Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40

Adaptive Independent Verification and Validation (IV&V) Reduces Risk of Software Impacting Safety in Artemis Missions

The National Aeronautics and Space Administration (NASA) is asking more of its human spaceflight programs than ever before through the collective Artemis Missions. The NASA Independent Verification and Validation (IV&V) Program contributes to NASA’s human spaceflight goals by providing IV&V services for NASA’s critical spacecraft and ground software. The IV&V Program is tasked with providing assurance from both individual and integrated mission software perspectives. The Artemis IV&V organization is actively supporting six distinct development efforts: Orion, the Space Launch System (SLS), Exploration Ground Systems (EGS), Mission Control Center (MCC), the Lunar Gateway, and the Human Landing System (HLS), representing a wide diversity of developer organizations, management structures, and development approaches. With much of this extremely complex flight and ground software being essential to human safety both on the ground and in space, Artemis IV&V is likewise challenged to provide more value-added assurance to future Artemis missions within a constrained budget. To meet this challenge, Artemis IV&V employs a variety of novel and evolving “Adaptive IV&V” approaches for planning and executing IV&V analysis to increase both the efficiency and effectiveness of the IV&V Program’s assurance activities, and to address the difficulties imposed by assuring software for a large, highly integrated, multi-mission enterprise managed and executed by physically and organizationally distinct programs. Instilling agile principles like iterative planning cycles, self-organizing teams, and regular retrospectives, into IV&V planning and execution has led to a more rapid turnaround of a minimum viable assurance product and allowed for increased alignment of assurance activities with development progress. Adopting an assurance case methodology has led to greater consistency and clearer communication of assurance design and provided a foundation for long-term maintenance of assurance plans, products, and results across missions. The IV&V-developed Assurance / Safety Case Analytical Network (A-SCAN) framework and tool has enabled the quantification and tracking of system/software risk and confidence. These confidence measures provide a means to repeatedly express the impact of planned and completed assurance work and the remaining residual risk. Applied as part of a “Follow-the-Risk” organizational ethos, this allows consistent rightsizing of analysis rigor and intensity commensurate with the perceived risk of defects, as well as appropriate targeting of the highest risk areas of the software to find safety issues before they can manifest. Finally, the development of the IV&V Advanced Risk Reduction Integrated Software Test and Operations Tri-program Lightweight Environment (ARRISTOTLE), an integrated software-only simulation of Orion, SLS, and EGS systems, has made it possible to independently test integrated pad and flight scenarios and inject faults to observe how the Artemis multi-program, mission software behaves in degraded modes and in response to hazards. These adaptive IV&V investments have enabled Artemis IV&V to become more efficient and effective in IV&V planning and execution and respond more readily to changes in the risk landscape, increasing the breadth and depth of risk reduction possible within the available resources. Residual risk tracking allows IV&V to communicate more effectively with stakeholders, both internal and external at all levels, and inform key decision-making personnel. This evolving assurance design approach provides IV&V surety that work is performed in the highest risk, most value-added areas of the software, to keep our astronauts and ground crews safe and ensure mission success.

Gerek A Whitman↗

Adaptive Independent Verification and Validation (IV&V) Reduces Risk of Software Impacting Safety in Artemis Missions

