Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40
All sourcesNASA NTRSDOE OSTI
NASA NTRS1980

Cockpit displayed traffic information and distributed management in air traffic control

A graphical display of information (such as surrounding aircraft and navigation routes) in the cockpit on a cathode ray tube has been proposed for improving the safety, orderliness, and expeditiousness of the air traffic control system. An investigation of this method at NASA-Ames indicated a large reduction in controller verbal work load without increasing pilot verbal load; the visual work may be increased. The cockpit displayed traffic and navigation information system reduced response delays permitting pilots to maintain their spacing more closely and precisely than when depending entirely on controller-issued radar vectors and speed command.

Kreifeldt, J. G.↗
NASA NTRS1993

Achievements and challenges of Space Station Freedom's safety review process

The most complex space vehicle in history, Space Station Freedom, is well underway to completion, and System Safety is a vital part of the program. The purpose is to summarize and illustrate the progress that over one-hundred System Safety engineers have made in identifying, documenting, and controlling the hazards inherent in the space station. To date, Space Station Freedom has been reviewed by NASA's safety panels through the first six assembly flights, when Freedom achieves a configuration known as Man Tended Capability. During the eight weeks of safety reviews spread out over a year and a half, over 200 preliminary hazard reports were presented. Along the way NASA and its contractors faced many challenges, made much progress, and even learned a few lessons.

Robinson, David W.↗
NASA NTRS2014

Flammability Configuration Analysis for Spacecraft Applications

Fire is one of the many potentially catastrophic hazards associated with the operation of crewed spacecraft. A major lesson learned by NASA from the Apollo 204 fire in 1966 was that ignition sources in an electrically powered vehicle should and can be minimized, but can never be eliminated completely. For this reason, spacecraft fire control is based on minimizing potential ignition sources and eliminating materials that can propagate fire. Fire extinguishers are always provided on crewed spacecraft, but are not considered as part of the fire control process. "Eliminating materials that can propagate fire" does not mean eliminating all flammable materials - the cost of designing and building spacecraft using only nonflammable materials is extraordinary and unnecessary. It means controlling the quantity and configuration of such materials to eliminate potential fire propagation paths and thus ensure that any fire would be small, localized, and isolated, and would self-extinguish without harm to the crew. Over the years, NASA has developed many solutions for controlling the configuration of flammable materials (and potentially flammable materials in commercial "off-the-shelf" hardware) so that they can be used safely in air and oxygen-enriched environments in crewed spacecraft. This document describes and explains these design solutions so payload customers and other organizations can use them in designing safe and cost-effective flight hardware. Proper application of these guidelines will produce acceptable flammability configurations for hardware located in any compartment of the International Space Station or other program crewed vehicles and habitats. However, use of these guidelines does not exempt hardware organizations of the responsibility for safety of the hardware under their control.

Pedley, Michael D.↗
NASA NTRS1990

The application of intelligent process control to space based systems

The application of Artificial Intelligence to electronic and process control can help attain the autonomy and safety requirements of manned space systems. An overview of documented applications within various industries is presented. The development process is discussed along with associated issues for implementing an intelligence process control system.

Wakefield, G. Steve↗
DOE OSTI2020

Project 57 Air Monitoring Report: (Jan 1 - Dec 31 2018)

During the late 1950s, the Atomic Energy Commission (AEC) (now the U.S. Department of Energy [DOE]) conducted a series of safety experiments to determine if a nuclear device subjected to a large conventional explosives detonation would result in a nuclear yield. The AEC obtained temporary use of a large portion of western Emigrant Valley from the U.S. Department of Defense (DOD) for one of these experiments: Project 57. Following the Project 57 safety experiment, the AEC fenced the contaminated area and returned control of the surrounding land to the DOD. Emigrant Valley is part of the Nevada Test and Training Range (NTTR). For safety and security reasons, access to the NTTR is controlled using both physical (i.e., fences) and administrative (e.g., signs and postings) controls. Therefore, the public cannot access the Project 57 site and there are no known human receptors that routinely access the site. Project 57 was detonated on April 24, 1957, in Emigrant Valley approximately 13 mi (21 km) northeast of the north end of Yucca Flat. This test was undertaken to develop: (1) a means of estimating immediate distribution and long-term redistribution of plutonium dispersed during a nonnuclear detonation; (2) biomedical evaluation techniques for use in likely plutonium-laden environments; (3) methods of decontaminating ground areas, pavements, and building materials; and (4) alpha survey instruments and field monitoring procedures to promptly estimate contaminant deposition. Although the test did not result in the fission of nuclear materials, it did disseminate plutonium across the ground surface. Various radiological surveys have been performed in the area since Project 57 was conducted. The AEC delineated the area containing radioactive material based on radioactivity surveys performed shortly after the test was conducted. A designated Contamination Area (CA), marked by a fence, was established later. The distribution of americium-241 (Am-241) in the area was determined again in a 1997 flyover, which showed Am-241 ranging from as much as 70,000 counts per second (cps) at ground zero to background (<70 cps). This survey also documented Am-241 radioactivity on the ground surface beyond the east side CA fence at levels of up to 150 cps. In 2007, the DOE expanded the CA by posting “Contamination Area” signs 200 ft to 400 ft (60 m to 120 m) beyond the original fence, which formed a new CA boundary.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

