Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Performance Indicators”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Solid-state Architecture Batteries for Enhanced Rechargeability and Safety (SABERS)

All-electric vertical take-off and landing vehicles (eVTOL) for urban air mobility (UAM) concepts face numerous challenging technical barriers before their introduction into the consumer marketplace. The most challenging of these technical barriers to overcome is developing an energy storage system capable of meeting the rigorous aerospace safety and performance criteria. The performance metrics for eVTOL craft, such as specific energy and cycle life, are at least 2 times greater than those of electric automobiles. Furthermore, safety is essential for operation of commercial electric aerovehicles. Preliminary systems level analysis studies have indicated that there are five key properties which must be optimized for successful implementation of battery systems. Those five key criteria are safety, energy density, power, packaging design and scalability. Current state-of-the-art (SOA) lithium-ion batteries meet or exceed the requirements for electric aviation in the areas of power and scalability, yet are insufficient in the key performance criteria of energy, safety and packaging design. The SABERS concept proposes a battery that meets all five key performance criteria through the development of a solid-state architecture cell design utilizing high energy density and power density sulfur-selenium cathode with a lithium metal anode. Data will be presented demonstrating high performing sulfur - selenium cathode that offers a balanced energy to power density ratio, which can be tailored to the specific application by altering the stoichiometric ratios of sulfur to selenium. This cathode is being developed by implementing NASA patented holey graphene technology as a highly conductive, ultra-lightweight electrode scaffold. Novel processing methods allow developing solid-state electrolyte that is a safe, non-flammable replacement to the highly flammable liquid organic electrolytes currently used in SOA lithium-ion batteries. The all solid-state lithium-sulfur-selenium cell design enables the implementation of a bipolar stack configuration, which has the advantages of reducing overall cell weight, reducing the amount of interfaced connections for the cell, and minimizing cooling requirements for the battery. In particular, the solid-state design allows for a serial stacking configuration to enable dense packaging of the cells within the bipolar stack. Lastly, optimization of battery components occurs through a robust and rigorous combination of various computational modeling techniques covering multiple length scales. The expected result will be a solid-state battery with operational temperatures from 0 °C to 150 °C which provides the required energy density, discharge rate, and inherent safety to meet strict aerospace performance criteria.

solid state batteries↗

Testing of Advanced Capabilities to Enable In-time Safety Management and Assurance for Future Flight Operations

In order to refine an initial Concept of Operations, explore Concepts of Use, and expose/validate requirements for future In-Time Aviation Safety Management Systems (IASMS), testing architectures were created, along with a set of capabilities and underlying information exchange protocols. These systems were conceived and developed based on hazards associated with two envisioned urban area flight domains: (1) highly autonomous small uncrewed aerial systems (sUAS) operating at low altitudes, and (2) highly autonomous air taxis. The initial scope of this development is described in [1]; this report provides an update, focusing on the subsequent developments and test activities. As stated in [1], it is important to note that there are many capabilities already in use by the industry (or soon to be in use) that will play critical roles in future IASMS designs. Those reported here were developed to address a gap in the current state-of-the-art regarding specific hazards/risks, and/or to allow for investigation of the interplay between and across hazard types — particularly regarding how overall safety risk can be reduced or managed effectively. Results of testing and development activities are organized by the operational phase wherein a particular capability would be employed (i.e., preflight, in-flight, and post-flight/off-line). Pre-flight: A set of capabilities were developed to help mitigate safety risk prior to flight (e.g., during flight and mission planning). Results of testing summarize (1) validation activities to raise the Technology Readiness Level (TRL) and (2) evaluation activities where the capabilities were applied to flight/mission planning procedures and used by operators/pilots. For the latter, flight plans were automatically assessed, and operators/pilots were notified of hazardous flight segments so as to enable adjustment of the flight plan and re-evaluation, and/or to better inform go/no-go decisions. Capabilities addressed hazards associated with power consumption, third-party risk, wind, navigation system performance, radiofrequency interference, and proximity to geo-spatial threats (e.g., buildings, trees, and no-fly zones). In-flight: Flight experiments tested capabilities that detect and respond to hazards encountered during flight. In the first series, safety hazards were monitored and assessed onboard, and system-generated mitigation maneuvers were recorded (but not acted upon by the vehicle). In the second series, mitigation maneuver commands directed the aircraft in response to safety hazards (i.e., auto-mitigation). The sUAS used for testing is described in full, as is the test architecture, which included commercial avionics, research avionics, and onboard software designed to detect, assess, and respond to hazards. The onboard system was designed as a run-time assurance framework, consistent with [2] and supportive of both supervisory and automated modes. The primary functions included: real-time risk assessment (RTRA), auto-pilot monitoring, constraint monitoring, and contingency select/triggering. RTRA performs integrated risk assessment considering data from several hazard-related monitors (e.g., battery, motors, navigation, communications, population density, and loss-of-control). Post-flight/off-line: Data monitored and recorded during flights can enable IASMS capabilities that execute after flights have completed (or “off-line”). These include: (1) the ability to identify anomalies and trends that may only be observable when comparing data spanning a number of similar flights; (2) the ability to update and validate pre-flight and in-flight capabilities and any underlying models to improve their performance; (3) the ability to report anomalies/off-nominals that may indicate design changes or maintenance actions are needed; and (4) the ability for humans involved in operations to report safety-relevant observations to help in understanding the flight data and/or the operational context of a flight. Progress on three such capabilities is summarized; the first investigates anomaly detection given a limited set of flight logs and applies an approach previously used for space operations. The second explores what could be identified using a larger set of flight logs, including from web-based forums where flight logs are posted by sUAS autopilot users. The third creates a new means of collecting information on UAS incidents and accidents via the Aviation Safety Reporting System (ASRS).

