Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety codes and standards”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Application of the Life Safety Code to a Historic Test Stand

NASA has conducted a study to assess alternatives to refurbishing existing launch vehicle modal test facilities as opposed to developing new test facilities to meet the demands of a very fiscally constrained test and evaluation environment. The results of this study showed that Marshall Space Flight Center (MSFC) Test Stand (TS) 4550 could be made compliant, within reasonable cost and schedule impacts, if safety processes and operational limitations were put in place to meet the safety codes and concerns of the Fire Marshall. Trades were performed with key selection criteria to ensure that appropriate levels of occupant safety are incorporated into test facility design modifications. In preparation for the ground vibration tests that were to be performed on the Ares I launch vehicle, the Ares Flight and Integrated Test Office (FITO) organization evaluated the available test facility options, which included the existing mothballed structural dynamic TS4550 used by Apollo and Shuttle, alternative ground vibration test facilities at other locations, and construction of a new dynamic test stand. After an exhaustive assessment of the alternatives, the results favored modifying the TS4550 because it was the lowest cost option and presented the least schedule risk to the NASA Constellation Program for Ares Integrated Vehicle Ground Vibration Test (IVGVT). As the renovation design plans and drawings were being developed for TS4550, a safety concern was discovered the original design for the construction of the test stand, originally built for the Apollo Program and renovated for the Shuttle Program, was completed before NASA s adoption of the currently imposed safety and building codes per National Fire Protection Association Life Safety Code [NFPA 101] and International Building Codes. The initial FITO assessment of the design changes, required to make TS4550 compliant with current safety and building standards, identified a significant cost increase and schedule impact. An effort was launched to thoroughly evaluate the applicable life safety requirements, examine the context in which they were derived, and determine a means by which the TS4550 modifications could be made within budget and on schedule, while still providing the occupants with appropriate levels of safety.

Askins, Bruce↗

Evaluation of the Specification for Safety-Related Steel Structures for Nuclear Facilities, ANSI/AISC N690-18, for Application to Nuclear Power Plants

This report describes the assessment of the recently published ANSI/AISC N690-18, Specification for Safety-Related Steel Structures for Nuclear Facilities. This work was performed for the U.S. Nuclear Regulatory Commission for potential endorsement of N690-18 for use in the design of nuclear power plants. Currently the NRC endorses the use of an earlier version: N690-1994 (R2004), and thus, a technical review of the updated N690 Specification, which contains significant changes, is warranted. The N690-18 Specification reflects advances and improvements in steel design gained from experience, analytical studies, and experimental data over the years. The N690-18 specification also contains a new Appendix N9 that addresses the design of safety-related steel-plate composite (SC) walls which are a relatively new type of structural member for which previously there has not been any U.S. code or standard that governs its design. The technical review of N690-18 was performed in order to assess the adequacy of the provisions for use by the NRC in updating its regulatory guidance for nuclear power plants. The research developed the technical basis for acceptance of the new specification and also identified areas where additional staff guidance is needed for the design of safety-related steel structures at nuclear power plants. The results of the research have determined that the N690-18 specification is a significant enhancement from the N690-1994 (R2004) edition. The new specification contains substantial upgrades in the design of structural steel and includes new provisions for design of SC wall sections, which can benefit the nuclear power industry as well as the NRC review process. All of the improvements, if endorsed by the NRC with certain regulatory positions, will allow clearer and more consistent regulatory guidance, and will avoid the need for justification by licensees and related reviews each time certain methods or approaches are used.

42 ENGINEERING↗

Hydrogen Risk Assessment Models (HyRAM) (Version 3.0 Technical Reference Manual)

The HyRAM software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen infrastructure and transportation systems. HyRAM is designed to facilitate the use of state-of-the-art science and engineering models to conduct robust, repeatable assessments of hydrogen safety, hazards, and risk. HyRAM includes generic probabilities for hydrogen equipment failures, probabilistic models for the impact of heat flux on humans and structures, and computationally and experimentally validated first-order models of hydrogen release and flame physics. HyRAM integrates deterministic and probabilistic models for quantifying accident scenarios, predicting physical effects, and characterizing hydrogen hazards (thermal effects from jet fires, overpressure effects from deflagrations), and assessing impact on people and structures. HyRAM is developed at Sandia National Laboratories for the U.S. Department of Energy to increase access to technical data about hydrogen safety and to enable the use of that data to support development and revision of national and international codes and standards. HyRAM is a research software in active development and thus the models and data may change. This report will be updated at appropriate developmental intervals. This document provides a description of the methodology and models contained in the HyRAM version 3.0. HyRAM 3.0 includes the new ability to model cryogenic hydrogen releases from liquid hydrogen systems, using a different property calculation method and different equations of state. Other changes include modifications to the ignition probability calculations, component leak frequency calculations, and addition of default impulse data.

