SEARCH · Search NASA

Results for “Safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

All sources NASA NTRS DOE OSTI

DOE OSTI2023

Expansion of Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Electrolysis Hydrogen Production Plants

This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Power Operation and Generation (FPOG) program that presented generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors to support the co-location of a high temperature hydrogen electrolysis facility (HTEF). Probabilistic and deterministic hazards assessments and risk analyses are leveraged throughout this report. Several improvements and new analyses are included in this report. First, higher amounts of detail in the specifications of the generic HTEFs are used to produce scaled results for a 100, 500, and 1000 MW nominal hydrogen production facility. An additional hazard assessment of 1000 kg of hydrogen storage is performed. The facility hazards and footprint are assessed to determine the safe distance required for placement near the nuclear power plant (NPP). Second, specific designs for corresponding HESs for the different levels of support required by the HTEFs are analyzed in the PRA model. Third, a hazards analysis of the specified HTEFs leads not only to effects of the quantified risk assessment for the NPP, but also qualitative hazards assessment for the community. Finally, a seismic analysis and a high winds analysis have each been added to the PRA. The results investigate the applicability of the potential licensing approaches which do not require a full United States (U.S.) Nuclear Regulatory Commission (NRC) licensing review. The PRAs are generic and include listed assumptions. The HTEF design built for this project has further eliminated many conservative assumptions from the prior PRAs in this series. The PRA results indicate that the 10 CFR 50.59 licensing approach is justified due to the minimal increase in initiating event frequencies for all design basis accidents, with none exceeding 7.7%. The PRA results for core damage frequency and large early release frequency support the use of NRC Regulation Guide 1.174 as further risk information that supports a change without a full licensing amendment review. The hazard analyses and PRA confirm the need for engineered blast barriers of storage tanks and the common production header leaving the HTEF. The hazards analyses and PRA also confirm with high confidence that using the assumptions of design in this report that the safety case for licensing an HES addition and an HTEF sited with its unprotected high-pressure stage components 187 meters from the NPP’s transmission towers (the most fragile structure, system, and component) is strong.

08 HYDROGEN↗

DOE OSTI2023

Simulations of Water Flow in Relation to a Steady Criticality in an Unsaturated Alluvial Repository

Oak Ridge National Laboratory (ORNL) is examining the conditions under which a criticality event could be ruled out for large packages placed in an unsaturated alluvial repository. This work specifically examines the water level in a stylized waste package that is assumed (1) to fail on the top, and (2) to empty as water is driven away—not by boiling—but by fluid flow phenomena driven by thermal gradients. This analysis uses the PFLOTRAN code package. Specifically, this year’s work includes examination of the heat rate at which water is driven away for various percolation rates using the same assumptions listed in the 2022 annual report. The STANDARDS (formerly UNF-ST&DARDS) package has predicted dual-purpose canister (DPC) neutron multiplication factors (k-effectives) ranging above 1.1 (unitless) with failed components. The DPC designs were not created with the intent to use for disposal purposes. Emplacing such packages may be worth consideration if it can be shown that criticality is either extremely unlikely or of very low consequence to the repository’s safety case. This work aims to help establish hydrologic boundary conditions for a highly hypothetical, highly stylized subsurface criticality event. The approach to critical is assumed to be slow, producing steady heating rates under a few kilowatts. For a DPC containing capillary media, the simulated power required for dry-out was proportional to the percolation rate but was unaffected by the size of a large breech on top of the DPC. Results for single cases with no capillary media in the DPC suggest that higher infiltration rates may be required in those cases to cause flooding. Bounding mechanisms and assumptions must be identified and characterized further by performing additional perturbations to various input parameters to demonstrate robustness of the results. This might be accomplished by examining responses to power pulses to determine the system transfer function required to enable a reduced order feedback model.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2024

