SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

All sources NASA NTRS DOE OSTI

NASA NTRS2011

MLAS and LAS: Project Comparison of Lessons Learned

The development of new and safer manned space vehicles is a top priority at NASA. Recently two different approaches of how to accomplish this mission of keeping astronauts safe was successfully demonstrated. With work already underway on an Apollo-like launch abort system for the Orion Crew Exploration Vehicle (CEV), an alternative design concept named the Max Launch Abort System, or MLAS, was developed as a parallel effort. The Orion system, managed by the Constellation office, is based on the design of a single solid launch abort motor in a tower positioned above the capsule. The MLAS design takes a different approach placing the solid launch abort motor underneath the capsule. This effort was led by the NASA Engineering and Safety Center (NESC). Both escape systems were designed with the Ares I Rocket as the launch vehicle and had the same primary requirement to safely propel a crew module away from any emergency event either on the launch pad or during accent. Beyond these two parameters, there was little else in common between the two projects, except that they both concluded in successful launches that will further promote the development of crew launch abort systems. This presentation will compare both projects from the standpoint of technical requirements; program management and flight test objectives and highlight the synergistic lessons learned by two engineers who worked on each program.

Dittemore, Gary↗

NASA NTRS2011

Comparison of Two Recent Launch Abort Platforms

The development of new and safer manned space vehicles is a top priority at NASA. Recently two different approaches of how to accomplish this mission of keeping astronauts safe was successfully demonstrated. With work already underway on an Apollo-like launch abort system for the Orion Crew Exploration Vehicle (CEV), an alternative design concept named the Max Launch Abort System, or MLAS, was developed as a parallel effort. The Orion system, managed by the Constellation office, is based on the design of a single solid launch abort motor in a tower positioned above the capsule. The MLAS design takes a different approach placing the solid launch abort motor underneath the capsule. This effort was led by the NASA Engineering and Safety Center (NESC). Both escape systems were designed with the Ares I Rocket as the launch vehicle and had the same primary requirement to safely propel a crew module away from any emergency event either on the launch pad or during accent. Beyond these two parameters, there was little else in common between the two projects, except that they both concluded in successful launches that will further promote the development of crew launch abort systems. A comparison of these projects from the standpoint of technical requirements; program management and flight test objectives will be done to highlight the synergistic lessons learned by two engineers who worked on each program. This comparison will demonstrate how the scope of the project architecture and management involvement in innovation should be tailored to meet the specific needs of the system under development.

Dittemore, Gary D.↗

DOE OSTI2024

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway: Safety Criteria Evaluation

There has been recent progress in the development of risk-informed performance-based (RIPB) design and licensing approaches, which leverage the insights gained from detailed risk assessments and utilize performance-based metrics to permit flexibility and innovation. The RIPB approaches have included the probabilistic treatment of external hazards, including low frequency events that are beyond the design basis. A preceding study conducted in FY21 noted that there are certain challenges to the probabilistic treatment of low frequency external events, which are primarily the result of uncertainty in the hazard curve and the associated plant response to rare, severe events. The current work expands on the previous study by examining the regulatory safety criteria contained within draft 10 CFR Part 53 and associated draft RIPB seismic design guidance. The evaluation identified potential challenges in demonstrating satisfaction of the safety criteria for low frequency external events, with specific difficulties associated with demonstrating compliance with cumulative safety criteria metrics, such as the quantitative health objectives (QHOs). Non-LWRs are expected to utilize the direct calculation of offsite consequence, rather than use surrogates, for comparison to the QHOs, which can be particularly challenging as the previously identified uncertainties are compounded by uncertainties in the response of the neighboring population. The current work details this evaluation and key findings. The central recommendation from this effort is that it is necessary to develop an approach for demonstrating compliance with the safety criteria in draft Part 53 that addresses the key challenges while providing flexibility to applicants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRS1984

Conceptual design and simulator implementation of an automatic terminal approach system

The pilot-machine interface with aircraft automation to increase the safety and utility of single-pilot IFR (instrument flight rules) operations is addressed. An automatic terminal approach system (ATAS), that uses stored instrument approach data to automatically tune aircraft radios and control the aircraft autopilot, was conceived as a means of improving this critical interface. The ATAS automatically flies instrument approach procedures, including the missed approach, and provides for easy pilot interaction to accommodate air traffic control radar vectors and altitude assignments. A research prototype of an ATAS was developed to the extent necessary for a simulation implementation and piloted evaluation. The development of the ATAS concept and the software algorithms is described.

