Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault tree”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

An Evaluation of The Dynamic Physical Security Risk Assessment Methodology for Fleet-Wide Applications

The requirements for U.S. nuclear power plants to maintain a large onsite physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This integrated process for physical security analysis is named Modeling and Analysis for Safety Security using Dynamic EMRALD Framework (MASS-DEF). This document provides an update on the progress in applying the MASS-DEF process to an operating commercial nuclear power plant as well as additional industry feedback regarding use of the tool for other physical security risk-informed topics. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, and integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5 or MAAP. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report is an update the progress of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report also provides an update to the procedural guidance for the MASS-DEF process and an overview of the generic models available for use by utilities. This report does not contain any plant’s sensitive information and/or safeguards information. This study’s purpose was to verify that the results achieved using generic models are similar to actual plant results and refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Integration of Condition-Based, Diagnostic, Prognostic, And Anomaly Detection Data into Reliability Models to Support a Predictive Maintenance Context

Reliability data employed in plant reliability models are an approximated integral representation of the past industrywide operational experience, and they neglect the present asset health status (available, for example, from online monitoring data and diagnostic assessments) and forecasted health projection (when available from prognostic models). Ideally, in a predictive maintenance context, system reliability models should support decision making by propagating actual health information from the asset to the system level in order to provide a quantitative snapshot of system health and identify the most critical assets. Asset health should be informed solely by that specific asset’s current and historical performance data and should not be an approximated integral representation of the past industrywide operational experience (as currently performed by system reliability models through Bayesian updating processes). This paper proposes a reliability modeling approach that relies on asset diagnostic and prognostic assessments, along with monitoring data to measure asset health. We show how state-of-the art condition-based, diagnostic, prognostic, and anomaly detection models can be linked to system reliability models not in probability terms, but in terms of margin where margin is defined as the “distance” between the present status and an undesired event (e.g., failure or unacceptable performance). Then, we show how the propagation of margin data from the asset to the system level is performed through classical reliability models such as fault trees or reliability block diagrams. The described method is in fact able to propagate heterogenous health data from the asset to the system level in order to analytically assess system health.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

ON THE LANGUAGE OF RELIABILITY: A SYSTEM ENGINEER PERSPECTIVE

In its classical definition, risk is defined by three elements: what can go wrong, what are its consequences and how likely is it to occur. While this definition makes sense in a regulatory based framework to estimate risk associated to power plants (in terms of core damage frequency and large early release frequency), this approach does not provide a useful snapshot of the health of the plant. A possible alternate path can start by redefining the word “risk” to a broader meaning that better reflects the needs of a system health and asset management decision making process. Rather than asking how likely an event can occur (in probabilistic terms), we can ask how far this event is from occurring. We will show how, given the data available from plant equipment reliability and monitoring/diagnostic/prognostic centers, a margin can be described and determined for all type of maintenance approaches (e.g., corrective or predictive maintenance). We will show how to link SSC margin-based reliability models to system reliability models (i.e., fault trees) in order to assess system/plant health and how to perform margin-based system calculations. These calculations are not solved using classical probabilistic calculations applied to sets (as performed by any PRA code) but, instead, through metric spaces operations (i.e., distance/margin based approach).

97 - MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Advancing Multi-Hazard Risk and Safety Considerations for Aging Nuclear Facilities

While probabilistic risk assessment (PRA) of nuclear facilities is expected to include internal and external hazards for a risk-informed and performance-based design, the current state of practice treats each hazard independently. However, such an independent treatment of hazards may not account for the correlations between different hazards and their response of and damage to the structures, systems, and components (SSCs) in a plant resulting in underestimating the overall risk. This project proposes to advance the multi-hazard PRA of nuclear facilities to more adequately evaluate concurrent hazards and contribute to an increased safety of nuclear plants. A framework for multi-hazard PRA will be developed by identifying concurrent hazard events (both internal and external) and event sequences that include interdependencies through the response of SSCs. An example application of the multi-hazard PRA framework will be demonstrated by considering a generic pressurized water reactor (PWR) subjected to seismic and internal flooding hazards. Computational models for the response of components will be developed to generated multi-hazard fragility surfaces under seismic and flooding loads. A PRA model consisting of event and fault trees will also be developed to quantify the multi-hazard risk profile and compare it with the independent hazard risk profile. Overall, by advancing the multi-hazard PRA of nuclear facilities, this project enhances nuclear safety and reduces costs by mitigating unforeseen consequences caused by correlations between concurrent hazards.