Brine Availability Test in Salt (BATS) FY24 Update

This report summarizes fiscal year 2024 (FY24) activities centered around a series of field tests in bedded salt at the Waste Isolation Pilot Plant (WIPP) funded by the Office of Spent Fuel and Waste Science and Technology in the Spent Fuel and Waste Disposition (SFWD) program of the US Department of Energy’s Office of Nuclear Energy (DOE-NE). High-level Purpose of Experiments: The Brine Availability Test in Salt (BATS) field tests are revealing both brine occurrence (i.e., where, and how much) and brine migration (i.e., how easily it moves) in the excavation damaged zone (EDZ). This understanding is foundational to develop a safety case for a future heat-generating waste repository in salt, and to starting up a generic repository program in salt to buy down risk. BATS seeks to predict how much brine can flow into both ambient and heated excavations (e.g., boreholes or rooms) in salt. This work is educating and empowering new repository scientists on two fronts: “design and execution of field tests” and “prediction and modeling of coupled processes.” DOE-NE capabilities in salt have grown and been tested through international modeling and benchmarking exercises (e.g., DECOVALEX, RANGERS, KOMPASS, and MEASURES; see Mills et al., 2024). The hands-on expertise we are building is a necessary step towards large-scale disposal demonstrations and eventual implementation.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2024

DECOVALEX-2023: Task B Final Report

In all repository concepts for the geological disposal of radioactive waste, an engineered barrier system (EBS) is used to encapsulate the waste canister, or, to act as borehole or gallery seals. These systems are often based on bentonite clays due to their low permeability and high swelling capacity enabling the closure of engineering voids. However, in all repository concepts gases will be generated through the corrosion of metallic materials (under anoxic conditions), the radioactive decay of waste and the radiolysis of water. Thus, understanding the processes and mechanisms controlling the advective movement of gas (as a discrete phase) in clay-based materials is a key aspect when assessing the impact of gas flow in a repository safety case.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2026

Modeling the PV System Level Economic Impact of PV Connector Failure Modes

Photovoltaic (PV) connectors must maintain mechanical integrity for over 25 years while operating under UV exposure, elevated temperature, and mechanical loading. Connector degradation increases with electrical resistance, leading to energy losses, unplanned downtime, and higher operation and maintenance (O&M) costs and in severe cases, safety risks from overhearing or arcing. Connector related failures remain among the most frequent causes of disruption in utility-scale PV (UPV) systems, yet their lifetime economic impacts are poorly quantified. This work presents a techno-economic analysis (TEA) framework that links identified connector failure modes to system level energy losses and lifetime cost impacts using identified resistance measurements and failure rates from 6,2761 PV connectors inspected. Connector failures increase system level O&M costs, raising LCOE by roughly 5%. Downtime driven availability losses dominate economic impact. Resistance-driven I2R and IV-curve losses are secondary, but remain non-negligible. Thermal damage, bend-radius violations, and loose connections drive the majority of LCOE uplift Improving connector reliability through better installation quality, inspection, and design can meaningfully reduce lost energy, O&M costs, and LCOE.

14 SOLAR ENERGY↗

DOE OSTI2023

Compaction of crushed salt for safe containment – a summary of the KOMPASS projects

