SEARCH · Engineering Papers

Results for “Criticality Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

All sources NASA NTRS DOE OSTI

DOE OSTI2020

Gaussian Process Optimization of Sensitivity-Based Similarity Metrics between New Nuclear Applications and New/Existing Benchmarks [Slides]

This presentation discusses Nuclear Criticality Safety (NCS) and how designing safe, new nuclear criticality experiments requires expert judgement, which could take years of experience. Sensitivity/uncertainty (S/U) analysis can be utilized by less experienced individuals to conservatively estimate uncertainties in important parameters, such as k eff , in newly proposed nuclear experiments. The presentation poses the question of how this analysis can be performed and states that the answer lies in matching new nuclear experiments with existing benchmark experiments using similarity metrics. By increasing the criticality safety of the application in this work, higher mass limits could be used in PF-4 operations. Additionally, the presentation discusses MCNP6.2®, Whisper-1.1, the software that can be used in this analysis. Also discussed is the fact that International Criticality Safety Benchmark Evaluation Project (ICSBEP) benchmarks rarely match new nuclear applications and that there are significant differences in given set of materials and/or geometry. If there are no benchmarks that match the application, the presentation discusses the possibility of creating new benchmarks. In conclusion, this work presents a Gaussian process (GP) optimization scheme that was used to generate new benchmarks with the highest sensitivity-based similarity metrics to user-defined nuclear applications. The Gaussian process optimization successfully designed 3 new experimental benchmarks that were highly correlated to the application of interest and had k eff values near critical. Optimization over c k,i-r has shown that investigating specific isotope reactions for different applications is crucial to designing benchmark experiments. Partial contribution from Pu dominates c k similarity metric. Future work includes testing new stand-alone similarity metrics or new combinations of similarity metrics as the design criterion of this optimization – design criterion is application dependent.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

NASA NTRS2009

Brazed Joints Design and Allowables: Discuss Margins of Safety in Critical Brazed Structures

This slide presentation tutorial discusses margins of safety in critical brazed structures. It reviews: (1) the present situation (2) definition of strength (3) margins of safety (4) design allowables (5) mechanical testing (6) failure criteria (7) design flowchart (8) braze gap (9) residual stresses and (10) delayed failures. This presentation addresses the strength of the brazed joints, the methods of mechanical testing, and our ability to evaluate the margins of safety of the brazed joints as it applies to the design of critical and expensive brazed assemblies.

FLom, Yury↗

DOE OSTI2022

Final Design for Thermal/Epithermal eXperiments (TEX) with Absorbers to Provide Validation Benchmarks for Y-12 Electrorefining Facility

One of the main goals of the Thermal/Epithermal eXperiments (TEX) project is to use existing Nuclear Criticality Safety Program (NCSP) assets to create critical experiment plutonium and uranium test beds for materials important to criticality safety that have insufficient benchmark evaluations. The plutonium test bed experiments were completed in 2018 and are published in the 2020 edition of the International Criticality Safety Benchmark Evaluation Project (ICSBEP) Handbook. The uranium test bed assemblies were measured in 2020, with benchmark preparation underway.

42 ENGINEERING↗

DOE OSTI2026

Final Design for Thermal/Epithermal eXperiments (TEX) with Lithium Absorbers to Provide Validation Benchmarks for Y-12 Electrorefining Facility (IER 575, CED-2 Report)

One of the main goals of the Thermal/Epithermal eXperiments (TEX) project is to use existing Nuclear Criticality Safety Program (NCSP) assets to create critical experiment plutonium and uranium test beds for materials important to criticality safety that have insufficient benchmark evaluations. The plutonium test bed experiments were completed in 2018 and are published in the 2020 edition of the International Criticality Safety Benchmark Evaluation Project (ICSBEP) Handbook. The uranium test bed assemblies were completed in 2023 and accepted in the 2024 edition of the ICSBEP Handbook.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2023

Preliminary Design of Critical Experiments Involving Commercially Available B 4 C Neutron Absorber Plates with Low-Enriched UO 2 Fuel

