Some structural principles of flight control and navigation systems
Flight control and navigation instruments
FLIGHT CONTROL↗
SEARCH · Engineering Papers
Results for “instrumentation and control system”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Microprocessor-based interface for oceanography
Ocean floor imaging system incorporates five identical microprocessor-based interface units each assigned to specific sonar instrument to simplify system. Central control module based on same microprocessor eliminates need for custom tailoring hardware interfaces for each instrument.
Hansen, G. R.↗
Advanced communications technology satellite high burst rate link evaluation terminal communication protocol software user's guide, version 1.0
The Communication Protocol Software was developed at the NASA Lewis Research Center to support the Advanced Communications Technology Satellite High Burst Rate Link Evaluation Terminal (ACTS HBR-LET). The HBR-LET is an experimenters terminal to communicate with the ACTS for various experiments by government, university, and industry agencies. The Communication Protocol Software is one segment of the Control and Performance Monitor (C&PM) Software system of the HBR-LET. The Communication Protocol Software allows users to control and configure the Intermediate Frequency Switch Matrix (IFSM) on board the ACTS to yield a desired path through the spacecraft payload. Besides IFSM control, the C&PM Software System is also responsible for instrument control during HBR-LET experiments, uplink power control of the HBR-LET to demonstrate power augmentation during signal fade events, and data display. The Communication Protocol Software User's Guide, Version 1.0 (NASA CR-189162) outlines the commands and procedures to install and operate the Communication Protocol Software. Configuration files used to control the IFSM, operator commands, and error recovery procedures are discussed. The Communication Protocol Software Maintenance Manual, Version 1.0 (NASA CR-189163, to be published) is a programmer's guide to the Communication Protocol Software. This manual details the current implementation of the software from a technical perspective. Included is an overview of the Communication Protocol Software, computer algorithms, format representations, and computer hardware configuration. The Communication Protocol Software Test Plan (NASA CR-189164, to be published) provides a step-by-step procedure to verify the operation of the software. Included in the Test Plan is command transmission, telemetry reception, error detection, and error recovery procedures.
Reinhart, Richard C.↗
An Analysis of Exploration Capability Gaps for Future Habitation Systems to Inform Risk Assessment and Development Priorities
Within NASA, exploration capability gaps are defined as the difference between the current state-of-the-art in capabilities and the anticipated needs of future human spaceflight architectures. As NASA and its partners’ capabilities for human exploration of deep space continue to mature, it is necessary to understand the capability gaps that require closure to support future habitation systems, such as the Lunar Surface Habitat (SH) and Mars Transit Habitat (TH) currently in concept development. This paper will identify high-priority capability gaps for exploration habitation and show potential options for gap closure through investment in technology, development, and testing. High-priority capability gaps are divided into the following general taxonomy areas: human health/life support/habitation systems, flight computing and avionics, power and energy storage, communications and navigation, thermal management systems, human exploration destination systems, autonomous systems, sensors and instruments, GNC (guidance, navigation, and control), robotic systems, ground and uncrewed surface systems, and materials/structures/mechanical systems/manufacturing. In the gap identification process, teams of discipline experts from across NASA reviewed the latest habitation architecture needs against current capabilities to understand where gaps may exist. The results of the assessment established a basis for the current state-of-the-art within each gap and identified the capability needs of the proposed exploration missions the gap links to. An assessment of how each test platform (e.g., Ground, International Space Station (ISS), Commercial Low Earth Orbit (LEO) Destinations, Gateway) may be leveraged to mature capabilities and potentially provide a route to gap closure will be discussed. The notional timeline for gap closure to support reference missions and impacts to overall schedule are also assessed where appropriate. Based on the capability gap analysis described above, the paper summarizes important technology maturation considerations for human exploration architectures, with a focus on the Mars TH. The previously published NASA habitation ground rules and assumptions document is used as the basis to classify gaps as enabling, enhancing, or “push” opportunities for a particular architecture. Stepwise technology maturation plans/considerations are presented for some selected critical gaps. Overall, the analysis in this paper is intended to help influence development priorities for habitation systems, where high-priority, critical gaps are those currently assessed as having a low probability of closure by the anticipated need date. Capability gap analysis also informs the risk register for exploration habitation systems and mitigation strategies to ensure readiness of key technologies to support future mission timelines. Linkage between capability gaps for Moon and Mars is noted, as closure of a gap at a Lunar destination may subsequently enable or enhance Mars TH architectures.
