SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
The Aviation Security Screening Optimizer for Risk and Throughput (ASSORT) is designed to assess risk-based approaches for passenger screening and checkpoint operations. Additionally, ASSORT is exploring various traveler categories — general, trusted, and trusted-plus — along with different checkpoint screening Concept of Operations tailored to each traveler type
The incorporation of remote operations into reactor operations is a topic of high interest among advanced and small modular reactor (A/SMR) vendors, with some considering it essential to the success of their business models. However, remote operations are a concept novel to the nuclear industry. While various technical aspects of remote operations have been explored, a significant gap remains in understanding the security implications of integrating remote operations into reactor designs, particularly concerning the security requirements for remote-operations facilities and infrastructure. This report aims to address this gap by first defining classes of remote operation based on the extent of remote access to reactor control systems and grounded in the existing regulatory framework with compatible terminology. Secondly, the report outlines the physical and cybersecurity requirements applicable to remote-operations facilities and infrastructure at each defined class. These requirements are based on existing licensing frameworks provided by 10 Code of Federal Regulations (CFR) Part 50 and 10 CFR Part 52, as well as the upcoming A/SMR licensing framework in the proposed Part 53. The assessment focuses specifically on security regulations, such as 10 CFR Part 73, which includes provisions for both cybersecurity (§ 73.54) and physical security (§ 73.55). This report proposes five classes of remote reactor operations. Class 1 involves remote monitoring only, with no control over reactor systems. Class 2 allows for the remote issuance of allowlisted commands to the reactor facility. Class 3 extends control to non-safety-significant, non-safety-related, or not important to safety systems and equipment. Class 4 permits remote control of safety-significant systems. Finally, Class 5 allows remote control of safety-related systems. It is important to note that these classes were defined purely with functionality in mind, without considering the practicality or feasibility of implementation for each class under current or upcoming regulatory guidance. The intention behind this approach is to enable an assessment of which security requirements apply to each class, allowing readers to evaluate the implementation possibilities for their specific use cases. Following the definition of remote-operation classes, the report assesses the specific physical and cybersecurity requirements applicable to the remote-operations facility and infrastructure within each defined class. This includes defining the types and locations of operators that are possible at each class of operation and, based on operator type and location, as well as functionality within each class, outlining the physical and cybersecurity requirements. By detailing the security requirements by class, the report provides readers with the information needed to determine the type of security program they may need to implement for their desired concept of operation. The next contribution of this report was to assess the practicality of implementing each proposed class of remote operations based upon the security requirement assessment. In short, three of the five proposed remote-operation classes were found to possibly have a practical path forward to implementation under the U.S. regulatory framework. Class 1 remote operations are currently in use in the U.S. while Class 2 and 3 remote operations may be logistically possible to implement under the U.S. regulatory framework. The final two Classes, 4 and 5, would likely be logistically difficult, if not infeasible to implement within the current U.S. physical- and cybersecurity regulatory framework. Given the results of the feasibility assessment, an example architecture is proposed for both Class 2, remote allowlisted commands, and Class 3, remote control of non-safety systems as well as security implication assessments of each architecture. These example implementations are not meant to be prescriptive in terms of how Class 2 or Class 3 remote operations should be deployed; instead, they are intended to be informative to stakeholders on how Class 2 or Class 3 could potentially be applied in order to inform their system design. An example architecture for Class 1 remote monitoring was not provided as Class 1 in already in use in U.S. nuclear operations. Example architectures for Class 4 and Class 5 were not provided due to their assessment of being likely infeasible to implement. The final contribution is an assessment of the physical- and cybersecurity implications of introducing autonomous operations into an A/SMR. What was found was that the security implications can be separated into two cases. Autonomous operations supported by SSCs located only at the reactor site, and autonomous operations supported by SSCs outside of the reactor site. For the first case, the introduction of autonomous systems will likely not change the facility’s requirement to comply with existing cyber and physical security regulation
This session will provide insight into how future energy deployments, critical to national-level programs focused on reducing carbon emissions, can be secured-by-design using lessons learned from current energy infrastructure. It will begin with an overview of current threats and risks associated with renewable energy assets and systems, primarily wind and solar, focusing on their control architecture and key system functions for both efficient and safe operations. This talk will then translate the key takeaways from current renewable infrastructure into applications for securing future energy systems, including microreactors and small modular reactors (SMRs), based on planned concepts of operations and control. Microreactors and SMRs are intended to be factory-assembled with commercially available components and deployed in more remote or distributed environments, necessitating centralized control centers, remote monitoring, and offsite maintenance and technical support. All of these factors lead these assets to a security posture and controls more similar to today's renewable energy assets than today's nuclear reactors, which represents a significant shift in mindset for the nuclear industry. This talk will provide justification for this shift as well as a path forward to motivate securing these groundbreaking technologies from the outset of their design and deployment.
