Search NASA⌕ Search

SEARCH · Search NASA

Results for “Access Control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2017

Building Energy Management Open Source Software

This is the repository for Building Energy Management Open Source Software (BEMOSS), which is an open source operating system that is engineered to improve sensing and control of equipment in small- and medium-sized commercial buildings. BEMOSS offers the following key features: (1) Open source, open architecture – BEMOSS is an open source operating system that is built upon VOLTTRON – a distributed agent platform developed by Pacific Northwest National Laboratory (PNNL). BEMOSS was designed to make it easy for hardware manufacturers to seamlessly interface their devices with BEMOSS. Software developers can also contribute to adding additional BEMOSS functionalities and applications. (2) Plug & play – BEMOSS was designed to automatically discover supported load controllers (including smart thermostats, VAV/RTUs, lighting load controllers and plug load controllers) in commercial buildings. (3) Interoperability – BEMOSS was designed to work with load control devices form different manufacturers that operate on different communication technologies and data exchange protocols. (4) Cost effectiveness – Implementation of BEMOSS deemed to be cost-effective as it was built upon a robust open source platform that can operate on a low-cost single-board computer, such as Odroid. This feature could contribute to its rapid deployment in small- or medium-sized commercial buildings. (5) Scalability and ease of deployment – With its multi-node architecture, BEMOSS provides a distributed architecture where load controllers in a multi-floor and high occupancy building could be monitored and controlled by multiple single-board computers hosting BEMOSS. This makes it possible for a building engineer to deploy BEMOSS in one zone of a building, be comfortable with its operation, and later on expand the deployment to the entire building to make it more energy efficient. (6) Ability to provide local and remote monitoring – BEMOSS provides both local and remote monitoring ability with role-based access control. (7) Security – In addition to built-in security features provided by VOLTTRON, BEMOSS provides enhanced security features, including BEMOSS discovery approval process, encrypted core-to-node communication, thermostat anti-tampering feature and many more. (8) Support from the Advisory Committee – BEMOSS was developed in consultation with an advisory committee from the beginning of the project. BEMOSS advisory committee comprises representatives from 22 organizations from government and industry.

Source record↗
DOE OSTI2017

Building Energy Management Open Source Software

This is the repository for Building Energy Management Open Source Software (BEMOSS), which is an open source operating system that is engineered to improve sensing and control of equipment in small- and medium-sized commercial buildings. BEMOSS offers the following key features: (1) Open source, open architecture – BEMOSS is an open source operating system that is built upon VOLTTRON – a distributed agent platform developed by Pacific Northwest National Laboratory (PNNL). BEMOSS was designed to make it easy for hardware manufacturers to seamlessly interface their devices with BEMOSS. Software developers can also contribute to adding additional BEMOSS functionalities and applications. (2) Plug & play – BEMOSS was designed to automatically discover supported load controllers (including smart thermostats, VAV/RTUs, lighting load controllers and plug load controllers) in commercial buildings. (3) Interoperability – BEMOSS was designed to work with load control devices form different manufacturers that operate on different communication technologies and data exchange protocols. (4) Cost effectiveness – Implementation of BEMOSS deemed to be cost-effective as it was built upon a robust open source platform that can operate on a low-cost single-board computer, such as Odroid. This feature could contribute to its rapid deployment in small- or medium-sized commercial buildings. (5) Scalability and ease of deployment – With its multi-node architecture, BEMOSS provides a distributed architecture where load controllers in a multi-floor and high occupancy building could be monitored and controlled by multiple single-board computers hosting BEMOSS. This makes it possible for a building engineer to deploy BEMOSS in one zone of a building, be comfortable with its operation, and later on expand the deployment to the entire building to make it more energy efficient. (6) Ability to provide local and remote monitoring – BEMOSS provides both local and remote monitoring ability with role-based access control. (7) Security – In addition to built-in security features provided by VOLTTRON, BEMOSS provides enhanced security features, including BEMOSS discovery approval process, encrypted core-to-node communication, thermostat anti-tampering feature and many more. (8) Support from the Advisory Committee – BEMOSS was developed in consultation with an advisory committee from the beginning of the project. BEMOSS advisory committee comprises representatives from 22 organizations from government and industry.