08 HYDROGEN↗

Hydrogen Risk Assessment Models (HyRAM) (V.3.1) (Technical Reference Manual)

The HyRAM software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen infrastructure and transportation systems. HyRAM is designed to facilitate the use of state-of-the-art science and engineering models to conduct robust, repeatable assessments of hydrogen safety, hazards, and risk. HyRAM includes generic probabilities for hydrogen equipment failures, probabilistic models for the impact of heat flux on humans and structures, and experimentally validated first-order models of hydrogen release and flame physics. HyRAM integrates deterministic and probabilistic models for quantifying accident scenarios, predicting physical effects, and characterizing hydrogen hazards (thermal effects from jet res, overpressure effects from deflagrations), and assessing impact on people and structures. HyRAM is developed at Sandia National Laboratories for the U.S. Department of Energy to increase access to technical data about hydrogen safety and to enable the use of that data to support development and revision of national and international codes and standards. HyRAM is a research software in active development and thus the models and data may change. This report will be updated at appropriate developmental intervals. This document provides a description of the methodology and models contained in HyRAM version 3.1. There have been several impactful updates since version 3.0. HyRAM 3.1 contains a correction to use the volume fraction for two-phase speed of sound calculations; this only affects cryogenic releases in which two-phase ow (vapor and liquid) is predicted in the orifice. Other changes include clarifications that inputs for tank pressure should be given in absolute pressure, not gauge pressure. Additionally, the interface now rejects invalid inputs to probability distributions, and the less accurate single-point radiative source model selection was removed from the interface.

08 HYDROGEN↗

Modular High Temperature Gas-cooled Reactor: Accident Analysis

Types of Potential Accidents and Reactor Response Codes and Tools Experimental Validation Safety Analysis Approach Licensing Modernization Project Use of PRA in LMP, ASME/ANS, Non-LWR PRA Standard Methods for Incorporating Passive System Reliability into a PRA

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Investigation of Frozen Chemistry for Molten Salt Reactors (MSRs)

Understanding accident progression and the potential/conditions for fission product release from fuel is necessary to evaluate safety for any nuclear reactor system. Molten Salt Reactors (MSRs) under development need such analysis to support safety evaluations. Fission product chemistry specific to MSR concepts is a critical area that introduces distinct considerations relative to the current state-of-knowledge in reactor safety, primarily developed for water-moderated nuclear reactor systems. In Light Water Reactor (LWR) systems, it is necessary to capture the chemical interaction of fission products with the reactor evironment, containment and confinement systems. The overall effects at this point are relatively well understood for the purposes of performing safety evaluations. A key insight from LWR studies is that fission product chemical behavior can be reasonably captured by modeling approaches where the chemistry is "frozen". These modeling approaches assume that radionuclide reaction and speciation can be represented by chemical classes, each with characteristic transport behavior that is invariant under a broad range of thermochemical conditions. However, radionuclides can exhibit a range of behavior in the liquid salt-melt phase of the coolant used in MSRs. Radionuclides, salt, and the metal containment surfaces (i.e. pipes) can co-exist in dynamic equilibrium that could evolve with small system mass changes. A detailed investigation to the degree the equilibrium state can dynamically evolve with changes in the conditions of the molten salt mixture has not been previously conducted. It is currently not well understood where frozen chemistry assumptions are valid. Expanding the state-of-knowledge in this regard is relevant to better assessing the range of chemical effects that should be incorporated as part of MSR safety assessments. This investigation used the Oak Ridge Isotope GENeration (ORIGEN) module of the Standardized Computer-Analysis for Licensing Evaluation (SCALE) code to generate simulated radionuclide inventories for the MSR Experiment (MSRE) and then modeled reactor chemical speciation using the Molten Salt Thermodynamic Database – Thermochemical (MSTDB-TC) coupled with Thermochimica. The effect of composition variation during decay of fission product inventory in a molten salt over a period of 500 days prolonged post- at multiple temperatures was studied. Mass fractions for fluorine and berilium were varied in order to probe the effects of free fluorine control. Finally, speciation of fluoride reactors were showed by comparing MSRE readionuclide inventories with a FLiBe based molten salt breeder reactor (MSBR). The results showed that fission product mass change has little effect on phase mass changes and vapor pressures for fluoride species, but differ with varying carrier and fuel salt compositions. However, iodine species were found to have a vapor pressure not only dependent on temperature, but also the free fluorine potential, releasing iodine when the free fluorine potential is equal to the iodine inventory. This observation, however, arose under free fluorine potentials that are very unlikely to be realized in typical molten salt mixtures. Despite this observation, temperature was found to be the dominant parameter that drove phase change and fission product species vapor pressure. The results indicate that the current frozen chemistry approach is adequate for MSR analysis.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASIS data base management system - IBM 360/370 OS MVT implementation. 1: Installation standards