The National Aeronautics and Space Administration (NASA) is asking more of its human spaceflight programs than ever before through the collective Artemis Missions. The NASA Independent Verification and Validation (IV&V) Program contributes to NASA’s human spaceflight goals by providing IV&V services for NASA’s critical spacecraft and ground software. The IV&V Program is tasked with providing assurance from both individual and integrated mission software perspectives. The Artemis IV&V organization is actively supporting six distinct development efforts: Orion, the Space Launch System (SLS), Exploration Ground Systems (EGS), Mission Control Center (MCC), the Lunar Gateway, and the Human Landing System (HLS), representing a wide diversity of developer organizations, management structures, and development approaches. With much of this extremely complex flight and ground software being essential to human safety both on the ground and in space, Artemis IV&V is likewise challenged to provide more value-added assurance to future Artemis missions within a constrained budget. To meet this challenge, Artemis IV&V employs a variety of novel and evolving “Adaptive IV&V” approaches for planning and executing IV&V analysis to increase both the efficiency and effectiveness of the IV&V Program’s assurance activities, and to address the difficulties imposed by assuring software for a large, highly integrated, multi-mission enterprise managed and executed by physically and organizationally distinct programs. Instilling agile principles like iterative planning cycles, self-organizing teams, and regular retrospectives, into IV&V planning and execution has led to a more rapid turnaround of a minimum viable assurance product and allowed for increased alignment of assurance activities with development progress. Adopting an assurance case methodology has led to greater consistency and clearer communication of assurance design and provided a foundation for long-term maintenance of assurance plans, products, and results across missions. The IV&V-developed Assurance / Safety Case Analytical Network (A-SCAN) framework and tool has enabled the quantification and tracking of system/software risk and confidence. These confidence measures provide a means to repeatedly express the impact of planned and completed assurance work and the remaining residual risk. Applied as part of a “Follow-the-Risk” organizational ethos, this allows consistent rightsizing of analysis rigor and intensity commensurate with the perceived risk of defects, as well as appropriate targeting of the highest risk areas of the software to find safety issues before they can manifest. Finally, the development of the IV&V Advanced Risk Reduction Integrated Software Test and Operations Tri-program Lightweight Environment (ARRISTOTLE), an integrated software-only simulation of Orion, SLS, and EGS systems, has made it possible to independently test integrated pad and flight scenarios and inject faults to observe how the Artemis multi-program, mission software behaves in degraded modes and in response to hazards. These adaptive IV&V investments have enabled Artemis IV&V to become more efficient and effective in IV&V planning and execution and respond more readily to changes in the risk landscape, increasing the breadth and depth of risk reduction possible within the available resources. Residual risk tracking allows IV&V to communicate more effectively with stakeholders, both internal and external at all levels, and inform key decision-making personnel. This evolving assurance design approach provides IV&V surety that work is performed in the highest risk, most value-added areas of the software, to keep our astronauts and ground crews safe and ensure mission success.

Gerek Whitman↗

Synthesis and in silico and in vitro evaluation of trimethoxy-benzamides designed as anti-prion derivatives

Transmissible spongiform encephalopathies (TSEs), also known as prion diseases, are neurodegenerative disorders which affect mammals, including the human species, and arise after the conversion of the monomeric cellular prion protein (PrP{sup C}) into the aggregated scrapie form (PrP{sup Sc}). There is no therapy to treat TSEs and the identification of compounds that bind PrP{sup C}, preventing its conversion into PrP{sup Sc}, is a viable therapeutic strategy. We designed and synthesized six novel trimethoxy-benzamide compounds as anti-prion drug candidates. Molecular docking analyses predicted that all the derivatives bind to a hotspot region located in the PrP globular domain with very similar spatial orientation and interaction mode. Although none of the analogs inhibited in vitro-aggregation of recombinant PrP (rPrP) in a cell-free conversion assay, the RT-QuIC, compound 8a accelerated rPrP conversion into PrP{sup Sc}-like species. STD-NMR and ITC analyses indicated that both 8a and 8b bind to rPrP{sup 90–231}. These analogs were toxic to PrP{sup Sc}-infected cell lines, hence we could not assess their anti-prion activity by using this cellular approach, although this toxicity was cell line-dependent. These results point out that the 4-amino-quinoline trimethoxy-benzamide scaffold described herein represents a novel chemical pattern useful as a starting point for future structural optimization in the design of PrP ligands with improved affinity and safety profiles.

60 APPLIED LIFE SCIENCES↗

An Approach for Assessing Consequences of Potential Supply Chain and Insider Contributed Cyber Attacks on Nuclear Power Plants

This paper provides an approach for developing potential attacks on I and C systems of NPPs and assessing their consequences. An important concept is that the NPPs were not designed to cope with Stuxnet-type of attacks (and any other cyber attacks). That is, the plants were only designed for design basis accidents. The safety margins and redundancies built in the design are all based on design basis accidents. They may be helpful in mitigating cyberattacks, but may not be adequate.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Applications of a fast and efficient method for simulating orbital mission safety

