SEARCH · Search NASA

Results for “dynamic safety cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

All sources NASA NTRS DOE OSTI

DOE OSTI2024

Development of Whole System Digital Twins for Advanced Reactors: Leveraging Graph Neural Networks and SAM Simulations

Here, in this work, we introduce a novel method to develop whole system digital twins (DTs) for advanced nuclear reactors. This method treats a complex reactor system as a heterogeneous graph: with the system components as different types of graph nodes and their physical interconnections as edges. Based on the heterogeneous graph, a graph neural network combining graph convolution and temporal node attention is developed as the DT, facilitating a comprehensive understanding of the system's dynamic behavior. By utilizing the System Analysis Module (SAM) code for simulating various operational transients, we develop a graph-based database that trains the DT. This DT is characterized by two primary functions: It can infer the entire system's status using sparse node information, and it can predict the progress of transients based on current and historical system information. Our approach is validated through case studies on the Experimental Breeder Reactor II (EBR-II) system and a generic Fluoride-salt-cooled High-temperature Reactor (gFHR), demonstrating the DT's accuracy in forecasting operational transients. The DT's rapid computation capabilities enhance its potential for supporting advanced reactor operations, offering benefits in intelligent simulation, autonomous control, and anomaly detection, paving the way for improved safety analysis and intelligent component health management for advanced reactor systems and reducing their operations and maintenance cost.

EBR-II↗

DOE OSTI2024

Hybrid model predictive control techniques for safety factor profile and stored energy regulation while incorporating NBI constraints

Abstract A novel hybrid Model Predictive Control (MPC) algorithm has been designed for simultaneous safety factor ( q ) profile and stored energy ( w ) control while incorporating the pulse-width-modulation constraints associated with the neutral beam injection (NBI) system. Regulation of the q -profile has been extensively shown to be a key factor for improved confinement as well as non-inductive sustainment of the plasma current. Simultaneous control of w is necessary to prevent the triggering of pressure-driven magnetohydrodynamic instabilities as the controller shapes the q profile. Conventional MPC schemes proposed for q -profile control have considered the NBI powers as continuous-time signals, ignoring the discrete-time nature of these actuators and leading in some cases to performance loss. The hybrid MPC scheme in this work has the capability of incorporating the discrete-time actuator dynamics as additional constraints. In nonlinear simulations, the proposed hybrid MPC scheme demonstrates improved q -profile+ w control performance for NSTX-U operating scenarios.

Physics↗

NASA NTRS1980

Effects of primary rotor parameters on flapping dynamics

The effects of flapping dynamics of four main rotor design features that influence the agility, stability, and operational safety of helicopters are studied. The parameters include flapping hinge offset, flapping hinge restraint, pitch-flap coupling, and blade lock number. First, the flapping equations of motion are derived that explicitly contain the design parameters. The dynamic equations are then developed for the tip-path plane, and the influence of individual and combined variations in the design parameters determined. The steady state flapping response is examined with respect to control input and aircraft angular rate which leads to a feedforward control law for control decoupling through cross feed, and a feedback control law to decouple the steady state flapping response. The condition for achieving perfect decoupling of the flapping response due to aircraft pitch and roll rates without using feedback control is also found for the hover case. It is indicated that the frequency of the regressing flapping mode of the rotor system can become low enough to require consideration in the assessment of handling characteristics.

Chen, R. T. N.↗

DOE OSTI2022

A machine-learning framework for the simulation of nuclear deflection of Planet-Killer-Asteroids

Here, as detection capabilities in astronomy have dramatically improved over the last two decades, concerns over Planet-Killer-Asteroids (PKAs) have become widespread, with nuclear weapons being proposed to destroy or deflect asteroids that are on a short-term projected collision course with Earth. Two main mitigation strategies have been proposed: • Case 1: Break up an incoming asteroid into smaller pieces that will disperse widely, resulting in smaller-scale, less detrimental, Earth-impacts or • Case 2: Deflect an incoming asteroid trajectory to avoid collision altogether. While the two strategies are not mutually exclusive, deflection is a safer strategy, ideally by harnessing all of the released energy from a nuclear device to move the asteroid as a rigid body. However, this case may not be always possible, since the strength of the energy release may break up the asteroid. In this work, the dynamical response of a PKA to a series of ultra-high energy impulses, such as those generated by nuclear devices, is formulated. A rapid iterative Discrete Element Method (DEM) method is developed to describe the deflection and potential breakup of the PKA as a function of a material bonding strength parameter within the asteroid and the magnitude of the applied impulse. The use of DEM allows for fragmentation of the PKA and the ability to compute the trajectories and distribution of the resulting debris field. Finally, a machine-learning algorithm is then developed and combined with the DEM approach to optimize the pulsation strategy for maximum possible safety and success.