The "density limit'' is one of the fundamental bounds on tokamak operating space, and is commonly estimated via the empirical Greenwald scaling. This limit has garnered renewed interest in recent years as it has become clear that ITER and many tokamak pilot plant concepts must operate near or above the widely-used Greenwald limit to achieve their objectives. Evidence has also grown that the Greenwald scaling - in its remarkable simplicity - may not capture the full complexity of the disruptive density limit. In this study, we assemble a multi-machine database to quantify the effectiveness of the Greenwald limit as a predictor of the L-mode density limit and identify alternative stability metrics. We find that a two-parameter dimensionless boundary in the plasma edge, $\nu_{*\rm, edge}^{\rm limit} = 3.0 \beta_{T,{\rm edge}}^{-0.4}$, achieves significantly higher accuracy (true negative rate of 97.7\% at a true positive rate of 95\%) than the Greenwald limit (true negative rate 86.1\% at a true positive rate of 95\%) across a multi-machine dataset including metal- and carbon-wall tokamaks (AUG, C-Mod, DIII-D, and TCV). The collisionality boundary presented here can be applied for density limit avoidance in current devices and in ITER, where it can be measured and responded to in real time.
Electric grid operators are adept at handling complexity and uncertainty. However, with increasing introduction of renewable generation, distributed energy resources, and more frequent severe weather events, operators will experience new workload and challenging decision scenarios. Here, this paper quantifies risks and benefits from an operator's perspective of introducing weather based forecast Dynamic Line Ratings (DLR) using variable wind conditions in addition to ambient temperature to relieve transmission congestion and facilitating more offshore wind (OSW). A concept of operations (CONOPS) applied to a forecast DLR implementation and its integration with OSW is defined. A method for evaluating tradeoffs of derating to make the rating more conservative but decreasing the benefit was developed and applied to a case study for two existing overhead transmission lines on Long Island, New York. The CONOPS uses historical day-ahead and hour-ahead High Resolution Rapid Refresh weather forecasts and weather station data to support planning and real-time operations. The analysis determines the risk of downgrades in real-time operational rating compared to the forecast and quantifies the frequency and severity of last-minute downgrades. The risk is compared against the benefits in increased capacity to provide insights on the additional amount of uncertainty DLR and OSW will add to the operator's workload.
The verification of warhead dismantlement is expected to be an important component in future arms reduction treaties. Historic approaches developed with future arms control treaty verification in mind often involve intrusive measurements, process monitoring, and/or inspector presence to provide confidence that an authentic warhead has been dismantled. This work explores the possibility of reducing the negative impacts of these invasive approaches while also delivering a method that is more likely to provide non-sensitive data that can be shared with not only other nuclear weapons states but also non-nuclear weapons states partners. This work explores a novel approach for verifying dispositioned non-nuclear weapon components, providing confidence post-dismantlement that a treaty accountable item that was dismantled was in fact a treaty-relevant nuclear weapon system as declared. This method provides an alternative to intrusive inspection processes in nuclear weapons production environments, which would require significant changes to the host’s operational behaviors. It achieves this by identifying intrinsic neutron-induced signatures of non-nuclear components to determine their authenticity and estimate the duration they were exposed within a nuclear weapons system using technologies that are already in use for other national security applications. Intrinsic radiation effects studies are already a part of the stockpile aging and surveillance evaluations. However, none of these technologies and approaches have been previously considered for verification applications of non-nuclear component disposition. In this report, we introduce modeling studies that have been used to identify the most promising candidate parts and materials with signatures that are measurable and actionable. These models have been validated with laboratory measurements of signatures induced by the exposure of candidate materials to neutrons over a range of times. Predictive modeling then demonstrates the methodology for estimating exposure times and/or limits. Laboratory measurements of authentic non-nuclear parts from a dismantled warhead demonstrate the feasibility of employing these signature measurements. And finally, a concept of operations (CONOPS) for the potential use of this methodology is presented.
