Search NASA⌕ Search

SEARCH · Search NASA

Results for “dynamic safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

The role of communications, socio-psychological, and personality factors in the maintenance of crew coordination

The influence of group dynamics on the capability of aircraft crew members to make full use of the resources available on the flight deck in order to maintain flight safety is discussed. Instances of crewmembers withholding altimeter or heading information from the captain are cited as examples of domineering attitudes from command pilots and overconscientiousness on the parts of copilots, who may refuse to relay information forcefully enough or to take control of the aircraft in the case of pilot incapacitation. NASA studies of crew performance in controlled, simulator settings, concentrating on communication, decision making, crew interaction, and integration showed that efficient communication reduced errors. Acknowledgements served to encourage correct communication. The best crew performance is suggested to occur with personnel who are capable of both goal and group orientation. Finally, one bad effect of computer controlled flight is cited to be the tendency of the flight crew to think that someone else is taking care of difficulties in threatening situations.

Foushee, H. C.↗

Highly-scalable GPU-accelerated compressible reacting flow solver for modeling high-speed flows

Emerging supercomputing systems utilize a combination of central processing units (CPUs) and graphics processing units (GPUs) in an effort to reach exascale capabilities while minimizing the energy footprint of operating such systems. Such heterogeneous machines introduce new challenges for fluids solvers because the hardware architecture and operation of a GPU are fundamentally different from conventional CPUs. In this work, a general approach for efficient implementation of finite-volume based reacting flow solvers on such heterogeneous systems is presented. Three main challenges, namely, data access pattern, thread divergence, and thread safety, are addressed. Since compressible reacting flows require special methods to deal with chemical reactions, hyperbolic and nonlinear convection terms, and the presence of turbulence, specific algorithms that ensure GPU-based efficiency are developed. The approach is demonstrated on the widely available OpenFOAM open source software by modifying core algorithms for GPU accessibility. The scalability of the resulting solver, is demonstrated using practical test cases, including flow through a scramjet engine and the dynamics of a rotating detonation engine. Here, the solver provides near-ideal scaleup on a large number of GPUs (>3000), and extremely efficient use of the GPUs, with throughput nearly a constant even when processing a large number of control volumes.

42 ENGINEERING↗

Urban Air Mobility Airspace Dynamic Density

Effective flight planning requires information about a variety of potential threats, such as adverse weather or airspace restrictions, and about alternatives available if unforeseen events occur. Expected traffic along the route of flight is also essential to a safe outcome so that, for example, adequate fuel/energy supply can be loaded prior to flight. A dynamic density (DD) metric is introduced for the emerging urban air mobility (UAM) concept to predict airspace congestion that may lead to loss of separation between aircraft or less efficient operations. Using inspiration from dynamic density metric research for traditional air traffic management and a two-way highway analogy, we develop a dynamic density metric for a portion of airspace (aUAM corridor) that aggregates the impact from five factors: aircraft density, density of populous clusters, mean number of aircraft in populous clusters, mean distance between aircraft, and minimum distance between aircraft. This works describes our methodology, rationale, use cases, and visualization techniques to efficiently present the DD metric to an operator for informed decision making. We also present an approach for validating the metric. However, validation remains part of future work.

UAM↗

Data for Autonomous Transportation Awareness: Data Exchange Use Cases, Standards, and Barriers

This report examines the critical data exchanges between automated vehicle (AV) service providers and the cities and municipalities they serve. It assists municipal authorities in navigating the often complex and real-time digital data exchanges needed to support AV mobility services, with emphasis in three areas: (1) critical safety data for broad-area situational awareness of hazards typically associated emergency dispatch or roadway work zones; (2) performance metrics of AV services that inform the quantity, quality, spatial extents, and impact on the roadway network; and (3) regulatory and policy information, particularly dynamic information that governs how AV services interact with the roadway network, with emphasis on curb space. The report reviews existing practices and emerging protocols and standards and identifies key gaps to address moving forward.