The International Criticality Safety Benchmark Evaluation Project (ICSBEP) is an initiative to provide high-quality benchmark data in a standardized format for criticality safety analysts to use to validate calculational tools and nuclear data. In the last released 2022 version, the ICSBEP handbook contains over 5,000 critical experiment descriptions, results, and associated models. This paper describes the critical configurations proposed and calculations performed as part of the conceptual design phase of Integral Experiment Request (IER) 554 (IER-554). The goal of IER-554 is to add to the benchmark experiments available to the criticality safety community by designing critical experiments that can analyze how adding commercially available Boralcan plates to an assembly of low-enriched UO2 fuel rods affects the effective neutron multiplication factor (k eff ). Boralcan, a neutron absorber product developed by Rio Tinto, is made of B4C in an Al 1100 matrix and is commonly used for criticality suppression in fuel storage pools. In the current version of the ICSBEP handbook, only a few dated critical experiments involve B4C materials, and none involve Boralcan in a thin plate shape. The experiments designed as part of IER-554 are intended to be performed at the Sandia Pulsed Reactor Facility/Critical Experiments (SPRF/CX) apparatus at Sandia National Laboratories. SPRF/CX is a well-characterized assembly considered trustworthy by the benchmarking community because of the numerous high-quality evaluations with very low experimental uncertainties included in the ICSBEP handbook. Figure 1 illustrates the assembly for a particular configuration from LCT-078, one of the published benchmarks in the ICSBEP handbook. The experiments will be moderated and reflected by light water at ambient atmospheric pressure. Before the plates are inserted in the critical assembly, they will be characterized with x-ray computed tomography (XCT) to identify the sizes and distribution of the B 4 C powder particles inside the plates. The preliminary design calculations were performed with SCALE 6.3.0 using the KENO V.a sequence for the criticality calculations, the CE-TSUNAMI-3D sequence for the sensitivity and uncertainty studies, and the ENDF/B-VII.1 Continuous Energy cross section library. All the calculation results presented have 10 pcm statistical uncertainties. A set of critical experiments with Boralcan plates could increase the confidence of the criticality safety community in its modeling methods when using this type of neutron absorber material. Experiments would also help validate k eff calculations, and the industry could use these validations to change the B loading credit limits from the US Nuclear Regulatory Commission standard review plan for dry cask storage of spent nuclear fuel. This paper summarizes only part of the analysis documented in the preliminary design report.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2020

IER-519 CED-2: Final Design for Thermal/Epithermal eXperiments (TEX) with Absorbers to Provide Validation Benchmarks for Hanford Tank Farms

The Hanford tank farms contain 56 million gallons of waste across 177 tanks. The primary criticality safety concern for the waste is the plutonium inventory in waste solids – approximately 670 kg in total. Criticality safety analysis credits the absorption and dilution properties of the large quantities of other elements (aluminum, chromium, iron, manganese, nickel, silicon, sodium, and zirconium) present in the waste. Of these, iron and manganese are by far the most significant neutron absorbers, particularly for the waste compositions of highest criticality safety concern. The criticality safety analyses at the Hanford Waste Treatment and Vitrification Plant (WTP) and the Savannah River tank farms also credit iron and manganese as the primary neutron absorbers to demonstrate subcriticality.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2021

