Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 937 records · Page 52

Modeling Complex Cross-Systems Software Interfaces Using SysML

The complex flight and ground systems for NASA human space exploration are designed, built, operated and managed as separate programs and projects. However, each system relies on one or more of the other systems in order to accomplish specific mission objectives, creating a complex, tightly coupled architecture. Thus, there is a fundamental need to understand how each system interacts with the other. To determine if a model-based system engineering approach could be utilized to assist with understanding the complex system interactions, the NASA Engineering and Safety Center (NESC) sponsored a task to develop an approach for performing cross-system behavior modeling. This paper presents the results of applying Model Based Systems Engineering (MBSE) principles using the System Modeling Language (SysML) to define cross-system behaviors and how they map to crosssystem software interfaces documented in system-level Interface Control Documents (ICDs).

Earth orbit↗

Auto Procedure Parsing: A Natural Language Processing Approach

Nuclear Power Plant (NPP) operating procedure is “a set of rules that describes how actions on the plant should be made if a certain system goal should be accomplished. U.S. NPPs use paper-based procedures (PBPs). PBPs are difficult to use. Common errors with PBPs are: following the wrong procedure, omit a step etc. Computer based procedures (CPBs) offer great improvement in ensuring plant safety. Some studies rely on experienced operators to understand the procedure content and then reorganize the procedure with digitally executable capabilities. Other studies utilize the procedure format to design rules to extract information from the operating procedures. Existing studies in procedure parsing are manual, laborious and extract limited information. This study aims to automatically extract critical information from operating procedures for generating computer interpretable representation of procedures. Such representation can further be used for automatic dynamic human reliability analysis and CPB design etc.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

RENDEZVOUS AND DOCKING TECHNIQUES

To implement the primary space mission of this decade – manned lunar exploration -- the operational assistance of rendezvous and docking is being considered as an alternative to possible problems in obtaining a boost vehicle capable of direct flight. This paper concentrates on the mechanization of the rendezvous and docking phase of such a lunar mission. As indicated in previous papers, rendezvous can take place in either an earth or lunar orbit (or on the lunar surface); it can involve the mating of stages, transfer of fuel, or the return of a shuttle to a “mother” ship; direct ascent or parking orbits can be used; the orbits can be circular or more general ellipses; finally, either or both of the spacecraft can participate in the rendezvous maneuvers. Since there is no intent here to discuss the pros and cons of each approach or to cover all possible mission profiles, guidance schemes and hardware configurations, one particular profile has been selected to display the significant features of most rendezvous missions. In many respects, rendezvous is less difficult than aircraft interception since the target is friendly and there is no severe time constraint. The latter feature allows considerable freedom of design especially with the great versatility of a human in the loop. This remains true even for a purely automatic mode. Perhaps the largest design problem concerns the selection of the mission to be implemented followed by the optimization or systems engineering of a mechanization from the multitude of possible schemes and techniques. A most important factor in the optimization is that of reliability and the redundancy, alternate or backup modes, etc., associated with the approach. While a primary system can be rather easily mechanized with modest equipment requirements, reliability considerations will result in additional hardware, tighter specifications and more safety factors (e. g., propellant margin). This is a very complex area and will only briefly be mentioned in the following discussion.

Rendezvous↗

Reliability and quality assurance on the MOD 2 wind system

The Safety, Reliability, and Quality Assurance (R&QA) approach developed for the largest wind turbine generator, the Mod 2, is described. The R&QA approach assures that the machine is not hazardous to the public or to the operating personnel, is operated unattended on a utility grid, demonstrates reliable operation, and helps establish the quality assurance and maintainability requirements for future wind turbine projects. The significant guideline consisted of a failure modes and effects analysis (FMEA) during the design phase, hardware inspections during parts fabrication, and three simple documents to control activities during machine construction and operation.

Mason, W. E. B.↗

Development of software fault-tolerance techniques

As computers become more widely used, and in particular as they become used in more safety critical applications, the reliability of the computer system and its software becomes more important. There is also an increasing need for high levels of reliability in applications involving very large numbers of inexpensive units where recall of the units would be disproportionately expensive. The nature of faults and the assumptions made by different approaches to correct operation are considered. The recovery block approach is described and a probabilistic analysis of its effectiveness, with and without correlated design errors is provided. Mechanisms for generating acceptance tests from specifications, and for providing recovery in the presence of asynchrony, are described. An analysis of, and design for, the provision of recovery blocks in the microprogram of the Bendix BDX930 processor is provided. An example of the use of recovery blocks in a simple operating system is also provided.