REGULATORY REQUIREMENTS, GUIDANCE, AND REVIEW OF EMBEDDED DIGITAL DEVICES IN SAFETY SYSTEMS

Interest in embedded digital devices (EDDs) for monitoring and providing control of components is increasing in the nuclear power market as more and more users both within and outside the nuclear sector are employing EDDs. EDDs in other industries or countries may be known by the related terms as smart devices, devices of limited functionality, or intelligent devices. EDDs can sometimes perform a safety role when embedded in components such as temperature transmitters, pressure transmitters, voltage regulators, gas analyzers, boiler controllers, relays, and radiation monitors. The introduction of EDDs can affect safety by creating new hazards, vulnerabilities, failure modes, triggering mechanisms, and other potential safety concerns at both the component and system levels. The U.S. Nuclear Regulatory Commission’s (NRC’s) existing regulations and guidance cover the use of EDDs in safety-related and important to safety systems in nuclear power plants (NPPs). In addition to potential future challenges, the nature of EDDs being implemented in similar or identical manners between different plants and industries opens up the potential of leveraging the reviews of other regulators or utilization of industry certifications.Key words: embedded digital device, firmware

Halverson, D. S.↗
NASA NTRS2014

Preliminary Assessment of Optimal Longitudinal-Mode Control for Drag Reduction through Distributed Aeroelastic Shaping

The emergence of advanced lightweight materials is resulting in a new generation of lighter, flexible, more-efficient airframes that are enabling concepts for active aeroelastic wing-shape control to achieve greater flight efficiency and increased safety margins. These elastically shaped aircraft concepts require non-traditional methods for large-scale multi-objective flight control that simultaneously seek to gain aerodynamic efficiency in terms of drag reduction while performing traditional command-tracking tasks as part of a complete guidance and navigation solution. This paper presents results from a preliminary study of a notional multi-objective control law for an aeroelastic flexible-wing aircraft controlled through distributed continuous leading and trailing edge control surface actuators. This preliminary study develops and analyzes a multi-objective control law derived from optimal linear quadratic methods on a longitudinal vehicle dynamics model with coupled aeroelastic dynamics. The controller tracks commanded attack-angle while minimizing drag and controlling wing twist and bend. This paper presents an overview of the elastic aircraft concept, outlines the coupled vehicle model, presents the preliminary control law formulation and implementation, presents results from simulation, provides analysis, and concludes by identifying possible future areas for research

aeroelastic↗
DOE OSTI2023

A Human-Machine Shared Control Framework Considering Time-Varying Driver Characteristics

The uncertainties of driver's behavior seriously affect road safety and bring significant challenges to the human-machine cooperative control. Here, this paper proposes a human-machine shared control framework considering driver's time-varying characteristics to improve the co-driving cooperation performance. Firstly, the driving intention is introduced to describe the driver's involvement level through using Gauss-Bernoulli restricted Boltzmann machine method. And the index of driving ability is proposed to evaluate driver skills based on path-tracking errors. Then, a novel human-machine authority allocation strategy is designed by combining the two driving behavior characteristics and used to construct the driver-vehicle interaction system. Subsequently, a T-S fuzzy robust state-feedback shared control system is developed considering time-varying driver behaviors and vehicle states. Finally, the proposed shared steering system is validated by the driver-in-the-loop test bench. The results show that the proposed control method can reduce human-machine conflicts and has obvious superiority in improving performance of driving comfort, path tracking, and vehicle stability for the co-driving vehicles.

33 ADVANCED PROPULSION SYSTEMS↗
NASA NTRS1982

A system safety model for developmental aircraft programs

Basic tenets of safety as applied to developmental aircraft programs are presented. The integration of safety into the project management aspects of planning, organizing, directing and controlling is illustrated by examples. The basis for project management use of safety and the relationship of these management functions to 'real-world' situations is presented. The rationale which led to the safety-related project decision and the lessons learned as they may apply to future projects are presented.

