Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “model checking”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Designing Secure and Resilient Cyber-Physical Systems Using Formal Models

This work-in-progress paper proposes a design methodology that addresses the complexity and heterogeneity of cyber-physical systems (CPS) while simultaneously proving resilient control logic and security properties. The design methodology involves a formal methods-based approach by translating the complex control logic and security properties of a water flow CPS into timed automata. Timed automata are a formal model that describes system behaviors and properties using mathematics-based logic languages with precision. Due to the semantics that are used in developing the formal models, verification techniques, such as theorem proving and model checking, are used to mathematically prove the specifications and security properties of the CPS. This work-in-progress paper aims to highlight the need for formalizing plant models by creating a timed automata of the physical portions of the water flow CPS. Extending the time automata with control logic, network security, and privacy control processes is investigated. The final model will be formally verified to prove the design specifications of the water flow CPS to ensure efficacy and security.

42 ENGINEERING↗

Evaluation system and web infrastructure for the second cryo-EM model challenge

An evaluation system and a web infrastructure were developed for the second cryo-EM model challenge. The evaluation system includes tools to validate stereo-chemical plausibility of submitted models, check their fit to the corresponding density maps, estimate their overall and per-residue accuracy, and assess their similarity to reference cryo-EM or X-ray structures as well as other models submitted in this challenge. The web infrastructure provides a convenient interface for analyzing models at different levels of detail. As a result, it includes interactively sortable tables of evaluation scores for different subsets of models and different sublevels of structure organization, and a suite of visualization tools facilitating model analysis.

59 BASIC BIOLOGICAL SCIENCES↗

The contribution of magnetized galactic outflows to extragalactic Faraday rotation

ABSTRACT Galactic outflows driven by star formation and active galactic nuclei blow bubbles into their local environments, causing galactic magnetic fields to be carried into intergalactic space. We explore the redshift-dependent effect of these magnetized bubbles on the Faraday rotation measure (RM) of extragalactic radio sources. Using the IllustrisTNG cosmological simulations, we separate the contribution from magnetic bubbles from that of the volume-filling magnetic component expected to be due to the seed field originating in the early universe. We use this separation to extract the redshift dependence of each component and to compare IllustrisTNG model predictions with observation measurements of the NRAO VLA sky survey (NVSS). We find that magnetized bubbles provide a sizeable contribution to the extragalactic RM, with redshift-independent 〈|RM|〉 ≃ 13 rad/m2 for sources at redshifts z ≥ 2. This is close to the mean residual RM of 16 rad/m2 found from NVSS data in this redshift range. Using the IllustrisTNG simulations, we also evaluate a simple model for the contribution to residual RM from individual host galaxies and show that this contribution is negligible at high-redshift. While the contribution from magnetic bubbles in the IllustrisTNG model is currently compatible with observational measurements of residual RM, the next-generation RM sky surveys, which will be free from the wrapping uncertainty, have larger statistics and better sensitivity should be able to observe predicted flat contribution from magnetic bubbles at large redshifts. This should allow to experimentally probe magnetic bubbles and check models of galaxy feedback in cosmological simulations.

79 ASTRONOMY AND ASTROPHYSICS↗

Kaon decay studies at CERN SPS in the last decades

This review summarizes the kaon experimental results obtained in the last 15 years on the basis of data collected on the SPS in CERN with a participance of JINR physicists. These results contribute essentially into the Standard Model checks and search for its extension, fundamental symmetry violations and low energy strong interactions theory development. A progress in the experimental technique and prospects for the future results are also discussed.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Formal verification and validation of run-to-completion style state charts using Event-B

State chart notations with ‘run to completion’ semantics are popular with engineers for designing controllers that react to environment events with a sequence of state transitions but lack formal refinement and rigorous verification methods. State chart models are typically used to design complex control systems that respond to environmental triggers with a sequential process. The model is usually constructed at a concrete level and verified and validated using animation techniques relying on human judgement. Event-B, on the other hand, is based on refinement from an initial abstraction and is designed to make formal verification by automatic theorem provers feasible. Abstraction and formal verification provide greater assurance that critical (e.g. safety or security) properties are not violated by the control system. In this paper, we introduce a notion of refinement into a ‘run to completion’ state chart modelling notation and leverage Event-B’s tool support for theorem proving. We describe the difficulties in translating ‘run to completion’ semantics into Event-B refinements and suggest a solution. We illustrate our approach and show how models can be validated at different refinement levels using our scenario checker animation tools. We show how critical invariant properties can be verified by proof despite the reactive nature of the system and how behavioural aspects of the system can be verified by testing the expected reactions using a temporal logic, model checking approach. To verify liveness, we outline a proof that the run to completion is deadlock-free and converges to complete the run.