33 ADVANCED PROPULSION SYSTEMS↗

Assessing shellfish water exposure to fecal bacteria pollution in Salish Sea: three-dimensional modeling and implications for monitoring

Fecal bacteria (FB) contamination poses significant risks to shellfish safety and management in coastal and estuarine waters. Despite extensive pollution identification and correction efforts, FB contamination in shellfish-growing areas persists in the Salish Sea, highlighting the need to identify overlooked sources and better understand FB transport from riverine and shoreline inputs to shellfish beds. To address this, a high-resolution three-dimensional hydrodynamic model coupled with FB kinetics was developed and applied to a case study site in Salish Sea—Portage Bay—to simulate freshwater plume circulation, flushing dynamics, and bacterial transport. Daily FB loading from the major freshwater inflow—Nooksack River was generated by both linear interpolation and integrating a machine learning approach (XGBoost), trained on historical hydrological and meteorological data. The model successfully reproduced both the magnitude and seasonal variation of FB concentrations in Portage Bay for the year of 2021, demonstrating that simplified FB kinetics with first-order decay due to mortality was effective in this dynamic coastal environment with short flushing time. Model results identified the Nooksack River as the dominant far-field FB source, while scenario simulations showed that near-field coastal stormwater outfalls elevated local FB levels following rainfall, particularly under low-flow conditions. The XGBoost prediction provided comparable or superior accuracy to linear interpolation, particularly during periods of missing observational data, by capturing short-term variability and event-driven loading more effectively. Integrating data-driven riverine FB inputs with mechanistic coastal numerical modeling provides a robust framework for operational forecasting of shellfish bed exposure risk and supports adaptive monitoring and management of shellfish growing areas in the Salish Sea and similar coastal systems.

Salish Sea↗

Distributionally Safe Path Planning: Wasserstein Safe RRT

In this paper, we propose a Wasserstein metric-based random path planning algorithm. Wasserstein Safe RRT (W-Safe RRT) provides finite-sample probabilistic guarantees on the safety of a returned path in an uncertain obstacle environment. Vehicle and obstacle states are modeled as distributions based upon state and model observations. Additionally, we define limits on distributional sampling error so the Wasserstein distance between a vehicle state distribution and obstacle distributions can be bounded. This enables the algorithm to return safe paths with a confidence bound through combining finite sampling error bounds with calculations of the Wasserstein distance between discrete distributions. W-Safe RRT is compared against a baseline minimum encompassing ball algorithm, which ensures balls that minimally encompass discrete state and obstacle distributions do not overlap. The improved performance is verified in a 3D environment using single, multi, and rotating non-convex obstacle cases, with and without forced obstacle error in adversarial directions, showing that W-Safe RRT can handle poorly modeled complex environments.

42 ENGINEERING↗

RSRM TP-H1148 Main Grain Propellant Crack Initiation Evaluation

Pressurized TP-HI 148 propellant fracture toughness testing was performed to assess the potential for initiation of visually undetectable cracks in the RSRM forward segment transition region during motor ignition. Two separate test specimens were used in this evaluation. Testing was performed in cold-gas and hot-fire environments, and under both static and dynamic pressurization conditions. Analysis of test results demonstrates safety factors against initiation of visually undetectable cracks in excess of 8.0. The Reusable Solid Rocket Motor (RSRM) forward segment is cast with PBAN propellant (TP-HI 148) to form T an 1 1-point star configuration that transitions to a tapered center perforated bore (see Figure 1). The geometry of the transition region between the fin valleys and the bore causes a localized area of high strain during horizontal storage. Updated analyses using worst-case mechanical properties at 40 F and improved modeling techniques indicated a slight reduction in safety margins over previous predictions. Although there is no history of strain induced cracks or flaws in the transition region propellant, a proactive test effort was initiated to better understand the implications of the new analysis, primarily the resistance of TP-H1148 propellant to crack initiation' during RSRM ignition.

