Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Hydrogen Equipment Enclosure Risk Reduction through Earlier Detection of Component Failures

Hydrogen component reliability and the hazard associated with failure rates is a critical area of research for the successful implementation and growth of hydrogen technology across the globe. The research team has partnered to quantify system risk reduction through earlier detection of hydrogen component failures. A model of hydrogen dispersion in a hydrogen equipment enclosure has been developed utilizing experimentally quantified hydrogen component leak rates as inputs. This model provides insight into the impact of hydrogen safety sensors and ventilation on the flammable mass within a hydrogen equipment enclosure. This model also demonstrates the change in safety sensor response time due to detector placement under various leak scenarios. The team looks to improve overall hydrogen system safety through an improved understanding of hydrogen component reliability and risk mitigation methods. This collaboration fits under the work program of IEA Hydrogen Task 43 Subtask E Hydrogen System Safety.

CFD↗
DOE OSTI2024

Anomaly detection in PV systems using constrained low-rank and sparse decomposition

PV (photovoltaic) systems, also known as solar panel systems, play an essential role in the mitigation of greenhouse gas emissions and the promotion of renewable energy. Through the conversion of sunlight into usable energy, electricity is generated without emitting greenhouse gases and producing pollutants. Notwithstanding the evolutionary significance of PV systems, the occurrence of defects and anomalies in PV systems may result in diminished power output, consequently impeding the efficiency of the systems and potentially resulting in hazards in certain circumstances. Therefore, early detection of faults and anomalies in PV systems is imperative to guarantee the reliability, efficiency, and safety of the systems. In this article, we develop a signal decomposition for the purpose of anomaly detection in PV systems. The proposed methodology is grounded on the concept of low-rank and sparse decomposition, with consideration given to the signs of the decomposed low-rank and sparse components, as well as the smooth variations within and between periods in the mean signals. Through the implementation of Monte Carlo simulations, we showcase the efficacy of our proposed methodology in identifying anomalies of varying durations and magnitudes in PV systems. A case study is employed to validate the proposed methodology in detecting anomalies in real PV systems.

14 SOLAR ENERGY↗
DOE OSTI2026

Nondestructive Modular Leak Detection in 3D Printed 316L Stainless Steel Pipes via Laser Powder Bed Fusion

This research investigates the leak detection features of 316L Stainless Steel pipe structures manufactured via Laser Powder Bed Fusion (LPBF). This work involves the design of a modular sensor system integrating nondestructive evaluation (NDE) methods, including thermal imaging and ultrasonic frequency detection to detect and characterize leaks in components. This aims to improve leak detection sensitivity within medium-pressure gas systems, during continuous operation without halting flow or introducing safety risks. The system could be adaptable for use on unmanned aerial vehicles (UAVs), enabling remote leak detection in active environments. A custom pneumatic system incorporating temperature and pressure sensors was assembled to detect leaks in LPBF-printed 316L SS tee pipes. Experimental results and simulations confirm the system’s effectiveness in leak detection and material evaluation. This research program also integrated a Python-based image recognition platform based on a metallography and optical microscopy to assess the porosity and complement the leak detection data on the printed structures. This allows a detailed analysis of pore distribution and internal leak paths, which could compromise structural integrity, critical for quality control during manufacturing. Findings suggest that the investigated approach holds potential for enhancing leak detection technologies and adapt them for advanced manufactured parts.

36 MATERIALS SCIENCE↗
DOE OSTI2023

Precursor Analysis Report: SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003

The SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003 Precursor Analysis Report leverages publicly available information about Davis-Besse’s 2003 cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. On 25 January 2003, the SQL Slammer worm infected more than 90% of vulnerable hosts and crashed the internet in 10 to 15 minutes, making it one of the fastest spreading worms in history. SQL Slammer is a fileless, memory-resident worm that remotely exploits a stack-based buffer overflow vulnerability on local hosts to intensively scan and rapidly self-propagate across the internet. The worm infected approximately 300,000 unpatched hosts running Microsoft Structured Query Language (SQL) Server 2000 or Microsoft Desktop Engine (MSDE) 2000 with SQL Server Resolution Service. The SQL Slammer worm indirectly infected FirstEnergy’s Davis-Besse nuclear power plant by first infecting a consultant’s company network server and then propagating through an external misconfigured connection into Davis-Besse’s site network. The infection caused major network congestion, slow performance, data overloads, and the inability of local hosts to communicate with each other, which eventually caused a loss of availability and a loss of view when the Safety Parameter Display System (SPDS) and Plant Process Computer (PPC) crashed. At the time of the infection, the plant was already offline, the digital monitoring systems had redundant analog backups, and the plant control and safety functions were not affected, so there were no concerns of a safety breach. However, this incident resulted in many lessons learned and spawned important discussions about cybersecurity’s role in nuclear safety and electric power reliability regulation, policy, and guidance. Researchers and analysts identified 10 unique techniques utilized during the attack with a total of 640 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Eight of the identified techniques used during Davis-Besse cyber attack were precursors to the triggering event. Analysis identified 596 observables associated with these precursor techniques, 428 of which were assessed to have an increased likelihood of being perceived in the 331 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

Digitalization, Management and Synthesis of Thermal Hydraulic Legacy Data Using Dynamical System Scaling

A unique attribute of the nuclear industry is the extent by which designers, developers, operators, and regulators pay attention to demonstrating the safety case. The safety case for nuclear systems is a written, traceable expression of safety, demonstrating the system’s protective measures against uncontrolled radiological releases. The nuclear installation resiliency or safety takes overriding priority over function and performance. The preparation of the safety case heavily relies on extensive experimental campaigns that challenge the target design under a spectrum of postulated accident scenarios. For safety reasons, these experiments are typically conducted in sub-scale test apparatuses intended to reproduce the postulated accident scenarios and event sequences realistically but subject to proven similarity criteria, often referred to as scaling analyses. Since the dawn of the nuclear industry, significant resources have been committed to the construction and operation of such test facilities and a massive amount of data has been generated. Such test data have been and are still used to validate the fundamental assumptions of nuclear power plant phenomena. As we move into the digital world, capturing this multi-decades worth of information in a transparent, easily accessible, and usable manner for the public and industry stakeholders is of paramount importance. Over the last few years FPoliSolutions has been actively developing an enterprise digital data ontology platform (FPoliDON) intended to do just that. The concept was introduced in a paper at the previous NURETH edition and has been significantly enhanced since. With the vision of helping designers use the data to assess their safety case evaluation models, the platform was designed not only to ontologically organize the experimental data, but also to guide the user in the complex analytics associated with the interpretation and use of such test results. A new feature which has been recently added is the ability for the user to access a library of sophisticated mathematical procedures for performing scaling analyses. For this purpose, the Dynamical System Scaling (DSS) procedure invented by Dr. Jose’ Reyes was formulated as one of the services in the digital platform. These methods have been demonstrated to provide an excelled mathematical apparatus to identify similarity criteria or quantify distortions between measured data and the target prototypical conditions. Moreover, DSS can provide a level of synthesis across SETs and IETs which has the promise to yield efficiency in the evaluation code assessment activities. This is often a daunting and expensive task to set up evaluation models that support the safety case of current and future nuclear power plants.

Reyes, Jose↗
DOE OSTI2025

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗
DOE OSTI2022

SSR COST – COmposite Structural Technologies for advanced reactor deployment (Final Scientific/Technical Report)