Nuclear Data and Cross Section Testing Using ENDF/B-VIII.0

With the release of the Evaluated Nuclear Data File (ENDF)/B-VIII.0 library, nuclear criticality safety practitioners and engineers have access to the latest cross section sets available for their analyses. However, these cross sections must be rigorously tested and validated to ensure that the nuclear data are responsive to the needs of the individuals responsible for developing, implementing, and maintaining computational tools for criticality safety applications. Thus, the ENDF/B-VIII.0 library is tested and validated with a large collection of experiments that were vetted by the International Criticality Safety Benchmark Evaluation Project and made available in the International Handbook of Evaluated Criticality Safety Benchmark Experiments. A selection of benchmark experiments for use within the criticality safety community were prepared and reviewed within the Verified, Archived Library of Inputs and Data (VALID), which is maintained by the Nuclear Energy and Fuel Cycle Division at Oak Ridge National Laboratory. The performance of the ENDF/B-VIII.0 library is assessed by using VALID models of benchmark experiments with the beta 12 version of SCALE 6.3 KENO V.a and KENO-VI Monte Carlo codes. The performance is compared with the results obtained from with the ENDF/B-VII.1 library. This report considers multigroup (MG) and continuous energy (CE) formats of the ENDF/B-VIII.0 and -VII.1 libraries. The benchmark experiments within VALID that validate the ENDF/B-VIII.0 library cover 15 broad system categories by using a range of fissile materials, uranium enrichments, plutonium isotopic vectors, and mixed uranium/plutonium systems. These forms are represented as metals, solutions, or various arrays of rods or plates that cover a variety of neutron energy spectra: thermal, fast, mixed, and intermediate. Over 600 cases were considered for use with the KENO V.a and KENO-VI codes with the ENDF/B-VIII.0 library. The results of the Monte Carlo comparison of ENDF/B-VIII.0 to ENDF/B-VII.1 with both KENO V.a and KENO-VI indicate that there is a less than 0.53% Δk difference between the bias of calculated k eff from the expected values. The CE ENDF/B-VIII.0 library results in smaller magnitude biases than the ENDF/B-VII.1 data for HEU-MET-FAST, HEU-SOL-THERM, IEU-MET-FAST, LEU-SOL-THERM, PU-SOL-THERM, and U233-MET-FAST systems, while the MG results yielded smaller magnitude biases for HEU-MET-FAST, HEU-SOL-THERM, IEU-MET-FAST, LEU-COMP-THERM, LEU-SOL THERM, MIX-COMP-FAST, and U233-MET-FAST systems. Most notable are the adjustments to the plutonium and 233 U cross section data, which has resulted in noticeably lower biases in the ENDF/B VIII.0 results for the mixed, plutonium, and 233 U systems. Results of the sensitivity data file comparison generated from TSUNAMI-3D for selected VALID cases for the ENDF/B-VIII.0 library indicate a very high level of agreement with correlation coefficients of the effect of nuclear data uncertainty on k eff (the c k integral parameter) all above 0.99. This indicates that cases with the ENDF/B-VIII.0 library would see very similar responses to any nuclear data errors or change as those with the ENDF/B-VII.1 library.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2023

Neutron Absorber Plate Characterization Plan for Criticality Experiments Design

After being used in nuclear installations, depleted fuel can still be highly reactive and must be handled securely to prevent any radiological or criticality concerns. In particular, spent fuel from use in nuclear power reactors must be stored and transported in specifically designed containers using neutron absorber materials to prevent criticality. Various neutron absorber material types exist and are manufactured by various entities, as thoroughly described in the Handbook of Neutron Absorber Materials for Spent Nuclear Fuel Storage and Transportation Applications written by EPRI. Presently, one of the most modern and most widely used types of neutron absorber material contains particles of boron carbide, or B 4 C, embedded in aluminum matrix: Boralcan, manufactured by Rio Tinto. It is very important for the community to know as much as possible about such neutron absorber materials. Therefore, in the recent years, a US Department of Energy National Nuclear Security Administration–Nuclear Criticality Safety Program funded project initiated design of an experiment that places Boralcan neutron-absorbing plates in an established critical assembly using low-enriched uranium fuel at the Sandia Pulsed Reactor Facility/Critical Experiments (SPRF/CX) apparatus at Sandia National Laboratories. The goal of the experiment is to produce high-quality benchmark data to submit to the International Criticality Safety Benchmark Evaluation Project (ICSBEP), for use in validating calculational tools and nuclear data by criticality safety analysts. The project, named IER-554, is currently in its final design stage, following a successful preliminary design. In the work documented in the design study, ten critical configurations using Boralcan neutron absorber plates were designed, and the experiment was proven to be feasible, with a predicted low k eff uncertainty around 100 pcm. An overview of the modeled cutout of the critical assembly with a Boralcan plate is shown in Figure 1, representing one of the configurations planned for the critical experiments. Before the plates are inserted in the critical assembly, it is necessary to know more about their composition and uniformity. This summary focuses on the plate characterization plans. Each plate will undergo (1) neutron transmission measurements at different locations to determine the 10 B areal density and (2) an in-depth x-ray computed tomography (XCT) examination to obtain the exact Sizes and distribution of the B4C powder particles inside the plates. In parallel, plate modeling studies are performed with a goal to determine the validity of the currently used approximation of modeling the neutron absorber plates as a homogeneous mixture of Aluminum 1100 alloy and B4C— instead of explicitly modeling the B4C particles. By using the experimental 10 B areal density measurements, and the exact size and location of the B4C particles obtained by XCT, a plate model can theoretically be built that reproduces the plate with extremely high fidelity. The results of this modeling study could increase the confidence of the criticality safety community in its modeling methods when using this type of neutron absorber material, and the industry could use these validations to change the boron loading credit limits from the U.S. Nuclear Regulatory Commission standard review plan for dry cask storage of spent nuclear fuel. The modeling calculations are performed with SCALE 6.3.0 using the KENO V.a sequence for criticality calculations with the ENDF/B-VIII.0 continuous-energy cross section library.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2020

