWF (e.g., subsidence can impact the safety function of the cover system and lead to increased infiltration). The Hanford and Idaho PAs represent two of the most recent applications of this approach. The PA evaluates the potential impacts of changes in performance of different features of the system and demonstrates that the safety functions represent multiple and redundant barriers. Barrier analyses, assuming a safety function is not present, also test the robustness of the system in the event of the loss of one or more safety functions. Such evaluations also support a qualitative illustration of the concept of defense in depth. The safety concept for closure of the E-Area LLWF (generically referred to as “E-Area”) encompasses a variety of different features (i.e., administrative controls, natural site features, and engineered barriers) that reduce the potential impacts on human health and the environment from the residual waste that will remain after closure. These features can be represented as a collection of safety functions acting independently and as a system to provide for overall safety. In some applications, there have been attempts to assign numerical expectations to specific safety functions, but that is not the intent in this case. The concept of safety functions is used more qualitatively in two ways for this PA: 1. To illustrate the robustness of the E-Area design, operational practices and closure approach by documenting features that are and are not credited in different modeling cases. 2. To identify the roles of the different features and potential processes and events that could compromise the performance of safety features and need to be considered when developing the modeling approach. This report addresses both safety functions and FEPs for the E-Area PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Integrated Operations for Nuclear: Work Reduction Opportunity Demonstration Strategy

EXECUTIVE SUMMARY The Light Water Reactor Sustainability Program Plant Modernization Pathway has been working with industry for a number of years to leverage digital technology to extend the life and improve the performance of the existing fleet through modernized technologies and improved processes for plant operation and power generation. This includes development of modernization solutions to improve reliability and economic performance while addressing US nuclear industry’s aging and obsolescence challenges. The objective of these efforts is to deliver a sustainable business model that enables US nuclear industry to remain competitive. Digital Infrastructure (DI) research has established a technical foundation for these efforts. This effort began with technical analysis and support for a safety-related instrumentation and control (I&C) pilot upgrade being performed at Constellation Energy Generation’s Limerick Nuclear Plant. The following publicly available reports were produced as part of this effort. • INL/EXT-20-61079, Vendor-Independent Design Requirements for a Boiling Water Reactor Safety System Upgrade [1] • INL/EXT-20-59371, Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations [2] • INL/EXT-20-59809, “Safety-Related Instrumentation and Control Pilot Upgrade: Initial Scoping Phase Implementation Report and Lessons Learned [3] • INL/RPT-23-72105, Safety-Related Instrumentation and Control Upgrade: Conceptual – Detailed Design Phase Report and Lessons Learned [4]

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

MASTODON: An Open-Source Software for Seismic Analysis and Risk Assessment of Critical Infrastructure

Seismic analysis and risk assessment of safety-critical infrastructure like hospitals, nuclear power plants, dams, and facilities handling radioactive materials involve computationally intensive numerical models and coupled multiphysics scenarios. They are also performed in a strict regulatory environment that requires high software quality assurance standards, and in the case of safety-related nuclear facilities, a conformance to the American Society of Mechanical Engineers Nuclear Quality Assurance (NQA-1) standard. This paper introduces the open-source finite-element software, MASTODON (Multi-hazard Analysis of Stochastic Time-Domain Phenomena), which implements state-of-the-art seismic analysis and risk assessment tools in a quality-controlled environment. MASTODON is built on MOOSE (Multi-physics Object-Oriented Simulation Environment), which is a highly parallelizable, NQA-1 conforming, coupled multiphysics, finite-element framework developed at Idaho National Laboratory. MASTODON is capable of fault rupture and source-to-site wave propagation using the domain reduction method, nonlinear site response, and soil-structure interaction analysis, implicit and explicit time integration, automated stochastic simulations, and seismic probabilistic risk assessment. When coupled with other MOOSE applications, MASTODON can also solve strongly and weakly coupled multiphysics problems. This paper presents a summary of the capabilities of MASTODON and some demonstrative examples.

42 ENGINEERING↗