Melliar-Smith, P. M.↗

Nuclear safety for the space exploration initiative

The results of a study to identify potential hazards arising from nuclear reactor power systems for use on the lunar and Martian surfaces, related safety issues, and resolutions of such issues by system design changes, operating procedures, and other means are presented. All safety aspects of nuclear reactor power systems from prelaunch ground handling to eventual disposal were examined consistent with the level of detail for SP-100 reactor design at the 1988 System Design Review and for launch vehicle and space transport vehicle designs and mission descriptions as defined in the 90-day Space Exploration Initiative (SEI) study. Information from previous aerospace nuclear safety studies was used where appropriate. Safety requirements for the SP-100 space nuclear reactor system were compiled. Mission profiles were defined with emphasis on activities after low earth orbit insertion. Accident scenarios were then qualitatively defined for each mission phase. Safety issues were identified for all mission phases with the aid of simplified event trees. Safety issue resolution approaches of the SP-100 program were compiled. Resolution approaches for those safety issues not covered by the SP-100 program were identified. Additionally, the resolution approaches of the SP-100 program were examined in light of the moon and Mars missions.

Dix, Terry E.↗

Defining the performance gap: Conducting a self-assessment

This paper presents two different approaches to performing self-assessments of continuous improvement activities. Case Study 1 describes the activities performed by JSC to assess the implementation of continuous improvement efforts at the NASA Center. The JSC approach included surveys administered to randomly selected NASA personnel and personal interviews with NASA and contractor management personnel. Case Study 2 describes the continuous improvement survey performed by the JSC Safety, Reliability, and Quality Assurance (SR&QA) organization. This survey consisted of a short questionnaire (50 questions) administered to all NASA and contractor SR&QA personnel. The questionnaire is based on the eight categories of the President's Award for Quality and Productivity Improvement. It is designed to objectively determine placement on the TQ benchmark and identify a roadmap for improvement.

Braymer, Susan A.↗

A Novel Approach for Bounding the Stress Experienced by the Core of Utility-Scale Printed Circuit Heat Exchangers Under Thermohydraulic Loads

Printed circuit heat exchangers (PCHEs) have rapidly gained popularity since being introduced nearly three decades ago, and they are currently widely deployed in the petrochemical and aviation industry. Their compactness, thermohydraulic efficiency, inherent suitability for high temperature/pressure fluids containment, and demonstrated durability are some of the reasons the nuclear industry is seeking to adopt this technology as well. However, the relatively strict nuclear-related regulatory design code, especially when classified as critical to the safety of the reactors, is posing challenges to adopting the technology. From stress analysis point of view, one undesirable feature of PCHEs is their geometrical complexity, which is implied by their multilength-scale features. As a result, a full-scale model of a utility-scale exchanger cannot simply be solved on a computer because meshing such components results in a vast number of degrees-of-freedom. Here, this work seeks to address the challenge of stress analyses to PCHEs by presenting a method to simplify the geometry of PCHE designs. The models proposed by this work can be practically analyzed on a standard computer and provide a path for implementing ASME design rules. The analyses presented herein are divided into five separate investigations. Each is carried out to incrementally simplify the analyzed model by addressing features such as the shapes of the flow passages, the complex distribution of stress in large components, the three-dimensionality of the stress and strain, the thermal stresses caused by thermohydraulic operation observed experimentally and more.