Availability of Shielding Benchmark Experiment Data in the ICSBEP Handbook

The International Criticality Safety Benchmark Evaluation Projects (ICSBEP) has over two decades of experience under the auspices of the Organisation for Economic Co-operation and Development (OECD) Nuclear Energy Agency (NEA) to identify, evaluate, and compile a comprehensive data set of criticality safety benchmark data [1]. The activities of the ICSBEP have led to the continued success of the International Handbook of Evaluated Criticality Safety Benchmark Experiments (ICSBEP Handbook) [2]. The contents of the ICSBEP Handbook include benchmark specifications derived from nuclear facilities around the world, which have been utilized to support criticality safety efforts and also integral testing of nuclear data [3]. The 2020 edition of the ICSBEP Handbook will include data from 582 evaluations containing benchmark specifications for 5,053 critical, subcritical, or near-critical configurations. There are seven criticality-alarm-placement/shielding evaluations containing a total of 45 benchmark configurations, and ten fundamental physics evaluations containing a total of 237 measurements relevant to criticality safety applications. The purpose of this paper is to summarize those benchmarks relative to validation needs in shielding applications currently found within the ICSBEP Handbook. The current and future plans of shielding benchmarks with regards to the ICSBEP will also be discussed.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2021

Evaluation of Oak Ridge National Laboratory Health Physics Research Reactor Operation Data for Criticality Accident Alarm System Benchmark Creation

Over the last few decades, the International Criticality Safety Benchmark Evaluation Project (ICSBEP) Working Group has focused on gathering critical and subcritical benchmark experiment data from different facilities around the world for inclusion in the International Handbook of Evaluated Criticality Safety Benchmark Experiments (ICSBEP Handbook). The compiled data can be used by criticality safety analysts to help validate their calculation tools and cross-section libraries for a variety of applications.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2020

Preliminary Criticality and Radiation Shielding Analysis for the Storage and Transfer of MARVEL Reactor Spent Nuclear Fuel

This report documents the results of preliminary nuclear criticality and radiation shielding assessments during transfer and dry storage of irradiated Microreactor Applications Research Validation and Evaluation (MARVEL) reactor fuel at Idaho National Laboratory (INL). The assessments focus on transfer casks and storage canisters that are currently in use at INL, which may be compatible with the irradiated MARVEL reactor fuel. The criticality assessments were performed using the radiation transport code MCNP6 with 37 MARVEL reactor fuel elements in various configurations and scenarios. All transfer and storage configurations under dry conditions were below the assumed criticality safety limit of 0.93. Some storage and transfer configurations under wet conditions exceeded the criticality safety limit. This suggests that the appropriate administrative and engineering controls, in addition to reducing the number of MARVEL reactor fuel elements per transfer cask or storage canister, can be expected to ensure criticality safety under all scenarios. The radiation shielding assessments were performed by generating conservative neutron and photon source terms using the ORIGEN module in the SCALE suite of codes. These source spectra were used to estimate the dose equivalent rates using the radiation transport code MCNP6, both on contact and 1 m away from the fuel and transfer casks. The maximum estimated dose equivalent rate of 37 unshielded MARVEL reactor fuel elements on contact is approximately 42000 R/hr. The maximum estimated dose equivalent rates on contact to the ATR transfer cask, HFEF-5 transfer cask, and high load charger were approximately 233 mR/hr, 171 mR/hr, and 201 mR/hr, respectively. This suggests that with the appropriate administrative and engineering controls, all three transfer casks analyzed can be expected to provide sufficient radiation shielding to workers during transfer of irradiated MARVEL reactor fuel. These calculations are performed to support the planning and strategy for the MARVEL project and will demonstrate the technical viability of the different configurations discussed and help identify where engineered or administrative controls may be necessary. A complete criticality safety analysis and radiation shielding analysis, including validation and contingency and accident analysis must be completed by licensed and authorized personnel before any transfer or storage of MARVEL reactor nuclear fuel.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2004