97 MATHEMATICS AND COMPUTING↗

Design and verification of distributed logic controllers with application of Petri nets

The paper deals with the designing and verification of distributed logic controllers. The control system is initially modelled with Petri nets and formally verified against structural and behavioral properties with the application of the temporal logic and model checking technique. After that it is decomposed into separate sequential automata that are working concurrently. Each of them is re-verified and if the validation is successful, the system can be finally implemented.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Analysis of Radiation Transport Due to Activated Coolant in the ITER Neutral Beam Injection Cell

Detailed spatial distributions of the biological dose rate due to a variety of sources are required for the design of the ITER tokamak facility to ensure that all radiological zoning limits are met. During operation, water in the Integrated loop of Blanket, Edge-localized mode and vertical stabilization coils, and Divertor (IBED) cooling system will be activated by plasma neutrons and will flow out of the bioshield through a complex system of pipes and heat exchangers. This paper discusses the methods used to characterize the biological dose rate outside the tokamak complex due to 16 N gamma radiation emitted by the activated coolant in the Neutral Beam Injection (NBI) cell of the tokamak building. Activated coolant will enter the NBI cell through the IBED Primary Heat Transfer System (PHTS), and the NBI PHTS will also become activated due to radiation streaming through the NBI system. To properly characterize these gamma sources, the production of 16 N, the decay of 16 N, and the flow of activated water through the coolant loops were modeled. The impact of conservative approximations on the solution was also examined. Once the source due to activated coolant was calculated, the resulting biological dose rate outside the north wall of the NBI cell was determined through the use of sophisticated variance reduction techniques. The AutomateD VAriaNce reducTion Generator (ADVANTG) software implements methods developed specifically to provide highly effective variance reduction for complex radiation transport simulations such as those encountered with ITER. Using ADVANTG with the Monte Carlo N-particle (MCNP) radiation transport code, radiation responses were calculated on a fine spatial mesh with a high degree of statistical accuracy. In conclusion, advanced visualization tools were also developed and used to determine pipe cell connectivity, to facilitate model checking, and to post-process the transport simulation results.

59 BASIC BIOLOGICAL SCIENCES↗

Quantifying correlated truncation errors in effective field theory

Effective field theories (EFTs) organize the description of complex systems into an infinite sequence of decreasing importance. Predictions are made with a finite number of terms, which induces a truncation error that is often left unquantified. Here, we formalize the notion of EFT convergence and propose a Bayesian truncation error model for predictions that are correlated across the independent variables, e.g., energy or scattering angle. Central to our approach are Gaussian processes that encode both the naturalness and correlation structure of EFT coefficients. Our use of Gaussian processes permits efficient and accurate assessment of credible intervals, allows EFT fits to easily include correlated theory errors, and provides analytic posteriors for physical EFT-related quantities such as the expansion parameter. Furthermore, we demonstrate that model-checking diagnostics—applied to the case of multiple curves—are powerful tools for EFT validation. As an example, we assess a set of nucleon-nucleon scattering observables in chiral EFT. In an effort to be self-contained, appendices include thorough derivations of our statistical results. Our methods are packaged in Python code, called gsum, that is available for download on GitHub.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

MC3

MC3 is a model checking solver that provides a more efficient tool for a widely studied class of problems currently solved by other open-source software tools. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-4549 O

Rawlings, Blake↗

A STRONGLY COUPLED REACTOR CORE ISOLATION COOLING SYSTEM MODEL FOR EXTENDED STATION BLACK-OUT ANALYSES

The reactor core isolation cooling (RCIC) system in a boiling water reactor (BWR) provides makeup cooling water to the reactor pressure vessel (RPV) when the main steam lines are isolated and the normal supply of water to the reactor vessel is lost. The RCIC system operates independently of AC power, service air, or external cooling water systems. The only required external energy source is from the battery to maintain the logic circuits to control the opening and/or closure of valves in the RCIC systems in order to control the RPV water level by shutting down the RCIC pump to avoid overfilling the RPV and flooding the steam line to the RCIC turbine. It is generally considered in almost all the existing station black-out accidents (SBO) analyses that loss of the DC power would result in overfilling the steam line and allowing liquid water to flow into the RCIC turbine, where it is assumed that the turbine would then be disabled. This behavior, however, was not observed in the Fukushima Daiichi accidents, where the Unit 2 RCIC functioned without DC power for nearly three days. Therefore, more detailed mechanistic models for RCIC system components are needed to understand the extended SBO for BWRs. As part of the effort to develop the next generation reactor system safety analysis code RELAP-7, we have developed a strongly coupled RCIC system model, which consists of a turbine model, a pump model, a check valve model, a wet well model, and their coupling models. Unlike the traditional SBO simulations where mass flow rates are typically given in the input file through time dependent functions, the real mass flow rates through the turbine and the pump loops in our model are dynamically calculated according to conservation laws and turbine/pump operation curves. A simplified SBO demonstration RELAP-7 model with this RCIC model has been successfully developed. The demonstration model includes the major components for the primary system of a BWR, as well as the safety system components such as the safety relief valve (SRV), the RCIC system, the wet well, and the dry well. The results show reasonable system behaviors while exhibiting rich dynamics such as variable flow rates through RCIC turbine and pump during the SBO transient. The model has the potential to resolve the Fukushima RCIC mystery after adding the off-design two-phase turbine operation model and other additional improvements.