Hinton, D. A.↗

NASA NTRS1990

Structures and materials technology for hypersonic aerospacecraft

Major considerations in structural design of a transatmospheric aerospacecraft are discussed. The general direction of progress in structures and materials technology is indicated, and technical areas in structures and materials where further research and development is necessary are indicated. Various structural concepts under study and materials which appear to be most applicable are discussed. Structural design criteria are discussed with particular attention to the factor-of-safety approach and the probabilistic approach. Structural certification requirements for the aerospacecraft are discussed. The kinds of analyses and tests which would be required to certify the structural integrity, safety, and durability of the aerospacecraft are discussed, and the type of test facility needed to perform structural certification tests is identified.

Mccomb, Harvey G., Jr.↗

NASA NTRS2001

Creep-Fatigue Interaction Testing

Fatigue fives in metals are nominally time independent below 0.5 T(sub Melt). At higher temperatures, fatigue lives are altered due to time-dependent, thermally activated creep. Conversely, creep rates are altered by super. imposed fatigue loading. Creep and fatigue generally interact synergistically to reduce material lifetime. Their interaction, therefore, is of importance to structural durability of high-temperature structures such as nuclear reactors, reusable rocket engines, gas turbine engines, terrestrial steam turbines, pressure vessel and piping components, casting dies, molds for plastics, and pollution control devices. Safety and lifecycle costs force designers to quantify these interactions. Analytical and experimental approaches to creep-fatigue began in the era following World War II. In this article experimental and life prediction approaches are reviewed for assessing creep-fatigue interactions of metallic materials. Mechanistic models are also discussed briefly.

Halford, Gary R.↗

NASA NTRS2019

The Role of Alerting System Failures in Loss of Control Accidents CAST SE-210 Output 2

This report is part of a series of reports that address flight deck design and evaluation, written as a response to loss of control accidents. In particular, this activity is directed at failures in airplane state awareness in which the pilot loses awareness of the airplane's energy state or attitude and enters an upset condition. In a report by the Commercial Aviation Safety Team, an analysis of accidents and incidents related to loss of airplane state awareness determined that hazard alerting was not effective in producing the appropriate pilot response to a hazard (CAST, 2014). In the current report, we take a detailed look at 28 airplane state awareness accidents and incidents to determine how well the hazard alerting worked. We describe a five-step integrated alerting-to-recovery sequence that prescribes how hazard alerting should lead to effective flight crew actions for managing the hazard. Then, for each hazard in each of the 28 events, we determine if that sequence failed and, if so, how it failed. The results show that there was an alerting failure in every one of the 28 safety events, and that the most frequent failure (20/28) was tied to the flight crew not orienting to (not being aware of) the hazard. The discussion section summarizes findings and identifies alerting issues that are being addressed and issues that are not currently being addressed. We identify a few recent upgrades that have addressed certain alerting failures. Two of these upgrades address alerting design, but one response to the safety events is to upgrade training for approach to stall and stall recovery. We also describe issues that are not being addressed adequately: better alert integration for flight path management types of hazards, airplanes in the fleet that do not meet the current alerting regulations, a lack of innovation for addressing cases of channelized attention, and existing vulnerabilities in managing data validity.

aviation safety↗

DOE OSTI2025

CFD Simulations of Lower Plenum Mixing

Review of model development and validation performed in the Advanced Reactor Technologies (ART) program for thermal mixing at the outlet of High Temperature Gas Reactors (HTGRs). Understanding the mixing that occurs in the lower plenum in an HTGR is necessary to facilitate design improvements and to perform reactor safety analysis. Numerical models are one possible approach to gain a better understanding of mixing in the lower plenum. Given the complexity of the geometry and the intense mixing present, it is important to perform validation of numerical models. Three models have been developed during FY2025: a porous media with Pronghorn, a Reynolds Averaged Navier Stokes (RANS) with STAR-CCM+, and a Large Eddy Simulation (LES) with NekRS. The reference facility is a scaled-down version of the lower plenum of the High Temperature Gas-Cooled Reactor - Pebble-bed Module (HTR-PM) demonstration reactor. Preliminary results of the porous media and the RANS shows general good agreement against experimental benchmark data. Future work will leverage high-fidelity results obtained through LES to guide model selection and improvements to the lower-fidelity models, with particular attention to the Pronghorn porous media.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

MODULARITY-AT-SCALE FOR COST COMPETITIVE DEPLOYMENT OF NUCLEAR ENERGY

Modularity options have been limited for traditional nuclear energy deployment due to the conventional light water reactor (LWR) safety requirements, such as high pressure retaining heavy and robust containment structures. However, a relatively new regulatory approach called ‘Functional Containment’ has potential to allow less expensive and more flexible designs for non LWRs. Functional containment provides flexibility in design and deployment based on risk informed and performance-based criteria, so that reactors are not over-designed. Non-nuclear industry has successfully used modular design approaches in automotive, aerospace, chemical processing, building construction, and ship building. These industries have shown that modular construction reduces construction time by around 30% - 50% compared to the conventional stick built approach. The nuclear industry can use similar approaches to reduce construction time and costs, balanced with safety requirements, using the functional containment approach. This paper discussing the background of modularity in nuclear energy, examples of less learned, modularity approaches in non-nuclear industries and the potential of cost and schedule savings through the emerging regulatory design flexibilities potentially enabling combination of modular deployment at different scales.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Modularity-at-scale for advanced reactors presentation