A fast and efficient method for simulating potential interactions between space objects is presented. The specialized hazard analysis simulation is run at the Russian Space Surveillance Center. It simulates the motion of objects in space and determines close encounters between these objects. First, ephemerides are predicted for all space objects over the time interval of concern. Second, using the predicted ephemerides, pairs of satellites that would likely collide are grouped together. Throughout the process, the pairs initially chosen are refined until all pairs of satellites are found which come within a certain miss distance of each other. In addition to the miss distance, other characteristics of the encounter including angle of incidence, relative velocity, type of approaching object, and probability of collision come out of the simulation. There are many potential applications of this simulation and its results to missing planning and mission safety. Artificial objects can be introduced to the simulation to examine potential encounters between the new objects and current objects for mission design applications. The simulation can be run many times to create data for statistical analysis of encounter parameters. These as well as many other potential applications are presented and discussed.

Huth, Jeffrey↗

Flight Control System Development for the BURRO Autonomous UAV

Developing autonomous flying vehicles has been a growing field in aeronautical research within the last decade and will continue into the next century. With concerns about safety, size, and cost of manned aircraft, several autonomous vehicle projects are currently being developed; uninhabited rotorcraft offer solutions to requirements for hover, vertical take-off and landing, as well as slung load transportation capabilities. The newness of the technology requires flight control engineers to question what design approaches, control law architectures, and performance criteria apply to control law development and handling quality evaluation. To help answer these questions, this paper documents the control law design process for Kaman Aerospace BURRO project. This paper will describe the approach taken to design control laws and develop math models which will be used to convert the manned K-MAX into the BURRO autonomous rotorcraft. With the ability of the K-MAX to lift its own weight (6000 lb) the load significantly affects the dynamics of the system; the paper addresses the additional design requirements for slung load autonomous flight. The approach taken in this design was to: 1) generate accurate math models of the K-MAX helicopter with and without slung loads, 2) select design specifications that would deliver good performance as well as satisfy mission criteria, and 3) develop and tune the control system architecture to meet the design specs and mission criteria. An accurate math model was desired for control system development. The Comprehensive Identification from Frequency Responses (CIFER(R)) software package was used to identify a linear math model for unloaded and loaded flight at hover, 50 kts, and 100 kts. The results of an eight degree-of-freedom CIFER(R)-identified linear model for the unloaded hover flight condition are presented herein, and the identification of the two-body slung-load configuration is in progress.

Colbourne, Jason D.↗

Safe Agents in Space: Preventing and Responding to Anomalies in the Autonomous Sciencecraft Experiment

This paper describes the design of the Autonomous Sciencecraft Experiment, a software agent that has been running on-board the EO-I spacecraft since 2003. The agent recognizes science events, retargets the spacecraft to respond to the science events, and reduces data downlink to only the highest value science data. The autonomous science agent was designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfUnction to the EO-I spacecraft. The agent was designed to be "safe" by first preventing anomalies, then by automatically detecting and responding to them when possible. This paper describes elements of the design that increase the safety of the agent, the anomalies that occurred during the experiment, and how the agent responded to these anomalies.

autonomous science agent↗

Gathering Safety Intelligence from Relevant Safety Events

The notion of Safety II grew out of the realization that people are the source of resilience in any given socio-technical system and that people, in fact, produce safety far more often than reduce safety. The talk will highlight some of the key differences between Safety I and Safety II in their assumptions about the nature of operations and the nature of safety as well as some of the limitations of each approach and the ways in which they complement each other. Because we all want to make data-informed decisions and because we already collect a lot of Safety I-type data, the talk will also describe the Flight Safety Foundation’s Learning from All Operations effort which is designed to collect Safety II-type data.

resilience↗

A New Test Methodology for Evaluating Fire Risk Due to Electrical Faults in Oxygen-Enriched Environments