The installation standards for the NASA Aerospace Safety Information System (NASIS) data base management system are presented. The standard approach to preparing systems documentation and the program design and coding rules and conventions are outlined. Included are instructions for preparing all major specifications and suggestions for improving the quality and efficiency of the programming task.

Source record↗

Domain-Specific Type-Safe APIs for Hierarchical Scientific Data with Modern C++

General-purpose library application programming interfaces (APIs) for self-describing hierarchical scientific data storage, such as the HDF5 and NetCDF libraries, are traditionally of runtime nature. Runtime errors for entry existence and data types are typically caught later in the development process of higher-level application-specific APIs. In this paper, we propose exploiting modern C++ metaprogramming features to add compile-time type-safety to improve the interaction with a well-defined metadata-rich scientific schema in domain-specific hierarchical datasets. We tackle two aspects of common use: (i) direct data access, (ii) flexible “in-memory” index models for efficient search and data processing. The proposed APIs use C++17’s template type auto deduction features, C++11’s enum class for type-safety and C-style preprocessor macros for generative templated code. We showcase the pros and cons of our initial work on the standard NeXus schema used for annotating and storing experimental neutron scattering data at several facilities around the world on top of HDF5. Extendable compile-time type-safe APIs are a desirable feature that could be indexed by any modern integrated development environment (IDE). Hence, such APIs can help ease the learning curve for domain scientists using a less error-prone software interaction to enhance the findability of their data without resorting to a domain-specific language (DSL).

Godoy, William↗

SAM Enhancements and Model Developments for Molten-Salt-Fueled Reactors

To support the development and utilization of the SAM code for molten-salt-fueled reactor (MSR) safety analysis and licensing, an effort was devoted to enhancing code capabilities and developing reference models for the MSR primary loop. A reference standard problem of a prototypical reactor design is foundational to NRC to verify the adequacy of computer codes and evaluation models for a specific reactor type. A thermo-fluid model of the Molten Salt Reactor Experiment (MSRE) has been developed. The MSRE primary loop model consists of a 2-D core region and external core components in 1-D or 0-D. Both the steady-state and a transient scenario are simulated. The porous medium model is utilized for both the molten salt fluid channels and the moderator matrix in the MSRE core. The use of the porous medium model for the MSRE core is verified with the higher-fidelity simulation results using 1-D representations of the fluid channels and 3-D modeling of core structures. To further enhance SAM multi-scale simulation capabilities for MSRs, a mass transport model is developed and implemented in SAM multi-dimension flow module for modeling of species transport such as delayed neutron precursors in MSRs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Solar/Photovoltaic DC Systems: Information for Electrical Workers and Firefighters

Solar photovoltaic (PV) systems are common and continue to gain popularity. This article helps electrical workers and firefighters understand basic operating principles and hazards of PV dc arrays. The effects of solar radiation and temperature on power output are discussed including; PV-module testing standards; methods for calculating the number of modules in a PV string; some National Electrical Code (NEC) guidelines that are aimed toward improving array safety; dc-array commissioning, periodic maintenance, and testing; arc-flash-hazard potential ways firefighters can work safely around PV arrays; potential risks posed by moonlight and other light sources; some unique dc-system hazards. We also present statistics on PV dc-array electrical incidents and injuries.