97 - MATHEMATICS AND COMPUTING↗
DOE OSTI2016

Conditional Tree Reduction in the ADAPT Framework

Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. A DDET may be orders of magnitude larger than a traditional event tree for the same initiating event, as more of the uncertainty space is likely to be explored and the tree does not require manual assembly. Because of the size, manual inspection of the entire DDET is often infeasible. This problem may be approached from the front by reducing the number of sampled branching values or by online pruning of the tree, thus reducing the total number of branches. Utilizing post-processing techniques to draw actionable insights via clustering has also been proposed. One post-processing tool to reduce the DDET according to user-defined rules has been recently implemented in the Analysis of Dynamic Accident Progression Trees (ADAPT) DDET driver code. The tool creates a 'slice' of the DDET comprised of the set of branches that meet a set of user-input rules, for immediate visualization or for further calculations conditional on the rules being met. This extension is expected to ease analysis of the results of large and complex DDETs, leading to greater applicability of DDETs in PRA. It should be emphasized that this tool is a visualization aide and does not impact the theoretical basis of the DDET approach. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2016

Dynamic Importance Measures in the ADAPT Framework

Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until user-defined end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. One current limitation of DDETs is the assessment of results, which is not as well developed as in traditional PRA. A concept that is used in PRA to assess the significance of a basic event is the concept of importance measures (IMs). In traditional PRA, IMs only consider the likelihood of occurrence of non-occurrence of a basic event. The application of importance measures to DDETs must take into consideration not only the occurrence and non-occurrence of an event, but also uncertain timing or severity. This work describes three general dynamic importance measures (DIMs) as implemented in the Analysis of Dynamic Accident Progression Trees (ADAPT) DDET driver code. The measures account for the change in progression of the DDET resulting from the different values of each uncertain variable under investigation. The DIMs are applied to a sample DDET to demonstrate the type of insights that may be gained from each one. These measures will facilitate comparison of the impact of dynamic branching events on a consequence of interest, which also allow DDETs to be used in prioritizing plant investments. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2016

Extension of the ADAPT Framework for Multiple Simulators

Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. One limitation of the DDET driver codes developed to date (namely ADAPT, ADS, and MCDET ) is that the tree is driven by a single simulator. The goal of this work is a general multi-simulator driver. This limits the parameter space that may be explored in a single DDET to that which may be covered by a single simulator. In this work, the Analysis of Dynamic Accident Progression Trees (ADAPT) code is extended to support multiple arbitrary simulators. This capability will increase the depth and breadth of phenomena that may be analyzed in a single DDET. For example, a large-scale system code may pass the analysis to a more detailed code if certain conditions are met, in order to capture relevant phenomena that would be lost if only the system code were to be used. In addition, the time required to cover a given uncertainty space may be reduced by dynamically identifying and running only the situations that are appropriate given the plant conditions in each simulator. The use of multiple simulators is expected to further reduce subjectivity in PRA by enabling high fidelity modeling of reality. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1987

Reconfigurable tree architectures using subtree oriented fault tolerance

An approach to the design of reconfigurable tree architecture is presented in which spare processors are allocated at the leaves. The approach is unique in that spares are associated with subtrees and sharing of spares between these subtrees can occur. The Subtree Oriented Fault Tolerance (SOFT) approach is more reliable than previous approaches capable of tolerating link and switch failures for both single chip and multichip tree implementations while reducing redundancy in terms of both spare processors and links. VLSI layout is 0(n) for binary trees and is directly extensible to N-ary trees and fault tolerance through performance degradation.

