Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,009 records · Page 56

Optimal current profile control for enhanced repeatability of L-mode and H-mode discharges in DIII-D

In this work, model-based control techniques are used to obtain target current profiles in low-confinement-mode (L-mode) as well as high-confinement-mode (H-mode) DIII-D discharges. The control problem is formulated as a trajectory optimization problem to search for a feasible path from the expected initial condition to the desired target. The result comprises a sequence of feedforward (open-loop) control requests and a corresponding state evolution from the initial condition to the desired target. On top of this optimal feedforward control sequence a feedback (closed-loop) controller based on a linearized model and optimal control design techniques is added to track the desired state evolution. Furthermore, the effectiveness of the control approach is demonstrated with experiments.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Ab-initio informed cluster dynamics simulation of self- and Xe diffusivity in uranium mononitride under irradiation

Uranium mononitride (UN) is one of the ceramic nuclear fuel alternatives to oxide fuels considered for light water reactor and advanced reactor designs, as it presents significant advantages such as high uranium density (better economics) and high thermal conductivity and melting point (increased safety). Self- and fission gas diffusivities need to be better understood, given that they influence key fuel performance phenomena like swelling and fission gas release. Recently, radiation enhanced diffusivity was investigated in UN by means of cluster dynamics simulations relying on empirical potential-based parameterizations, the reliability of which highly depends on the interatomic potential accuracy. Here, in this work, we refine this approach by determining, using ab-initio calculations, the properties of defect clusters containing vacancies, self-interstitials and Xe impurities. We also consider larger clusters than previous studies. The obtained dataset (formation enthalpies, entropies, and migration barriers) is used to parameterize a cluster dynamics model of mobile clusters, and to calculate the defect cluster concentrations under irradiation. This gives us access to the radiation enhanced self- and fission gas diffusivities. Although the resulting diffusivities are close to the values reported in the literature, we find important qualitative differences in the diffusion mechanisms. Capturing the correct mechanisms is crucial to properly describe the chemistry and fission rate dependence of the model.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Energy Technology Innovation Partnership Project Strategic Energy Plan for Washington County, Maine

This Strategic Energy Plan (SEP) for Washington County, Maine was developed through the U.S. Department of Energy's Energy Technology Innovation Partnership Project (ETIPP) to address local challenges related to electricity reliability, affordability, and safety. Grounded in a "relational infrastructure" approach, the plan recognizes that improved energy outcomes depend not only on physical grid investments but also on strengthened coordination and trust between utilities and communities. Using utility-provided reliability data, public datasets, and community input, the plan identifies key risks, including vegetation-related outages, high energy burden, and vulnerability among elderly and medically dependent populations. The SEP establishes three priority areas: hazard mitigation for energy infrastructure, outage safety and emergency readiness, and energy assistance and thermal safety. It outlines community-driven actions designed to complement utility-led system improvements, including targeted outreach, municipal coordination, and expanded access to energy programs. The plan also situates local conditions within broader state policy, market dynamics, and funding opportunities. Intended as a living document, this SEP provides a scalable framework for collaborative action to improve resilience, safety, and affordability in rural energy systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA's Integrated Space Transportation Plan

Abstract NASA's Integrated Space Transportation Plan (ISTP) is the basis of the agency's new Space Launch Initiative (SLI). ISTP was developed to provide a structured methodology and framework to enable the next generation of reusable launch systems which will operate at orders of magnitude lower operating costs and higher levels of reliability and safety. Created in the fall of 1999, ISTP is the culmination of a series of Space Transportation Architecture Studies (STAS I, II, and III) which identified requirements, developed candidate architectures, and identified sets of technologies required to enable those architectures. The studies were conducted as a partnership between NASA and industry. Both new designs and shuttle-derived concepts were examined. Architectures were identified for 2" Generation Reusable Launch Vehicles (RLV), which would reach first operational capability in 2010, and 3rd Generation RLV, which will become operational in the 2025 timeframe, Second Generation RLV's have a goal of placing payloads in low earth orbit (LEO) at a cost of S 1,000/Ibm, and a safety goal of 1/10000 probability of loss of crew, The Third Generation RLV launch system will deliver payloads to LEO at $ 100/Ibm and approach airline-like reliability and safety, with a 1/ 10(exp 6) probability of loss of crew.