Usability Evaluation of a Flight-Deck Airflow Hazard Visualization System

Many aircraft accidents each year are caused by encounters with unseen airflow hazards near the ground, such as vortices, downdrafts, low level wind shear, microbursts, or turbulence from surrounding vegetation or structures near the landing site. These hazards can be dangerous even to airliners; there have been hundreds of fatalities in the United States in the last two decades attributable to airliner encounters with microbursts and low level wind shear alone. However, helicopters are especially vulnerable to airflow hazards because they often have to operate in confined spaces and under operationally stressful conditions (such as emergency search and rescue, military or shipboard operations). Providing helicopter pilots with an augmented-reality display visualizing local airflow hazards may be of significant benefit. However, the form such a visualization might take, and whether it does indeed provide a benefit, had not been studied before our experiment. We recruited experienced military and civilian helicopter pilots for a preliminary usability study to evaluate a prototype augmented-reality visualization system. The study had two goals: first, to assess the efficacy of presenting airflow data in flight; and second, to obtain expert feedback on sample presentations of hazard indicators to refine our design choices. The study addressed the optimal way to provide critical safety information to the pilot, what level of detail to provide, whether to display specific aerodynamic causes or potential effects only, and how to safely and effectively shift the locus of attention during a high-workload task. Three-dimensional visual cues, with varying shape, color, transparency, texture, depth cueing, and use of motion, depicting regions of hazardous airflow, were developed and presented to the pilots. The study results indicated that such a visualization system could be of significant value in improving safety during critical takeoff and landing operations, and also gave clear indications of the best design choices in producing the hazard visual cues.

Aragon, Cecilia R.↗

NASA NTRS2019

Prognostics and Health Monitoring in Li-Ion Batteries and Capacitors Using Physics-Based Modeling Approach

In order to tackle and solve the prediction problem of the lifetime of Li-ion batteries, it is essential to have awareness of the current state and health of the battery pack. To be able to accurately predict the future state of any system, one must possess knowledge of its current and future operations. Using derived models of the current and future system behavior, a model-based prognostics approach can be implemented as a solution to the prediction problem. As more and more autonomous electric vehicles progressively emerge in our daily life, a very critical challenge lies in accurate prediction of remaining useful life of the systems/subsystems. Batteries, power electronics conditioning systems, and motors are integrated to form the powertrain in electric vehicles; one of the most critical systems. In the case of electric aircrafts, computing remaining flying time is critical for safety, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastropheThis presentation covers a physics-based modeling approach implemented for case studies in capacitor and battery prognostics which are an integral part of an electrical powertrain system. The general approach of model-based prognostics will be examined as a potential solution for safety critical problems related to battery state of charge and state of health.

Physics based modeling↗

DOE OSTI2020

Validation and Independent Uncertainty Analysis of the MIX-SOL-THERM-003 ICSBEP Benchmark

The International Criticality Safety Benchmark Evaluation Project (ICSBEP) was started in 1992 by the United States Department of Energy and later in 1995 became an international project with contributions from 22 countries. The project is now organized by the OECD (Organisation for Economic Co-operation and Development) Nuclear Energy Agency (NEA). In its most recent iteration, the ICSBEP handbook contains over five thousand evaluations of critical, near-critical, and subcritical experiments conducted in facilities all around the world. These benchmarks serve as valuable information for criticality safety engineers who can use them to validate calculation techniques and establish minimum subcritical margins for operations with fissionable materials. The benchmarks in the handbook are categorized by their fissile material composition, material form (oxide, solution, or metal), and fission energy spectra. This is especially useful for those looking for benchmarks similar to a system they are working on to compare methods and identify trends. The ICSBEP Handbook Uncertainty Guide is document outlining recommended practices and methods for determining uncertainties in these benchmarks. Quantifying these uncertainties thoroughly is crucial as it allows a higher degree of confidence that data used from them is valid and relevant. The guide stresses the importance of a thorough and well documented uncertainty analysis when evaluating an experiment. All measured values of a system, whether they be dimensions or material compositions, have a certain amount of uncertainty associated with them and can be analyzed one by one to determine their effects on the system. Many evaluated benchmarks in the handbook present this in detail, however some do not, mostly earlier evaluations performed in the 1990’s and early 2000’s. Recently at Los Alamos National Laboratory (LANL), the Nuclear Criticality Safety Division (NCSD) of LANL has been validating MCNP6.2 ® input files of criticality benchmarks for use by Whisper, a criticality safety code developed at LANL. This effort is also part of the OECD NEA Working Party on International Nuclear Data Evaluation Co-operation (WPEC) Subgroup 45, also known as Validation of Nuclear Data Libraries (VaNDaL). The goal of VaNDaL is to compile a set of validated simulation inputs for use in validating nuclear data and simulation codes. As part of these efforts, one of the benchmarks reviewed was the MIX SOL-THERM-003 ICSBEP benchmark. This paper provides an independent uncertainty analysis of this benchmark experiment.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2022

