Search NASA⌕ Search

SEARCH · Search NASA

Results for “assurance case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Highly Available Nuclear Power for Mission-Critical Applications

Some energy consumers require power on an anytime, all-year-round basis with a high level of certainty, including defense installations, isolated communities, and some industrial processes. For these customers, interruptions in electricity or heat can mean substantial financial loss or even loss of life. In the absence of grid-scale energy storage, a high level of power availability can be accomplished only through the robustness and redundancy of power generators. The NuScale small modular reactor design is well suited to provide highly available power because of several features related to both the nuclear steam supply system and the overall plant design. In analogy to Redundant Array of Independent Disks (RAID) systems used to provide highly reliable data storage, a NuScale plant can assure sustained power generation by virtue of its Redundant Array of Integral Reactors (RAIR).This paper describes the NuScale RAIR plant features and summarizes the results of a rigorous analysis of RAIR availability as a function of power or, conversely, the RAIR plant output power as a function of power availability. The analysis utilized the Matrix Laboratory code (MATLAB) and included probability distributions for the frequency and duration of module outages due to planned and unplanned events. Further, the study evaluated the impact of implementing turbine bypass rather than module shutdown and using one or more modules to supply house loads in the case of loss of off-site power (LOOP). Availability results are presented for a 12-module RAIR plant with and without turbine bypass enabled during a LOOP and for different possible connections to the off-site power distribution grid and dedicated service loads. Results indicate that a very high level of availability can be achieved at relatively high power output levels, regardless of turbine bypass and dedicated load connection, compared to the operating fleet.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

FORCE Regression Testing

Via programs including the Light Water Reactor Sustainability and Integrated Energy Systems, the U.S. Department of Energy has invested in the Framework for Optimization of ResourCes and Economics (FORCE) software framework (Idaho National Laboratory 2024a) for the technical and economic analysis of nuclear-integrated energy systems (IES). Nuclear IES expand the use of nuclear from traditional baseload electricity generation to a flexible and adaptive source of combined heat and power. Nuclear heat can be used in the production of a variety of energy currencies such as hydrogen and ammonia as well as other heat applications including water desalination and district heating. FORCE is designed with the intent to provide interconnected analysis tools that enable the accurate technical and economic assessment of specific nuclear IES configurations for individual energy markets. FORCE consists of three main analysis pathways: HYBRID (Idaho National Laboratory 2024b), which contains high-resolution physical models for IES; Holistic Energy Resource Optimization Network (HERON) (Idaho National Laboratory 2024c), which analyzes IES long-term economic viability; and Optimization of Real-time Capacity Allocation (ORCA) (Idaho National Laboratory 2024d), designed for real-time control of IES via digital twins and optimal decision making, including autonomous and remote operation research. Development of the FORCE ecosystem is guided by three pillars: capability, which assures that the computational requirements of IES analysis are met by the software tools; reliability, which provides for consistent code performance and expected behaviors; and accessibility, which lowers the barrier to entry for using the software and accelerates analysis by users beyond the FORCE primary developers. Reliability of the FORCE ecosystem is established according to the American Nuclear Society?s Nuclear Quality Assurance (NQA-1) program [American Society of Mechanical Engineers 1982], with specific levels of software quality assurance (SQA) within NQA-1 applied to each software tool in FORCE. As the tools within FORCE have matured, some integration algorithms to accurately connect the software tools for holistic analysis have been developed and deployed within the FORCE software repository. In accordance with NQA-1 standards, regression tests are required to guarantee the software performs consistently even when new capabilities are added to the software. In this report, we document the deployment of both unit tests, which test the consistent behavior of small pieces of the FORCE code base, as well as integration tests, which test the consistent performance of full use cases for the FORCE integration algorithms. We further document the encapsulation of these tests within a test harness, which collectively checks for each successful test completion on demand. Finally, we document the automation of the test harness using GitHub Actions [GitHub 2024], which require all tests succeed before any new capability or other changes can be added to the FORCE integration software

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Model-based, in-situ, non-destructive qualification and certification of parts made by autonomous additive manufacturing