Lowrie, Matthew B.↗
NASA NTRS1987

Reconfigurable tree architectures using subtree oriented fault tolerance

An approach to the design of reconfigurable tree architectures is presented in which spare processors are allocated at the leaves. The approach is unique in that spares are associated with subtrees, and sharing of spares between these subtrees can occur. The subtree-oriented fault-tolerance approach is more reliable than previous approaches capable of tolerating link and switch failures for both single-chip and multichip tree implementations while reducing redundancy in terms of both spare processors and links. VLSI layout is O(n) for binary trees and is directly extensible to N-ary trees and fault tolerance through performance degradation.

Lowrie, Matthew B.↗
DOE OSTI2014

Event Tree Success Branch Modeling Approaches in SAPHIRE/SPAR

Standardized Plant Analysis Risk (SPAR) models are a set of linked fault tree/event tree PRA models that have been used by the Nuclear Regulatory Commission (NRC) to evaluate the risk of operations at U.S. nuclear power plants since 1990s. The models use the Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE) code developed by the NRC and Idaho National Laboratory (INL). Currently Version 8, SAPHIRE is a powerful software with advanced features to perform separated or integrated Level 1, Level 2, internal events, external events, at-power, and low power shutdown PRA [1]. One of its features is the availability of three different approaches to model the success branch of a top event in event tree: delete term, complement of system logic, and developed event. However, improper choosing and modeling success branch might yield unexpected and incorrect results. This paper will discuss the two most often used success branch modeling approaches, delete term and developed event, and provide recommendations for using proper approaches in different models. A potential SAPHIRE code enhancement is also proposed to address the adverse impact brought by the developed event approach.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2015

Knowledge-based fault diagnosis system for refuse collection vehicle

The refuse collection vehicle is manufactured by local vehicle body manufacturer. Currently; the company supplied six model of the waste compactor truck to the local authority as well as waste management company. The company is facing difficulty to acquire the knowledge from the expert when the expert is absence. To solve the problem, the knowledge from the expert can be stored in the expert system. The expert system is able to provide necessary support to the company when the expert is not available. The implementation of the process and tool is able to be standardize and more accurate. The knowledge that input to the expert system is based on design guidelines and experience from the expert. This project highlighted another application on knowledge-based system (KBS) approached in trouble shooting of the refuse collection vehicle production process. The main aim of the research is to develop a novel expert fault diagnosis system framework for the refuse collection vehicle.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2018

Estimating the Life of a Machine Part

In practice, it is useful to generate quick estimates of the life of engineering systems after changes in the fatigue characteristics of their parts. Various means of rapid estimation are analyzed in the present work. Assessment of the life in terms of the specified probability of fault-free operation is of particular interest. After the use of such rapid methods, the best approach to improving the parts may be identified.

42 ENGINEERING↗
NASA NTRS1991

Chemical hazards database and detection system for Microgravity and Materials Processing Facility (MMPF)

The ability to identify contaminants associated with experiments and facilities is directly related to the safety of the Space Station. A means of identifying these contaminants has been developed through this contracting effort. The delivered system provides a listing of the materials and/or chemicals associated with each facility, information as to the contaminant's physical state, a list of the quantity and/or volume of each suspected contaminant, a database of the toxicological hazards associated with each contaminant, a recommended means of rapid identification of the contaminants under operational conditions, a method of identifying possible failure modes and effects analysis associated with each facility, and a fault tree-type analysis that will provide a means of identifying potential hazardous conditions related to future planned missions.

Steele, Jimmy↗
NASA NTRS2005

Overcoming obstacles to the exchange of information between risk tools

Our work to date in connecting risk tools hs had successes, but also has revealed there to be significant impediments to information exchange between them. These impediments stem from the well-known phenomenon of 'semantic dissonance' - mismatch between conceptual assumptions made by the separately developed tools. This issue represents a fundamental challenge that arises regardless of the mechanism of information exchange. This paper explains the issue and illustrates it with reference to our experiences to date connecting several risk tools. We motivate this work, present and discuss the solutions we have adopted to surmount these impediments, and the implications this work has for future efforts to integrate risk tools.

