Advancements in High-Performance Multi-physics Simulation Capabilities for the Geologic Disposal Safety Assessment Framework.
Abstract not provided.
SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Abstract not provided.
Explore the source record for details and available documents.
Safety professionals typically do not engage in audits and independent assessments with the vigor as do our quality brethren. Taking advantage of industry and government experience conducting value added Independent Assessments or Audits benefits a safety program. Most other organizations simply call this process "internal audits." Sources of audit training are presented and compared. A relation of logic between audit techniques and mishap investigation is discussed. An example of an audit process is offered. Shortcomings and pitfalls of auditing are covered.
A set of five developmental steps building from the NASA TASAR (Traffic Aware Strategic Aircrew Requests) concept are described, each providing incrementally more efficiency and capacity benefits to airspace system users and service providers, culminating in a Full Airborne Trajectory Management capability. For each of these steps, the incremental Operational Hazards and Safety Requirements are identified for later use in future formal safety assessments intended to lead to certification and operational approval of the equipment and the associated procedures. Two established safety assessment methodologies that are compliant with the FAA's Safety Management System were used leading to Failure Effects Classifications (FEC) for each of the steps. The most likely FEC for the first three steps, Basic TASAR, Digital TASAR, and 4D TASAR, is "No effect". For step four, Strategic Airborne Trajectory Management, the likely FEC is "Minor". For Full Airborne Trajectory Management (Step 5), the most likely FEC is "Major".
This report represents the initial structure and content created for the ARC-100 nuclear reactor initial conceptual design Probabilistic Safety Assessment. The objective of the study is to assess the safety of the ARC-100 nuclear reactor conceptual design using a risk-informed approach. This early draft report is the first transmittal of the Probabilistic Safety Assessment approach and will be expanded over the remainder of the projects.
This document is being provided as part of ITT's NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract: "New ATM Requirements--Future Communications, C-Band and L-Band Communications Standard Development." ITT has completed a safety hazard analysis providing a preliminary safety assessment for the proposed C-band (5091- to 5150-MHz) airport surface communication system. The assessment was performed following the guidelines outlined in the Federal Aviation Administration Safety Risk Management Guidance for System Acquisitions document. The safety analysis did not identify any hazards with an unacceptable risk, though a number of hazards with a medium risk were documented. This effort represents an initial high-level safety hazard analysis and notes the triggers for risk reassessment. A detailed safety hazards analysis is recommended as a follow-on activity to assess particular components of the C-band communication system after the profile is finalized and system rollout timing is determined. A security risk assessment has been performed by NASA as a parallel activity. While safety analysis is concerned with a prevention of accidental errors and failures, the security threat analysis focuses on deliberate attacks. Both processes identify the events that affect operation of the system; and from a safety perspective the security threats may present safety risks.
Criticality safety analyses are completed on a transportation cask used for microreactor assembly shipment to provide an example of model and analysis to industry for reproducing this type of study on their microreactor fuel shipment. The fuel assembly considered is based on a gas-cooled microreactors (GC-MR), which utilizes HALEU fuel in the form of TRISO particles and utilizes various design options considered in industry designs. Various versions of this GC-MR assembly were studied, with and without YH 2 moderator, providing similar conclusions.
Criticality safety analyses are completed on a transportation cask used for microreactor assembly shipment to provide an example of model and analysis to industry for reproducing this type of study on their microreactor fuel shipment. The fuel assembly considered is based on a gas-cooled microreactor (GC-MR), which utilizes HALEU fuel in the form of TRISO particles and utilizes various design options considered in industry designs. Various versions of this GC-MR assembly were studied, with and without YH2 moderator, providing similar conclusions. The shipment cask design is revised based on an existing design ES-3100, developed by Y-12 for the transport of highly enriched uranium (HEU), but is enlarged to hold the GC-MR fuel assembly. Criticality safety analysis for the cask/GC-MR fuel assembly package was performed using the CSAS6 sequence of SCALE6.3.2, utilizing the ENDF/B-VII.1 based continuous energy neutron library, and the analysis strictly follows the guideline from NRC reference reports. Different scenarios, e.g. normal operation, undamaged cask with water flooded, damaged cask with optimal water moderation, have been analyzed and it could be concluded the package would always have a large margin of subcriticality even packed in an infinite array. Sensitivity and similarity analyses are also performed using the TSUNAMI sequence of SCALE6.3.2, and the similarity analysis uses all the experiments from the ICSBEP Handbook with Intermediate and Mixed Enriched Uranium (IEU) and Low Enriched Uranium (LEU) systems together with additional ones that are sponsored by the DNCSH program. These similarity analyses indicate that dry cases have no similar benchmark experiments (ck values greater than 0.8), which may become problematic if more assemblies are shipped together (or a fully loaded core is shipped) and margin to criticality is reduced. However, the damaged cask models with flooded assemblies exhibited similarities to many experiments with ck values greater than 0.8.