Earnest, Todd E.↗

Thermal and electric multidomain dynamic model for integration of power grid distribution with behind-the-meter devices

As renewable energy sources like solar and wind power become more integrated into the grid, coordinated control of behind-the-meter devices is crucial for enhancing grid flexibility and reliability and for meeting cost targets, with standardized models being developed to support this transition. The increasing flexibility and uncertainty of integrated renewable energy grids, along with interactions between various subsystems, make traditional steady-state modeling insufficient to capture transient and dynamic behaviors. Current models (e.g., composite load and battery equivalent models) focus on thermodynamic or electrical characteristics but overlook critical electromechanical interactions. This limits the ability to share performance information for grid services and hampers fast dynamic simulations. In addition, motor stalling is usually triggered by a fault event and attributed to the characteristics of the mechanical torque of the motor, resulting in absorption of a large amount of reactive power during the stalling period. Further, this significant withdrawal of reactive power will deteriorate the dynamic voltage stability of power grids and cause delayed voltage recovery. Therefore, an in-depth modeling of the thermodynamics or mechanical torque is essential to study the impacts of the realistic torque characteristics of those behind-the-meter devices on power system voltage stability. This study developed a dynamic multidomain model for building HVAC systems, such as air-source heat pumps, to simulate their thermal and electrical responses to grid transients. The model can accurately predict power metrics with a mean absolute percentage error of 10%, by validating against with power system computer-aided design performance data. Case studies demonstrate the model capability of capturing the transient response to sudden voltage changes, rapid load fluctuations, and system shutdowns respectively. During a sudden voltage drop (30% for 0.1s), a fully loaded heat pump’s motor speed dropped, continued declining, and shut down after 3.6s, with severe power oscillations and a torque spike. A partially loaded unit experienced temporary oscillations but stabilized. Under higher building loads, compressor speed increased from 64% to 100%, with power and torque rising before stabilizing. In safety-triggered shutdowns, power decreased after minor fluctuations, and torque briefly spiked before dropping to zero.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Vision and Roadmap for Increasing User Autonomy in Flight Operations in the National Airspace

The purpose of Air Transportation is to move people and cargo safely, efficiently and swiftly to their destinations. The companies and individuals who use aircraft for this purpose, the airspace users, desire to operate their aircraft according to a dynamically optimized business trajectory for their specific mission and operational business model. In current operations, the dynamic optimization of business trajectories is limited by constraints built into operations in the National Airspace System (NAS) for reasons of safety and operational needs of the air navigation service providers. NASA has been developing and testing means to overcome many of these constraints and permit operations to be conducted closer to the airspace user's changing business trajectory as conditions unfold before and during the flight. A roadmap of logical steps progressing toward increased user autonomy is proposed, beginning with NASA's Traffic Aware Strategic Aircrew Requests (TASAR) concept that enables flight crews to make informed, deconflicted flight-optimization requests to air traffic control. These steps include the use of data communications for route change requests and approvals, integration with time-based arrival flow management processes under development by the Federal Aviation Administration (FAA), increased user authority for defining and modifying downstream, strategic portions of the trajectory, and ultimately application of self-separation. This progression takes advantage of existing FAA NextGen programs and RTCA standards development, and it is designed to minimize the number of hardware upgrades required of airspace users to take advantage of these advanced capabilities to achieve dynamically optimized business trajectories in NAS operations. The roadmap is designed to provide operational benefits to first adopters so that investment decisions do not depend upon a large segment of the user community becoming equipped before benefits can be realized. The issues of equipment certification and operational approval of new procedures are addressed in a way that minimizes their impact on the transition by deferring a change in the assignment of separation responsibility until a large body of operational data is available to support the safety case for this change in the last roadmap step.This paper will relate the roadmap steps to ongoing activities to clarify the economics-based transition to these technologies for operational use.

Cotton, William B.↗

Real-Time Risk Assessment Framework for Unmanned Aircraft System (UAS) Traffic Management (UTM)

The new Federal Aviation Administration (FAA) Small Unmanned Aircraft rule (Part 107) marks the first national regulations for commercial operation of small unmanned aircraft systems (sUAS) under 55 pounds within the National Airspace System (NAS). Although sUAS flights may not be performed beyond visual line-of-sight or over non- participant structures and people, safety of sUAS operations must still be maintained and tracked at all times. Moreover, future safety-critical operation of sUAS (e.g., for package delivery) are already being conceived and tested. NASA's Unmanned Aircraft System Trac Management (UTM) concept aims to facilitate the safe use of low-altitude airspace for sUAS operations. This paper introduces the UTM Risk Assessment Framework (URAF) which was developed to provide real-time safety evaluation and tracking capability within the UTM concept. The URAF uses Bayesian Belief Networks (BBNs) to propagate off -nominal condition probabilities based on real-time component failure indicators. This information is then used to assess the risk to people on the ground by calculating the potential impact area and the effects of the impact. The visual representation of the expected area of impact and the nominal risk level can assist operators and controllers with dynamic trajectory planning and execution. The URAF was applied to a case study to illustrate the concept.

