SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Critical reviews of NACA and NASA report literature on light aircraft design, with emphasis on propulsion subsystems, stability, control, propellers, performance, and safety
The use of overhead traveling bridge cranes in many varied applications is common practice. In particular, the use of cranes in the nuclear, military, commercial, aerospace, and other industries can involve safety critical situations. Considerations for Human Injury or Casualty, Loss of Assets, Endangering the Environment, or Economic Reduction must be addressed. Traditionally, in order to achieve additional safety in these applications, mechanical systems have been augmented with a variety of devices. These devices assure that a mechanical component failure shall reduce the risk of a catastrophic loss of the correct and/or safe load carrying capability. ASME NOG-1-1998, (Rules for Construction of Overhead and Gantry Cranes, Top Running Bridge, and Multiple Girder), provides design standards for cranes in safety critical areas. Over and above the minimum safety requirements of todays design standards, users struggle with obtaining a higher degree of reliability through more precise functional specifications while attempting to provide "smart" safety systems. Electrical control systems also may be equipped with protective devices similar to the mechanical design features. Demands for improvement of the cranes "control system" is often recognized, but difficult to quantify for this traditionally "mechanically" oriented market. Finite details for each operation must be examined and understood. As an example, load drift (or small motions) at close tolerances can be unacceptable (and considered critical). To meet these high functional demands encoders and other devices are independently added to control systems to provide motion and velocity feedback to the control drive. This paper will examine the implementation of Programmable Electronic Systems (PES). PES is a term this paper will use to describe any control system utilizing any programmable electronic device such as Programmable Logic Controllers (PLC), or an Adjustable Frequency Drive (AID) 'smart' programmable motion controller. Therefore the use of the term Programmable Electronic Systems (PES) is an encompassing description for a large spectrum of programmable electronic control devices.
System safety and resilience is a critical concern in the air traffic domain. An important element of maintaining system safety and resilience is the ability of systems to ‘degrade gracefully’. However, previous research on the causes of system degradation in the air traffic domain are sporadic, and the potential interaction between the causes of degradation, and the resulting possible compound effect on the entire system, has been under-researched. An interview study was conducted with 12 retired controllers as participants. The results of a thematic analysis revealed the key causes of system degradation, and the associated impact on the ability of the controllers to prevent system degradation or recover the system. Findings have direct implications for identifying and mitigating potential risks of increasingly automated air traffic control systems.
System safety and resilience is a critical concern in the air traffic domain. An important element of maintaining system safety and resilience is the ability of systems to ‘degrade gracefully'. However, previous research on the causes of system degradation in the air traffic domain are sporadic, and the potential interaction between the causes of degradation, and the resulting possible compound effect on the entire system, has been under-researched. An interview study was conducted with 12 retired controllers as participants. The results of a thematic analysis revealed the key causes of system degradation, and the associated impact on the ability of the controllers to prevent system degradation or recover the system. Findings have direct implications for identifying and mitigating potential risks of increasingly automated air traffic control systems.
This document is a results summary report for the human factors engineering (HFE) preliminary validation (PV) performed for the Limerick Generating Station (LGS) Safety-Related (SR) Instrumentation and Control (I&C) Upgrade Project at the Idaho National Laboratory (INL) Human Systems Simulation Laboratory (HSSL). This occurred during the week of February 20, 2023.
Constellation Energy and the United States Department of Energy (DOE) have established a public/private partnership to implement a pilot digital upgrade to replace legacy analog, safety-related reactor protection and emergency safety feature actuation systems (RPS/ESFAS) with modern digital systems. This effort is occurring at Constellation’s Limerick Generating Station. This project is being performed in accordance with industry processes that have been adapted to better support digital upgrades. These processes include IP-ENG-001, Standard Design Process, NISP-EN-04, Standard Digital Engineering Process and Electric Power Research Institute Report 3002011816, Digital Engineering Guide. The Light Water Reactor Sustainability (LWRS) Program at the Idaho National Laboratory (INL) has been supporting this effort. Latest INL HFE efforts in support of this project have focused on definition and implementation of the Human Factors Engineering (HFE) Program in support of Constellation design and related licensing efforts. This paper presents the development execution of the HFE Program through completion of the Planning and Analysis Phase as defined by NUREG-0711 as well as HFE lessons learned.
