Search NASA⌕ Search

SEARCH · Search NASA

Results for “Access Control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

A High-Throughput Computing Infrastructure to Generate Custom, Open Community Geothermal Datasets

The most significant challenge facing geothermal research, development, and deployment is a lack of comprehensive datasets describing the geological and economical properties of North America. Automated knowledge base construction, the process of designing algorithms to analyze text and images to programmatically build new datasets, is one possible solution to this problem. The xDD library of full-text scientific articles (https://xdd.wisc.edu) is one of the largest collections of open and controlled-access scientific documents available for knowledge base construction in the world, but it has been underutilized by experts in geothermal research. The xDD development team attributed the lack of engagement by software developers and geothermal researchers to two perceived shortcomings of the system. First, the workflow for obtaining data from xDD for local development and testing of data mining applications was unnecessarily abstruse and required significant manual intervention by xDD systems administrators. Second, although xDD already held articles from a broad cross-section of scientific literature with an emphasis on the geosciences, it did not have an explicit set of geothermal research documents that could serve as the nucleus of a geothermal data mining application. To address these issues, the Automated Data Extraction PlaTform (ADEPT) was proposed to extend the data distribution capabilities of the xDD system. The ADEPT extension added the following four key features to xDD: 1) integration of National Geothermal Data System (NGDS) documents into the xDD library to provide an explicitly geothermally-themed collection; 2) improved RESTful (i.e., https-protocol driven) web services for external partners to access xDD data for machine learning application development; 3) a web platform for end-users and xDD administrators to coordinate the development of data mining applications from the initial step of browsing available documents to the final stage of deploying a production-quality machine learning application on high-throughput computing infrastructure; and 4) the development of demonstration data mining applications to illustrate the new workflow to potential collaborators. A total of 21,674 geothermal documents from NGDS were fully ingested into the xDD library and the associated metadata is publicly available through the xDD web services; furthermore, the ADEPT web platform is now publicly accessible and fully live at https://xdd.wisc.edu/adept/.

15 GEOTHERMAL ENERGY↗
DOE OSTI2022

Security Enhancements for Distributed Energy Resource Systems Interconnected with Distribution Networks: Final Technical Report

The revised IEEE 1547 Standard defines new complex communication-adjustable voltage and frequency regulation and ride-through characteristics, while maintaining the general antiislanding requirement for unintentional islanding situations. Unintentional islanding is prohibited while intentional islanding is specifically allowed, thus effectively enabling microgrid operation mode. Further, IEEE 1547-2018 Standard introduces new requirements in terms of interoperability so that the DER plant/circuit segments may be seamlessly integrated with the utility networks but at the same time become vulnerable to a cyber-attack. Traditional cybersecurity measures including encryption, authentication and role-based access control may not be fully implementable to all communication protocols specified in the IEEE 1547 Standard. Therefore, in this project we have identified, researched, implemented and tested several cyberphysical approaches that rely mostly on the behavior of the DER circuit and may help with validating the incoming command and control action potentially coming through an insecure communications channel. Additionally, we have built semantic models and communications profiles for DER facilities and have implemented lightweight IEC 61850 based publisher-subscriber GOOSE messaging mechanism, with security extensions in terms of authentication and encryption. The project proposed information models for integration into UCA OpenFMB 2.0 profiles focusing on grid code compliance.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Universal Utility Data Exchange (UUDEX) Phase 4 Demonstration Environment and Results

This report provides an overview of the environment used by the Pacific Northwest National Laboratory (PNNL) in the Universal Utility Data Exchange (UUDEX) Phase 4 demonstration, and description of the demonstrations performed in the environment. The UUDX Phase 4 demonstration took place on March 31, 2021, with representatives from PNNL and the two project sub-contractors, OATI and MITRE, performing the demonstration for members of the UUDEX Industry Advisory Board (IAB). The demonstration tasks were based on the previous Phase 3 demonstration but conducted in a multi-site environment. Additional demonstrations showed features that were developed since the Phase 3 demonstration. The development environment was constructed by PNNL programming staff using the previously developed UUDEX Functional Design, Protocol Design, and Workflow Design documents as a starting point. The environment was augmented with subject creation management and access control security data structures and workflows, and data exchange structure documents developed as part of Phase 3 and Phase 4.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Using the power of secure Generative AI to eliminate data silos