Ancel, Ersin↗

Are We There Yet? Determining the Adequacy of Formalized Requirements and Test Suites

Structural coverage metrics have traditionally categorized code as either covered or uncovered. Recent work presents a stronger notion of coverage, checked coverage, which counts only statements whose execution contributes to an outcome checked by an oracle. While this notion of coverage addresses the adequacy of the oracle, for Model-Based Development of safety critical systems, it is still not enough; we are also interested in how much of the oracle is covered, and whether the values of program variables are masked when the oracle is evaluated. Such information can help system engineers identify missing requirements as well as missing test cases. In this work, we add to the idea of checked coverage an analysis of requirements coverage to help provide insight to engineers as to whether the requirements or the test suite need to be improved. We implement our approach based on a dynamic backward slicing technique and evaluate it on several systems developed in Simulink. The results of our preliminary study show that even for systems with comprehensive test suites and good sets of requirements, our approach can identify cases where more tests or more requirements are needed to improve coverage numbers.

Dynamic Slicing↗

An Approach for Uncertainty Quantification and Management of Unmanned Aerial Vehicle Health

The increasing interest in low-altitude unmanned aerial vehicle (UAV) operations is bringing along safety concerns. Performance of small, low-cost UAVs drastically changes with type, size and controller of the vehicle. Their reliability is lower when compared to reliability of commercial aircrafts, and the availability of on-board sensors for health and state awareness is extremely limited due to their size and propulsion capabilities. Uncertainty plays a dominant role in such a scenario, where a variety of UAVs of different size, propulsion systems, dynamic performance and reliability enters the low-altitude airspace. Unexpected failures could have dangerous consequences for both equipment and humans within that same airspace. As a result, a number of research works and methodologies are being proposed in the area of UAV dynamic modeling, health and safety monitoring, but uncertainty quantification is rarely addressed. Thus, this paper pro- poses a perspective towards uncertainty quantification for autonomous systems, giving special emphasis to a UAV health monitoring application. A formal approach to classify uncertainty is presented; it is utilized to identify the uncertainty sources in UAVs health and operations, and then map uncertainty within a predictive process. To show the application of the methodology proposed here, the design of a model-based powertrain health monitoring algorithm for small-size UAVs is used as case study. The example illustrates how the uncertainty quantification approach can help the modeling strategy, as well as the assessment of diagnostic and prognostic performance.

Health Monitoring↗

Perform Design Support with MCNP for New Measurements

This report incorporates our work carried out during our 5-month internship at LANL under an internship agreement with EAMEA (École des Applications Militaires de l’Énergie Atomique). After outlining the context in which we worked, we present our work as aid to modeling and predicting the neutronic behavior of nuclear systems, with a view to carrying out criticality experiments qualifying the MCNP code as part of innovative projects. Fourth generation reactors will enable to tackle a lot of issues such as environmental crisis, affordable energy access, and nuclear waste management. They seem to be one of the keys for a sustainable future. Most of the projects that emerge nowadays include the use of HALEU (high assay low enriched uranium) or MOX recycled fuels. Our projects are part of this dynamic and addresses concrete scientific research issues in the nuclear field. Studies of HALEU package are essential to anticipate the need, therefore the Optimus L (OPTImal Modular Universal Shipping cask technology) designed by NAC (Nuclear Assurance Corporation) international but filled with 20 % enriched uranium dioxide (UO 2 ) will be studied to support safe transportation. However, it seems there is no benchmark with a high correlation with the combination of this fuel and this package to validate MCNP simulations. As such, the study will focus on the development of new criticality safety benchmarks for this case. On the other hand, there is a great need for critical benchmarks in the intermediate energy range with MOX fuel. An IER (Integral Experiment Request) has then be requested to answer it through a partnership between French institution IRSN and U.S. Department of Energy's Nuclear Criticality Safety Program (NCSP). This experience planned for 2025 requires to gather calculated data through a MCNP model to be realized safely. Finally, a presentation of our one-week experience at the DAF as part of our discovery of criticality experiments will be introduced in Appendix 1: Week at the DAF (Device Assembly Facility)

