Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2024

Survey of Methods for Assessing Safety Compliance of sUAS BVLOS Operations

To ensure the safety of small Unmanned Aircraft System (sUAS) Beyond Line of Sight (BVLOS) operations in the National Airspace System (NAS), the FAA offers a guideline on how sUAS operators can demonstrate compliance with FAA rules, including regulations, advisory circulars, policy statements, and acceptable means of compliance (AMOC), using a formal and top-down approach. According to FAA Advisory Circular 23.2010-1, the AMOC refers to “one method, but not the only method, to show compliance with a regulatory requirement.” It is common for regulations to include a performance and safety standard rather than a detailed design or operation requirement, which allows for flexibility in fulfilling the regulatory requirements while still achieving a predetermined level of safety. This technical report explores existing frameworks for sUAS BVLOS safety analysis. It begins by discussing how sUAS BVLOS operations can be strategically deconflicted and then discusses their hazards. The next step is to establish safety assessment methods commonly used by the aviation industry and the FAA, illustrate how these methods can be applied to several safety-critical air traffic systems, and list collision models that the FAA and industry use. This investigation documents the processes for assessing safety risks in sUAS BVLOS operations and will allow sUAS BVLOS operations to be assessed for safety compliance more efficiently.

sUAS BVLOS Operations↗
DOE OSTI2024

Scenario development for safety assessment in deep geologic disposal of high-level radioactive waste and spent nuclear fuel: A review

Radiation and radioactive substances result in the production of radioactive wastes which require safe management and disposal to avoid risks to human health and the environment. To ensure permanent safe disposal, the performance of a deep geological repository for radioactive waste is assessed against internationally agreed risk-based standards. Assessing postclosure safety of the future system's evolution includes screening of features, events, and processes (FEPs) relevant to the situation, their subsequent development into scenarios, and finally the development and execution of safety assessment (SA) models. Global FEP catalogs describe important natural and man-made repository system features and identify events and processes that may affect these features into the future. By combining FEPs, many of which are uncertain, different possible future system evolution scenarios are derived. Repository licensing should consider both the reference or “base” evolution as well as alternative futures that may lead to radiation release, pollution, or exposures. Scenarios are used to derive and consider both base and alternative evolutions, often through production of scenario-specific SA models and the recombination of their results into an assessment of the risk of harm. Furthermore, while the FEP-based scenario development process outlined here has evolved somewhat since its development in the 1980s, the fundamental ideas remain unchanged. A spectrum of common approaches is given here (e.g., bottom–up vs. top–down scenario development, probabilistic vs. bounding handling of uncertainty), related to how individual numerical models for possible futures are converted into a determination as to whether the system is safe (i.e., how aleatoric uncertainty and scenarios are integrated through bounding or Monte Carlo approaches).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2026

Hazard Analysis to Support Fusion Systems Safety Assessments

Reliability, safety, and performance are vital aspects of any nuclear operation. Fusion technology continues to grow in public, private, and research interest, and coupled with rapidly growing energy needs, fusion technology research is poised for fast progress. The development of a Fusion Nuclear Science Facility (FNSF) is seen as stepping stone for demonstrating long-cycle fusion. Naturally, such operation requires systems that are available, reliable, and safe. This work provides a novel demonstration of systems theory coupled with traditional hazard analysis to provide insights into the risk priority of components and systems found within the FNSF. The results of this work are a set of identified hazards that should be considered for the risk-informed design and development of the FNSF.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1988

A computer-based Safety Assessment for Flight Evacuation - SAFE

The Safety Assessment for Flight Evacuation (SAFE) system has been developed for the computerized evaluation of safety in civil Emergency Medical Service (EMS) operations. The speed of the microprocessor used to analyze data allows many individual factors to be considered, as well as the interactions among those factors. SAFE's data base is structured as if-then conditional statements. SAFE also allows the most important of the factors to be given greater weight in the final score. The questionnaire filled by EMS crews encompassed mission-, crew-, organization-, environment-, and aircraft-related factors; each of these was subdivided into as many as eight variables affecting the EMS-mission risk of that factor.

