Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Technology Advancement and Insertion into Operating Nuclear Facilities

Key challenges in the NNSA modernization effort are centered around the selection of new processing / production technologies to deploy in existing, operating, and oftentimes, aging nuclear facilities. New uranium processing technologies may offer significant improvements in worker and environmental safety, material control and accountability, and production efficiencies, but adaptation of these technologies into existing facilities presents unique (and usually, difficult) engineering solutions for each new technology. This presentation discusses approaches utilized at Y-12 to mature and demonstrate new processing and production technologies for deployment into aging nuclear facilities. The technology advancement lifecycle (from concept to deployment) of uranium electrorefining technologies will be reviewed, as a prototypical example, to describe steps and approaches utilized at Y-12 (and NNSA Sites) to (i) mature technologies and manufacturing strategies, (ii) establish testbed capabilities for full-scale process demonstrations, and (iii) reduce risks associated with operational disruptions when commissioning new uranium processing technologies.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Connecting Electric Vehicle Charging Infrastructure to Commercial Buildings

Electric vehicles (EVs) are growing in popularity and gaining meaningful market share with record sales year over year in the last decade. EV charging equipment, also known as EV chargers (EVC) or EV supply equipment (EVSE), must proportionally match the growing number of new EVs on the road for a comparable experience to gas-powered vehicles. The majority of EV charging currently happens at residential buildings. However, demand for EV charging at commercial buildings will significantly increase with wider mainstream EV adoption and as businesses return to more normal operation following COVID-19 pandemic disruptions. Charging equipment can include various sub-systems like power conditioning module, control software, safety devices, metering, communication, cooling, connectors, and its wiring. EV charging at commercial buildings could be used for public, workplace, and commercial fleet charging. This document aims to describe how EVC can be connected to commercial buildings, including considerations for facility managers, and the effects that charging will have on the buildings electrical distribution system. More specifically, this resource provides an overview of: understanding EV charging basics: how charging equipment connects to the building and to EVs; required infrastructure updates needed at the building site to connect EVC to existing distribution systems; network strategies for cost-effective operation; metering and utility considerations for billing and incentives; charging equipment ownership options; future trends in EVC connection to buildings.

ADVANCED PROPULSION SYSTEMS,ENERGY CONSERVATION, C↗
DOE OSTI2023

FY23 ION Based Approaches to Address Labor and Knowledge Retention

This study will seek to outline the current problem facing the nuclear industry related to staffing, training, and retaining the necessary workforce for long-term sustainability. A review of published reports and knowledge gained by working in the nuclear energy sector will form the basis for this scoping study. This study will not seek to draw any conclusions regarding the underlying causes of these personnel issues but will attempt to ask questions and help outline future research. The Integrated Operations for Nuclear business model provides opportunities to partially mitigate some of the current issues facing staffing the nuclear fleet. Upgrading safety and control systems from analog to digital as advocated by the Integrated Operations for Nuclear process allows the nuclear facility to compete for the best and brightest candidates and offers them a broad and sustainable career path where their skills can be valued and utilized in the broader industrial sectors. This study will seek to identify the primary reasons that the nuclear industry is facing this labor crisis and seek to identify possible solutions that will be fully evaluated in future research.

42 ENGINEERING↗
DOE OSTI2020

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗
DOE OSTI2025

Coordinated Thermal Safety Attack and Defense on EV Battery Management Systems

Battery temperature sensor and battery current sensor data which are key sensing inputs to the Battery Management Controllers in electric vehicles, are vulnerable to possible cyber/ physical manipulation due to known vulnerabilities inherited from CAN bus technology that is used for in-vehicle communications between electronic control units that transfer sensing and control data. In this paper, we first create a simulation that enables us to evaluate impact of cyber physical attacks on electric vehicle battery management system in a controlled environment that violates thermal safety. Specifically, we emulate a Level 3 - DC fast charging system with SAE J1772/CCS, integrated with standard charging controls and thermal safety controls on EVs, and various sensing data flows. Second, we propose a coordinated current and battery temperature attack that has crippling economic, and safety impacts. Third, we quantify the usability, economic and safety impacts of such attacks as a function of the extent of data manipulation. Finally, we propose a physics model driven detection technique to detect presence of such attacks.

