Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk informed design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

The Integrated Medical Model: A Probabilistic Simulation Model for Predicting In-Flight Medical Risks

The Integrated Medical Model (IMM) is a probabilistic model that uses simulation to predict mission medical risk. Given a specific mission and crew scenario, medical events are simulated using Monte Carlo methodology to provide estimates of resource utilization, probability of evacuation, probability of loss of crew, and the amount of mission time lost due to illness. Mission and crew scenarios are defined by mission length, extravehicular activity (EVA) schedule, and crew characteristics including: sex, coronary artery calcium score, contacts, dental crowns, history of abdominal surgery, and EVA eligibility. The Integrated Medical Evidence Database (iMED) houses the model inputs for one hundred medical conditions using in-flight, analog, and terrestrial medical data. Inputs include incidence, event durations, resource utilization, and crew functional impairment. Severity of conditions is addressed by defining statistical distributions on the dichotomized best and worst-case scenarios for each condition. The outcome distributions for conditions are bounded by the treatment extremes of the fully treated scenario in which all required resources are available and the untreated scenario in which no required resources are available. Upon occurrence of a simulated medical event, treatment availability is assessed, and outcomes are generated depending on the status of the affected crewmember at the time of onset, including any pre-existing functional impairments or ongoing treatment of concurrent conditions. The main IMM outcomes, including probability of evacuation and loss of crew life, time lost due to medical events, and resource utilization, are useful in informing mission planning decisions. To date, the IMM has been used to assess mission-specific risks with and without certain crewmember characteristics, to determine the impact of eliminating certain resources from the mission medical kit, and to design medical kits that maximally benefit crew health while meeting mass and volume constraints.

Risk Analysis↗

Statistical Engineering in Air Traffic Management Research

NASA is working to develop an integrated set of advanced technologies to enable efficient arrival operations in high-density terminal airspace for the Next Generation Air Transportation System. This integrated arrival solution is being validated and verified in laboratories and transitioned to a field prototype for an operational demonstration at a major U.S. airport. Within NASA, this is a collaborative effort between Ames and Langley Research Centers involving a multi-year iterative experimentation process. Designing and analyzing a series of sequential batch computer simulations and human-in-the-loop experiments across multiple facilities and simulation environments involves a number of statistical challenges. Experiments conducted in separate laboratories typically have different limitations and constraints, and can take different approaches with respect to the fundamental principles of statistical design of experiments. This often makes it difficult to compare results from multiple experiments and incorporate findings into the next experiment in the series. A statistical engineering approach is being employed within this project to support risk-informed decision making and maximize the knowledge gained within the available resources. This presentation describes a statistical engineering case study from NASA, highlights statistical challenges, and discusses areas where existing statistical methodology is adapted and extended.

Wilson, Sara R.↗

Physical Security Timeline Analysis in Support of Advanced Reactor Demonstration and Deployment

This report presents the regulatory requirements and directions on the physical security of advanced nuclear reactors in USA. Presently, a rule is being proposed that allows for a performance-based analysis. In determining the physical security requirements for an advanced reactor, new tools may be desired to conduct a performance-based analysis. These tools should incorporate dynamic analysis methods to provide as much realism as possible. In comparison, the security requirements for existing light water reactors (LWRs) are much more prescriptive and the analysis conducted to establish the required physical security strategies were more easily performed with static analysis. In order to achieve the cost goals that advanced reactors require for adoption; the nuclear security force required should not be excessive. Dynamic physical security analysis methods and tools have been developed by the US Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) program. This report details how the dynamic risk analysis tools developed in the LWRS program using the dynamic risk modelling tool, EMRALD, may be adapted for use in analyzing the physical security designs for advanced reactors accounting for variable performance-based requirements. This report provides an example analysis of a hypothetical SFR using publicly available information and generic assumptions to demonstrate the methods and potential presentation and analysis of the results. No actual plant information is used in this example analysis. Future work in this area will create additional models that can be adapted for any advanced reactor concept and use various security features to create a physical security system that provides adequate protection from radiological theft and sabotage.