Optimization of a natural gas power plant with integrated calcium looping, membrane and cryogenic CO 2 separation, and DAC for negative emissions.
Within the current United States (U.S.) nuclear power fleet, main control room modernization (CRM) is an important step towards cost savings. In recent decades, plants have been engaged in upgrades to varying degrees. This process requires a nuanced, balanced, and timely approach that ensures continued safety and long-term sustainability. In 2012 a survey was issued to individuals from the nuclear industry to learn their perspectives on a range of CRM issues. The survey targeted the benefits and challenges for utilities undertaking this process, including the main drivers and barriers to technology upgrades, regulatory compliance, and the effects these factors have on concepts of operations, strategic approaches, and staffing. In 2022, the survey was issued again to understand whether CRM perceptions had changed in the last 10 years. Our findings identify changes in industry thinking from a decade ago. Here we reveal perspective shifts that represent increased optimism and, in some instances, increased doubt regarding the opportunities and challenges inherent in CRM and implementation. We also report nuanced differences in CRM perspectives between utility and surrounding nuclear industry respondents.
A novel optical gas analyser, designed for isotope-resolved exhaust composition measurement, was field-tested at Wendelstein 7-X (W7-X) to validate its laboratory-proven concept under operational fusion experiment conditions. The system, Optix, comprises a cold cathode remote plasma generator and a high-resolution Fabry–Perot spectrometer and was deployed in the exhaust line of W7-X during the OP2.3 campaign. The injection of 3 He and 4 He for minority ion-cyclotron heating provided a test case for helium isotope discrimination. Despite limitations due to background gas and low partial pressures of the target species, isotope-resolved spectral signatures were successfully observed, demonstrating the fundamental viability of the Optix approach. Additionally, the spectrometer was evaluated for plasma emission measurements from both core and edge sightlines. While helium line emission was detectable, interpretation was hindered by complex background signals, highlighting the benefits of controlled remote plasma generators for spectroscopy. This first deployment provides critical insight into pressure requirements, spectral resolution, and operational constraints, informing future applications of optical exhaust diagnostics in fusion devices.