technology development↗
An Analysis of Exploration Capability Gaps for Future Habitation Systems to Inform Risk Assessment and Development Priorities
Within NASA, exploration capability gaps are defined as the difference between the current state-of-the-art in capabilities and the anticipated needs of future human spaceflight architectures. As NASA and its partners’ capabilities for human exploration of deep space continue to mature, it is necessary to understand the capability gaps that require closure to support future habitation systems, such as the Lunar Surface Habitat (SH) and Mars Transit Habitat (TH) currently in concept development. This paper will identify high-priority capability gaps for exploration habitation and show potential options for gap closure through investment in technology, development, and testing. High-priority capability gaps are divided into the following general taxonomy areas: human health/life support/habitation systems, flight computing and avionics, power and energy storage, communications and navigation, thermal management systems, human exploration destination systems, autonomous systems, sensors and instruments, GNC (guidance, navigation, and control), robotic systems, ground and uncrewed surface systems, and materials/structures/mechanical systems/manufacturing. In the gap identification process, teams of discipline experts from across NASA reviewed the latest habitation architecture needs against current capabilities to understand where gaps may exist. The results of the assessment established a basis for the current state-of-the-art within each gap and identified the capability needs of the proposed exploration missions the gap links to. An assessment of how each test platform (e.g., Ground, International Space Station (ISS), Commercial Low Earth Orbit (LEO) Destinations, Gateway) may be leveraged to mature capabilities and potentially provide a route to gap closure will be discussed. The notional timeline for gap closure to support reference missions and impacts to overall schedule are also assessed where appropriate. Based on the capability gap analysis described above, the paper summarizes important technology maturation considerations for human exploration architectures, with a focus on the Mars TH. The previously published NASA habitation ground rules and assumptions document is used as the basis to classify gaps as enabling, enhancing, or “push” opportunities for a particular architecture. Stepwise technology maturation plans/considerations are presented for some selected critical gaps. Overall, the analysis in this paper is intended to help influence development priorities for habitation systems, where high-priority, critical gaps are those currently assessed as having a low probability of closure by the anticipated need date. Capability gap analysis also informs the risk register for exploration habitation systems and mitigation strategies to ensure readiness of key technologies to support future mission timelines. Linkage between capability gaps for Moon and Mars is noted, as closure of a gap at a Lunar destination may subsequently enable or enhance Mars TH architectures.
technology development↗
Advanced Human-System Interface Risk Analysis Based on Redundancy-guided Systems-theoretic Hazard Analysis and Human Reliability Analysis
Human-system interfaces (HSIs) play an important role in enabling operators to communicate with the nuclear power plant (NPP) side. Getting the information required to understand a NPP’s current status or perform necessary actions for responding to a given operational context are representative operator tasks performed using HSIs. To date, HSIs have been mainly evaluated in the context of human reliability analysis (HRA). However, the current HSI evaluation that occurs during HRA may be challengeable on two fronts: (1) reflecting the unique characteristics of HSI systems and (2) considering situations in which HSIs are poorly operated due to software/hardware malfunctions. Accordingly, this study proposes an approach for specifically evaluating HSIs for digital instrumentation and controls (DI&C) systems, using Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) and HRA. RESHA is a method for analyzing DI&C systems with redundancy features. In this study, we investigate how HSIs are evaluated in existing HRA methods, and what challenges exist in the current approaches. To better evaluate HSIs for DI&C systems, this study modifies the existing HSI evaluation process by additionally modeling the HSI back- and front- ends. In this paper, a HSI fault tree for the APR1400 DI&C system is introduced through a piping and instrumentation diagram. It then touches upon what aspects of the suggested method must be further researched.