Abstract. For the underground disposal of high-level nuclear waste in rock salt formations, the safety concept includes the backfilling of open cavities with crushed salt. For the prognosis of the sealing function of the backfill for the safe containment of the radioactive waste, it is crucial to have a comprehensive process understanding of the crushed-salt compaction behavior. The crushed-salt compaction process is influenced by internal properties (e.g., grain size, mineralogy, and moisture content) and boundary conditions (e.g., temperature, stress state, and compaction rate) and, therefore, involves several coupled thermal–hydro–mechanical (THM) processes (Hansen et al., 2014; Kröhn et al., 2017). With the paradigm shift from the limited release of radionuclides to safe containment due to the German Repository Site Selection Act passed in 2017, the importance of crushed salt as geotechnical barrier has increased, with a focus on the evolution of its hydraulic properties. Based on the knowledge gaps in the current process understanding, the “Compaction of crushed salt for safe containment” (KOMPASS) projects were initiated to improve the scientific basis behind using crushed salt for the long-term isolation of high-level nuclear waste within rock salt repositories. The efforts to improve the prediction of crushed-salt compaction begun during the first phase of the KOMPASS projects (Czaikowski et al., 2020) and were followed up in a second phase ending in June 2023. The primary achievements of the projects are as follows (Czaikowski et al., 2020; Friedenberg et al., 2022): specification of the KOMPASS reference material, an easily available and reproducible synthetic crushed-salt material, for generic investigations; development of pre-compaction methods and successful production of samples in the short term and under in situ loading conditions; formulation of an extended laboratory program addressing the isolated investigation of known relevant factors influencing the compaction behavior of crushed salt (Düsterloh et al., 2022); execution of long-term compaction tests addressing isotropic and deviatoric load changes, temperature, and compaction state; construction of a backfill body using the KOMPASS reference material in the Sondershausen mine through collaboration with the SAVER (Entwicklung eines salzgrusbasierten Versatzkonzepts unter der Option Rückholbarkeit) project (Schaarschmidt and Friedenberg, 2022); advancement of the tools for microstructure investigation methods (Svensson and Laurich, 2022); generation (first stages) of a microphysical process list combining literature research with our own findings; benchmarking of long-term compaction test for model development and optimization of various existing models as well as the development of new models; application of a virtual demonstrator (2D model representing a backfilled drift in rock salt) for the visualization of developments and the quantification of the models (Rabbel, 2022). In summary, the KOMPASS projects contributed to the reduction of uncertainties and the strengthening of the safety case for using crushed salt within rock salt repositories.

Friedenberg, Larissa↗

NASA NTRS2004

Mars Radiator Characterization Experimental Program

Radiators are an enabling technology for the human exploration and development of the moon and Mars. As standard components of the heat rejection subsystem of space vehicles, radiators are used to reject waste heat to space and/or a planetary environment. They are typically large components of the thermal control system for a space vehicle or human habitation facility, and in some cases safety factors are used to oversize them when the operating environment cannot be fully characterized. Over-sizing can impose significant weight and size penalties that might be prohibitive for future missions. Radiator performance depends on the size of the radiator surface, its emittance and absorptance, the radiator temperature, the effective sky temperature surrounding the radiator, solar radiation and atmospheric irradiation levels, convection to or from the atmosphere (on Mars), and other conditions that could affect the nature of the radiator surface, such as dust accumulation. Most particularly, dust is expected to be a major contributor to the local environmental conditions on either the lunar or Martian surface. This conclusion regarding Mars is supported by measurements of dust accumulation on the Mars Sojourner Rover solar array during the Pathfinder mission. This Final Report describes a study of the effect of Martian dust accumulation on radiator performance. It is comprised of quantitative measurements of effective emittance for a range of dust accumulation levels on surfaces of known emittance under clean conditions. The test radiator coatings were Z-93P, NS-43G, and Silver Teflon (10 mil) film. The Martian dust simulant was Carbondale Red Clay. Results were obtained under vacuum conditions sufficient to reduce convection effects virtually to zero. The experiments required the development of a calorimetric apparatus that allows simultaneous measurements of the effective emittance for all the coatings at each set of experimental conditions. A method of adding dust to multiple radiator coupons was developed and shown to be capable of depositing dust on the surfaces with acceptable uniformity. In these experiments, the dust layer accumulates under earth gravity and in the presence of an earth atmosphere. An invention disclosure for the dust deposition apparatus is being filed through NASA and University of Houston.

Witte, Larry C.↗

NASA NTRS2007

NASA Dryden's UAS Service Capabilities

The vision of NASA s Dryden Flight Research Center is to "fly what others only imagine." Its mission is to advance technology and science through flight. Objectives supporting the mission include performing flight research and technology integration to revolutionize aviation and pioneer aerospace technology, validating space exploration concepts, conducting airborne remote sensing and science missions, and supporting operations of the Space Shuttle and the International Space Station. A significant focus of effort in recent years has been on Unmanned Aircraft Systems (UAS), both in support of the Airborne Science Program and as research vehicles to advance the state of the art in UAS. Additionally, the Center has used its piloted aircraft in support of UAS technology development. In order to facilitate greater access to the UAS expertise that exists at the Center, that expertise has been organized around three major capabilities. The first is access to high-altitude, long-endurance UAS. The second is the establishment of a test range for small UAS. The third is safety case assessment support.