Moltex is designing a Generation 4 or Advanced nuclear reactor, the molten salt fast spectrum SSR-W. The design intent is to reduce the cost and complexity of the nuclear systems by relying on inherent safety characteristics, instead of engineered systems. One such characteristic as a natural tendency for power to decrease as temperature increases. Another characteristic that improves natural safety is the fact that the working fluids (molten salts) are at atmospheric pressure at operating temperatures. This significantly reduces the need for pressure boundary components and systems. Moltex is highly motivated to develop simple and economic reactors to reduce the carbon intensity and improve energy security of global electricity production. The COST project investigated the opportunities for reducing construction cost of advanced reactors with the adoption of Rigid Elastic Composite Civil works (RECC). The construction design and methods used in currently operational light water power plants would generally be suboptimal for the SSR-W since there is no requirement for civil structures to withstand high pressure accidents such as hydrogen combustion or steam explosion. In parallel to downselecting the most promising RECC-type technology, accident scenarios representing the largest credible challenge to the SSR-W civil and construction design were modelled. The capability of an SSR-W reactor constructed with and without the selected construction technology was evaluated and the consequential licensing challenges identified. A construction schedule and cost estimate of the SSR-W with and without the selected RECC construction technology was developed. Once the above data was collected, then Moltex was able to review the safety performance, license-ability and cost/schedule benefit of applying the preferred construction technology. The CAPEX/NPV benefit was quantified, and the licensing risks and opportunities were documented. Finally, the CAPEX/NPV benefit of the advanced construction technology was modest due to the suitability of traditional stick-built construction for the SSR-W design. However, previously unidentified benefits of the advanced construction technology were revealed during the studies that could credibly de-risk certain aspects of the design to be licensed. Since licensing (duration and delays) are very significant in new build project costs, the cost benefits may be significant. Further studies on the risk reduction of the construction technology are foreseen.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2023

Encrypted model predictive control design for security to cyberattacks

Abstract In recent years, cyber‐security of networked control systems has become crucial, as these systems are vulnerable to targeted cyberattacks that compromise the stability, integrity, and safety of these systems. In this work, secure and private communication links are established between sensor–controller and controller–actuator elements using semi‐homomorphic encryption to ensure cyber‐security in model predictive control (MPC) of nonlinear systems. Specifically, Paillier cryptosystem is implemented for encryption‐decryption operations in the communication links. Cryptosystems, in general, work on a subset of integers. As a direct consequence of this nature of encryption algorithms, quantization errors arise in the closed‐loop MPC of nonlinear systems. Thus, the closed‐loop encrypted MPC is designed with a certain degree of robustness to the quantization errors. Furthermore, the trade‐off between the accuracy of the encrypted MPC and the computational cost is discussed. Finally, two chemical process examples are employed to demonstrate the implementation of the proposed encrypted MPC design.

Suryavanshi, Atharva↗
DOE OSTI2025

Exploring the Use of Large Immersive Display Systems in the Nuclear Industry

Large immersive display systems play a critical role in the nuclear industry by enabling advanced training, design reviews, scientific visualization, and safety simulations. These systems, such as CAVE and powerwalls, allow engineers and operators to interact with virtual nuclear environments in real-time, providing a deeper understanding of complex systems. Their ability to simulate real-world scenarios for testing and optimization in a safe, controlled environment ensures that operators and engineers can refine process, enhance safety protocols, and troubleshoot complex challenges. This article outlines key lessons learned from deploying these systems, practical insights into their applications, and considerations for future improvements, aiming to guide their broader adoption and effective use in the nuclear industry.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2021

Barrier Function-based Reinforcement Learning for Emergency Control of Power Systems

Under voltage load shedding has been considered as a standard and effective measure to recover the voltage stability of the electric power grid under emergency and severe conditions. However, this scheme usually trips a massive amount of load which can be unnecessary and harmful to customers. Recently, deep reinforcement learning (RL) has been regarded and adopted as a promising approach that can significantly reduce the amount of load shedding. However, like most existing machine learning (ML)-based control techniques, RL control usually cannot guarantee the safety of the systems under control. In this paper, we introduce a novel safe RL method for load shedding of power systems, that can enhance the safe voltage recovery of the electric power grid after experiencing faults. Unlike standard RL method, the safe RL method integrates a Barrier function into the reward function. Consequently, the optimal control policy can render the power system to avoid the safety bounds. This method is general and can be applied to other safety-critical control problems. Numerical simulations on the 39-bus IEEE benchmark is performed to demonstrate the effectiveness of the proposed safe RL emergency control, as well as its adaptive capability to faults not seen in the training.