99 GENERAL AND MISCELLANEOUS↗
All-digital jets are taking off
The functions and advantages of second-generation digital avionics systems are described. These digital systems have increased integration, increased reliability and flexibility, and improved man-machine interface, and they provide increases in the mean time between removal of line-replacable units and fuel savings. Different redundant processors and software are utilized to achieve fault-tolerance performance of flight control systems. The improved landing capabilities, front-panel instruments, sidestick controllers, back-lighted liquid-crystal displays, and fly-by-wire system possible with digital avionics are examined. The applications of digital avionics to military and commercial aircraft are discussed and examples are provided.
Spitzer, C. R.↗
Nuclear Safety [Vol. 34, No. 1, January-March 1993]
Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 An Integrated Regional Approach To Risk Management of Industrial Systems, S. Chakraborty and R. Stratton; 9 Annual Technical Meeting of the NRC Cooperative Severe Accident Research Program, E. G. Silver; ACCIDENT ANALYSIS: 13 Deterministic Severe Accident Criteria as Severe Accident Design Criteria and Policy for the New Production Reactor-Heavy Water Reactor, P. T. Rhoads; 20 Proposed Deterministic Severe Accident Criteria for the Heavy Water Reactor-New Production Reactor Containment, K. D. Bergeron, S. E. Slezak, and C. E. Leach; 33 Quasi-Static Core Liquid Level Depression and Long-Term Core Uncovery During a PWR LOCA, Y. Kukita, R. R. Schultz, H. Nakamura, and J. Katayama; 49 LIRA: An Advanced Containment System to Minimize the Accidental Radioactivity Releases, A. Turricchia; 63 Errata to “A Review of Hydrogen Production During Melt/Water Interaction in LWRs,” Vol. 33, No. 4; CONTROL AND INSTRUMENTATION: 64 The Nuplex 80+™ Advanced Control Complex from ABB Combustion Engineering, F. Ridolfo, D. Harmon, and K. Scarola; DESIGN FEATURES: 76 A Scheme for Passive Isolation of the Containment of a Reactor, A. K. Ghosh, V. V. Raj, and K. Kakodkar; 84 Utility Requirements for Safety in the Passive Advanced Light-Water Reactor, T. U. Marston, W. H. Layman, and G. Bockhold, Jr.; WASTE AND SPENT FUEL MANAGEMENT: 91 Activities Related to Waste and Spent Fuel Management, Compiled by M. D. Muhlheim and E. G. Silver; OPERATING EXPERIENCES: 103 Testing Deficiencies in Auxiliary Systems Feedwater Systems, J. D. Kueck; 110 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 113 Selected Safety-Related Events, Compiled by G. A. Murphy; 115 Operating U.S. Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver; RECENT DEVELOPMENTS: 133 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 145 Reports, Standards, and Safety Guides, D. S. Queener; 150 Proposed Rule Changes as of Sept. 30, 1992; ANNOUNCEMENTS: 75 Harvard Short Course on Risk: Science, Assessment, and Management; 102 International Conference on Reactor Physics and Reactor Computations; 102 The Fourth International Conference on Nuclear Waste Reprocessing and Waste Management [RECOD ’94]; 132 International Symposium on the Radiological Exposure of the Population of the European Community from Radioactivity in the Mediterranean Sea [MARINA-MED]; 162 International High-Level Radioactive Waste Conference ‘Technology Integration—Above and Below”; 154 The Authors; 158 Indexes to Nuclear Safety, Volume 33.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Measuring Surface Bulk Elemental Composition on Venus