42 ENGINEERING↗

RISMC Industry Application no. 1 (ECCS/LOCA) Core characterization automation: Reference PWR designs for IA no. 1

The U.S. NRC is currently proposing rulemaking '10 CFR 50.46c' to revise the loss-of-coolant-accident (LOCA) and emergency core cooling system (ECCS) acceptance criteria to include the effects of higher burn-up on cladding performance. The key implications of this proposition are that both cladding and ECCS performance need to be considered in a coupled manner. This implies that LOCA methodologies will need to be updated for regulatory purposes. The Risk-Informed Safety Margin Characterization (RISMC) Pathway, as part of the DOE Light Water Reactor Sustainability (LWRS) research and development program initialed several programs at the Idaho National Laboratory (INL) to support the industry by offering potential solutions to this new LOCA/ECCS analysis. One of these programs is the Industry Application no. 1 (IA1). It's goal is to develop an integrated evaluation model called LOCA Toolkit for the US (LOTUS) to revisit how risks are evaluated in a LOCA under 10 CFR 50.46c. The focus of LOTUS is to establish the automation interfaces among the physics disciplines involved, namely the core design automation, the fuels/clad performance, the system analysis, the risk assessment and the core design optimization. The risk-informed margins management approach for IA1 will provide a means of quantifying the impact on the key LOCA analysis figures-of-merit like peak cladding temperature (PCT), equivalent cladding reacted (ECR), etc. of a change in LOCA analysis inputs. The information obtained can then be used for decision-making and margin management. The modular approach for LOTUS will enable plant owners/vendors to further customize the LOTUS framework for use within their established codes and methods. One of the LOTUS modules deals with the core design automation (CD-A). The purpose of this module is to supply the LOCA analysis with initial conditions, i.e. assembly/pin power histories, power shapes, etc. to be employed by the Fuels/Clad Performance (EP) and System Analysis (SA) modules. In the CD-A module, the plant owner/operator will characterize his core design with the tools he has. For the current LOTUS demonstration, the tools used are the already coupled codes PHISICS and RELAP5-3D2,3. Cross section generation will be done using the Studsvik lattice code HELIOS-2.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Lost and Found Opportunities Around the Chlorine Worth Study

Los Alamos National Laboratory performed a series of critical experiments in 2021 to examine the worth of chlorine in plutonium-fueled systems. This series of experiments has been dubbed the “Chlorine Worth Study,” and the evaluation of the experiments was presented to the International Criticality Safety Benchmark Evaluation Project (ICSBEP) Technical Review Group in April, 2023. The primary purpose of these experiments was to enable validation of aqueous solutions crediting neutron absorption in 35 Cl. An external, independent view of the events leading up to the design and execution of these experiments indicates a missed opportunity to leverage sensitivity/uncertainty (S/U) analysis to assert validation without the experiments by taking an additional margin for the lack of direct validation of chlorine. On the other hand, the execution of these experiments also presents a rare opportunity to examine the efficacy of the S/U approach and extract useful information about the evaluated chlorine covariance data. TSUNAMI-1D models of representative application solutions were created and used to generate sensitivity data. Varying plutonium and chlorine concentrations were considered to examine the impact of these differences on the chlorine sensitivities and uncertainties. The data-induced uncertainty in k eff resulting from chlorine was calculated directly from uncertainty information calculated in the TSUNAMI-1D sequence. In all cases, this uncertainty was less than 0.1 %Δk. This result could potentially be used to justify a reactivity margin to account for the validation gap related to chlorine in the validation set. On the other hand, given that the experiments were performed, the community should endeavor to extract as much value from them and their results as possible. The results can be used to examine the actual bias associated with chlorine in these systems once the evaluations have been released. These data can be compared with the data-induced uncertainty margin discussed above to test the sufficiency of the validation gap penalty. This result will provide an indication of the performance of the chlorine covariance data specifically and the S/U validation approach generally. More advanced S/U techniques may also be employed to determine reactivity sensitivities associated with the chlorine in the experiments, potentially generating a more robust test of the chlorine covariance data.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Coupled Experimental–Theoretical Characterization of a Carbon Electrode in Vanadium Redox Flow Batteries using X-ray Absorption Spectroscopy