This paper discusses the System Safety approach used to assess risk for the Space Shuttle Reusable Solid Rocket Motor (RSRM). Previous to the first RSRM flight in the fall of 1988, all systems were analyzed extensively to assure that hazards were identified, assessed and that the baseline risk was understood and appropriately communicated. Since the original RSRM baseline was established, Thiokol and NASA have implemented a number of initiatives that have further improved the RSRM. The robust design, completion of rigorous testing and flight success of the RSRM has resulted in a wise reluctance to make changes. One of the primary assessments required to accompany the documentation of each proposed change and aid in the decision making process is a risk assessment. Documentation supporting proposed changes, including the risk assessments from System Safety, are reviewed and assessed by Thiokol and NASA technical management. After thorough consideration, approved changes are implemented adding improvements to and reducing risk of the Space Shuttle RSRM.
NextGen is a complex socio-technical system and, in many ways, it is expected to be more complex than the current system. It is vital to assess the safety impact of the NextGen elements (technologies, systems, and procedures) in a rigorous and systematic way and to ensure that they do not compromise safety. In this study, the NextGen elements in the form of Operational Improvements (OIs), Enablers, Research Activities, Development Activities, and Policy Issues were identified. The overall hazard situation in NextGen was outlined; a high-level hazard analysis was conducted with respect to multiple elements in a representative NextGen OI known as OI-0349 (Automation Support for Separation Management); and the hazards resulting from the highly dynamic complexity involved in an OI-0349 scenario were illustrated. A selected but representative set of the existing safety methods, tools, processes, and regulations was then reviewed and analyzed regarding whether they are sufficient to assess safety in the elements of that OI and ensure that safety will not be compromised and whether they might incur intolerably high costs.
System safety assessment is defined in NPR 8715.3C, NASA General Safety Program Requirements as a disciplined, systematic approach to the analysis of risks resulting from hazards that can affect humans, the environment, and mission assets. Achievement of the highest practicable degree of system safety is one of NASA's highest priorities. Traditionally, system safety assessment at NASA and elsewhere has focused on the application of a set of safety analysis tools to identify safety risks and formulate effective controls.1 Familiar tools used for this purpose include various forms of hazard analyses, failure modes and effects analyses, and probabilistic safety assessment (commonly also referred to as probabilistic risk assessment (PRA)). In the past, it has been assumed that to show that a system is safe, it is sufficient to provide assurance that the process for identifying the hazards has been as comprehensive as possible and that each identified hazard has one or more associated controls. The NASA Aerospace Safety Advisory Panel (ASAP) has made several statements in its annual reports supporting a more holistic approach. In 2006, it recommended that "... a comprehensive risk assessment, communication and acceptance process be implemented to ensure that overall launch risk is considered in an integrated and consistent manner." In 2009, it advocated for "... a process for using a risk-informed design approach to produce a design that is optimally and sufficiently safe." As a rationale for the latter advocacy, it stated that "... the ASAP applauds switching to a performance-based approach because it emphasizes early risk identification to guide designs, thus enabling creative design approaches that might be more efficient, safer, or both." For purposes of this preface, it is worth mentioning three areas where the handbook emphasizes a more holistic type of thinking. First, the handbook takes the position that it is important to not just focus on risk on an individual basis but to consider measures of aggregate safety risk and to ensure wherever possible that there be quantitative measures for evaluating how effective the controls are in reducing these aggregate risks. The term aggregate risk, when used in this handbook, refers to the accumulation of risks from individual scenarios that lead to a shortfall in safety performance at a high level: e.g., an excessively high probability of loss of crew, loss of mission, planetary contamination, etc. Without aggregated quantitative measures such as these, it is not reasonable to expect that safety has been optimized with respect to other technical and programmatic objectives. At the same time, it is fully recognized that not all sources of risk are