Source record↗
DOE OSTI2022

Next generation experimental data access at NSLS-II

The NSLS-II network and computing infrastructure has been significantly updated recently. The re-IP process in 2020-2021 enabled the NSLS-II network to be routable to the rest of the BNL campus. Then, standardization of the operating systems and deployment procedures helped to deliver a consistent environment to workstations and servers used by all NSLS-II beamlines. In particular, the RedHat Enterprise Linux 8 was deployed to 700+ machines using the RedHat Satellite infrastructure management product, and all critical services (IOCs, databases, etc.) were migrated to the new OS. NFS users’ home directories are consistent across all of the machines, which eliminates the need for the individual configuration of the user environment on each host. The standard suite of software packages is available to the beamline staff and users, which includes the system packages (deployed via RPM) as well as the conda environments for data acquisition and analysis. Security measures were implemented to comply with the industry standards, which include multi-factor authentication (using Duo), secure screen lock for the beamline machines, and advanced access control to the experimental data that is stored in shared central storage available on all hosts. These major enhancements facilitated sharing the experimental data (currently for a number of selected beamlines, with a plan to extend it to the whole facility in the nearest future) with the users via an externally facing JupyterHub instance. The beamlines keep using the Bluesky data acquisition framework to orchestrate their experiments, and the new infrastructure enabled them to use a next-generation data access library called tiled.

36 MATERIALS SCIENCE↗
DOE OSTI2026

AQDrop Quantum Service (AQDrop) v1.0

AQDrop is a job management system designed to streamline access to the Advanced Quantum Testbed (AQT) at NERSC (National Energy Research Scientific Computing Center). It serves as a centralized middleware layer between researchers and quantum processing hardware. Key Features: AQDrop provides a FastAPI-based server backed by PostgreSQL for job submission, queue management, and role-based access control (members, operators, and administrators). Users submit Qiskit circuits via JSON payloads, which are queued, dispatched to the QPU through the Qubic API, and returned as measurement counts. A Python client library and web dashboard round out the interface options. Primary Use: Researchers submit quantum circuit jobs from a laptop or login node; an operator client executes those jobs on the AQT's physical QPU and returns results — all coordinated through the central API. Advantages: Compared to ad-hoc or direct hardware access, AQDrop adds structured queue management, auditable job-status tracking and OAuth2 authentication — reducing scheduling conflicts and unauthorized access. Its containerized deployment also improves reproducibility and scalability. Overall, AQDrop functions as a purpose-built quantum job broker tailored to NERSC's specific hardware and institutional access requirements.

Caplinger, Evan [Lawrence Berkeley National Labora↗
DOE OSTI2016

NDMAS implementation and data qualification for accident tolerant fuel experiments

In order to meet quality and regulatory requirements associated with the U.S. Department of Energy Accident Tolerant Fuels (ATF) experiments, all data and documentation associated with ATF component fabrication, characterization, traceability, testing and post irradiation examination are being managed using the Nuclear Data Management and Analysis System (NDMAS). NDMAS melds commercial off-the-shelf software to provide the full range of needed functionality. The core component of NDMAS is the SAS Enterprise Business Intelligence software, which provides data manipulation, statistical and graphical capabilities, and delivery of live content to web pages. Content delivery to both Idaho National Laboratory researchers and external users via a web interface is managed using SharePoint, which is access-controlled. Additionally, scripts, macros, and commercial wrappers may be used or written by the NDMAS team to control interfaces between SAS and the structured query language server, where much of the data reside. ATF experiment data and documentation stored in the NDMAS database may be utilized to support Nuclear Regulatory Commission licensing of ATF concepts for commercial Light Water Reactor demonstration. Therefore, Data Qualification Plans are being developed to screen and tag all document and data input for ATR water loop testing, Transient Reactor Testing (TREAT), and post irradiation examination. A project-wide document library has been created in the ATF NDMAS SharePoint Site for general unrestricted document and information access. Restricted libraries have also been created to allow individual customer access to restricted documents. Data from ATR water loop instrumented lead experimentation, TREAT, and post-irradiation examination will be available to program participants on the SharePoint site as they are collected. This offers a unique capability for team collaboration while these tests are being conducted. (authors)

