Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Behavior based safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

MARGInS Model-Based Analysis of Realizable Goals in Systems

The high complexity of modern aircraft and spacecraft requires elaborate Verification and Validation (V&V) approaches to make sure that such complex systems work properly and reliably. MARGInS is a framework for the analysis, understanding, and prediction of the behavior of a complex, hybrid system. MARGInS contains a set of machine learning and statistical algorithms for multivariate clustering, treatment learning, critical factor determination, time-series analysis, event prediction, and safety-boundary detection and characterization. The framework supports system testing and can be configured to find novel features in test suites, determine classes of behavior, propose new experiments that can efficiently explore and characterize the boundaries between classes of system behavior, and to create visualizations and reports.

He, Yuning↗

Assessment of the BISON Metallic Fuel Performance Models

The US Department of Energy is leading a project to design and construct a fast spectrum test reactor called the Versatile Test Reactor (VTR). The BISON nuclear fuel performance code will be used to model VTR driver fuel, including looking at the effects of differences between the VTR driver fuel element design and the legacy fuel designs and experiments on which it is based. Simulations will be conducted to help determine whether the design’s behavior and performance are properly understood and to assess the margins to cladding failure and fuel melting relative to those predicted for past metallic fuel experiments. These predictions are expected to streamline VTR design and operation by helping inform the VTR driver fuel element design and by providing supplemental information for the fuel design safety basis.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

CFD Analysis of Upper Plenum Flow for a Sodium-Cooled Small Modular Reactor

Upper plenum flow behavior is important for many operational and safety issues in sodium fast reactors. The Prototype Gen-IV Sodium Fast Reactor (PGSFR), a pool-type, 150 MWe output power design, was used as a reference case for a detailed characterization of upper plenum flow for normal operating conditions. Computational Fluid Dynamics (CFD) simulation was utilized with detailed geometric modeling of major structures. Core outlet conditions based on prior system-level calculations were mapped to approximate the outlet temperatures and flow rates for each core assembly. Core outlet flow was found to largely bypass the Upper Internal Structures (UIS). Flow curves over the shield and circulates within the pool before exiting the plenum. Cross-flows and temperatures were evaluated near the core outlet, leading to a proposed height for the core outlet thermocouples to ensure accurate assembly-specific temperature readings. A passive scalar was used to evaluate fluid residence time from core outlet to IHX inlet, which can be used to assess the applicability of various methods for monitoring fuel failure. Additionally, the gas entrainment likelihood was assessed based on the CFD simulation results. Based on the evaluation of velocity gradients and turbulent kinetic energies and the available gas entrainment criteria in the literature, it was concluded that significant gas entrainment is unlikely for the current PGSFR design.

computational fluid dynamics↗

Discovering the Regulatory Considerations of the Federal Aviation Administration: Interviewing the Aviation Rulemaking Advisory Committee

Maintenance Resource Management (MRM) training for aviation mechanics has become mandatory in many industrialized countries since 1998. Yet, to date, MRM training remains optional in the U.S. Interestingly, a similar safety discipline, namely Crew/Cockpit Resource Management (CRM), is mandatory for pilots, flight engineers, flight attendants, and dispatchers and is regulated in the Federal Aviation Administration s (FAA) Federal Aviation Regulations (FARs). If MRM training is important to enhance aviation technicians working behavior, the rationale to not regulate it opens a window for study. This research aims to inductively investigate the FAA s regulatory rationale concerning MRM training based on direct inputs from the FAA s Aviation Rulemaking Advisory Committee (ARAC) members. Delphi methodology associated with purposive sampling technique was adopted. The result revealed that the FAA cannot regulate MRM because the aviation industry is strongly opposed to it due to the lack of training budgets, the need of a quantifiable cost-effect analysis, concern over the FAA s inspection workforce, an ongoing voluntary alternative called the Air Transportation Surveillance System (ATOS), the government s lower priority on maintenance after 9/11, and the airlines tight embracement of operational flexibility without regulation.