Bauer, Jeff↗

NASA NTRS2008

Proceedings of the Sixth NASA Langley Formal Methods (LFM) Workshop

Today's verification techniques are hard-pressed to scale with the ever-increasing complexity of safety critical systems. Within the field of aeronautics alone, we find the need for verification of algorithms for separation assurance, air traffic control, auto-pilot, Unmanned Aerial Vehicles (UAVs), adaptive avionics, automated decision authority, and much more. Recent advances in formal methods have made verifying more of these problems realistic. Thus we need to continually re-assess what we can solve now and identify the next barriers to overcome. Only through an exchange of ideas between theoreticians and practitioners from academia to industry can we extend formal methods for the verification of ever more challenging problem domains. This volume contains the extended abstracts of the talks presented at LFM 2008: The Sixth NASA Langley Formal Methods Workshop held on April 30 - May 2, 2008 in Newport News, Virginia, USA. The topics of interest that were listed in the call for abstracts were: advances in formal verification techniques; formal models of distributed computing; planning and scheduling; automated air traffic management; fault tolerance; hybrid systems/hybrid automata; embedded systems; safety critical applications; safety cases; accident/safety analysis.

Rozier, Kristin Yvonne↗

NASA NTRS2011

State-Based Implicit Coordination and Applications

In air traffic management, pairwise coordination is the ability to achieve separation requirements when conflicting aircraft simultaneously maneuver to solve a conflict. Resolution algorithms are implicitly coordinated if they provide coordinated resolution maneuvers to conflicting aircraft when only surveillance data, e.g., position and velocity vectors, is periodically broadcast by the aircraft. This paper proposes an abstract framework for reasoning about state-based implicit coordination. The framework consists of a formalized mathematical development that enables and simplifies the design and verification of implicitly coordinated state-based resolution algorithms. The use of the framework is illustrated with several examples of algorithms and formal proofs of their coordination properties. The work presented here supports the safety case for a distributed self-separation air traffic management concept where different aircraft may use different conflict resolution algorithms and be assured that separation will be maintained.

Narkawicz, Anthony J.↗

NASA NTRS2014

Neither Pollyanna nor Chicken Little: Thoughts on the Ethics of Automation

This paper has raised issues concerning the ethics of automation in aviation systems, and outlined ways of thinking about the issues that may help in ethical decision making. It is very easy to be carried along by technology and the Pollyanna view, but just because we can do something, doesn't mean we should - which is perhaps a little milder than the Chicken Little view. Both views have merits, and we would view ethical decisions as ones that more appropriately balance or reconcile these conflicting viewpoints. We have set out some of the background to the problems of automation in aviation systems, but are aware that there is much more that could be said (considering military UAS, for example). We hope, however, that the brief introduction provides a foundation for the ethical questions that we have set out. The underlying aim in proposing ESCs is to make understanding ethical issues easier so that ethically-informed decisions can be made. Whilst we have not linked the discussion directly back to specific ethical decisions, we believe that making explicit those issues on which such judgments are based is a contribution to ethically informed decision making. We also believe that the four principles set out by the RAEng are reflected in this approach. We acknowledge that what we have set out, especially the ideas of ESC, goes some way beyond current practice and principles and there are significant technical issues to resolve before such an approach could be implemented. It is hoped, however, that the ideas will help improve the production and presentation of safety cases in a range of industries not just aviation - a Pollyanna view, of course!