To address the significant productivity challenges associated with the qualification and certification (Q&C) tasks of additively manufactured (AM) parts, which have traditionally relied on rigorous post‐build inspection and testing, we propose an integrated framework that combines model‐based qualification and certification (MBQ&C) with autonomous additive manufacturing (AAM). MBQ&C employs high‐fidelity predictive models, developed within the Integrated Computational Materials Engineering (ICME) paradigm, to simulate process–structure–property–performance relationships for assessing a part’s fitness for use. Since predictive models are commonly machine learning (ML)-based or reduced-order surrogates of validated physics models, they run efficiently, enabling timely inference. In parallel, the self-driving AAM utilises ML-based adaptive, closed‐loop control strategies to avoid, mitigate, or repair defects and anomalies during fabrication, thereby increasing the likelihood of producing acceptable parts. A key feature of the combined AAM-MBQ&C framework is that predictive models explicitly incorporate defects or anomalies that persist after the build, using instance-specific data captured via in-situ sensing. This customisation enables a build‐specific assessment of fitness for use, rather than relying on nominal or generic parameters. Such individualised evaluation provides a robust basis for Q&C-related acceptance decisions relating to each build. Additionally, the rapid solution capabilities of ML or reduced-order models enable the determination of a part’s suitability for service shortly after build completion. As the framework matures, it has the potential to substantially reduce reliance on conventional point‐design approaches—such as time‐consuming post‐build computed tomography scanning and costly destructive testing. Thus, the AAM-MBQ&C framework represents a transformative, scalable strategy for quality assurance of AM components, as parts produced within a stable, validated, and certified envelope can be certified with reduced testing. Key benefits include: (1) significant gains in Q&C productivity through efficient, model-centric assessment; (2) performance-based classification of defects into critical and non-critical categories; (3) the ability to predict potential deviations in the performance of parts affected by real-time, adaptive process control interventions relative to those produced under a certified process, and (4) the enabling of virtual Q&C for service environments that are difficult, hazardous, or impractical to access or reproduce experimentally. Collectively, these capabilities strengthen the business case for AM, particularly for high‐consequence and mission‐critical applications. Finally, although this work focuses on powder-based AM, the proposed techniques could be extended to AM processes employing alternative feedstock forms.

Gunasegaram, Dayalan↗
DOE OSTI2025

Software Quality Assurance for the MOOSE-Based Open-Source Multiphysics Code Cardinal - An Expanded CI Testing Suite

Cardinal is a wrapping of the GPU-oriented spectral element Computational Fluid Dynamics (CFD) code NekRS and the Monte Carlo particle transport code OpenMC within the Multiphysics Object-Oriented Simulation Environment (MOOSE). Cardinal provides high-resolution thermal-hydraulics and/or radiation transport feedback to MOOSE multiphysics simulations. Multiphysics feedback is implemented in a geometry-agnostic manner which eliminates the need for rigid one-to-one mappings. A generic data transfer implementation also allows NekRS and OpenMC to couple to any MOOSE application, enabling a broad set of multiphysics capabilities. Cardinal simulations can also leverage combinations of MPI, OpenMP, and GPU resources. Cardinal continuous development and improvement efforts have led to the software being considered as a high-fidelity design and licensing tool for key areas of nuclear reactor relevant physics, including neutron transport, fluid flow, heat transfer, and mechanical processes. The fast development and expansion of the software from a pure R&D framework towards its application in the nuclear industry and regulation require a focus on developing, enhancing and, maintaining Cardinal’s software quality through strict adherence to a Software Quality Assurance (SQA) framework and SQA program. To facilitate compliance with SQA standards, the Cardinal SQA Program has been initiated during Fiscal Year 2023 (FY23). During the development of the Cardinal SQA Program, multiple gaps have been identified. These gaps are primarily related to model verification and code pedigree as they relate to the use of Cardinal as a safety analysis tool. These gaps have been captured in a report published in 2023. A second report highlighted the progress made during Fiscal Year 2024 (FY24) and described Argonne’s effort to document and integrate software verification within Cardinal’s software development process. This report documents a snapshot of the verification test cases currently available for Cardinal and NekRS in their assimilation into a Continuous Integration (CI) platform. Following the CI practice permits the integrating of source code changes frequently and ensuring that the integrated codebase clears the verification testing for the software. It should be noted that the SQA program itself, including the program plans, procedures, configuration management, and testing strategies, need to be developed in a future step of this task.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Thermomechanical analysis and modeling of involute-shaped fuel plates using the Cheverton–Kelley experiments for the High Flux Isotope Reactor