42 ENGINEERING↗

DOE OSTI2021

Inference of Rock Flow and Mechanical Properties from Injection-Induced Microseismic Events During Geologic CO 2 Storage

Monitoring microseismic activities during CO 2 injection into geologic formations is important for ensuring the safety of the storage operations. The resulting data provide insight into the response of the storage formation to CO 2 injection and can be used to infer the underlying rock flow and mechanical properties. In this paper, assimilation of microseismic data is performed for dynamic characterization of the storage formation by using a stochastic simulation model to forecast the microseismic response of a geologic formation during CO 2 injection. Two modeling approaches are adopted to predict the space-time distribution of the injection-induced microseismicity. The first model is based on pore pressure relaxation assumption, while the second model uses coupled flow and geomechanics simulation to establish the complex physical relation between the storage formation properties and the corresponding microseismic responses during CO 2 injection. The stochastic predictive models in each case are used in ensemble data assimilation frameworks to estimate rock properties from the observed microseismic data. Two data assimilation methods are considered: (i) a new ensemble-based stochastic point process filter (EnPPF) that can directly integrate discrete microseismic events, and (ii) a variant of ensemble smoother, known as the ensemble smoother with multiple data assimilation (ES-MDA), which requires continuous representation of microseismic events for assimilation. The two methods are successfully applied to a geologically realistic model of the Farnsworth Field in Texas, with complex geologic flow units and interacting fault systems.

42 ENGINEERING↗

NASA NTRS2002

Reusable Autonomy

Currently, spacecraft ground systems have a well defined and somewhat standard architecture and operations concept. Based on domain analysis studies of various control centers conducted over the years it is clear that ground systems have core capabilities and functionality that are common across all ground systems. This observation alone supports the realization of reuse. Additionally, spacecraft ground systems are increasing in their ability to do things autonomously. They are being engineered using advanced expert systems technology to provide automated support for operators. A clearer understanding of the possible roles of agent technology is advancing the prospects of greater autonomy for these systems. Many of their functional and management tasks are or could be supported by applied agent technology, the dynamics of the ground system's infrastructure could be monitored by agents, there are intelligent agent-based approaches to user-interfaces, etc. The premise of this paper is that the concepts associated with software reuse, applicable in consideration of classically-engineered ground systems, can be updated to address their application in highly agent-based realizations of future ground systems. As a somewhat simplified example consider the following situation, involving human agents in a ground system context. Let Group A of controllers be working on Mission X. They are responsible for the command, control and health and safety of the Mission X spacecraft. Let us suppose that mission X successfully completes it mission and is turned off. Group A could be dispersed or perhaps move to another Mission Y. In this case there would be reuse of the human agents from Mission X to Mission Y. The Group A agents perform their well-understood functions in a somewhat but related context. There will be a learning or familiarization process that the group A agents go through to make the new context, determined by the new Mission Y, understood. This simplified scenario highlights some of the major issues that need to be addressed when considering the situation where Group A is composed of software-based agents (not their human counterparts) and they migrate from one mission support system to another. This paper will address: - definition of an agent architecture appropriate to support reuse; - identification of non-mission-specific agent capabilities required; - appropriate knowledge representation schemes for mission-specific knowledge; - agent interface with mission-specific knowledge (a type of Learning); development of a fully-operational group of cooperative software agents for ground system support; architecture and operation of a repository of reusable agents that could be the source of intelligent components for realizing an autonomous (or nearly autonomous) agent-based ground system, and an agent-based approach to repository management and operation (an intelligent interface for human use of the repository in a ground-system development activity).

