Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Work Practice Simulation of Complex Human-Automation Systems in Safety Critical Situations: The Brahms Generalized berlingen Model

The transition from the current air traffic system to the next generation air traffic system will require the introduction of new automated systems, including transferring some functions from air traffic controllers to on­-board automation. This report describes a new design verification and validation (V&V) methodology for assessing aviation safety. The approach involves a detailed computer simulation of work practices that includes people interacting with flight-critical systems. The research is part of an effort to develop new modeling and verification methodologies that can assess the safety of flight-critical systems, system configurations, and operational concepts. The 2002 Ueberlingen mid-air collision was chosen for analysis and modeling because one of the main causes of the accident was one crew's response to a conflict between the instructions of the air traffic controller and the instructions of TCAS, an automated Traffic Alert and Collision Avoidance System on-board warning system. It thus furnishes an example of the problem of authority versus autonomy. It provides a starting point for exploring authority/autonomy conflict in the larger system of organization, tools, and practices in which the participants' moment-by-moment actions take place. We have developed a general air traffic system model (not a specific simulation of Überlingen events), called the Brahms Generalized Ueberlingen Model (Brahms-GUeM). Brahms is a multi-agent simulation system that models people, tools, facilities/vehicles, and geography to simulate the current air transportation system as a collection of distributed, interactive subsystems (e.g., airports, air-traffic control towers and personnel, aircraft, automated flight systems and air-traffic tools, instruments, crew). Brahms-GUeM can be configured in different ways, called scenarios, such that anomalous events that contributed to the Überlingen accident can be modeled as functioning according to requirements or in an anomalous condition, as occurred during the accident. Brahms-GUeM thus implicitly defines a class of scenarios, which include as an instance what occurred at Überlingen. Brahms-GUeM is a modeling framework enabling "what if" analysis of alternative work system configurations and thus facilitating design of alternative operations concepts. It enables subsequent adaption (reusing simulation components) for modeling and simulating NextGen scenarios. This project demonstrates that BRAHMS provides the capacity to model the complexity of air transportation systems, going beyond idealized and simple flights to include for example the interaction of pilots and ATCOs. The research shows clearly that verification and validation must include the entire work system, on the one hand to check that mechanisms exist to handle failures of communication and alerting subsystems and/or failures of people to notice, comprehend, or communicate problematic (unsafe) situations; but also to understand how people must use their own judgment in relating fallible systems like TCAS to other sources of information and thus to evaluate how the unreliability of automation affects system safety. The simulation shows in particular that distributed agents (people and automated systems) acting without knowledge of each others' actions can create a complex, dynamic system whose interactive behavior is unexpected and is changing too quickly to comprehend and control.

complex systems↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible." To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) opted a development approach that explicitely incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 prelimnary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigative strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sargusingh, Miriam J.↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible".1 To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) chose a development approach that explicitly incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 preliminary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigation strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sarguisingh, Miriam↗

Crossing the Finish Line: Integration of Data-Driven Process Control for Maximization of Energy and Resource Efficiency in Advanced Water Resource Recovery Facilities

Improvements in process monitoring and control at water resource recovery facilities (WRRFs) could result in reductions in electricity consumption, chemical inputs, and greenhouse gas emissions, as well as improved energy recovery. Many current WRRF data collection, monitoring, and control approaches use 20th century process monitoring and control systems, which require large design safety factors to ensure reliability in the absence of more advanced, precise controls. Implementation of more modern data-driven control tools could lead to more efficient operations that provide intrinsic reliability with better overall process performance at full-scale. This presentation provides an overview of a recently initiated project "Crossing the Finish Line: Integration of Data-Driven Process Control for Maximization of Energy and Resource Efficiency in Advanced Water Resource Recovery Facilities" which will (1) develop and demonstrate data-driven process controls at full-scale facilities for five promising WRRF Applications (i.e., process technologies) that provide whole-plant approaches and offer substantial energy and resource recovery benefits, and (2) create a toolbox of new process control approaches and an implementation guide including five examples for application at utilities. The presentation also provides a detailed overview of the research approach and progress being made on one of the five Applications, namely Application 2: Biological Nutrient Removal (BNR): ammonium-based aeration control (ABAC) / ammonia vs. NOx (AvN) + partial denitration with anammox (PdNA), which is being implemented at Hampton Roads Sanitation District. This project is a collaboration of work being conducted by DC Water, Hampton Roads Sanitation District, Metro Water Recovery, University of Michigan, Northwestern University, US Military Academy - West Point, Black & Veatch, and Oak Ridge National Laboratory. Research partner: U.S. Department of Energy.