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Variability of MHD instabilities in benign termination of high-current runaway electron beams in the JET and DIII-D tokamaks

Benign termination, in which magnetohydrodynamic (MHD) instabilities deconfine runaway electrons (REs) following hydrogenic injections, is a promising strategy for mitigating dangerous RE loads after disruptions. Recent experiments on the Joint European Torus (JET) have explored this scenario at higher pre-disruptive plasma currents than are achievable on other devices, revealing challenges in obtaining benign terminations at I p ≥2.5 MA. This work analyzes the evolution of these high-current RE beams and their terminating MHD events using fast magnetic sensor measurements and EFIT equilibrium reconstructions for approximately 40 JET and 20 DIII-D tokamak discharges. On JET, unsuccessful non-benign terminations occur at low edge safety factor (q edge ≈ 2), and are preceded by intermittent, non-terminating MHD events at higher rational qedge. Trends in the internal inductance I i indicate more peaked RE current profiles in the high-I p non-benign population, which may hinder successful recombination through re-ionization of the companion plasma. In contrast, benign terminations on JET typically occur at higher q edge ≥3 and exhibit less peaked RE current profiles. DIII-D displays a broader range of terminating edge safety factors, again correlated with the measured values. Across both tokamaks, the RE current peaking is therefore found to determine which MHD instability boundary is encountered, a result confirmed by linear resistive MHD modeling with the CASTOR3D code. Measured growth rates are similar for benign and non-benign cases, indicating that ideal MHD timescales at low density after hydrogenic injection do not alone explain efficient RE deconfinement. Instead, non-benign cases are most readily characterized by their comparably lower overall MHD perturbation amplitudes δB. These observations suggest that the interplay between ideal and resistive dynamics governs the termination process, with implications for extrapolating benign RE termination to high-I p reactor scenarios.

MHD instabilities↗

The Case for Distributed Engine Control in Turbo-Shaft Engine Systems

The turbo-shaft engine is an important propulsion system used to power vehicles on land, sea, and in the air. As the power plant for many high performance helicopters, the characteristics of the engine and control are critical to proper vehicle operation as well as being the main determinant to overall vehicle performance. When applied to vertical flight, important distinctions exist in the turbo-shaft engine control system due to the high degree of dynamic coupling between the engine and airframe and the affect on vehicle handling characteristics. In this study, the impact of engine control system architecture is explored relative to engine performance, weight, reliability, safety, and overall cost. Comparison of the impact of architecture on these metrics is investigated as the control system is modified from a legacy centralized structure to a more distributed configuration. A composite strawman system which is typical of turbo-shaft engines in the 1000 to 2000 hp class is described and used for comparison. The overall benefits of these changes to control system architecture are assessed. The availability of supporting technologies to achieve this evolution is also discussed.