RCIC↗

Systems and methods for enhanced power system model validation

A system for enhanced power system model validation is provided. The system includes a computing device including at least one processor in communication with at least one memory device. The at least one processor is programmed to store a plurality of models for a plurality of devices and a plurality of input files associated with the plurality of models, receive, from a user, a selection of model of the plurality of models to simulate, retrieve one or more input files of the plurality of input files, perform a model validity check on the selected model, if the selected model passed the model validity check, perform a model calibration on the selected model, and if the selected model passed the model calibration, perform a post evaluation on the selected model.

Wang, Honggang↗

Predicting Metabolic Reaction Networks with Perturbation-Theory Machine Learning (PTML) Models

Background: Checking the connectivity (structure) of complex Metabolic Reaction Networks(MRNs) models proposed for new microorganisms with promising properties is an importantgoal for chemical biology. Objective: In principle, we can perform a hand-on checking (Manual Curation). However, this is achallenging task due to the high number of combinations of pairs of nodes (possible metabolic reactions). Results: The CPTML linear model obtained using the LDA algorithm is able to discriminate nodes(metabolites) with the correct assignation of reactions from incorrect nodes with values of accuracy,specificity, and sensitivity in the range of 85-100% in both training and external validation dataseries. Methods: In this work, we used Combinatorial Perturbation Theory and Machine Learning techniquesto seek a CPTML model for MRNs >40 organisms compiled by Barabasis’ group. First, wequantified the local structure of a very large set of nodes in each MRN using a new class of node indexcalled Markov linear indices fk. Next, we calculated CPT operators for 150000 combinationsof query and reference nodes of MRNs. Last, we used these CPT operators as inputs of differentML algorithms. Conclusion: Meanwhile, PTML models based on Bayesian network, J48-Decision Tree and RandomForest algorithms were identified as the three best non-linear models with accuracy greaterthan 97.5%. The present work opens the door to the study of MRNs of multiple organisms usingPTML models.

Pharmacology & Pharmacy↗

Hydrothermal Liquefaction and Upgrading of Municipal Wastewater Treatment Plant Sludge: A Preliminary Techno-Economic Analysis