This paper discusses a new test methodology for assessing the safe use of materials found in spacecraft that may be exposed to electrical faults, as performed at the NASA White Sands Test Facility. “Wire-break” testing, modeled after the Cleveland Open Cup method, identifies the conditions under which pyrolyzed material transitions from a brief flash to a propagating flame. The approach focuses on fuel mass liberated through pyrolysis, mixed with oxygen, and ignited by a piloted ignition (spark due to fusion of wire) to achieve flame propagation with the least energy. The test approach attempts to find energy density thresholds derived using I²t values from current-induced heating of various test materials and wire characteristics. The application of the data provides a useful approach to mitigating fire risks in space systems by correlating threshold data to real-world designs and scaling factors, including oxygen pressure, wire diameter, heat sinking, and contained smoke volume. Several case studies, including Apollo missions and hypothetical scenarios, illustrate practical applications of these thresholds to enhance fire safety design considerations in space environments.

methodology↗

Classification and computation of extreme events in turbulent combustion

In the design of practical combustion systems, ensuring safety and reliability is an important requirement. For instance, reliably avoiding lean blowout, flame flashback or inlet unstart is critical for ensuring safe operation. Currently, the science of predicting such events is based on prior experience, limited modeling or diagnostic tools and purely statistical approaches. Even though computational and experimental tools for studying combustion devices have vastly advanced in the last three decades, the analysis of such failure events has not been pursued widely. While the use of data for model development and calibration is being widely accepted, the extension to failure events introduces numerous challenges. In particular, the focus here is on so-called data-poor problems, where the cost of generating data is extremely high and is not easily amenable to existing computational and experimental approaches. Data-poor problems are particularly relevant when related to extreme events (also called anomalous events) that can lead to catastrophic failure of the system. It is argued that transient events that describe such failure can have different causal mechanisms. To develop the scientific inference process, a classification of such problems is used to determine specific modeling paths as well as computational tools needed. Research opportunities in the emerging field of extreme event prediction are highlighted in order to identify critical and immediate needs.

97 MATHEMATICS AND COMPUTING↗

Pilot Test of Novel Electrochemical Membrane System for Carbon Dioxide Capture and Power Generation (Final Report)

The goal of this U.S. Department of Energy (DOE) sponsored project under cooperative agreement DE-FE0026580 is to verify that Fuel Cell Energy’s (FCE) Electrochemical Membrane (ECM)-based Combined Electric Power and Carbon Separation (CEPACS) system can achieve at least 90% carbon dioxide (CO 2 ) capture rate from Pulverized Coal (PC) power plant flue gas with 95% CO2 purity at a cost of electricity (COE) 30% less than baseline CO 2 capture approaches. To progress towards the DOE’s ultimate carbon capture program goals, the specific objectives of Budget Period 1 (BP1) of the project are to perform a preliminary Techno-Economic Analysis (TEA) and Environmental, Health and Safety (EH&S) Risk Assessment study, as well as to complete the detailed design of a pilot-scale ECM-based CEPACS system. This final technical report summarizes the results of the preliminary TEA and EH&S assessment of an ECM-based CEPACS system designed to capture and compress >90% of CO 2 from the flue gas of a reference 550 MW (net AC) Pulverized Coal (PC) Supercritical Steam Cycle Plant. Also included in this report is a summary of the detailed design for a pilot 3 MWe (flue gas equivalent) ECM-based CEPACS system designed to capture ≥90% of CO 2 from a PC plant flue gas slipstream and produce high-purity (≥95%) CO 2 . The pilot system is designed to process a slipstream of flue gas from the Unit 5 coal-fired boiler at the James M. Barry Electric Generating Station (Plant Barry). Plant Barry is located in Bucks, Alabama and is owned and operated by Alabama Power Company, a subsidiary of Southern Company. The TEA shows that the ECM-based CO 2 capture technology has an economic advantage over the existing CO 2 capture technology and meets the DOE’s cost target and performance goals for post-combustion CO 2 capture. The EH&S study includes the identification and quantification of the emissions from the CEPACS system. Properties of the waste including reactivity, flammability, corrosivity and toxicological effects are discussed along with the methods for minimization/elimination where applicable. The study shows that no major EH&S issues are expected to hinder commercialization of the ECM technology for large scale carbon capture applications. The detailed Front End Engineering Design (FEED) package for FCE’s MW-class ECM-based CO 2 capture pilot system is complete. It is designed in accordance with the project objectives and is now at a point where equipment/component procurement, skid final design and fabrication, and site preparation activities can begin in a follow-on project phase.