Three research reactors with involute-shaped fuel plates are pursuing conversion from highly enriched uranium to low-enriched uranium fuel. Various core design and safety evaluation studies are essential to assess the feasibility of the conversion. The use of 3D computational multiphysics codes is being explored in these analyses and therefore they must undergo a thorough evaluation and quality assurance process due to their potential impact on nuclear safety. Here, the Cheverton and Kelley physical tests performed in the late 1960s to investigate the deflections of HFIR’s outer plate under uniform pressure and temperature fields are simulated by employing commercially available computational codes, with the goals to (1) verify and validate the models and numerical solvers implemented in the codes for thermomechanical analysis of involute reactor plates and (2) to develop a benchmark computational test to evaluate future versions of existing software or newly developed computational codes. The results of the simulations showed good agreement with each other as well as against the Cheverton–Kelley experimental data. Some minor deviations were observed for a few multiphysics cases and their potential origins and impact on the analysis results is investigated in the paper. The validated models increase the confidence in using multiphysics codes to evaluate existing or new LEU designs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2025

Building a new multiphysics workflow in MOOSE: application to tritium migration, trapping and advection in TMAP8

Fusion devices are anticipated to produce and consume several kilograms of tritium per year. This rare fuel resource is both highly mobile and radioactive, making tracking inventories a priority for operation and safety. The fusion safety program at the Idaho National Laboratory has been developing the Tritium Migration and Analysis Program (TMAP), of which the latest version is a MOOSE-based application. TMAP8 is verified against its predecessors and possesses additional multi-dimensional tritium migration modeling capabilities. As we extend its capabilities towards both whole device (in multiple dimensions) and whole plant (with multiple components) simulations, the syntax of inputs must become compact, descriptive, compatible with quality assurance processes, and as error-proof as achievable. The new Physics system developed MOOSE can set up equations and instantiating them on plant components. The system permits the automatic definition of complex discretization with a consistency between object parameters achieved programmatically. The Physics system can currently instantiate the equations for heat conduction and Navier Stokes weakly compressible flow. In MOOSE-terms, it automates the definition of kernels, boundary conditions, and several core and helper materials and fields. As part of this effort, Physics classes were developed for tritium migration, trapping and advection within either a multi-dimensional Navier Stokes fluid dynamics simulation, or a 1D thermal hydraulics piping system. In this presentation, we will showcase the new syntax, its application to several verification and validation cases which were already studied using the classical TMAP8 syntax, and a demonstration of the new coupling capabilities for the migration of tritium into blanket coolant channels and the subsequent advection into the coolant loop.

70 - PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2021

An Open-Source Virtual Testbed for a Real Net-Zero Energy Community

Net zero energy communities (NZECs) are critical to ensure sustainability and resilience of modernized power systems. System modeling helps overcome technical challenges in designing and operating NZECs. In this paper, we present the modeling work based on a real NZEC. Two sets of models are developed: higher-fidelity physics-based models considering the interaction between subsystems of the studied NZEC and capturing fast-dynamics; and lower-fidelity data-driven models requiring less resource to establish and/or run. All models are validated against measurements from this real NZEC. In addition, we create a simulation framework which streamlines the processes for simulation and thus allows using developed models to form a virtual testbed. To demonstrate the usage of the virtual testbed, a case study is conducted where a building-to-grid integration control is evaluated via simulation. The evaluation results suggest that the tested control significantly smooths the power draw of the studied community and doesn’t sacrifice the thermal comfort to a great extent.

Huang, Sen↗
DOE OSTI2021

Task 12 Sustainability - Methodological Guidelines on Net Energy Analysis of Photovoltaic Electricity (2nd Edition)

