Search NASA⌕ Search

SEARCH · Search NASA

Results for “Behavior based safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

A Chemistry Based Criticality Safety Evaluation of the HM-Process Mixer Settlers

The criticality safety of Savannah River Site's H Canyon two cycle uranium extraction and purification process, called the HM process, is examined. Explicit Monte Carlo models of the multi-stage mixer-settlers are generated for the first time using the KENO-VI module of the SCALE 6.1 code package and spanning normal operating conditions and a wide range of potential upset conditions with stagewise compositions based directly on SEPHIS Mod-4 chemistry models of the same conditions. To achieve industrial scale processing, mixer-settlers are often not geometrically favorable to prevent criticality so other means must be used for criticality safety, namely control of fissile concentration and mass. Historically, the worst case upset is a reflux condition resulting from a stream flow rate, temperature, or composition that is off from the normal operating conditions. A reflux is considered to be the state in which the fissile material is not proceeding in the desired direction, i.e. is stripping rather than extracting or vice versa. The criticality safety analyses which set the current operational limits were conducted many years ago with less sophisticated codes and only loosely tied criticality to chemistry. Those analyses conservatively assumed that a reflux changed the behavior of the mixer-settler such that the fissile content collected continuously in only three stages of the mixer-settler, at a rate based on the SEPHIS modeling, until criticality occurred. This implies that under some condition the distribution coefficient of the fissile material either goes to infinity or zero, which is not physically achievable. In such a scenario, the operator would have some amount of time to react and correct the problem before sufficient fissile material built up in the mixer-settler and caused a criticality. In reality, an upset in a stream would cause the process to transition to a new, though undesired, equilibrium state of operation. The distribution coefficients would change, but would not diverge. In this work, aqueous and organic streams are modeled for both the mixer and the settler region of each stage of each bank using chemical distribution data from SEPHIS and solving the chemical equations for a wide range of operational parameters spanning normal and upset conditions. Conservative assumptions are made regarding enrichment and reflection and the whole bank multiplication factor is evaluated using discrete stage-wise compositions. (authors)

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Implementation of ANL’s Mechanics Based Evolutionary Fatigue Modeling Through ABAQUS-WARP3D Based High-Performance Computing Framework

This report presents an update on the environmental fatigue research that is being conducted at Argonne National Laboratory in support of the Department of Energy’s Light Water Reactor Sustainability (LWRS) program. Argonne is developing a fully mechanistic fatigue evaluation approach without using empirical fatigue (S~N) curves. This approach is based on the fundamental concept of the time evolution of progressive fatigue damage rather than on the conventional S~N curve approaches using end-of-life data. In FY 2017, we performed extensive validation of this approach with respect to fatigue test data for 316 stainless steel [1]. This validation was performed for different loading cases, including constant, variable, and random amplitude. In the present FY 2018 semi-annual report, we present the further advances of Argonne’s environmental fatigue research work in the context for more practical applications. In this report, we discuss a methodology for fully mechanistic (i.e., not using S~N curves) fatigue life evaluation of reactor components subjected to realistic loading cycles, namely, design-basis loading cycles. The loading cycles include plant heat-up, full-power, and cool-down operations. As a test case, we considered a typical pressurized water reactor surge line, which is made of 316 SS. To perform the fatigue simulation for thousands of fatigue cycles in a computationally cost effective way, we modified our previous desktop-based finite element (FE) modeling approach to work in a high-performance computing (HPC) framework. For the HPC implementation, we developed a hybrid framework based on commercial FE software (ABAQUS), open-source FE software (WARP3D), and Argonne-developed evolutionary cyclic-plasticity modeling methods. We validated this HPC-based cycle-by-cycle damage model for the entire fatigue life of a Pressurized Water Reactor (PWR) surge line (SL) pipe with respect to assumed loading cycles. The simulated fatigue life was found to be 5855 cycles, which is 85% accurate as compared to the corresponding small-specimen-based experimental fatigue life (6914 cycles). Also, the simulated stress history captures the cyclic hardening and softening behavior of the material for entire fatigue cycles. The FE simulation of the PWR SL pipe was conducted in a reasonable time of 12.5 days. These results show the promise that a fully mechanistic (not using S~N curves) fatigue life evaluation of a safety-critical nuclear reactor component (or even other safety critical components like those in aircraft, aero-engines, etc.) is possible. We anticipate that this type of methodology will drastically reduce the uncertainly associated with conventional fatigue life estimates based on empirical S~N curves. We also proposed an FE model that is based on a hybrid full-component and single-element approach and that can readily be used by industry if HPC resources are not available. In this approach, a single-cycle FE simulation has to be performed first for the required loading cycle. Then, the resulting strain/stress profile at the hotspot (highest strain/stress location) is used as input strain/stress loading to the single-element FE model. The single-element FE model is run under multiple fatigue cycles as long as the failure criteria are achieved. The cycle number at failure gives the fatigue life of the component in question. This cost-effective framework does not require expensive HPC hardware and can be performed in a reasonable time by using a desktop computer. We demonstrated this approach with respect to PWR SL fatigue evaluation under two realistic design-basis loading cycles (simple and detailed). The associated results were validated with respect to test data obtained through fatigue testing of uniaxial specimens under the in-air condition at 300 °C. The approach is in the development stage and requires further improvement and validation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Multi-Physics Coupled Seismic Safety Analysis of Molten-Salt Reactors