sUAS↗

Toward a high-voltage fast-charging pouch cell with TiO 2 cathode coating and enhanced battery safety

Nickel-rich layered lithium transition metal oxides, LiNi x Co y Mn 1-x-y O 2 , are key cathode materials for high-energy lithium-ion batteries owing to their high specific capacity. However, the commercial deployment of nickel-rich oxides has been hampered by their poor thermostability and insufficient cycle life. In this work full batteries with uncoated and TiO 2 -coated LiNi 0.5 Co 0.2 Mn 0.3 O 2 cathodes and graphite anodes are compared in terms of electrochemical performance and safety behavior. The battery using a TiO 2 -coated LiNi 0.5 Co 0.2 Mn 0.3 O 2 cathode exhibited better cyclic performance at high cutoff voltage. Electrochemical impedance spectroscopy analysis indicated that the TiO 2 -coated LiNi 0.5 Co 0.2 Mn 0.3 O 2 cathode gave the battery a more stable charge transfer resistance. Transmission electron microscopy demonstrated that TiO 2 coating reduced accumulation of the cathode electrolyte interface layer on the particle surface. Time-of-flight secondary ion mass spectrometry demonstrated that TiO 2 coating markedly enhanced the interface stability of the cathode particle and protected the particle from serious etching by the electrolyte. Accelerating rate calorimetry revealed that the trigger temperature of thermal runaway for the battery using TiO 2 -coated LiNi 0.5 Co 0.2 Mn 0.3 O 2 as cathode material was 257 °C, which was higher than that of the battery with the uncoated LiNi 0.5 Co 0.2 Mn 0.3 O 2 cathode (251 °C). In situ X-ray diffraction during heating demonstrated that this enhanced safety can be attributed to the suppressed phase evolution of the coated cathode material.

25 ENERGY STORAGE↗

What Went Wrong: A Survey of Wildfire UAS Mishaps through Named Entity Recognition

Increasingly, unmanned aircraft systems (UAS) are being applied to wildfire incidents for tasks such as mapping, aerial ignition, and delivery. As a result, aviation incident reporting systems for wildfires are beginning to accumulate data related to UAS mishaps in wildfire response. In this research, we apply state-of-the-art natural language processing (NLP) techniques to develop a custom Named Entity Recognition (NER) model which extracts entities relevant to safety analysts. The custom NER model is built by fine-tuning an existing Bidirectional Encoder Representations from Transformers (BERT) model, resulting in a generalizable NER model that can extract engineering relevant entities including failure modes, causes, effects, control processes, and recommendations from failure-relevant text. This model performs passably, with a weighted average f1 score of 0.33 across entity types, indicating more labeled training data is needed. Extracted entities are used to form a Failure Modes and Effects Analysis (FMEA)-style survey of wildfire UAS mishaps reported using the SAFECOM system. Similar mishaps are manually clustered and reported as single rows within an FMEA. Foreach cluster, we compute frequency, severity, and overall riskin accordance with FAA standards. This methodology can beapplied as part of a broader safety management system totrack trends in mishaps (e.g., likelihood, severity) and discoverknowledge (e.g., causes, effects) that can be utilized to improvesafety outcomes and system performance.