Net Energy Analysis (NEA) is a structured, comprehensive method of quantifying the extent to which a given energy source is able to provide a net energy gain (i.e., an energy surplus) to the end user, after accounting for all the energy losses occurring along the chain of processes that are required to exploit it (i.e., for its extraction, processing and transformation into a usable energy carrier, and delivery to the end user), as well as for all the additional energy 'investments' that are required in order to carry out the same chain of processes. However, this general framework leaves the individual practitioner with a range of choices that can affect the results and thus, the conclusions of a NEA study. The current IEA PVPS guidelines were developed to provide guidance on assuring consistency, balance, and quality to enhance the credibility and reliability of the results from photovoltaic (PV) NEAs. The guidelines represent a consensus among the authors - PV NEA experts in North America and Europe - for assumptions made on PV performance, process inputs and outputs, methods of analysis, and reporting of the results. Guidance is given on photovoltaic-specific parameters used as inputs in NEA and on choices and assumptions in inventory data analysis and on implementation of modelling approaches. A consistent approach towards system modelling, the functional unit, the system boundaries and allocation aspects enhance the credibility of PV electricity NEA studies and enables balanced NEA-based comparisons. Specifically, "apples-to-oranges" comparisons of different energy carriers (e.g., fuels vs. electricity) are not methodologically sound and are to be avoided in all cases; also, any comparison across renewable and non-renewable electricity generation technologies must clearly point out the intrinsically short-term nature of the NEA viewpoint, which does not capture the long-term sustainability implications of renewable vs. non-renewable primary energy harvesting and use: non-renewable primary energy resources are depleted and finally exhausted (irrespective of the size of the EROI), while renewable primary energy resources are not. This document provides an in-depth discussion of a common metric of NEA, namely the energy return on investment (EROI), and how this is to be interpreted vis-a-vis the deceptively similar-sounding metrics in the field of Life Cycle Assessment (LCA): cumulative energy demand (CED) and non-renewable cumulative energy demand (nr-CED) per unit output. Specifically, a number of key differences are highlighted between these metrics as applied to electricity production systems, which are listed in Table S-1.

14 SOLAR ENERGY↗
DOE OSTI2020

Digital Biosecurity Pilot Project

Security models for the bioeconomy have largely been developed on risk profiles borrowed from the financial industry and, in some cases, industrial control systems. The bioeconomy, however, has unique characteristics that require domain-specific knowledge of the risks to environmental, health and economic impact from directly targeted attacks. Key questions need to be assessed and answered for any facility engaged in bioproduction. These include: how much technical information must the attacker possess in order to target a specific process or facility? Which processes cause the largest economic impact if disrupted? Can an attacker lead companies down the wrong path of research, leading to irrecoverable losses of time, resources and capital? Can attackers disrupt venture capital strategies and affect financial returns? What are the resources required to attack key workflows, and subsequently what is the cost of defense? What strategies are effective against such attackers, and what are their cost? Can government provide an active role in assurance of material, process and results for critical bioeconomic infrastructure?

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2026

Battery Energy Storage System (BESS) End-of-Performance and Decommissioning Considerations [Slides]

This presentation provides a comprehensive overview of end-of-performance and decommissioning considerations for large-scale Battery Energy Storage Systems (BESS). It outlines expected system lifespans, midterm assessment needs, and pathways for extending operational life through augmentation or repowering. The presentation details regulatory requirements that govern decommissioning plans, cost estimates, financial assurance mechanisms, and performance obligations across multiple jurisdictions. It further examines end-of-life equipment management, including recycling, waste handling, transportation, and environmental compliance. Designed to support Malawi's electricity-sector institutions, the presentation highlights how planning for decommissioning and environmental stewardship can be integrated early in project development to ensure safe, financially accountable, and environmentally responsible BESS system retirement.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Impact Fracture and Fragmentation of Glass via the 3D Combined Finite-Discrete Element Method

A driving technical concern for the automobile industry is their assurance that developed windshield products meet Federal safety standards. Besides conducting innumerable glass breakage experiments, product developers also have the option of utilizing numerical approaches that can provide further insight into glass impact breakage, fracture, and fragmentation. The combined finite-discrete element method (FDEM) is one such tool and was used in this study to investigate 3D impact glass fracture processes. To enable this analysis, a generalized traction-separation model, which defines the constitutive relationship between the traction and separation in FDEM cohesive zone models, was introduced. The mechanical responses of a laminated glass and a glass plate under impact were then analyzed. For laminated glass, an impact fracture process was investigated and results were compared against corresponding experiments. Correspondingly, two glass plate impact fracture patterns, i.e., concentric fractures and radial fractures, were simulated. The results show that for both cases, FDEM simulated fracture processes and fracture patterns are in good agreement with the experimental observations. The work demonstrates that FDEM is an effective tool for modeling of fracture and fragmentation in glass.

