Search NASA⌕ Search

SEARCH · Search NASA

Results for “Control systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

A Typing Discipline for High-Assurance Control Systems

This poster describes a typing discipline for high-assurance industrial systems based on three novel type systems. The first type system, information flow control (IFC), controls the flow of data through the system. The second system, dependent session types, restricts messages exchanged during the execution of a communication protocol to avoid dangerous states. The third system uses dimensional analysis to avoid subtle bugs that adversaries can exploit to cause the system to enter a dangerous state. This poster describes how a combination of these approaches can prevent sophisticated cyber attacks, such as the infamous Stuxnet incident, from occurring. In addition, we provide experimental evidence to support the claim that these approaches can be applied in control systems that are resource-constrained.

42 - ENGINEERING↗
DOE OSTI2019

Development of a Fleet-Level Human Factors Engineering Program to Support the Digital Modernization of Multiple Turbine Control Systems

A number of years ago, Duke Energy and the United States (U.S.) Department of Energy (DOE) entered into a collaboration to support Duke’s digital upgrade activities for the main control rooms at three of their commercial nuclear power stations. The collaboration specifically focused on the human factors engineering (HFE) aspects of Duke’s plans to upgrade the legacy turbine control systems (TCS) at their Brunswick, Robinson, and Harris plants. This TSC upgrade involved installing a common digital control system (DCS), or distributed instrumentation and control (I&C) system platform, which multiple digital plant control systems can be integrated onto as the control rooms are modernized over time. Given the breadth and depth of the scope of this upgrade, DOE researchers at Idaho National Laboratory (INL) with expertise in human factors collaborated with Duke throughout the entire HFE life cycle to help ensure the upgrade was performed in a manner consistent with regulatory human factors review criteria, such as the U.S. Nuclear Regulatory Commission’s (NRC) Human Factors Engineering Program Review Model (NUREG 0711, 2012). This paper describes the HFE researchers performed through the early and middle phases of these TCS upgrades. Specific HFE activities include: 1) the development of a human factors program management plan, 2) performing an operational experience review, 3) evaluating the design human system interface while it was still in the early stages of development, and 4) developing a framework to help map these HFE activities to NUREG-0711 to help understand and catalog the value of different types and phases of human performance data collection. These four HFE activities are described in more detail below.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2015

Risk assessment for Industrial Control Systems quantifying availability using mean failure cost (MFC)

Industrial Control Systems (ICS) are commonly used in industries such as oil and natural gas, transportation, electric, water and wastewater, chemical, pharmaceutical, pulp and paper, food and beverage, as well as discrete manufacturing (e.g., automotive, aerospace, and durable goods.) SCADA systems are generally used to control dispersed assets using centralized data acquisition and supervisory control. Originally, ICS implementations were susceptible primarily to local threats because most of their components were located in physically secure areas (i.e., ICS components were not connected to IT networks or systems). The trend toward integrating ICS systems with IT networks (e.g., efficiency and the Internet of Things) provides significantly less isolation for ICS from the outside world thus creating greater risk due to external threats. Albeit, the availability of ICS/SCADA systems is critical to assuring safety, security and profitability. Such systems form the backbone of our national cyber-physical infrastructure. We extend the concept of mean failure cost (MFC) to address quantifying availability to harmonize well with ICS security risk assessment. This new measure is based on the classic formulation of Availability combined with Mean Failure Cost (MFC). The metric offers a computational basis to estimate the availability of a system in terms of the loss that each stakeholder stands to sustain as a result of security violations or breakdowns (e.g., deliberate malicious failures).

