Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure keys”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Nuclear Forensics

Nuclear forensics is a key part of the nuclear security strategy for the United States and the international community. The NACS Division is central to the leadership role that LLNL has had in nuclear forensics over the past 25 years. Our current nuclear forensic program includes conducting R&D on provenance and attribution signatures, collaborating with international partners, training the next generation of nuclear forensic experts, developing test materials for verification and validation exercises, and providing expert advice to national and international policy makers. Key to our success in these areas has been the strong and continuing involvement in nuclear forensic casework obtained through law enforcement and intelligence channels as well as our outstanding analytical capabilities. NACS must continue to conduct forward-thinking R&D in nuclear forensics that supports operational programs and addresses intelligence gaps. To maintain leadership in nuclear forensics, we must attract, develop, and retain the best talent. The NNSA has a central leadership role in developing educational initiatives for nuclear forensics. In concert with the Glenn T. Seaborg Institute, the NACS Division will continue to participate in all nuclear forensic educational initiatives (undergraduate, graduate, postdoctoral) and incorporate LLNL’s D&I vision into its student and postdoc recruitment efforts. We will continue to build formal relationships with key academic partners and institutions with active and emerging nuclear forensic research interests. We will also strengthen relationships with NNSA DNN and SSAA funded university consortia (e.g. NSSC, ACE, CNEC, CVT, ETI, MTV), helping them conduct research of interest and relevance to nuclear forensics, while at the same time evaluating and recruiting promising talent from these programs.

07 ISOTOPE AND RADIATION SOURCES↗

NASA’s Digital Information Platform to Accelerate the Transformation of the National Airspace System

In order to accelerate the digital transformation of airspace operations, a foundational framework and infrastructure for providing sustainable, data-driven, and cohesive decision-making digital services for both traditional and emergent air vehicles is being developed. The reference implementation of Digital Information Platform builds an ecosystem for the aviation community by providing access to a secure and trusted source of aviation data and services. Several key features and services have been implemented to enable secure data sharing, communication, and service registration on the Platform. The technical approach used to implement these features is presented here. NASA-developed integrated aviation data and machine learning based prediction services to optimize airspace operations are available on the Platform. These services are being evaluated in an operational environment by flight operators and the real-world benefits are being captured. The Platform fosters collaboration among industry and researchers to develop complex aviation services and the aim is to make it publicly accessible for consumption by the aviation community.

Digital Transformation↗

NASA’s Digital Information Platform to Accelerate the Transformation of the National Airspace System

In order to accelerate the digital transformation of airspace operations, a foundational framework and infrastructure for providing sustainable, data-driven, and cohesive decision-making digital services for both traditional and emergent air vehicles is being developed. The reference implementation of Digital Information Platform builds an ecosystem for the aviation community by providing access to a secure and trusted source of aviation data and services. Several key features and services have been implemented to enable secure data sharing, communication, and service registration on the Platform. The technical approach used to implement these features is presented here. NASA-developed integrated aviation data and machine learning based prediction services to optimize airspace operations are available on the Platform. These services are being evaluated in an operational environment by flight operators and the real-world benefits are being captured. The Platform fosters collaboration among industry and researchers to develop complex aviation services and the aim is to make it publicly accessible for consumption by the aviation community.

Digital Transformation↗

Quantum Key Distribution Applicability to Smart Grid Cybersecurity Systems

To meet the increasing demand for electricity and to have a more reliable and resilient electric grid against conventional and extreme events, grid modernization is more crucial now than ever before. This will require the development and deployment of devices that provide advanced communication capabilities. The overall efficiency, reliability, and resilience of the smart grid will be inextricably linked to the exchange of information between these devices. Unfortunately, the increased information flow will increase the potential attack surface and introduce new vulnerabilities. While a smarter grid will depend critically on information flow, these benefits will be accrued only if that information can be protected. Nowadays, information is secured in smart grids primarily through cryptography. However, with the increasing number of sophisticated attacks as well as the increasing computational power, the security of the “classical” cryptographic algorithms is threatened. Quantum information science offers solutions to this problem, specifically quantum key distribution (QKD), which provides a means for the generation and secure distribution of symmetric cryptographic keys. The security of QKD stems ultimately from the very nature of quantum physics. In this paper, we investigate the applicability of QKD to the various smart grid sectors and specific use cases. We have identified 18 smart grid use cases of interest for QKD suitability together with 7 QKD factors used for the assessment of the various use cases. For each use case, the impact to security of the loss of confidentiality, integrity, and/or availability is specified. In addition, the suitability of QKD is assessed for each use case with respect to multiple factors.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Single Photon Emitters Coupled to Photonic Wire bonds