42 ENGINEERING↗
DOE OSTI2023

Passive Safety System Reliability Analysis: Methodology, Application, and Results

Many advanced reactor designs rely on passive systems to provide assurance that certain safety functions, such as reactivity control and reactor heat removal, are maintained during transient scenarios. The performance of these systems is sensitive to boundary and environmental conditions and can lead to functional failure, which is the inability of the system to perform as intended even without any physical failures. Additionally, conditions can cause the passive systems to operate in an intermediate or degraded state. These operational modes of passive systems and their overall reliability can be difficult to capture in traditional probabilistic frameworks where discrete operating modes are assumed or time-dependent boundary conditions are not accounted for. Novel strategies and methods are needed to be able to capture the reliability of these passive systems and their impact on facility safety. The current abstract provides a summary of such a methodology and examples of its use in a case study, the GE Hitachi (GEH) PRISM probabilistic safety assessment (PSA), and the U.S. Department of Energy (USDOE) Versatile Test Reactor (VTR) PSA.

Bucknor, M.↗
DOE OSTI2023

Application of Electromagnetic Methods for Reservoir Monitoring with Emphasis on Carbon Capture, Utilization, and Storage

The Controlled-Source ElectroMagnetic (CSEM) method provides crucial information about reservoir fluids and their spatial distribution. Carbon dioxide (CO2) storage, enhanced oil recovery (EOR), geothermal exploration, and lithium exploration are ideal applications for the CSEM method. The versatility of CSEM permits its customization to specific reservoir objectives by selecting the appropriate components of a multi-component system. To effectively tailor the CSEM approach, it is essential to determine whether the primary target reservoir is resistive or conductive. This task is relatively straightforward in CO2 monitoring, where the injected fluid is resistive. However, for scenarios involving brine-saturated (water-wet) or oil-wet (carbon capture, utilization, and storage—CCUS) reservoirs, consideration must also be given to conductive reservoir components. The optimization of data acquisition before the survey involves analyzing target parameters and the sensitivity of multi-component CSEM. This optimization process typically includes on-site noise measurements and 3D anisotropic modeling. Based on our experience, subsequent surveys tend to proceed smoothly, yielding robust measurements that align with scientific objectives. Other critical aspects to be considered are using magnetotelluric (MT) measurements to define the overall background resistivities and integrating real-time quality assurance during data acquisition with 3D modeling. This integration allows the fine tuning of acquisition parameters such as acquisition time and necessary repeats. As a result, data can be examined in real-time to assess subsurface information content while the acquisition is ongoing. Consequently, high-quality data sets are usually obtained for subsequent processing and initial interpretation with minimal user intervention. The implementation of sensitivity analysis during the inversion process plays a pivotal role in ensuring that the acquired data accurately respond to the target reservoirs’ expected depth range. To elucidate these concepts, we present an illustrative example from a CO2 storage site in North Dakota, USA, wherein the long-offset transient electromagnetic method (LOTEM), a variation of the CSEM method, and the MT method were utilized. This example showcases how surface measurements attain appropriately upscaled log-scale sensitivity. Furthermore, the sensitivity of the CSEM and MT methods was examined in other case histories, where the target reservoirs exhibited conductive properties, such as those encountered in enhanced oil recovery (EOR), geothermal, and lithium exploration applications. The same equipment specifications were utilized for CSEM and MT surveys across all case studies.