Pool-type Molten Salt Reactors (MSRs) are a promising advanced nuclear reactor concept relying on passive physical behavior to provide increased safety characteristics. The high heat capacity, high boiling point, unpressurized liquid salt contains the nuclear fuel and as it passes through the vessel achieves criticality and produces nuclear power. The salt then carries away the heat produced along with the delayed neutron precursors towards heat exchangers and primary pumps before entering the core. This forms a highly coupled multiphysics problem between neutronics and fluid flow, which makes modeling these reactors challenging. The safety/licensing case heavily relies on modeling and simulation to prove their safety, and significant effort has been expanded by the Nuclear Energy Advanced Modeling and Simulation (NEAMS) program to develop the appropriate simulation tools. Their safety/licensing will require a thorough analysis of their behavior during earthquake-based transients. Earthquakes are a transient condition commonly experienced in many regions, and are safely survived by dozens of reactors every year. Nonetheless, significant conservatisms were introduced with limited predictive modeling and simulation available. The first-of-a-kind capability developed by this research will allow for engineers to analyze ranges of design-basis and beyond-design basis accident scenarios to assess the integrity of the reactor vessel and surrounding system, possibly allowing for limiting the costly conservatisms in the design. This projects uses MASTODON, Griffin, and Pronghorn in the NEAMS ecosystem to model the coupled multiphysics problem posed by an earthquake in a molten salt reactor. It marches through a number of number of coupling schemes, from uncoupled simulations to tightly two-way coupled simulations. The appropriate level of coupling for these simulations will then be determined based on the accuracy in the quantities of interest (QoI) and computational effort involved in each scheme. The QoIs chosen for this paper include the mass flow rate across the heat exchanger (for Pronghorn simulations), power output of the reactor (for Griffin simulations), and the maximum Von Mises stress (for MASTODON simulations). This summary paper reports on the current progress of this project, with 2D tightly coupled multiphysics results.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Compliant Robotic Behaviors for Satellite Servicing

The demands of traditional industrial robotics differ significantly from those of space robotics. While industry requires robots that can perform repetitive tasks with precision and speed, the space environment needs robots to cope with uncertainties, dynamics, and communication delays or interruptions, similar to human astronauts. These demands make a well-suited application for compliant robotics and behavior-based programming. Pose Target Wrench Limiting (PTWL) is a compliant behavior paradigm developed specifically to meet these demands. PTWL controls a robot by moving a virtual attractor to a target pose. The attractor applies virtual forces, based on stiffness and damping presets, to an underlying admittance controller. Guided by virtual forces, the robot will follow the attractor until safety conditions are violated or success criteria are met. We tested PTWL on a variety of quasi-static tasks that may be useful for future space operations. Our results demonstrate that PTWL is an extremely powerful tool. It makes teleoperation easy and safe for a wide range of quasi-static tasks. It also facilitates the creation of semi-autonomous state machines that can reliably complete complex tasks with minimal human intervention.