amenable to precise quantitative analysis and that the use of qualitative approaches and bounding estimates may be appropriate for those risk sources. Second, the handbook stresses the necessity of developing confidence that the controls derived for the purpose of achieving system safety not only handle risks that have been identified and properly characterized but also provide a general, more holistic means for protecting against unidentified or uncharacterized risks. For example, while it is not possible to be assured that all credible causes of risk have been identified, there are defenses that can provide protection against broad categories of risks and thereby increase the chances that individual causes are contained. Third, the handbook strives at all times to treat uncertainties as an integral aspect of risk and as a part of making decisions. The term "uncertainty" here does not refer to an actuarial type of data analysis, but rather to a characterization of our state of knowledge regarding results from logical and physical models that approximate reality. Uncertainty analysis finds how the output parameters of the models are related to plausible variations in the input parameters and in the modeling assumptions. The evaluation of unrtainties represents a method of probabilistic thinking wherein the analyst and decision makers recognize possible outcomes other than the outcome perceived to be "most likely." Without this type of analysis, it is not possible to determine the worth of an analysis product as a basis for making decisions related to safety and mission success. In line with these considerations the handbook does not take a hazard-analysis-centric approach to system safety. Hazard analysis remains a useful tool to facilitate brainstorming but does not substitute for a more holistic approach geared to a comprehensive identification and understanding of individual risk issues and their contributions to aggregate safety risks. The handbook strives to emphasize the importance of identifying the most critical scenarios that contribute to the risk of not meeting the agreed-upon safety objectives and requirements using all appropriate tools (including but not limited to hazard analysis). Thereafter, emphasis shifts to identifying the risk drivers that cause these scenarios to be critical and ensuring that there are controls directed toward preventing or mitigating the risk drivers. To address these and other areas, the handbook advocates a proactive, analytic-deliberative, risk-informed approach to system safety, enabling the integration of system safety activities with systems engineering and risk management processes. It emphasizes how one can systematically provide the necessary evidence to substantiate the claim that a system is safe to within an acceptable risk tolerance, and that safety has been achieved in a cost-effective manner. The methodology discussed in this handbook is part of a systems engineering process and is intended to be integral to the system safety practices being conducted by the NASA safety and mission assurance and systems engineering organizations. The handbook posits that to conclude that a system is adequately safe, it is necessary to consider a set of safety claims that derive from the safety objectives of the organization. The safety claims are developed from a hierarchy of safety objectives and are therefore hierarchical themselves. Assurance that all the claims are true within acceptable risk tolerance limits implies that all of the safety objectives have been satisfied, and therefore that the system is safe. The acceptable risk tolerance limits are provided by the authority who must make the decision whether or not to proceed to the next step in the life cycle. These tolerances are therefore referred to as the decision maker's risk tolerances. In general, the safety claims address two fundamental facets of safety: 1) whether required safety thresholds or goals have been achieved, and 2) whether the safety risk is as low as possible within reasonable impacts on cost, schedule, and performance. The latter facet includes consideration of controls that are collective in nature (i.e., apply generically to broad categories of risks) and thereby provide protection against unidentified or uncharacterized risks.
This presentation provides an overview of the information needed to support fuel salt safety adequacy assessment. It provides a discussion of fuel salt qualification and developing a mechanistic source term. This presentation includes discussion the use of total stored energy release as a means to bound potential accidents.
This report summarizes support provided by Science Applications International Corporation (SAIC) to the NASA/Marshall Space Flight Center (MSFC). Work under this contract was performed in support of the Advanced Space Transportation Program and the Second Generation RLV Program Office.