20 FOSSIL-FUELED POWER PLANTS↗

Human factors in aviation

The fundamental principles of human-factors (HF) analysis for aviation applications are examined in a collection of reviews by leading experts, with an emphasis on recent developments. The aim is to provide information and guidance to the aviation community outside the HF field itself. Topics addressed include the systems approach to HF, system safety considerations, the human senses in flight, information processing, aviation workloads, group interaction and crew performance, flight training and simulation, human error in aviation operations, and aircrew fatigue and circadian rhythms. Also discussed are pilot control; aviation displays; cockpit automation; HF aspects of software interfaces; the design and integration of cockpit-crew systems; and HF issues for airline pilots, general aviation, helicopters, and ATC.

Wiener, Earl L.↗

HFE safety reviews of advanced nuclear power plant control rooms

Advanced control rooms (ACR's) will utilize human-system interface (HSI) technologies that may have significant implications for plant safety in that they will affect the operator's overall role and means of interacting with the system. The Nuclear Regulatory Commission (NRC) reviews the human factors engineering (HFE) aspects of HSI's to ensure that they are designed to good HFE principles and support performance and reliability in order to protect public health and safety. However, the only available NRC guidance was developed more than ten years ago, and does not adequately address the human performance issues and technology changes associated with ACR's. Accordingly, a new approach to ACR safety reviews was developed based upon the concept of 'convergent validity'. This approach to ACR safety reviews is described.

Ohara, John↗

Preliminary Analysis of Facility Design for Pyro-processing Safeguardability

The deployment of advanced nuclear energy systems can assure sustainable energy use worldwide. For some of these systems, nuclear fuel will be fabricated in remotely-handled facilities in which batch-type processing will occur in heavily-shielded hot cells. Because special nuclear material is in both different physical and chemical form than that of the contemporary fuel cycle, new challenges have arisen in terms of safeguards, safety, and security, integrated with facility design; i.e., safeguardability. There is a need to develop models that can quantitatively assess safeguardability from a design-driven perspective. Previously, the first build of a material throughput model was established using discrete event simulation (DES) for the fuel fabrication process. Results showed that the DES model potentially can detect diversion attempts. This paper continues the study by further developing the the model. We test the use of the probability of the false alarm; i.e., the Type I error, as a metric for safeguardability assessment. Initiating events leading to a false alarm arise from aspects of safeguards, safety, and security. Different conceptual facility designs could exhibit different frequencies for the Type I error, and this could provide a measure of the safeguardability of each design. A quantitative assessment for safeguardable facility designs has not been developed in this manner. Much of the research into safeguardability has been qualitative. Engineering design approaches for a safeguardable facility are now needed. As there are not accepted metrics for safeguardability assessment, our motivation is to develop this design facet of safeguardability further.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Operational Considerations when Designing New Ground Systems

The Hubble Space Telescope (HST) launched in April of 1991 with a nominal 15-year old mission. Since then, the HST mission life has been extended to 2010. As is true for all NASA missions, HST is being asked to decrease its operational costs for the remainder of its mission life. Various techniques are being incorporated for cost reductions, with one of the core means being the design of a new and more efficient ground system for HST operations. This new ground system, "Vision 2000", will reduce operational and maintenance costs and also provide the HST Project with added flexibility to react to future changes. Vision 2000 began supporting HST Operations in January of 1999 and will support the mission for the remainder of the mission life. Upgrading a satellite's ground system is a popular approach for reducing costs, but it is also inherently risky. Validating a new ground system can be a severe distraction to a flight team while operating a satellite. Mission data collection and health and safety requirements are rarely, if ever, relaxed during this validation period, forcing flight teams to undertake an additional task while operating the satellite. Additionally, flight teams must usually undergo extensive training to effectively utilize the new system. Once again, this training usually occurs as an additional task, in addition to the nominal satellite operations. While operating the spacecraft, the Flight Team typically assists in the design, validation, and verification of a new ground system. This is a distraction and strain on the Flight Team, but the benefit of using the Flight Team in all phases of ground system development far outweigh the negative aspects. Finally, above the cost of the new system, the integration into the facility with the current control center system are resources and costs not normally taken into account in the design phase of the new system. In addition to the standard issues faced by a Project when upgrading its ground system, the HST Project also must continue to support Space Shuttle servicing missions, which occur approximately every two to three years. This paper will address many of the issues common to all missions when re-hosting ground systems, and those faced by the HST Project in particular.