Compliance↗

Computer Codes V and V Tests with a Large-Scale Sodium Thermal-Hydraulic Test Facility (STELLA)

The Korea Atomic Energy Research Institute (KAERI) is carrying out the design of a 'Prototype Generation IV Sodium-cooled Fast Reactor (PGSFR)' in cooperation with Argonne National Laboratory (ANL) in the US. In regard to computer codes V and V, a large-scale sodium thermal-hydraulic test program is currently being progressed in parallel with the PGSFR design, which is called STELLA (Sodium Test Loop for Safety Simulation and Assessment). The final objective of this program is to collect a separate and integral effect test database to validate the safety analysis codes and other thermal hydraulic design codes. In the first phase of the STELLA program, the sodium component test loop (hereafter called STELLA-1) was constructed at the KAERI site, and it has been used for performance tests of key sodium heat exchangers in PGSFR. Since this sodium test loop is basically for separate effects tests to verify the performance of key sodium components, the test database obtained from STELLA-1 has been used for the V and V of safety codes as well as heat exchanger design codes. The second phase of the program aiming at an integral effect test is called STELLA-2, which will be used for synthetic review of the key safety issues of PGSFR. The basic and detailed design phases of the STELLA-2 test facility are underway in accordance with the specific design requirements reflecting the whole design features of PGSFR. The facility installation is scheduled to be completed by 2018. Then the main experiments including the start-up tests will begin and the first integral effect test database will be constructed by the end of 2019. Based on the STELLA-2 platform, a simulation of the PGSFR transient will be made to evaluate the plant dynamic behaviors and demonstrate the decay heat removal performance. Multi-dimensional effects coming from a large sodium pool system will be identified as well. The test database obtained from the STELLA-2 experiment will be used for the validation of the safety analysis codes and other thermal hydraulics codes, and this project finally contributes to the specific design phase of PGSFR. This paper presents both the results of heat transfer tests for the key sodium heat exchangers using STELLA-1 and the first results of heat exchanger design codes V and V. The recent progress of the engineering design for the STELLA-2 test section is introduced and its specific design parameters are also presented in this paper with detailed evaluation results of their scaling distortions. A large-scale sodium thermal-hydraulic test program (STELLA) was introduced with the specific activities for separate and integral effects tests. The test database obtained from STELLA-1 was successfully used to validate both the heat exchanger design and safety analysis codes. Specific design features of the integral effects test facility (STELLA- 2) with a scaling ratio of 1/5 in length and 1/125 in volume were also presented. Validation of the STELLA-2 facility design is underway using system codes and CFD tools. Dedicated water-mockup experiments to verify the scaling design of key subsystems are currently being conducted as well. (authors)

42 ENGINEERING↗

PE99155 Point-Of-Load Buck Regulator Total Ionizing Dose Test Report

Teledyne’s PE99155 point-of-load buck regulator was tested to evaluate an applicationspecific question about the start-up behavior of the device. This test determined if accumulated total ionizing dose (TID) affected any start-up voltage transient characteristics. Testing was based on pass/fail criterial for the magnitude of the output voltage to ensure the safety of downstream electronics. Two sets of radiation tests were performed. The first group of PE99155s used a high dose rate (HDR) irradiation to 25 krad(Si). A second group of PE99155s used high dose rate irradiation to 30 krad(Si).