25 ENERGY STORAGE↗
DOE OSTI2022

Post-closure Nuclear Criticality Safety Evaluations for Disposition of Criticality Control Overpacks at the Waste Isolation Pilot Plant

The Waste Isolation Pilot Plant (WIPP) is a geological repository in southern New Mexico that provides for disposal of transuranic (TRU) wastes from atomic energy defense activities. The Sandia National Laboratories (Sandia) Report, Consideration of Nuclear Criticality When Disposing of Transuranic Waste at the Waste Isolation Pilot Plant, addresses nuclear criticality safety based on the projected inventory characteristics for the initial compliance certification application of WIPP in 1996. As the inventory, waste forms, and disposal package designs change, revised or new analyses are necessary to demonstrate acceptability for these configurations within the WIPP safety basis and compliance with 10,000-year post-closure standards of the US Environmental Protection Agency (EPA). Saylor and Scaglione evaluated criticality control overpacks (CCOs) in 2017 based on conservative assumptions for post-closure repository structural conditions with resulting effects on containers and container spacing, The Saylor and Scaglione evaluation of CCOs addressed a single waste configuration that represents the Surplus Plutonium Disposition Program’s dilute and dispose waste form and composition. This initial CCO study demonstrated that 50 grams of boron carbide (B 4 C) per CCO is sufficient to ensure post-closure criticality safety based on a well-mixed waste composition, and Oak Ridge National Laboratory (ORNL) subsequently determined that this amount of B 4 C does not require constraints on moisture or plastic present as moderator. The Saylor and Scaglione analysis conservatively assumes repository room closure that eliminates all space between fissile gram equivalent (FGE) 239 Pu masses. The close-packed array was selected based on limited availability of repository salt creep modeling results at that time. In 2019, Brickner provided additional evaluations for pipe overpack containers (POCs), building on the conservative basis provided by Saylor and Scaglione. Brickner’s 2019 analysis made use of new geomechanical data for post-closure spacing that rely on advances in repository modeling as documented in the work by Reedlunn and Bean. This current CCO evaluation for generic waste materials expands on earlier work performed at ORNL and includes evaluation of CCOs across a much broader range of possible waste compositions and geometries. This evaluation is intended to provide input for the required feature, event and process (FEP) screening to determine if post-closure criticality must be included as an event in the 10,000-year regulatory evaluation. As such, the approach to modeling post-closure criticality presented in this report has been coordinated with the Sandia team responsible for FEP screening. The resulting analysis supports disposition of fissile materials in the CCO containing up to 380 FGE 239 Pu and expands conditions acceptable for disposal of fissile material in CCOs. This evaluation builds on the methodology of Saylor and Scaglione and Brickner, using the most recently available geomechanical data for CCO spacing under salt creep compaction scenarios provided by Reedlunn and Bean. The broad range of fissile material configurations analyzed in this report are intended to account for configurations that may occur during the post-closure disposal time period, and it also includes waste configurations that are not physically possible to support analysis of conditions that influence neutron fluence.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Integrated Operations for Nuclear: Work Reduction Opportunity Demonstration Strategy