The extreme surface environment (462 C, 93 bars pressure) of Venus makes subsurface measurements of its bulk elemental composition extremely challenging. Instruments landed on the surface of Venus must be enclosed in a pressure vessel. The high surface temperatures also require a thermal control system to keep the instrumentation temperatures within their operational range for as long as possible. Since Venus surface probes can currently operate for only a few hours, it is crucial that the lander instrumentation be able to make statistically significant measurements in a short time. An instrument is described that can achieve such a measurement over a volume of thousands of cubic centimeters of material by using high energy penetrating neutron and gamma radiation. The instrument consists of a Pulsed Neutron Generator (PNG) and a Gamma-Ray Spectrometer (GRS). The PNG emits isotropic pulses of 14.1 MeV neutrons that penetrate the pressure vessel walls, the dense atmosphere and the surface rock. The neutrons induce nuclear reactions in the rock to produce gamma rays with energies specific to the element and nuclear process involved. Thus the energies of the detected gamma rays identify the elements present and their intensities provide the abundance of each element. The GRS spectra are analyzed to determine the Venus elemental composition from the spectral signature of individual major, minor, and trace radioactive elements. As a test of such an instrument, a Schlumberger Litho Scanner oil well logging tool was used in a series of experiments at NASA's Goddard Space Flight Center. The Litho Scanner tool was mounted above large (1.8 m x 1.8 m x.9 m) granite and basalt monuments and made a series of one-hour elemental composition measurements in a planar geometry more similar to a planetary lander measurement. Initial analysis of the results shows good agreement with target elemental assays
Venus↗
Multi-Angle Imager for Aerosols Thermal Control System
The Multi-Angle Imager for Aerosols (MAIA) Thermal Control System is a NASA funded instrument that will collect data to help characterize airborne particulate matter over a number of population centers across the globe using multi-angle spectropolarimetric imagery. The data collected by MAIA will facilitate assessments of the impacts of different types of particulate matter on adverse health outcomes. MAIA is a hosted payload meant to operate in a near-circular sun-synchronous polar orbit, with a mean altitude between 600 km and 850 km. The nominal on-orbit mission design lifetime is three years. Temperature control of the MAIA instrument is accomplished with a combination of passive radiators and heaters. The focal plane module (FPM) is cooled to ≤ 235K with a disc shaped radiator that faces the anti-sun side of the sun-synchronous orbit. The temperature of the MAIA cameras and associated electronics is controlled with a cylindrical shaped radiator that projects a near constant area in the nadir direction as the cameras rotate. A noteworthy feature of the MAIA thermal control system design is the novel, low cost, rotationally articulating thermal strap used to transfer heat from the FPMs to their associated FPM Radiator. The strap spans one of the axes of rotation, sweeping out an arc of approximately 60° as the instrument operates. A prototype of the articulating thermal strap was life tested to 260,000 cycles with no signs of significant degradation. An overview of the MAIA thermal control system baseline design is presented, with focus on its novel aspects, including life testing of the prototype articulating thermal strap. In addition, a discussion of the considerations involved in designing a thermal control system for a hosted instrument is provided.
Rosas, Rogelio↗
Reactor instrumentation and control design and performance simulation for SP-100
The SP-100 flight system will be launched with all primary and secondary lithium in the solid state. Once in orbit, the reactor will be brought critical and maintained at a low power level while the lithium is thawed out. Once the system is thawed out, the reactor power will be controlled to provide the energy source required by the power conversion system to meet the payload electrical power requirements. The Reactor Instrumentation and Control subsystem which includes the reactor control drives, instrumentation and the digital controller provides for the control of the nuclear subsystem to perform these operating maneuvers as well as providing for automatic shutdown and restart under certain off-normal conditions. The design and performance of this system are described.