A preliminary process model and techno-economic analysis (TEA) was completed for fuel produced from hydrothermal liquefaction (HTL) of sludge waste from a municipal wastewater treatment plant (WWTP) and subsequent biocrude upgrading. The model is adapted from previous work by Jones et al. (2014) for algae HTL, using experimental data generated in fiscal year 2015 (FY15) bench-scale HTL testing of sludge waste streams. Testing was performed on sludge samples received from MetroVancouver’s Annacis Island WWTP (Vancouver, B.C.) as part of a collaborative project with the Water Environment and Reuse Foundation (WERF). The full set of sludge HTL testing data from this effort will be documented in a separate report to be issued by WERF. This analysis is based on limited testing data and therefore should be considered preliminary. Future refinements are necessary to improve the robustness of the model, including a cross-check of modeled biocrude components with the experimental GCMS data and investigation of equipment costs most appropriate at the smaller scales used here. Environmental sustainability metrics analysis is also needed to understand the broader impact of this technology pathway. The base case scenario for the analysis consists of 10 HTL plants, each processing 100 dry U.S. ton/day (92.4 ton/day on a dry, ash-free basis) of sludge waste and producing 234 barrel per stream day (BPSD) biocrude, feeding into a centralized biocrude upgrading facility that produces 2,020 barrel per standard day of final fuel. This scale was chosen based upon initial wastewater treatment plant data collected by the resource assessment team from the EPA’s Clean Watersheds Needs Survey database (EPA 2015a) and a rough estimate of what the potential sludge availability might be within a 100-mile radius. In addition, we received valuable feedback from the wastewater treatment industry as part of the WERF collaboration that helped form the basis for the selected HTL and upgrading plant scales and feedstock credit (current cost of disposal). It is assumed that the sludge is currently disposed of at $16.20/wet ton ($46/dry ton at 35% solids; $50/ton dry, ash-free basis) and this is included as a feedstock credit in the operating costs. The base case assumptions result in a minimum biocrude selling price of $3.8/gge and a minimum final upgraded fuel selling price of $4.9/gge. Several areas of process improvement and refinements to the analysis have the potential to significantly improve economics relative to the base case: • Optimization of HTL sludge feed solids content • Optimization of HTL biocrude yield • Optimization of HTL reactor liquid hourly space velocity (LHSV) • Optimization of fuel yield from hydrotreating • Combined large and small HTL scales specific to regions (e.g., metropolitan and suburban plants) Combined improvements believed to be achievable in these areas can potentially reduce the minimum selling price of biocrude and final upgraded fuel by about 50%. Further improvements may be possible through recovery of higher value components from the HTL aqueous phase, as being investigated under separate PNNL projects. Upgrading the biocrude at an existing petroleum refinery could also reduce the MFSP, although this option requires further testing to ensure compatibility and mitigate risks to a refinery. And finally, recycling the HTL aqueous phase product stream back to the headworks of the WWTP (with no catalytic hydrothermal gasification treatment) can significantly reduce cost. This option is uniquely appropriate for application at a water treatment facility but also requires further investigation to determine any technical and economic challenges related to the extra chemical oxygen demand (COD) associated with the recycled water.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Hydrothermal Liquefaction and Upgrading of Municipal Wastewater Treatment Plant Sludge: A Preliminary Techno-Economic Analysis, Rev.1

A preliminary process model and techno-economic analysis (TEA) was completed for fuel produced from hydrothermal liquefaction (HTL) of sludge waste from a municipal wastewater treatment plant (WWTP) and subsequent biocrude upgrading. The model is adapted from previous work by Jones et al. (2014) for algae HTL, using experimental data generated in fiscal year 2015 (FY15) bench-scale HTL testing of sludge waste streams. Testing was performed on sludge samples received from Metro Vancouver’s Annacis Island WWTP (Vancouver, B.C.) as part of a collaborative project with the Water Environment and Reuse Foundation (WERF). The full set of sludge HTL testing data from this effort will be documented in a separate report to be issued by WERF. This analysis is based on limited testing data and therefore should be considered preliminary. In addition, the testing was conducted with the goal of successful operation, and therefore does not represent an optimized process. Future refinements are necessary to improve the robustness of the model, including a cross-check of modeled biocrude components with the experimental GCMS data and investigation of equipment costs most appropriate at the relatively small scales used here. Environmental sustainability metrics analysis is also needed to understand the broader impact of this technology pathway. The base case scenario for the analysis consists of 10 HTL plants, each processing 100 dry U.S. ton/day (92.4 ton/day on a dry, ash-free basis) of sludge waste and producing 234 barrel per stream day (BPSD) biocrude, feeding into a centralized biocrude upgrading facility that produces 2,020 barrel per standard day of final fuel. This scale was chosen based upon initial wastewater treatment plant data collected by PNNL’s resource assessment team from the EPA’s Clean Watersheds Needs Survey database (EPA 2015a) and a rough estimate of what the potential sludge availability might be within a 100-mile radius. In addition, we received valuable feedback from the wastewater treatment industry as part of the WERF collaboration that helped form the basis for the selected HTL and upgrading plant scales and feedstock credit (current cost of disposal). It is assumed that the sludge is currently disposed of at $16.20/wet ton ($46/dry ton at 35% solids; $50/ton dry, ash-free basis) and this is included as a feedstock credit in the operating costs. The base case assumptions result in a minimum biocrude selling price of $3.8/gge and a minimum final upgraded fuel selling price of $4.9/gge. Several areas of process improvement and refinements to the analysis have the potential to significantly improve economics relative to the base case: •Optimization of HTL sludge feed solids content •Optimization of HTL biocrude yield •Optimization of HTL reactor liquid hourly space velocity (LHSV) •Optimization of fuel yield from hydrotreating •Combined large and small HTL scales specific to regions (e.g., metropolitan and suburban plants) Combined improvements believed to be achievable in these areas can potentially reduce the minimum selling price of biocrude and final upgraded fuel by about 50%. Further improvements may be possible through recovery of higher value components from the HTL aqueous phase, as being investigated under separate PNNL projects. Upgrading the biocrude at an existing petroleum refinery could also reduce the MFSP, although this option requires further testing to ensure compatibility and mitigation of risks to a refinery. And finally, recycling the HTL aqueous phase product stream back to the headworks of the WWTP (with no catalytic hydrothermal gasification treatment) can significantly reduce cost. This option is uniquely appropriate for application at a water treatment facility but also requires further investigation to determine any technical and economic challenges related to the extra chemical oxygen demand (COD) associated with the recycled water.