For all X Computational Physics Division (XCP) software under the Associate Laboratory Directorate for Weapons Physics (ALDX), the Weapons Research Services Secure Networks and Assurance Group (WRS-SNA) manages the software quality assurance (SQA) plan, requirements and guidance with respect to development processes and tools to meet the broader LANL SQA requirements. Each XCP software product is categorized into one of three software types: Safety Software, Non-Safety Risk Significant Software, and Non-Safety Commercially Controlled Software. In 2018, using LANL Form 2033, the MCNP6 code was categorized by the XCP division as Non-Safety Commercially Controlled Software, provided in Appendix A. Using WRSFORM- 0001U, the MCNP6 code was graded as a Medium Impact software product, provided in Appendix B. Given these determinations, the WRS-AD-0010U SQA plan is followed for all MCNP6 developments, documentation and code releases.
This research report (1) describes the process followed and products developed during the SR I&C Pilot Project Initial Scoping Phase, and (2) captures lessons learned. Exelon Generation and LWRS collaborated to develop a Digital Transformation Strategy as part of a larger Advanced Concept of Operations. The proposed SR I&C Pilot Upgrade provides a foundation stone for this Digital Transformation that will improve plant safety, reliability, and operational performance while lowering plant Total Cost of Ownership (TCO). Initial Scoping Phase activities for this Pilot Project have been performed in accordance with industry processes that have been adapted to better support digital upgrades. These processes include IP-ENG-001, Standard Design Process (SDP), NISP-EN-04, Standard Digital Engineering Process (SDEP), and Electric Power Research Institute (EPRI) Report 3002011816, Digital Engineering Guide (DEG). Completing Initial Scoping Phase Engineering and Operations, Licensing, and Project Management Activities was necessary to sufficiently bound the scope, schedule, and estimated cost of the Project to enable utility management to authorize moving into the Conceptual Design Phase. A significant finding of the Business Case Analysis (BCA) methodology developed and applied as part of this effort was that the growth rate of material costs for sustaining the operation of obsolete SR I&C equipment is accelerating. This directly contributed to the Project Economic Analysis created to justify continuing the Project. Project Initial Scoping Phase lessons learned have also been captured to assist the larger industry in understanding the Digital Transformation Strategy and SR I&C Pilot Project Initial Scoping Phase efforts. This is in keeping with the public/private partnership that has been established between the Department of Energy (DOE) and Exelon for this effort with engagement from the NRC. By addressing first-of-a-kind (FOAK) risks and capturing lessons learned, the SR I&C Pilot Upgrade Project addresses technical, regulatory, and business risks to enable subsequent implementers of similar upgrade.
Future tokamak power plants will likely operate using a single, well-defined plasma scenario, either in steady state or for very long pulse lengths. In order to enhance the robustness of the scenario, feedback controllers for a variety of plasma properties will be necessary to counteract any disturbances and ensure safe operation. However, only a limited set of actuators will be available to control many different quantities. Because of this, it is necessary to develop controllers that are able to regulate multiple plasma properties using a limited set of actuators. To this end, a controller has been developed for the simultaneous regulation of both the electron temperature and safety factor profiles in DIII-D. This algorithm uses a linear quadratic integral control synthesis approach based on a linearized model of the dynamics of the two profiles. Two neural network surrogate models, NubeamNet and MMMnet, are included to improve the fidelity of the model. Furthermore, the controller has been tested in simulation using COTSIM, and has demonstrated the ability to simultaneously track changes in both the electron temperature and safety factor targets, including changes in both the magnitude and the shape of the profiles.