Modularity options have been limited for traditional nuclear energy deployment due to the conventional light water reactor (LWR) safety requirements, such as high pressure retaining heavy and robust containment structures. However, a relatively new regulatory approach called ‘Functional Containment’ has potential to allow less expensive and more flexible designs for non-LWRs. Functional containment provides flexibility in design and deployment based on risk-informed and performance-based criteria, so that reactors are not over-designed. Non-nuclear industry has successfully used modular design approaches in automotive, aerospace, chemical processing, building construction, and ship building. These industries have shown that modular construction reduces construction time by around 30% - 50% compared to the conventional stick-built approach. The nuclear industry can use similar approaches to reduce construction time and costs, balanced with safety requirements, using the functional containment approach. This paper discussing the background of modularity in nuclear energy, examples of less learned, modularity approaches in non-nuclear industries and the potential of cost and schedule savings through the emerging regulatory design flexibilities potentially enabling combination of modular deployment at different scales.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRSDate not supplied

Integrated Handling Qualities Safety Analysis For Conceptual Design of Urban Air Mobility Vehicles

The recent emergence of distributed electric propulsion Vertical Takeoff and Landing (VTOL) aircraft has created a rapid introduction of new design concepts with unique stability and control characteristics. A challenge to realizing the full potential of these vehicles for urban transportation is to gain public acceptance which is largely driven by flight safety. This paper describes ongoing research to address the feasibility of integrating flying qualities safety metrics into conceptual design of VTOL Urban Air Mobility (UAM) vehicles. The discussion is composed of the approach and progress toward a toolbox that integrates with existing NASA rotorcraft design software and processes. Several key challenges are highlighted including modeling requirements for failures, identification of critical failures, and capturing critical failures, with robustness to model uncertainty. A discussion of requirements for safety metrics, specific to UAM vehicles, as well as the effects of the control system design is also included. Results to date have demonstrated the degradation in flying qualities metrics due to propulsion failures.

George Altamirano↗

DOE OSTI2023

An Integrated Framework for Risk Assessment of Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology Refinement and Exploration

This report documents activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2023 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective, and secure DI&C technologies for digital upgrades/designs. A risk assessment-informed framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk informed capability to quantitatively estimate the safety margin obtained from plant modernization, especially for safety-related DI&C systems, (2) support and supplement existing risk informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of safety-related DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the LWRS-developed framework provides a means to address relevant technical issues by: (1) defining a risk informed analysis process for DI&C upgrade that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies in nuclear power plants (NPPs). Adding diversity within a system or components is the primary means to eliminate and mitigate CCFs, but diversity also increases system complexity and may not address all sources of systematic failures. Optimization of diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in safety-related DI&C systems of NPPs and supporting relevant design optimization, the proposed framework provides: (a) A best-estimate, risk informed capability to address new technical digital issues quantitatively, focusing on software CCFs in safety-related DI&C systems of NPPs; (b) A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to predict and prevent risk in the early design stage of DI&C systems; (c) Technical bases and risk informed insights to assist users address the risk informed alternatives for evaluation of CCFs in safety-related DI&C systems of NPPs; and (d) A risk informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The research and development efforts of this project in FY 2023 are focused on refining current methods on software CCF modeling and estimation and exploring additional innovative approaches to risk assessment of DI&C systems to enable a more comprehensive and complete assessment of various safety-related DI&C design architectures. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists. It should be noted that all the analyses are performed for the demonstration of the methodology, not for the evaluation of an actual digital control system. Results are obtained based on limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRSDate not supplied

An Approach for Identifying IASMS Services, Functions, and Capabilities From Data Sources

Assuring safety in the NAS with the inclusion of new entrants that are part of Advanced Air Mobility (AAM) will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using semi-autonomous/autonomous vehicles. Overcoming these AAM safety assurance challenges is the focus of the In-time Aviation Safety Management System (IASMS). The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs)designed to manage operational risks, identify unknown risks, and inform system design to mitigate risk. This paper describes a broad approach for identifying SFCs involving technology trends in research, assessment of known and unknown risks in safety reports, and causal and contributing factors in aviation accidents and incidents. This approach leverages these sources to identify potential SFCs that enable the Monitor, Assess, and Mitigate (M-A-M)functionality that represents the enabling framework of the IASMS.

