Search NASA⌕ Search

SEARCH · Search NASA

Results for “Behavior Based Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

A Theoretical Analysis on the Dynamic Behavior and Electromechanical Response of PZT

Piezoelectric materials are used as a power source in stockpile components for safety and reliability assurances. The objective of this project is to gain insights into the fundamental pressure-induced behavior and electromechanical response of lead zirconate titanate (PZT). Specifically, to establish the basis for an accurate, physics-based material model for robust model-based design to rapidly optimize PZT-based materials and components for performance studies. Established ab-initio methods are used to interrogate and understand the dynamic behavior of PZT as a function of composition (50/50, 65/35, 80/20, 95/5) and dopants (La, Nb) to overcome the costly and time-consuming experimental methodologies. New cold curves for pure and doped single-crystal PZT are obtained as the reference equation-of-state (EOS). A negligible change in the pressure responses was observed for the systems and strains studied. Dielectric and piezoelectric responses of pure and doped single-crystal PZT were also calculated as a function of pressure. For undoped PZT, there is a clear and orderly pressure and composition dependence. For doped PZT, there is a significant increase in the responses, but the behavior is very disordered and inconclusive.

36 MATERIALS SCIENCE↗

Assessment of Cladding-Cladding Delamination Failures in U-Mo Fuel Plates

Monolithic fuel is a candidate fuel form for the conversion of high-performance research reactors. This plate-type fuel consists of a high-density, U-Mo alloy-based fuel in a monolithic form that is sandwiched between zirconium diffusion barriers and encapsulated in an aluminum cladding. To qualify this fuel system, the program must demonstrate that the fuel meets the safety standards, has a predictable behavior, and performs well in a reactor. Although many plates have shown satisfactory thermo-mechanical performance in reactor, a small number of experimental plates exhibited failures, rendering performance of these plates unacceptable. Post-irradiation examinations of failed plates have revealed that various failures modes are present, including pillowing, blistering, buckling, warping, delamination, fracture, rupture, oxide spallation, etc. Previous studies have implied that such various operational and loading conditions could generate a complex stress-strain state, facilitating distinct failure modes that could impact the structural integrity. To understand such various failure modes, a comprehensive set of studies focusing on failure modes is being performed. As a part of these studies, this work studies the cladding-cladding separation failures that were observed in some of previous irradiation tests. To understand the root cause of cladding separation failures, selected plates from previous irradiation experiments were simulated under comparable operational conditions. Stress-strain state of the plates at the interface were examined. The results were comparatively evaluated to understand possible effects of stress state of the bond-line on delamination failures. This paper presents these findings, discusses such failure modes, and examines the influence of various factors on previously observed cladding delamination failures.

42 ENGINEERING↗

Computer security approach for Rolls-Royce spinline{sup R} safety platform - 227

The number of digital assets at commercial nuclear power plants is significant and will likely continue to increase with time. As a consequence, these plants have become potential targets for cyber-attacks. Around the world, nuclear safety authorities and national Computer and Information Security Agencies are implementing stricter regulations and inspections for critical systems in nuclear plants. There is a particular focus on instrumentation and control systems as they implement key nuclear safety functions. Rolls-Royce follows a strict computer and information security program based on general and nuclear specific norms, Rolls-Royce group processes, and proven technologies. The Spinline digital safety platform has been designed specifically for nuclear applications and features a secure development and operational environment that provides barriers against unauthorized modifications and implements design requirements promoting integrity and reliability during operation and maintenance. The Rolls-Royce secure development environment provides layers of protection utilizing physical and environmental security, human resource security, and information technology systems access control. The Spinline platform strengthens security functions by providing protection against unauthorized, unintended, and unsafe modifications to the system. The Spinline platform has design features promote integrity and reliability during operation and maintenance in the event of inadvertent operator actions or undesirable behavior of connected equipment. The Spinline technology and these computer security processes are based in a wide spectrum of international standards that were accepted as providing a secure development and operating environment by the United States Nuclear Regulatory Commission in 2014. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Analysis of, and defense against, spurious actuations and other incorrect behaviors of digital control systems - 390