54 ENVIRONMENTAL SCIENCES↗

SMR Accelerated Development Needs with Adequate Safety

The development of advanced Small Modular Reactors (SMRs) is ongoing. A customer-focused development approach requires accelerated design and analysis of the reactor system while minimizing engineering, regulatory, and economic challenges. SMRs, although not a new concept, are being considered for rapid deployment with optimized economic scalability, and several designs are currently seeking approval. Understanding the research and development needs, with adequate safety support, accelerates reactor development.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Genome-scale metabolic reconstruction of 7,302 human microorganisms for personalized medicine

The human microbiome influences the efficacy and safety of a wide variety of commonly prescribed drugs. Designing precision medicine approaches that incorporate microbial metabolism would require strain- and molecule-resolved, scalable computational modeling. Here, we extend our previous resource of genome-scale metabolic reconstructions of human gut microorganisms with a greatly expanded version. AGORA2 (assembly of gut organisms through reconstruction and analysis, version 2) accounts for 7,302 strains, includes strain-resolved drug degradation and biotransformation capabilities for 98 drugs, and was extensively curated based on comparative genomics and literature searches. The microbial reconstructions performed very well against three independently assembled experimental datasets with an accuracy of 0.72 to 0.84, surpassing other reconstruction resources and predicted known microbial drug transformations with an accuracy of 0.81. We demonstrate that AGORA2 enables personalized, strain-resolved modeling by predicting the drug conversion potential of the gut microbiomes from 616 patients with colorectal cancer and controls, which greatly varied between individuals and correlated with age, sex, body mass index and disease stages. AGORA2 serves as a knowledge base for the human microbiome and paves the way to personalized, predictive analysis of host–microbiome metabolic interactions.

59 BASIC BIOLOGICAL SCIENCES↗

Challenges and needs for system-level electrochemical lithium-ion battery management and diagnostics

The desire for energy-dense and fast-charged battery technology in consumer-electronics, electric-vehicle, grid, and aviation applications is pushing the envelope on materials to cells and pack designs to use and operating conditions. However, some approaches could inherently decrease safety of the battery—thus requiring the development of advanced management and diagnostics. Safety of lithium-ion batteries (LiBs), particularly in multicell configurations, is highly variable and could evolve with use. Existing works primarily focus on cell life and safety diagnostics without considering module and pack-level uncertainties and sometimes imply that cell-level electrochemical diagnostics would work in modules or packs, a naive oversimplification. Using example case studies, we highlight the potential and challenges associated with extending single-cell diagnostics to multiple cells, note the challenge involved, and motivate the research and development and support communities to devote efforts to fill the gap by developing diagnostics at these levels for current- and future-generation LiBs.