Kyle Ellis↗

NASA NTRS2011

Achieving the Proper Balance Between Crew and Public Safety

A paramount objective of all human-rated launch and reentry vehicle developers is to ensure that the risks to both the crew onboard and the public are minimized within reasonable cost, schedule, and technical constraints. Past experience has shown that proper attention to range safety requirements necessary to ensure public safety must be given early in the design phase to avoid additional operational complexities or threats to the safety of people onboard. This paper will outline the policy considerations, technical issues, and operational impacts regarding launch and reentry vehicle failure scenarios where crew and public safety are intertwined and thus addressed optimally in an integrated manner. Historical examples and lessons learned from both the Space Shuttle and Constellation Programs will be presented. Using these examples as context, the paper will discuss some operational, design, and analysis approaches to mitigate and balance the risks to people onboard and in the public. Manned vehicle perspectives from the FAA and Air Force organizations that oversee public safety will also be summarized. Finally, the paper will emphasize the need to factor policy, operational, and analysis considerations into the early design trades of new vehicles to help ensure that both crew and public safety are maximized to the greatest extent possible.

Gowan, John↗

DOE OSTI2020

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗

NASA NTRS2015

Addressing Unison and Uniqueness of Reliability and Safety for Better Integration

For a long time, both in theory and in practice, safety and reliability have not been clearly differentiated, which leads to confusion, inefficiency, and sometime counter-productive practices in executing each of these two disciplines. It is imperative to address the uniqueness and the unison of these two disciplines to help both disciplines become more effective and to promote a better integration of the two for enhancing safety and reliability in our products as an overall objective. There are two purposes of this paper. First, it will investigate the uniqueness and unison of each discipline and discuss the interrelationship between the two for awareness and clarification. Second, after clearly understanding the unique roles and interrelationship between the two in a product design and development life cycle, we offer suggestions to enhance the disciplines with distinguished and focused roles, to better integrate the two, and to improve unique sets of skills and tools of reliability and safety processes. From the uniqueness aspect, the paper identifies and discusses the respective uniqueness of reliability and safety from their roles, accountability, nature of requirements, technical scopes, detailed technical approaches, and analysis boundaries. It is misleading to equate unreliable to unsafe, since a safety hazard may or may not be related to the component, sub-system, or system functions, which are primarily what reliability addresses. Similarly, failing-to-function may or may not lead to hazard events. Examples will be given in the paper from aerospace, defense, and consumer products to illustrate the uniqueness and differences between reliability and safety. From the unison aspect, the paper discusses what the commonalities between reliability and safety are, and how these two disciplines are linked, integrated, and supplemented with each other to accomplish the customer requirements and product goals. In addition to understanding the uniqueness in reliability and safety, a better understanding of unison and commonalities will further help in understanding the interaction between reliability and safety. This paper discusses the unison and uniqueness of reliability and safety. It presents some suggestions for better integration of the two disciplines in terms of technical approaches, tools, techniques, and skills to enhance the role of reliability and safety in supporting a product design and development life cycle. The paper also discusses eliminating the redundant effort and minimizing the overlap of reliability and safety analyses for an efficient implementation of the two disciplines.

Huang, Zhaofeng↗

NASA NTRS2006

Evaluating the Performance of the NASA LaRC CMF Motion Base Safety Devices

This paper describes the initial measured performance results of the previously documented NASA Langley Research Center (LaRC) Cockpit Motion Facility (CMF) motion base hardware safety devices. These safety systems are required to prevent excessive accelerations that could injure personnel and damage simulator cockpits or the motion base structure. Excessive accelerations may be caused by erroneous commands or hardware failures driving an actuator to the end of its travel at high velocity, stepping a servo valve, or instantly reversing servo direction. Such commands may result from single order failures of electrical or hydraulic components within the control system itself, or from aggressive or improper cueing commands from the host simulation computer. The safety systems must mitigate these high acceleration events while minimizing the negative performance impacts. The system accomplishes this by controlling the rate of change of valve signals to limit excessive commanded accelerations. It also aids hydraulic cushion performance by limiting valve command authority as the actuator approaches its end of travel. The design takes advantage of inherent motion base hydraulic characteristics to implement all safety features using hardware only solutions.

Gupton, Lawrence E.↗

DOE OSTI2025

Radiochemical transport analysis of gamma spectroscopic data to support estimation of molten salt reactor off-gas inventories

This work introduces a novel application of radiochronometry to estimate nuclide inventories in molten salt reactor off-gas systems based on gamma spectroscopic data from the Molten Salt Reactor Experiment. By analyzing isotopic, isobaric, and isomeric activity ratios, key depletion model parameters related to species transport within the reactor system could be inferred. The findings demonstrate the potential of leveraging a limited subset of gamma spectroscopy measurements to accurately estimate nuclide inventories throughout the off-gas system. The approach can be useful in reactor design activities and support analyses relevant to operations, safety, security, and safeguards.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