This project will test the coupling of light emitted from silicon vacancy and nitrogen vacancy defects in diamond into additively manufactured photonic wire bonds toward integration into an "on-chip quantum photonics platform". These defects offer a room-temperature solid state solution for quantum information technologies but suffer from issues such as low activation rate and variable local environments. Photonic wire bonding will allow entanglement of pre-selected solid-state defects alleviating some of these issues and enable simplified integration with other photonic devices. These developments could prove to be key technologies to realize quantum secured networks for national security applications.

42 ENGINEERING↗

Photovoltaic Analysis and Response Support (PARS) Platform for Solar Situational Awareness and Resiliency Services

The project's primary objective is to develop a digital-twin based Photovoltaic (PV) Analysis and Response Support (PARS) platform, which aims to provide real-time situational awareness and optimal response plans. This platform is designed to enhance the performance of hybrid PV systems, making them competitive with or even superior to conventional generation resources. The PARS platform enabled the project team to develop and evaluate an extensive suite of grid support functionalities for the hybrid PV systems to enhance grid performance, across key areas including visibility, dispatchability, security, resilience, and reliability. Given the global push toward achieving 100% clean energy by 2035, there is a significant increase in the integration of inverter-based resources (IBRs) throughout the energy grid. Effectively managing the inherent variability and uncertainty associated with IBRs is crucial for ensuring cost-effectiveness, reliability, and security in both the main grid and islanded microgrids. Constrained to a limited array of IEEE test systems or standard feeder models, traditional IBR modeling struggles to assimilate new field data, accurately reflect system dynamics, and adapt to the evolving energy landscape. In our project, we embraced a Digital Twin (DT) strategy for crafting the PARS platform. A digital twin acts as a precise virtual counterpart of a physical system, built on historical data and continuously honed with real-time insights. This enables the high-fidelity DT to accurately mirror current system operations and forecast future scenarios. Consequently, the PARS platform becomes an ideal environment for testing and refining monitoring, control, power, and energy management algorithms designed to boost hybrid PV system performance. The defining feature of the PARS platform, distinguishing it from other advanced simulation tools, is its exceptional adaptability. This is achieved by employing actual network topologies and utilizing real-time field data for fine-tuning and calibration, ensuring a close emulation of real-world conditions. The project deliverables include: 1) High-fidelity IBR models and tools for real-time parameterization, utilizing real-time field measurements to refine IBR models for enhanced accuracy and performance; 2) Grid-forming and Grid-following capabilities to deliver resilience services, including blackstart, voltage and frequency support, cold-load pick-up, power reserves, and three-phase load balancing across grid-connected and microgrid settings; 3) Machine learning-based forecasting tools and methods for generating synthetic data and topologies, creating diverse and realistic simulation environments for evaluating varied operational scenarios; 4) Advanced microgrid power and energy management algorithms for optimizing the integration and operation of PV, storage, and demand response resources within both feeder and community scales. The power grid data sets are provided by four utility companies in North Carolina and the New York Power Administration. Acting as industry advisors, our industry partners communicated stakeholder needs and regulatory standards to the research teams, aiding technology transfer by incorporating the developed methodologies into their daily operations. This collaboration ensures that the PARS platform, functioning as a power system digital twin, enhances our understanding of IBR dynamic behaviors and enables the development and evaluation of IBR control functions that match or exceed the capabilities of conventional synchronous generators.

