Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,207 records · Page 67
All sourcesNASA NTRSDOE OSTI
DOE OSTI2018

Monitoring solid metal structures with a nervous system embedded with ultrasonic 3D printing

Active and regular monitoring of structural components is a critical safety precaution, particularly as it concerns infrastructure, aerospace, industry, and many other applications. Solutions for effective structural health monitoring need to be able to probe surface and bulk properties using durable and low-power engineering. Towards these ends it is possible to build smarter, highly networked, and secure materials in order to enable remote real-time material sensing with a lesser-known form of 3D printing, ultrasonic consolidation (UC). This approach harnesses sound waves to weld metal layers in a low temperature process that does not damage sensors and electronics as they are embedded into a solid metal structure. This makes UC perfectly suited for designing solid metal parts with active embedded sensing components. However, the process parameters, material influences and mechanical factors that result in high-quality UC metal components are difficult to control or are loosely understood. The use of trial-and-error optimization during fabrication represents the chief hurdle between its current state of use and its potential to transform rapid prototyping and manufacturing of high-impact technologies (e.g., metal smart structures, wearable sensors, lab-on-a-chip, etc.). In this paper we will describe how embedded sensors may be used for in situ process monitoring and optimization. We will also discuss efforts towards standardizing UC welding for similar and dissimilar metal bonding and for embedding active sensors that can be used to create smart structures that will enable long-term structural health monitoring and other high impact applications.

Suter, Jonathan D.↗
DOE OSTI2020

SCALE Lattice Physics Code Assessments of Accident Tolerant Fuel

This report highlights accident-tolerant fuel (ATF) code assessment activities performed under Project NRCHQ- 60-17-T-0017, Lattice Physics Enhancements and Assessment. ATF covers a broad range of advanced fuel and clad designs for light water reactors (LWRs) to enhance performance under several accident conditions. Several ATF concepts are anticipated to be deployed as lead test rods (LTRs) or lead test assemblies (LTAs) within the next five years. The purpose of this work is to assess the predictive capabilities of NRC neutronics codes that underpin various licensing calculations. ATF designs use different fuel and clad materials compared to standard UO 2 fuel and zirconium-alloy claddings (hereafter UO 2 -Zry). These new materials and geometrical designs need to be assessed to quantify the impact of nuclear data uncertainties on quantities of interest (QOIs) in licensing calculations and the impact of modeling approximations which may be valid for UO 2 -Zry but not for ATF. This report outlines a systematic approach for ATF neutronics code assessment which includes sensitivity and uncertainty (S/U) analysis of nuclear data, identification of experimental benchmark and gaps for code validation, investigation of modeling approximations, and code-to-code comparisons of calculated QOIs against high-fidelity reference continuous energy (CE) Monte Carlo (MC) calculations. This report focuses on the assessment of the SCALE/Polaris lattice physics code for reactor safety analysis. Polaris lattice physics calculations generate few group (FG) cross sections for PARCS full-core calculations. (Full-core analysis, spent fuel analysis, and severe accident analysis will be performed in future work.) The selected ATF concepts for this report include Cr 2 O 3 and Al 2 O 3 -Cr 2 O 3 -doped UO 2 fuel, U 3 Si 2 fuel, FeCrAl cladding, SiC cladding, and Cr-coated cladding.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2013

Final Report - Regulatory Considerations for Adaptive Systems

This report documents the findings of a preliminary research study into new approaches to the software design assurance of adaptive systems. We suggest a methodology to overcome the software validation and verification difficulties posed by the underlying assumption of non-adaptive software in the requirementsbased- testing verification methods in RTCA/DO-178B and C. An analysis of the relevant RTCA/DO-178B and C objectives is presented showing the reasons for the difficulties that arise in showing satisfaction of the objectives and suggested additional means by which they could be satisfied. We suggest that the software design assurance problem for adaptive systems is principally one of developing correct and complete high level requirements and system level constraints that define the necessary system functional and safety properties to assure the safe use of adaptive systems. We show how analytical techniques such as model based design, mathematical modeling and formal or formal-like methods can be used to both validate the high level functional and safety requirements, establish necessary constraints and provide the verification evidence for the satisfaction of requirements and constraints that supplements conventional testing. Finally the report identifies the follow-on research topics needed to implement this methodology.