Modern digital instrumentation and control (I and C) systems offer nearly unlimited functional capability. However, the complexity of their design (including their system software and application software) is significantly higher than that of conventional, hardwired systems, to the point that it is generally impossible to demonstrate that there are no residual design errors, even when the best development and verification techniques have been applied. When activated by specific conditions, design errors could result in systematic failures, i.e., failures that occur deterministically each time and wherever an activating condition is present. Redundancy could be defeated when the same design error affects multiple channels or systems, and the activating condition affects several of these channels or systems. In the case of safety I and C systems, most of the functions are poised protection functions that must be actuated when and only when a demand situation occurs in the plant. In nuclear power plants, the most dangerous failure mode for such functions generally is failure to actuate, and many measures are taken to protect from such failure mode. This paper considers the other failure modes of safety I and C functions, and also the failure modes of the other I and C functions that are less important to safety. It is not limited to poised functions, and considers other types of functions such as regulation functions or human interface functions. It proposes a framework for analyzing and providing defense against spurious actuations and other incorrect behaviors from digital I and C systems directly interacting with the plant process or with operators: these might be useful for example to justify that design bases for reactor protection are adequate, or to ensure plant performance and availability. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Effects of cryogenic temperature and grain size on fatigue-crack propagation in the medium-entropy CrCoNi alloy

CrCoNi-based high-entropy alloys have demonstrated outstanding mechanical properties, particularly at cryogenic temperatures. Here we investigate the fatigue-crack propagation properties of the equiatomic, single-phase, face-centered cubic, medium-entropy alloy (MEA), CrCoNi, that displays exceptional strength, ductility and toughness, all of which are enhanced at cryogenic temperatures. Fatigue-crack growth is examined, at a load ratio of 0.1 over a wide range of growth rates, from ~10 –11 to >10 –7 m/cycle, at room (293 K) and cryogenic (198 K, 77 K) temperatures for two grain sizes (~7 and 68 µm), with emphasis on near-threshold behavior. We find that the ΔK th fatigue thresholds are increased with decreasing temperature and increasing grain size: from 5.7 MPa√m at 293 K to 8 MPa√m at 77 K in the fine-grained alloy, and from 9.4 MPa√m at 293 K to 13.7 MPa√m at 77 K in the coarse-grained alloy. Mechanistically, transgranular cracking at 293 K transitions to a mixture of intergranular and transgranular at cryogenic temperatures, where the increased propensity of nano-twins appears to inhibit growth rates by deflecting the crack path. However, the main factor affecting near-threshold behavior is roughness-induced crack closure from interference between the crack flanks, which is enhanced by the rougher fracture surfaces at low temperatures, particularly in the coarser-grained microstructure. Here, fatigue-crack propagation behavior in CrCoNi is comparable to nickel-based superalloys but is superior to that of the high-entropy CrMnFeCoNi (Cantor) alloy and many high-strength steels, making the CrCoNi alloy an excellent candidate material for safety-critical applications, particularly involving low temperatures.

36 MATERIALS SCIENCE↗

A Vision–based Robust $\mathcal{H}$ ∞ Gain Scheduling Longitudinal and Lateral Following Controller for Autonomous Vehicles on Urban Curved Roads

Implementing advanced driver assistance systems (ADAS) in congested and intricate urban traffic scenarios poses significant challenges. To address the frequent stop–and–go motions exhibited by autonomous vehicles (AVs) navigating urban roads with changes in curvature, we propose a vision–based robust $\mathcal{H}$ ∞ adaptive cruise control system (ACC) for longitudinal control, plus a lane keeping assist system (LKAS) for lateral control. For the vision-based ACC, a weighted probability objective function for the vehicle following behavior is formulated. We incorporate $\mathcal{H}$ ∞ performance and gain scheduling techniques to mitigate the impact of uncertainty in visual sensor measurements. Furthermore, the optimal time headway is scheduled based on the velocity to ensure traffic flow efficiency and safety during the vehicle following process. For the LKAS, we introduce a road curvature estimation method that integrates lane and vehicle dynamics information to obtain the lateral and heading offsets. Next, the design criterion of the observer–based robust gain scheduling lateral motion controller is established by linear matrix inequality (LMI). Here, a series of experiments conducted within a camera–in–loop platform validate the proposed method.