Truszkowski, Walt↗

DOE OSTI2020

Adaptive Power System Emergency Control using Deep Reinforcement Learning

Power system emergency control is generally regarded as the final safety net for grid security and resiliency. Existing emergency control schemes are usually designed off-line based on either the conceived “worst” case scenarios or a few typical operation scenarios. These schemes are facing significant adaptiveness and robustness issues as increasing uncertainties and variations occur in modern electrical grids. To address these challenges, for the first time, this paper proposes a novel adaptive emergency control scheme using deep reinforcement learning (DRL), by leveraging the high-dimensional feature extraction and non-linear generalization capabilities DRL has for complex systems with high-dimensional variations. Furthermore, an open-source platform named DeepGrid has been designed for the first time to assist the DRL development and benchmarking processes in power system emergency control. Details of the platform, DRL, and emergency control schemes that use dynamic braking or under-voltage load shedding are presented. Extensive case studies performed in both two-area four-machine system and IEEE 39-Bus system have demonstrated the excellent performance and robustness of the proposed schemes.

Deep reinforcement learning, emergency control, lo↗

DOE OSTI2026

Enhanced accuracy through ensembling of randomly initialized auto-regressive models for dynamical systems

Computational mechanics simulations using traditional finite element methods (FEM) require prohibitively expensive computational resources for real-time engineering applications, design optimization, and digital twin implementations. While machine learning (ML) surrogate models offer significant computational speedups, autoregressive ML models for time-dependent mechanical systems suffer from error accumulation that compromises long-term prediction reliability - a critical concern for engineering applications where accuracy over extended time horizons is essential for safety and performance assessments. Here, we propose a deep ensemble framework specifically designed to address this challenge in computational mechanics applications, where multiple ML surrogate models with random weight initializations are trained in parallel and their predictions aggregated during inference. This approach leverages statistical diversity to maximize information gain from a fixed set of training data and to mitigate error propagation, while maintaining the computational efficiency that makes ML surrogates attractive for engineering practice. We validate the framework on three representative problems spanning critical areas of computational mechanics: stress field evolution in heterogeneous microstructures under complex loading (relevant to advanced materials design and composite analysis), planetary-scale shallow water dynamics (applicable to environmental and geotechnical engineering), and Gray-Scott reaction-diffusion systems (relevant to mass transport and chemical process engineering). Across all test cases, the ensemble approach demonstrates consistent error reduction of 15-33% compared to individual models. The codes for this work are available on GitHub (https://github.com/Graham-Brady-Research-Group/AutoregressiveEnsemble_SpatioTemporal_Evolution).

autoregressive prediction↗

NASA NTRSDate not supplied

Multidisciplinary Design Optimization and Analysis of an Open Rotor Stage: Part 1

Successful design of open rotor propulsors requires effective analysis across multiple disciplines, including aerodynamics, acoustics, and structures. A viable design must not only be efficient but must also produce an acceptable level of noise and meet all static and dynamic structural requirements. For design and optimization, this is especially challenging because running high fidelity analyses is resource-intensive, and optimizing a design may require many thousands of cases to be analyzed. For this reason, the NASA team has applied design methodology that utilizes low-cost aerodynamic methods, machine learning models, and high-fidelity analyses when necessary. This includes standard two-dimensional methods such as throughflow analysis and quasi-3D blade-to-blade CFD, as well as some newly developed methods. Optimization using 3D CFD is necessary to maximize performance, and this is considered as well. All optimizations are carried out subject to structural constraints evaluated using finite element analysis. Doing this accurately requires a robust trunnion design, capable of pitching the blade between cruise and takeoff conditions while maintaining acceptable factor of safety. Hot to cold analysis must also be applied in order to correctly determine the as-manufactured shape. For acoustics, the unsteady pressures on the blade surfaces must be predicted, and this can be done either through full-annulus unsteady CFD or through a nonlinear harmonic method (NLH). NLH can run much faster, allowing some acoustic considerations to be made earlier in the design process. The design process is ongoing, and this presentation will review the current status and planned next steps. This part of the talk will focus on aerodynamic performance and be followed by a talk on structures and acoustics.