Wilkinson, Chris↗
NASA NTRS2014

Assessing the Risk of Crew Injury Due to Dynamic Loads During Spaceflight

Spaceflight requires tremendous amounts of energy to achieve Earth orbit and to attain escape velocity for interplanetary missions. Although the majority of the energy is managed in such a way as to limit the accelerations on the crew, several mission phases may result in crew exposure to dynamic loads. In the automotive industry, risk of serious injury can be tolerated because the probability of a crash is remote each time a person enters a vehicle, resulting in a low total risk of injury. For spaceflight, the level of acceptable injury risk must be lower to achieve a low total risk of injury because the dynamic loads are expected on each flight. To mitigate the risk of injury due to dynamic loads, the NASA Human Research Program has developed a research plan to inform the knowledge gaps and develop relevant tools for assessing injury risk. The risk of injury due to dynamic loads can be further subdivided into extrinsic and intrinsic risk factors. Extrinsic risk factors include the vehicle dynamic profile, seat and restraint design, and spacesuit design. Human tolerance to loads varies considerably depending on the direction, amplitude, and rise-time of acceleration therefore the orientation of the body to the dynamic vector is critical to determining crew risk of injury. Although a particular vehicle dynamic profile may be safe for a particular design, the seat, restraint, and suit designs can affect the risk of injury due to localized effects. In addition, characteristics intrinsic to the crewmember may also contribute to the risk of injury, such as crewmember sex, age, anthropometry, and deconditioning due to spaceflight, and each astronaut may have a different risk profile because of these factors. The purpose of the research plan is to address any knowledge gaps in the risk factors to mitigate injury risk. Methods for assessing injury risk have been well documented in other analogous industries and include human volunteer testing, human exposure to dynamic environments, post-mortem human subject (PMHS) testing, animal testing, anthropomorphic test devices (ATD), dynamic models of the human, numerical models of ATDs, and numerical models of the human. Each has inherent strengths and limitations. For example, human volunteer testing is advantageous because a population can be selected that is similar to the astronaut corps; however, because of the inherent ethical limitations, only sub-injurious conditions can be tested. PMHSs can be tested in a variety of conditions including injurious levels, but the responses are not completely analogous to living human subjects. In addition, it is exceedingly difficult to select a PMHS population that is similar to the astronaut corps. ATDs are currently widely used in the automotive industry and military because they are highly repeatable and durable. Unfortunately, because they are mechanical models of the human body, the biofidelity of the responses are limited to dynamic conditions used to validate the ATD. Numerical models of the ATD, in addition to the strengths and limitations for ATDs, are easy to use for a variety of designs before a design is fabricated, but also have additional limitations for ATDs, are easy to use for a variety of designs before a design is fabricated, but also have additional uncertainty. Dynamic models are simple and easy to use, but do not account for localized effects of the seat and suit. Finally, numerical models of the human have the potential to have the most advantages; however, the current models are not validated for the conditions expected during spaceflight. To properly assess spaceflight conditions with numerical human models, human data would be needed to optimize the model responses for those conditions. Using the appropriate assessment method with the knowledge gained for each risk factor, an appropriate approach for mitigating the risk of injury due to dynamic loads can be developed ensuring crew safety in future NASA vehicles.

Somers, J. T.↗
NASA NTRSDate not supplied

Overview of the Integrated Adaptive Wing Technology Maturation Wind-Tunnel Test Objectives

The Integrated Adaptive Wing Technology Maturation wind-tunnel test is the culmination of a cooperative effort between NASA and Boeing to develop control techniques that can improve the performance and safety of higher aspect ratio flexible transport aircraft. The wind-tunnel test article, to be tested at the NASA Langley Research Center Transonic Dynamics Tunnel, is a semispan model of a modern transport configuration with an aspect ratio 13.5 wing based on the NASA Common Research Model. Multiobjective control laws have been developed targeting drag optimization, maneuver load alleviation, gust load alleviation, and modal suppression. In this paper, the integrated model design, active control system, and sensor suite will be presented, and pretest modeling and characterization activities will be described. A summary of the planned wind-tunnel test entries will provide an overview of the experimental approach and expected outcomes.

wind-tunnel↗
DOE OSTI2020

Risk Informed, Performance-Based, Technology-Inclusive Regulatory Infrastructure: Technology-Inclusive Determination of Mechanistic Source Terms for Offsite Dose-Related Assessments for Advanced Nuclear Reactor Facilities