33 ADVANCED PROPULSION SYSTEMS↗

Ship Motion Testing Needs Evaluation

The American Bureau of Shipping performed an evaluation of national maritime nuclear testing capabilities and determined there currently is an inability to test maritime nuclear power plants in a ship motion environment. A Ship Motion Test Facility (SMTF) is proposed to fill this gap. To inform design of this facility, this report documents an evaluation performed by a panel of technical experts that identifies key physical phenomena associated with maritime nuclear power plant operation that are important to safety and reliability and have a low state of knowledge. This evaluation concluded that all of the major test needs to understand a nuclear plant's behavior in a ship motion environment are for thermal-hydraulics related phenomena. Based on this finding, the evaluation panel concluded that the SMTF would not be required to use nuclear fuel to provide a heat source for the fluids. This would significantly decrease the cost, timeline, and complexity for this test facility to enable the advancement of maritime nuclear technology.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Overarching Properties as Means of Compliance: An Industrial Case Study

The Overarching Properties (OPs) have been created by an inter-national working group and are being evaluated by the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), industry, and other certifying agencies in an effort to streamline certification processes. Their intent is to facilitate the use of alternative approaches and to al-low flexibility to combine the system, software, and complex hardware certification. The hope is that the FAA may eventually establish an Advisory Circular that offers the OPs as a Means of Compliance (MoC) for software approval (and eventually systems and hardware) by showing the product possesses the three OPs: Intent (specification of the intended behavior), Correctness (implementation of the intended behavior) and Innocuity (safety of unintended behavior). In the certification community, there is still a concern about the practicability of using such high level properties in certification. This paper aims to address that concern by showing possession of the OPs in an industrial case study using assurance arguments. The two main contributions of this paper are: a certification process based on OPs as Means of Compliance, and a certification argument for an on-board physical model of an UAV, as industrial example. We pro-pose a hybrid approach for the certification process that combines OPs with existing certification standards. Thus, OPs can be used for parts of a system that uses technologies that are not supported by current standards or for which existing standards require additional effort without commensurate additional safety assurance.

certification↗

Implications of stop-and-go traffic on training learning-based car-following control

Learning-based car-following control (LCC) of connected and autonomous vehicles (CAVs) is gaining significant attention with the advancement of computing power and data accessibility. While the flexibility and large model capacity of model-free architecture enable LCC to potentially outperform the model-based car-following (CF) model in improving traffic efficiency and mitigating congestion, the generalizability of LCC for traffic conditions different from the training environment/dataset is not well-understood. Herein, this study seeks to explore the impact of stop-and-go traffic in the training dataset on the generalizability of LCC. It uses the characteristics of lead vehicle trajectories to describe stop-and-go traffic, and links the theory of identifiability (i.e., obtaining a unique parameter estimation result using sensor measurements) to the generalizability of behavior cloning (BC) and policy-based deep reinforcement learning (DRL). Correspondingly, the study shows theoretically that: (i) stop-and-go traffic can enable the property of identifiability and enhance the control performance of BC-based LCC in different traffic conditions; (ii) stop-and-go traffic is not necessary for DRL-based LCC to generalize to different traffic conditions; (iii) DRL-based LCC trained with only constant-speed lead vehicle trajectories (not sufficient to ensure identifiability) can be generalized to different traffic conditions; and (iv) stop-and-go traffic increases variance in the training dataset, which improves the convergence of parameter estimation while negatively impacting the convergence of DRL to the optimal control policy. Numerical experiments validate the above findings, illustrating that BC-based LCC entails comprehensive training datasets for generalizing to different traffic conditions, while DRL-based LCC can achieve generalization with simple free-flow traffic training environments. This further suggests DRL as a more promising and cost-effective LCC approach to reduce operational costs, mitigate traffic congestion, and enhance safety and mobility, which can accelerate the deployment and acceptance of CAVs.