Walyus, Keith↗

Human Factors Considerations for Automating Microreactors

The U.S. Nuclear Regulatory Commission (NRC) has interacted with vendors pursuing the commercialization of microreactors ( <10 MW th ). It is envisioned that microreactors could be assembled and fueled in a factory and shipped to a site. Many of the sites are expected to be remote locations requiring off-grid power or in some cases military bases. However, before this new class of nuclear reactor can be fully developed and implemented by designers, an effort must be made to explore the technical issues and provide reasonable assurance to the public regarding health and safety impacts centered on various technical issues. Prior works have examined many of these issues. One issue not yet fully explored is the possible change in role of the operations and support personnel. Due to the passive safety features of microreactors and their low level of nuclear material, the microreactor facilities may automate more functions and rely on inherent safety features more than its predecessor nuclear power plants. In some instances, human operators may not be located onsite and may instead be operating or monitoring the facility from a remote location. Some designs also call for operators to supervise and control multiple microreactors from the control room. This report explores the issues around reduced staffing of microreactors, highlights the historical safety functions associated with human operators, assesses current licensing requirements for appropriateness to varying levels of personnel support, and describes a recommended regulatory approach for reviewing the impact of reduced staff to the operation of microreactors. The report evaluates these issues through an extensive literature survey and Subject Matter Expert interviews. The literature covers research topics related to Human Factors Engineering as well as regulatory guidance given by the Nuclear Regulatory Commission.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Continued Verification of MOOSE Structural Mechanics Tools for Modeling Core Bowing Phenomena in Fast Reactors

Under the U.S. Department of Energy Office of Nuclear Energy’s Advanced Modeling and Simulation (NEAMS) Program, an integrated multiphysics approach is being developed to model the core bowing phenomena important to liquid metal-cooled fast reactors. Core bowing is an important passive safety mechanism whereby increased power (which leads to temperature and flux gradients) influences the core to bow into less reactive configurations when the restraint system is properly designed. The phenomenon includes a complex interplay of radiation transport, duct temperature calculations involving fluid flow and heat transfer, and thermo-mechanical responses to the induced temperature and flux gradients. Structural material properties are also important to determining inelastic response to longer term flux gradients which cause irradiation creep and swelling. While core bowing provides a strong negative reactivity feedback when the restraint system is designed properly, it also results in additional forces between assemblies which increase the loads required to extricate them during refueling or control rod movement. Therefore, the restraint system must be designed with these tradeoffs in mind. The first stage of the work, which commenced in FY21 and continues through FY22, assesses thermo-mechanical modeling tools for producing core bowing predictions consistent with conventional tools. The Multiphysics Object Oriented Simulation Environment (MOOSE) Tensor Mechanics and Contact Modules are employed. This status report describes work on additional thermo-mechanical benchmark verification problems with increased complexity from the examples demonstrated in FY21. Several benchmark verification examples were selected from the IAEA verification and validation report. These examples involve clusters of ducts representative of a sector of a hexagonal reactor core which bow into each other and cause contact and load pad elevations, as well as single ducts subjected to irradiation fields undergoing swelling and subsequent bowing. The MOOSE-based results were compared to both IAEA benchmark participants’ results, analytic equations as available, and NUBOW-3D, a beam model code developed by Argonne National Laboratory. In every case, the MOOSE results agreed with other simulations results, providing additional verification basis of the tools for this particular physics application.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

IER-479: Final Design of Low-Temperature TEX Experiments [Slides]

This presentation discusses the final design of low-temperature Thermal Epithermal eXperiments (TEX) experiments. Designed to validate low temperature cross sections and crit safety analyses. The presentation includes discussion on Low-Temp TEX Chamber a Cryostat Chamber capable of cooling between room temp and -40c. Finally, the presentation touches on reactivity via separation where the need to know how the system will behave approaching critical as lifted into annular reflector is analyzed.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