A prototype low-flow marine current turbine for deployment from a small unmanned mobile floating platform has been developed for autonomously seeking and harnessing tidal/coastal currents. The support platform is an unmanned surface vehicle (USV), in the form of a catamaran with two electric outboard motors and with capabilities for autonomous navigation. The USV utilized is a WAM-V 16 vehicle that has been developed separately with support from the Office of Naval Research (ONR) [1]. The marine current turbine is based on a freestream waterwheel (FSWW), also known as an undershot waterwheel (FSWW), mounted on the stern of the USV. The concept of operation involves the USV autonomously navigating to a designated marine current resource. Upon arrival, the USV anchors itself, aligns with the current, and deploys the FSWW turbine using a custom cable-lift mechanism. The turbine harnesses the local current, and an onboard power-take-off (PTO) device converts the mechanical energy into electricity, which is stored in an onboard battery bank. When energy harvesting is completed, the turbine and the anchor are retrieved and the USV navigates to a selected location. These unmanned at-sea platforms can provide power to other unmanned maritime systems. Specifically, in this project, the power generated onboard can be used to charge aerial drones via a custom flight deck that has been developed for the USV. The recharging capabilities offered by a fleet of such strategically placed recharging stations can significantly benefit aerial drones operating in the maritime domain by eliminating the need to travel back and forth to land or ship based charging stations. The project has resulted in the development of subcomponents, including the FSWW turbine, a novel PTO, an automated anchoring system for the USV, an automated turbine deployment system, and a flight deck with capabilities onboard the USV for landing, direct-contact charging and takeoff of aerial drones. The design and development of these subsystems have culminated in the overall prototype marine hydrokinetic platform (MHK Platform, Fig. 1). Comprehensive lab and field testing have been conducted to validate the functionality and performance of the platform and its components. The project demonstrates the potential for autonomous, unmanned systems to harness renewable energy from marine currents, and provide sustainable power solutions for maritime applications such as coastal surveillance and environmental monitoring; shoreline mapping; search and rescue; oceanographic research; inspection and maintenance of offshore energy installations like wind turbines and oil rigs; oil spill response; maritime disaster response; and aerial surveys, as well as facilitation of data transfer drones and shore stations.
This report discusses microreactor transportation emergency planning and response challenges. The emphasis of the report is on transporting a microreactor containing irradiated fuel by highway and rail. The report first discusses microreactors in general, including microreactor fuel types and the use of hazardous material in microreactor designs. The report presents a microreactor concept of operations for transport highway, rail, and vessel and presents several transportation regulatory challenges associated with microreactors. Updates contained in this report include the transportation implications of revising the uranium lung absorption category for tri-structural isotropic (TRISO) particle fuel, discussion of exercises and drills including the 2024 Naval Spent Nuclear Fuel Transportation Accident Demonstration with the Shoshone-Bannock Tribes and the State of Idaho, and Tribal and State perspectives on microreactor transportation emergency response planning. Additional microreactor transportation external engagement activities conducted during FY2024 are also discussed. The report discusses the implications of the recent East Palestine, Ohio, rail accident for transportation emergency response planning. Included in this update is a discussion of H.R. 8996, the Railroad Safety Enhancement Act of 2024.
The individual components of a Large Area Airborne Contamination Monitoring (LAACM) system have been demonstrated as functional and the concept of a low-cost, rapidly deployable, and rapidly expandable system has been validated. All components of a previously demonstrated system were re-evaluated. Based on this evaluation, recommendations were made for air collection equipment, scintillating material was synthesized and optimized for application, and improved images were acquired. A preliminary concept of operations was developed, outlining the need for an automated scintillation application system and software for data acquisition and analysis. The work conducted under this program in FY24 has raised the Technology Readiness Level (TRL) of the LAACM from TRL 3 to TRL 4.
NASA and DOE have been developing concepts for lunar and Mars Fission Surface Power (FSP) systems for decades and have considered many different technologies and system variations. In 2023, three contractor teams completed Phase 1 conceptual design studies on a 40 kWe lunar FSP system in response to a modest set of NASA requirements and goals. A government team consisting of NASA Glenn Research Center (GRC), Los Alamos National Laboratory (LANL), and Idaho National Laboratory (INL) was formed to develop an independent design approach that adhered to the same requirements and goals posed to the contractor teams. GRC provided expertise, analysis, and design decisions for the power conversion, heat rejection, power management & distribution (PMAD), and mission integration. LANL and INL provided expertise, analysis, and design decisions for the reactor and shielding. The goal of the government study was to develop representative concepts that could be used in NASA architecture studies, guide government technology investments, and inform Phase 2 requirements definition. This paper provides a summary of the key technology options, system-level trades, and mission-level concept-of-operations.