Vanadium redox flow batteries (VRFBs) have emerged as promising solutions for stationary grid energy storage due to their high efficiency, scalability, safety, near room-temperature operation conditions, and the ability to independently size power and energy capacities. The performance of VRFBs heavily relies on the redox couple reactions of V 2+ /V 3+ and VO 2+ /VO 2 + on carbon electrodes. Therefore, a thorough understanding of the surface functionality of carbon electrodes and their propensity for degradation during electrochemical cycles is crucial for designing VRFBs with extended lifespans. In this study, we present a coupled experimental–theoretical approach based on carbon K edge X-ray absorption spectroscopy (XAS) to characterize carbon electrodes prepared under different conditions and identify relevant functional groups that contribute to unique spectroscopic features. Atomic models were created to represent functional groups, such as hydroxyl, carboxyl, methyl, and aldehyde, bonded to carbon atoms in either sp 2 or sp 3 environments. The interactions between functionalized carbon and various solvated vanadium complexes were modeled using density functional theory. A library of carbon K-edge XAS spectra was generated for distinct carbon atoms in different functional groups, both before and after interacting with solvated vanadium complexes. Here we demonstrate how these simulated spectra can be used to deconvolve ex situ experimental spectra measured from carbon electrodes and to track changes in the electrode composition following immersion in different electrolytes or extended cycling within a functional VRFB. By doing so, we identify the active species present on the carbon electrodes, which play a crucial role in determining their electrochemical performance.

25 ENERGY STORAGE↗

The Microbiology of Subsurface, Salt-Based Nuclear Waste Repositories: Using Microbial Ecology, Bioenergetics, and Projected Conditions to Help Predict Microbial Effects on Repository Performance

This report summarizes the potential role of microorganisms in salt-based nuclear waste repositories using available information on the microbial ecology of hypersaline environments, the bioenergetics of survival under high ionic strength conditions, and “repository microbiology” related studies. In areas where microbial activity is in question, there may be a need to shift the research focus toward feasibility studies rather than studies that generate actual input for performance assessments. In areas where activity is not necessary to affect performance (e.g., biocolloid transport), repository-relevant data should be generated. Both approaches will lend a realistic perspective to a safety case/performance scenario that will most likely underscore the conservative value of that case.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Developmental Objectives for Advanced Reactor Fuels

For any technology, the pace of development is determined in part by the time and expense required to explore alternatives to the current state of the art. For example, the capabilities of software are growing exponentially in large part because the costs of experimentation are so low (e.g., a programmer can often try out a new idea in a matter of minutes). For nuclear fuels and materials, the time and cost of iterating on alternatives is extremely high, which in turn helps to explain why nuclear reactor development can be excruciatingly slow. The pace of development, however, can be accelerated in two distinct ways: (1) improvements in the productivity of our irradiation testing and post-irradiation examinations infrastructure; (2) the use of a variety of alternatives to radiological work, including physically-based models, extensive literature reviews, increased reliance on out-of-reactor testing, and evaluation of the impact of fuel system developments on reactor plant performance. Viewed in this context, a fuel development program effort consists not only of test pin fabrication, irradiation testing, and post-irradiation examinations, but also on physically-based models, out-of-reactor testing, benchmarking of models against historic fuel performance data, and literature reviews. Of course, elements of these efforts are already in place, but increased emphasis on these activities are expected to speed the fuel development effort. Quite simply, the approach calls for obtaining as much knowledge and understanding as possible using whatever means necessary while minimizing the amount of radiological work that is required. In this manner, once an irradiation test program is designed and initiated, there is not only an improved likelihood that the fuel system will behave as expected but there is also a better chance, if the testing is successful, that the fuel design will result in substantial improvements to reactor plant economics and/or safety.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Arc-Fault Primer: Numerical, Analytical, and Experimental Characteristics of Initiation and Sustainment of Arc Plasmas (DRAFT)