Anderson, David M.↗

Sensor Selection and Data Validation for Reliable Integrated System Health Management

For new access to space systems with challenging mission requirements, effective implementation of integrated system health management (ISHM) must be available early in the program to support the design of systems that are safe, reliable, highly autonomous. Early ISHM availability is also needed to promote design for affordable operations; increased knowledge of functional health provided by ISHM supports construction of more efficient operations infrastructure. Lack of early ISHM inclusion in the system design process could result in retrofitting health management systems to augment and expand operational and safety requirements; thereby increasing program cost and risk due to increased instrumentation and computational complexity. Having the right sensors generating the required data to perform condition assessment, such as fault detection and isolation, with a high degree of confidence is critical to reliable operation of ISHM. Also, the data being generated by the sensors needs to be qualified to ensure that the assessments made by the ISHM is not based on faulty data. NASA Glenn Research Center has been developing technologies for sensor selection and data validation as part of the FDDR (Fault Detection, Diagnosis, and Response) element of the Upper Stage project of the Ares 1 launch vehicle development. This presentation will provide an overview of the GRC approach to sensor selection and data quality validation and will present recent results from applications that are representative of the complexity of propulsion systems for access to space vehicles. A brief overview of the sensor selection and data quality validation approaches is provided below. The NASA GRC developed Systematic Sensor Selection Strategy (S4) is a model-based procedure for systematically and quantitatively selecting an optimal sensor suite to provide overall health assessment of a host system. S4 can be logically partitioned into three major subdivisions: the knowledge base, the down-select iteration, and the final selection analysis. The knowledge base required for productive use of S4 consists of system design information and heritage experience together with a focus on components with health implications. The sensor suite down-selection is an iterative process for identifying a group of sensors that provide good fault detection and isolation for targeted fault scenarios. In the final selection analysis, a statistical evaluation algorithm provides the final robustness test for each down-selected sensor suite. NASA GRC has developed an approach to sensor data qualification that applies empirical relationships, threshold detection techniques, and Bayesian belief theory to a network of sensors related by physics (i.e., analytical redundancy) in order to identify the failure of a given sensor within the network. This data quality validation approach extends the state-of-the-art, from red-lines and reasonableness checks that flag a sensor after it fails, to include analytical redundancy-based methods that can identify a sensor in the process of failing. The focus of this effort is on understanding the proper application of analytical redundancy-based data qualification methods for onboard use in monitoring Upper Stage sensors.

Garg, Sanjay↗

Probabilistic Analysis and Design of a Raked Wing Tip for a Commercial Transport

An approach for conducting reliability-based design and optimization (RBDO) of a Boeing 767 raked wing tip (RWT) is presented. The goal is to evaluate the benefits of RBDO for design of an aircraft substructure. A finite-element (FE) model that includes eight critical static load cases is used to evaluate the response of the wing tip. Thirteen design variables that describe the thickness of the composite skins and stiffeners are selected to minimize the weight of the wing tip. A strain-based margin of safety is used to evaluate the performance of the structure. The randomness in the load scale factor and in the strain limits is considered. Of the 13 variables, the wing-tip design was controlled primarily by the thickness of the thickest plies in the upper skins. The report includes an analysis of the optimization results and recommendations for future reliability-based studies.

Mason Brian H.↗

Safety Characteristics in System Application Software for Human Rated Exploration

NASA and its industry and international partners are embarking on a bold and inspiring development effort to design and build an exploration class space system. The space system is made up of the Orion system, the Space Launch System (SLS) and the Ground Systems Development and Operations (GSDO) system. All are highly coupled together and dependent on each other for the combined safety of the space system. A key area of system safety focus needs to be in the ground and flight application software system (GFAS). In the development, certification and operations of GFAS, there are a series of safety characteristics that define the approach to ensure mission success. This paper will explore and examine the safety characteristics of the GFAS development.

exploration↗

Development of New Type-B Containers and the 'Alternative Approach' Disposal of High-Activity Sealed Sources - 17385