Shively, Robert J.↗
NASA NTRSDate not supplied

Mars Sample Return: Risk Management & Sample Safety Assessment

Returning samples from Mars has long been a major planetary science objective due to the high scientific value and transformative potential of the resulting data. An exciting dimension of this objective is the potential for the detection of ancient microbiological life, and the possibility of improving our understanding of the evolution of habitable environments on Mars and the development of life on Earth. To ensure that returned samples meet stringent planetary protection requirements and do not expose Earth to potential biohazards, the joint NASA/ESA Sample Receiving Project (SRP) assembled the Sample Safety Assessment Protocol Tiger Team (SSAP-TT). Members were recruited with the specific goal of creating a multi-disciplinary and internationally distributed team of experts in their respective fields across the federal government, academia, and private industry. This team was chartered with reassessing previous sample safety assessment strategies, defining what constitutes a biological hazard, developing a protocol to test for potential biohazards, and establishing a statistical framework to determine if samples are “safe” for release. The team developed a three-step protocol, supported by a Bayesian statistical framework, to assess whether returned samples contain potential biohazards that could present a risk to Earth’s biosphere. Initial conclusions indicated that an effective and comprehensive safety assessment protocol is feasible using modern techniques and does not require an excessive amount of sample consumption or traditional microbiological detection methodology. Herein, we will present an overview of the MSR SRP, the proposed safety assessment protocol, and how aspects of this novel approach can be applied to biological assessment in healthcare product manufacturing practices.

Alvin L Smith↗
DOE OSTI2021

Dynamic Probabilistic Safety Assessment Studies for Advanced Reactor Using RAVEN

Probabilistic Safety Assessment (PSA) is used extensively to evaluate the risks associated with complex engineering systems like Nuclear Power Plants (NPPs). Current PSA models are based on the Event-Tree/Fault-Tree (ET/FT) methodology. ET and FT models are static and are based on Boolean logic approaches. In the past, concerns have been raised in the literature regarding the capability of the traditional static modelling approaches to adequately account for the impact of process, hardware, software, firmware and human interactions on the stochastic system behaviour. To overcome the limitations of the traditional approach to PSA, several dynamic PSA methodologies have been proposed. One of the dynamic PSA methodologies used for dynamic evaluations is Dynamic Event Tree (DET) framework which can be used to assess the impact of the parameter variability and scenario dynamics on the PSA model for the initiating event. The DET framework couples the stochastic model (number of component/trains that start on demand, operator action timing, etc.) with a Thermal-Hydraulic (TH) model of the plant. This paper explores the use of DET along with a case study on advanced reactor. The initiating event selected for the study was Class IV power supply failure event. The TH analysis considering uncertainty in various parameters was performed using RELAP5 and Reactor Analysis and Virtual control ENvironment (RAVEN) tool. Based on the uncertainty analysis, it is concluded that the peak clad temperatures (PCT) are within the limits in all the code runs implying a high-degree of safety margin. However, variation in time to reach the PCT was observed among the code runs and the mean time to reach the PCT was found to be around 8590sec (approximately 2.4 hours). Hence, sufficient time margin is available for human intervention and the operator might have a relatively stress-free state during such an accident scenario. Due to the static nature of the traditional PSA models, the safety margin available was lesser, whereas, with the help of dynamic PSA models, one can demonstrate that the actual available safety margin is more in the present case study and is valuable input from the design point of view.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRSDate not supplied

Safety Assessment of a Machine Learning-Based Aircraft Emergency Braking System: A Case Study

Machine Learning (ML) is revolutionizing many technological fields, but its use in aviation remains restricted due to stringent certification requirements. Efforts by the aviation community to establish standards for certifying ML-based systems are progressing, yet challenges persist, particularly with safety assessment methods for ML-based systems. This research addresses these challenges through a case study of an autonomous emergency braking system utilizing a computer vision deep neural network (DNN). We demonstrate a safety assessment process tailored to ML-specific concerns, such as low integrity and performance variability in quantitative safety analysis. This study can serve as an illustrative example to facilitate the discussion and convergence on certification aspects for ML-based systems within the aviation community.

Safety certification↗
DOE OSTI2022

Explosion behavior investigation and safety assessment of large-format lithium-ion pouch cells

We report large-format lithium-ion (Li-ion) batteries with high energy density for electric vehicles are prone to thermal runaway (or even explosion) under abusive conditions. In this study, overcharge induced explosion behaviors of large-format Li-ion pouch cells with Li[Ni 0.8 Co 0.1 Mn 0.1 ]O 2 cathode at different current rates (C-rates) (0.5C, 1C, 2C) were investigated. The explosion characteristics of the cells were elucidated by discussing the evolution of the cell voltage, the surface temperature and the shock wave pressure. Generally, the whole overcharge process could be divided into four stages according to the evolution of several key parameters and the overcharge behaviors; the overcharge C-rate has a great influence on cells’ thermal behaviors. The experimental results showed that the thermal runaway process of Li-ion cells caused by overcharging consisted of two kinds of explosions, physical explosion and chemical explosion. The existence of observable negative pressure zone in the pressure curves indicated that the Li-ion cells are not a self-supplying oxygen system during the explosion. Further, the explosion dynamics parameters were matched. An explosion TNT-equivalent conversion strategy that depended on the pressure of the shock wave was utilized to evaluate the released energy and its hazards. In addition, with respect to the overcharge of Li-ion pouch cells, a safety assessment method and a safety management method were proposed based on the explosion behaviors. From the perspective of battery safety, this study is of great significance for the safety design of Li-ion cells and can provide guidance for engineers to optimize the safety function of battery packs.

