SEARCH · Engineering Papers

Results for “certification coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRS2015

Second Annual Transformative Vertical Flight Concepts Workshop: Enabling New Flight Concepts Through Novel Propulsion and Energy Architectures

On August 3rd and 4th, 2015, a workshop was held at the NASA Ames Research Center, located at the Moffett Federal Airfield in California to explore the aviation communities interest in Transformative Vertical Flight (TVF) Concepts. The Workshop was sponsored by the AHS International (AHS), the American Institute of Aeronautics and Astronautics (AIAA), the National Aeronautics and Space Administration (NASA), and hosted by the NASA Aeronautics Research Institute (NARI). This second annual workshop built on the success and enthusiasm generated by the first TVF Workshop held in Washington, DC in August of 2014. The previous Workshop identified the existence of a multi-disciplinary community interested in this topic and established a consensus among the participants that opportunities to establish further collaborations in this area are warranted. The desire to conduct a series of annual workshops augmented by online virtual technical seminars to strengthen the TVF community and continue planning for advocacy and collaboration was a direct outcome of the first Workshop. The second Workshop organizers focused on four desired action-oriented outcomes. The first was to establish and document common stakeholder needs and areas of potential collaborations. This includes advocacy strategies to encourage the future success of unconventional vertiport capable flight concept solutions that are enabled by emerging technologies. The second was to assemble a community that can collaborate on new conceptual design and analysis tools to permit novel configuration paths with far greater multi-disciplinary coupling (i.e., aero-propulsive-control) to be investigated. The third was to establish a community to develop and deploy regulatory guidelines. This community would have the potential to initiate formation of an American Society for Testing and Materials (ASTM) F44 Committee Subgroup for the development of consensus-based certification standards for General Aviation scale vertiport capable flight systems. These standards need to accommodate novel fixed wing concepts that do not fit within the existing Federal Aviation Administration (FAA) rotorcraft certification framework (Code of Federal Regulations, Title 14, Chapter I, Subchapter C, Part 27). The fourth desired outcome was to launch an information campaign to ensure key U.S. Government agencies understand the potential benefits and industry interest in establishing new vertiport capable flight markets. This record of the Workshop proceedings documents Workshop activities and products including summaries of the video recorded technical presentations, overviews of three breakout sessions (Missions Operational Concepts, Prioritized Technical Challenges, Regulatory Roadmap), and a preliminary draft roadmap framework for TVF.

V/STOL↗

NASA NTRS2005

Automatic Certification of Kalman Filters for Reliable Code Generation

AUTOFILTER is a tool for automatically deriving Kalman filter code from high-level declarative specifications of state estimation problems. It can generate code with a range of algorithmic characteristics and for several target platforms. The tool has been designed with reliability of the generated code in mind and is able to automatically certify that the code it generates is free from various error classes. Since documentation is an important part of software assurance, AUTOFILTER can also automatically generate various human-readable documents, containing both design and safety related information. We discuss how these features address software assurance standards such as DO-178B.

Denney, Ewen↗

DOE OSTI2016

Trailed vorticity modeling for aeroelastic wind turbine simulations in stand still

Current fast aeroelastic wind turbine codes suitable for certification lack an induction model for standstill conditions. A trailed vorticity model previously used as addition to a blade element momentum theory based aerodynamic model in normal operation has been extended to allow computing the induced velocities in standstill. The model is validated against analytical results for an elliptical wing in constant inflow and against stand still measurements from the NREL/NASA Phase VI unsteady experiment. The extended model obtains good results in case of the elliptical wing, but underpredicts the steady loading for the Phase VI blade in attached flow. The prediction of the dynamic force coefficient loops from the Phase VI experiment is improved by the trailed vorticity modeling in both attached flow and stall in most cases. The exception is the tangential force coefficient in stall, where the codes and measurements deviate and no clear improvement is visible.