Abstract The long-lived radiotoxicity of the high-level radioactive waste generated by nuclear power plants requires safe isolation from the biosphere for many hundreds of thousands of years. An international consensus has emerged that such isolation can best be provided by disposal in mined geologic repositories, a strategy that today is pursued by most countries dealing with radioactive waste. However, the need to predict the performance of such repositories over very long time periods generates large uncertainties that have to be accounted for in safety assessments. The findings from such safety assessments need to be conveyed to all stakeholders in a clear way, such that public confidence in geologic disposal solutions can be achieved. It is suggested here that close international collaboration on the technical aspects of geologic waste disposal has helped, and will continue to help, building trust and increasing confidence. This paper discusses a particular international collaboration initiative referred to as DECOVALEX, which brings together multiple teams and disciplines to collectively tackle complex experimental and modeling challenges related to geologic disposal. By describing how DECOVALEX works and by providing joint research examples, a case is made that such international collaboration contributes to knowledge transfer and confidence building in radioactive waste disposal science.
Sealed radioactive sources (SRS) are being used worldwide in the field of medicine, agriculture, industry and research. They can be found in mobile as well as stationary devices. SRS contains radioactive material that is (a) permanently sealed in a capsule or (b) closely bounded and in a solid form. The capsule or material of an SRS should be strong enough to maintain leak tightness under the conditions of use and purpose for which the source was designed, also in case of accidents. In this case only emitted radiation is utilized. Firstly, the hazard from external radiation has to be considered, but the possibility of contamination due to fracture of the capsule should not be disregarded. The radioactive sources are composed of the radiating isotope contained in the filling medium, the single or double isotope holder that partially or totally surrounds the filling medium, the outer cover that contains the parts mentioned above and the capsule closed airtightly by welding or using some other method. The capsule must be tested for leakage periodically. If the SRS is no longer needed (e.g. replaced by a different technique) or it becomes useless for the intended application (e.g. the activity becomes too weak, the equipment containing the source works poorly or becomes obsolete, the source is damaged or leaking) it is considered disused. Disused sealed radioactive sources (DSRS) are typically conditioned and disposed if a facility is available. If the disposal option is not available, conditioned DSRS should be stored under proper conditions. In some cases, the radionuclide(s) in DSRS can be recovered/recycled or the DSRS can be repurposed for other applications. Conditioning of DSRS ensures containment of the radioactive material, provides confinement for leaking sources, provides sufficient radiation shielding, reduces storage/disposal volume by allowing consolidation of multiple sources into a single storage/disposal container, facilitates transport operations and contributes to safety and security as well. Typically, conditioning technologies are deployed either as permanently installed stationary systems in centralized or mobile on-site waste processing facilities, or in a mobile configuration. Centralized stationary facilities provide a single processing location for multiple users that requires transport of the waste to the facility. On the other hand, mobile systems may be provided for the selection and application of the optimum technology for a specific waste stream (such as DSRS) by bringing the process to the point where the waste is generated. In addition, mobile systems could offer additional flexibility by sharing equipment among multiple waste generating sites for processing campaigns that vary in duration, from very short periods to several years. The term 'mobile processing system' refers to any radioactive waste processing system or component which is designed to be transportable and which is not considered permanently installed. Two mobile system for conditioning of disused sealed radioactive sources are developed in the Public Company Nuclear Facilities of Serbia. Development of these mobile systems was supported by SRB9005 national project via Technical Cooperation of the IAEA. The first mobile system, built inside the 20 feet ISO container, will be used for conditioning of DSRS category 3 to 5. The second mobile system, built inside the 7 m long vehicle (Iveco Daily Van), will be used for dismantling of ionizing smoke detectors mostly with Am-241 sources. Designs of the mobile systems were defined in cooperation with two companies from Belgium (Belgoprocess and Leniko) and a Croatian company Ekoteh as well as with the support of the IAEA experts. The generic safety assessment and operational procedures for the mobile systems are developed. Based on safety assessment the acceptance criteria and