14 SOLAR ENERGY↗

History of and Aftermath from the Withdrawal of the Intermediate-Range Nuclear Forces Treaty

On February 1, 2019, the United States and Russia withdrew from the three-decades old Intermediate-Range Nuclear Forces (INF) treaty. Events precipitating the withdrawal were allegations by both the United States and Russia of a variety of treaty violations. Until that point, the treaty had been a centerpiece of arms control and a key agreement of the global security architecture. The absence of such a pillar has the potential destabilize the status quo of arms control, creating significant uncertainty in global nuclear stability and security. In this paper, we present a historical review as overture to an analysis on the impacts of this development on force structure. This analysis examines the changes in U.S., Russian, and Chinese nuclear forces which may occur as a result of the treaty's demise. The article concludes with commentary on potential actions to preserve stability in a post-INF world.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Centralized and Decentralized Distributed Energy Resource Access Control Implementation Considerations.

A global transition to power grids with high penetrations of renewable energy generation is being driven in part by rapid installations of distributed energy resources (DER). New DER equipment includes standardized IEEE 1547-2018 communication interfaces and proprietary communications capabilities. Interoperable DER provides new monitoring and control capabilities. The existence of multiple entities with different roles and responsibilities within the DER ecosystem makes the Access Control (AC) mechanism necessary. In this paper, we introduce and compare two novel architectures, which provide a Role-Based Access Control (RBAC) service to the DER ecosystem’s entities. Selecting an appropriate RBAC technology is important for the RBAC administrator and users who request DER access authorization. The first architecture is centralized, based on the OpenLDAP, an open source implementation of the Lightweight Directory Access Protocol (LDAP). The second approach is decentralized, based on a private Ethereum blockchain test network, where the RBAC model is stored and efficiently retrieved via the utilization of a single Smart Contract. We have implemented two end-to-end Proofs-of-Concept (PoC), respectively, to offer the RBAC service to the DER entities as web applications. Finally, an evaluation of the two approaches is presented, highlighting the key speed, cost, usability, and security features.

42 ENGINEERING↗

Integrating security in a group oriented distributed system

A distributed security architecture is proposed for incorporation into group oriented distributed systems, and in particular, into the Isis distributed programming toolkit. The primary goal of the architecture is to make common group oriented abstractions robust in hostile settings, in order to facilitate the construction of high performance distributed applications that can tolerate both component failures and malicious attacks. These abstractions include process groups and causal group multicast. Moreover, a delegation and access control scheme is proposed for use in group oriented systems. The focus is the security architecture; particular cryptosystems and key exchange protocols are not emphasized.

Reiter, Michael↗

Sandia National Laboratories

Sandia National Laboratories has identified technology transfer to U.S. industry as a laboratory mission which complements our national security mission and as a key component of the Laboratory's future. A number of technology transfer mechanisms - such as CRADA's, licenses, work-for-others, and consortia - are identified and specific examples are given. Sandia's experience with the Specialty Metals Processing Consortium is highlighted with a focus on the elements which have made it successful. A brief discussion of Sandia's potential interactions with NASA under the Space Exploration Initiative was included as an example of laboratory-to-NASA technology transfer. Viewgraphs are provided.

Gilliom, Laura R.↗

Expanding NREL's Advanced Research on Integrated Energy Systems (ARIES) Capabilities

NREL's Integrated Energy Pathways vision represents a transformed, future integrated energy system that is more affordable, clean, secure, and resilient than today. Key to this vision is the unique Advanced Research on Integrated Energy Systems (ARIES) research platform. With a focus on advancing modern grid infrastructure, making investments in energy efficiency building technology research, and innovating battery storage and much more, the unique ARIES research platform can be used to accelerate the integration of new technologies into a modern grid.

advanced research↗

Secured Advanced Federated Environment (SAFE): A NASA Solution for Secure Cross-Organization Collaboration

This paper discusses the challenges and security issues inherent in building complex cross-organizational collaborative projects and software systems within NASA. By applying the design principles of compartmentalization, organizational hierarchy and inter-organizational federation, the Secured Advanced Federated Environment (SAFE) is laying the foundation for a collaborative virtual infrastructure for the NASA community. A key element of SAFE is the Micro Security Domain (MSD) concept, which balances the need to collaborate and the need to enforce enterprise and local security rules. With the SAFE approach, security is an integral component of enterprise software and network design, not an afterthought.