While arc-faults are rare in electrical installations, many documented events have led to fires that resulted in significant damage to energy-generation, commercial and residential systems, as well as surrounding structures, in both the United States and abroad. Arc-plasma discharges arise over time due to a variety of reliability issues related to cable material degradation, electrical and mechanical stresses or acute conductive wiring dislocations. These may lead to discontinuity between energized conductors, facilitating arcing events and fires. Arc-flash events rapidly release significant energy in a localized volume, where the electric arc experiences a reduction in resistance. This facilitates a reduction in electrical resistance as the arc temperature and pressure can increase rapidly. Strong pressure waves, electromagnetic interference (EMI), and intense light from an arc pose a threat to electrical worker safety and system equipment. This arc-fault primer provides basic fundamental insight into arc-fault plasma discharges, and an overview of direct current (DC) and alternating current (AC) arc-fault phenomena. This primer also covers pressure waves and EMI arc-fault hazard analyses related to incident energy prediction and potential damage analysis. Mitigation strategies are also discussed related to engineering design and employment of protective devices including arc-fault circuit interrupters (AFCIs). Best practices related to worker safety are also covered, especially as they pertain to electrical codes and standards, particularly Institute of Electrical and Electronics Engineers (IEEE) 1584 and National Fire Protection Agency (NFPA) 70E. Throughout the primer various modelling and test capabilities at Sandia National Laboratories are also covered, especially as they relate to novel methods of arc-fault/arc-flash characterization and mitigation approaches. Herein, this work describes methods for producing and characterizing controlled, sustained arcs at atmospheric pressures as well as methods for mitigation with novel materials.

42 ENGINEERING↗

Scan2Sim: Software to Convert Network Scans to Emulations

Within operational technology (OT) systems design, the construction of testing environments for simulation is often a tedious, manual process that slows down safety and security evaluations. This document details the design and functionality of Scan2Sim, a program designed to construct high-fidelity topological schematics for OT systems without significant manual human input. Scan2Sim may take as input a detailed network scan of a system, and produces an instruction set to re-create the original scanned network within a virtualized simulation network. This construction is achieved via heuristic methods of machine template selection, which allows for a fast, performant approach to automated environment construction. The current tool is designed to produce topology schematics compatible with the Minimega, a tool designed by Sandia National Laboratories for repeatable experimentation management.

97 MATHEMATICS AND COMPUTING↗

Sample Preparation Laboratory (SPL) Best Practices: CGD as the Primary Acceptance Method

The traditional paradigm applied to the construction of nuclear safety related systems, structures, and components (SSCs), like SPL, involves an owner/licensee hiring an EPC firm with an NQA 1 program to manage the engineering, procurement, and construction of the desired SSC. This traditional approach would have posed significant barriers to the successful completion of the SPL. As a smaller capital project, in the $\$$100–$\$$200 million range, there was concern that employing one of the larger EPC companies would escalate costs and extend the projected schedule beyond what would be feasible for the Department of Energy (DOE). The traditional acceptance method employed for nuclear facilities with credited safety functions requires the use of an EPC firm applying American Society of Mechanical Engineers (ASME) NQA 1 nuclear quality assurance (NQA) to accept safety SSCs. In lieu of this approach, INL elected to apply its own NQA 1 program to hire an EPC firm operating a commercial quality program. This method used commercial grade dedication (CGD) as outlined in NQA 1 which had not been applied at this scale. Use of the commercial supply chain was identified as a key factor to the successful completion of SPL. Favorable conditions enabling the use of CGD included: • INL serving as both the designer and the design authority • Design created by an NQA 1 qualified source • A mature CGD program • Availability of a CGD subject matter expert (SME) • A strong construction management program. This white paper elaborates on the methodology employed in the construction of the SPL, the successes achieved, and best practices implemented.

42 - ENGINEERING↗

Response Timing: Low Airspeed (Energy) Alerting

In response to NTSB Safety Recommendation A-14-043, the FAA was asked to task a panel of human factors, aviation operations, and aircraft design specialists, such as the Avionics Systems Harmonization Working Group (ASHWG), to develop design requirements for context-dependent low energy alerting systems for airplanes engaged in commercial operations. This recommendation is in association to the July 6, 2013, accident involving a Boeing 777-200ER, Korean registration HL7742, operating as Asiana Airlines flight 214, which was on approach to runway 28L when it struck a seawall at San Francisco International Airport (SFO), San Francisco, California. The FAA asked for human factor support from NASA in developing design requirements for context-dependent low energy alerting systems for airplanes engaged in commercial operations. Recently the ASHWG chair asked for continued support in examining flightcrew alert response timing and requested that NASA update the previous working paper on this subject. This product/paper will be provided to the ASHWG as part of the ongoing assignments from each of the ASHWG members in support of developing requirements and guidance for context-dependent low energy alerting systems for airplanes. The ASHWG is made up of interested parties from government and industry.

response timing↗