Meyer, R. A.↗
Development and Testing of a Variable Conductance Thermal Acquisition, Transport, and Switching System
This paper describes the development and testing of a scalable thermal control architecture for instruments, subsystems, or systems that must operate in severe space environments with wide variations in sink temperature. The architecture is comprised by linking one or more hot-side variable conductance heat pipes (VCHPs) in series with one or more cold-side loop heat pipes (LHPs). The VCHPs provide wide area heat acquisition, limited distance thermal transport, modest against gravity pumping, concentrated LHP startup heating, and high switching ratio variable conductance operation. The LHPs provide localized heat acquisition, long distance thermal transport, significant against gravity pumping, and high switching ratio variable conductance operation. Combining two variable conductance devices in series ensures very high switching ratio isolation from severe environments like the Earth's moon, where each lunar day spans 15 Earth days (270 K sink, with a surface-shielded/space viewing radiator) and each lunar night spans 15 Earth days (80-100 K radiative sink, depending on location). The single VCHP-single LHP system described herein was developed to maintain thermal control of International Lunar Network (ILN) anchor node lander electronics, but it is also applicable to other variable heat rejection space missions in severe environments. The LHPVCHP system utilizes a stainless steel wire mesh wick ammonia VCHP, a Teflon wick propylene LHP, a pair of one-third square meter high radiators (one capillary-pumped horizontal radiator and a second gravity-fed vertical radiator), a half-meter of transport distance, and a wick-bearing co-located flow regulator (CLFR) to allow operation with a hot (deactivated) radiator. The VCHP was designed with a small reservoir formed by extending the length of its stainless steel heat pipe tubing. The system was able to provide end-to-end switching ratios of 300-500 during thermal vacuum testing at ATK, including 3-5 W/K ON conductance and 0.01 W/K OFF conductance. The test results described herein also include an in-depth analysis of VCHP condenser performance to explain VCHP switching operation in detail. Future multi-VCHP/multi-LHP thermal management system concepts that provide scalability to higher powers/longer transport lengths are also discussed in the paper.
Bugby, D. C.↗
Nuclear Safety [Vol. 35, No. 2, July-December 1994]
Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 179 Consideration of Postaccident Consequences in the Determination of Safety Objectives for Future Nuclear Power Plants in France, D. Queniart, A. Sugier, and J. Lochard; ACCIDENT ANALYSIS: 187 Nuclear Safety Research: The Phebus FP Severe Accident Experimental Program, P. von der Hardt, A. V. Jones, C. Lecomte, and A. Tattegrain; 205 Containment Performance Analysis of the Advanced Neutron Source Reactor at the Oak Ridge National Laboratory, S. H. Kim, R. P. Taleyarkhan, and V. Georgevich; 213 Assessment of Fission Product Deposits in the Reactor Coolant System: The DEVAP Program, G. Le Marois and M. Megnin; 222 Erratum to “A Review of the Available Information on the Triggering Stage of a Steam Explosion," Vol. 35, No. 1, CONTROL AND INSTRUMENTATION: 223 Effects of Normal Aging on Calibration and Response Time of Nuclear Plant Resistance Temperature Detectors and Pressure Sensors, H. M. Hashemian; DESIGN FEATURES: 235 Defense in Depth Against the Hydrogen Risk—A European Research Program, F. Fineschi; ENVIRONMENTAL EFFECTS: 246 Technical Note: A Preliminary Analysis of the Risks to Hong Kong Resulting from Potential Accidents of Daya Bay Nuclear Power Plant, Z. Shi and X. Wei; OPERATING EXPERIENCES: 253 Reactor Shutdown Experience, Compiled by J. W. Cletcher; SPECIAL SECTION ON TMI-2 VESSEL INVESTIGATION PROJECT: 256 Three Mile Island—New Findings 15 Years After the Accident A. M. Rubin and E. Beckjord; 269 Relocation of Molten Material to the TMI-2 Lower Head, J. R. Wolf, D. W. Akers, and L. A. Neimark; 280 Insight Into the TMI-2 Core