09 BIOMASS FUELS↗

Nanosecond Transient Validation of Surge Arrester Models to Predict Electromagnetic Pulse Response

The impact of high-altitude electromagnetic pulse events on the electric grid is not fully understood, and validated modeling of mitigations, such as lightning surge arresters (LSAs) is necessary to predict the propagation of very fast transients on the grid. Experimental validation of high frequency models for surge arresters is an active area of research. Further, this article serves to experimentally validate a previously defined ZnO LSA model using four metal-oxide varistor pucks and nanosecond scale pulses to measure voltage and current responses. The SPICE circuit models of the pucks showed good predictability when compared to the measured arrester response when accounting for a testbed inductance of approximately 100 nH. Additionally, the comparatively high capacitance of low-profile arresters show a favorable response to high-speed transients that indicates the potential for effective electromagnetic pulse mitigation with future materials design.

42 ENGINEERING↗

Preliminary Gap Analysis of Existing IEEE 1547 and IEEE 2800 Standards Towards GFM Technology

This document describes the tests that are conducted on generic grid-forming (GFM) distributed energy resource (DER) and inverter-based resource (IBR) models to check if the performance of the model aligns respectively with the IEEE Std 1547 TM -2018 and IEEE Std 2800 TM -2022 requirements. For the IEEE Std 1547 TM -2018 requirements, specifically the tests related to volt-var requirements and frequency droop requirements are conducted. For the IEEE Std 2800 TM -2022 requirements, specifically the tests conducted are related to reactive- power-voltage control requirements, active-power-frequency response requirements, voltage disturbance ride through requirements and phase jump ride through requirements. This is an initial draft/document. There are many more tests still yet to be done to further verify if the existing standards have a gap or inadvertent barrier to GFM technology.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Approach to Quality Assurance for Complex Environmental Modeling - 20407

A strong Quality Assurance (QA) program for complex environmental modeling is essential for regulatory and public acceptance and trust, but it does not have to be onerous. Neptune and Company, Inc. (Neptune) has developed a strong QA program that improves transparency, traceability, reproducibility, and therefore, defensibility and trust. Neptune's QA program has evolved over the past 27 years, transitioning from an ad hoc QA program, to a program that is currently Nuclear Quality Assurance-1 (NQA-1) compliant, and will soon be NQA-1/DOE approved for DOE EM modeling work. In addition, Neptune is a qualified laboratory assessor and qualified auditor for reference materials, a proficiency testing provider, and fully complies with the Environmental Protection Agency (EPA) QA program. Neptune's President and CEO, Kelly Black, was recently named the Chairperson of the International Organization for Standardization (ISO) Technical Committee 69, Application of Statistical Methods. A strong QA program has been developed for Neptune's radiological performance assessment (PA) program. Although pieces of their QA program are currently in development, their current program includes document control using Subversion, issue tracking and work flow tracking using JIRA, and transparency and traceability via a system of 'calc sheets' for documentation of all data analysis and modeling combined with 'check print' documentation of QA checking, and rigorous model testing and configuration control. All work is reviewed by an independent subject matter expert who is not associated with the collection and assembly of information, for an internal peer review. The program is enforced with a handful of Standard Operation Procedures (SOPs), Work Instructions, QA Project Plans (QAPPs), and Quality Management Plans (QMPs) that are updated frequently, with required annual training and acknowledgment. In addition, effective communication of modeling approaches and results to clients and stakeholders are integral to their QA program. Many of their models are built using the GoldSim modeling platform, for which their models are well-known for their level of transparency, documentation, and QA traceability. This level of QA is also applied to their process-level models. Neptune has taken some lessons learned from the extremely rigorous QA program required for the Yucca Mountain Project (YMP), and imposed the YMP requirements of complete traceability, transparency, and reproducibility, but avoided the inflexibility of a QA program that likely contributed to the suspect e-mails in 2005 that resulted in loss of trust in the YMP, and in nuclear waste disposal (and nuclear power) in general. There are far too many examples of loss of public trust due to poor QA that could have been easily avoided with a simple and straight-forward QA program combined with stakeholder engagement. The purpose of this paper is to share features of Neptune's Radiological Performance Assessment program QA program, and some of their QA related lessons learned over the past 27 years of QA for complex environmental modeling. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