Electrified transportation is calling for insulation design criteria that is adequate to provide elevated levels of power density, power dynamics and reliability. Increasing voltage levels are expected to cause accelerated intrinsic and extrinsic aging effects which will not be easily predictable at the design stage due to a lack of suitable modeling. Designing reliable insulation systems would require finding solutions able to control accelerated aging due to an unpredictable increase of intrinsic stresses and the onset of extrinsic stresses as partial discharges. This paper proposes the concept of reliability redundancy for the insulation design of aerospace electrical asset components, which is also validated at lower-than-standard atmospheric pressure. The principle is that extrinsic-aging-free design might be achieved upon determining the aging stress or abnormal service stresses distribution and being sure that aging will not generate conditions that can incept extrinsic aging (partial discharges) during operation life. However, such information is never, in practice, fully available to insulation system designers. Hence, especially in critical applications such as electrified aircraft, aerospace, and combat ships a further level of reliability should be added to a partial-discharge-free design, which can consist of the use of corona-resistant materials and/or of life models able to consider the accelerated aging effect of partial discharges (or any other type of extrinsic-accelerated aging factor). Innovative life modeling considering both extrinsic and intrinsic aging stresses, insulating material testing to estimate model parameters, and a metric for quantifying the extent of corona (or partial discharge) resistance can lead to establishing feasibility and limit conditions for optimized or fully reliability-redundant design. It is shown in the paper that if an extrinsic-aging-free design is not feasible, and it is therefore replaced by a redundant design, a further level of reliability redundancy can be provided by effective condition monitoring plans.
The nuclear industry is rapidly developing many advanced-reactor concepts for near-term deployment in both traditional and non-traditional nuclear-powered applications. One such category of advanced reactor is the microreactor, a class of reactor with less than 20MWth power output, intended for applications where the economics or logistics of traditional power sources are difficult. This includes applications such as remote communities, mining sites, defense installations, or humanitarian and disaster-relief missions. One key enabling feature for the successful deployment of microreactors is a remote operations capability. Remote operations provide monitoring and control capabilities which can significantly reduce staffing costs by eliminating the need for licensed operators at each reactor facility and improve the economic viability for microreactor deployment. A remote concept of operations is not currently an established capability in the nuclear industry. In addition, no demonstration microreactor is expected to complete construction or go critical until at least 2026. This leaves two major capability gaps: the successful demonstration of a remote concept of operations for microreactors and a test bed suitable for said demonstration. Both gaps must be addressed in order to advance the remote concepts of nuclear operation and, more broadly, microreactors themselves from paper to reality. This paper aims to fill these gaps and describes a test bed that would support development and deployment of a remote concept of nuclear operations, initial experimental results from that test bed, and the application of the test bed and experimental results for a digital-twin-based remote concept of operations underdevelopment at Idaho National Laboratory (INL). The platform chosen as a remote concept of nuclear operations test bed is the Single Primary Heat Extraction and Removal Emulator, known as SPHERE, located at INL. SPHERE is a small-scale non-nuclear test bed that emulates thermal behavior of a microreactor. The small-scale and non-nuclear nature of SHPERE limit safety concerns associated with remote operations while still providing the physical response representative of a microreactor. A network connection was added to SPHERE that enables remote-monitoring capability. This allows for real-time data streaming to networked workstations, data historians, and human-machine interfaces (HMIs). These are all critical components in a remote concept of operations, thus providing a robust development and demonstration platform. An initial experiment was performed using the SPHERE remote operations testbed. This included running a comprehensively instrumented SPHERE through a series of steady-state and transient operating scenarios in both normal and abnormal operating conditions, all while streaming live test data to a remote HMI and data warehouse. This initial experiment served three purposes: (1) characterizing the response of SPHERE, (2) demonstrating the remote connection to SPHERE, and (3) providing a baseline data set for development of a digital-twin-based remote concept of operations that is under development at INL.