Holloway, C. Michael↗

NASA NTRS2014

The Evolution of System Safety at NASA

The NASA system safety framework is in the process of change, motivated by the desire to promote an objectives-driven approach to system safety that explicitly focuses system safety efforts on system-level safety performance, and serves to unify, in a purposeful manner, safety-related activities that otherwise might be done in a way that results in gaps, redundancies, or unnecessary work. An objectives-driven approach to system safety affords more flexibility to determine, on a system-specific basis, the means by which adequate safety is achieved and verified. Such flexibility and efficiency is becoming increasingly important in the face of evolving engineering modalities and acquisition models, where, for example, NASA will increasingly rely on commercial providers for transportation services to low-earth orbit. A key element of this objectives-driven approach is the use of the risk-informed safety case (RISC): a structured argument, supported by a body of evidence, that provides a compelling, comprehensible and valid case that a system is or will be adequately safe for a given application in a given environment. The RISC addresses each of the objectives defined for the system, providing a rational basis for making informed risk acceptance decisions at relevant decision points in the system life cycle.

Dezfuli, Homayoon↗

NASA NTRS2015

Java Architecture for Detect and Avoid Extensibility and Modeling

Unmanned aircraft will equip with a detect-and-avoid (DAA) system that enables them to comply with the requirement to "see and avoid" other aircraft, an important layer in the overall set of procedural, strategic and tactical separation methods designed to prevent mid-air collisions. This paper describes a capability called Java Architecture for Detect and Avoid Extensibility and Modeling (JADEM), developed to prototype and help evaluate various DAA technological requirements by providing a flexible and extensible software platform that models all major detect-and-avoid functions. Figure 1 illustrates JADEM's architecture. The surveillance module can be actual equipment on the unmanned aircraft or simulators that model the process by which sensors on-board detect other aircraft and provide track data to the traffic display. The track evaluation function evaluates each detected aircraft and decides whether to provide an alert to the pilot and its severity. Guidance is a combination of intruder track information, alerting, and avoidance/advisory algorithms behind the tools shown on the traffic display to aid the pilot in determining a maneuver to avoid a loss of well clear. All these functions are designed with a common interface and configurable implementation, which is critical in exploring DAA requirements. To date, JADEM has been utilized in three computer simulations of the National Airspace System, three pilot-in-the-loop experiments using a total of 37 professional UAS pilots, and two flight tests using NASA's Predator-B unmanned aircraft, named Ikhana. The data collected has directly informed the quantitative separation standard for "well clear", safety case, requirements development, and the operational environment for the DAA minimum operational performance standards. This work was performed by the Separation Assurance/Sense and Avoid Interoperability team under NASA's UAS Integration in the NAS project.

unmanned aircraft systems↗

NASA NTRS2016

A Vision and Roadmap for Increasing User Autonomy in Flight Operations in the National Airspace

The purpose of Air Transportation is to move people and cargo safely, efficiently and swiftly to their destinations. The companies and individuals who use aircraft for this purpose, the airspace users, desire to operate their aircraft according to a dynamically optimized business trajectory for their specific mission and operational business model. In current operations, the dynamic optimization of business trajectories is limited by constraints built into operations in the National Airspace System (NAS) for reasons of safety and operational needs of the air navigation service providers. NASA has been developing and testing means to overcome many of these constraints and permit operations to be conducted closer to the airspace user's changing business trajectory as conditions unfold before and during the flight. A roadmap of logical steps progressing toward increased user autonomy is proposed, beginning with NASA's Traffic Aware Strategic Aircrew Requests (TASAR) concept that enables flight crews to make informed, deconflicted flight-optimization requests to air traffic control. These steps include the use of data communications for route change requests and approvals, integration with time-based arrival flow management processes under development by the Federal Aviation Administration (FAA), increased user authority for defining and modifying downstream, strategic portions of the trajectory, and ultimately application of self-separation. This progression takes advantage of existing FAA NextGen programs and RTCA standards development, and it is designed to minimize the number of hardware upgrades required of airspace users to take advantage of these advanced capabilities to achieve dynamically optimized business trajectories in NAS operations. The roadmap is designed to provide operational benefits to first adopters so that investment decisions do not depend upon a large segment of the user community becoming equipped before benefits can be realized. The issues of equipment certification and operational approval of new procedures are addressed in a way that minimizes their impact on the transition by deferring a change in the assignment of separation responsibility until a large body of operational data is available to support the safety case for this change in the last roadmap step.This paper will relate the roadmap steps to ongoing activities to clarify the economics-based transition to these technologies for operational use.