EXECUTIVE SUMMARY The Light Water Reactor Sustainability Program Plant Modernization Pathway has been working with industry for a number of years to leverage digital technology to extend the life and improve the performance of the existing fleet through modernized technologies and improved processes for plant operation and power generation. This includes development of modernization solutions to improve reliability and economic performance while addressing US nuclear industry’s aging and obsolescence challenges. The objective of these efforts is to deliver a sustainable business model that enables US nuclear industry to remain competitive. Digital Infrastructure (DI) research has established a technical foundation for these efforts. This effort began with technical analysis and support for a safety-related instrumentation and control (I&C) pilot upgrade being performed at Constellation Energy Generation’s Limerick Nuclear Plant. The following publicly available reports were produced as part of this effort. • INL/EXT-20-61079, Vendor-Independent Design Requirements for a Boiling Water Reactor Safety System Upgrade [1] • INL/EXT-20-59371, Business Case Analysis for Digital Safety-Related Instrumentation & Control System Modernizations [2] • INL/EXT-20-59809, “Safety-Related Instrumentation and Control Pilot Upgrade: Initial Scoping Phase Implementation Report and Lessons Learned [3] • INL/RPT-23-72105, Safety-Related Instrumentation and Control Upgrade: Conceptual – Detailed Design Phase Report and Lessons Learned [4]

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Regulation of the central safety factor and normalized beta under low NBI torque in DIII-D

An algorithm has been designed to simultaneously control the central safety factor (q 0 ) and normalized beta (β N ) while ensuring near-zero torque from the neutral beam injection in DIII-D. Feedback control of q 0 and β N in tokamaks can be beneficial due to the close relationship that these variables have with plasma performance and magneto-hydrodynamic stability. In addition, low neutral-beam-torque conditions are of special interest in present devices because future burning-plasma tokamaks such as ITER will most likely operate at very low plasma rotation. The control synthesis of the algorithm presented in this work is based on a linearized, one-dimensional (1D) model of the current-profile dynamics coupled with a zero-dimensional (0D) plasma-energy balance. The actuators considered are neutral beam injection and electron-cyclotron heating and current drive, and discrete logic determines the neutral-beam injection powers that deliver near-zero torque. Here, the algorithm has been tested in nonlinear, 1D simulations using COTSIM (Control-Oriented Transport SIMulator) and in DIII-D experiments, demonstrating satisfactory performance.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2025

Safety Assurance Framework for Nuclear Digital Instrumentation and Control Software

Software in digital instrumentation and control (D&C) systems poses unique challenges for the safety assurance of nuclear power plants. Through a literature survey of 21 sources, we analyzed various claims, arguments, and evidence used in safety assurance cases across industries. These were organized into a Goal Structuring Notation (GSN) safety assurance case framework to organize and visualize the various arguments for DI&C safety. We developed a classification for the levels of the framework, which can be used in other safety assurance cases to improve clarity.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗
DOE OSTI2025

Frequency Control and Disturbance Containment Using Grid-Forming Embedded Storage Networks

The paper presents a distributed approach for operating a network of inverter-based energy storage resources embedded in a bulk power system. Departing from their traditional role of steady-state reserves, the storage assets in the network are utilized as frequency-responsive resources shaping system dynamics. The power electronics converter systems interfacing the storage resources are equipped with local controllers designed to respond under transient disturbances. To this end, a safety-constrained distributed control strategy is explored. The paper compares the performance of converter-interfaced grid-forming and grid-following storage networks for fast frequency control and disturbance containment/localization. Sensitivity studies are performed to study the impact of storage size, steady-state dispatch, and controller design on dynamic performance. The findings are presented through case studies with results from the IEEE test systems.