The Waste Isolation Pilot Plant (WIPP) provides for safe, permanent disposal of government-owned transuranic (TRU) and TRU mixed wastes. Receipt and disposal of waste at the WIPP site began in March 1999. The Sandia report, Consideration of Nuclear Criticality When Disposing of Transuranic Waste at the Waste Isolation Pilot Plant, addressed potential nuclear criticality safety issues based on the projected inventory characteristics known at the time [1]. As designs for inventory, waste forms, and disposal packages have changed, new analyses have been performed, and updates have been made to address any potential effects to the WIPP safety basis. New analyses performed include Saylor 2017 [2] and Brickner 2019 [3], which address certain waste containers with specified loadings under post-closure conditions. Both examined several hypothetical scenarios and included analyses to bound (from a criticality potential standpoint) credible configurations that could occur at WIPP during the repository regulatory post-closure disposal time period for feature, event, and process (FEP) considerations—10,000 years. During this post-closure period at WIPP, the screening of FEPs is governed by the risk-based standards and implementing regulations of the US Environmental Protection Agency (EPA) (i.e., 40 CFR 191 and 40 CFR 194, respectively) [4,5]. An FEP screening can be based on either a low-consequence or low-probability rationale. A low-probability rationale includes either (a) a qualitative rationale that the FEP is not credible or (b) a quantitative demonstration that the probability is less than 10-4 in 104 years. In this evaluation, a qualitative lowprobability rationale of not credible is used by demonstrating that bounding configurations of the waste are not critical. The demonstration of subcriticality is through quantitative calculations, but a probability of criticality is not evaluated. Rather, the rationale for this evaluation is that bounding configurations with an effective neutron multiplication factor (keff) well below the upper subcriticality limit (USL) make criticality incredible. Reference [2] documented a nuclear criticality assessment of the WIPP repository for disposal of dilute surplus plutonium materials using the Dilute and Dispose Approach and packaging in criticality control overpacks (CCOs). The CCO is the waste disposal container recently designed to allow for up to 380 fissile gram equivalent (FGE) 239 Pu per drum, which is a higher fissile loading than typical waste containers. The CCO consists of a criticality control container (CCC) positioned by upper and lower plywood spacers within a standard 55 gal drum. The CCC is used to establish a geometry control for fissile materials during transportation and WIPP emplacement operations. The current WIPP waste acceptance criteria for CCO payloads limit beryllium to less than or equal to 1% by weight of the waste contents and require the waste form to be non-machine compacted. Reference [2] considered two scenario progressions—room closure from salt creep, hereafter referred to as the reconfigured dry scenario, and flooding with brine, hereafter referred to as the reconfigured wet scenario. The subsequent drying out of the reconfigured wet scenarios was also considered. For all scenarios, subcriticality was maintained when 50 g of B 4 C (acting as a neutron absorber) per CCC was intermixed within the plutonium disposition waste form. The analysis used a waste form description that limits the amount of moderation that could be present within the waste form (i.e., it limits the amount of water and polyethylene that could be present based on planned processing conditions). This analysis to evaluate increased limits on the amount of moderation that could be present was performed as a companion to Reference [2] to address concerns associated with verifying moisture and/or plastic contents of waste materials following packaging of dilute surplus plutonium in the CCO. To that end, this analysis used the models and methods from Reference [2] to evaluate a more generic base waste form consisting of water and polyethylene that is more similar (and nearly identical) to the generic waste forms utilized in other models/analyses supporting the TRU Package Transporter Model II (TRUPACTII) safety analysis [6] (all are without moderation controls). The waste form in this analysis uses a base mixture of 75% water and 25% polyethylene, the total amount of which is varied to determine the optimum moderation to fissile material (H/Pu) ratio. The fissile loading is maintained at up to 380 FGE 239 Pu (modeled as PuO 2 ) per CCO with an additional 545 g of beryllium (to bound the 1% by weight contents restriction) and 50 g of B 4 C intermixed per CCO. The beryllium content (1% by weight) is based on the total allowed waste weight (this does not include packaging and container weights). Figures ES-1 and ES-2 display summary results, showing that with this model including 50 g of B 4 C per CCO, the system keff remains under 0.85 for all moderator amounts and provides a significant margin against post-closure criticality under postulated bounding conditions for compaction. Figure ES-1 compares an infinite model with a room model at the initial emplacement spacing and under full radial compaction. Full radial compaction places each CCC in direct contact and does not credit any anticipated spacing associated with current post-closure geomechanical modeling of the repository [7]. The effects of variations in the H/Pu ratio were evaluated by varying the amount of the water/polyethylene component of the waste model, with fissile loading maintained at 380 239 Pu FGE. Similarly, Figure ES-2 illustrates how various amounts of B 4 C per CCO influence k eff at different radial compactions, all at the H/Pu ratio of 200 (in the room array model). Therefore, while the results from Saylor 2017 [2] modeled more realistic process limits associated with packaging of dilute surplus plutonium, this analysis demonstrates that limits on moderation (plastic and water content) are not necessary to ensure subcriticality in the WIPP repository, provided the requisite B 4 C absorber is present.