This report summarizes a risk informed, performance-based and technology-inclusive approach to determine source terms for dose related assessments at advanced nuclear facilities. This approach uses a graded process which allows both the non-mechanistic source terms calculation methods, which adopt conservative approaches and assumptions based on known physical and chemical principles, and more importantly the mechanistic source term calculation methods, which consider design-specific scenarios and use best estimate models with uncertainty quantification for a range of licensing basis events (LBEs), to be used for the design and licensing of advanced nuclear technologies. The source terms developed with this graded approach, and radionuclide inventories elsewhere in the facility that are determined during source term analysis, can be used to address licensing issues to support the application processes of 10 CFR Part 50 for a construction permit and operating license or 10 CFR Part 52 for a Combined Operating License (COL), Standard Design Certification, Early Site Permit, Standard Design Approval or Manufacturing License. They can also be used for other purposes including equipment environmental qualification, control room habitability analyses, and assessments of severe accident risks in environmental impact statements. There are many advanced reactor concepts being developed including high temperature gas-cooled reactor (HGTR), sodium-cooled fast reactor (SFR), lead-cooled fast reactor (LFR), molten salt reactor (MSR), micro-reactor, etc. The graded approach presented in this report for source terms determination is, to the extent possible, generic to any of these reactor designs and to future reactor designs. This report provides information on the review of the regulatory foundation for use of conservative bounding source terms as well as event-specific mechanistic source terms for advanced nuclear reactor designs.

07 ISOTOPE AND RADIATION SOURCES↗
DOE OSTI2022

Adapting the Technology Performance Level Integrated Assessment Framework to Low-TRL Technologies Within the Carbon Capture, Utilization, and Storage Industry, Part I

With the urgent need to mitigate climate change and rising global temperatures, technological solutions that reduce atmospheric CO 2 are an increasingly important part of the global solution. As a result, the nascent carbon capture, utilization, and storage (CCUS) industry is rapidly growing with a plethora of new technologies in many different sectors. There is a need to holistically evaluate these new technologies in a standardized and consistent manner to determine which technologies will be the most successful and competitive in the global marketplace to achieve decarbonization targets. Life cycle assessment (LCA) and techno-economic assessment (TEA) have been employed as rigorous methodologies for quantitatively measuring a technology's environmental impacts and techno-economic performance, respectively. However, these metrics evaluate a technology's performance in only three dimensions and do not directly incorporate stakeholder needs and values. In addition, technology developers frequently encounter trade-offs during design that increase one metric at the expense of the other. The technology performance level (TPL) combined indicator provides a comprehensive and holistic assessment of an emerging technology's potential, which is described by its techno-economic performance, environmental impacts, social impacts, safety considerations, market/deployability opportunities, use integration impacts, and general risks. TPL incorporates TEA and LCA outputs and quantifies the trade-offs between them directly using stakeholder feedback and requirements. In this article, the TPL methodology is being adapted from the marine energy domain to the CCUS domain. Adapted metrics and definitions, a stakeholder analysis, and a detailed foundation-based application of the systems engineering approach to CCUS are presented. The TPL assessment framework is couched within the internationally standardized LCA framework to improve technical rigor and acceptance. It is demonstrated how stakeholder needs and values can be directly incorporated, how LCA and TEA metrics can be balanced, and how other dimensions (listed earlier) can be integrated into a single metric that measures a technology's potential.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2005