17 WIND ENERGY↗

DOE OSTI2024

Measuring Impact: Evaluating Thermal Zoning Simplification on Energy Efficiency Measures Analysis

Building Energy Modeling (BEM) is a versatile tool for designing, retrofitting, ensuring code compliance, obtaining certifications, qualifying for incentives, and enabling real-time building control. However, capturing all the details of building geometry for thermal zoning can be time-consuming, costly, and sometimes computationally challenging. As a result, modelers have been applying zoning simplification based on factors such as space functions and internal loads, as well as relying on their experience and judgment while adhering to zoning rules outlined in industry standards. Despite the prevalence of this common practice, a notable gap exists in the literature regarding studies quantifying the influence of simplified thermal zoning on the evaluation of Energy Efficiency Measures (EEMs). Recognizing this gap, this paper seeks to contribute to the field by enhancing the understanding of how the simplification of thermal zoning influences the evaluation of EEMs against a baseline design. The study utilized a medium office prototype model with a detailed floor plan featuring over 20 zones per floor covering diverse functional spaces with varying internal loads and occupancy schedules. A standard thermal zoning strategy outlined in ASHRAE Standard 90.1 Appendix G was employed as the simplified zoning method. This strategy condenses the zoning into a core zone and four perimeter zones per floor. It was compared with the detailed zoning approach, which involves one zone per space. Common Energy EEMs, such as enhanced envelope, high-efficiency appliances and equipment, and HVAC controls, were individually implemented and evaluated. The results indicate that the performance comparison between the two zoning methods varies depending on the type of measures considered. Basic measures, such as adding wall insulation, demonstrate similar energy impacts, while advanced HVAC control measures, such as static pressure reset, exhibit a more substantial difference that cannot be overlooked.

Xie, Jiarong↗

NASA NTRS2009

Towards PCC for Concurrent and Distributed Systems (Work in Progress)

We outline some conceptual challenges in extending the PCC paradigm to a concurrent and distributed setting, and sketch a generalized notion of module correctness based on viewing communication contracts as economic games. The model supports compositional reasoning about modular systems and is meant to apply not only to certification of executable code, but also of organizational workflows.

Henriksen, Anders S.↗

NASA NTRS2017

Designing and Developing Web-Based Administrative Tools for Program Management

The task assigned for this internship was to develop a new tool for tracking projects, their subsystems, the leads, backups, and other employees assigned to them, as well as all the relevant information related to the employee (WBS (time charge) codes, time distribution, certifications, and assignments). Currently, this data is tracked manually using a number of different spreadsheets and other tools simultaneously by a number of different people; some of these documents are then merged into one large document. This often leads to inconsistencies and loss in data due to human error. By simplifying the process of tracking this data and aggregating it into a single tool, it is possible to significantly decrease the potential for human error and time spent collecting and checking this information. II. Objective The main objective of this internship is to develop a web-based tool using Ruby on Rails to serve as a method of easily tracking projects, subsystems, and points of contact, along with employees, their assignments, time distribution, certifications, and contact information. Additionally, this tool must be capable of generating a number of different reports based on the data collected. It was important that this tool deliver all of this information using a readable and intuitive interface.

Material↗

DOE OSTI2018

ALERT AATR Final Report: Lawrence Livermore National Laboratory

This report addresses the problem of automatically recognizing objects of interest (OOIs) in x-ray computed tomography (CT) images of baggage (plastic bins in our case). The discussion draws heavily from the material in [1]. The material composition and basic physical features of interest (FOIs, such as mass and thickness) of the OOIs are defined in an object requirement specification (ORS). The ORS may also provide a detection – false alarm probability goal for each material of interest (MOI). Automatic threat recognition (ATR) systems identify CT images of baggage that contain OOIs. ATRs must also identify locations of OOIs within baggage. The current ATR certification process used by DHS requires the ATR hardware and software to be certified on a specific ORS. When the ORS changes, the ATR hardware and software must be recertified. To pass re-certification, the hardware, algorithms and codes may need to be modified. Because ATR-based certification and re-certification are so time-consuming, the current process cannot quickly adapt to changing requirements. Unlike ATRs, adaptive automatic threat recognition (AATR) systems can quickly adapt to an ORS that changes or evolves over time [2]. The proposed AATR-based certification process would require the AATR hardware and software to be certified on a specific baseline ORS. Once certified, the same AATR hardware, algorithms and codes would be applied (by TSA or its delegates) to any ORS supplied in the future as input without going through lengthy recertification. This proposed process would enable the AATR to quickly adapt to changing requirements. This report describes the AATR developed at the Lawrence Livermore National Laboratory (LLNL) for x-ray CT images of baggage. The need and technical requirements for an AATR were developed in collaboration with DHS’s Explosives Division and Northeastern University’s Awareness and Localization of Explosives-Related Threats (ALERT) Center, a DHS Center of Excellence (http://www.northeastern.edu/alert/).