Machine Learning↗

Multiplex detection and identification of viral, bacterial, and protozoan pathogens in human blood and plasma using an expanded high-density resequencing microarray platform

Introduction: Nucleic acid tests for blood donor screening have improved the safety of the blood supply; however, increasing numbers of emerging pathogen tests are burdensome. Multiplex testing platforms are a potential solution. Methods: The Blood Borne Pathogen Resequencing Microarray Expanded (BBP-RMAv.2) can perform multiplex detection and identification of 80 viruses, bacteria and parasites. This study evaluated pathogen detection in human blood or plasma. Samples spiked with selected pathogens, each with one of 6 viruses, 2 bacteria and 5 protozoans were tested on this platform. The nucleic acids were extracted, amplified using multiplexed sets of primers, and hybridized to a microarray. The reported sequences were aligned to a database to identify the pathogen. To directly compare the microarray to an emerging molecular approach, the amplified nucleic acids were also submitted to nanopore next generation sequencing (NGS). Results: The BBP-RMAv.2 detected viral pathogens at a concentration as low as 100 copies/ml and a range of concentrations from 1,000 to 100,000 copies/ml for all the spiked pathogens. Coded specimens were identified correctly demonstrating the effectiveness of the platform. The nanopore sequencing correctly identified most samples and the results of the two platforms were compared. Discussion: These results indicated that the BBP-RMAv.2 could be employed for multiplex detection with potential for use in blood safety or disease diagnosis. The NGS was nearly as effective at identifying pathogens in blood and performed better than BBP-RMAv.2 at identifying pathogen-negative samples.

59 BASIC BIOLOGICAL SCIENCES↗

Vehicle Integrated Performance Analysis, the VIPA Experience: Reconnecting with Technical Integration

Today's NASA is facing significant challenges and changes. The Exploration initiative indicates a large increase in projects with limited increase in budget. The Columbia report has criticized NASA for its lack of insight and technical integration impacting its ability to provide safety. The Aldridge report is advocating NASA find new ways of doing business. Very early in the Space Launch Initiative (SLI) program a small team of engineers at MSFC were asked to propose a process for performing a system level assessment of a launch vehicle. The request was aimed primarily at providing insight and making NASA a "smart buyer." Out of this effort the VIPA team was created. The difference between the VIPA effort and many integration attempts is that VIPA focuses on using experienced people from various disciplines and a process which focuses them on a technically integrated assessment. Most previous attempts have focused on developing an all encompassing software tool. In addition, VIPA anchored its process formulation in the experience of its members and in early developmental Space Shuttle experience. The primary reference for this is NASA-TP-2001-210092, "Launch Vehicle Design Process: Characterization, Technical Integration, and Lessons Learned," and discussions with its authors. The foundations of VIPA's process are described. The VIPA team also recognized the need to drive detailed analysis earlier in the design process. Analyses and techniques typically done in later design phases, are brought forward using improved computing technology. The intent is to allow the identification of significant sensitivities, trades, and design issues much earlier in the program. This process is driven by the T-model for Technical Integration described in the aforementioned reference. VIPA's approach to performing system level technical integration is discussed in detail. Proposed definitions are offered to clarify this discussion and the general systems integration dialog. VIPA's capabilities and process can now be used to significantly enhance the development and monitoring of realizable project requirements. This is done through the use of VIPA's V-model. Starting with a given concept, VIPA's assessment validates the concept's stated performance, identifies significant issues either with the concept or the requirements, and then re-integrates these issues to determine impacts. This process is discussed along with a description of how it may be integrated into a program's insight and review process. The VIPA process has been employed successfully on several projects including SLI, Orbital Space Plane (OSP), and several heavy lift concepts for Exploration. It has also been proposed for use on the Jupiter Icy Moon (JIMO) spacecraft. The VIPA process has gained favor with both engineering and project organizations for being responsive and insightful. Selected results from these assessments will be presented.