14 SOLAR ENERGY↗

Battery Safety Factsheet

A brief overview of battery safety topics presented as a factsheet for a community audience. Battery safety topics include: battery management systems, thermal runaway, what to do in a battery fire emergency situation, battery storage considerations, commissioning, and battery codes and standards.

Battery Energy Storage↗

A Generalized Nuclear Code of Accounts for Cost Estimation Standardization

This is a joint INL-EPRI study. Link to corresponding page at the Electric Power Research Institute (EPRI): https://www.epri.com/research/products/000000003002028937 Recent Advanced Reactor (AR) designs typically offer features and attributes that depart from traditional water-cooled reactors in terms of fuel forms, coolants, structural materials, size, safety margins, and other important design and operational aspects. These departures, relative to the industry experience, will likely present a challenge for potential owner-operators when evaluating one or more AR designs for commercial deployment on a like-for-like basis. This is further exacerbated with new classes of reactors gaining prominence (e.g., microreactors) and new emerging applications (e.g., floating barge reactors or space propulsion reactors). The differences in design-specific technologies are compounded by the differences in approach to cost estimation. The lack of consistency in build up toward cost estimates creates a challenge when comparing competing concepts and evaluating their associated cost drivers. The outcome of a 2019 Scoping Study conducted by the Electric Power Research Institute (EPRI) indicated the need for a cost modeling guide (CMG), which would be underpinned by a technology-neutral and inclusive Generalized Nuclear Code of Accounts (GN-COA). A code of accounts (COA) is a tool by which costs are identified in even more specific categories, providing clarity on what specific costs are included in an estimate. A parallel independent effort was meanwhile taking place at Idaho National Laboratory via funding by the Systems Analysis Integration (SA&I) campaign of the Office of Nuclear Energy under the U.S. Department of Energy (U.S. DOE-NE) to also update the COA structure to enable more flexibility and encompass a wider variety of reactor technologies. After being made aware of these synergistic efforts, the two parties decided to combine efforts and develop a joint new standard format for nuclear cost estimation that builds on previous structures. This document describes the development of this joint GN-COA and provides guidance on the implementation of the tool, which is provided as the associated GN-COA Excel document. The main attributes of this novel COA format are that all items are functionally defined (in order to be technology and application agnostic) and grouped into logical arrangements that facilitate the tabulation of costs for reactor constructions under consideration. The intent is for the GN-COA to form a standard that is endorsed by future vendors and customers.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Verification of Subcritical Limits in ANSI/ANS-8.1-2014

The first edition of the current American National Standards Institute (ANSI)/American Nuclear Society (ANS) standard ANSI/ANS-8.1-2014, “Nuclear Criticality Safety in Operations with Fissionable Materials Outside Reactors,” was published in 1964 as ASA N6.1-1964, “Safety Standard for Operations with Fissionable Materials Outside Reactors.” In 1969, that standard was revised as ANSI N16.1-1969, “Nuclear Criticality Safety in Operations with Fissionable Materials Outside Reactors.” ANSI N16.1-1969 includes a variety of subcritical limits (SCLs) for uniform aqueous solutions and metals containing fissile nuclides of 233 U, 235 U, and 239 Pu. Furthermore, SCLs are also included for uranium-water lattices. In the 1983 version of ANSI/ANS-8.1 (a revision of ANSI N16.1-1975), the suite of SCLs in the standard was expanded to include 235 U enrichment limits for homogeneous uranium-water mixtures and dry/damp oxides, uniform aqueous solutions of low-enriched uranium, and uniform aqueous mixtures of Pu(NO 3 ) 4 containing 240Pu in addition to the SCLs included in ANSI N16.1-1969. The SCLs have changed little in subsequent revisions (ANSI/ANS-8.1-1998 and ANSI/ANS-8.1-2014). The ANSI/ANS-8.1-2014 standard is currently being revised to include new SCLs (uranium metal and compounds with enrichments up to 20 wt% 235 U) and possible updates to the current SCLs already in the standard, although these new/updated SCLs will not be available to the nuclear criticality safety (NCS) community for a number of years. The original bases for these SCLs were documented in papers in journals such as Nuclear Science and Engineering and in ANS meeting transactions; however, these bases are ambiguous enough that sites and regulators in the United States have not widely endorsed them for safety purposes. Overall, the purpose of this paper is to present the results of a comparison study for the SCLs in the ANSI/ANS-8.1-2014 standard using modern codes (SCALE and MCNP) and cross sections (ENDF/B-VIII.0) to provide some assurance about their quality (bias and bias uncertainty) for use in NCS applications and for consideration by the ANS-8.1 Working Group as a reference for future revisions.