The DOE/NNSA Office of Radiological Security (ORS) is undertaking two projects to enable the recovery and disposal of high-activity sealed sources. First, ORS has completed the development, certification, and fabrication of a new Type B package to support the recovery and transportation of high-activity sources commonly used in irradiators and cancer treatment devices. A second design is currently undergoing certification. The new containers will enable DOE/NNSA shipment of nearly 100 percent of all commercially used devices containing Cs-137 and Co-60, which are particularly significant from a National security, public health, and safety standpoint. Second, ORS and the Conference of Radiation Control Program Directors (CRCPD) Source Collection and Threat Reduction (SCATR) are piloting the commercial disposal of a high-activity device under the NRC's revised guidance on concentration averaging and encapsulation. The Cs-137 blood irradiator is being proposed for disposal at the U.S. Ecology facility in Richland, WA. The project is intended to serve as a model for commercial disposal of similar Class C sources that for decades have been without a commercial disposal pathway. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Optically-based Sensor System for Critical Nuclear Facilities Post-Event Seismic Structural Assessment

The U.S. Department of Energy (DOE) has ownership and operational responsibility for a large enterprise of nuclear facilities that provide essential functions to DOE missions ranging from national security to discovery science and energy research. These facilities support a number of DOE programs and offices including the National Nuclear Security Administration, Office of Science, and Office of Environmental Management. With many unique and “one of a kind” functions, these facilities represent a tremendous national investment, and assuring their safety and integrity is fundamental to the success of a breadth of DOE programs. Many DOE critical facilities are located in regions with significant natural phenomenon hazards including major earthquakes and DOE has been a leader in developing standards for the seismic analysis of nuclear facilities. Attaining and sustaining excellence in nuclear facility design and management must be a core competency of the DOE. An important part of nuclear facility management is the ability to monitor facilities and rapidly assess the response and integrity of the facilities after any major upset event. Experience in the western U.S. has shown that understanding facility integrity after a major earthquake is a significant challenge which, lacking key data, can require extensive effort and significant time. In the work described in the attached report, a transformational approach to earthquake monitoring of facilities is described and demonstrated. An entirely new type of optically-based sensor that can directly and accurately measure the earthquake-induced deformations of a critical facility has been developed and tested. This report summarizes large-scale shake table testing of the sensor concept on a representative steel frame building structure, and provides quantitative data on the accuracy of the sensor measurements.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Polyimide as a durable cathode for all-solid-state Li(Na)–organic batteries with boosted cell-level energy density

The integration of organic electrode materials (OEMs) with solid-state electrolytes (SSEs) is expected to build an all-solid-state battery (ASSB) with long-term sustainability, high safety, and high energy density. Despite this great promise, the cell-level energy density is still far from practically applicable, which stems from the ultrathick SSE layer and thin cathode layer used in a pellet-type ASSB design. Here, a cost-effective polyimide (PI) material was first exploited as an organic cathode for sulfide-based ASSBs. A capacity of ~190 mAh g -1 was delivered with almost no capacity decay over 300 cycles. Moreover, for the first time, a dry-film approach was introduced to manufacture a sheet-type Li–organic ASSB with an ultrathin SSE layer and a high-areal-loading PI cathode. Notably, PI is a perfect candidate for dry-film technology due to its high thermal stability and extraordinary chemical inertness toward sulfide SSEs. Remarkably, the free-standing SSE membrane was merely 46 μm thick, and an ultralow areal resistance of 3.3 Ω cm 2 was achieved, more than tenfold lower than that of reported SSE pellets. One order of magnitude boost in the cell-level energy density was achieved. This work presents a significant leap in transferring organic ASSB technology from laboratory research to factory manufacturing.

25 ENERGY STORAGE↗

Learning Constrained Parametric Differentiable Predictive Control Policies With Guarantees

We present differentiable predictive control (DPC), a method for offline learning of constrained neural control policies for nonlinear dynamical systems with performance guarantees. We show that the sensitivities of the parametric optimal control problem can be used to obtain direct policy gradients. Specifically, we employ automatic differentiation (AD) to efficiently compute the sensitivities of the model predictive control (MPC) objective function and constraints penalties. To guarantee safety upon deployment, we derive probabilistic guarantees on closed-loop stability and constraint satisfaction based on indicator functions and Hoeffding’s inequality. We empirically demonstrate that the proposed method can learn neural control policies for various parametric optimal control tasks. In particular, we show that the proposed DPC method can stabilize systems with unstable dynamics, track time-varying references, and satisfy nonlinear state and input constraints. Our DPC method has practical time savings compared to alternative approaches for fast and memory-efficient controller design. Specifically, DPC does not depend on a supervisory controller as opposed to approximate MPC based on imitation learning. We demonstrate that, without losing performance, DPC is scalable with greatly reduced demands on memory and computation compared to implicit and explicit MPC while being more sample efficient than model-free reinforcement learning (RL) algorithms.