Amberboy, E. J.↗
DOE OSTI2024

"Reinforcement Learning Based Oscillation Dampening: Scaling up Single-Agent RL algorithms to a 100 AV highway field operational test"

In this article, we explore the technical details of the reinforcement learning (RL) algorithms that were deployed in the largest field test of automated vehicles designed to smooth traffic flow in history as of 2023, uncovering the challenges and breakthroughs that come with developing RL controllers for automated vehicles. We delve into the fundamental concepts behind RL algorithms and their application in the context of self-driving cars, discussing the developmental process from simulation to deployment in detail, from designing simulators to reward function shaping. We present the results in both simulation and deployment, discussing the flow-smoothing benefits of the RL controller. From understanding the basics of Markov decision processes to exploring advanced techniques such as deep RL, our article offers a comprehensive overview and deep dive of the theoretical foundations and practical implementations driving this rapidly evolving field. We also showcase real-world case studies and alternative research projects that highlight the impact of RL controllers in revolutionizing autonomous driving. From tackling complex urban environments to dealing with unpredictable traffic scenarios, these intelligent controllers are pushing the boundaries of what automated vehicles can achieve. Furthermore, we examine the safety considerations and hardware-focused technical details surrounding deployment of RL controllers into automated vehicles. As these algorithms learn and evolve through interactions with the environment, ensuring their behavior aligns with safety standards becomes crucial. We explore the methodologies and frameworks being developed to address these challenges, emphasizing the importance of building reliable control systems for automated vehicles.

Jang, Kathy↗
NASA NTRS2018

ADS-B Mixed sUAS and NAS System Capacity Analysis and DAA Performance

Automatic Dependent Surveillance-Broadcast (ADS-B) technology was introduced more than twenty years ago to improve surveillance within the US National Airspace Space (NAS) as well as in many other countries. Via the NextGen initiative, implementation of ADS-B technology across the US is planned in stages between 2012 and 2025. ADS-B's automatic one second epoch packet transmission exploits on-board GPS-derived navigational information to provide position information, as well as other information including vehicle identification, ground speed, vertical rate and track angle. The purpose of this technology is to improve surveillance data accuracy and provide access to better situational awareness to enable operational benefits such as shorter routes, reduced flight time and fuel burn, and reduced traffic delays, and to allow air traffic controllers to manage aircraft with greater safety margins. Other than the limited amount of information bits per packet that can be sent, ADS-B's other hard-limit limitation is capacity. Small unmanned aircraft systems (sUAS) can utilize limited ADS-B transmission power, in general, thus allowing this technology to be considered for use within a combined NAS and sUAS environment, but the potential number and density of sUAS predicted for future deployment calls into question the ability of ADS-B systems to meet the resulting capacity requirement. Hence, studies to understand potential limitations of ADS-B to fulfill capacity requirements in various sUAS scenarios are of great interest. In this paper we, validate/improve on, previous work performed by the MITRE Corporation concerning sUAS power and capacity in a sUAS and General Aviation (GA) mixed environment. In addition, we implement its inherent media access control layer capacity limitations which was not shown in the MITRE paper. Finally, a simple detect and avoid (DAA) algorithm is implemented to display that ADS-B technology is a viable technology for a mixed NAS/sUAS environment even in proposed larger mixed density environments.

Matheou, Konstantin J.↗
NASA NTRS2018

ADS-B Mixed sUAS and NAS System Capacity Analysis and DAA Performance

Automatic Dependent Surveillance-Broadcast (ADS-B) technology was introduced more than twenty years ago to improve surveillance within the US National Airspace Space (NAS) as well as in many other countries. Via the NextGen initiative, implementation of ADS-B technology across the US is planned in stages between 2012 and 2025. ADS-B's automatic one second epoch packet transmission exploits on-board GPS-derived navigational information to provide position information, as well as other information including vehicle identification, ground speed, vertical rate and track angle. The purpose of this technology is to improve surveillance data accuracy and provide access to better situational awareness to enable operational benefits such as shorter routes, reduced flight time and fuel burn, and reduced traffic delays, and to allow air traffic controllers to manage aircraft with greater safety margins. Other than the limited amount of information bits per packet that can be sent, ADS-B's other hard-limit limitation is capacity. Small unmanned aircraft systems (sUAS) can utilize limited ADS-B transmission power, in general, thus allowing this technology to be considered for use within a combined NAS and sUAS environment, but the potential number and density of sUAS predicted for future deployment calls into question the ability of ADS-B systems to meet the resulting capacity requirement. Hence, studies to understand potential limitations of ADS-B to fulfill capacity requirements in various sUAS scenarios are of great interest. In this paper we, validate/improve on, previous work performed by the MITRE Corporation concerning sUAS power and capacity in a sUAS and General Aviation (GA) mixed environment. In addition, we implement its inherent media access control layer capacity limitations which was not shown in the MITRE paper. Finally, a simple detect and avoid (DAA) algorithm is implemented to display that ADS-B technology is a viable technology for a mixed NAS/sUAS environment even in proposed larger mixed density environments.