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2017

Computer security approach for Rolls-Royce spinline{sup R} safety platform - 227

The number of digital assets at commercial nuclear power plants is significant and will likely continue to increase with time. As a consequence, these plants have become potential targets for cyber-attacks. Around the world, nuclear safety authorities and national Computer and Information Security Agencies are implementing stricter regulations and inspections for critical systems in nuclear plants. There is a particular focus on instrumentation and control systems as they implement key nuclear safety functions. Rolls-Royce follows a strict computer and information security program based on general and nuclear specific norms, Rolls-Royce group processes, and proven technologies. The Spinline digital safety platform has been designed specifically for nuclear applications and features a secure development and operational environment that provides barriers against unauthorized modifications and implements design requirements promoting integrity and reliability during operation and maintenance. The Rolls-Royce secure development environment provides layers of protection utilizing physical and environmental security, human resource security, and information technology systems access control. The Spinline platform strengthens security functions by providing protection against unauthorized, unintended, and unsafe modifications to the system. The Spinline platform has design features promote integrity and reliability during operation and maintenance in the event of inadvertent operator actions or undesirable behavior of connected equipment. The Spinline technology and these computer security processes are based in a wide spectrum of international standards that were accepted as providing a secure development and operating environment by the United States Nuclear Regulatory Commission in 2014. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2026

Smart Inverters, Dumb Risk: Taking Control of IBR Security in the Digital Age

This presentation addresses the security challenges posed by Inverter-Based Resources (IBRs) in the modern energy landscape. The presentation highlights the vulnerabilities and risks associated with IBRs, including the potential for cyber-attacks, the impact of insecure defaults, and the systemic risks posed by supply chain dependencies. Key topics covered include: 1) The increasing digital transformation in energy systems and the associated security risks. 2) Specific vulnerabilities in IBRs, including weak passwords, hardcoded credentials, and insecure web application interfaces. 3) The implications of persistent connectivity and the strategic risks posed by foreign-manufactured components. 4) The role of regulatory frameworks, such as NERC CIP, in addressing these challenges and the limitations of current oversight. 5) Practical solutions for mitigating risks, including secure design practices, vendor risk assessments, and the importance of strong passwords and role-based access control. The presentation underscores the necessity of a comprehensive, system-of-systems approach to securing IBRs, emphasizing the need for collaboration across various stakeholders, including operators, developers, and regulators, to ensure the resilience and security of the energy grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Supramolecular Assembly of U(IV) Clusters and Superatoms with Unconventional Countercations

Superatoms are nanometer-sized molecules or particles that form ordered lattices, mimicking their atomic counterparts. Hierarchical assembly of superatoms gives rise to emergent properties in lattices of quantum dots, p-block clusters, and fullerenes. In this report, we introduce a family of uranium-oxysulfate cluster anions whose hierarchical assembly in water is controlled by two parameters: acidity and the lanthanide or transition-metal countercation. In acid, larger Ln III (Ln = La–Ho) link hexamer (U 6 ) oxoclusters into body-centered cubic frameworks, while smaller Ln III (Ln = Er–Lu and Y) promote linking of 14 U 6 clusters into hollow superclusters (U 84 superatoms). U 84 assembles into superlattices including cubic-closest packed, body-centered cubic, and interpenetrating networks, bridged by interstitial countercations and U 6 clusters. Divalent transition metals (TM = Mn II and Zn II ) charge-balance and promote the fusion of 10 U 6 and 10 U monomers into a wheel-shaped cluster (U 70 ). Dissolution of U 70 in organic media shows (by small-angle X-ray scattering) that differing supramolecular assemblies are accessed, controlled by TM II -linking of U 70 clusters. Magnetic measurements of these assemblies reveal Curie–Weiss behavior at high temperatures, without pairing of the 5f 2 -electrons down to 2 K.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2020