Design↗

DOE OSTI2022

Probabilistic Methods for Cyclical and Coupled Systems with Changing Failure Rates

Advancements in nuclear system designs with automated control features provide many benefits, but can lead to complex coupled systems and dynamic failure scenarios. This is especially true for microreactor designs where components are not expected to be replaced during the reactor’s lifetime. Hence, the life of the system, in addition to the safety, needs to be evaluated. Modeling these sequences of time-dependent events requires addressing cyclical processes and changing failure rates in ways that represent the actual system dynamics in contrast to a single sampling for a component’s time to failure. This research presents two distinct analytical methods for several failure distributions that evaluate a final time to failure used for different scenarios where the time to failure must be sampled multiple times. The first method is used when evaluating a component whose failure rate increases due to an outside event after the initial sampling but before the initially sampled time to failure. The second method is used when evaluating multiple identical components or a component that has been replaced with a new identical version before the second sampling. The two methods were implemented in a few representative case studies developed in the dynamic probabilistic risk assessment tool Event Modeling Risk Assessment using Linked Diagrams. Overall, this paper provides guidelines on how these approaches give a more realistic and accurate dynamic probabilistic risk assessment of complex systems.

97 MATHEMATICS AND COMPUTING↗

NASA NTRSDate not supplied

Minimum-Variance Control Allocation Considering Parametric Model Uncertainty

The control allocation problem was investigated for linear dynamical systems with known parametric uncertainty. Minimizing a cost function that penalizes the variance of the error in achieving commanded forces and moments on the vehicle resulted in a special case of the weighted pseudo-inverse allocator. Rather than an engineer designing the weighting matrix, it is computed from the covariances of the control effectiveness parameters. This minimum-variance allocator balances the effectiveness of the control inputs against the corresponding levels of uncertainty. The approach was demonstrated using simulations of aircraft with realistic uncertainty levels operating in open-loop and closed-loop configurations. Results showed that when model uncertainty is known, significant, and unevenly distributed amongst the controls, the minimum-variance allocator more often achieves the intended forces and moments on the vehicle in comparison to other allocators, which can lead to increased performance, reliability, and safety during flight tests. The cost for this robustness is a diminished achievable moment space for the vehicle.

Control allocation↗

NASA NTRS1994

Handling qualities of the High Speed Civil Transport

The low speed handling qualities of a High Speed Civil Transport class aircraft have been investigated by using data of the former Advanced Supersonic Transport (AST) 105. The operation of such vehicles in the airport terminal area is characterized by 'backside' performance. Main objectives of this research effort were: (Q) determination of the nature and magnitude of the speed instability associated with the backside of the thrust required curve; (2) confirmation of the validity of existing MIL-SPEC handling qualities criteria; (3) safety of operation of the vehicle in the event of autothrottle failure; and (4) correlation of required engine responsiveness with level of speed instability. Preliminary findings comprise the following: (1) The critical velocity for speed instability was determined to be 196 knots, well above the projected approach speed of 155 knots. This puts the vehicle far on the backside of its thrust required curve. While the aircraft can be configured to have static and dynamic stability at this trim point, a significant speed instability emerges, if a pilot or autopilot attempts flight path control with elevator and/or canard control surfaces only. This requires a properly configured autothrottle and/or variable aerodynamic drag devices which can provide speed stability; (2) An AST 105 type vehicle meets MIL-SPEC criteria only in part. While the damping criteria for phugoid and short period motion are met easily, the AST 105 falls short of the required minimum short period frequency, meaning that the HSCT is too sluggish in pitch to meet the military criteria. Obviously the military specification do not consider a vehicle with such high pitch inertia. With regard to speed stability and flight path stability criteria, the vehicle meets levels 2 and 3 of the military requirements, indicating that it would be landed safety with manual controls in case of an autothrottle failure, even though the pilot workload would be high; and (3) This requires quick thrust response to throttle adjustment, however. If the engine responsiveness is slow, the aircraft handling qualities are further deteriorated. Progress has been made in correlating required engine responses dyanmics with the given level of speed instability of the vehicle.