Vu, Thanh Long↗
DOE OSTI2024

New Safety Feedback Control Design to Guarantee Adequate Frequency Performance in Microgrids

Safety analysis of power systems is concerned with the system's ability to maintain critical variables within specified limits following a disturbance. Frequency control adequacy has become increasingly important as the system inertia decreases due to the increase in renewable energy penetration. Various controllers for inverters have been proposed to improve the system frequency response and few are capable to ensure the safety of the response. In this article, a diesel-wind energy system is considered and modeled as a switching system between normal, faulted, and post-fault modes. Further, a safety feedback controller is designed as a supplementary signal for a wind turbine generator such that the speed of the diesel generator stays within a permissible range in the presence of a finite energy disturbance. Numerical results on the modified 33-bus microgrid system obtained of the proposed novel approach indicate that the suggested control configuration can guarantee adequate frequency response without excessive conservativeness.

barrier function↗
DOE OSTI2025

Development of a Real-Time Neutron Noise Analysis System for Fuel Debris Removal at Fukushima Daiichi

The decommissioning of Units 1, 2, and 3 at Fukushima Daiichi presents unique challenges, particularly in mitigating the risk of re-criticality during fuel debris removal. Disturbing previously stable debris configurations has the potential to cause changes in the multiplication of the system, necessitating real-time monitoring to ensure operational safety. Current neutron detection systems, primarily passive, are not optimized for continuous real-time analysis and are limited in their ability to detect rapid changes in system reactivity.

Neutron Detection Systems↗
DOE OSTI2026

Engineering Controls Database

Cyber-Informed Engineering (CIE) addresses the reality that cyber attacks on engineered systems can have consequences far beyond data loss or disruption of digital networks. When control systems are compromised, safety, reliability, and performance of the physical process itself may be threatened. This database is meant to establish clear examples and guidance for defining and applying engineered controls in CIE. It explains what engineered controls are, how they differ from information security measures, and how they are integrated into system design. The goal is to ensure that resilience is engineered into systems from the outset. Unlike cybersecurity protections that defend the digital layer, engineered controls act directly at the physical and algorithmic levels to guarantee that unacceptable consequences are prevented or limited. CIE keeps the consequences of a cyber attack from impacting the safety, reliability, and performance of engineered systems.

Source record↗
DOE OSTI2025

Cyber-Informed Engineering (CIE) – Engineered Controls Database and Use

Cyber-Informed Engineering (CIE) addresses the reality that cyber-attacks on engineered systems can have consequences far beyond data loss or disruption of digital networks. When control systems are compromised, safety, reliability, and performance of the physical process itself may be threatened. This database is meant to establish clear examples and guidance for defining and applying engineered controls in CIE. It explains what engineered controls are, how they differ from information security measures, and how they are integrated into system design. The goal is to ensure that resilience is engineered into systems from the outset. Unlike cybersecurity protections that defend the digital layer, engineered controls act directly at the physical and algorithmic levels to guarantee that unacceptable consequences are prevented or limited. CIE keeps the consequences of a cyber attack from impacting the safety, reliability, and performance of engineered systems.

42 - ENGINEERING↗
DOE OSTI2023

Key Considerations in Assessing the Safety and Performance of Camera-Based Mirror Systems

Camera-based mirror systems (CBMSs) are a relatively new technology in the automotive industry, and much of the United States’ medium- and heavy-duty commercial fleet has been reluctant to convert from standard glass, or “west coast”, mirrors to CBMSs. CBMSs have the potential to reduce the number of truck and passenger vehicle incidents, improving overall fleet safety. CBMSs also have the potential to improve operational efficiency by improving aerodynamics and reducing drag, resulting in better fuel economy, and improving maneuverability. Improvements in overall safety are also possible; the field of view for the driver is potentially 360° with the addition of trailer cameras, allowing for visibility of the rear of the trailer and the front of the truck. These potential improvements seem promising, but the literature on driver surveys clearly shows that there is reluctance to adopt this technology for many reasons. Additionally, more robust testing in the laboratory and in the field is necessary to determine whether CBMSs are adequate to replace standard mirrors on trucks. This analysis provides an overview of key research questions for CBMS testing based on the current literature on the topic (surveys, standards, and previous testing). The purpose of this analysis is to serve as guidance in developing further testing of CBMSs, especially testing involving human subjects.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