Module-OT: A Hardware Security Module for Operational Technology

Increased penetration levels of renewable energy and other types of distributed energy resources (DERs) on the modern electric grid-combined with technological advancements for electric system monitoring and control-introduce new cyberattack vectors and increase the cyberattack surface of energy systems. According to the IEEE Std. 1547-2018, DERs must use Modbus, Distributed Network Protocol 3 (DNP3), or Smart Energy Profile 2.0 (SEP2) as their communication protocol. Previous research identified several vulnerabilities and security breaches in each one of these communication protocols; despite this, existing standards for DERs do not recommend cybersecurity measures. In order to reduce vulnerabilities in power distribution systems, this paper presents a novel open-source hardware security module that improves both information and operational security to better protect data and communications on the distribution grid. The security hardware is called “module for operational technology,” or simply Module-OT, and it has been validated and tested in an emulated distribution system application. Module-OT is integrated within a communication system in the transport layer of the Open Systems Interconnection (OSI) model. It improves system security through encryption, authentication, authorization, certificate management, and user access control. The main advancement of Module-OT is the addition of hardware cryptographic acceleration that improves the overall communication performance in terms of end-to-end latency.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2024

Evaluating Pressure‐dependent Discharge Behavior of Foil Versus In situ Plated Lithium Metal Anodes in Solid‐State Batteries

Abstract Anode‐free manufacturing of solid‐state batteries (SSBs) shows promise to maximize energy density by eliminating excess lithium (Li) and simplifying battery production. However, high reversibility during discharge (stripping of Li) is necessary for long‐lifetime SSBs with a limited Li reservoir. Further, the plastic flow of Li changes depending on the Li thickness, leading to possible differences in discharge performance under stack pressure. This work investigates the pressure‐dependent discharge performance of anode‐free manufactured SSBs with in situ plated Li and compares the performance to that of conventional thick Li foil cells. Distinct stripping behavior is observed at low pressures (0–1 MPa), where Li diffusivity and initial interfacial contact may control accessible capacity, compared to high pressures (3–10 MPa) where mechanical deformation of Li likely governs stripping behavior. Analysis of impedance spectra collected during stripping shows that additional stack pressure delays the formation of deep, as opposed to lateral, voids in the Li anode. These results provide insights to guide the transition from thick Li foil anodes to anode‐free manufactured SSBs.

Haslam, Catherine G.↗
DOE OSTI2021

Blockchain Smart Contract Reference Framework and Program Logic Architecture for Transactive Energy Systems

This paper proposes a reference framework for a transactive energy market based on blockchain. The framework was designed based on the engineering requirements of a distribution-scale market; including participant needs, expected market transactions, and the cybersecurity constructs required to support a fair, secure and efficient market operation. It leverages the existing blockchain primitives to provide clear value propositions to the transactive market, including identity management (access control), data security (integrity), resiliency (decentralization, scalability and performance). The validity of the proposed framework is demonstrated using a real-time 5-min double-auction market. The results highlight its benefits while providing strong validation of applicability to blockchain within transactive energy systems.

Gourisetti, Sri Nikhil Gupta↗
DOE OSTI2019

Engineered Chromatin Remodeling Proteins for Precise Nucleosome Positioning

Regulation of chromatin structure is essential for controlling access of DNA to factors that require association with specific DNA sequences. Here we describe the development and validation of engineered chromatin remodeling proteins (E-ChRPs) for inducing programmable changes in nucleosome positioning by design. We demonstrate that E-ChRPs function both in vitro and in vivo to specifically reposition target nucleosomes and entire nucleosomal arrays. We show that induced, systematic positioning of nucleosomes over yeast Ume6 binding sites leads to Ume6 exclusion, hyperacetylation, and transcriptional induction at target genes. We also show that programmed global loss of nucleosome-free regions at Reb1 targets is generally inhibitory with mildly repressive transcriptional effects. E-ChRPs are compatible with multiple targeting modalities, including the SpyCatcher and dCas9 moieties, resulting in high versatility and enabling diverse future applications. Thus, engineered chromatin remodeling proteins represent a simple and robust means to probe and disrupt DNA-dependent processes in different chromatin contexts.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2017

A software for managing after-hours activities in research user facilities

Here, we present an afterhours activity management program for shared facilities, which handles the processes required for afterhours access (request, approval, extension, etc.). It implements the concept of permitted afterhours activities, which consists of a list of well-defined activities that each user can perform afterhours. The program provides an easy and unambiguous way for users to know which activities they are allowed to perform afterhours. In addition, the program can enhance its safety efficacy by interacting with lab and instrument access control systems commonly present in user facilities.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2018

Influence of hydrophilic groups and metal-ion adsorption on polymer-chain conformation of amidoxime-based uranium adsorbents