Solies, U. Peter↗

NASA NTRS1999

Quantitative Species Measurements in Microgravity Combustion Flames using Near-Infrared Diode Lasers

Understanding the physical phenomena controlling the ignition and spread of flames in microgravity has importance for space safety as well as for characterizing dynamical and chemical combustion processes which are normally masked by buoyancy and other gravity-related effects. Unfortunately, combustion is highly complicated by fluid mechanical and chemical kinetic processes, requiring the use of numerical modeling to compare with carefully designed experiments. More sophisticated diagnostic methods are needed to provide the kind of quantitative data necessary to characterize the properties of microgravity combustion as well as provide accurate feedback to improve the predictive capabilities of the models. Diode lasers are a natural choice for use under the severe conditions of low gravity experiments. Reliable, simple solid state operation at low power satisfies the operational restrictions imposed by drop towers, aircraft and space-based studies. Modulation wavelength absorption spectroscopy (WMS) provides a means to make highly sensitive and quantitative measurements of local gas concentration and, in certain cases, temperature. With near-infrared diode lasers, detection of virtually all major combustion species with extremely rapid response time is possible in an inexpensive package. Advancements in near-infrared diode laser fabrication technology and concurrent development of optical fibers for these lasers led to their use in drop towers. Since near-infrared absorption line strengths for overtone and combination vibrational transitions are weaker than the mid-infrared fundamental bands, WMS techniques are applied to increase detection sensitivity and allow measurement of the major combustion gases. In the first microgravity species measurement, Silver et al. mounted a fiber-coupled laser at the top of the NASA 2.2-sec drop tower and piped the light through a single-mode fiber to the drop rig. A fiber splitter divided the light into eight channels that directed the laser beam across a methane or propane diffusion jet flame. The light beams were recaptured by a set of gradient index lenses, coupled back into separate fiber optic lines, and transmitted back to detectors and electronics in the instrument package. In these experiments a 6-mm od fiber cable (containing the nine optical fibers) fell with the drop rig. Using separate detection and demodulation channels, spatial and temporal (up to 20 Hz) maps of water vapor and methane concentrations were obtained at differing heights in the flames. While this apparatus was useful from a demonstration standpoint, several drawbacks needed attention before useful scientific measurements could be obtained. First, eight lines of sight are somewhat insufficient for detailing the spatial profiles of the gas. Second, multiple detection channels operating in parallel are both expensive and present a challenge for accurate calibration. As a result, a newer scanning system was developed in our first contract under this program. The primary characteristic of this system is that it contains a single detection channel and achieves "continuous" spatial resolution by scanning the laser beam across the flame region, then directing this beam onto a single detector. Thus spatial measurements are converted to a temporal series of data. The true spatial resolution is limited only by the beam diameter and width of the sweep. In these experiments the beam is focused to about 1-mm diameter and scans across a region up to 4-cm wide.

Silver, Joel A.↗

NASA NTRS1993

Practical input optimization for aircraft parameter estimation experiments

The object of this research was to develop an algorithm for the design of practical, optimal flight test inputs for aircraft parameter estimation experiments. A general, single pass technique was developed which allows global optimization of the flight test input design for parameter estimation using the principles of dynamic programming with the input forms limited to square waves only. Provision was made for practical constraints on the input, including amplitude constraints, control system dynamics, and selected input frequency range exclusions. In addition, the input design was accomplished while imposing output amplitude constraints required by model validity and considerations of safety during the flight test. The algorithm has multiple input design capability, with optional inclusion of a constraint that only one control move at a time, so that a human pilot can implement the inputs. It is shown that the technique can be used to design experiments for estimation of open loop model parameters from closed loop flight test data. The report includes a new formulation of the optimal input design problem, a description of a new approach to the solution, and a summary of the characteristics of the algorithm, followed by three example applications of the new technique which demonstrate the quality and expanded capabilities of the input designs produced by the new technique. In all cases, the new input design approach showed significant improvement over previous input design methods in terms of achievable parameter accuracies.