97 MATHEMATICS AND COMPUTING↗

SARSCEST (human factors)

People interact with the processes and products of contemporary technology. Individuals are affected by these in various ways and individuals shape them. Such interactions come under the label 'human factors'. To expand the understanding of those to whom the term is relatively unfamiliar, its domain includes both an applied science and applications of knowledge. It means both research and development, with implications of research both for basic science and for development. It encompasses not only design and testing but also training and personnel requirements, even though some unwisely try to split these apart both by name and institutionally. The territory includes more than performance at work, though concentration on that aspect, epitomized in the derivation of the term ergonomics, has overshadowed human factors interest in interactions between technology and the home, health, safety, consumers, children and later life, the handicapped, sports and recreation education, and travel. Two aspects of technology considered most significant for work performance, systems and automation, and several approaches to these, are discussed.

Parsons, H. Mcilvaine↗

A Flight Study of a Power-Off Landing Technique Applicable to Re-Entry Vehicles

A power-off landing technique, applicable to aircraft of configurations presently being considered for manned re-entry vehicles, has been developed and flight tested at Ames Research Center. The flight tests used two configurations of an airplane for which the values of maximum lift-drag ratios were 4.0 and 2.8. Twenty-four idle-power approaches were made to an 8000-foot runway with touchdown point and airspeed accuracies of +/-600 feet and +/-10 knots, respectively. The landing pattern used was designed to provide an explicitly defined flight path for the pilot and, yet, to require no external guidance other than the pilot's view from the cockpit. The initial phase of the approach pattern is a constant high-speed descent from altitude aimed at a ground reference point short of the runway threshold. At a specified altitude and speed, a constant g pull-out is made to a shallow flight path along which the air-plane decelerates to the touchdown point. Repeatability and safety are inherent because of the reduced number of variables requiring pilot judgment, and because of the fact that a missed approach is evident at speeds and altitudes suitable for safe ejection. The accuracy and repeatability of the pattern are indicated by the measured results. The proposed pattern appears to be particularly suitable for configurations having unusual drag variations with speed in the lower speed regime, since the pilot is not required to control speed in the latter portions of the pattern.

Bray, Richard S.↗

Demonstration of a Safety Analysis on a Complex System

For the past 17 years, Professor Leveson and her graduate students have been developing a theoretical foundation for safety in complex systems and building a methodology upon that foundation. The methodology includes special management structures and procedures, system hazard analyses, software hazard analysis, requirements modeling and analysis for completeness and safety, special software design techniques including the design of human-machine interaction, verification, operational feedback, and change analysis. The Safeware methodology is based on system safety techniques that are extended to deal with software and human error. Automation is used to enhance our ability to cope with complex systems. Identification, classification, and evaluation of hazards is done using modeling and analysis. To be effective, the models and analysis tools must consider the hardware, software, and human components in these systems. They also need to include a variety of analysis techniques and orthogonal approaches: There exists no single safety analysis or evaluation technique that can handle all aspects of complex systems. Applying only one or two may make us feel satisfied, but will produce limited results. We report here on a demonstration, performed as part of a contract with NASA Langley Research Center, of the Safeware methodology on the Center-TRACON Automation System (CTAS) portion of the air traffic control (ATC) system and procedures currently employed at the Dallas/Fort Worth (DFW) TRACON (Terminal Radar Approach CONtrol). CTAS is an automated system to assist controllers in handling arrival traffic in the DFW area. Safety is a system property, not a component property, so our safety analysis considers the entire system and not simply the automated components. Because safety analysis of a complex system is an interdisciplinary effort, our team included system engineers, software engineers, human factors experts, and cognitive psychologists.