TID↗

AirSTAR Hardware and Software Design for Beyond Visual Range Flight Research

The National Aeronautics and Space Administration (NASA) Airborne Subscale Transport Aircraft Research (AirSTAR) Unmanned Aerial System (UAS) is a facility developed to study the flight dynamics of vehicles in emergency conditions, in support of aviation safety research. The system was upgraded to have its operational range significantly expanded, going beyond the line of sight of a ground-based pilot. A redesign of the airborne flight hardware was undertaken, as well as significant changes to the software base, in order to provide appropriate autonomous behavior in response to a number of potential failures and hazards. Ground hardware and system monitors were also upgraded to include redundant communication links, including ADS-B based position displays and an independent flight termination system. The design included both custom and commercially available avionics, combined to allow flexibility in flight experiment design while still benefiting from tested configurations in reversionary flight modes. A similar hierarchy was employed in the software architecture, to allow research codes to be tested, with a fallback to more thoroughly validated flight controls. As a remotely piloted facility, ground systems were also developed to ensure the flight modes and system state were communicated to ground operations personnel in real-time. Presented in this paper is a general overview of the concept of operations for beyond visual range flight, and a detailed review of the airborne hardware and software design. This discussion is held in the context of the safety and procedural requirements that drove many of the design decisions for the AirSTAR UAS Beyond Visual Range capability.

Laughter, Sean↗

Towards Resilient Autonomous Navigation of Drones

Robots and particularly drones are especially useful in exploring extreme environments that pose hazards to humans. To ensure safe operations in these situations, usually perceptually degraded and without good GNSS, it is critical to have a reliable and robust state estimation solution. The main body of literature in robot state estimation focuses on developing complex algorithms favoring accuracy. Typically, these approaches rely on a strong underlying assumption: the main estimation engine will not fail during operation. In contrast, we propose an architecture that pursues robustness in state estimation by considering redundancy and heterogeneity in both sensing and estimation algorithms. The architecture is designed to expect and detect failures and adapt the behavior of the system to ensure safety. To this end, we present HeRO (Heterogeneous Redundant Odometry): a stack of estimation algorithms running in parallel supervised by a resiliency logic. This logic carries out three main functions: a) perform confidence tests both in data quality and algorithm health; b) re-initialize those algorithms that might be malfunctioning; c) generate a smooth state estimate by multiplexing the inputs based on their quality. The state and quality estimates are used by the guidance and control modules to adapt the mobility behaviors of the system. The validation and utility of the approach are shown with real experiments on a ying robot for the use case of autonomous exploration of subterranean environments, with particular results from the STIX event of the DARPA Subterranean Challenge.

Agha-mohammadi, Ali-akbar↗

Multi-State Physics Models of Aging Passive Components in Probabilistic Risk Assessment

Multi-state Markov modeling has proved to be a promising approach to estimating the reliability of passive components - particularly metallic pipe components - in the context of probabilistic risk assessment (PRA). These models consider the progressive degradation of a component through a series of observable discrete states, such as detectable flaw, leak and rupture. Service data then generally provides the basis for estimating the state transition rates. Research in materials science is producing a growing understanding of the physical phenomena that govern the aging degradation of passive pipe components. As a result, there is an emerging opportunity to incorporate these insights into PRA. This paper describes research conducted under the Risk-Informed Safety Margin Characterization Pathway of the Department of Energy’s Light Water Reactor Sustainability Program. A state transition model is described that addresses aging behavior associated with stress corrosion cracking in ASME Class 1 dissimilar metal welds – a component type relevant to LOCA analysis. The state transition rate estimates are based on physics models of weld degradation rather than service data. The resultant model is found to be non-Markov in that the transition rates are time-inhomogeneous and stochastic. Numerical solutions to the model provide insight into the effect of aging on component reliability.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Debris Dispersion Model Using Java 3D

This paper describes web based simulation of Shuttle launch operations and debris dispersion. Java 3D graphics provides geometric and visual content with suitable mathematical model and behaviors of Shuttle launch. Because the model is so heterogeneous and interrelated with various factors, 3D graphics combined with physical models provides mechanisms to understand the complexity of launch and range operations. The main focus in the modeling and simulation covers orbital dynamics and range safety. Range safety areas include destruct limit lines, telemetry and tracking and population risk near range. If there is an explosion of Shuttle during launch, debris dispersion is explained. The shuttle launch and range operations in this paper are discussed based on the operations from Kennedy Space Center, Florida, USA.