Lu, Chien-tsung↗

Situational Leadership in Air Traffic Control

In high-risk environments such as air traffic control, leadership on different levels plays a certain role in establishing, promoting, and maintaining a good safety culture. The current study aimed to investigate how leadership styles, leadership style adaptability, and over and under task leadership behavior differed across situations, operative conditions, leadership structures, and working tasks in an air traffic control setting. Study locations were two air traffic control centers in Sweden with different operational conditions and leadership structures, and an administrative air traffic management unit. Leadership was measured with a questionnaire based on Leader Effectiveness and Adaptability Description (LEAD; Blanchard, Zigarmi & Zigarmi, 2003; Hersey & Blanchard, 1988). The results showed that the situation had strong impact on the leadership in which the leadership behavior was more relationship oriented in Success and Group situations than in Hardship and Individual situations. The leadership adaptability was further superior in Success and Individual situations compared with Hardship and Group situations. Operational conditions, leadership structures and working tasks were, on the other hand, not associated with leadership behavior.

Arvidsson, Marcus↗

Drilling, Completion, and Data Collection Plans An Assessment of Geological Carbon Sequestration Options in the Illinois Basin: Phase III

Executive Summary The Illinois Basin – Decatur Project (IBDP) is managed by the Midwest Geological Sequestration Consortium (MGSC) and is led by the Illinois State Geological Survey (ISGS) at the University of Illinois. The project site is located on the Archer Daniels Midland Company (ADM) property in Decatur, Illinois, and is a fully integrated carbon capture and storage (CCS) project that uses CO₂ captured from the ethanol-producing fermentation process at the ADM corn-processing plant (Finley et. al., 2013). IBDP has a goal of injecting one million tonnes of CO₂ into the basal sands of the Mt. Simon Sandstone over a three-year period. This is a multifaceted project, and this report details the planning and results of the drilling, completions, well testing, log data acquisition, and the Health, Safety, and Environment (HSE) aspects of the project. Three deep wells were planned for the IBDP: • The injection well: Injection Well #1 (CCS1); • The monitoring well (both in-zone and above seal): Verification Well #1 (VW1); and • The geophone monitoring well: Geophysical Monitoring Well #1 (GM1). The detailed plans for these wells are attached to the appendices of this document. The wells were drilled successfully with little deviation from the original plans. The biggest change from the plan to execution was the need to adjust for larger-than-expected loss of circulation in the Potosi section of the Knox Formation. The completions reports also attached to this document detail the well constructions as they were actually built. Injectivity testing was carried out, and the perforating plans were adjusted based on the results. Additional perforations and acidizing were performed as a result of the injectivity testing. The testing plans are detailed in this report along with the actual testing results. The injectivity testing results were used in the modeling and simulation efforts. Detailed HSE plans were developed and implemented during the planning and execution phases of the project. The implementation included an HSE Bridging Document, which served to unify the HSE policies of the project partners and key subcontractors. The HSE plan and actual HSE results are presented in this document. There were no recordable HSE incidents during the project. A detailed logging program was developed based on project needs. The log data were acquired in accordance with the plan, and both the plan and log results are presented in this report. Log data were heavily utilized by the research staff, modelers, reservoir engineers, and for technical and permitting efforts. 5 Several key lessons were learned during the project: • Safety in operations and execution is paramount and is only achieved through proper planning and behavior control. The certainty of this was reinforced through implementation of this lesson and the resultant flawless HSE performance during the project. • Losses of drilling fluid circulation were larger than anticipated within the Potosi Formation. Circulation was only recovered through cementing the loss zones. • When possible, minimizing complexity in permit requirements and well designs is preferable. • The size of the wells were outside of the standard experience and expertise typical within the basin, and therefore required substantial planning and ramp-up of contractors and partners to meet project objectives. • With multiple stakeholders and research partners, establishing objectives and requirements early and adhering to change request procedures throughout the project are critical to manage competing data and sampling objectives that may be detrimental to overall progress. The well construction and completion operations were successfully executed, with all wells built in a manner that achieved excellent wellbore integrity. Log planning involved a number of stakeholders and technical specialists. Data collection from logging, coring, and testing was excellent. Time and effort spent with the associated contractors and suppliers to develop a well plan beyond normal scope proved highly successful, resulting in a well-construction and completion project that surpassed expectations. The world-class HSE results also demonstrate the commitment of all stakeholders in the project. The details follow in the body of this document