Cotton, William B.↗

NASA NTRS2014

Investigating the Impacts of a Separation Standard for UAS Operations in Enroute and Transition Airspace

Unmanned aircraft systems will be required to equip with a detect and avoid system in order to satisfy the federal aviation regulations to remain well clear of other aircraft. To comply with regulations in today’s operations manned aircraft must “see and avoid” other aircraft and use subjective judgment to determine whether those aircraft are well clear. For a detect-and- avoid (DAA) system to satisfy the requirement to stay well clear, a quantitative definition of well clear needs to be defined and evaluated. Definitions for the boundary of well clear have been proposed by the Unmanned Aircraft System (UAS) Executive Committee Science and Research Panel (SaRP) and the Radio Technical Commission for Aeronautics (RTCA) Special Committee 228 on Detect and Avoid Systems. This study investigates the interoperability implications of UAS using proposed well clear definitions as a separation standard for conducting operations in the national airspace system. The first analysis in the study focuses on the effect of variations in well clear definition parameters on the rate of losses of well clear per flight hour. The second analysis considers three well clear definitions and presents the relative state conditions of intruder aircraft as they encroach upon the well clear boundary. The third analysis focuses on the definition of the alerting criteria needed to inform the UAS operator of a potential loss of well clear. All three analyses are conducted in a NAS-wide fast-time simulation environment using UAS aircraft models, proposed UAS missions, and historical air defense radar data to populate the background traffic operating under visual flight rules. The results from the three analyses presented in this study inform the safety case, requirements development, and the operational environment for the DAA minimum operational performance standards.

UAS Seperation Standard↗

NASA NTRS2015

NASA ACES V&V Alignment Briefing

Santiago, Confesor↗

NASA NTRS2015

Proposal for a Sample Pilot Response Model

Regulations to establish operational and performance requirements for unmanned aircraft systems (UAS) are being developed by a consortium of government, industry and academic institutions. Those requirements will apply to the new detect and avoid (DAA) systems and other equipment necessary to integrate UAS with the National Airspace System (NAS) and are determined according to their contribution to the overall safety case for such an integration. In order to perform end-to-end verification and validation of DAA requirements, a committee accepted pilot response model is needed to emulate UAS pilots in closed-loop Monte Carlo fast-time simulations. This briefing focuses on background of the pilot model used in previous Airspace Concept Evaluation System studies, identification of strengths and weaknesses in that model, and proposals on model improvements. The briefing also looks to build consensus around a common architecture and assumptions for modeling the pilot for UAS DAA systems.

Santiago, Confesor↗

NASA NTRS2016

Model Based Mission Assurance: NASA's Assurance Future

Model Based Systems Engineering (MBSE) is seeing increased application in planning and design of NASA’s missions. This suggests the question: what will be the corresponding practice of Model Based Mission Assurance (MBMA)? Contemporaneously, NASA’s Office of Safety and Mission Assurance (OSMA) is evaluating a new objectives based approach to standards to ensure that the Safety and Mission Assurance disciplines and programs are addressing the challenges of NASA’s changing missions, acquisition and engineering practices, and technology. MBSE is a prominent example of a changing engineering practice. We use NASA’s objectives-based strategy for Reliability and Maintainability as a means to examine how MBSE will affect assurance. We surveyed MBSE literature to look specifically for these affects, and find a variety of them discussed (some are anticipated, some are reported from applications to date). Predominantly these apply to the early stages of design, although there are also extrapolations of how MBSE practices will have benefits for testing phases. As the effort to develop MBMA continues, it will need to clearly and unambiguously establish the roles of uncertainty and risk in the system model. This will enable a variety of uncertainty-based analyses to be performed much more rapidly than ever before and has the promise to increase the integration of CRM (Continuous Risk Management) and PRA (Probabilistic Risk Analyses) even more fully into the project development life cycle. Various views and viewpoints will be required for assurance disciplines, and an over-arching viewpoint will then be able to more completely characterize the state of the project/program as well as (possibly) enabling the safety case approach for overall risk awareness and communication.

Evans, John↗