Material Relocation Through Examination of Instrument Tube Nozzles, L. A. Neimark; 288 Physical and Radiochemical Examinations of Debris from the TMI-2 Lower Head, D. W. Akers and B. K. Schuetz; 301 Results of Metallographic Examinations and Mechanical Tests of Pressure Vessel Samples from the TMI-2 Lower Head, D. R. Diercks and G. E. Korth; 313 Margin-to-Failure Calculations for the TMI-2 Vessel, J. Rempe, L. Stickler, S. Chavez, G. Thinnes, R. Witt, and M. Corradini; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 328 1993 Accident Sequence Precursor (ASP) Program Results, L. N. Vanden Heuvel, J. W. Cletcher, D. A. Copinger, J. W. Minarick, B. W. Dolan, and P. D. O’Reilley; RECENT DEVELOPMENTS: 339 Reports, Standards, and Safety Guides, D. S. Queener; 345 Proposed Rule Changes as of June 30, 1994; ANNOUNCEMENTS: 234 Thirty-First Annual Meeting of the National Council on Radiation Protection and Measurements; 356 1995 International Incineration Conference; 358 Fifth International Controls and Instrumentation Conference; 359 ANS International Topical Meeting on Safety of Operating Reactors; 359 Fifth International Conference on Nuclear Criticality Safety; 360 International Conference on Probabilistic Safety Assessment Methodology and Applications; 351 The Authors; 357 Reviewers of Nuclear Safety, Vol. 35.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
The NASA Langley Research Center's Unmanned Aerial System Surrogate Research Aircraft
Research is needed to determine what procedures, aircraft sensors and other systems will be required to allow Unmanned Aerial Systems (UAS) to safely operate with manned aircraft in the National Airspace System (NAS). The NASA Langley Research Center has transformed a Cirrus Design SR22 general aviation (GA) aircraft into a UAS Surrogate research aircraft to serve as a platform for UAS systems research, development, flight testing and evaluation. The aircraft is manned with a Safety Pilot and systems operator that allows for flight operations almost anywhere in the NAS without the need for a Federal Aviation Administration (FAA) Certificate of Authorization (COA). The UAS Surrogate can be controlled from a modular, transportable ground station like a true UAS. The UAS Surrogate is able to file and fly in the NAS with normal traffic and is a better platform for real world UAS research and development than existing vehicles flying in restricted ranges or other sterilized airspace. The Cirrus Design SR22 aircraft is a small, singleengine, four-place, composite-construction aircraft that NASA Langley acquired to support NASA flight-research programs like the Small Aircraft Transportation System (SATS) Project. Systems were installed to support flight test research and data gathering. These systems include: separate research power; multi-function flat-panel displays; research computers; research air data and inertial state sensors; video recording; data acquisition; data-link; S-band video and data telemetry; Common Airborne Instrumentation System (CAIS); Automatic Dependent Surveillance-Broadcast (ADS-B); instrumented surfaces and controls; and a systems operator work station. The transformation of the SR22 to a UAS Surrogate was accomplished in phases. The first phase was to modify the existing autopilot to accept external commands from a research computer that was connected by redundant data-link radios to a ground control station. An electro-mechanical auto-throttle was added in the next phase to provide ground station control of airspeed. Additional phases are in progress to add waypoint navigation and long range satellite voice and data communications. Potential areas for UAS Surrogate research include the development, flight test and evaluation of sensors to aid in the process of air traffic detect-sense-and-avoid. These sensors could be evaluated in real-time and compared with onboard human evaluation pilots. This paper describes the systems and design considerations that were incorporated in the development of the UAS Surrogate along with details of development problems encountered and the corresponding solutions.