Diagnostics: Chapter 8 of the special issue: on the path to tokamak burning plasma operation

This chapter presents the activity conducted by the ITPA topical group (TG) on Diagnostics over about the last 15 years. Following a general introduction of the ITER Diagnostics led by their measurement roles, the document is organized in several subchapters detailing the design support, research and development activity conducted by each of the specialist working groups (WGs) of the TG. Please note that the magnetic diagnostics were supported at the TG without a specific WG. Their status is included in the general introduction. In the following some highlights of the subchapter’s contents are provided. Recent advances in ITER first wall (FW) diagnostics for the measurements of plasma-metallic wall interaction in support of the ITER research plan are reported. An InfraRed imaging Video Bolometer for ITER has been developed and tested on several tokamaks to measure the radiated power loss. A laser-induced breakdown spectroscopy (LIBS) technique which utilizes a pulsed laser beam to ablate locally by forming a crater, will measure local tritium inventory in the FW material. Real-time Residual Gas Analyzers will measure the neutral gas composition in a divertor port and an equatorial port during plasma operation. Due to the full metallic FW environment, the plasma-wall interaction in ITER will face several challenges such as the compromised radiated power and divertor heat flux measurements by reflection. Ray tracing and analysis codes have been developed to eliminate and correct the effects of reflection in the measurements. The characteristics of the reflecting surfaces depending on the roughness and angle of the incidence have been measured by dedicated experiments, and the results were applied to the reflection elimination. For the measurement of the metallic impurity radiation induced by eroded metallic atoms, a vacuum ultraviolet spectrometer has been developed and tested. An extensive thermonuclear diagnostic suite will be required to support the operation of ITER and the planned experimental program for future burning plasma experiments. Due to the harsh environmental conditions, the implementation of diagnostic systems in ITER is a major challenge. These conditions include high levels of neutron and gamma fluxes, neutron heating, particle bombardment. Therefore, the selection and design of diagnostic systems must take into account a number of phenomena previously unseen in diagnostic design. For this reason, the measurement of neutrons and confined or lost fast ions, with particular emphasis on alpha particles, is critical to ITER. The diagnostics associated with these measurements will be important for future plasma-burning experiments at ITER. The high neutron emission and very large plasma size in ITER make neutron diagnostics the main diagnostic method used to measure plasma parameters such as fusion power, fusion power density, ion temperature, energy of fast ions and their spatial distributions in the plasma core. Active spectroscopy techniques are methods where a neutral particle beam is injected into the plasma and information on plasma parameters is extracted from the measurement of line emission resulting from the beam-plasma interaction, either by plasma ions or by beam atoms. Spatial localization is achieved by crossing the beamline and multiple observation lines. The ITER plasma will be a high temperature, moderately dense, fully ionized collisional plasma. The plasma facing surfaces are principally metallic being fashioned from beryllium or tungsten but many other elements, arising from either structural or from operational needs, may enter this plasma. The energy range of the emitted photons range from meV (infra-red) to multi keV (x-rays) and originate from all areas of the plasma volume. The primary role of passive emission diagnostics is to identify what is in the plasma from spectral signatures. Extracting quantitative information from these measurements such as impurity content, ion temperature, rotation, degree of detachment and radiated power depends on calibrated instruments, a physics model of the atomic and molecular processes and plasma transport and an analysis workflow that takes into account environmental effects such as reflections. The particular needs for ITER have prompted a multi-machine, many-year effort to address all these aspects and this chapter reviews the work on diagnostic design, experiments and new analysis techniques. An overview of the laser diagnostics to be implemented on ITER is also provided in this paper. This includes descriptions of the Thomson scattering in the core, edge and divertor regions, polarimetry and interferometry diagnostics used for measuring plasma density and also measurements of helium density in the divertor using Laser Induced Flourescence. Techniques which can allow improvements on current measurements are also addressed in particular expanding poloidal polarimetry measurements to measure field fluctuations and proposed use of dispersion interferometery which has a number of advantages over existing methods. This paper identifies particular areas where further research and testing on existing tokamaks is useful even at this advanced stage to inform the design of diagnostics for ITER. Outstanding areas of concern for the implementation of laser diagnostics, in particular with a view to reliable operation are identified. An overview of the latest developments of microwave diagnostic systems and techniques is given. The primary focus is the contributions for ITER—the next step burning plasma experiment—which is supplemented by describing recent progress of techniques applicable for fusion experiments beyond ITER. The contributions are intentionally kept concise, and are being supplemented by a rich list of references for further studies. Radiation induced effects are receiving continuous and well-deserved attention of the ITER diagnostic community and they are in many cases one of the primary design drivers of the ITER diagnostic systems. The paper summarizes recent progress in this area focusing primarily on the ITER