Thirumalainambi, Rajkumar↗

Andra's Underground Research Laboratory as a Tool to Prepare Monitoring System of Cigeo Project - 18070

Andra, as French radioactive waste management agency, plans to build an underground disposal facility, named Cigeo, dedicated to high and intermediate level, long lived radioactive wastes. To ensure the safety during the disposal operations that includes the principle of reversibility, the design of the associated monitoring system will be based on specific research and development program and feedback obtained over more than 15 years on tests performed in representative conditions. Andra's Underground Research Laboratory (URL), located at 500 m deep, is excavated in a clay-rich formation. It is dedicated to (i) assess the thermo-hydro-mechanical, chemical and radiologic behaviors of the rock and supporting layers (concrete and steel), (ii) test envisaged monitoring system, (iii) provide feedback on operational organization and safety management and (iv) qualify operating methods (digging, concrete pouring, monitoring system design, etc.) to be implemented in the future disposal. Data collected from (i) characteristics of samples retrieved from boreholes, (ii) experts' observations, (iii) sensors installed in situ and (iv) manual measurements, are integrated in a database. This database is dedicated to samples management (more than 73 600 classified samples), data measurements collection, and conversion to physical values and available to plots or exports. Each day, approximately 1.6 million of values are integrated in the database. Finally, a geo-referenced database is linked to the main database in order to allow the spatial localization, both on the surface or in the underground galleries. All these tools give confidence in Andra's capacity to monitor Cigeo and be ready for the future industrial pilot phase. The monitoring system will also allow, step by step, optimizing the disposal design, performing regular safety control, helping in decision making for reversibility and improving long term safety. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Continuous plating/stripping behavior of solid-state lithium metal anode in a 3D ion-conductive framework

Significance Solid-state lithium metal anode possesses great promise owing to its high energy density and improved safety. This work introduces a strategy for constructing a 3D Li metal anode, which is hosted in a solid-state ion-conducting host and shows a safe and dendrite-free plating/stripping behavior. The host is based on a garnet-type ion-conductive framework and a bottom-deposited Cu current collector. The Li anode is plated within the solid garnet framework from the bottom Cu layer and shows a dendrite-free deposition behavior, effectively averting the dendrite penetration issue. Owing to the 3D ion-conductive host, the volume change and interface contact problem of the Li anode have been significantly mitigated, realizing a high-capacity and safe Li metal anode for solid-state high-energy-density batteries.

25 ENERGY STORAGE↗

A Theoretical Analysis on the Dynamic Behavior and Electromechanical Response of PZT

Piezoelectric materials are used as a power source in stockpile components for safety and reliability assurances. The objective of this project is to gain insights into the fundamental pressure-induced behavior and electromechanical response of lead zirconate titanate (PZT). Specifically, to establish the basis for an accurate, physics-based material model for robust model-based design to rapidly optimize PZT-based materials and components for performance studies. Established ab-initio methods are used to interrogate and understand the dynamic behavior of PZT as a function of composition (50/50, 65/35, 80/20, 95/5) and dopants (La, Nb) to overcome the costly and time-consuming experimental methodologies. New cold curves for pure and doped single-crystal PZT are obtained as the reference equation-of-state (EOS). A negligible change in the pressure responses was observed for the systems and strains studied. Dielectric and piezoelectric responses of pure and doped single-crystal PZT were also calculated as a function of pressure. For undoped PZT, there is a clear and orderly pressure and composition dependence. For doped PZT, there is a significant increase in the responses, but the behavior is very disordered and inconclusive.