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

The Problem of Package Guidance with Incomplete Information for a Linear Control System with a Delay

The control-package method is applied to solve the problem of constructing guaranteed positional guidance for a linear control dynamical system with a delay under incomplete information about the initial state. The problem is solved for the case when the initial state is contained in a compact functional set. A solvability criterion and a method for the construction of a guidance program package are proposed. The proposed procedure is applied to a particular linear control system of delayed differential equations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

Control system for the Stirling engine

A new control system is proposed for Stirling engines. The system is based on a sealed external system for hydrogen sorption and desorption, with a thermoelectric heating and cooling system. It is intended to improve the operational reliability and the safety of the maintenance crew; to reduce the operational noise level; and to reduce the size and mass of the motor and simplify its design.

42 ENGINEERING↗
DOE OSTI2023

Demonstrate FARM supervisory capabilities for a thermal energy storage problem for the DETAIL facility: IES Simulation Ecosystem Control System Development

The goal of the power dispatch problem for an Integrated Energy System (IES) is to adjust the power output and the heat flow of each component to maximize the profitability of the whole unit. Facilities that can integrate real-time digital signals, mock nuclear power, thermal energy storage and industrial heat use via high-temperature electrolysis were constructed at INL to support the research activities. The Dynamic Energy Technology and Integration Laboratory (DETAIL) houses the Microreactor Agile Non-nuclear Experimental Test Bed (MAGNET) and the Thermal Energy Distribution System (TEDS). In this report, the hierarchical control system architecture proposed in June 2023 milestone for the flexible operation of DETAIL facility is finalized and demonstrated. A brief description of the components and the corresponding Dymola models from the HYRBID repository is first provided. Then, the current control strategy is presented. In particular, the approach for generating the set-point trajectories to be fed to the PI controllers is analyzed, and its limits were identified. To preserve safe operation over both long-time and real-time horizons, the integration of a Supervisory Control layer embedding a modified version of FARM (Feasible Actuator Range Modifier) module is proposed. FARM is a component of the RAVEN-based FORCE framework designed to support HERON module at optimizing the operation of IES units. The proposed control system for DETAIL foresees FARM to be applied twice, i.e., the original version (“FARM-Validator”) aiding the solution of the power dispatch problem, and a modified version (“FARM-Supervisory”) coordinating the PID controllers. Despite the kernel of the two modules is the same, their tasks are quite different. The former intervenes at the beginning of each hour to prevent constraint violations over long time periods, the latter addresses real-time control tasks and monitors the response of constrained variables at a much finer time resolution. A tentative procedure for training the embedded Digital Twins with the experimental data is also proposed. Finally, the capabilities of the designed architecture and the impact of the added Supervisory Control layer are demonstrated by simulating a representative power dispatch scenario.

25 ENERGY STORAGE↗
DOE OSTI2016

Information flow for security in control systems

This paper considers the development of information flow analyses to support resilient design and active detection of adversaries in cyber physical systems (CPS). CPS security, though well studied, suffers from fragmentation. In this paper, we consider control systems as an abstraction of CPS. Here, we use information flow analysis, a well established set of methods developed in software security, to obtain a unified framework that captures and extends results in control system security. Specifically, we propose the Kullback Liebler (KL) divergence as a causal measure of information flow, which quantifies the effect of adversarial inputs on sensor outputs. We show that the proposed measure characterizes the resilience of control systems to specific attack strategies by relating the KL divergence to optimal detection. We then relate information flows to stealthy attack scenarios where an adversary can bypass detection. Finally, this article examines active detection mechanisms where a defender intelligently manipulates control inputs or the system itself to elicit information flows from an attacker's malicious behavior. In all previous cases, we demonstrate an ability to investigate and extend existing results through the proposed information flow analyses.