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

NASA NTRS2008

Certifying Auto-Generated Flight Code

Model-based design and automated code generation are being used increasingly at NASA. Many NASA projects now use MathWorks Simulink and Real-Time Workshop for at least some of their modeling and code development. However, there are substantial obstacles to more widespread adoption of code generators in safety-critical domains. Since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently the generated code still needs to be fully tested and certified. Moreover, the regeneration of code can require complete recertification, which offsets many of the advantages of using a generator. Indeed, manual review of autocode can be more challenging than for hand-written code. Since the direct V&V of code generators is too laborious and complicated due to their complex (and often proprietary) nature, we have developed a generator plug-in to support the certification of the auto-generated code. Specifically, the AutoCert tool supports certification by formally verifying that the generated code is free of different safety violations, by constructing an independently verifiable certificate, and by explaining its analysis in a textual form suitable for code reviews. The generated documentation also contains substantial tracing information, allowing users to trace between model, code, documentation, and V&V artifacts. This enables missions to obtain assurance about the safety and reliability of the code without excessive manual V&V effort and, as a consequence, eases the acceptance of code generators in safety-critical contexts. The generation of explicit certificates and textual reports is particularly well-suited to supporting independent V&V. The primary contribution of this approach is the combination of human-friendly documentation with formal analysis. The key technical idea is to exploit the idiomatic nature of auto-generated code in order to automatically infer logical annotations. The annotation inference algorithm itself is generic, and parametrized with respect to a library of coding patterns that depend on the safety policies and the code generator. The patterns characterize the notions of definitions and uses that are specific to the given safety property. For example, for initialization safety, definitions correspond to variable initializations while uses are statements which read a variable, whereas for array bounds safety, definitions are the array declarations, while uses are statements which access an array variable. The inferred annotations are thus highly dependent on the actual program and the properties being proven. The annotations, themselves, need not be trusted, but are crucial to obtain the automatic formal verification of the safety properties without requiring access to the internals of the code generator. The approach has been applied to both in-house and commercial code generators, but is independent of the particular generator used. It is currently being adapted to flight code generated using MathWorks Real-Time Workshop, an automatic code generator that translates from Simulink/Stateflow models into embedded C code.

Denney, Ewen↗

NASA NTRS2011

Natural Language Interface for Safety Certification of Safety-Critical Software

Model-based design and automated code generation are being used increasingly at NASA. The trend is to move beyond simulation and prototyping to actual flight code, particularly in the guidance, navigation, and control domain. However, there are substantial obstacles to more widespread adoption of code generators in such safety-critical domains. Since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently the generated code still needs to be fully tested and certified. The AutoCert generator plug-in supports the certification of automatically generated code by formally verifying that the generated code is free of different safety violations, by constructing an independently verifiable certificate, and by explaining its analysis in a textual form suitable for code reviews.

Denney, Ewen↗

NASA NTRS2005

Software Certification for Temporal Properties With Affordable Tool Qualification

It has been recognized that a framework based on proof-carrying code (also called semantic-based software certification in its community) could be used as a candidate software certification process for the avionics industry. To meet this goal, tools in the "trust base" of a proof-carrying code system must be qualified by regulatory authorities. A family of semantic-based software certification approaches is described, each different in expressive power, level of automation and trust base. Of particular interest is the so-called abstraction-carrying code, which can certify temporal properties. When a pure abstraction-carrying code method is used in the context of industrial software certification, the fact that the trust base includes a model checker would incur a high qualification cost. This position paper proposes a hybrid of abstraction-based and proof-based certification methods so that the model checker used by a client can be significantly simplified, thereby leading to lower cost in tool qualification.