The application of software safety practices on the LCS project resulted in the successful implementation of the NASA Software Safety Standard NASA-STD-8719.138 and CxP software safety requirements. The GOP-GEN-GSW-011 Hazard Report was the first report developed at KSC to identify software hazard causes and their controls. This approach can be applied to similar large software - intensive systems where loss of control can lead to a hazard.
Current available robotic systems provide limited support for CAD-based model-driven visualization, sensing algorithm development and integration, and automated graphical planning systems. This paper describes ongoing work which provides the functionality necessary to apply advanced robotics to automated manufacturing and assembly operations. An interface has been built which incorporates 6-DOF tactile manipulation, displays for three dimensional graphical models, and automated tracking functions which depend on automated machine vision. A set of tools for single and multiple focal plane sensor image processing and understanding has been demonstrated which utilizes object recognition models. The resulting tool will enable sensing and planning from computationally simple graphical objects. A synergistic interplay between human and operator vision is created from programmable feedback received from the controller. This approach can be used as the basis for implementing enhanced safety in automated robotics manufacturing, assembly, repair and inspection tasks in both ground and space applications. Thus, an interactive capability has been developed to match the modeled environment to the real task environment for safe and predictable task execution.
In May 2016, the U.S. Nuclear Regulatory Commission (NRC) staff provided a digital instrumentation and control (I&C) regulatory infrastructure integrated action plan to the NRC for approval. One of the objectives of that plan was to establish a clear regulatory structure with reduced regulatory uncertainty to enable the expanded safe use of digital I&C in commercial nuclear reactors while continuing to ensure safety and security. To achieve this end, the NRC, with collaboration from industry, developed a streamlined License Amendment Request Alternate Review (AR) process for safety-related (SR) digital I&C upgrades. In spite of this effort, the industry has remained reluctant to perform such I&C upgrades because of perceived regulatory and financial risks associated with being the first or an early adopter of the AR process for SR I&C upgrades. The U.S. Department of Energy Light Water Reactor Sustainability Program at the Idaho National Laboratory performed Initial Scoping Phase research to help break this impasse by supporting a SR I&C Pilot Upgrade, working with MPR Associates, ScottMadden Inc., and Exelon Generation. Exelon’s Limerick Generating Station (LGS) was selected as the target for this research. This paper summarizes the Initial Scoping Phase engineering and operations, licensing, and project management activities necessary to bound the scope, schedule, and estimated cost of the project sufficiently to enable utility management authorization of Conceptual Design Phase activities. These efforts and associated products are intended to provide a template to support larger industry efforts to perform similar upgrades as a foundation stone for a digital transformation that will improve plant safety, reliability, and operational performance while lowering plant total cost of ownership. As a result of the combined effort of Exelon Generation and research participants, Conceptual Design Phase activities for the subject upgrade at LGS were approved by Exelon. Further, the U.S. Department of Energy also awarded a $50 million cost share award to Exelon in order to pave the way for SR I&C modernization and associated control room upgrades across the U.S. nuclear fleet. Additional research reports are planned for the Conceptual Design Phase, Detailed Design Phase, and the Implementation Phase of the LGS project to document the process followed and promulgate lessons learned to industry.