Culley, Dennis E.↗

Modeling Programs Increase Aircraft Design Safety

Flutter may sound like a benign word when associated with a flag in a breeze, a butterfly, or seaweed in an ocean current. When used in the context of aerodynamics, however, it describes a highly dangerous, potentially deadly condition. Consider the case of the Lockheed L-188 Electra Turboprop, an airliner that first took to the skies in 1957. Two years later, an Electra plummeted to the ground en route from Houston to Dallas. Within another year, a second Electra crashed. In both cases, all crew and passengers died. Lockheed engineers were at a loss as to why the planes wings were tearing off in midair. For an answer, the company turned to NASA s Transonic Dynamics Tunnel (TDT) at Langley Research Center. At the time, the newly renovated wind tunnel offered engineers the capability of testing aeroelastic qualities in aircraft flying at transonic speeds near or just below the speed of sound. (Aeroelasticity is the interaction between aerodynamic forces and the structural dynamics of an aircraft or other structure.) Through round-the-clock testing in the TDT, NASA and industry researchers discovered the cause: flutter. Flutter occurs when aerodynamic forces acting on a wing cause it to vibrate. As the aircraft moves faster, certain conditions can cause that vibration to multiply and feed off itself, building to greater amplitudes until the flutter causes severe damage or even the destruction of the aircraft. Flutter can impact other structures as well. Famous film footage of the Tacoma Narrows Bridge in Washington in 1940 shows the main span of the bridge collapsing after strong winds generated powerful flutter forces. In the Electra s case, faulty engine mounts allowed a type of flutter known as whirl flutter, generated by the spinning propellers, to transfer to the wings, causing them to vibrate violently enough to tear off. Thanks to the NASA testing, Lockheed was able to correct the Electra s design flaws that led to the flutter conditions and return the aircraft to safe flight. Today, all aircraft must have a flutter boundary 15 percent beyond the aircraft s expected maximum speed to ensure that flutter conditions are not encountered in flight. NASA continues to support research in new aircraft designs to improve knowledge of aeroelasticity and flutter. Through platforms such as Dryden Flight Research Center s Active Aeroelastic Wing (AAW) research aircraft, the Agency researches methods for in-flight validation of predictions and for controlling and taking advantage of aeroelastic conditions to enhance aircraft performance.

Source record↗

Radiation induced non-linear oscillations in ITER baseline scenario plasmas in DIII-D

Abstract This work shows how the radiation brought about by metals or metal-equivalent radiators such as Kr and Xe produces non-linear dynamics on otherwise stationary β N flattops of DIII-D ITER Baseline Scenario demonstration discharges. The Kr and Xe gases are used to reproduce the radiative loss rates of W in present machines that operate at core temperatures much lower than the expected ITER temperature. Experiments on DIII-D with injection of Kr and Xe, as well as with sources of intrinsic metals reach the range of radiated fraction values expected in the ITER core and experience slow oscillations in temperature and radiated power. In many cases of high radiated fraction, the core temperature decreases enough for the safety factor profile to rise above the 1/1 rational surface, naturally eliminating sawteeth and occasionally producing a persistent helical core. The oscillations can be reproduced by a modified Lotka–Volterra system for temperature and radiated fraction if diffusion and noise are included, which indicates that the interplay between temperature and radiation can be the main cause of the cyclic nature of the system. A new physics based model which includes equations for temperature, density and input power can also reproduce the oscillations observed in the experiments. The present results suggest that the non-linearity of the system can be increased by the inclusion of the inherently non-linear alpha heating term, which is proportional to ∼ n e 2 T i 2 , and obtains oscillations in the model when added to an otherwise more stationary system.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Simulated Impact of Shortened Strings in Commercial and Utility-Scale Photovoltaic Arrays

The deliberate removal of photovoltaic modules from a string can occur for various reasons encompassing maintenance, measurements, theft, or failure, reducing that string length relative to others when replacement modules are not available and there are not any viable alternative makes and models that could be inserted. This phenomenon, delineated in our prior experimentally validated research, manifests two significant effects: (1) a shift in the ideal maximum power point and (2) the induction of potentially substantial reverse currents in the shortened strings at open-circuit voltage, VOC. However, the scalability and asymptotic limits of these observed behaviors concerning array size remained undetermined. In this study, we elucidate the operational dynamics of such arrays by manipulating two mismatch-contributing variables in simulated arrays of up to 900 strings: the number of removed modules per string (indicative of the level of mismatch, ranging up to 5) and the quantity of shortened strings (1 to 60). Simulation outcomes underscore that mismatch severity impacts array operation more than the proportion of shortened strings. This research delves into the practical ramifications of operating with shortened strings, including implications for low-irradiance operation and the manifestation of deleterious reverse currents (>35 A in specific cases), emphasizing the need for careful array configuration for optimal performance and safety in these implementations.

Energy & Fuels↗