42 ENGINEERING↗

Developing Consensus Recommendations to Address Challenges with Solar and Solar-Plus-Storage Code Enforcement and Permitting Approvals

The Sustainable Energy Action Committee (SEAC) provides a national platform for collaboration between key stakeholders in code enforcement and permitting for solar and solar-plus-storage projects. The outcomes from SEAC include code and standard proposals, guidance documents, information bulletins and stakeholder education. With this work, permitting and inspection of solar and solar+storage systems uses best practices, enhances safety, and becomes more efficient reducing costs for both jurisdictions and installers.

14 SOLAR ENERGY↗

Development of photovoltaic array and module safety requirements

Safety requirements for photovoltaic module and panel designs and configurations likely to be used in residential, intermediate, and large-scale applications were identified and developed. The National Electrical Code and Building Codes were reviewed with respect to present provisions which may be considered to affect the design of photovoltaic modules. Limited testing, primarily in the roof fire resistance field was conducted. Additional studies and further investigations led to the development of a proposed standard for safety for flat-plate photovoltaic modules and panels. Additional work covered the initial investigation of conceptual approaches and temporary deployment, for concept verification purposes, of a differential dc ground-fault detection circuit suitable as a part of a photovoltaic array safety system.

Source record↗

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Modeling Guidelines for Code Generation in the Railway Signaling Context

Modeling guidelines constitute one of the fundamental cornerstones for Model Based Development. Their relevance is essential when dealing with code generation in the safety-critical domain. This article presents the experience of a railway signaling systems manufacturer on this issue. Introduction of Model-Based Development (MBD) and code generation in the industrial safety-critical sector created a crucial paradigm shift in the development process of dependable systems. While traditional software development focuses on the code, with MBD practices the focus shifts to model abstractions. The change has fundamental implications for safety-critical systems, which still need to guarantee a high degree of confidence also at code level. Usage of the Simulink/Stateflow platform for modeling, which is a de facto standard in control software development, does not ensure by itself production of high-quality dependable code. This issue has been addressed by companies through the definition of modeling rules imposing restrictions on the usage of design tools components, in order to enable production of qualified code. The MAAB Control Algorithm Modeling Guidelines (MathWorks Automotive Advisory Board)[3] is a well established set of publicly available rules for modeling with Simulink/Stateflow. This set of recommendations has been developed by a group of OEMs and suppliers of the automotive sector with the objective of enforcing and easing the usage of the MathWorks tools within the automotive industry. The guidelines have been published in 2001 and afterwords revisited in 2007 in order to integrate some additional rules developed by the Japanese division of MAAB [5]. The scope of the current edition of the guidelines ranges from model maintainability and readability to code generation issues. The rules are conceived as a reference baseline and therefore they need to be tailored to comply with the characteristics of each industrial context. Customization of these recommendations has been performed for the automotive control systems domain in order to enforce code generation [7]. The MAAB guidelines have been found profitable also in the aerospace/avionics sector [1] and they have been adopted by the MathWorks Aerospace Leadership Council (MALC). General Electric Transportation Systems (GETS) is a well known railway signaling systems manufacturer leading in Automatic Train Protection (ATP) systems technology. Inside an effort of adopting formal methods within its own development process, GETS decided to introduce system modeling by means of the MathWorks tools [2], and in 2008 chose to move to code generation. This article reports the experience performed by GETS in developing its own modeling standard through customizing the MAAB rules for the railway signaling domain and shows the result of this experience with a successful product development story.

Ferrari, Alessio↗