Chatterjee, Kaustav (ORCID:0000000153273860)↗
DOE OSTI2020

Control-Oriented Modeling of Lithium-Ion Batteries

Battery management systems (BMSs), which monitor and optimize performance while ensuring safety, require control-oriented models, i.e., models tailored to the design and implementation of estimation and control algorithms. Physics-based electrochemical models describe detailed battery phenomena, but are too computationally intensive for use in estimation and control applications. Single particle models (SPMs), which retain some of the physics of electrochemical models, are often used for control-oriented battery modeling since they are computationally efficient; however, they are only valid over very low frequency ranges and C-rates. Empirical equivalent circuit models (ECMs) are also used for control-oriented battery modeling since they are computationally efficient and can describe battery behavior over wide frequency ranges; however, they provide no physical understanding of the battery and, therefore, have limited applicability. Further, fractional order terms (e.g., Warburg impedances) are often employed, making the models unwieldy for use in the time domain. This work provides a control-oriented battery model that combines the benefits of SPM and ECM models, while overcoming their limitations. The proposed model incorporates some of the battery physics found in electrochemical models, can easily be used in both the time and frequency domains, and describes battery behavior over its entire frequency range. A linearized single particle model, which incorporates key electrochemical parameters, is used for modeling battery physics at very low frequencies. For low frequencies, integer-order linear systems are used to approximate diffusion physics described by Warburg impedances, and high frequency behavior is modeled by the double layer capacitance effect. The proposed battery model is more computationally efficient than full electrochemical models since it does not require the solution of PDEs, is accurate for a wider frequency range than the SPM considered in this paper, and does not suffer from the unwieldiness and limited applicability of empirical ECMs. Finally, the model is validated in the time and frequency domains via a comparison to pseudo-two-dimensional (P2D) model simulations and experimental data.

25 ENERGY STORAGE↗
DOE OSTI2024

Nanoporous Carbon Coatings Direct Li Electrodeposition Morphology and Performance in Li Metal Anode Batteries

Li metal anodes could significantly improve battery energy density. However, Li generally electrodeposits in poorly controlled morphology, leading to safety and performance problems. One factor that controls Li anode performance and electrodeposition morphology is the nature of the electrolyte–current collector interface. Herein, we modify the Cu current collector interface by depositing precisely controlled nanoporous carbon (NPC) coatings using pulsed laser deposition to develop an understanding of how NPC coating density and thickness impact Li electrodeposition. We find that NPC density and thickness guide Li morphological evolution differently and dictate whether Li deposits at the NPC-Cu or NPC-electrolyte interface. NPC coatings generally lower overpotential for Li electrodeposition, though thicker NPC coatings limit kinetics when cycling at a high rate. Lower-density NPC enables the highest Coulombic efficiency (CE) during calendar aging tests, and higher-density NPC enables the highest CE during cycling tests.

25 ENERGY STORAGE↗
DOE OSTI2020

Preliminary design of control rods in the single-fluid double-zone thorium molten salt reactor (SD-TMSR)

Recent studies on Molten Salt Reactors (MSRs) showed that the excess reactivity at the beginning of the operation is large for many fueling strategies and must be compensated by a reactivity control system. The current work introduces a reliable safety system based on control rods in addition to the online feed system reactivity control in the Single-fluid Double-zone Thorium-based Molten Salt Reactor (SD-TMSR). Three different initial fissile loadings are considered: 233 U, reactor-grade Pu, and transuranic (TRU) elements as a startup fuel. We applied six different absorbing materials to investigate the main operational and safety parameters in the SD-TMSR: natural B 4 C, enriched B 4 C with 90% 10 B, HfB 2 , HfH 1.62 , Eu 2 O 3 , and Gd 2 O 3 . The present work focuses on control rod design, integral and differential control rod worth, shutdown margin, and shadowing effects at steady-state. We employed the SERPENT-2 Monte-Carlo code to calculate the reactivity worth and analyze the performance of the reactivity control system. We showed that 233 U and reactor-grade Pu startup cores maintain adequate shutdown margin with all considered absorbers. Finally, this report proposes a design of control rod clusters that compensate the excess reactivity of the SD-TMSR loaded with different initial fissile material.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗
DOE OSTI2024

TRISO Fuel’s Safety Functions, Contributions to Reactor Safety, and Necessary Safety Limits