Over time, multiple information repositories, access controls, and management practices created disparate information silos. Gaining accurate insights from lab information had become overly burdensome especially for new employees and collaborators

Purcell, Kevin↗
DOE OSTI2024

Eligibility Assessment of Items in the TA-60 Rack Assembly and Alignment Complex Legacy Storage Yard

The U.S. Department of Energy, National Nuclear Security Administration, Los Alamos Field Office (NA-LA), documented and evaluated seven structures in the Technical Area 60 (TA-60) Rack Assembly and Alignment Complex (RAAC) legacy storage yard at Los Alamos National Laboratory (LANL or Laboratory) for listing in the National Register of Historic Places (National Register). This documentation and evaluation was conducted in compliance with Section 106 of the National Historic Preservation Act of 1966, as amended; the Code of Federal Regulations (36 CFR 800); the Programmatic Agreement among the U.S. Department of Energy, National Nuclear Security Administration, Los Alamos Field Office, the New Mexico State Historic Preservation Office and the Advisory Council on Historic Preservation Concerning Management of the Historic Properties at Los Alamos National Laboratory, Los Alamos New Mexico (PA)1; and A Plan for the Management of the Cultural Heritage at Los Alamos National Laboratory, New Mexico (LANL’s Cultural Resources Management Plan (2017). NA-LA makes the following National Register eligibility determinations: la cuna; the rack transporter (jeep, rack trailer, and steering dolly); the Mexia diagnostic rack; the Mexia device canister; the Mexia device mounting stand; and the Mexia target stand are eligible for listing in the National Register, and the second steering dolly is not eligible for listing in the National Register. This National Register evaluation was completed because LANL proposes to develop a consolidated waste facility in TA-60 next to the former RAAC. Across 3.56 acres, LANL proposes to construct an 8,000-square-foot, pre-engineered waste storage building; a 1,500-square-foot office/warehouse building; and 28,500 square feet of covered storage. The development will also include access control features and fencing, parking spaces, and utilities. Additionally, the Laboratory will continue to use the southern part of TA-60-0017 and reuse TA-60-0086 and TA-60-0324 in the development. The consolidated waste facility will operate as a central accumulation area—storing universal waste, mixed low-level (radioactive) waste, hazardous chemicals, and New Mexico special waste—until the waste can be shipped off site.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

The disCO2ver Platform: Curating Data and Tools for Geologic Carbon Sequestration and Deep Subsurface Research Systems

The U.S. DOE National Energy Technology Laboratory has invested 12+ years of development into the data repository and digital laboratory, the Energy Data eXchange (EDX, edx.netl.doe.gov). Supporting a variety of research areas across the DOE Office of Fossil Energy and Carbon Management, the platform has successfully curated and preserved thousands of data products from DOE research. The Carbon Storage Program has successfully supported data curation, upload, and publishing of data products on EDX for many years, demonstrating a success story of how resources like EDX can effectively help with long term preservation and publishing of DOE data products. EDX continues to shift towards cloud-supported infrastructure, taking a hybrid approach combining on-premises compute and storage integrated with cloud-hosted services. The integration of cloud compute and hybrid architecture enables the development of EDX-hosted platforms that tailor the data and tools hosted on them to a specific community, enables implementation of machine learning tools for data discovery and filtering, and enables the hosting of virtual (online user interface) tools. Geologic carbon sequestration (GCS) research continues to scale up in response to the current administration goals to reduce greenhouse gas emissions and transition the energy economy. Over the last year, EDX’s disCO2ver platform has been developed in response to the need for access to data products and tools to support the scaling up of GCS research. disCO2ver provides access to data resources and tools, produced by DOE and outside authoritative external resources. The platform also provides a user-access control component for the virtualization and cloud hosting of tools. Tools that need to be virtualized, to eliminate the need for users to download the tool and use local compute resources, is essential to supporting big-data analysis and machine learning that is becoming common place in carbon storage modeling, risk analysis, and data publishing practices. This talk will review the EDX’s disCO2ver platform and the current work ongoing to curate data and tools to support GCS and deep subsurface systems research.