25 ENERGY STORAGE↗
DOE OSTI2025

Impact of Testing Method on Safety Assessment of Aged Li-Ion Cells: Part II – Aged Cells Without Li Plating

Understanding the safety profile of aged Li-ion batteries is essential for developing effective battery management and hazard mitigation strategies. However, most safety assessments have focused on fresh batteries, with just a few calorimetry studies on aged batteries with metal oxide positive electrodes. This study provides a broad assessment of commercial 18650-type Li-ion batteries with NCA, NMC, and LFP positive electrodes, both uncycled and aged under conditions that promoted solid electrolyte interphase (SEI) growth as the dominant degradation mechanism. The cells underwent mechanical (nail penetration, crush), electrical (overcharge, overdischarge), and thermal (accelerating rate calorimetry) abuse tests. Safety was rated on general characteristics such as mass loss, maximum temperature, and EUCAR (European Council for Automotive R&D) hazard level, as well as characteristics specific to individual abuse tests. Generally, aged cells with SEI growth exhibited similar or improved safety compared to uncycled cells, contrasting with our previous findings on NCA cells with Li plating as the dominant aging mechanism (Part I of this series). Yet, some tests and characteristics indicated reduced aged cell safety, such as earlier triggering of mechanical failure. These results emphasize the need to examine aged battery safety across diverse empirical techniques, degradation modes, and chemistries.

Lithium-ion cells↗
DOE OSTI2024

Molten Salt Reactor Safety Assessment - Three Approaches to A Common Objective

Safety adequacy assessment is central to nuclear power plant (NPP) licensing. Either NPP accident mitigation or prevention can result in adequate safety. Accident prevention, along with the the prevention of accident escalation, can be evaluated using either deterministic or probabilistic methods. Acceptable means to develop principal design criteria (PDCs) via probabilistic methods are provided in NRC Regulatory Guide 1.233 while advanced reactor design criteria are provided in NRC Regulatory Guide 1.232 (RG 1.232). Accident mitigation-based regulatory guidance for non-power reactors is provided in NUREG 1537. While RG 1.232 included class specific guidance for both sodium-cooled fast reactors and modular high-temperature gas-cooled reactors, it did not provide molten salt reactor (MSR) class specific guidance. Class specific design criteria more closely align with reactors in their class so will require less effort to employ to develop design specific PDCs. The American Nuclear Society has recently released a liquid-fueled MSR design safety standard (ANSI/ANS-20.2-2023) that provides class specific design criteria.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1971

Some thoughts about system safety assessment and its current application in aerospace

The various issues and requirements which must be considered during the actual work of safety assessment are discussed. The task and its objectives are considered and the importance of presentation is stressed, so that problems and their solution are displayed adequately to the many disciplines involved. The definition of areas of influence to which the requirements can be applied, and safety objectives derived, is also discussed. Emphasis is placed on the need to determine and set out safety objectives with precision so that the analysis is not complicated with occurrences which are not relevant to safety.

Peter R. Allison↗
DOE OSTI2024

Method for Real-Time Salt Aerosol Concentration and Size Measurements for Molten Salt Reactor Safety Assessments

Licensing a new nuclear reactor involves evaluating credible accident scenarios by developing models that simulate accident progression to predict possible outcomes and their impact on safety. The formation of radionuclide-bearing aerosols in the respirable size range can significantly affect dose consequence and threaten human health and is therefore a focus of nuclear reactor safety assessments. Recent reviews of the literature identified a lack of existing experimental data describing the mechanisms of formation and properties (size, concentration, and composition) of radionuclide-bearing aerosols that may be produced from molten salt reactor (MSR) facilities during postulated accident scenarios. Experiments on aerosol formation from molten salt systems are a high priority need that will support MSR licensing by indicating the radiological consequences of aerosol formation and providing the data required for model development and validation. The evolving conditions that occur during a MSR accident, such as a spill of molten fuel salt, may affect aerosol formation mechanisms and aerosol properties over time. There is a need to conduct experiments that simulate credible MSR accidents in a laboratory to generate aerosols with realistic characteristics and behaviors and a need to measure these aerosols in real time under accident-relevant conditions. This report describes the development of a method that can be used to quantify the size and concentration of salt aerosol particles that form from molten salt systems in real time. This method will be employed in future integral effects tests that are conducted at an engineering scale to simulate realistic MSR accidents and in future separate effects tests that will provide mechanistic insight into aerosol formation and properties to support process model development.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Tritium Fires: Simulation and Safety Assessment