33 ADVANCED PROPULSION SYSTEMS↗

Proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification

This NASA conference publication contains the proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification, held as part of LICS in Los Angeles, CA, USA, on August 15, 2009. Software certification demonstrates the reliability, safety, or security of software systems in such a way that it can be checked by an independent authority with minimal trust in the techniques and tools used in the certification process itself. It can build on existing validation and verification (V&V) techniques but introduces the notion of explicit software certificates, Vvilich contain all the information necessary for an independent assessment of the demonstrated properties. One such example is proof-carrying code (PCC) which is an important and distinctive approach to enhancing trust in programs. It provides a practical framework for independent assurance of program behavior; especially where source code is not available, or the code author and user are unknown to each other. The workshop wiII address theoretical foundations of logic-based software certification as well as practical examples and work on alternative application domains. Here "certificate" is construed broadly, to include not just mathematical derivations and proofs but also safety and assurance cases, or any fonnal evidence that supports the semantic analysis of programs: that is, evidence about an intrinsic property of code and its behaviour that can be independently checked by any user, intermediary, or third party. These guarantees mean that software certificates raise trust in the code itself, distinct from and complementary to any existing trust in the creator of the code, the process used to produce it, or its distributor. In addition to the contributed talks, the workshop featured two invited talks, by Kelly Hayhurst and Andrew Appel. The PCC 2009 website can be found at http://ti.arc.nasa.gov /event/pcc 091.

Ewen, Denney, W.↗

Development of a bayesian belief network model for the software reliability assessment of nuclear digital I and C safety systems - 206

Since the digital instrumentation and control systems are expected to play an important role for the safety systems in nuclear power plants (NPPs), the need has emerged to not only establish a basis for incorporating software behavior into digital I and C system reliability models, but also to quantify the failure probability of the software used in NPP digital protection systems. In this study, a Bayesian belief network (BBN) model is developed to quantitatively assess software reliability by estimating the number of faults in a software program considering its software development life cycle (SDLC). The model structure and parameters are established based on the information applicable to NPP safety-related systems and the evidence used to construct and quantify the BBN model was collected from three stages of expert elicitation. The software failure probability is estimated from the number of residual defects in a software program at the end of SDLC phase. As a case study, the BBN model was applied to quantify the software reliability of a typical digital protection software having the size of 50 function points and having the Medium development and validation and verification (V and V) qualities. The developed model can be applied to estimate the failure probability for both developing and deployed safety-related NPP software, and such results can be used to evaluate the quality of the digital I and C systems in addition to estimating potential reactor risk due to software failure. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Design and implementation of a real-time underwater acoustic telemetry system for fish behavior study and environmental sensing

Underwater acoustic telemetry is an important tool for studying the behavior of aquatic animals and assessing the environmental impact of man-made structures such as water power turbines. However, current design of the acoustic telemetry system lacks the ability to transmit collected data continuously in real-time and requires manual retrieval of the recorded measurements, leading to a long delay of data retrieval, high operational cost associated with manpower as well as safety risk for the operators. In addition, there is no efficient way to monitor the status of the acoustic telemetry system, including acoustic transmitters and receivers. For example, if multiple receivers in an array fail, the detection efficiency could be significantly reduced. Herein, we developed a cloud-based, real-time underwater acoustic telemetry system that can be used to estimate behavior or survival of tagged aquatic animals and monitor environmental parameters in near-real-time (< 2 hours). The system incorporates microcontrollers and integrated circuits to create real-time data communication and processing units with a cloud-based service that processes the transmitted data stream to derive behavior and survival information of the tagged animals.