Morkner, Paige↗
DOE OSTI2025

VA EDH Advanced Software Pipeline Framework Report: Enhancing Automation and Scalability

The VA Environmental Determinants of Health (EDH) Advanced Software Pipeline Framework is designed to enhance the efficiency, scalability, and security of geospatial data processing workflows. This framework integrates modern data orchestration and containerization technologies, including Prefect for workflow automation, Docker for containerization, and PostgreSQL/PostGIS for geospatial data storage and analysis. It ensures standardized, reproducible, and automated data processing, supporting VA objectives related to substance use risk assessment and recovery research. The pipeline addresses key scalability and performance challenges through horizontal and vertical scaling, high-performance computing (HPC) integration, parallel processing, task caching, and dynamic resource allocation. These optimizations improve throughput and reduce latency, allowing the system to efficiently manage large and complex datasets. Additionally, security and compliance measures—such as data encryption (SSL), Role-Based Access Control (RBAC), and adherence to GDPR and HIPAA standards—safeguard sensitive information throughout data transmission and storage. A key implementation of this framework includes the automation of shelter list geolocation workflows, ensuring that up-to-date data is readily available for VA decision-making. Lessons learned from this project include the transition from in-memory processing to incremental storage writes, improving resource management and reliability. Future enhancements aim to expand automation, integrate AI-driven anomaly detection, and incorporate high-performance computing resources. This framework provides a scalable, secure, and adaptable solution for managing geospatial datasets, reinforcing the VA’s ability to support clinical and strategic initiatives through data-driven decision-making.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

DER Cybersecurity Standards: Assessment and Gap Analysis

The purpose of this report is to share the comprehensive gap analysis of existing cybersecurity standards applicable to Distributed Energy Resources (DERs) within the electric power sector. This analysis aims to identify critical deficiencies in current standards, assess their alignment with industry needs, and provide actionable recommendations for enhancing cybersecurity measures. The scope encompasses various DER technologies, including solar, wind, energy storage, and hydrogen fuel cells, and emphasizes the significance of establishing robust cybersecurity frameworks and standards to safeguard these increasingly integrated systems. The report provides valuable insights for stakeholders in the DER ecosystem, including manufacturers, utilities, and regulators. It underscores the importance of continued development and refinement of cybersecurity standards to keep up with the technical advances in DERs and associated cybersecurity challenges. The analysis evaluated IEC, IEEE, ISA, ISO, and UL standards relevant to DER cybersecurity. Standards were assessed on their coverage of key requirements including data availability, integrity, confidentiality, access control, authentication, encryption, and system hardening. For each standard, the analysis assessed its alignment with current industry practices, regulatory compliance, effectiveness in addressing known risks, coverage of emerging risks, and how it promotes interoperability. The evaluation also considered potential integration challenges and barriers to adoption.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Roadmap for Solar Photovoltaic (PV) Cybersecurity: A vision for improving cyber maturity of distributed and utility-scale solar energy installations

As the solar energy sector continues to expand, its integration into the broader energy infrastructure presents both unprecedented opportunities and new risks. The increasing reliance on digital technologies and interconnected systems in solar energy creates an expanded attack surface for motivated cyber adversaries. Cyberattacks have the potential to cause disruptions in energy production, damage to equipment, financial losses, and compromises in national security. Therefore, ensuring robust cybersecurity measures is paramount to protect the integrity, availability, confidentiality, and access control of solar energy systems. However, there are still key gaps and challenges to be addressed in industry and research, which stakeholders must race to address as they combat a growing number of real-world cyber incidents that affect solar energy systems and a growing number of vulnerabilities discovered and disclosed in key types of equipment. This roadmap explore the current state of solar PV cybersecurity and the gaps and challenges still to be addressed.

14 - SOLAR ENERGY↗
DOE OSTI2016

Chemical Management System (CMS) v. 1.0

CMS is a Windows application for tracking chemical inventories. Partners will use this application to record chemicals that are stored on their site and to perform periodic inventories of those chemicals. The application records information about stored chemicals from user input via the keyboard and barcode readers and stores that information into a single-file database (SQLite). A simple user login mechanism is used to control access to functions in the application. A user interface is provided that allows users to search the database and update data in the database.