This is the Sandia report from a joint NSRD project between Sandia National Labs and Savannah River National Labs. The project involved development of simulation tools and data intended to be useful for tritium operations safety assessment. Tritium is a synthetic isotope of hydrogen that has a limited lifetime, and it is found at many tritium facilities in the form of elemental gas (T 2 ). The most serious risk of reasonable probability in an accident scenario is when the tritium is released and reacts with oxygen to form a water molecule, which is subsequently absorbed into the human body. This tritium oxide is more readily absorbed by the body and therefore represents a limiting factor for safety analysis. The abnormal condition of a fire may result in conversion of the safer T 2 inventory to the more hazardous oxidized form. It is this risk that tends to govern the safety protocols. Tritium fire datasets do not exist, so prescriptive safety guidance is largely conservative and reliant on means other than testing to formulate guidelines. This can have a consequence in terms of expensive and/or unnecessary mitigation design, handling protocols, and operational activities. This issue can be addressed through added studies on the behavior of tritium under representative conditions. Due to the hazards associated with the tests, this is being approached mainly from a modeling and simulation standpoint and surrogate testing. This study largely establishes the capability to generate simulation predictions with sufficiently credible characteristics to be accepted for safety guidelines as a surrogate for actual data through a variety of testing and modeling activities.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2020

Overcharge-to-thermal-runaway behavior and safety assessment of commercial lithium-ion cells with different cathode materials: A comparison study

In this paper, overcharge behaviors and thermal runaway (TR) features of large format lithium-ion (Li-ion) cells with different cathode materials (LiFePO 4 (LFP), Li[Ni 1/3 Co 1/3 Mn 1/3 ]O 2 (NCM111), Li[Ni 0.6 Co 0.2 Mn 0.2 ]O 2 (NCM622) and Li[Ni 0.8 Co 0.1 Mn 0.1 ]O 2 (NCM811)) were investigated. The results showed that, under the same overcharge condition, the TR of LFP Li-ion cell occurred earlier compared with the NCM Li-ion cells, indicating its poor overcharge tolerance and high TR risk. However, when TR occurred, LFP Li-ion cell exhibited lower maximum temperature and mild TR response. All NCM Li-ion cells caught fire or exploded during TR, while the LFP Li-ion cell only released a large amount of smoke without fire. According to the overcharge behaviors and TR features, a safety assessment score system was proposed to evaluate the safety of the cells. In short, NCM Li-ion cells have better performance in energy density and overcharge tolerance (or low TR risk), while LFP Li-ion cell showed less severe response to overcharging (or less TR hazards). For NCM Li-ion cells, as the ratio of nickel in cathode material increases, the thermal stability of the cathode materials becomes poorer, and the TR hazards increase. Such a comparison study on large format Li-ion cells with different cathode materials can provide deeper insights into the overcharge behaviors and TR features, and provide guidance for engineers to reasonably choose battery materials in automotive applications.

25 ENERGY STORAGE↗
NASA NTRS2012

Terrain Safety Assessment in Support of the Mars Science Laboratory Mission

In August 2012, the Mars Science Laboratory (MSL) mission will pioneer the next generation of robotic Entry, Descent, and Landing (EDL) systems by delivering the largest and most capable rover to date to the surface of Mars. The process to select the MSL landing site took over five years and began with over 50 initial candidate sites from which four finalist sites were chosen. The four finalist sites were examined in detail to assess overall science merit, EDL safety, and rover traversability on the surface. Ultimately, the engineering assessments demonstrated a high level of safety and robustness at all four finalist sites and differences in the assessment across those sites were small enough that neither EDL safety nor rover traversability considerations could significantly discriminate among the final four sites. Thus the MSL landing site at Gale Crater was selected from among the four finalists primarily on the basis of science considerations.