25 ENERGY STORAGE↗

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway

Significant efforts are underway to develop and implement a risk-informed performance-based licensing framework for advanced reactors built on the establishment of an affirmative safety case. Such approaches offer the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. These methods include the comprehensive analysis of scenarios that have historically been addressed through conservative and deterministic licensing analysis approaches, such as the evaluation of event sequences at frequencies of occurrence beyond the design basis. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. The current project seeks to further explore the regulatory treatment of low frequency external events as part of a risk-informed performance-based framework. The goals are to identify the benefits and challenges of such approaches for advanced reactor vendors and to aid in the development of consistent and appropriate methodologies. As part of this effort, the current report summarizes initial project findings, with a focus on the evaluation of the seismic hazard. This includes an exploration of the implementation of a risk-informed performance-based approach through an example analysis. Based on the identified challenges associated with the probabilistic treatment of low frequency event sequences, additional performance-based methods were explored as complementary tools for demonstrating regulatory compliance. The report highlights key challenges and opportunities associated with the methods and outlines recommendations and future activities to assist with their implementation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Space transfer vehicle concepts and requirements. Volume 1: Executive summary

The objectives of the Space Transfer Vehicle (STV) Concepts and Requirements studies were to provide sensitivity data on usage, economics, and technology associated with new space transportation systems. The study was structured to utilize data on the emerging launch vehicles, the latest mission scenarios, and Space Exploration Initiative (SEI) payload manifesting and schedules, to define a flexible, high performance, cost effective, evolutionary space transportation system for NASA. Initial activities were to support the MSFC effort in the preparation of inputs to the 90 Day Report to the National Space Council (NSC). With the results of this study establishing a point-of-departure for continuing the STV studies in 1990, additional options and mission architectures were defined. The continuing studies will update and expand the parametrics, assess new cargo and manned ETO vehicles, determine impacts on the redefined Phase 0 Space Station Freedom, and to develop a design that encompasses adequate configuration flexibility to ensure compliance with on-going NASA study recommendations with major system disconnects. In terms of general requirements, the objectives of the STV system and its mission profiles will address crew safety and mission success through a failure-tolerant and forgiving design approach. These objectives were addressed through the following: engine-out capability for all mission phases; built-in-test for vehicle health monitoring to allow testing of all critical functions such as, verification of lunar landing and ascent engines before initiating the landing sequence; critical subsystems will have multiple strings for redundancy plus adequate supplies of onboard spares for removal and replacement of failed items; crew radiation protection; and trajectories that optimize lunar and Mars performance and flyby abort capabilities.

Source record↗

Combining System Safety and Reliability to Ensure NASA CoNNeCT's Success

Hazard Analysis, Failure Modes and Effects Analysis (FMEA), the Limited-Life Items List (LLIL), and the Single Point Failure (SPF) List were applied by System Safety and Reliability engineers on NASA's Communications, Navigation, and Networking reConfigurable Testbed (CoNNeCT) Project. The integrated approach involving cross reviews of these reports by System Safety, Reliability, and Design engineers resulted in the mitigation of all identified hazards. The outcome was that the system met all the safety requirements it was required to meet.

Havenhill, Maria↗

Operation and Development Status of the Spacecraft Fire Experiments (Saffire)

Since 2012, a series of Spacecraft Fire Experiments (Saffire) have been under development by the Spacecraft Fire Safety Demonstration (SFS Demo) project, funded by NASA's Advanced Exploration Systems Division. The overall objective of this project is to reduce the uncertainty and risk associated with the design of spacecraft fire safety systems for NASA's exploration missions. The approach to achieving this goal has been to define, develop, and conduct experiments that address gaps in spacecraft fire safety knowledge and capabilities identified by NASA's Fire Safety System Maturation Team. The Spacecraft Fire Experiments (Saffire-I, -II, and -III) are material flammability tests at length scales that are realistic for a spacecraft fire in low-gravity. The specific objectives of these three experiments are to (1) determine how rapidly a large scale fire grows in low-gravity and (2) investigate the low-g flammability limits compared to those obtained in NASA's normal gravity material flammability screening test. The experiments will be conducted in Orbital ATK's Cygnus vehicle after it has unberthed from the International Space Station. The tests will be fully automated with the data downlinked at the conclusion of the test before the Cygnus vehicle reenters the atmosphere. This paper discusses the status of the Saffire-I, II, and III experiments followed by a review of the fire safety technology gaps that are driving the development of objectives for the next series of experiments, Saffire-IV, V, and VI.