In this study, we focus on the influence of hydrophilic groups and metal-ion loading on adsorbent polymer conformation, which controls access to adsorption sites and may limit adsorption capacity. Gaining a better understanding of the factors that influence conformation may yield higher-capacity adsorbents. Polyamidoxime (PAO), deuterated-PAO polyacrylic acid diblock copolymers (d-PAO-b-PAA), and randomly configured copolymers (PAO-co-PAA) were synthesized and characterized by neutron reflectometry in air and D 2 O. For d-PAO-b-PAA, characterization was also performed after alkali conditioning and in simulated seawater. PAO and PAO-co-PAA, with similar molecular weight and grafting density, extended from 95-Å thickness in air to 180 and 280-Å in D 2 O, respectively. This result suggests that polymer swelling may cause the additional adsorption capacity observed when polymer hydrophilicity increases. Two d-PAO-b-PAA samples, A and B, with a d-PAO thickness of 55-Å swelled to 110-Å and 140-Å, respectively, with an overall thickness increase of ~160% in D 2 O. After alkali conditioning, molecular interactions increased the density of PAA near the PAO-PAA interface, while the d-PAO thickness only decreased by ~10 Å. The d-PAO thickness of both samples declined to ~90-Å after adsorption in simulated seawater due to polymer-chain crosslinking. In conclusion, these results are expected to aid in improving adsorbent synthesis to increase uranium capacity.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗
DOE OSTI2020

DLHub: Simplifying publication, discovery, and use of machine learning models in science

Machine Learning (ML) has become a critical tool enabling new methods of analysis and driving deeper understanding of phenomena across scientific disciplines. There is a growing need for "learning systems" to support various phases in the ML lifecycle. While others have focused on supporting model development, training, and inference, few have focused on the unique challenges inherent in science, such as the need to publish and share models and to serve them on a range of available computing resources. In this paper, we present the Data and Learning Hub for science (DLHub), a learning system designed to support these use cases. Specifically, DLHub enables publication of models, with descriptive metadata, persistent identifiers, and flexible access control. It packages arbitrary models into portable servable containers, and enables low-latency, distributed serving of these models on heterogeneous compute resources. In this work, we show that DLHub supports low-latency model inference comparable to other model serving systems including TensorFlow Serving, SageMaker, and Clipper, and improved performance, by up to 95%, with batching and memoization enabled. We also show that DLHub can scale to concurrently serve models on 500 containers. Finally, we describe five case studies that highlight the use of DLHub for scientific applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Regioselective surface encoding of nanoparticles for programmable self-assembly

Surface encoding of colloidal nanoparticles with DNA is fundamental for fields where recognition interaction is required, particularly controllable material self-assembly. However, regioselective surface encoding of nanoparticles is still challenging because of the difficulty associated with breaking the identical chemical environment on nanoparticle surfaces. Here we demonstrate the selective blocking of nanoparticle surfaces with a diblock copolymer (polystyrene-b-polyacrylic acid). By tuning the interfacial free energies of a ternary system involving the nanoparticles, solvent and copolymer, controllable accessibilities to the nanoparticles’ surfaces are obtained. Through the modification of the polymer-free surface region with single-stranded DNA, regioselective and programmable surface encoding is realized. The resultant interparticle binding potential is selective and directional, allowing for an increased degree of complexity of potential self-assemblies. As a result, the versatility of this regioselective surface encoding strategy is demonstrated on various nanoparticles of isotropic or anisotropic shape and a total of 24 distinct complex nanoassemblies are fabricated.

77 NANOSCIENCE AND NANOTECHNOLOGY↗
DOE OSTI2017

Ferroelectric symmetry-protected multibit memory cell

Here, the tunability of electrical polarization in ferroelectrics is instrumental to their applications in information-storage devices. The existing ferroelectric memory cells are based on the two-level storage capacity with the standard binary logics. However, the latter have reached its fundamental limitations. Here we propose ferroelectric multibit cells (FMBC) utilizing the ability of multiaxial ferroelectric materials to pin the polarization at a sequence of the multistable states. Employing the catastrophe theory principles we show that these states are symmetry-protected against the information loss and thus realize novel topologically-controlled access memory (TAM). Our findings enable developing a platform for the emergent many-valued non-Boolean information technology and target challenges posed by needs of quantum and neuromorphic computing.

36 MATERIALS SCIENCE↗