McGhee, David S.↗

Effects on Task Performance and Psychophysiological Measures of Performance During Normobaric Hypoxia Exposure

Human-autonomous systems have the potential to mitigate pilot cognitive impairment and improve aviation safety. A research team at NASA Langley conducted an experiment to study the impact of mild normobaric hypoxia induction on aircraft pilot performance and psychophysiological state. A within-subjects design involved non-hypoxic and hypoxic exposures while performing three 10-minute tasks. Results indicated the effect of 15,000 feet simulated altitude did not induce significant performance decrement but did produce increase in perceived workload. Analyses of psychophysiological responses evince the potential of biomarkers for hypoxia onset. This study represents on-going work at NASA intending to add to the current knowledge of psychophysiologically-based input to automation to increase aviation safety. Analyses involving coupling across physiological systems and wavelet transforms of cortical activity revealed patterns that can discern between the simulated altitude conditions. Specifically, multivariate entropy of ECG/Respiration components were found to be significant predictors (p< 0.02) of hypoxia. Furthermore, in EEG, there was a significant decrease in mid-level beta (15.19-18.37Hz) during the hypoxic condition in thirteen of sixteen sites across the scalp. Task performance was not appreciably impacted by the effect of 15,000 feet simulated altitude. Analyses of psychophysiological responses evince the potential of biomarkers for mild hypoxia onset.The potential for identifying shifts in underlying cortical and physiological systems could serve as a means to identify the onset of deteriorated cognitive state. Enabling such assessment in future flightdecks could permit increasingly autonomous systems-supported operations. Augmenting human operator through assessment of cognitive impairment has the potential to further improve operator performance and mitigate human error in safety critical contexts. This study represents ongoing work at NASA intending to add to the current knowledge of psychophysiologically-based input to automation to increase aviation safety.

Stephens, Chad↗

Wipes, Coatings, and Patches for Detecting Hydrazines

Three color-indicating devices have been conceived as simple, rapid, inexpensive means of detecting hazardous liquid and gaseous substances in settings in which safety is of paramount concern and it would be too time-consuming or otherwise impractical to perform detection by use of such instruments as mass spectrometers. More specifically, these devices are designed for detecting hypergolic fuels (in particular, hydrazines) and hypergolic oxidizers in spacecraft settings, where occasional leakage of these substances in liquid or vapor form occurs and it is imperative to take early corrective action to minimize adverse health effects. With suitable redesign, including reformulation of their color indicator chemicals, these devices could be adapted to detection of other hazardous substances in terrestrial settings (e.g., industrial and military ones). One of the devices is a pad of a commercially available absorbent material doped with a color indicator. The absorbent material is made from 70 percent polyester and 30 percent nylon and can absorb about eight times its own weight of liquid. The color indicator is a mixture of conventional pH color indicator chemicals. Hydrazine and monomethyl hydrazine, which are basic, cause the color indicator to turn green. In the original intended application, the pad is wiped on a space suit that is suspected of having been exposed to leaking monomethyl hydrazine during a space walk, before the wearer returns to the interior of the spacecraft. If the wiped surface is contaminated with hydrazine, the pad turns green. In addition, the pad absorbs hydrazine from the wiped surface, thereby reducing or eliminating the hazard. Used pads, including ones that show contamination by hydrazine, can be stored in a sealed plastic bag for subsequent disposal. The second device, which has been proposed but not yet developed, would comprise a color indicator material in the form of either a coating on a space suit (or other protective garment) or a coating on a sheet that could be easily attached to and detached from the protective garment. The coating material would be a hydrogel doped with a suitable pH indicator. The hydrogel would also serve to maintain a level of moisture needed to support the chemical reaction mentioned in the next sentence. In addition to changing color to indicate the presence of any hypergolic fuel (which is basic) or hypergolic oxidizer (which is acidic) that might splash on the space suit, the pH indicator would also react with the hypergolic fuel or oxidizer and thereby bind it. The third device is a color dosimeter for detecting hydrazine liquid or vapor coming from microscopic leaks. This device is designed to satisfy several requirements specific to its original intended use in the auxiliary power unit of the space shuttle. These requirements include stability under vacuum, stability at moderate temperature, fast and irreversible change in color upon exposure to hydrazine, and visibility of the color change through polyimide tape.