Chow, Edward↗

GridSTIX

SF-25-112 Grid-STIX is a comprehensive extension of the STIX (Structured Threat Information Expression) 2.1 ontology specifically designed for electrical grid cybersecurity applications. This ontology provides a standardized, machine-readable framework for modeling grid assets, operational technology devices, threats, vulnerabilities, supply chain risks, and security relationships in electrical power systems. ## Key Features - **Comprehensive Grid Coverage**: Physical assets, OT devices, grid components, sensors, and energy storage systems - **Zero Trust Architecture**: Policy decision points, enforcement points, trust brokers, and continuous monitoring - **AMI Infrastructure**: Advanced metering networks, head-end systems, mesh gateways, and MDM systems - **Advanced Security Modeling**: Attack patterns, vulnerabilities, mitigations, and supply chain risks - **Critical Grid Relationships**: Power flow, protection, control, and synchronization relationships - **Supply Chain Security**: Supplier modeling, country of origin tracking, and risk assessment - **Protocol Support**: DNP3, Modbus, IEC 61850, IEC 60870-5-104, OPC-UA, and IEEE standards - **Python Code Generation**: Automated STIX-compliant Python class generation from ontologies - **Interactive Visualization**: Enhanced HTML network graphs with grid-specific categorization - **STIX 2.1 Compliance**: Full compatibility with STIX threat intelligence ecosystem

Blakely, Benjamin [Argonne National Laboratory (AN↗

Dynamic attenuation scheme in measurement-device-independent quantum key distribution over turbulent channels

Measurement-device-independent quantum key distribution (MDI QKD) offers great security in practice because it removes all detector side channels. However, conducting MDI QKD over free-space channels is challenging. One of the largest culprits is the mismatched transmittance of the two independent turbulent channels causing a reduced Hong-Ou-Mandel visibility and thus a lower secret key rate. Here we introduce a dynamic attenuation scheme, where the transmittance of each of the two channels is monitored in real time by transmitting bright light pulses from each users to the measurement device. Based on the measured channel transmittance, a suitable amount of attenuation is introduced to the low-loss channel at the measurement device. Our simulation results show a significant improvement of QKD performance, especially when using short raw keys.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

HOP and Cybersecurity: Leveraging safety and reliability experience to improve digital security culture

This presentation will introduce participants to key mental models on how to think about and understand safety and the organizational attributes that support it from three of the leading voices in the discipline – David Marx, Dr. Erik Hollnagel and Dr. Todd Conklin – and from there we ask the simple question of “how can we apply this to cybersecurity?” Opportunities, similarities, and differences from the history of accomplishment applying human and organizational performance principles to safety and reliability can be collectively leveraged to the meet the challenge of cybersecurity for OT/ICS/cyber-physical systems. This is the same intent as the "Cybersecurity Culture" principle of Cyber-Informed Engineering (CIE).

42 ENGINEERING↗

Best Practices for Grid Communications

As the grid evolves, the communications architecture will need to evolve with it. That architecture affords a structured means by which the evolving complexities of the modern electric grid can be managed. This document provides best practices that can be implemented in the grid of today and evolve towards the grid and grid architecture of the future. The evolving grid and its control communications increasingly rely on commercial communications providers and a variety of technologies, from wireless (e.g., 5G, microwave, Wi-Fi) to wireline (fiber, copper) to radio communications (P25, other repeater-based systems), and all these communications systems rely on electric power. A reliable and resilient grid must account for this complex set of interdependencies in its planning activities, especially those involving restoration and recovery. The participation of all relevant parties in both planning and exercising of plans can prevent unexpected conditions that impede the reliable operation and recovery of the grid. Best practices for grid communications include using a Network Management System to document the operational state, define and monitor baselines, detect changes, and accelerate response to abnormalities. If transitioning from SONET to IP/packet-based systems, translating grid requirements into communications requirements for latency, bandwidth and throughput, IP packet delay variation, packet loss, and availability should inform and drive technology planning and selection as well as that communication system’s Quality of Service (QoS) policies and Service Level Agreements (SLAs). Secure and reliable timing is another key component of a reliable and resilient grid that can operate through adverse events. A trusted internal NTP configuration, an integrated and diverse timing delivery system, optimizing the timing architecture based on the transport technologies of the communications system, and using established standards can deliver the level of timing accuracy required by a range of time-sensitive power system applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Onshore U.S. Carbon Pipeline Deployment: Siting, Safety, and Regulation