Xia, Songtao↗

DOE OSTI2024

Misclassification of causes of death among a small all-autopsied group of former nuclear workers: Death certificates vs. autopsy reports

The U.S. Transuranium and Uranium Registries performs autopsies on each of its deceased Registrants as a part of its mission to follow up occupationally-exposed individuals. This provides a unique opportunity to explore death certificate misclassification errors, and the factors that influence them, among this small population of former nuclear workers. Underlying causes of death from death certificates and autopsy reports were coded using the 10 th revision of the International Classification of Diseases (ICD-10). These codes were then used to quantify misclassification rates among 268 individuals for whom both full autopsy reports and death certificates with legible underlying causes of death were available. When underlying causes of death were compared between death certificates and autopsy reports, death certificates correctly identified the underlying cause of death’s ICD-10 disease chapter in 74.6% of cases. The remaining 25.4% of misclassified cases resulted in over-classification rates that ranged from 1.2% for external causes of mortality to 12.2% for circulatory disease, and under-classification rates that ranged from 7.7% for external causes of mortality to 47.4% for respiratory disease. Neoplasms had generally lower misclassification rates with 4.3% over-classification and 13.3% under-classification. A logistic regression revealed that the odds of a match were 2.8 times higher when clinical history was mentioned on the autopsy report than when it was not. Similarly, the odds of a match were 3.4 times higher when death certificates were completed using autopsy findings than when autopsy findings were not used. This analysis excluded cases where it could not be determined if autopsy findings were used to complete death certificates. The findings of this study are useful to investigate the impact of death certificate misclassification errors on radiation risk estimates and, therefore, improve the reliability of epidemiological studies.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

DOE OSTI2017

Research on the Thermophysics of Next-Generation Nuclear Reactors

The results of scientific research on the thermophysics of next-generation nuclear reactors conducted at the Leipunskii Institute of Physics and Power Engineering are presented: integrated experimental and computational-theoretical studies to validate design and engineering solutions as well as the safety of fast reactors with sodium and heavy liquid-metal coolant, increasing the efficiency and safety of currently operating and future NPP with water-cooled reactors, software development and certification, pilot research on innovative nuclear power facilities (fast reactors with supercritical water and high-temperature sodium coolant).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

Improvements to the Simplified Loads Methodology in IEC 61400-2: November 22, 2021 - November 21, 2022

The "Simplified Loads Model" (SLM) of IEC 61400-2 provides a simple methodology to assess the structural integrity of a small wind turbine (SWT). The SLM is unique to the small wind turbine standard. It was included to allow SWT manufacturers with limited resources to undertake integrity checks at a reasonable cost in time and resources and avoid the expense of detailed aeroelastic simulations. Unfortunately, the SLM has gained the reputation of being overly conservative and this has reduced its value to the SWT community and its use in SWT design and certification. Conservatism in design standards is needed but excessive conservatism is not. The aim of this report is to address the principal areas of excess conservatism and recommend changes to the SLM that preserve its simplicity but reduce the excess. The changes for the ultimate loads are consistent with their treatment in aeroelastic modelling for certification and with related codes for wind loading on structures. The recommendations for a new fatigue design load case are also based on aeroelastic simulations, in this case of five SWTs of varying configurations with rated power from 2.4 to 50 kW. It is also pointed out the design load case for yawed operation omits an important term. The recommended inclusion of this term would make the SLM slightly more conservative for this case.