Constellation Energy and the United States Department of Energy (DOE) have established a public/private partnership to implement a pilot digital upgrade to replace legacy analog, safety-related reactor protection and emergency safety feature actuation systems (RPS/ESFAS) with modern digital systems. This effort is occurring at Constellation’s Limerick Generating Station. This project is being performed in accordance with industry processes that have been adapted to better support digital upgrades. These processes include IP-ENG-001, Standard Design Process, NISP-EN-04, Standard Digital Engineering Process and Electric Power Research Institute Report 3002011816, Digital Engineering Guide. The Light Water Reactor Sustainability (LWRS) Program at the Idaho National Laboratory (INL) has been supporting this effort. Latest INL HFE efforts in support of this project have focused on definition and implementation of the Human Factors Engineering (HFE) Program in support of Constellation design and related licensing efforts. This paper will present the development of the HFE 3D modeling execution of the Main Control Room safety upgrades. New equipment and modifications are planned for upgrading the new safety systems. 3D modeling allows for visualization of the new equipment and modifications to be shared with engineering and design teams for evaluation and review. Anthropometric considerations such as sight lines and functional reach can be evaluated directly using the 3D model. This effort has helped to provide visualizations for additional review with operations personnel and project stakeholders.
The rapid growth of computer technology and innovation has played a significant role in the rise of computer automation of human tasks in modem production systems across all industries. Although the rationale for automation has been to eliminate "human error" or to relieve humans from manual repetitive tasks, various computer-related hazards and accidents have emerged as a direct result of increased system complexity attributed to computer automation. The risk assessment techniques utilized for electromechanical systems are not suitable for today's software-intensive systems or complex human-computer controlled systems.This thesis will propose a new systemic model-based framework for analyzing risk in safety-critical systems where both computers and humans are controlling safety-critical functions. A new systems accident model will be developed based upon modem systems theory and human cognitive processes to better characterize system accidents, the role of human operators, and the influence of software in its direct control of significant system functions Better risk assessments will then be achievable through the application of this new framework to complex human-computer controlled systems.
The preponderance of matter over antimatter in the early universe, the dynamics of the supernovae that produced the heavy elements necessary for life, and whether protons eventually decay -- these mysteries at the forefront of particle physics and astrophysics are key to understanding the early evolution of our universe, its current state, and its eventual fate. The Deep Underground Neutrino Experiment (DUNE) is an international world-class experiment dedicated to addressing these questions as it searches for leptonic charge-parity symmetry violation, stands ready to capture supernova neutrino bursts, and seeks to observe nucleon decay as a signature of a grand unified theory underlying the standard model. The DUNE far detector technical design report (TDR) describes the DUNE physics program and the technical designs of the single- and dual-phase DUNE liquid argon TPC far detector modules. Volume III of this TDR describes how the activities required to design, construct, fabricate, install, and commission the DUNE far detector modules are organized and managed. This volume details the organizational structures that will carry out and/or oversee the planned far detector activities safely, successfully, on time, and on budget. It presents overviews of the facilities, supporting infrastructure, and detectors for context, and it outlines the project-related functions and methodologies used by the DUNE technical coordination organization, focusing on the areas of integration engineering, technical reviews, quality assurance and control, and safety oversight. Because of its more advanced stage of development, functional examples presented in this volume focus primarily on the single-phase (SP) detector module.
Flow chemistry offers high reaction yield, kinetic control, improved safety, reliability, scalability, and greater degree of process control. Herein, hyperbranched polymer-grafted silica microparticles (HP-SMPs) are synthesized in a commercially available flow reactor through atom transfer radical polymerization. Initiator-anchored silica microparticles are obtained by in situ silanization in the flow reactor. Hyperbranched poly[2-(dimethylamino)ethylmethacrylate] chains are grafted onto the initiator-anchored SMPs through inimer–monomer ratio control. To demonstrate the efficiency and universality of this approach in grafting polymers onto SMPs, multiple hyperbranched polymeric structures are obtained by varying the inimer concentration. Dye absorption test is conducted to demonstrate the potential applications of HP-SMPs.
Safety of jumbo jet aircraft, accident reduction, traffic control, systems safety engineering, landing approach, midair collision prevention and crash survival