Humphrey, Walter R.↗
DOE OSTI2017

Quantum key distribution using card, base station and trusted authority

Techniques and tools for quantum key distribution ("QKD") between a quantum communication ("QC") card, base station and trusted authority are described herein. In example implementations, a QC card contains a miniaturized QC transmitter and couples with a base station. The base station provides a network connection with the trusted authority and can also provide electric power to the QC card. When coupled to the base station, after authentication by the trusted authority, the QC card acquires keys through QKD with a trust authority. The keys can be used to set up secure communication, for authentication, for access control, or for other purposes. The QC card can be implemented as part of a smart phone or other mobile computing device, or the QC card can be used as a fillgun for distribution of the keys.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

High-Resolution Gamma Spectrometry Data Set for High Burnup Pressurized Water Reactor Used Fuel

Over the past decade, considerable resources have been applied to investigate verification of used nuclear fuel assemblies for international safeguards. The opportunity to expand the available data used to validate these verification techniques was presented in 2016 by the High Burnup Spent Fuel Data Project, which made 25 high-burnup pressurized water reactor used fuel rods available for measurement in the Irradiated Fuels Examination Laboratory at Oak Ridge National Laboratory. With the support of the National Nuclear Security Administration Office of Nonproliferation and Arms Control, a 2017 campaign measured the 25 used fuel rods with a high-resolution gamma spectrometer. A planar high-purity germanium detector was used to provide high-efficiency across an energy range from 60 keV to 3 MeV. Gamma spectra of individual fuel rods were collected in 4.5 mm steps along the entire length of each rod. In addition, spectra were collected on select rods in rotational increments of 30 degrees to provide data on the distribution of fission products along the rod perimeter. The spectra are stored on a controlled-access website for use by others. This paper describes the measurement geometry, used fuel rod characteristics, example spectra, and preliminary analyses performed during the measurement campaign.

Smith, Susan↗
DOE OSTI2020

ModuleOT: A Hardware Security Module for Operational Technology: Preprint

With increasing penetration levels of distributed energy resources (DERs) on the distribution grid, as well as new technological advancements in the cyber space, new cyberattack vectors are being introduced, and the available attack surface is constantly increasing. Despite this increasing risk, the standard IEEE 1547-2018 does not yet recommend cybersecurity measures for DERs. To address this and to better protect data on the distribution grid - from the standpoints information security as well as operational security - ModuleOT has been developed. The module aims to significantly reduce cyberattack vectors by improving data privacy for user applications. This is accomplished by performing the core functions of encryption, authentication, authorization, certificate management, and user access control. The module integrates a custom security application with hardware cryptographic acceleration. The application secures all communications using Transmission Control Protocol over Internet Protocol (TCP/IP). These include the three most commonly used communications protocols for power systems information exchange: Modbus, Distributed Network Protocol 3 (DNP3), and Smart Energy Profile 2.0 (SEP2.0). These three protocols are also supported by IEEE 1547-2018 for all DER devices. This paper tests the data encryption/decryption feature on a physical networking test bed with emulated Modbus devices reporting grid data and presents the results.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Accessing protected data by a high-performance computing cluster

A data protection system is provided that allows applications to access protected data in a way that restricts applications from outputting to unauthorized targets any unprotected data derived from the protected data and that ensures that the applications do not have access to a key that allows access to the unprotected data. The data protection system provides a policy server that may execute on a service node of a high performance computing system and a data encryption process that may execute on each compute node that is allocated to an application or batch job. The policy server maintains policies of entities specifying access control for protected data. The data encryption process generates a secure execution environment for an application process and interfaces with the policy server to retrieve keys for decrypting protected data in accordance with a policy, and it decrypts and provides the decrypted data to the application process.