diagnostics but in some cases provides also outlook for the possible solutions for even more demanding radiation environment of fusion reactors beyond ITER. Despite advancements in the area of modeling and simulation of various radiation induced effects, experimental testing in a nuclear environment as close as possible to the target one is still seen as unavoidable for proper qualification of particular diagnostic functional elements. Recent advancement within three diagnostic areas: optical diagnostics, magnetics and bolometers is covered. Encouraging results on qualification of silica glass vacuum window assemblies are presented. In the area of magnetic sensors, progress of irradiation tests performed on ITER in-vessel LTCC inductive sensors is presented with outlook for novel technological approaches to inductive sensors utilizing thick printing and photolithography technologies being highlighted. Summary of advancements in the area of steady state magnetic field sensors based on Hall effect is given. New results of neutron irradiation test of the ITER borosilicate glass inserts for vacuum electrical feedthroughs are summarized finding negligible swelling at target level of neutron fluence. Off-line irradiation tests of fiber optic current sensors for plasma current measurement demonstrated that both for gamma doses up to 5 MGy and a total neutron fluence up to 10 15 cm −2 , radiation induced changes are still compatible with required measurement accuracy on ITER. The ITER bolometers are given as an example how considering radiation effects may influence the diagnostic design. Finally, outlook for future main R&D directions is outlined. All optical and laser-based diagnostics in ITER will be using mirrors to guide plasma radiation toward detectors, cameras and sensors. In the hostile plasma, radiation and particle environment the optical characteristics of diagnostic mirrors will degrade directly affecting the entire performance of involved diagnostic systems. An assessment of factors affecting mirror performance is provided. Among the prime adverse factors are deposition of plasma impurities, sputtering of mirror surface and steam ingress in the vicinity of mirrors. Within the International Tokamak Physics Activity with active support by ITER central team and domestic agencies, the structured research and development (R&D) program on mitigation of risks for diagnostic mirrors is underway. Within this program the mirror material development, the passive mitigation of mirror degradation by using diagnostic ducts and shutters along with an active mirror recovery program comprising the in-situ mirror cleaning and calibration is underway. Recent developments in diagnostic mirror R&D are described in this Chapter along with an example of their implementation of R&D solutions in ITER Infrared Thermography diagnostic. An assessment of still open engineering and physics questions, considerations on mirror risks during an early phase of ITER operation are given along with an overview of diagnostic mirror evolution in the late ITER operation stage toward the demonstration fusion power plant. Several crucial areas of diagnostic R&D outlined in ITER Research Plan are addressed. The basic control groups in a fusion reactor can be broken-down in five categories: (1) plasma position, magnetic configuration, and plasma current control, (2) profile control and confinement optimization, (3) MHD control and suppression, (4) edge dissipation control, radiation and plasma exhaust control and (5) break-down optimization. These categories are coupled via the physics (a control action in one domain will affect the other domains) and via shared actuators (e.g. ECRH for impurity accumulation avoidance, current density distribution control and MHD suppression). Consequently, a supervisory control system should determine the priority of the various control tasks, their couplings, and the interfaces with the safety and interlock system. For the systematic development of the various controllers taking the complexity of the plasma and the control system into account, a model-based approach is required. A short historical overview is given of the developments in systems and control theory and control engineering with special emphasis on those developments that are most relevant for Nuclear Fusion research and operation. An overview is given of the state of the field of fusion plasma control for the control categories. It will be shown how synthetic diagnostics are being developed in ITER and how they are used in diagnostic design and design validation and how they can be in model-based controller synthesis using relatively simple models. In modern control methods, multiple diagnostics are used to constrain relatively simple models. The constrained models provide an estimate for the state. This opens the route to state controllers, such as model predictive control. A major challenge in nuclear fusion research is the coherent combination of data from heterogeneous diagnostics and modeling codes for machine control and safety as well as physics studies. Measured data from different diagnostics often provide information about the same subset of physical parameters. Additionally, information provided by some diagnostics might be needed for the analysis of other diagnostics. A joint analysis of complementary and redundant data allows, e.g. to improve the reliability of parameter estimation, to increase the spatial and temporal resolution of profiles, to obtain synergistic effects, to consider diagnostics interdependencies and to find and resolve data inconsistencies. Physics-based modeling and parameter relationships provide additional information improving the treatment of ill-posed inversion problems. A coherent combination of all kind of available information within a probabilistic framework allows for improved data analysis results. The concept of integrated data analysis (IDA) in the framework of Bayesian probability theory is outlined and contrasted with conventional data analysis. Components of the probabilistic approach are summarized and specific ingredients beneficial for data analysis at fusion devices are discussed.