Yang, Yang↗

Integrated Solutions for Interim Used Fuel Management: From Pool Unloading to Safe Delivery to Recycling or Repository Facilities - 17235

Safe management of used nuclear fuel (UNF) is key to the survival of the nuclear industry. That is why it is more important than ever to have a consent-based, practical, credible, and sustainable roadmap for managing the back-end of the nuclear cycle. Worldwide UNF Light Water Reactors (LWR) inventories are currently around 200,000 tons and are estimated to grow to more than 350,000 tons by 2030, and operating nuclear reactors in the U.S. continue to discharge UNF every 18 to 24 months. International experience has demonstrated that the development of a permanent geological repository can be a multi-decade process, especially in the face of public acceptance challenges. Meanwhile, the solution for permanent disposal of UNF in the U.S. is moving at a glacial pace. As a result, industrial stakeholders have been forced to find practical interim UNF storage solutions in order to continue safely operating their reactors. Among those interim solutions are the cask- or canister-based dry storage systems that have dramatically increased in the last 10 years as they provide flexibility for expansion with a low up-front investment. With interim dry storage in place for more than 30 years, our industry is entering a new phase as we are forced to prepare for a few more decades before geological repositories begin operating. Consequently, interim dry storage has to be extended for 80 years or more. Thus, new considerations have to be taken into account to ensure the safety of this stored used fuel: - Interim storage systems are aging; - High burn-up fuel behavior overtime is uncertain; - Used fuel is losing its self-protection; - The number of shutdown sites without a fuel transfer facility, such as a pool, is increasing; - Some owners of Independent Spent Fuel Storage installation (ISFSI) at shutdown sites are not nuclear operators anymore. With increasing uncertainties, AREVA TN -- based on its long expertise with used fuel transportation and interim storage systems -- is adapting its portfolio to develop integrated and flexible solutions that will remove the burden of interim used fuel management from nuclear operators. AREVA TN is developing comprehensive solutions to reduce risks including the continued supply of proven safe high-performance dry storage systems; on-site services to safely transfer used fuel from pool to pad; the optimization of fuel heat load in the storage pool and pad; innovative aging management services including inspection, monitoring and repair; a realistic solution for consolidated interim storage with a priority to remove Used Nuclear Fuel stored in dry storage systems from shutdown sites; world-class transport and logistics services to safely move the used fuel from nuclear reactor sites to consolidated storage and repository or recycling as applicable, and turnkey management of shutdown ISFSIs. Due to the lack of an available path for transporting used fuel away from reactors, nuclear operators are faced with many challenges and growing uncertainties. Our presentation will describe the practical solutions developed and being developed in order to manage used fuel on behalf of nuclear operators and allows them to continue focusing on the important job of producing carbon-free clean energy. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Composite Overwrapped Pressure Vessel (COPV) Damage Tolerance Life Analysis Methodology and Test Best Practices

The NASA Engineering and Safety Center (NESC) Deputy Director requested an independent assessment to develop data to understand the limitations of linear elastic fracture mechanics (LEFM) computational methods used to predict fatigue crack growth rate (da/dN) behavior of small detectable cracks in thin metal liners for composite overwrapped pressure vessels (COPVs). The NESC assessment team was also requested to demonstrate a test-based methodology for validating damage tolerance requirements for COPVs with elastically responding metal liners where LEFM methods are not appropriate. This report contains the outcome of the NESC assessment.

Composite Overwrapped Pressure Vessels; Linear Ela↗

Using Game Theoretic Models to Predict Pilot Behavior in NextGen Merging and Landing Scenario

In this paper, we present an implementation of the Semi Network-Form Game framework to predict pilot behavior in a merging and landing scenario. In this scenario, two aircraft are approaching to a freeze horizon with approximately equal distance when they become aware of each other via an ADS-B communication link that will be available in NextGen airspace. Both pilots want to gain advantage over the other by entering the freeze horizon earlier and obtain the first place in landing. They re-adjust their speed accordingly. However, they cannot simply increase their speed to the maximum allowable values since they are concerned with safety, separation distance, effort, possibility of being vectored-off from landing and possibility of violating speed constraints. We present how to model these concerns and the rest of the system using semi network-from game framework. Using this framework, based on certain assumptions on pilot utility functions and on system configuration, we provide estimates of pilot behavior and overall system evolution in time. We also discuss the possible employment of this modeling tool for airspace design optimization. To support this discussion, we provide a case where we investigate the effect of increasing the merging point speed limit on the commanded speed distribution and on the percentage of vectored aircraft.