Young, Rebecca↗

Solid-state Architecture Batteries for Enhanced Rechargeability and Safety (SABERS) for Extended Deep Space Applications

Extended duration deep space missions as well as permanent space habitats face numerous technical challenges, key among them is energy generation and energy storage. There are considerable monetary and technical barriers to the generation of power in space. Therefore, it is important to store and be able to access power in an efficient and safe manner over a large number of cycles. Energy storage and in particular, batteries, are vital to the operation of next-generation extraterrestrial shuttles, rovers, habitats and extravehicular activity (EVA) space suits. The performance metrics for extended duration space missions are at least 2 times greater than those set for terrestrial applications such as electric automobiles. Furthermore, safety is essential for operation of space missions particularly involving astronauts such as shuttles, habitats and EVA space suits. Preliminary systems level analysis has indicated that there are five key properties which must be optimized for successful implementation of battery systems. Those five key criteria are: safety, energy density, power, packaging design and scalability. Current state-of-the-art (SOA) lithium-ion batteries can meet or exceed the requirements for certain space applications in the areas of power and scalability, yet are insufficient in the key performance criteria of energy, safety and packaging design. The SABERS concept proposes a battery that meets all five key performance criteria through development of a solid-state architecture battery utilizing high capacity sulfur-selenium cathode and lithium metal anode. The combination of sulfur and selenium offers a balanced energy-to-power density ratio, which can be tailored to the specific application by altering the stoichiometric ratios of sulfur to selenium. This hybrid cathode will be developed by implementing NASA patented holey graphene technology as a highly conductive, ultra-lightweight electrode scaffold. A solid-state electrolyte will be used as a safe, non-flammable replacement to the highly flammable liquid organic electrolytes currently used in SOA lithium-ion batteries. This solid-state lithium-sulfur/selenium cell will be designed into a serial stacking configuration to enable dense packaging of the battery cells. The serial stacking configuration is termed a bipolar stack, which has the advantages of reducing overall cell weight, simplifying the interfaced connections for the cell, and minimizing the cooling requirements for the cell. Lastly, optimization of battery components will occur through a robust and rigorous combination of various computational modeling techniques covering multiple length scales. The expected result will be a fully solid-state battery with operational temperatures up to 150 °C which provides the required energy density, discharge rates, and inherent safety to meet the strict space mission performance criteria. In particular, the wide operational temperature window is required for the large temperature ranges which are experienced across a broad range of potential space missions. This presentation will show initial results that demonstrate the SABERS team has developed a composite carbon-sulfur cathode which exceeds 1100 Wh/kg at a discharge rate of 0.4C, and 804 Wh/kg at a discharge rate of 1C. Additionally, this presentation will show the SABERS team multiscale computational modeling approach and has produced a novel particle dynamics method called Solid Electrolyte Sphere Approximation Model (SESAM). SESAM is on the 1-10 µm scale and provides electromechanical and grain interactions for predictive design guidelines for the experimental team to follow.

Urban Air Mobility (UAM) Vehicles↗

Reducing the Risk of Human Space Missions with INTEGRITY

The INTEGRITY Program will design and operate a test bed facility to help prepare for future beyond-LEO missions. The purpose of INTEGRITY is to enable future missions by developing, testing, and demonstrating advanced human space systems. INTEGRITY will also implement and validate advanced management techniques including risk analysis and mitigation. One important way INTEGRITY will help enable future missions is by reducing their risk. A risk analysis of human space missions is important in defining the steps that INTEGRITY should take to mitigate risk. This paper describes how a Probabilistic Risk Assessment (PRA) of human space missions will help support the planning and development of INTEGRITY to maximize its benefits to future missions. PRA is a systematic methodology to decompose the system into subsystems and components, to quantify the failure risk as a function of the design elements and their corresponding probability of failure. PRA provides a quantitative estimate of the probability of failure of the system, including an assessment and display of the degree of uncertainty surrounding the probability. PRA provides a basis for understanding the impacts of decisions that affect safety, reliability, performance, and cost. Risks with both high probability and high impact are identified as top priority. The PRA of human missions beyond Earth orbit will help indicate how the risk of future human space missions can be reduced by integrating and testing systems in INTEGRITY.