Weerakkody, Sean↗
DOE OSTI2015

On the estimation of the attainability set of nonlinear control systems

Analysis of the attainability set and construction of its estimates greatly facilitates the solution of a variety of problems in mathematical control theory. In the paper, the problem of boundedness of the integral funnel of nonlinear controlled system is considered. Some estimates of the attainability sets for a nonlinear controlled system are presented. Theorems on the boundedness of considered integral funnels are proved.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2022

The Role of Timing in Industrial Control Systems: A Primer

Accurate and synchronized time is an important dependency within an industrial control system. Manipulation or degradation of timing can result in varying impacts based on the critical infrastructure sector. As control systems continue to be digitized and automated, they require more precise timing elements which increases the potential impact of a cyber-attack on timing elements.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2012

Virtual Control Systems Environment (VCSE)

Will Atkins, a Sandia National Laboratories computer engineer discusses cybersecurity research work for process control systems. Will explains his work on the Virtual Control Systems Environment project to develop a modeling and simulation framework of the U.S. electric grid in order to study and mitigate possible cyberattacks on infrastructure.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Towards Provable Security in Industrial Control Systems Via Dynamic Protocol Attestation

Industrial control systems (ICSs) increasingly rely on digital technologies vulnerable to cyber attacks. Cyber attackers can infiltrate ICSs and execute malicious actions. Individually, each action seems innocuous. But taken together, they cause the system to enter an unsafe state. These attacks have resulted in dramatic consequences such as physical damage, economic loss, and environmental catastrophes. This paper introduces a methodology that restricts actions using protocols. These protocols only allow safe actions to execute. Protocols are written in a domain specific language we have embedded in an interactive theorem prover (ITP). The ITP enables formal, machine-checked proofs to ensure protocols maintain safety properties. We use dynamic attestation to ensure ICSs conform to their protocol even if an adversary compromises a component. Since protocol conformance prevents unsafe actions, the previously mentioned cyber attacks become impossible. We demonstrate the effectiveness of our methodology using an example from the Fischertechnik Industry 4.0 platform. We measure dynamic attestation's impact on latency and throughput. Our approach is a starting point for studying how to combine formal methods and protocol design to thwart attacks intended to cripple ICSs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Resonance Control System for the PIP-II IT HWR Cryomodule

The HWR (half-wave-resonator) cryomodule is the first one in the superconducting section of the PIP-II LINAC project at Fermilab. PIP-II IT is a test facility for the project where the injector, warm front-end, and the first two superconducting cryomodules are being tested. The HWR cryomodule comprises 8 cavities operating at a frequency of 162.5 MHz and accelerating beam up to 10 MeV. Resonance control of the cavities is performed with a pneumatically operated slow tuner which compresses the cavity at the beam ports. Helium gas pressure in a bellows mounted to an end wall of the cavity is controlled by two solenoid valves, one on the pressure side and one on the vacuum side. The resonant frequency of the cavity can be controlled in one of two modes. A pressure feedback control loop can hold the cavity tuner pressure at a fixed value for the desired resonant frequency. Alternately, the feedback loop can regulate the cavity tuner pressure to bring the RF detuning error to zero. The resonance controller is integrated into the LLRF control system for the cryomodule. The control system design and performance of the resonance control system are described in this paper.

43 PARTICLE ACCELERATORS↗
DOE OSTI2018

Fuzzy Controllers in the Adaptive Control System of a CNC Lathe

Traditional approaches to improving the technological system of CNC metal-cutting machines include increasing the rigidity, periodic maintenance and repair of its components, and operating at lower speeds. In practice, the most economical approach is stabilization of the inputs to the system. The development of adaptive control systems with stabilization of the cutting forces improves the precision and quality of machining in CNC metal-cutting machines, the productivity, and tool life. However, classical PID controllers are only effective in stabilizing the cutting forces in such systems if continuous real-time parameter adjustment is possible. That sharply increases the complexity of the controller. A new mathematical apparatus based on artificial intelligence (including fuzzy logic) permits the solution of adaptive control problems that previously could hardly even be formulated. The present work addresses the use of fuzzy logic in automatic stabilization of the cutting force for CNC lathes. Simulation of a fuzzy controller shows that this approach to automatic stabilization of the cutting force increases the machining efficiency on existing equipment with indeterminacy in the characteristics of the cutting system and the working environment.