36 MATERIALS SCIENCE↗

Assessment of Cladding-Cladding Delamination Failures in U-Mo Fuel Plates

Monolithic fuel is a candidate fuel form for the conversion of high-performance research reactors. This plate-type fuel consists of a high-density, U-Mo alloy-based fuel in a monolithic form that is sandwiched between zirconium diffusion barriers and encapsulated in an aluminum cladding. To qualify this fuel system, the program must demonstrate that the fuel meets the safety standards, has a predictable behavior, and performs well in a reactor. Although many plates have shown satisfactory thermo-mechanical performance in reactor, a small number of experimental plates exhibited failures, rendering performance of these plates unacceptable. Post-irradiation examinations of failed plates have revealed that various failures modes are present, including pillowing, blistering, buckling, warping, delamination, fracture, rupture, oxide spallation, etc. Previous studies have implied that such various operational and loading conditions could generate a complex stress-strain state, facilitating distinct failure modes that could impact the structural integrity. To understand such various failure modes, a comprehensive set of studies focusing on failure modes is being performed. As a part of these studies, this work studies the cladding-cladding separation failures that were observed in some of previous irradiation tests. To understand the root cause of cladding separation failures, selected plates from previous irradiation experiments were simulated under comparable operational conditions. Stress-strain state of the plates at the interface were examined. The results were comparatively evaluated to understand possible effects of stress state of the bond-line on delamination failures. This paper presents these findings, discusses such failure modes, and examines the influence of various factors on previously observed cladding delamination failures.

42 ENGINEERING↗

Computer security approach for Rolls-Royce spinline{sup R} safety platform - 227

The number of digital assets at commercial nuclear power plants is significant and will likely continue to increase with time. As a consequence, these plants have become potential targets for cyber-attacks. Around the world, nuclear safety authorities and national Computer and Information Security Agencies are implementing stricter regulations and inspections for critical systems in nuclear plants. There is a particular focus on instrumentation and control systems as they implement key nuclear safety functions. Rolls-Royce follows a strict computer and information security program based on general and nuclear specific norms, Rolls-Royce group processes, and proven technologies. The Spinline digital safety platform has been designed specifically for nuclear applications and features a secure development and operational environment that provides barriers against unauthorized modifications and implements design requirements promoting integrity and reliability during operation and maintenance. The Rolls-Royce secure development environment provides layers of protection utilizing physical and environmental security, human resource security, and information technology systems access control. The Spinline platform strengthens security functions by providing protection against unauthorized, unintended, and unsafe modifications to the system. The Spinline platform has design features promote integrity and reliability during operation and maintenance in the event of inadvertent operator actions or undesirable behavior of connected equipment. The Spinline technology and these computer security processes are based in a wide spectrum of international standards that were accepted as providing a secure development and operating environment by the United States Nuclear Regulatory Commission in 2014. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Evaporative thermal resistance and its influence on microlayer evaporation

The ability to predict various aspects of boiling is important for both safety and design of water-cooled reactors. Component-scale modelling is necessarily done by semi-mechanistic, semi-empirical approaches, generally based on heat flux partitioning. This needs to be informed by multiple detailed experimental observations of boiling behavior. Such measurements are difficult to make, and much effort is being applied to microscopic computational modelling of the detailed boiling process. Aims of such activities include the mechanistic prediction of growth and detachment of one bubble during nucleate boiling, and the quantification of the associated heat transfer partitioning (evaporation, micro-convection, quenching). We here study a subset of the full problem, and focus on the thermal response of the boiling substrate to the early growth of a single vapour bubble during pool boiling of water at atmospheric pressure. In such conditions, a thin liquid film ('microlayer') is left behind beneath the bubble as this expands. The microlayer evaporates due to the temperature difference between the solid-liquid and vapour-liquid interface. Its thickness being small, of order of microns, the local evaporation rate per unit area of bubble base can be high, up to one kilogram per second. Microlayer evaporation can therefore be important in early stages of bubble growth. In this contribution, thermal response of the boiling substrate to microlayer evaporation is studied with a two-dimensional, axisymmetric transient conduction model, coupled with an algebraic sub-model of the liquid film. The flow of heat through the microlayer is modelled as conduction in the liquid and with a pseudo-convective 'evaporative' heat transfer coefficient at the liquid-vapor interface, accounting for the interface superheat driving the evaporation process. Thermal coupling (conjugate heat transfer) between microlayer and solid substrate is obtained with a time dependent non-homogeneous Neumann boundary condition, derived from the algebraic microlayer sub-model and applied at the top surface of the solid computational domain. The thermal resistance associated to the evaporative heat transfer mechanism is shown to depend on a highly uncertain parameter, termed an 'evaporation coefficient'. After some exploratory calculations of the likely importance of the evaporative resistance in the present context, the model is employed to interpret some recent microlayer measurements. Satisfactory agreement between computed and measured evolution of the microlayer profile is obtained if small values (between 0.01 and 0.10) of the evaporation coefficient are used. The order of magnitude of the predicted evaporation rate from the microlayer is consistent with experimental observations. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Analysis of, and defense against, spurious actuations and other incorrect behaviors of digital control systems - 390