Fire Safety↗

From BERTopic to SysML: Informing Model-Based Failure Analysis With Natural Language Processing for Complex Aerospace Systems

The development of emerging complex aerospace systems will require new approaches for capturing safety incident scenarios as early as possible in the design phase. However, for novel systems, relevant data available is limited. In this work, we propose a framework informing model-based mission assurance activities with historical incident reports, lessons learned, or other relevant engineering documents using natural language processing. In doing so, we investigate whether there is useful information in data sets that are relevant, if not identical, to the system under design and whether, through rigorous systems engineering practice, this information can be effectively leveraged through model-based failure analysis. In a worked case study, we apply state-of-the-art topic modeling techniques to two data sets, a mission relevant data set and a system relevant data set. The sets of topics are merged and interpreted to form a preliminary list of failure topics that can be used to inform the identification of off-nominal modes in the model-based failure modes and effects analysis development. Once data from the system in operation is available, it can be used to update the topics identified. By extracting information about likely failures from relevant historical data sets and utilizing model-based mission assurance to ensure relevance and rigor, unanticipated failures can be reduced, and projects can more effectively learn from past missions.

Failure Analysis↗

From BERTopic to SysML: Informing Model-Based Failure Analysis With Natural Language Processing for Complex Aerospace Systems

The development of emerging complex aerospace systems will require new approaches for capturing safety incident scenarios as early as possible in the design phase. However, for novel systems, relevant data available is limited. In this work, we propose a framework informing model-based mission assurance activities with historical incident reports, lessons learned, or other relevant engineering documents using natural language processing. In doing so, we investigate whether there is useful information in data sets that are relevant, if not identical, to the system under design and whether, through rigorous systems engineering practice, this information can be effectively leveraged through model-based failure analysis. In a worked case study, we apply state-of-the-art topic modeling techniques to two data sets, a mission relevant data set and a system relevant data set. The sets of topics are merged and interpreted to form a preliminary list of failure topics that can be used to inform the identification of off-nominal modes in the model-based failure modes and effects analysis development. Once data from the system in operation is available, it can be used to update the topics identified. By extracting information about likely failures from relevant historical data sets and utilizing model-based mission assurance to ensure relevance and rigor, unanticipated failures can be reduced, and projects can more effectively learn from past missions.

Failure Analysis↗

A Data-Driven Approach to Recognizing and Understanding Human Contributions to Aviation Safety

Data-driven decisions about safety management and design of safety-critical systems are limited by the available data, which influence, and are influenced by, how decision makers characterize problems and identify solutions. In the commercial aviation domain, large volumes of data are collected and analyzed on the failures and errors that result in infrequent incidents and accidents, but in the absence of data on safety-producing behaviors, safety management and system design decisions are based on a small sample of non-representative safety data. Analysis of aviation accident data suggests that human error is implicated in up to 80% of accidents, which has been used to justify future visions for aviation in which the roles of human operators are greatly diminished or eliminated in the interest of creating a safer aviation system. However, failure to fully consider the human contributions to aviation safety represents a significant and largely unrecognized risk when making policy decisions about safety management and system design. Opportunities exist to leverage the vast amount of data that have already been collected, or could be easily obtained, to increase our understanding of human contributions to safety in commercial aviation. This presentation will focus on those opportunities as well as the challenges associated with collecting and analyzing data on operators’ safety-producing behaviors.

Safety↗

An Ontological Approach to Integrate Commercial Space Operations with an In-time Aviation Safety Management System (IASMS)

The emergence of commercial space operations (CSO) is one of many Advanced Air Mobility domains that pose major challenges to in-time safety assurance because of the different architectures used by the operators and other agents. The National Academies recognized the need to improve integration of disparate architectures and recommended that an In-time Aviation Safety Management System(IASMS) be developed to provide seamless connectivity across interacting architectures and enable in-time safety assurance. An ontological approach to integrating CSO with IASMS involves in-time Services, Functions, and Capabilities design to manage operational risks and inform changes to design. The resulting integrated architecture provides a common basis for risk management and in-time safety assurance.