Barnes, Peter↗
DOE OSTI2021

Grand unified file indexing

Systems and methods are disclosed for a unified file index for a file system. In one example, a Grand Unified File Index (GUFI) includes a tree replicating the directory hierarchy of one or more primary filesystems, and individual metadata stores for each directory. The GUFI tree permits fast traversal, efficient user space access controls, and simple tree directed operations such as renames, moves, or permission changes. In some examples, the individual metadata stores can be implemented as embedded databases on flash storage for speed. In some examples, use of summary tables at the directory or subtree level can eliminate wasteful executions, prune tree traversal, and further improve performance. In various examples, efficient operation can be achieved from laptop to supercomputer scale, across a wide mix of file distributions and filesystems.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Implementing Cybersecurity for Distributed Wind: An Exercise in ICS Security Application

Distributed wind is unique and fast-growing component of the energy production mix, but cybersecurity for distributed wind is not well developed. In this presentation, we will introduce distributed wind as an example of difficult-to-secure critical infrastructure. We will first provide background on distributed wind architectures, applications, and stakeholder roles. We will explain the need and challenges for cybersecurity for distributed wind, pointing to both academic studies and real-world events. The key component of the presentation will discuss recommendations for different aspects of security, such as risk assessments, communications, and access control, that specifically call out considerations that apply uniquely to distributed wind. We will discuss what sets distributed wind apart from other ICS and energy applications, and how to account for these features in a comprehensive security plan. This process is demonstrative of the type of analysis needed to adapt traditional security guidelines and standards to narrow and focused applications.

17 WIND ENERGY↗
DOE OSTI2019

Inventory and Characterization of Categories 3-5 Disused Sealed Radioactive Sources - 19284

Brazil has one of the biggest inventories of SRS in the world, not only because of the large industrial park, the well-developed health care infrastructure and the numerous mining operations, but also by the use of radioactive sources in consumer products, such as smoke detectors, lightning arresters, surge protectors and even cardiac pacemakers. Presently, the inventory of DSRS at the WML is of more than 10,000; if the sources from lightning arresters, smoke detectors and Ir-192 with activities above the clearance levels are included, the estimate is over 150,000. The Waste Management Laboratory (WML) of the Nuclear and Energy Research Institute (IPEN/CNEN-SP) is responsible for the management and treatment of these sources. An important aspect to consider is that Brazil does not have a defined strategy or a protocol for screening and inventorying these sources, whose management was limited only to storage. The WML started the development of methods and operational work, to characterize and reduce the total volume of this inventory for the borehole-type final disposal facility yet to be constructed, where the DSRS will be disposed of. The information available from these sources is in a database created in 1980, when the sources began to be received. Several records on the FRSD that were checked are incomplete or simply incorrect, since there is no correspondence between the dates of entry of these sources in the storage and their physical characteristics. Some reasons can be listed to try to understand the divergences: the inspection when receiving the sources was not possible, no inspection procedure was defined, there were technical difficulties to open the packages. The objective of this work is to organize the inventory in a standardized way, control access, traceability, reduction of the necessary time to locate and characterize the sources upon reception, and of the repetitive work in the operational routine, and finally release of space in the storage. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2018

Shielding maze design for Line C tunnel at LANSCE - 25456

The Los Alamos Neutron Science Center (LANSCE) is a major experimental facility at Los Alamos National Laboratory. The LANSCE linear accelerator (linac) supplies proton beams to five experimental areas simultaneously. The Isotope Production Facility (IPF) utilizes a 100-MeV beam after the first stage of acceleration, all other facilities use proton beams at 800 MeV. However, the facility can support sole-use experiments at 200-600 MeV proton beam energies. There are three spallation neutron sources providing neutrons in different energy regimes: Weapons Neutron Research (WNR), Lujan Neutron Scattering Center (Lujan Center) and the Ultra Cold Neutron source (UCN). The proton radiography (pRAD) facility utilizes the energetic proton beam for imaging and tomography directly. The beam to pRAD and UCN facilities is delivered via line X that splits into line C (pRAD) and line B (UCN). Due to engineering access controls it is impossible to deliver beam to UCN while the pRAD facility is occupied. The goal of our project was to design a shielding maze arrangement for line C to allow for simultaneous beam delivery to UCN while pRAD area (dome) is occupied. (authors)

43 PARTICLE ACCELERATORS↗