42 ENGINEERING↗
DOE OSTI2017

Nuclear power plant risk-informed surveillance frequency control program implementation at the Duke Catawba nuclear plant with a focus on instrumentation and control systems - 333

This paper summarizes an updated process for risk-informed surveillance frequency control program (SFCP) implementation at the Catawba Nuclear Power Plant in the past year. This program includes selection and prioritization of specific target surveillance test interval extensions; and development, review, and implementation of surveillance test risk informed documented evaluation (STRIDE) packages designed to support extension of conventional surveillance requirement test intervals, in accordance with 'Risk-Informed Technical Specifications Initiative 5b, Risk-Informed Method for Control of Surveillance Frequencies, Industry Guideline,' NEI 04-10, Revision 1 . The scope of work associated with STRIDE development includes probabilistic risk assessment (PRA) case studies, deterministic assessment (DA) evaluations, and, where required, instrument drift evaluation (IDE). The STRIDE implementation efforts have also included support of independent decision-making panel (IDP) meetings at the implementing power stations and IDP member training. The purpose of this paper is to provide a presentation of a refined process for STRIDE development with a focus on instrumentation and control systems based on author experience, which includes support for the development of multiple STRIDE packages for the Catawba Nuclear Plant. This paper outlines a framework for practical implementation of an SFCP within the context of an integrated risk-informed performance-based regulation application program with emphasis on instrumentation and control systems. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Common Cause Failure Evaluation of High Safety-significant Safety-related Digital Instrumentation and Control Systems

Digital instrumentation and control (DI&C) systems in nuclear power plants (NPPs) have many advantages over analog systems but also pose different engineering and technical challenges, such as potential threats due to common cause failures (CCFs). This paper proposes a Platform for Risk Assessment of DI&C (PRADIC) developed by Idaho National Laboratory for dealing with potential software CCFs in DI&C systems of NPPs. The methodology development of PRADIC on the quantitative evaluation of software CCFs in high safety-significant safety-related DI&C systems in NPPs is illustrated in this paper. In PRADIC, qualitative hazard analysis and quantitative reliability and consequence analysis are successively implemented to obtain quantitative risk information, compare with respective risk evaluation acceptance criteria, and provide suggestions for risk reduction and design optimization. A comprehensive case study was also performed and documented in this paper. Results show that PRADIC can effectively identify potential digital-based CCFs, estimate their failure probabilities, and evaluate their impacts to system and plant safety.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2014

High density, multi-range analog output Versa Module Europa board for control system applications

A new VMEDAC64, 12-bit 64 channel digital-to-analog converter, a Versa Module Europa (VME) module, features 64 analog voltage outputs with user selectable multiple ranges, has been developed for control system applications at Inter University Accelerator Centre. The FPGA (Field Programmable Gate Array) is the module's core, i.e., it implements the DAC control logic and complexity of VMEbus slave interface logic. The VMEbus slave interface and DAC control logic are completely designed and implemented on a single FPGA chip to achieve high density of 64 channels in a single width VME module and will reduce the module count in the control system applications, and hence will reduce the power consumption and cost of overall system. One of our early design goals was to develop the VME interface such that it can be easily integrated with the peripheral devices and satisfy the timing specifications of VME standard. The modular design of this module reduces the amount of time required to develop other custom modules for control system. The VME slave interface is written as a single component inside FPGA which will be used as a basic building block for any VMEbus interface project. The module offers multiple output voltage ranges depending upon the requirement. The output voltage range can be reduced or expanded by writing range selection bits in the control register. The module has programmable refresh rate and by default hold capacitors in the sample and hold circuit for each channel are charged periodically every 7.040 ms (i.e., update frequency 284 Hz). Each channel has software controlled output switch which disconnects analog output from the field. The modularity in the firmware design on FPGA makes the debugging very easy. On-board DC/DC converters are incorporated for isolated power supply for the analog section of the board.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