Yildiz, Yildiray↗

Composite Overwrapped Pressure Vessel (COPV) Damage Tolerance Life Analysis Methodology and Test Best Practices: Appendices

The NASA Engineering and Safety Center (NESC) Deputy Director requested an independent assessment to develop data to understand the limitations of linear elastic fracture mechanics (LEFM) computational methods used to predict fatigue crack growth rate (da/dN) behavior of small detectable cracks in thin metal liners for composite overwrapped pressure vessels (COPVs). The NESC assessment team was also requested to demonstrate a test-based methodology for validating damage tolerance requirements for COPVs with elastically responding metal liners where LEFM methods are not appropriate. This document contains the appendices to the main report.

Composite Overwrapped Pressure Vessels; Linear Ela↗

Nondestructive Evaluation of Concrete: Elastic Property Imaging Through Full-Waveform Inversion

Concrete is a vital material in construction—especially in the nuclear industry, where it is used in critical structures such as containment vessels. Over time, concrete can degrade due to harsh operational and environmental conditions, necessitating that its elastic properties be accurately evaluated to ensure structural integrity and safety. Traditional nondestructive evaluation methods such as ultrasound-based techniques often rely on simplifying assumptions that may not hold true for concrete. This paper presents an advanced ultrasound-based method that uses elastic full-waveform inversion (EFWI) to create detailed images of concrete’s mechanical properties. By accurately modeling wave behaviors such as scattering and reflection, we aim to overcome the limitations of conventional ultrasonic-based methods. In this work, the imaging problem involved reconstructing the various elastic properties of a heterogenous concrete block with three steel rebars embedded in it. The ultrasonic measurements were synthetically generated from multiple sources and receivers, and the reconstruction process was performed using a gradient-based optimization algorithm. Our approach leveraged EFWI to reconstruct high-resolution images of the pressure wave speed, shear wave speed, and density. Multiple misfit functions—including L2-norm, cross-correlation (CC), and L1-norm—combined with total variation (TV) regularization and parameter constraints using a Sigmoid function—were explored for the reconstruction. The results demonstrated that using the L1-norm misfit function in conjunction with TV regularization and Sigmoid constraints significantly improved the reconstruction quality in comparison to traditional methods. This approach provided clearer images with fewer artifacts and better captured background heterogeneity. Our findings highlight that, when properly designed, EFWI carries great potential for providing comprehensive, more accurate, and more reliable assessments of concrete conditions, as is crucial for the maintenance and safety of nuclear power plant structures.

97 - MATHEMATICS AND COMPUTING↗

Corrosion behavior of Monofrax K-3 refractory in borosilicate-based model low activity waste glass melts

Owing to its good chemical and thermal durabilities at high temperatures, Monofrax K-3 refractory is widely used in nuclear waste vitrification as a lining material in melting vessels. However, the corrosion of K-3 refractory during the vitrification of nuclear waste is a serious problem because it affects the melter's safety, performance, and lifetime. Therefore, in the present study, we have focused on unearthing the impact of glass network formers, such as SiO 2 , B 2 O 3 , and Al 2 O 3 , in a model nuclear waste glass composition on the corrosion of Monofrax K-3 refractory. The corrosion tests have been performed per ASTM C621 at 1150°C for 5 days. The dimensional measurements on corroded K-3 refractory suggest that Al 2 O 3 and SiO 2 tend to reduce the refractory corrosion (neck loss), with the effect of Al 2 O 3 being significant. A corroded region on the K-3 refractory at the melt–refractory interface is observed. The corrosion occurs via a coupling of the melt infiltration induced by a capillary effect and the dissolution of Al, Mg, and Fe components from K-3 into the melt through chemical reactions. A Cr-rich layer is retained on the glass contact surface of the corroded K-3 refractory.

36 MATERIALS SCIENCE↗