Jones, Harry W.↗

Distributed Coaxial Cable Sensors for In-Situ Condition Based Monitoring of Coal-Fired Boiler Tubes

The increasing contributions of renewable energy sources present new challenges to the operation and maintenance of the existing coal-fired power plants. One of the major operational risks is the unexpected failure of superheater boiler tubes, leading to the most unplanned power plant outrages. The boiler tube failure is difficult to predict due to the harsh operating environments. Therefore, condition-based monitoring (CBM) with a reliable high temperature sensor becomes necessary to produce a meaningful assessment of the health condition of boiler tubes and their remaining lifetime. In this work, the stainless-steel and quartz coaxial cable sensor (SSQ-CCS) is proposed for in-situ distributed monitoring of the boiler tube temperatures in existing coal-fired power plants. Comprehensive tests have been conducted with an in-house testing facility at Clemson University to study and evaluate the sensors’ performance in the temperature range of 100℃ to 600℃. The results indicated that the measurement resolution of the SSQ-CCS sensor is better than 1℃, and the drift is less than 2% over long-period testing. Meanwhile, multi-physics finite element analysis has been conducted to optimize the design and evaluate the safety of the SSQ-CCS temperature sensor under various operational conditions. Based on the performance obtained in the laboratory-scale testing, a field test has been implemented at a power plant. Four SSQ-CCS temperature sensors were installed for in-situ monitoring of the temperatures of a power plant’s superheat tube assembles. The data acquisition system has been successfully set up and collected sensing signals for more than three months. The sensing signals have been post-processed, and the monitored temperature history through the SSQ-CCS temperature sensor has been validated and compared with the conventional high temperature thermal couple data.

Jiao, Xinyu↗

Safety Analysis for the Versatile Test Reactor Conceptual Design

Safety analysis simulations have been carried out using the SAS4A/SASSYS-1 safety analysis code system to update the baseline set of results for the Versatile Test Reactor conceptual design. Results from a previous revision of this work provided input for the Conceptual Safety Design Report summarizing the overall safety basis for the VTR. This work will also support future analyses that will be required for Chapter 13, “Accident Analysis,” of a preliminary safety analysis report. A number of transients have been evaluated based on categories of postulated accident sequences suggested for consideration in NUREG-1537. Ultimately, the full spectrum of event initiators and subsequent accident sequences will be defined through a probabilistic risk assessment of the plant design following the implementation of the Licensing Modernization Project guidelines as described in the VTR Safety Design Strategy. Since that process is ongoing, the present analysis addresses several transients that are expected to be bounding accident scenarios that represent the three key ways to perturb a reactor: through changes to the core inlet temperature, mass flow rate, or reactivity. These correspond to a loss of heat sink (LOHS), loss of flow (LOF) or station blackout (SBO), and transient overpower (TOP), respectively. Both Protected and Unprotected versions of these transients have been evaluated, along with additional transients that include transient overpower with one stuck rod, pump coast-down failures, seismic events, and overcooling events. At the current stage of design, transient simulation results for the Versatile Test Reactor indicate that large safety margins exist for many event initiators. However, several “enabling” assumptions have been made, in terms of both design features and design limits, in order to perform the analyses; and these assumptions will need to be revised as the design matures. In addition, a larger spectrum of events needs to be evaluated as part of the on-going probabilistic risk assessment process.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Respirator Cartridge Performance on Mixed Vapors from Hanford Tank Headspaces and Exhausters - 20427