Modular Software Interfaces for Revolutionary Flexibility in Space Operations

To make revolutionary improvements in exploration, space systems need to be flexible, realtime reconfigurable, and able to trade data transparently among themselves and mission operations. Onboard operations systems, space assembly coordination and EVA systems in exploration and construction all require real-time modular reconfigurability and data sharing. But NASA's current exploration systems are still largely legacies from hastily-developed, one-off Apollo-era practices. Today's rovers, vehicles, spacesuits, space stations, and instruments are not able to plug-and-play, Lego-like: into different combinations. Point-to-point dominates - individual suit to individual vehicle, individual instrument to rover. All are locally optimized, all unique, each of the data interfaces has been recoded for each possible combination. This will be an operations and maintenance nightmare in the much larger Project Constellation system of systems. This legacy approach does not scale to the hundreds of networked space components needed for space construction and for new, space-based approaches to Earth-Moon operations. By comparison, battlefield information management systems, which are considered critical to military force projection, have long since abandoned a point-to-point approach to systems integration. From a system-of-systems viewpoint, a clean-sheet redesign of the interfaces of all exploration systems is a necessary prerequisite before designing the interfaces of the individual exploration systems. Existing communications and Global Information Grid and middleware technologies are probably sufficient for command and control and information interfaces, with some hardware and time-delay modifications for space environments. NASA's future advanced space operations must also be information and data compatible with aerospace operations and surveillance systems being developed by other US Government agencies such as the Department of Homeland Security, Federal Aviation Administration and Department of Defense. This paper discusses fundamental system-of-systems infrastructure: approaches and architectures for modular plug-and-play software interfaces for revolutionary improvements in flexibility, modularity, robustness, ease of maintenance, reconfigurability, safety and productivity. Starting with middleware, databases, and mobile communications technologies, our technical challenges will be to apply these ideas to the requirements of constellations of space systems and to implement them initially on prototype space hardware. This is necessary to demonstrate an integrated information sharing architecture and services. It is a bottom-up approach, one that solves the problem of space operations data integration. Exploration demands uniform software mechanisms for application information interchange, and the corresponding uniformly available software services to enhance these mechanisms. We will examine the issues in plug-and-play, real-time-configurable systems, including common definition and management and tracking of data and information among many different space systems. Different field test approaches are discussed, including the use of the International Space Station and terrestrial analog mission operations at field sites.

Glass, Brian↗
NASA NTRS2008

Human Factors in Training

Future space missions will be significantly longer than current Shuttle missions and new systems will be more complex than current systems. Increasing communication delays between crews and Earth-based support means that astronauts need to be prepared to handle the unexpected on their own. As crews become more autonomous, their potential span of control and required expertise must grow to match their autonomy. It is not possible to train for every eventuality ahead of time on the ground, or to maintain trained skills across long intervals of disuse. To adequately prepare NASA personnel for these challenges, new training approaches, methodologies, and tools are required. This research project aims at developing these training capabilities. Training efforts in FY07 strongly focused on crew medical training, but also began exploring how Space Flight Resource Management training for Mission Operations Directorate (MOD) Flight Controllers could be integrated with systems training for optimal Mission Control Center operations. Beginning in January 2008, the training research effort will include team training prototypes and tools. The Training Task addresses Program risks that lie at the intersection of the following three risks identified by the Project: 1) Risk associated with poor task design; 2) Risk of error due to inadequate information; 3) Risk associated with reduced safety and efficiency due to poor human factors design.

Barshi, Immanuel↗
NASA NTRS2016

Pitfalls and Precautions When Using Predicted Failure Data for Quantitative Analysis of Safety Risk for Human Rated Launch Vehicles

Launch vehicle reliability analysis is largely dependent upon using predicted failure rates from data sources such as MIL-HDBK-217F. Reliability prediction methodologies based on component data do not take into account system integration risks such as those attributable to manufacturing and assembly. These sources often dominate component level risk. While consequence of failure is often understood, using predicted values in a risk model to estimate the probability of occurrence may underestimate the actual risk. Managers and decision makers use the probability of occurrence to influence the determination whether to accept the risk or require a design modification. The actual risk threshold for acceptance may not be fully understood due to the absence of system level test data or operational data. This paper will establish a method and approach to identify the pitfalls and precautions of accepting risk based solely upon predicted failure data. This approach will provide a set of guidelines that may be useful to arrive at a more realistic quantification of risk prior to acceptance by a program.

Hatfield, Glen S.↗
NASA NTRS2019

Structural Analysis and Performance-Based Validation of a Composite Wing Spar

Electric-motor powered aircraft possess the ability to operate with efficient energy delivery, but lack the operational range of internal combustion engine powered aircraft. This range limitation requires the use of high aspect ratio, thin-chord wings to minimize aerodynamic drag losses, which results in highly loaded composite spar structures. High aspect ratio wings are required to increase mission durations for a NASA-developed experimental multi-rotor electric powered aircraft denoted as the Scalable Convergent Electric Propulsion Technology and Operations Research (SCEPTOR) or “X-57”. This paper examines the structural performance of the composite main wing spars to validate spar strength using ply-based laminate finite element methods. Geometric scaling of a main spar test-section was initially proposed for proof-testing but sacrificed stability. Ply-based structures modeling with local structural features was implemented as a risk-reduction methodology. Ply-based modeling was selected to augment the conventional “building block” approach to reduce risk, and leverage a “performance-based” approval processes encouraged in Federal Aviation Administration (FAA) design guidance. Therefore, ply-based laminate modeling of the full-scale main spar and forward spar shear-web attachments were subsequently undertaken to determine load path complexity with predicted flight loads. Ply-based modeling included stress concentrations and interlaminate behavior at interface locations that can be obscured in traditional finite element sizing models. Analysis of the wing spar laminate ply-based models compared with bearing test coupon performance was used to reduce future wing assembly proof-testing burden and facilitate performance-based flight hardware safety for the X-57 experimental aircraft.