semantic dissonance↗
NASA NTRS2005

Modeling uncertainty in requirements engineering decision support

One inherent characteristic of requrements engineering is a lack of certainty during this early phase of a project. Nevertheless, decisions about requirements must be made in spite of this uncertainty. Here we describe the context in which we are exploring this, and some initial work to support elicitation of uncertain requirements, and to deal with the combination of such information from multiple stakeholders.

risk analysis↗
NASA NTRS2009

Probabilistic Risk Assessment for Decision Making During Spacecraft Operations

Decisions made during the operational phase of a space mission often have significant and immediate consequences. Without the explicit consideration of the risks involved and their representation in a solid model, it is very likely that these risks are not considered systematically in trade studies. Wrong decisions during the operational phase of a space mission can lead to immediate system failure whereas correct decisions can help recover the system even from faulty conditions. A problem of special interest is the determination of the system fault protection strategies upon the occurrence of faults within the system. Decisions regarding the fault protection strategy also heavily rely on a correct understanding of the state of the system and an integrated risk model that represents the various possible scenarios and their respective likelihoods. Probabilistic Risk Assessment (PRA) modeling is applicable to the full lifecycle of a space mission project, from concept development to preliminary design, detailed design, development and operations. The benefits and utilities of the model, however, depend on the phase of the mission for which it is used. This is because of the difference in the key strategic decisions that support each mission phase. The focus of this paper is on describing the particular methods used for PRA modeling during the operational phase of a spacecraft by gleaning insight from recently conducted case studies on two operational Mars orbiters. During operations, the key decisions relate to the commands sent to the spacecraft for any kind of diagnostics, anomaly resolution, trajectory changes, or planning. Often, faults and failures occur in the parts of the spacecraft but are contained or mitigated before they can cause serious damage. The failure behavior of the system during operations provides valuable data for updating and adjusting the related PRA models that are built primarily based on historical failure data. The PRA models, in turn, provide insight into the effect of various faults or failures on the risk and failure drivers of the system and the likelihood of possible end case scenarios, thereby facilitating the decision making process during operations. This paper describes the process of adjusting PRA models based on observed spacecraft data, on one hand, and utilizing the models for insight into the future system behavior on the other hand. While PRA models are typically used as a decision aid during the design phase of a space mission, we advocate adjusting them based on the observed behavior of the spacecraft and utilizing them for decision support during the operations phase.

dynamic fault trees↗
NASA NTRS2021

Architectural Modeling and Analysis for Safety Engineering

Model-based development tools are increasingly being used for system-level development of safety-critical systems. Architectural and behavioral models provide important information that can be leveraged to improve the system safety analysis process. Model-based design artifacts produced in early stage development activities can be used to perform system safety analysis, reducing costs and providing accurate results throughout the system life-cycle. In this report we describe an extension to the Architecture Analysis and Design Language (AADL) that supports modeling of system behavior under failure conditions. This Safety Annex enables the independent modeling of component failures and allows safety engineers to weave various types of fault behavior into the nominal system model. The accompanying tool support uses model checking to propagate errors from their source to their effect on safety properties without the need to add separate propagation specifications. The tool also captures all minimal set of fault combinations that can cause violation of the safety properties, that can be compared to qualitative and quantitative objectives as part of the safety assessment process. We describe the Safety Annex, illustrate its use with a representative example, and discuss and demonstrate the tool support enabling an analyst to investigate the system behavior under failure conditions.

FTA↗
NASA NTRSDate not supplied

Fault Management Algorithm Risk Assessment for the NASA Space Launch System

This paper presents the false positive (FP) and false negative (FN) risk assessment process currently being conducted for the Space Launch System (SLS) Artemis II Fault Management (FM) detection functions. The analysis scope, general assumptions and guide rules, and key modeling concepts were discussed to establish the basis of the risk assessments conducted. Initial analyses indicated a dominance in the total risk by software and firmware failures. This paper presents efforts applied to refine the software risks and the overall impact of implementing those modifications. Current analyses conducted on the detection functions implemented for the SLS Artemis II mission indicate primary risk drivers for the individual FM detection functions are flight software failures, firmware design failures, and hardware Common Cause Failures (CCFs). There still remains issues of how to account for time and redundancy in the software risk estimations.

probability risk analysis↗