Modern digital instrumentation and control (I and C) systems offer nearly unlimited functional capability. However, the complexity of their design (including their system software and application software) is significantly higher than that of conventional, hardwired systems, to the point that it is generally impossible to demonstrate that there are no residual design errors, even when the best development and verification techniques have been applied. When activated by specific conditions, design errors could result in systematic failures, i.e., failures that occur deterministically each time and wherever an activating condition is present. Redundancy could be defeated when the same design error affects multiple channels or systems, and the activating condition affects several of these channels or systems. In the case of safety I and C systems, most of the functions are poised protection functions that must be actuated when and only when a demand situation occurs in the plant. In nuclear power plants, the most dangerous failure mode for such functions generally is failure to actuate, and many measures are taken to protect from such failure mode. This paper considers the other failure modes of safety I and C functions, and also the failure modes of the other I and C functions that are less important to safety. It is not limited to poised functions, and considers other types of functions such as regulation functions or human interface functions. It proposes a framework for analyzing and providing defense against spurious actuations and other incorrect behaviors from digital I and C systems directly interacting with the plant process or with operators: these might be useful for example to justify that design bases for reactor protection are adequate, or to ensure plant performance and availability. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Effects of cryogenic temperature and grain size on fatigue-crack propagation in the medium-entropy CrCoNi alloy

CrCoNi-based high-entropy alloys have demonstrated outstanding mechanical properties, particularly at cryogenic temperatures. Here we investigate the fatigue-crack propagation properties of the equiatomic, single-phase, face-centered cubic, medium-entropy alloy (MEA), CrCoNi, that displays exceptional strength, ductility and toughness, all of which are enhanced at cryogenic temperatures. Fatigue-crack growth is examined, at a load ratio of 0.1 over a wide range of growth rates, from ~10 –11 to >10 –7 m/cycle, at room (293 K) and cryogenic (198 K, 77 K) temperatures for two grain sizes (~7 and 68 µm), with emphasis on near-threshold behavior. We find that the ΔK th fatigue thresholds are increased with decreasing temperature and increasing grain size: from 5.7 MPa√m at 293 K to 8 MPa√m at 77 K in the fine-grained alloy, and from 9.4 MPa√m at 293 K to 13.7 MPa√m at 77 K in the coarse-grained alloy. Mechanistically, transgranular cracking at 293 K transitions to a mixture of intergranular and transgranular at cryogenic temperatures, where the increased propensity of nano-twins appears to inhibit growth rates by deflecting the crack path. However, the main factor affecting near-threshold behavior is roughness-induced crack closure from interference between the crack flanks, which is enhanced by the rougher fracture surfaces at low temperatures, particularly in the coarser-grained microstructure. Here, fatigue-crack propagation behavior in CrCoNi is comparable to nickel-based superalloys but is superior to that of the high-entropy CrMnFeCoNi (Cantor) alloy and many high-strength steels, making the CrCoNi alloy an excellent candidate material for safety-critical applications, particularly involving low temperatures.

36 MATERIALS SCIENCE↗