Carbon capture, utilization, and storage (CCUS) technology has significant potential to reduce greenhouse gas (GHG) emissions and mitigate the impact of climate change, particularly in hard to decarbonize industrial and commercial sectors. CCUS involves capturing carbon dioxide (CO 2 ) from industrial processes or power generation and utilizing it for other purposes, such as enhanced oil recovery (EOR), or storing the captured CO 2 underground. CCUS technology can reduce the environmental impact of continued fossil fuel use while smoothing the transition to a low-carbon economy. CCUS can create new economic opportunities, such as the development of new industries and job creation, and can enhance energy security by diversifying energy sources. For these reasons, enabling CCUS has become a key objective of the Biden-Harris administration’s clean energy policy and has received bipartisan support. Despite its environmental and economic potential, CCUS faces multiple barriers to widespread deployment. One of the main challenges is the high cost and technical difficulty of implementing and operating large-scale CCUS infrastructure. CCUS remains a relatively expensive way to reduce carbon emissions (e.g., compared to solar photovoltaic technology’s displacement of coal generation). Additionally, financial incentives and supportive policies like those enacted to support solar photovoltaic development, especially at the state level, are inconsistent or nonexistent, which can discourage investment in CCUS projects. There are also technical challenges associated with safe and secure underground CO 2 storage and the development of new carbon utilization technologies. Public opposition to various aspects of CCUS technologies, ranging from concerns that CCUS will extend reliance on fossil fuels to CCUS infrastructure being sited in disadvantaged communities, is a growing challenge. This paper focuses on another significant barrier to broad CCUS deployment: the need for considerable expansion of the dedicated land-based CO 2 pipeline network in the United States to meet CCUS goals and the unique regulatory challenges to its development. To reach carbon emissions targets in the United States by 2050, CCUS technology will need to be supported by tens of thousands of miles of CO 2 pipelines. Estimates range from a minimum of roughly 29,000 pipeline miles (according to a 2020 Great Plains Institute study) to 66,000 pipeline miles (as per a 2021 Princeton University–led study). As of October 2022, however, the U.S. Department of Transportation (U.S. DOT) reports fewer than 5,400 miles of U.S. pipelines carrying CO 2 . This deficit—and what it means for the prospect of moving substantially larger quantities of CO 2 from source to use or storage—threatens to stifle the development of CCUS projects and technologies identified as an important tool to meet emissions targets. The current regulatory landscape facing CO 2 pipeline development can best be described as uncertain. At the federal level, the U.S. DOT Pipeline and Hazardous Materials Safety Administration (PHMSA) oversees safety regulation of pipelines transporting hazardous materials, including CO 2 upon commencement of operation. However, PHMSA’s definition of CO 2 as “a fluid consisting of more than 90 percent CO 2 molecules compressed to a supercritical state” has not been updated since its 1991 addition to the Federal Register. Because CO 2 can be transported in a gaseous, liquid, or supercritical state (indeed, the physical state of CO 2 can fluctuate within a single pipeline due to environmental changes), doubts persist about the extent of PHMSA’s purview—and raise questions about what, if anything, states should do to address this apparent gap. PHMSA has begun a major revision of its existing rules, but the agency does not expect a first draft before 2024. Economic oversight of CO 2 pipelines is even less clear. The Federal Energy Regulatory Commission (FERC) and Surface Transportation Board (STB)—which regulate the rates of interstate oil/natural gas and non-energy pipelines, respectively—have both declined jurisdiction over interstate CO 2 pipelines. This presumably leaves economic regulation to state and/or local governments, but few if any states have the laws or resources in place to oversee just and reasonable rates. Further, the interstate nature of CO 2 pipeline development creates questions around how different states should align their rate-making decisions. Onshore U.S. Carbon Pipeline Deployment: Siting, Safety, and Regulation Currently, regulatory responsibilities regarding CO 2 pipeline siting and permitting fall to state and local governments. The variety of laws and regulations across the country, however, creates a maze of requirements for pipeline developers to navigate. To secure necessary permits, most states require pipeline companies to be “common carriers” that provide transport service to the public at uniform rates. However, the specific definition of that term varies. Some states require clear evidence that a pipeline services the public, while others automatically deem any pipeline company transporting energy products or hazardous materials to be a “common carrier”—with little consideration for accessibility to third parties. Other states have eschewed common-carrier terminology entirely, placing private and publicly accessible pipelines on equal footing. Much like the variation in common-carrier requirements, laws governing eminent domain authority to secure rights-of-way (ROW) to commence construction on a planned pipeline route differ by state. Several states have no laws or rules governing CO 2 pipelines. In addition to creating questions about whether long-standing rules for other pipelines (e.g., natural gas or petroleum products) apply to CO 2 , this policy vacuum leaves local governments as the sole authority over sections of pipe within their boundaries. With dozens of counties along a given route, the probability of inconsistent regulation of the same pipeline is significant. Even in states with CO 2 pipeline laws in place, local regulatory attempts to address rising concerns over pipeline routing and safety have triggered lawsuits by pipeline companies seeking to delimit areas of federal, state, and local government responsibility. Meanwhile, legislators across the country have introduced bills to restrict the application of eminent domain to CO 2 pipeline projects, which could threaten a key means of securing ROW that companies cannot secure through negotiation with landowners. Taken separately, any of these regulatory issues—the narrow federal definition of CO 2 , FERC’s and STB’s decisions that CO 2 pipelines are not within their jurisdiction, and the considerable variation in state and local governments’ laws regulating CO 2 pipeline technologies—are extremely difficult to resolve. Adding the required scale of CO 2 pipeline expansion and the currently identified narrow window of time in which to reach climate target goals, the task becomes even more difficult—and raises a host of urgent questions for regulators. How should CO 2 be defined in federal regulations to ensure consistent safety standards across the country? What is the potential impact radius of a CO 2 pipeline rupture, and how should that inform local emergency response? In the absence of centralized federal oversight, what should state legislatures do to increase alignment for interstate CO 2 pipeline projects? This paper intends to serve as a primer for regulators and stakeholders who seek to better understand the regulatory challenges and opportunities facing this critical infrastructure.