The nuclear industry is rapidly developing many advanced-reactor concepts for near-term deployment in both traditional and non-traditional nuclear-powered applications. One such category of advanced reactor is the microreactor, a class of reactor with less than 20MWth power output, intended for applications where the economics or logistics of traditional power sources are difficult. This includes applications such as remote communities, mining sites, defense installations, or humanitarian and disaster-relief missions. One key enabling feature for the successful deployment of microreactors is a remote operations capability. Remote operations provide monitoring and control capabilities which can significantly reduce staffing costs by eliminating the need for licensed operators at each reactor facility and improve the economic viability for microreactor deployment. A remote concept of operations is not currently an established capability in the nuclear industry. In addition, no demonstration microreactor is expected to complete construction or go critical until at least 2026. This leaves two major capability gaps: the successful demonstration of a remote concept of operations for microreactors and a test bed suitable for said demonstration. Both gaps must be addressed in order to advance the remote concepts of nuclear operation and, more broadly, microreactors themselves from paper to reality. This paper aims to fill these gaps and describes a test bed that would support development and deployment of a remote concept of nuclear operations, initial experimental results from that test bed, and the application of the test bed and experimental results for a digital-twin-based remote concept of operations underdevelopment at Idaho National Laboratory (INL). The platform chosen as a remote concept of nuclear operations test bed is the Single Primary Heat Extraction and Removal Emulator, known as SPHERE, located at INL. SPHERE is a small-scale non-nuclear test bed that emulates thermal behavior of a microreactor. The small-scale and non-nuclear nature of SHPERE limit safety concerns associated with remote operations while still providing the physical response representative of a microreactor. A network connection was added to SPHERE that enables remote-monitoring capability. This allows for real-time data streaming to networked workstations, data historians, and human-machine interfaces (HMIs). These are all critical components in a remote concept of operations, thus providing a robust development and demonstration platform. An initial experiment was performed using the SPHERE remote operations testbed. This included running a comprehensively instrumented SPHERE through a series of steady-state and transient operating scenarios in both normal and abnormal operating conditions, all while streaming live test data to a remote HMI and data warehouse. This initial experiment served three purposes: (1) characterizing the response of SPHERE, (2) demonstrating the remote connection to SPHERE, and (3) providing a baseline data set for development of a digital-twin-based remote concept of operations that is under development at INL.
Multiple nuclear microreactor concepts are currently being developed across several sizes and fuel types with high performance computing (HPC) systems anticipated to be end-users of the power. Nuclear microreactors are small in size, portable, produce less than 10 MW electric, operate autonomously, and have a refueling interval of as many as 10 years. However, their load-follow is also generally limited to 10%/minute or worse whereas the power variance in HPC systems easily exceeds this constraint under normal operations. This study explores an approach that requires no load-follow from the microreactor but integrates the HPC system with a microgrid built from commercial-off-the-shelf components. Three typical HPC architectures are explored in the context of microgrid operation in this study. Components of power quality and transient response are empirically measured for five different HPC load-follow response levels using a self-contained mobile datacenter connected to the microgrid capable of integration with a nuclear microreactor.
In an era of increasingly sophisticated and pervasive cyber threats, robust cyber resilience strategies are more critical than ever. This paper introduces the concept of Cyber Conservative Operations, a proactive approach designed to assist critical infrastructure owners and operators in managing risk and maintaining resilience in the face of imminent, yet not occurring, cyber events. By leveraging the principles of Cyber-Informed Engineering (CIE) and the energy sector’s practice of conservative operations, Cyber Conservative Operations offer a framework for planning and executing coordinated active defense and resilience-oriented actions ahead of cyber events. This approach aims to minimize the consequences of digitally-enabled hazards and ensure swift recovery from anticipated cyber threats. Cyber Conservative Operations enhance the ability of owners and operators to execute pre-planned defense and resilience actions, thereby reducing the impact of digitally-enabled hazards. These operations are crucial for addressing impacts that cannot be precisely quantified or forecasted and for preparing organizations for rapid recovery from imminent digital threats. The paper begins with a discussion of conservative operations as applied to the bulk power system (BPS), a current mechanism allowing BPS entities to enact defensive operating plans to mitigate impending grid unreliability. Building on this model, we present a concept for implementing cyber conservative operations at asset owner facilities. The paper concludes with two case studies of cyber conservative operations drawn from high-profile cyber events, illustrating the practical application and benefits of this proactive approach.