Matheou, Konstantin↗
DOE OSTI2024

Root Cause Correlation Analysis of Software Failures via Orthogonal Defect Classification and Natural Language Processing

Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Root Cause Correlation Analysis of Software Failures via Orthogonal Defect Classification and Natural Language Processing

Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1980

Fault-tolerant system optimization

The paper describes the decisions to be made in the design of fault-tolerant systems and provides details of a comprehensive model developed to cost optimize such systems. Economical use of replication is making fault-tolerant systems possible and more applications for safety crucial systems such as active flight controls can be expected. In turn, the use of massive redundancy, fault-tolerance, and reconfigurable systems in stimulating the development of new analytical tools for establishing the cost and effectiveness of the safety and cost effectiveness of the levels of replication will increase. Closed-form analytical solutions for the reliability and maintainability analysis of fault-tolerant systems are complex, and Monte-Carlo simulation appears to be a more desirable method of establishing the reliability and maintainability of such systems.

Rose, J.↗
NASA NTRS1993

Neurogenic orthostatic hypotension: a double-blind, placebo-controlled study with midodrine

PURPOSE: To investigate the efficacy and safety of midodrine for treatment of patients with orthostatic hypotension due to autonomic failure. PATIENTS: Ninety-seven patients with orthostatic hypotension were randomized in a 4-week, double-blinded, placebo-controlled study with a 1-week placebo run-in period. Patients ranged in age from 22 to 86 years (mean: 61 years). METHODS: After a 1-week run-in phase, either placebo or midodrine at a dose of 2.5 mg, 5 mg, or 10 mg was administered three times a day for 4 weeks. Both the placebo group and the 2.5-mg midodrine group received constant doses throughout the double-blind phase. The patients receiving 5 mg or 10 mg of midodrine were given doses that were increased at weekly intervals by 2.5-mg increments until the designated dose was reached. Efficacy evaluations were based on an improvement at 1-hour postdose in standing systolic blood pressure and in symptoms of orthostatic hypotension (syncope, dizziness/lightheadedness, weakness/fatigue, and low energy level). RESULTS: Midodrine (10 mg) increased standing systolic blood pressure by 22 mm Hg (28%, p < 0.001 versus placebo). Midodrine improved (p < 0.05) the following symptoms of orthostatic hypotension compared to placebo: dizziness/lightheadedness, weakness/fatigue, syncope, low energy level, impaired ability to stand, and feelings of depression. The overall side effects were mainly mild to moderate. One or more side effects were reported by 22% of the placebo group compared with 27% of the midodrine-treated group. Scalp pruritus/tingling, which was reported by 10 of 74 (13.5%) of the midodrine-treated patients, was most frequent. Other reported side effects included supine hypertension (8%) and feelings of urinary urgency (4%). CONCLUSION: We conclude that midodrine is an effective and well-tolerated treatment for moderate-to-severe orthostatic hypotension associated with autonomic failure.

NASA Discipline Number 14-10↗
DOE OSTI2025

Digital Safety Analysis for Small Modular Nuclear Reactors (SMRs)

A Documented Safety Analysis (DSA) is a Department of Energy (DOE) construct that defines the extent to which a nuclear facility can be operated safely. It includes a description of hazards, safe boundaries, and hazard controls. The authors assert that a Digital Safety Analysis (DgSA) is far superior to a legacy DSA for several reasons: • The underling database is structured such that it is possible to perform a comprehensive design review and safety analysis by iterating systematically across a hierarchy of linked objects versus a redundant and spotty review by entities of various abilities under unknown resource and schedule constraints. • The analysis of a new design can discover elements that are similar to elements in previous designs. The discovery of similarities is made possible by using the same structure for the underlying database for each new DgSA. The “prior learning” from previous designs is then applied automatically to new designs. • Outputs from the DgSA are from a single source to ensure consistency among various views of the same information. After the DgSA is released, the continued use of a single source implements a configuration management program to ensure consistency between the design basis, the design, the built system, and system procedures. • The development of the DgSA is agile in that any change in a linked object triggers an analysis of impacts on other linked objects and updates of linked objects are made accordingly. After the DgSA is released, the continued maintenance of these links and objects automates the “unreviewed safety question” process.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2021

Topical: Recommendations for Fire Extinguisher Research for Crewed Missions

Fire extinguishers are a necessary component of crewed space missions, providing a measure of fire safety beyond material selection and other controls. The elevated oxygen levels and presence of reduced but significant buoyancy during proposed Lunar and Martian missions presents both elevated fire risk and challenges in understanding and designing for extinguisher performance. This white paper proposes experimental and modeling research into the performance of fire extinguishers in Lunar and Martian atmosphere and gravity environments, exploring the use of additives to water extinguishers and research into alternative extinguishing materials, and exploration into the use of Froude number scaling relationships, used in terrestrial water extinguishing research and design, in the Lunar and Martian environment.

Combustion↗