Current Progress of the Final Design of a Subcritical Assembly at the Oak Ridge National Laboratory

During the past decade, the US Department of Energy (DOE)/National Nuclear Security Administration (NNSA) Nuclear Criticality Safety Program (NCSP) has been coordinating nuclear criticality safety (NCS) courses to provide training and qualification to new staff, supervisors, managers, regulators, and other professionals involved with NCS. To address the growing need for more NCS training possibilities, a subcritical assembly was designed at Oak Ridge National Laboratory (ORNL). The Oak Ridge Subcritical Assembly (ORSA), operated at ORNL, could be used in a new course for fissile material handlers/operators or as a backup training facility for currently existing NCSP hands-on NCS training. This paper describes some of the design steps necessary for obtaining a final ORSA design, beginning with a successful feasibility study performed in 2020. Numerous parameters within each main element of the assembly were considered, such as the reflector used, the type of fuel coating or plating used, and the number of fuel plates used. The design choices related to each parametric study described in this paper are detailed and justified at the end of each subsection. An overview of the current final design characteristics of ORSA and the experiments’ possibilities is also provided. ORSA will be built with fuel plates from legacy Aerojet General Nucleonics (AGN)-201M research reactors currently stored at the Y-12 National Security Complex (Y-12). The cylindrical fuel plates comprise UO 2 particles embedded in polyethylene and have a nominal enrichment of 19.5 ± 0.5 wt % 235 U. The basis for the final design was the feasibility study from 2020. In the feasibility study, ORSA achieved k eff = 0.95, corresponding to a multiplication factor of 20, with approximately 620 g of 235 U (four 4 cm plates, three 2 cm plates, and two 1 cm plates) and an 8.5 cm thick graphite reflector radially and on top of the assembly. The bottom of the assembly has a graphite thickness of 5 cm, and the chosen graphite density was 2.3 g/cm 3 . All design calculations were performed using SCALE 6.2.4 KENO-VI and with the ENDF/B VII.1 Continuous Energy cross-section library.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2007

NASA's Software Safety Standard

NASA relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft launched that does not have a computer on board that will provide command and control services. There have been recent incidents where software has played a role in high-profile mission failures and hazardous incidents. For example, the Mars Orbiter, Mars Polar Lander, the DART (Demonstration of Autonomous Rendezvous Technology), and MER (Mars Exploration Rover) Spirit anomalies were all caused or contributed to by software. The Mission Control Centers for the Shuttle, ISS, and unmanned programs are highly dependant on software for data displays, analysis, and mission planning. Despite this growing dependence on software control and monitoring, there has been little to no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Meanwhile, academia and private industry have been stepping forward with procedures and standards for safety critical systems and software, for example Dr. Nancy Leveson's book Safeware: System Safety and Computers. The NASA Software Safety Standard, originally published in 1997, was widely ignored due to its complexity and poor organization. It also focused on concepts rather than definite procedural requirements organized around a software project lifecycle. Led by NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard has recently undergone a significant update. This new standard provides the procedures and guidelines for evaluating a project for safety criticality and then lays out the minimum project lifecycle requirements to assure the software is created, operated, and maintained in the safest possible manner. This update of the standard clearly delineates the minimum set of software safety requirements for a project without detailing the implementation for those requirements. This allows the projects leeway to meet these requirements in many forms that best suit a particular project's needs and safety risk. In other words, it tells the project what to do, not how to do it. This update also incorporated advances in the state of the practice of software safety from academia and private industry. It addresses some of the more common issues now facing software developers in the NASA environment such as the use of Commercial-Off-the-Shelf Software (COTS), Modified OTS (MOTS), Government OTS (GOTS), and reused software. A team from across NASA developed the update and it has had both NASA-wide internal reviews by software engineering, quality, safety, and project management. It has also had expert external review. This presentation and paper will discuss the new NASA Software Safety Standard, its organization, and key features. It will start with a brief discussion of some NASA mission failures and incidents that had software as one of their root causes. It will then give a brief overview of the NASA Software Safety Process. This will include an overview of the key personnel responsibilities and functions that must be performed for safety-critical software.