operational limits and conditions are established. Operational procedures include: (a) equipment and material requirements, (b) assembling procedure of the mobile unit, (c) procedure for acceptance of devices for dismantling and conditioning, (d) dismantling procedure for devices to recover the DSRS, (e) characterization of DSRS, (f) encapsulation procedure of DSRS, (g) disassembling procedure of the mobile unit, and (h) keeping records, identification and traceability. In addition, radiation safety, health safety, security and emergency preparedness plans are prepared. The generic safety assessment and operational procedures could be updated with site specific requirements, DSRS inventory, and different needs for future customers. Developed mobile systems could be used in all situations when it is feasible to perform conditioning of DSRS on the spot in the county and worldwide. Development of these mobile units was just the first step to create the Reference Center for Radioactive Waste Treatment and Disused Radioactive Sources Conditioning for Small Facilities which can become a regional training center in the future, and/or as a tool for comprehensive national search and secure programmes. In the next phases development of e-learning platforms and blended learning packages as well as application for the IAEA Qualified Technical Centre (QTC) for the management of DSRS is foreseen. (authors)
In support of the NASA Advanced Air Transportation Technologies Project, the Volpe National Transportation Systems Center has developed a methodology to perform safety risk assessments for air traffic control/air traffic management decision Support systems and concepts. Changes in controller, pilot, and/or airline dispatcher tasks that are affected by the decision support system are related to associated hazards. These hazards are then assessed either qualitatively or quantitatively in terms of likelihood of occurring and the impact if they do occur. Those items that show a potential safety hazard level increase can then have research plans developed to address those safety risks areas. An application of this methodology will he demonstrated using the AATT decision support tool Expedite Departure Path.
Geologic Disposal Safety Assessment Framework is a state-of-the-art simulation software toolkit for probabilistic post-closure performance assessment of systems for deep geologic disposal of nuclear waste developed by the United States Department of Energy. This paper presents a generic reference case and shows how it is being used to develop and demonstrate performance assessment methods within the Geologic Disposal Safety Assessment Framework that mitigate some of the challenges posed by high uncertainty and limited computational resources. Variance-based global sensitivity analysis is applied to assess the effects of spatial heterogeneity using graph-based summary measures for scalar and time-varying quantities of interest. Behavior of the system with respect to spatial heterogeneity is further investigated using ratios of water fluxes. This analysis shows that spatial heterogeneity is a dominant uncertainty in predictions of repository performance which can be identified in global sensitivity analysis using proxy variables derived from graph descriptions of discrete fracture networks. New quantities of interest defined using water fluxes proved useful for better understanding overall system behavior.
Human reliability analysis (HRA) evaluates human errors and provides human error probabilities (HEPs) for application in probabilistic safety assessment (PSA), which is a comprehensive safety assessment method for nuclear power plants (NPPs). Generally, HRA methods estimate HEPs based on human reliability data collected from actual historical measurement, simulator experiments, or expert judgement. Most recent HRA data collection studies focus on collecting data via full-scope main control room (MCR) simulators with actual licensed reactor operators. Contrary to this, Idaho National Laboratory (INL) has adopted a different approach, which attempts to collect HRA data based on experiment using simplified simulators and student participants by following the Simplified Human Error Experimental Program (SHEEP). This approach has a couple of advantages compared to full-scope data collection. Representatively, it has relatively low entry point for collecting HRA data, and secures large sample sizes with reasonable cost and labor. In the previous studies, we developed the SHEEP framework, then verified whether the data collected through the framework could support a representative full-scope data collection study, i.e., the Human Reliability Data Extraction (HuREX) study. Also, we analyzed human performance measurements depending on participant type (i.e., student vs. operator). In this paper, we analyze human performance data collected from an experiment comparing operator expertise and simulator complexity when using the more simplified simulator developed by INL, i.e., Rancor Microworld and the less simplified simulator, i.e., Compact Nuclear Simulator (CNS) developed by Korea Atomic Energy Research Institute (KAERI). Analysis of variance (ANOVA) tests and correlation analysis are used for analyzing the experimental data.