Kipp, Devin↗
DOE OSTI2022

Geologic Disposal Safety Assessment (GDSA) Biosphere Model Development

The Spent Fuel and Waste Science and Technology Campaign of the U.S. Department of Energy Office of Nuclear Energy, Office of Spent Fuel and Waste Disposition is conducting research and development on geologic disposal of spent nuclear fuel and high-level nuclear waste. This work includes the Geologic Disposal Safety Assessment (GDSA) program which is charged with development of generic deep geologic repository concepts and system performance assessment models. One part of the GDSA framework is the development of a biosphere model capable of assessing doses to potential receptors exposed to radionuclides released from geologic disposal sites. As part of the GDSA framework, a biosphere model compatible with the PFLOTRAN massively parallel subsurface flow and reactive transport code is under development. The PFLOTRAN model provides the radionuclide source term for the biosphere model. The GDSA Biosphere model then assesses the potential movement of radionuclides through the surface biosphere and the subsequent exposure to a human receptor living in the biosphere. The biosphere model includes pathways originating from the groundwater as well as pathways originating from surface water bodies that have a water exchange with a contaminated groundwater body. The pathways for human exposure include consumption of drinking water, irrigated crops, meat animals, aquatic vegetation, and animals, etc.; external exposure from irrigated ground surfaces, surface water bodies, recreational activities, etc.; and inadvertent exposures such as ingestion of contaminated soils or shower water, etc. The GDSA Biosphere model was designed to be flexible and generic in order to accommodate a variety of different sites and climate states. This presentation will present the on the purpose, design, and development progress of the GDSA Biosphere Model.

GDSA, biosphere, repository↗
NASA NTRSDate not supplied

In-Time Safety Assessment & Risk Prediction for Unmanned Aerial Systems

One of the critical challenges in emerging autonomous systems is timely mitigation of hazards encountered during operation which may not be known or accounted for at the time of design. Efficient execution of unmanned systems therefore demands a paradigm shift from scheduled periodic maintenance to predictive risk analysis that includes condition-based-monitoring, real-time reliability assessment and hazard mitigation. Particularly, the state-of-health parameters needs to be computed at the component level, unit level as well as the integrated system level. While in the former two levels, the physics of health propagation may be based on underlying electro-mechanical properties, system level prognostics often relies on data-driven models. Further, uncertainty from model, measurements and input sources should be accurately quantified to generate meaningful prediction results that can be fed into reliable decision making processes. Finally, the expected risk and time to failure has to be computed based on the current state-of-health of the overall system. This talk presents a conceptual design of such an in-time safety assurance approach for unmanned aerial vehicles (UAV) operating at low altitudes near and over populated areas. Typical in-flight hazard incidents include unplanned detour, proximity to obstacles, mid-flight component faults, limited battery life and poor quality of GPS measurements. Safety assessment therefore comprises trajectory generation and re-plan, battery RUL computation, distributed fault diagnostics and uncertainty management of predicted trajectory based on GPS measurement noise. The entire monitoring framework will be demonstrated on simulated as well as real UAV flight experiments conducted at the NASA Langley Research Center. This tutorial will therefore guide the audience through a step-by-step tracking of an autonomous system with focus on in-time risk prediction in the presence of unforeseen hazards and uncertain environment.

diagnostics↗
NASA NTRS2020

EDL Simulation Results for the Mars 2020 Landing Site Safety Assessment

The Mars 2020 rover is NASA’s next flagship mission, set to explore Mars in search of scientific evidence of past microbial life. Importantly, the rover will also, for the first time, have the ability to collect and cache rock and soil samples for retrieval and return to laboratories here on Earth. A key step in the development of the Mars 2020 mission is the selection of a suitable landing site with the largest likelihood of meeting scientific goals. This decision is a complex and critical one that requires close interaction between the scientific and engineering communities. The chosen landing site must be both scientifically interesting — providing the project with the greatest possible chance of gathering credible and defendable scientific evidence — and also safe enough to attempt a landing in the first place. Thus, arguably one of the most important undertakings of the Entry, Descent, and Landing (EDL) team, is to effectively enumerate, quantify, and communicate the landing risks to all of the stakeholders. The culmination of this effort is the Landing Site Safety Assessment, which is a review commissioned by the project, presided over by the EDL Standing Review Board, and attended by management and science stakeholders, in which the EDL team communicates their assessment of the associated landing risks and the statistical probability of a successful landing at each of the final candidate landing sites. This paper summarizes the results of high-fidelity computer simulations of the Mars 2020 EDL sequence used in this assessment. From an EDL performance perspective, all four candidates offer similar level of robustness, which is in-family with Mars Science Laboratory (MSL). However, two new features of the Mars 2020 EDL sequence – range trigger and Terrain-Relative Navigation (TRN) – dramatically enhance the capability of the EDL system to safely land at landing sites with much more rugged terrain than ever before considered. This has allowed the landing site selection for Mars 2020 to proceed in a manner that has been unprecedentedly weighted more heavily toward scientific interest and less heavily on engineering constraints. With TRN, the overall probability of success is predicted to be approximately 99% for all of the candidates.

David Way↗