Barajas-Olalde, César↗
DOE OSTI2021

Verification Testing For Solid-Element Material Models 11-19 in DYNA3D/ParaDyn

This technical report documents the creation and implementation of verification tests for solid-element material models 11 through 19 available in DYNA3D/ParaDyn. The verification tests covered all aspects of each material model, except for the Weibull distribution functionality in material models 15 and 19. General test cases were created to verify the elastic and plastic behavior of the material models. Other additional tests were developed to examine the intricacies of each material model. Each test involved the use a kinematic load case and specification of material parameters necessary to activate corresponding features of the material model. The load cases prescribed the full time history of the kinematic motion for the solid elements, and these loads are independent of the material model or element formulation. When possible, closed form solutions were then derived for each verification test in a continuum setting. The DYNA3D simulations for each test were carried out over a unit time interval, t ϵ [0, 1], and the as implemented DYNA3D response was compared to the closed form solutions evaluated at discrete points in time. A relative error measure was determined for each test to justify the proper implementation of the material model. The relative errors comparing the DYNA3D solution to the analytical solution were, in general, on the order of machine precision except where noted. This signifies the proper implementation of solid-element material models 11-19. In the development of these verification tests, six bugs were found and fixed in the source code. Additionally, this work generated eighteen DYNA3D input decks and answer extraction scripts in the DYNA3D/ParaDyn Software Quality Assurance test suite, which are comprised of a total of 285 solid-element tests. Testing for each material model utilizes two input decks and answer extraction scripts, where one focuses on the linear elastic response and the other examines the inelastic and remaining functionalities of the material model. In total, this work added 285 individual verification test problems in the DYNA3D/ParaDyn test suite.

42 ENGINEERING↗
DOE OSTI2021

Quantitative Risk Analysis of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants using IRADIC Technology

This report documents the activities performed by Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) Risk Assessment project. In FY-2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems (IRADIC technology) was proposed for this strategy, which aims to (1) provide a best-estimate risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the High Safety Significant Safety-related (HSSSR) DI&C systems, (2) develop an advanced risk assessment technology to support transition from analog to DI&C technologies for nuclear industry, (3) assure the long-term safety and reliability of vital HSSSR DI&C systems, (4) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the IRADIC technology is instructive for nuclear vendors and utilities to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify responding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the individual level, system level, and plant level, (4) providing insights and suggestions on designs to manage the risks; thus, to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). In this report, an approach for performing software CCF analysis, given limited data, is developed and demonstrated using a case study of a highly redundant digital reactor trip system. Consequence analysis is also performed based on different accident scenarios. Results indicate that plant modernization including the improvement of HSSSR DI&C systems will make great benefits to plant safety by providing more safety margins to accident management. In addition, a novel approach is proposed in this report for the quantification of software hazards when sufficient operational and testing data available. The method incorporates software development quality as well as strong analysis techniques to identify and link software defects to potential failure modes. The approach includes both semantic and test-based analysis to detect failures that can exist in different stages of the software development life cycle. This method is applied to an advanced human system interface relevant to reactor trip safety developed from the APR 1400 design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Flammable Gas Generation and Control at the Idaho Completion Project Legacy Combustible Gas Generation - 20191

On April 11, 2018, four drums containing transuranic waste at the Idaho National Laboratory underwent over-pressurization, ejecting their lids and spreading radiological waste within a facility. An investigation has found that waste in the drums generated methane gas, which contributed to the event. Subsequent to the investigation, the potential for drums to have methane and other flammable analytes whose concentrations could approach or exceed the lower flammability limit (LFL) and the adequacy of the controls to prevent or mitigate a possible deflagration was evaluated. An extensive review of the historical records was performed to determine how many drums exceed the LFL. The historical record identified a small quantity of drums that exceeded the LFL for xylene, hydrogen, and methane. The primary codified applicable code or standard for handling drums is 29 CFR 1910.120 (j) 'Handling Drums and Containers.' It is used throughout the commercial and government sector. This code is integrated throughout the Fluor Idaho safety management programs and procedures to control the Standard Industrial Hazards (SIHs) associated with drum and container handling. Example requirements include: - Drums and containers are inspected, and their integrity assured prior to being moved. - Site operations are organized to minimize the amount of drum or container movement. - When there is a reasonable possibility of flammable atmospheres being present, material handling equipment and hand tools are of the type to prevent sources of ignition. Drums and containers under pressure, as evidenced by bulging or swelling, are not moved until the cause for excess pressure is determined and appropriate containment procedures have been implemented to protect employees from explosive relief of the drum. Drums which exceed the WIPP FGA limit have NCRs associated with them. Once a drum fails flammable gas sampling, an NCR is initiated. The NCR drives placement into NCR dense pack rows. A standing order drives placement of the FGA failures to a single planer segregation location. These drums are not allowed for further processing or shipment until the NCR has been cleared. Once in the single planer rows, follow-up FGA testing is performed by CCP. The NCR is dispositioned by follow-up sampling occurring after adequate time has been provided for the gas to diffuse through the filter assembly, or, in some cases, the drums are repackaged into additional drums to reduce the source term. To date, the ICP project has performed approximately 1.5 million drums moves without a deflagration event due to combustible gas generation. Flammable gas generation in a transuranic waste drum is not unique to the ICP but is common across the DOE complex. Based on the experience at Idaho, application of industry standards is sufficient to control the risk of drum deflagration due to drum movements. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