Safety functions are the actions, passive or active, that structures, systems, and components of nuclear facility that contribute to the safety of the workers, the public, or the environment. Well-defined safety functions are the foundation of a solid safety case for a reactor. For reactors that use TRISO-coated particles, the TRISO fuel plays an important part of the safety case because of its ability to contain radionuclides in the fuel itself. This ability enables the use of a functional containment strategy for the reactor where radionuclide retention is the primary safety function supported by the safety functions of controlling reactivity control and controlling heat rejection. This paper establishes at a deeper level the role that TRISO fuel plays in each of these safety functions and associated quality assurance and testing requirements for TRISO particle manufacturing to ensure these safety functions. Safety limits necessary to protect these safety functions include: operational limits, time at temperature limits, and fission gas release activity limits. In conclusion, this approach demonstrates the role that specific aspects of TRISO fuel play in protecting the safety of workers, the public, and the environment.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2025

HFIR LEU High Density Silicide Dispersion Optimized Design Steady-State Heat Transfer Analyses

Steady-state heat transfer simulations of the Oak Ridge National Laboratory High Flux Isotope Reactor (HFIR) with the low-enriched uranium (LEU) high-density silicide dispersion Optimized fuel design were performed to support comprehensive performance and safety metric studies concerning this design. The LEU Optimized design operates at 95 MW to maintain HFIR’s current highly enriched uranium (HEU) core performance level at 85 MW. Full cycle Mode 1 full flow Case 1 (inlet temperature), Case 2 (flux-to-flow), and Case 3 (inlet pressure) safety limit analyses were performed to assess the margins to critical heat flux. Under the prescribed conditions, this LEU design meets the safety limit and limiting control setting requirements outlined in HFIR’s documented safety analysis; however, the safety margins are less than those for the 85 MW HEU core, and several assumptions were made where fuel fabrication and qualification data are currently lacking for the silicide fuel design. Effects of changes to pertinent fuel fabrication assumptions and uncertainty factors on thermal safety margins were also evaluated, showing that the margins are sensitive to many of these parameters. Power and pressure perturbations were also performed, indicating that significant steady-state thermal margins could be gained by increasing the coolant inlet pressure.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2021

Safe Operations at Roadway Junctions - Design Principles from Automated Guideway Transit

Herein this paper describes a system-level view of a fully automated transit system comprising a fleet of automated vehicles (AVs) in driverless operation, each with an SAE level 4 Automated Driving System, along with its related safety infrastructure and other system equipment. This AV system-level control is compared to the automatic train control system used in automated guideway transit technology, particularly that of communications-based train control (CBTC). Drawing from the safety principles, analysis methods, and risk assessments of CBTC systems, comparable functional subsystem definitions are proposed for AV fleets in driverless operation. With the prospect of multiple AV fleets operating within a single automated mobility district, the criticality of protecting roadway junctions requires an approach like that of automated fixed-guideway transit systems, in which a guideway switch zone "interlocking" at each junction location deconflicts railway traffic, affirming safe passage. The analogous AV protection safety subsystem is defined as fail-safe equipment that monitors roadway intersections and junctions, communicates traffic signal status, perceives and communicates alerts and signals to AV connected vehicles concerning potential unsafe conditions, and performs related primary safety functions. Conclusions are drawn that the AV protection roadway intersection functions must be performed by local roadside equipment dedicated to protecting each roadway intersection and junction. Further, it is concluded that the communications technology connecting the infrastructure with the vehicle to perform this vital, fail-safe protection should meet specific functional and performance criteria.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2021

PD21A680: Additive Manufacturing Process Optimization and Qualification FY21 Year-end Report

This project builds upon knowledge gained from previous projects on Additive Manufacturing (AM) operation, process control and monitoring, repeatability, and process improvement. This project will exclusively focus on metal powder bed additive manufacturing (PBAM). Objective 1: Advance metal powder bed AM R&D capabilities. Perform enhanced R&D on increased build volumes and throughput, safety and handling controls, process monitoring, and diagnostics with a focus on production end-states. Objective 2: Build upon knowledge gained from previous PDRD projects to develop deeper understanding of process controls, essential for transitioning metal AM processes for future applications. Objective 3: Maintain business development and research advantages through collaborations with external industry and university partners.

36 MATERIALS SCIENCE↗