ITER↗
DOE OSTI2020

Human-System Interface Design Review Guidelines

The U.S. Nuclear Regulatory Commission (NRC) staff reviews the human factors engineering (HFE) aspects of nuclear power plants in accordance with the Standard Review Plan (NUREG-0800, Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants: LWR Edition). The Human Factors Engineering Program Review Model (NUREG-0711, Revision 3, issued November 2012) contains detailed design review procedures. As part of the review process, the interfaces between plant personnel and the plant's systems and components are evaluated for conformance with HFE guidelines. This document, Human-System Interface Design Review Guidelines (NUREG-0700, Revision 3), provides the guidelines necessary to perform this evaluation. The review guidelines address the physical and functional characteristics of human-system interfaces (HSIs). Because these guidelines only address the HFE aspects of design and not other related considerations, such as instrumentation and control and structural design, they are referred to as HFE guidelines. In addition to the review of actual HSIs, the NRC staff can use the NUREG-0700 guidelines to evaluate a design-specific HFE guidelines document or style guide. The HFE guidelines are organized into four basic parts, which are divided into sections. Part I contains guidelines for the basic HSI elements: information displays, user-interface interaction and management, and analog displays and controls. These elements are used as building blocks to develop HSI systems to serve specific functions. Part II contains the guidelines for reviewing the following HSI systems: alarm system, safety parameter display system, group-view display system, soft control system, computer-based procedure system, automation system, and communication system. Part III provides guidelines for the review of workstations and workplaces. Part IV provides guidelines for the review of HSI support (i.e., maintainability of digital systems and degraded HSI and instrumentation and control conditions).

42 ENGINEERING↗
DOE OSTI2025

Flow instabilities in helical-coil steam generators for small modular reactors: A review

Here, this study covers the research and discoveries in two-phase flow-boiling instabilities available in the literature—specifically for a helical-coil steam generator (HCSG), including experimental findings, theoretical research, computational models, and system code analyses—supporting research and development of representative small modular reactors (SMRs). Like other new and advanced reactor systems, water-cooled SMRs require experimental data from both integral and separate thermal-hydraulics test facilities for the verification and validation (V&V) of the computational models and computer codes in order to design and obtain regulatory approval. The complex dynamics of two-phase flow-boiling instabilities includes flow regimes physics phenomena, flow-channel geometries, heat-transfer behavior, and interactions among the solid–liquid-gas within the system boundary, all of which are pivotal for understanding the design and operational challenges of SMRs. This study focuses on identifying the relevant knowledge gaps on boiling instabilities—specifically for a HCSG—and provides insights about future research direction optimizing the transport of thermal energy, mass-flow rates, and boundary conditions that ensure the adequate heat-transfer performance, operational stability, and safety associated with SMR systems.

20 FOSSIL-FUELED POWER PLANTS↗