Howell, Charles T., III↗
Cyber Risk Considerations for Nuclear Digital I&C Systems
Many engineers and scientists researching modeling and analysis methods for nuclear energy advancement are focused on proof-of-concept and early-stage development for new reactor designs. Since instrumentation and control (I&C) systems are traditionally developed later in the systems engineering lifecycle, researchers may be unfamiliar with modern digital technology used in these I&C systems. It is even more likely that they are unfamiliar with the cyber risks associated with them. This paper provides a brief overview of nuclear digital I&C systems before examining the importance of cyber risk management at nuclear reactors and the benefits of including Cyber-Informed Engineering throughout the systems engineering lifecycle. The primary goal is for engineers and scientists to develop a mindset that incorporates cybersecurity as another discipline alongside safety when designing and developing new technologies, regardless of technology readiness level.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Overview and Recommendations for Cyber Risk Assessment in Nuclear Power Plants
Digital instrumentation and control (I&C) systems are being deployed in nuclear power plants (NPPs) for both existing and advanced reactor designs. As I&C systems become more digitized to allow features like near autonomous control and remote operation, they introduce greater cyber risk to NPPs. Cyberattacks targeting industrial control systems (ICSs) are growing in both qualities and capabilities, which indicates that cybersecurity needs to be an integral part of risk assessment in the industry. Although there are some risk assessment methods in traditional information technology (IT) cybersecurity, the differences between IT and ICS cybersecurity make it infeasible to apply these risk assessment methods directly to ICSs. Some research has focused on risk assessment methods for ICSs, but few studies focus on applications to NPPs. Ideal risk frameworks for the nuclear industry are dynamic and account for system dependencies; this survey review focuses on such risk assessment methods both in and outside the nuclear field. In this article, the major challenges in cybersecurity risk assessment research are pointed out, and further research suggestions and considerations for cyber risk assessment in I&C systems are identified.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
The Keck Task Library (KTL)
KTL is a set of routines which eases the job of writing applications which must interact with a variety of underlying sub-systems (known as services). A typical application is an X Window user interface coordinating telescope and instruments. In order to connect to a service, application code specifies a service name--typically an instrument name--and a style, which defines the way in which the application will interact with the service. Two styles are currently supported: keyword, where the application reads and writes named keywords and the resulting inter-task message traffic is hidden; and message, where the application deals directly with messages. The keyword style is intended mainly for user interfaces, and the message style is intended mainly for lower-level applications. KTL applications are event driven: a typical application first connects to all its desired services, then expresses interest in specified events. The application then enters an event dispatch loop in which it waits for events and calls the appropriate service's event-handling routine. Each event is associated with a call-back routine which is invoked when the event occurs. Call-back routines may (and typically do) interact with other sub-systems and KTL provides the means of doing so without blocking the application (vital for X Window user interfaces). This approach is a marriage of ideas culled from the X window, ADAM, Keck instrument, and Keck telescope control systems. A novel feature of KTL is that it knows nothing about any services or styles. Instead it defines a generic set of routines which must be implemented by all services and styles (essentially open(), ioctl(), read(), write(), event(), and close()) and activates sharable libraries at run-time. Services have been implemented (in both keyword and message styles) for HIRES (the Keck high resolution echelle spectrograph built by Lick Observatory), LWS (the Keck long wavelength spectrometer built by UC San Diego), and the Keck telescope. Each of these implementations uses different underlying message systems: the Lick MUSIC system, RPC's, and direct sockets (respectively). Services for the remaining three front-line Keck instruments will be implemented over the next few months.
Lupton, W. F.↗
Spacecraft and mission design for the SP-100 flight experiment
The design and performance of a spacecraft employing arcjet nuclear-electric propulsion, suitable for use in the SP-100 space-reactor power-system (SRPS) flight experiment, are outlined. The vehicle design is based on a 93-kWe ammonia arcjet system operating at an experimentally measured specific impulse of 1031 sec and an efficiency of 42.3 percent. The arcjet/gimbal assemblies, power conditioning subsystem, propellant feed system, propulsion system thermal control, spacecraft diagnostic instrumentation, and the telemetry requirements are described. A 100-kWe SRPS is assumed. The spacecraft mass is baselined at 5675 kg, excluding the propellant and propellant feed system. Four mission scenarios are described which are capable of demonstrating the full capability of the SRPS.
Deininger, William D.↗