Leveson, Nancy↗

Failure Assessment of Brazed Structures

Despite the great advances in analytical methods available to structural engineers, designers of brazed structures have great difficulties in addressing fundamental questions related to the loadcarrying capabilities of brazed assemblies. In this chapter we will review why such common engineering tools as Finite Element Analysis (FEA) as well as many well-established theories (Tresca, von Mises, Highest Principal Stress, etc) don't work well for the brazed joints. This chapter will show how the classic approach of using interaction equations and the less known Coulomb-Mohr failure criterion can be employed to estimate Margins of Safety (MS) in brazed joints.

Flom, Yuri↗

Fault Management Design Strategies

Development of dependable systems relies on the ability of the system to determine and respond to off-nominal system behavior. Specification and development of these fault management capabilities must be done in a structured and principled manner to improve our understanding of these systems, and to make significant gains in dependability (safety, reliability and availability). Prior work has described a fundamental taxonomy and theory of System Health Management (SHM), and of its operational subset, Fault Management (FM). This conceptual foundation provides a basis to develop framework to design and implement FM design strategies that protect mission objectives and account for system design limitations. Selection of an SHM strategy has implications for the functions required to perform the strategy, and it places constraints on the set of possible design solutions. The framework developed in this paper provides a rigorous and principled approach to classifying SHM strategies, as well as methods for determination and implementation of SHM strategies. An illustrative example is used to describe the application of the framework and the resulting benefits to system and FM design and dependability.

systems engineering↗

Advanced Exploration Systems Atmosphere Resource Recovery and Environmental Monitoring

In September 2011, the Atmosphere Resource Recovery and Environmental Monitoring (ARREM) project was commissioned by NASA's Advanced Exploration Systems program to advance Atmosphere Revitalization Subsystem (ARS) and Environmental Monitoring Subsystem (EMS) technologies for enabling future crewed space exploration missions beyond low Earth orbit. The ARREM project's period of performance covered U.S. Government fiscal years 2012-2014. The ARREM project critically assessed the International Space Station (ISS) ARS and EMS architectures and process technologies as the foundation for an architecture suitable for deep space exploration vehicles. The project's technical content included technical tasks focused on improving the reliability and life cycle cost of ARS and EMS technologies as well as reducing future flight project developmental risk and design, development, test, and evaluation costs. Targeted technology development and maturation tasks, including key technical trade assessments, were accomplished and integrated ARS architectures were demonstrated. The ARREM project developed, demonstrated, and tested leading process technology candidates and subsystem architectures that met or exceeded key figures of merit, addressed capability gaps, and significantly improved the efficiency, safety, and reliability over the state-of-the-art ISS figures of merit. Promising EMS instruments were developed and functionally demonstrated in a simulated cabin environment. The project's technical approach and results are described and recommendations for continued development are provided.

Perry, J.↗

The Challenger disaster was caused by an Apollo decision

NASA’s view of risk changed between early Apollo and the Space Shuttle. Risk was a known serious problem at the beginning of Apollo and the risk estimates were disturbingly high. To avoid public concern, risk analysis was discontinued. Risk analysis was avoided in Shuttle, leading to an unnecessarily risky design. The immediate cause of the Challenger tragedy was the mistaken decision to launch in cold weather. The fundamental cause was the high risk of the Shuttle design. Before Challenger, management thought and testified that the probability of an accident was 1 in 100,000. After Challenger, Probabilistic Risk Analysis (PRA) found a roughly 1 in 100 chance of a Shuttle failure. The recent Orion design uses the safer Apollo approach, with a hardened capsule, launch abort escape, and the crew placed above the rocket tanks and engines. During Apollo it was estimated that, “assuming all elements from propulsion to rendezvous and life support were done as well or better than ever before, that 30 astronauts would be lost before 3 were returned safely to the Earth.” The chance of astronaut survival was only 10%. After the Apollo 1 tragedy, the awareness of risk led to an intense focus on achieving safety. “The only possible explanation for the astonishing success – no losses in space and on time – was that every participant at every level in every area far exceeded the norm of human capabilities.” During Apollo, a NASA PRA found that the chance of success was “less than 5 percent.” The NASA Administrator felt that “the numbers could do irreparable harm,” and discontinued numerical risk assessment.

Harry W Jones↗