Morelli, Eugene A.↗

NASA NTRS2022

Supporting Hazard Analysis for Wildfire Response Using fmdtools and MIKA

The System Wide Safety (SWS) Safety Demonstrator (SD) Series drives development of an increasingly capable In-Time Aviation Safety Management System (IASMS) focusing on humanitarian applications, starting with wildfire response (SD-1). The goals of this report are to (1) provide an early hazard analysis and mitigation evaluation of wildfire response to support these efforts and (2) provide a demonstration of capabilities of the Fault Model Design Tools (fmdtools) and Manager for Intelligent Knowledge Access (MIKA) tools. fmdtools provides a modeling, simulation, and resiliency analysis framework in which a wildfire response model, the System Modeling and Analysis of Resiliency in Scalable Traffic Management for Emergency Response Operations (SMARt-STEReO), is built. MIKA is an intelligent knowledge manager with several capabilities, including assisting in hazard analysis by extracting and analyzing hazards from historical incident reports. The following topics are covered in the report: Understanding Wildfire Hazard Dynamics. We provide a description and simulated examples of how hazards occur in the SMARt-STEReO model of wildfire response and their effect on its outcome. This provides a common mental model and focuses the analysis presented in the remainder of the report. Wildfire Hazard Identification. MIKA identifies wildfire hazards from three relevant datasets: the ICS-209-PLUS, SAFECOM, and SAFENET. Hazards are manually organized into a taxonomy and MIKA analyzes each hazard’s effects, likelihood, severity, and risk. Evaluating Mitigation Strategies. The SMARt-STEReO wildfire response model built in fmdtools evaluates a subset of identified hazards. Specifically, we simulate the effect of communications faults and equipment faults on operator safety, the effect of changing winds and flammability, and a scenario with multiple ignition points and heavy smoke. Tool Limitations and Usage Considerations. We provide a discussion of appropriate tool use cases as well as limitations and considerations for usage. The tool findings are used to synthesize recommendations for wildfire response operations, which can be captured as part of an IASMS. Key recommendations are as follows: Hazards are identified from a broad spectrum of sources including aircraft subsystems, operational sources, and ground crew operations. Highest risk operational environment hazards identified are Evacuations. The highest risk manned aerial operations hazard categorized is Jumper Operations Mishap. Ground crew hazards that are highest risk are Burns, Cargo Operations Overhead, Dehydration, Entrapment, Falling Objects, Heart Attacks, Heat Exhaustion, Inadequate Training or Certification, Vehicle Breakdown, and Vehicle Collision. Modelled containment failures arise from a mismatch between the difficulty of the firefighting scenario and the capacity (e.g., speed, effectiveness, awareness) of the response. In firefighting scenarios where containment is possible (e.g., because the fire does not spread too quickly), these mismatches can occur because of a change in environmental conditions (e.g., wind, flammability, etc) or because of planning, equipment, or communications faults. Improvements to communications increase the capacity of the firefighting response by reducing the time needed to respond to the fire. While surveillance does not increase this capacity by itself, it increases operator safety by increasing state awareness, enabling firefighters to evade approaching fires. Increasing both has a synergistic effect. In general, these performance and resilience increases generalize over fault scenarios as well as unforeseen changes to circumstances (i.e., wind, aridity, etc.). However, these improvements need to be designed so as not to make the system prone to persistent large-scale communications outages, which can reduce performance.

Hazard analysis↗

NASA NTRS1998

Numerical Modeling Studies of Wake Vortex Transport and Evolution Within the Planetary Boundary Layer

In support of the wake vortex effect of the Terminal Area Productivity program, we have put forward four tasks to be accomplished in our proposal. The first task is validation of two-dimensional wake vortex-turbulence interaction. The second task is investigation of three-dimensional interaction between wake vortices and atmospheric boundary layer (ABL) turbulence. The third task is ABL studies. The, fourth task is addition of a Klemp-Durran condition at the top boundary for TASS model. The accomplishment of these tasks will increase our understanding of the dynamics of wake vortex and improve forecasting systems responsible for air safety and efficiency. The first two tasks include following three parts: (a) Determine significant length scale for vortex decay and transport, especially the length scales associated with the onset of Crow instability (Crow, 1970); (b) Study the effects of atmospheric turbulence on the decay of the wake vortices; and (c) Determine the relationships between decay rate, transport properties and atmospheric parameters based on large eddy simulation (LES) results and the observational data. These parameters may include turbulence kinetic energy, dissipation rate, wind shear and atmospheric stratification. The ABL studies cover LES modeling of turbulence structure within planetary boundary layer under transition and stable stratification conditions. Evidences have shown that the turbulence in the stable boundary layer can be highly intermittent and the length scales of eddies are very small compared to those in convective case. We proposed to develop a nesting grid mesh scheme and a modified Klemp-Durran conditions (Klemp and Wilhelmson, 1978) at the top boundary for TASS model to simulate planetary boundary layer under stable stratification conditions. During the past year, our group has made great efforts to carry out the above mentioned four tasks simultaneously. The work accomplished in the last year will be described in the next section.