42 ENGINEERING↗

Interactive effects of precipitation, temperature, and grazing pressure on the net ecosystem carbon balance of grazing lands across the continental United States

Grazing lands cover approximately one-third of the contiguous United States, support much of the nation's beef production, and are an important component of the U.S. terrestrial carbon budget. In this study, we quantified net ecosystem carbon balance (NECB), the net status of grazing lands as a carbon sink (C-sink) or source (C-source) and a key determinant of soil health and productivity. Our primary objective was to synthesize multiple years of annual NECB across heterogeneous grazing lands across the continental U.S and evaluate annual NECB against physical drivers (mean annual precipitation (MAP), mean annual temperature (MAT), vegetation, and moisture condition) and management practices (grazing pressure index (GPI) and fertilization history). We hypothesized that (1) NECB is higher in mesic and fertilized grasslands; (2) NECB increases with MAP and MAT but decreases with GPI; and (3) interactive effects exist among MAP, MAT, and GPI. Using carbon fluxes measured by eddy covariance towers and methane emissions including both enteric methane and manure derived from stocking rates across seven USDA Long-term Agroecosystem Research Network sites, we found: (1) grazing lands were a C-sink or carbon neutral at most sites; (2) vegetation type, moisture conditions, or fertilization had no significant effect on NECB; (3) NECB increased with MAP and MAT, but decreased with a higher GPI; and (4) MAT had a significant positive effect on NECB when MAP exceeded 750 mm (greater water availability). The effect of GPI on NECB was significantly negative when MAP was below 1000 mm, significantly negative when MAT < 12 °C and significantly positive when MAT > 16 °C. Thus, most grazing lands in our study acted as C-sinks unless water deficit, low temperature, or heavy grazing were interactively present. Understanding how climate and management influence NECB of grazing lands is key to maintaining resilient agroecosystems that secure beef production and sustain rural prosperity.

LTAR↗