01 COAL, LIGNITE, AND PEAT↗

Prevention of Over-Pressurization During Combustion in a Sealed Chamber

The combustion of flammable material in a sealed chamber invariably leads to an initial pressure rise in the volume. The pressure rise is due to the increase in the total number of gaseous moles (condensed fuel plus chamber oxygen combining to form gaseous carbon dioxide and water vapor) and, most importantly, the temperature rise of the gas in the chamber. Though the rise in temperature and pressure would reduce with time after flame extinguishment due to the absorption of heat by the walls and contents of the sealed spacecraft, the initial pressure rise from a fire, if large enough, could lead to a vehicle over-pressure and the release of gas through the pressure relief valve. This paper presents a simple lumped-parameter model of the pressure rise in a sealed chamber resulting from the heat release during combustion. The transient model considers the increase in gaseous moles due to combustion, and heat transfer to the chamber walls by convection and radiation and to the fuel-sample holder by conduction, as a function of the burning rate of the material. The results of the model are compared to the pressure rise in an experimental chamber during flame spread tests as well as to the pressure falloff after flame extinguishment. The experiments involve flame spread over thin solid fuel samples. Estimates of the heat release rate profiles for input to the model come from the assumed stoichiometric burning of the fuel along with the observed flame spread behavior. The sensitivity of the model to predict maximum chamber pressure is determined with respect to the uncertainties in input parameters. Model predictions are also presented for the pressure profile anticipated in the Fire Safety-1 experiment, a material flammability and fire safety experiment proposed for the European Space Agency (ESA) Automated Transfer Vehicle (ATV). Computations are done for a range of scenarios including various initial pressures and sample sizes. Based on these results, various mitigation approaches are suggested to prevent vehicle over-pressurization and help guide the definition of the space experiment.

Gokoglu, Suleyman A.↗

Overview of the DOE hydrogen safety, codes and standards program, part 3: Advances in research and development to enhance the scientific basis for hydrogen regulations, codes and standards

Hydrogen fuels are being deployed around the world as an alternative to traditional petrol and battery technologies. As with all fuels, regulations, codes and standards are a necessary component of the safe deployment of hydrogen technologies. There has been a focused effort in the international hydrogen community to develop codes and standards based on strong scientific principles to accommodate the relatively rapid deployment of hydrogen-energy systems. The need for science-based codes and standards has revealed the need to advance our scientific understanding of hydrogen in engineering environments. Here, this brief review describes research and development activities with emphasis on scientific advances that have aided the advancement of hydrogen regulations, codes and standards for hydrogen technologies in four key areas: (1) the physics of high-pressure hydrogen releases (called hydrogen behavior); (2) quantitative risk assessment; (3) hydrogen compatibility of materials; and (4) hydrogen fuel quality.

08 HYDROGEN↗

Defining A Modelling Language to Support Functional Hazard Assessment

Functional Hazard Assessment (FHA) is a key early-stage engineering process that supports the incorporation of safety in design by identifying the high-level functional hazards the system may encounter. While many FHA-like methodologies have been proposed in the design engineering literature, many of these methodologies have had difficulty becoming accepted industry practice. Industry standards, on the other hand, either provide little recommendation on how to represent the function of the system to perform FHA, or rely on readily-available models with little justification in design theory. This paper presents some of the problems with current modelling languages used for FHA which limit the scope, expressiveness, flexibility, and precision of the analysis, as well as desirable principles an FHA-supporting analysis language should embody. It further introduces the Functional Reasoning Design Language (FRDL), a formal modelling language for describing the functional behaviors of a system and their interactions which satisfies these principles. To demonstrate the use of this language, the modelling and hazard analysis of a disaster response drone is presented.