Lin, Yuh-Lang↗

NASA NTRS2008

NASA Langley's Formal Methods Research in Support of the Next Generation Air Transportation System

This talk will provide a brief introduction to the formal methods developed at NASA Langley and the National Institute for Aerospace (NIA) for air traffic management applications. NASA Langley's formal methods research supports the Interagency Joint Planning and Development Office (JPDO) effort to define and develop the 2025 Next Generation Air Transportation System (NGATS). The JPDO was created by the passage of the Vision 100 Century of Aviation Reauthorization Act in Dec 2003. The NGATS vision calls for a major transformation of the nation s air transportation system that will enable growth to 3 times the traffic of the current system. The transformation will require an unprecedented level of safety-critical automation used in complex procedural operations based on 4-dimensional (4D) trajectories that enable dynamic reconfiguration of airspace scalable to geographic and temporal demand. The goal of our formal methods research is to provide verification methods that can be used to insure the safety of the NGATS system. Our work has focused on the safety assessment of concepts of operation and fundamental algorithms for conflict detection and resolution (CD&R) and self- spacing in the terminal area. Formal analysis of a concept of operations is a novel area of application of formal methods. Here one must establish that a system concept involving aircraft, pilots, and ground resources is safe. The formal analysis of algorithms is a more traditional endeavor. However, the formal analysis of ATM algorithms involves reasoning about the interaction of algorithmic logic and aircraft trajectories defined over an airspace. These trajectories are described using 2D and 3D vectors and are often constrained by trigonometric relations. Thus, in many cases it has been necessary to unload the full power of an advanced theorem prover. The verification challenge is to establish that the safety-critical algorithms produce valid solutions that are guaranteed to maintain separation under all possible scenarios. Current research has assumed perfect knowledge of the location of other aircraft in the vicinity so absolute guarantees are possible, but increasingly we are relaxing the assumptions to allow incomplete, inaccurate, and/or faulty information from communication sources.

Butler, Ricky W.↗

DOE OSTI2022

Deterministic modelling of the SPERT IV reactor transients using the multi-physics capability of WIMS

The ANSWERS WIMS reactor physics code is being developed for whole core multi-physics modelling. The established neutronics capability for lattice calculations has recently been extended to be suitable for whole core modelling of Small Modular Reactors (SMRs). A whole core transport, SP3 or diffusion flux solution is combined with fuel assembly resonance shielding. An integrated thermal hydraulic solver permits temperature and density variations to feedback to the neutronics calculation. This capability can be applied to both steady state and time dependent transient problems. Nuclear reactor design and safety case development requires assessment of a range of reactor transients, to inform both normal operation limitations and accident scenario analysis. This paper presents new methodology developed in WIMS to couple the core neutronics to the integrated core thermal hydraulics solver for the simulation of reactor transients in whole core models. To support the validation of the multi-physics capability of WIMS, this capability has been applied to the reactivity insertion transient experiments performed in the plate fuelled SPERT-IV reactor. This study employs WIMS using the whole core solver MERLIN, which calculates the time-dependent flux distribution and magnitude, coupled to ARTHUR, which solves for the time-dependent thermal hydraulics solution, and provides thermal feedback via the cross sections generated by GEOM, which performs resonance shielding calculations and generates cross section data for the plate geometry. This spatial kinetics model, with dynamic cross section generation, allows for variations in the temperature and neutron flux profile with time.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