K Ellis↗

MLAS and LAS: Project Comparison of Lessons Learned

The development of new and safer manned space vehicles is a top priority at NASA. Recently two different approaches of how to accomplish this mission of keeping astronauts safe was successfully demonstrated. With work already underway on an Apollo-like launch abort system for the Orion Crew Exploration Vehicle (CEV), an alternative design concept named the Max Launch Abort System, or MLAS, was developed as a parallel effort. The Orion system, managed by the Constellation office, is based on the design of a single solid launch abort motor in a tower positioned above the capsule. The MLAS design takes a different approach placing the solid launch abort motor underneath the capsule. This effort was led by the NASA Engineering and Safety Center (NESC). Both escape systems were designed with the Ares I Rocket as the launch vehicle and had the same primary requirement to safely propel a crew module away from any emergency event either on the launch pad or during accent. Beyond these two parameters, there was little else in common between the two projects, except that they both concluded in successful launches that will further promote the development of crew launch abort systems. This presentation will compare both projects from the standpoint of technical requirements; program management and flight test objectives and highlight the synergistic lessons learned by two engineers who worked on each program.

Dittemore, Gary↗

Comparison of Two Recent Launch Abort Platforms

The development of new and safer manned space vehicles is a top priority at NASA. Recently two different approaches of how to accomplish this mission of keeping astronauts safe was successfully demonstrated. With work already underway on an Apollo-like launch abort system for the Orion Crew Exploration Vehicle (CEV), an alternative design concept named the Max Launch Abort System, or MLAS, was developed as a parallel effort. The Orion system, managed by the Constellation office, is based on the design of a single solid launch abort motor in a tower positioned above the capsule. The MLAS design takes a different approach placing the solid launch abort motor underneath the capsule. This effort was led by the NASA Engineering and Safety Center (NESC). Both escape systems were designed with the Ares I Rocket as the launch vehicle and had the same primary requirement to safely propel a crew module away from any emergency event either on the launch pad or during accent. Beyond these two parameters, there was little else in common between the two projects, except that they both concluded in successful launches that will further promote the development of crew launch abort systems. A comparison of these projects from the standpoint of technical requirements; program management and flight test objectives will be done to highlight the synergistic lessons learned by two engineers who worked on each program. This comparison will demonstrate how the scope of the project architecture and management involvement in innovation should be tailored to meet the specific needs of the system under development.

Dittemore, Gary D.↗

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway: Safety Criteria Evaluation

There has been recent progress in the development of risk-informed performance-based (RIPB) design and licensing approaches, which leverage the insights gained from detailed risk assessments and utilize performance-based metrics to permit flexibility and innovation. The RIPB approaches have included the probabilistic treatment of external hazards, including low frequency events that are beyond the design basis. A preceding study conducted in FY21 noted that there are certain challenges to the probabilistic treatment of low frequency external events, which are primarily the result of uncertainty in the hazard curve and the associated plant response to rare, severe events. The current work expands on the previous study by examining the regulatory safety criteria contained within draft 10 CFR Part 53 and associated draft RIPB seismic design guidance. The evaluation identified potential challenges in demonstrating satisfaction of the safety criteria for low frequency external events, with specific difficulties associated with demonstrating compliance with cumulative safety criteria metrics, such as the quantitative health objectives (QHOs). Non-LWRs are expected to utilize the direct calculation of offsite consequence, rather than use surrogates, for comparison to the QHOs, which can be particularly challenging as the previously identified uncertainties are compounded by uncertainties in the response of the neighboring population. The current work details this evaluation and key findings. The central recommendation from this effort is that it is necessary to develop an approach for demonstrating compliance with the safety criteria in draft Part 53 that addresses the key challenges while providing flexibility to applicants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