Moore, James B.↗
NASA NTRSDate not supplied

Overview of the Integrated Adaptive Wing Technology Maturation Wind-Tunnel Test Objectives

The Integrated Adaptive Wing Technology Maturation wind-tunnel test is the culmination of a cooperative effort between NASA and Boeing to develop control techniques that can improve the performance and safety of higher aspect ratio flexible transport aircraft. The wind-tunnel test article, to be tested at the NASA Langley Research Center Transonic Dynamics Tunnel, is a semispan model of a modern transport configuration based on the NASA Common Research Model with an aspect ratio 13.5 wing. Multiobjective control laws have been developed targeting drag optimization, maneuver load alleviation, gust load alleviation, and active flutter suppression. In this paper, the integrated model design, active control system, and sensor suite will be presented, and pretest modeling and characterization activities will be described. A summary of the planned wind-tunnel test entries will provide an overview of the experimental approach and expected outcomes.

wind-tunnel↗
DOE OSTI2024

FENIX: An Open-Source Multiphysics Integrated Framework Enabling Collaborative Development of Plasma Facing Component Modeling Capabilities

Advanced modeling and simulation tools have a crucial role to play in accelerating fusion energy deployment as a sustainable power source. Multiphysics, high-fidelity computational tools can help understand, model, and quantify the complex interactions between materials performance, plasma and neutron exposure, and engineering processes. As a result, they accelerate the design, safety analysis, and performance evaluation of fusion systems. This webinar introduces the Fusion ENergy Integrated multiphys-X (FENIX) framework, an open-source multiphysics tool for plasma facing component modeling. FENIX leverages the Multiphysics Object-Oriented Simulation Environment (MOOSE) framework, which has been developed by the United States Department of Energy Nuclear Energy Advanced Modeling and Simulation (NEAMS) program. FENIX couples various MOOSE capabilities such as heat transfer, thermomechanics, thermal hydraulics, electromagnetics, and plasma kinetics with the MOOSE-based applications Cardinal (neutronics) and TMAP8 (tritium transport). During the webinar, we will present FENIX and discuss how its modularity, openness, software quality assurance processes, and licensing approach supports effective collaborations, including public-private partnerships.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2004

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗
DOE OSTI2020

Molecular Design of a Highly Stable Single-Ion Conducting Polymer Gel Electrolyte

Single-ion conducting (SIC) polymer electrolytes with a high Li transference number ( t Li + ) have shown the capability to enable enhanced battery performance and safety by avoiding liquid–electrolyte leakage and suppressing Li dendrite formation. However, issues of insufficient ionic conductivity, low electrochemical stability, and poor polymer/electrode interfacial contact have greatly hindered their commercial use. In this work, a Li-containing boron-centered fluorinated SIC polymer gel electrolyte (LiBFSIE) was rationally designed to achieve a high t Li + and high electrochemical stability. Owing to the low dissociation energy of the boron-centered anion and Li + , the as-prepared LiBFSIE exhibited an ionic conductivity of 2 × 10 –4 S/cm at 35 °C, which is exclusively contributed by Li ions owing to a high t Li + of 0.93. Both simulation and experimental approaches were applied to investigate the ion diffusion and concentration gradient in the LiBFSIE and non-cross-linked dual-ion systems. Typical rectangular Li stripping/plating voltage profiles demonstrated the uniform Li deposition assisted by LiBFSIE. The interfacial contact and electrolyte infiltration were further optimized with an in situ UV–vis-initiated polymerization method together with the electrode materials. By virtue of the high electrochemical stability of LiBFSIE, the cells achieved a promising average Coulombic efficiency of 99.95% over 200 cycles, which is higher than that of liquid–electrolyte-based cells. No obvious capacity fading was observed, indicating the long-term stability of LiBFSIE for lithium metal batteries.