safety analysis↗

Modeling Approach for the Aluminum-clad Dry Storage Pilot using HFIR Fuel

To confirm that the dry storage of aluminum-clad research reactor spent nuclear fuel (ASNF) will remain within the safety envelope after applied drying schemes and that the resulting evolution of the gas space composition, temperature, and pressure conditions are understood, a dry storage pilot project is being established. The pilot will incorporate an instrumented lid for discrete interval or for on-demand gas composition and temperature monitoring of two DOE Standard Canisters (DSCs) loaded with three High Flux Isotope Reactor (HFIR) inner cores per DSC. Each DSC would be subjected to a separate alternative candidate drying scheme. Canisters will undergo 1 to 5 years of monitoring, including internal temperature and gas sampling to track pressure and composition changes. This report outlines the approach for modeling the ASNF-in-canister behavior in terms of evolving gas space conditions for the ASNF dry storage pilot using HFIR fuel. The ASNF has an adherent surface oxyhydroxide layer comprised of boehmite/bayerite that generates hydrogen when subjected to irradiation. Three-dimensional multi-physics computational fluid dynamics simulations will be executed to compute the thermal field within the DSC and provide inputs to a chemical model employed to compute pressure buildup as hydrogen is generated in the system. Implemented in Cantera, the chemical model solves gas phase and aluminum oxyhydroxide surface-mediated radiolysis reactions. Gas phase reactions are sourced from Wittman and Hanson (2015), whereas surface-mediated reactions are incorporated by fitting experimental data using an optimization algorithm (Abboud, 2023). Water radiolysis reactions from Wren and Ball (2001) are adopted with modifications as described in Abboud (2023c). Understanding the effect of the hydrogen buildup over time is important for long-term storage safety considerations. Modeling results will include the canister pressure, temperature, and composition evolution from the initial helium backfill with the addition of radiolytically-evolved chemical species (e.g., hydrogen and oxygen). The specific HFIR cores for the pilot program have not yet been selected, and the overall design is still in development. The CFD-chemical model used for this work will be based on prior models with necessary updates to allow for improved accuracy and efficiency. The experimental data obtained from the HFIR demonstration will be used to improve and validate the computational models to predict the ASNF-in-canister behavior.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Can we safely go to 200 °C? An integrated approach to assessing impacts to the engineered barrier system in a high-temperature repository

Abstract. This presentation gives on overview of the complex thermo-hydro-mechanical-chemical (THMC) processes occurring during the disposal of heat-producing high-level radioactive waste in geologic repositories. A specific focus is on the role of compacted bentonite, which is commonly used as an engineered backfill material for emplacement tunnels because of its low permeability, high swelling pressure, and radionuclide retention capacity. Laboratory and field tests integrated with THMC modeling have provided an effective way to deepen our understanding of temperature-related perturbations in the engineered barrier system; however, most of this work has been conducted for maximum temperatures around 100 ∘C. In contrast, some international disposal programs have recently started investigations to understand whether local temperatures in the bentonite of up to 200 ∘C could be tolerated with no significant changes to safety relevant properties. Raising the maximum temperature is attractive for economical and safety reasons but faces the challenge of exposing the bentonite to significant temperature increases. Strong thermal gradients may induce complex moisture transport processes while geochemical processes, such as cementation and perhaps also illitization effects may occur, all of which could strongly affect the bentonite and near-field rock properties. Here, we present initial investigations of repository behavior exposed to strongly elevated temperatures. We will start discussing our current knowledge base for temperature effects in repositories exposed to a maximum temperature of 100 ∘C, based on data and related modeling analysis from a large heater experiment conducted for over 18 years in the Grimsel Test Site in Switzerland. We then show results from coupled THMC simulations of a nuclear waste repository in a clay formation exposed to a maximum temperature of 200 ∘C. We also explore preliminary data from a bench-scale laboratory mock-up experiment, which was designed to represent the strong THMC gradients occurring in a “hot” repository, and we finally touch on a full-scale field heater test to be conducted soon in the Grimsel Test Site underground research laboratory in Switzerland (referred to as HotBENT).