Ramsay, Christopher M.↗

DOE OSTI2024

Experimental Covariance Determination for Critical Integral Experiments

Integral benchmarks for criticality safety and nuclear data validation require expensive uncertainty quantification studies. In general, uncertainty quantification techniques ignore correlations between experiments and shared parts. Experiments, such as the TEX (Thermal/Epithermal eXperiments) campaigns, consist of many shared parts, such as the ‘Jemima’ HEU fuel plates, which create a strong correlation in their uncertainties. While these correlations are known to exist, they are often not estimated due to the complexity of such calculations. This paper describes an intuitive method of determining the covariance for each of the experimental components, providing a correlation for each family of parts across the multiple cases examined within a benchmark. A proof-of-principle study using the TEX-HEU experimental campaign was performed and verified that the correlations can be calculated with information commonly found in the ICSBEP (International Criticality Safety Benchmark Evaluation Project) benchmarks. This study showed that the introduction of model and experimental covariances reduces the χ 2 per degree of freedom from 2.203 to 1.179, indicating that the omission causes overly pessimistic bias quantifications. This technique can be seamlessly integrated to current benchmark evaluations as well as reevaluations of legacy benchmarks.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2023

Delayed Critical and Subcritical Experiments with Polyethylene Moderated Unreflected Thin 15 in. Diameter HEU Metal Plates

The thin ~15 in. diameter highly enriched uranium (HEU) metal plates were assembled to delayed criticality at the Oak Ridge Critical Experiments Facility (ORCEF) in 1969 with various thicknesses of polyethylene (varying from 1/16 to 2$\frac{3}{8}$ inches) between uranium metal plates. The average 235 U enrichment was 93.27 wt. %. These unreflected critical configurations contained 4$\frac{2}{3}$ to 20$\frac{5}{6}$ thin 15 in. diameter HEU metal plates (on loan from Los Alamos National Laboratory [LANL] and shipped to Oak Ridge National Laboratory [ORNL] on June 3, 1969). Depending on the thickness of polyethylene, the enriched uranium masses varying from 28,053 to 135,148 grams. Fractional plate sections consisted of the appropriate number of 60° pie sections. In addition to the measurement at delayed criticality, subcritical measurements were also performed by the inverse kinetic rod drop method. Prompt neutron decay constant measurements were also performed by the Rossi alpha and randomly pulsed neutron method using a time-tagged spontaneous fission californium neutron source; these are briefly reported here. At the time of these measurements in 1969, the thin HEU metal plates were in near-pristine condition with extremely little oxidation, allowing better descriptions of the uranium plates than the use of these plates in a heavily oxidized and deteriorated condition in recent reflected benchmark experiments at the LANL facility at the Nevada Test Site with these same thin highly enriched uranium metal plates. This report documents the experimental information for the measurements performed so that later researchers can perform the required uncertainty and calculational analyses and documentation to use these data for an International Nuclear Criticality Safety Benchmark Evaluation Program (ICSBEP) or a Nuclear Energy Agency (NEA) benchmark. Data from the experiments described should be acceptable for use as criticality safety benchmark experiments for the ICSBEP and the NEA nuclear criticality safety benchmark program once the uncertainty analysis on the measured neutron multiplication factors is completed. Additional data—such as the dimensional inspection reports, uranium isotopic information, and other relevant particulars—should be retrieved from the Y-12 Plant or LANL and incorporated in the final ICSBEP benchmark. Based on previous ICSBEP benchmarks with this enriched uranium metal at ORCEF, the uncertainties in $k_{eff}$ could be as low as ± 0.0002 for some configurations. Other experiments with smaller-diameter than 15 in. diameter HEU metal plates have been benchmarked in HEU-METFAST-001. The prompt neutron time decay measurements could be the basis for an International Reactor Physics Benchmark Program. Preparation of the present report is part of an effort at ORNL to document more than 15 undocumented critical and subcritical experiments enumerated in ORNL/TM-2019/18 and performed by ORNL at ORCEF and other US Department of Energy critical experiments facilities using more than 500 operational days of critical facility time. This work for this report publication was supported by the Nuclear Criticality, Radiation Transport and Safety NCSP Program at ORNL.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