36 MATERIALS SCIENCE↗
DOE OSTI2022

Hybrid AI-ML and FE-based Digital Twin Predictive Modeling Framework for a PWR Coolant System Components: Updates on Multi-Time-Series-3D-Location Dependent Usages Factor Prediction

The long-term operation (LTO) of nuclear power plants (NPP) beyond their original design life of 40 years can lead to more material damage associated with cyclic fatigue under thermal-mechanical loading cycles and associated long-term exposure of reactor material to the deleterious reactor-coolant environments. However, under this LTO condition, the reactor components can still safely operate but may require more frequent Nondestructive Evaluation (NDE) of reactor components. Requiring frequent NDE inspections may lead to frequent NPP shutdowns which can lead to power outages and additional NDE inspection cost-related economic loss. The economic loss can be minimized by reducing uncertainty in life estimation of safety-critical pressure boundary components and by implementing a more digital approach such as using upcoming digital-twin (DT) technology for predicting the structural states (e.g., time and location dependent inside/outside thickness temperature, stress, strain, plastic deformation, etc.) and associated fatigue life of a component in real time. The DT framework is based on limited experimental data, Artificial-intelligence (AI)-Machine-Learning (ML) and multiphysics-computationalmechanics such as finite element- (FE) based models. Given the real-time thermal-hydraulic process measurements from several existing plant sensors, the overall goal of the DT framework is to predict the cumulative usages factors or equivalent fatigue lives in real time and at any random 3D location of the components. This includes inaccessible locations such as inside the thickness or location of a component. This prediction can be at thousands to millions of 3D point clouds or locations like conventional FE-based models, but without running an FE model in real time.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1990

Assessing information transfer in full mission flight simulations

Considerable attention must be given to the important topic of aircrew situation awareness in any discussion of aviation safety and flight deck design. Reliable means of assessing this important aspect of crew behavior without simultaneously interfering with the behavior are difficult to develop. Unobtrusive measurement of crew situation awareness is particularly important in the conduct of full mission simulations where considerable effort and cost is expended to achieve a high degree of operational fidelity. An unobtrusive method of assessing situational awareness is described here which employs a topical analysis of intra-crew communications. The communications were taken from videotapes of crew behavior prior to, during, and following an encounter with a microburst/windshear event. The simulation scenario re-created an actual encounter with an event during an approach into Denver Stapleton Airport. The analyses were conducted on twelve experienced airline crews with the objective of determining the effect on situation awareness of uplinking ground-based information of the crew during the approach. The topical analysis of crew communication was conducted on all references to weather or weather-related topics. The general weather topic was further divided into weather subtopical references such as surface winds, windshear, precipitation, etc., thereby allowing for an assessment of the relative frequency of subtopic reference during the scenario. Reliable differences were found between the relative frequency of subtopic references when comparing the communications of crews receiving a cockpit display of ground-based information to the communications of a control group. The findings support the utility of this method of assessing situation awareness and information value in full mission simulations. A limiting factor in the use of this measure is that crews vary in the amount of intra-crew communications that may take place due to individual differences and other factors associated with crew coordination. This factor must be taken into consideration when employing this measure. Viewgraphs are given.

Lee, Alfred T.↗
NASA NTRS2004

Synthesizing Safety Conditions for Code Certification Using Meta-Level Programming

In code certification the code consumer publishes a safety policy and the code producer generates a proof that the produced code is in compliance with the published safety policy. In this paper, a novel viewpoint approach towards an implementational re-use oriented framework for code certification is taken. It adopts ingredients from Necula's approach for proof-carrying code, but in this work safety properties can be analyzed on a higher code level than assembly language instructions. It consists of three parts: (1) The specification language is extended to include generic pre-conditions that shall ensure safety at all states that can be reached during program execution. Actual safety requirements can be expressed by providing domain-specific definitions for the generic predicates which act as interface to the environment. (2) The Floyd-Hoare inductive assertion method is refined to obtain proof rules that allow the derivation of the proof obligations in terms of the generic safety predicates. (3) A meta-interpreter is designed and experimentally implemented that enables automatic synthesis of proof obligations for submitted programs by applying the modified Floyd-Hoare rules. The proof obligations have two separate conjuncts, one for functional correctness and another for the generic safety obligations. Proof of the generic obligations, having provided the actual safety definitions as context, ensures domain-specific safety of program execution in a particular environment and is simpler than full program verification.

Eusterbrock, Jutta↗