Between 2016 and 2018, the Hanford Tank Operations Contractor - Washington River Protection Solutions (WRPS) - conducted a series of tests of air-purifying respirator (APR) chemical cartridges commonly used at Hanford tank farms to determine the period of time for which the cartridges would provide adequate performance when used in APRs and powered-air-purifying respirators (PAPRs) to protect workers when exposed to a mixture of vapors exiting tank headspaces. Although cartridge manufacturers provide service life estimating tools for individual chemical compounds, the projected performance of these cartridges on complex vapor mixtures is not available, and the adequacy of APRs for tank farm applications represents an important workforce concern. The Occupational Safety and Health Administration identifies cartridge testing as a valid approach for establishing cartridge service life. The primary function of the WRPS Cartridge Test Program was to obtain objective data to determine service lives for the APR and PAPR cartridges used at Hanford tank farms. WRPS contracted with Pacific Northwest National Laboratory to analyze the test data and offer an independent analysis of and recommendations based on respirator cartridge performance. A total of 28 APR and 10 PAPR cartridge tests were conducted between 2016 and 2018 on 12 different tank headspaces and tank farm exhauster slipstreams. Two APR cartridges from SCOTT (now 3M) and two PAPR cartridges from MSA Safety, Inc. and 3M were evaluated using a cartridge testing system specifically designed to measure and monitor test conditions and sample cartridge inlet and outlet vapor streams for important chemical compounds. Testing focused on analysis of approximately 61 tank vapor chemicals of potential concern (COPCs) that have been previously detected in tank vapors at levels above 10% of their occupational exposure limits (OELs). Each test was conducted over 16 hours of run time. Evidence of chemical breakthrough was assessed by comparing inlet and outlet COPC concentrations over the duration of each test. The breakthrough threshold was normally defined as exceeding 10% of the compounds OEL at the cartridge outlet. Ammonia breakthrough was observed in a majority of the cartridge tests and occurred earlier than breakthrough of any other chemical compound. Several other COPCs did exhibit breakthrough behavior, including mercury, 1,3-butadiene, furan, 2,5 dihydrofuran, and N-nitrosodimethylamine (NDMA), but only in a very limited number of cartridge tests and only after ammonia breakthrough had occurred. In addition, tests results suggest that breakthrough of some of these COPCs may have been affected by competition with and breakthrough of other non-COPC organics, such as ethanol and acetone, with substantially lower toxicological hazard. Comparison of cartridge manufacturers' service life estimates with the experimentally derived breakthrough times indicates that manufacturers' estimates are generally conservative, even in the presence of the complex mixed vapor streams experienced in these tests. With consideration of appropriate safety margins, these results provide valuable insights on cartridge performance to inform industrial hygiene professionals in establishing appropriate cartridge change-out schedules for APR and PAPR use in the Hanford tank farms. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Experimental Covariance Determination for Critical Integral Experiments

Integral benchmarks for criticality safety and nuclear data validation require expensive uncertainty quantification studies. In general, uncertainty quantification techniques ignore correlations between experiments and shared parts. Experiments, such as the TEX (Thermal/Epithermal eXperiments) campaigns, consist of many shared parts, such as the ‘Jemima’ HEU fuel plates, which create a strong correlation in their uncertainties. While these correlations are known to exist, they are often not estimated due to the complexity of such calculations. This paper describes an intuitive method of determining the covariance for each of the experimental components, providing a correlation for each family of parts across the multiple cases examined within a benchmark. A proof-of-principle study using the TEX-HEU experimental campaign was performed and verified that the correlations can be calculated with information commonly found in the ICSBEP (International Criticality Safety Benchmark Evaluation Project) benchmarks. This study showed that the introduction of model and experimental covariances reduces the χ 2 per degree of freedom from 2.203 to 1.179, indicating that the omission causes overly pessimistic bias quantifications. This technique can be seamlessly integrated to current benchmark evaluations as well as reevaluations of legacy benchmarks.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Protection of electrical and electronic equipment against lightning indirect effects on the Airbus A340 wing

The provisions applied to the Airbus A340 wing wiring against lightning indirect effects are presented. The construction and installation of the wiring's shielding systems are described, and the analysis and tests performed to determine the effectiveness of the measures taken are discussed. A first evaluation of the results of the theoretical analysis together with the provisional results of tests indicate a sufficient safety margin between required and achieved protection levels.

Spiller, Olaf↗

System Safety Analysis of Complex NASA Systems with Model-Based Engineering

The emergence of model-based engineering is transforming design and analysis methodologies [5]. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses [1], GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System

NASA↗

System Safety Analysis of Complex NASA Systems with Model Based Engineering

The emergence of model-based engineering is transforming design and analysis methodologies [5]. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses [1], GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System

Model Based Engineering↗

System Safety Analysis of Complex NASA Systems with Model-Based Engineering (REV B)

The emergence of model-based engineering is transforming design and analysis methodologies. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses, GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System Safety Engineering for NASA if adequate modeling processes and environment are established.

NASA↗