User Access to Scientific Facilities via 5G: A Cyber Security Thought Experiment

5G is more than an over-the-air radio technology upgrade. It is a strategy to extend Mobile Network Operator service offerings beyond traditional voice, instant messaging and Internet access. 5G Mobile Network Operators will offer new telecommunication services that include enhanced guarantees of confidentiality, integrity and availability. How could such services change the way Science collaborations connect scientists to supercomputers and other scientific facilities? Current scientific collaborations implicitly trust cloud service providers to securely store and process data. The perceived risks of outsourcing Science data security are counterbalanced by assurances that cloud providers operate at a scale that allows them to implement security measures impractical for Science collaborations (e.g. continuous system administrator behavioral monitoring and strict individual separation of duties). If that is true for a cloud service provider like Amazon Web Services (2018 revenue: $25.7 billion), could it also be true for Mobile Network Operators like Verizon Wireless (2018 revenue: $91.7 billion) or AT&T Mobility (2018 revenue: $71.3 billion)? DOE Leadership Class supercomputer facility users currently access them from the public Internet via Secure Shell. The sponsors and operators of the supercomputer facilities have determined that the public Internet path between the Scientist’s Device and the Login Node does not natively provide enough confidentiality or integrity to protect those communications. Therefore, the facilities achieve additional confidentiality and integrity by requiring Secure Shell encryption across those untrusted network paths. Using 5G Network Slice technology, a Mobile Network Operator may offer communication services between supercomputer users and facilities that natively provide confidentiality and integrity guarantees. Sponsors and operators of supercomputer facilities may determine that these guarantees provide enough confidentiality and integrity to protect those communications. If so, a 5G Network Slice could replace an SSH session running over the public Internet. Finally, this use case could be extended to other Office of Science user facility access requirements. Consider microscopy instruments at (e.g.) the Center for Nanoscale Materials or the Environmental Molecular Sciences Laboratory. The embedded systems controlling such instruments may not always support encrypted network access technologies like SSH. 5G Network Slices may offer an alternative to current VPN or SSH tunneling techniques, with additional benefits like guaranteed minimum bandwidth.

5G↗
DOE OSTI2024

Verification of RESRAD-OFFSITE Code (V.4)

This report documents the verification of RESRAD-OFFSITE Version 4.0 and describes, where necessary, the verification of the following: • The data comprising the standard dose and risk coefficient libraries in the RESRAD database files Master_dcf_ICRP07.mdb and Master_dcf_2k.mdb. • The extraction and transfer of the data from the selected database file to the computational code by the RESRAD-OFFSITE 4.0 interface, ResOWin.exe. • The different processes that are modeled by the main computational code in RESRAD OFFSITE 4.0, ResOMain.exe. • The data displayed in the graphical and text reports. Many verifications were performed as part of the quality assurance quality control program associated with the development and release of RESRAD-OFFSITE 4.0, namely: • developer testing, • internal independent testing, and • release testing. Some were also performed in response to questions from users regarding the performance of the code. The main text of the report focuses on summarizing a subset of those tests, both independent and developer tests that verified the computations performed by the code. The verifications included in this report served as the basis for the development of the release tests of the computational executables and provided the quantitative results to be compared with the code output. The input and output interfaces and the data transfers between the various executables of the code were tested while performing the verification testing. They were tested intentionally during release testing. This report also provides some basic information to help in understanding the activities that were verified. The report: • outlines the components of RESRAD-OFFSITE 4.0 and the interconnections between these components, • outlines the processes modeled by the computational code, • provides summary figures and tables to offer confirmation of the verification of the computational components of the code, • reproduces the verifiers’ reports, if available, in individual appendices, • refers to the previous verification report (Yu et al. 2011) for more details about some of the verifications, and • reproduces the test cases and the testers’ reports from the release testing in individual appendices, when possible.

54 ENVIRONMENTAL SCIENCES↗