Birkholzer, Jens T. (ORCID:0000000279891912)↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

Unsupervised anomaly clustering via offset alignment in multivariate grid sensing data

Modern industries increasingly rely on multi-sensor technologies to acquire complex, high-dimensional data streams, enabling advanced monitoring and control systems. One critical application is online anomaly detection in electrical smart grids, where multivariate and multimodal sensing technologies play a vital role. However, detecting anomalies in such time-series data is challenging due to their inherent temporal dependencies and stochastic behavior. Traditional approaches based on supervised and semi-supervised learning methods depend on labeled datasets, which are often unavailable in real-world scenarios. While unsupervised methods have emerged as promising alternatives, these methods are highly susceptible to noise and outliers commonly present in sensing applications. Furthermore, deep learning-based anomaly detection methods, despite their performance, are often criticized for their black-box nature, limiting their applicability in safety-critical and online environments where interpretability and explainability are paramount. In this work, we propose an unsupervised anomaly clustering method leveraging a cyclic alignment-based offset detection algorithm for multivariate time-series signals. The proposed method is applied to multivariate data collected from vibrational, voltage, and magnetic field sensors deployed in a local grid substation. Our results demonstrate the robustness of the algorithm in accurately clustering various anomalies/events across different sensing modalities. Additionally, we compare the effectiveness of the proposed approach against a simple pattern-based anomaly detection method, which performs well for univariate data but fails to generalize to multivariate and multimodal time-series data.

Mukherjee, Subrata [ORNL] (ORCID:0000000309930338)↗

Data Based Shock Test Specification

It is vital that avionic packages used for testing and certifying the reliability and safety of U.S. nuclear weapons with platform aircraft survive exposure to shock environments during transportation and delivery. The objective of this research was to characterize the response to these transportation shock environments delivering accurate shock test specifications in order to set laboratory programming material and device certification rigor. Responses to shock events were analyzed in the frequency domain via the Shock Response Spectrum (SRS). Shocks were then grouped based on respective behavior of maximum response accelerations which were pseudorandomly resampled and compared to test data to form test specifications based on the MinerPalmgren hypothesis. In addition to discovering significant over testing in current shock specifications, a new systematic, data-driven approach to designing shock specifications was formulated.

42 ENGINEERING↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

Using CFD tools to model separate effects of HTR air ingress accident phenomena - 18508

The air ingress phenomena under the HTR conditions represent the important area of nuclear safety. Best practice guidelines for the use of CFD in nuclear safety applications are mainly based on water cooled reactors while in HTR the gas is used as a coolant. The ambition of this paper is to define the best recommendations and description of needed settings of CFD models solving the separate effects of air ingress accident phenomena. The JAERI experiments deal with phenomena of air ingress during the early stages of the accident. Experiments investigate the basic features of the flow behavior of the gas mixture and regard the phenomena of the molecular diffusion and the natural convection of the gas mixture with the graphite oxidation reaction. The separate effects simulations of air ingress accident were performed using CFD code ANSYS Fluent. Whole graphite oxidation process including all three main chemical reactions was successfully modeled. The new findings and useful information were gathered to be extrapolated to the integral effects level for the following phase. The role of the computational mesh and all important input parameters were discussed in detail and many in sensitivity studies were performed. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Prescriptive vs. performance based cook-off fire testing.

In the fire safety community, the trend is toward implementing performance-based standards in place of existing prescriptive ones. Prescriptive standards can be difficult to adapt to changing design methods, materials, and application situations of systems that ultimately must perform well in unwanted fire situations. In general, this trend has produced positive results and is embraced by the fire protection community. The question arises as to whether this approach could be used to advantage in cook-off testing. Prescribed fuel fire cook-off tests have been instigated because of historical incidents that led to extensive damage to structures and loss of life. They are designed to evaluate the propensity for a violent response. The prescribed protocol has several advantages: it can be defined in terms of controllable parameters (wind speed, fuel type, pool size, etc.); and it may be conservative for a particular scenario. However, fires are inherently variable and prescribed tests are not necessarily representative of a particular accident scenario. Moreover, prescribed protocols are not necessarily adaptable and may not be conservative. We also consider performance-based testing. This requires more knowledge and thought regarding not only the fire environment, but the behavior of the munitions themselves. Sandia uses a performance based approach in assuring the safe behavior of systems of interest that contain energetic materials. Sandia also conducts prescriptive fire testing for the IAEA, NRC and the DOT. Here we comment on the strengths and weakness of both approaches and suggest a path forward should it be desirable to pursue a performance based cook-off standard.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