17 WIND ENERGY↗

NASA NTRS2018

Cardiovascular Disease Outcomes Among the NASA Astronaut Corps

BACKGROUND: Acute effects of spaceflight on the cardiovascular system have been studied extensively, but the combined chronic effects of spaceflight and aging are not well understood. Preparation for and participation in spaceflight activities are associated with changes in the cardiovascular system such as decreased carotid artery distensibility and decreased ventricular mass which may lead to an increased risk of cardiovascular disease. Additionally, astronauts who travel into space multiple times or for longer durations may be at an increased risk across their lifespan. To that end, the purpose of this study was to determine the incidence of common cardiovascular disease (CVD) outcomes among the NASA astronaut corps during their active career and through retirement. METHODS: Cardiovascular disease outcomes were defined as reports of any of the following: myocardial infarction (MI), revascularization procedures (coronary artery bypass graft surgery [CABG] or percutaneous coronary intervention [PCI]), hypertension, stroke or transient ischemic attack [TIA], heart failure, or total CVD (as defined by the AHA - combined outcome of MI, Angina Pectoris, heart failure, stroke, and hypertension). Each outcome was identified individually from review of NASA's Electronic Medical Record (EMR), EKG reports, and death certificates using ICD-9 codes as well as string searches of physician notes of astronaut exams that occurred between 1959 and 2016. RESULTS: Of 338 NASA astronauts selected as of 2016, 9 reported an MI, 12 reported a revascularization procedure, (7 PCI and 5 CABG), 4 reported Angina (without MI), 5 reported heart failure, 9 reported stroke/TIA, and 96 reported hypertension. Total CVD was reported in 105 astronauts. No astronaut who had an MI or revascularization procedure flew a spaceflight mission following the event. All MI, revascularization, and stroke events occurred in male astronauts. When reviewing astronaut ECG reports, abnormal ECG reports were found in only 8% of records (n=430) and mainly among retired astronauts (82%), with marked sinus bradycardia being the reason for the abnormal classification.

Charvat, Jacqueline M.↗

NASA NTRSDate not supplied

Quantification of Numerical Uncertainty via Nonlinear Dynamical Approach

Motivations (Ensure a Higher Level of Confidence in the Predictability & Reliability of Numerical Simulation for Multiscale Complex Nonlinear Fluid Problems) - The last two decades have been an era when computation is ahead of analysis & when very large scale practical computations are increasingly used in poorly understood multiscale complex nonlinear physical problems & non-traditional fields (Especially when computations offer the ONLY way of generating this type of data limited simulations). - At present some of the numerical uncertainties can be explained and minimized by traditional numerical analysis and standard CFD practices. However, such practices, usually based on linearized analysis, MIGHT NOT be sufficient for strongly nonlinear and/or stiff problems. - We need a good understanding of the nonlinear behavior of numerical schemes being used as an integral part of code verification, validation and certification.

HEC↗

DOE OSTI2018

On the Need for a Unified and Collaboratively Developed Residential Building Simulation Platform: Preprint

Residential building energy simulations are becoming ever more pervasive; they form the basis of energy efficient building design, zero energy goals, codes and standards, home certification and ratings industries, utility programs, regional/state planning, and technology assessments. And yet the residential building simulation community is highly fragmented with a patchwork of simulation engines with varying models, inputs, assumptions, and results. This inconsistency degrades confidence in these tools, increases industry-wide development and maintenance costs, and slows the availability of new efficiency technology models. The need for collaboration on an impartial, transparent, and capable residential building simulation platform has never been greater. But to develop and maintain a state-of-the-art simulation platform requires a dedicated and sustained investment. By leveraging existing resources and expertise from multiple entities/regions, a unified and collaboratively developed simulation platform can provide increased levels of energy efficiency at an accelerated pace. This paper presents the advantages and disadvantages of a unified residential building simulation platform in relationship to four real-world examples (RESNET HERS ratings, utility programs, California's Title 24, and DOE). The paper covers recent developments and improved capabilities that may move us closer to an ideal simulation platform and what challenges remain. The hope is to spur a frank and honest dialogue about how to work together towards the vision of achieving deeper and more reliable energy savings in the residential buildings industry.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2018

On the Need for a Unified and Collaboratively Developed Residential Building Simulation Platform

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2017

Safety software release options to support plant start-up and commissioning activities - 285

The schedule demands on new nuclear power plant site testing and commissioning programs challenge the plant's Instrumentation and Control (I and C) supplier's ability to provide certified safety software releases to meet the needs of these programs. This paper outlines the typical certified safety software development and certification process which follows a Waterfall software life-cycle model. The conflicts that result between supporting the site program and the safety software supplier's internal certification program are identified. An adapted 'functional' safety release process is presented that supports the site program's needs for software changes and in parallel enables the safety software certification process to proceed. Comparisons between the two safety software release processes are examined and the benefits realized through the use of the adapted 'functional' safety software release process are discussed. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