97 MATHEMATICS AND COMPUTING↗

Nuclear Safety [Vol. 35, No. 2, July-December 1994]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 179 Consideration of Postaccident Consequences in the Determination of Safety Objectives for Future Nuclear Power Plants in France, D. Queniart, A. Sugier, and J. Lochard; ACCIDENT ANALYSIS: 187 Nuclear Safety Research: The Phebus FP Severe Accident Experimental Program, P. von der Hardt, A. V. Jones, C. Lecomte, and A. Tattegrain; 205 Containment Performance Analysis of the Advanced Neutron Source Reactor at the Oak Ridge National Laboratory, S. H. Kim, R. P. Taleyarkhan, and V. Georgevich; 213 Assessment of Fission Product Deposits in the Reactor Coolant System: The DEVAP Program, G. Le Marois and M. Megnin; 222 Erratum to “A Review of the Available Information on the Triggering Stage of a Steam Explosion," Vol. 35, No. 1, CONTROL AND INSTRUMENTATION: 223 Effects of Normal Aging on Calibration and Response Time of Nuclear Plant Resistance Temperature Detectors and Pressure Sensors, H. M. Hashemian; DESIGN FEATURES: 235 Defense in Depth Against the Hydrogen Risk—A European Research Program, F. Fineschi; ENVIRONMENTAL EFFECTS: 246 Technical Note: A Preliminary Analysis of the Risks to Hong Kong Resulting from Potential Accidents of Daya Bay Nuclear Power Plant, Z. Shi and X. Wei; OPERATING EXPERIENCES: 253 Reactor Shutdown Experience, Compiled by J. W. Cletcher; SPECIAL SECTION ON TMI-2 VESSEL INVESTIGATION PROJECT: 256 Three Mile Island—New Findings 15 Years After the Accident A. M. Rubin and E. Beckjord; 269 Relocation of Molten Material to the TMI-2 Lower Head, J. R. Wolf, D. W. Akers, and L. A. Neimark; 280 Insight Into the TMI-2 Core Material Relocation Through Examination of Instrument Tube Nozzles, L. A. Neimark; 288 Physical and Radiochemical Examinations of Debris from the TMI-2 Lower Head, D. W. Akers and B. K. Schuetz; 301 Results of Metallographic Examinations and Mechanical Tests of Pressure Vessel Samples from the TMI-2 Lower Head, D. R. Diercks and G. E. Korth; 313 Margin-to-Failure Calculations for the TMI-2 Vessel, J. Rempe, L. Stickler, S. Chavez, G. Thinnes, R. Witt, and M. Corradini; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 328 1993 Accident Sequence Precursor (ASP) Program Results, L. N. Vanden Heuvel, J. W. Cletcher, D. A. Copinger, J. W. Minarick, B. W. Dolan, and P. D. O’Reilley; RECENT DEVELOPMENTS: 339 Reports, Standards, and Safety Guides, D. S. Queener; 345 Proposed Rule Changes as of June 30, 1994; ANNOUNCEMENTS: 234 Thirty-First Annual Meeting of the National Council on Radiation Protection and Measurements; 356 1995 International Incineration Conference; 358 Fifth International Controls and Instrumentation Conference; 359 ANS International Topical Meeting on Safety of Operating Reactors; 359 Fifth International Conference on Nuclear Criticality Safety; 360 International Conference on Probabilistic Safety Assessment Methodology and Applications; 351 The Authors; 357 Reviewers of Nuclear Safety, Vol. 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

On Automating Failure Mode Analysis and Enforcing its Integrity

This paper reports our experience on the development of a design-for-safety (DFS) workbench called Risk Assessment and Management Environment (RAME) for microelectronic avionics systems. Our objective is to transform DFS practice from an ad-hoc, inefficient, error-prone approach to a stringent engineering process such that DFS can keep up with the rapidly growing complexity of avionics systems. In particular, RAME is built upon an information infrastructure that comprises a fault model, a knowledge base, and a failure reporting/tracking system. This infrastructure permits systematic learning from prior projects and enables the automation of failure modes, effects and criticality analysis (FMECA). Among other unique features, the most important advantage of RAME is its capability of directly accepting design source code in hardware description languages (HDLs) for automated failure mode analysis, which enables RAME to be compatible and to evolve with most electronic-computer-aided-design systems. Through an initial experimental evaluation of the RAME prototype, we show that our approach to FMECA automation improves failure mode analysis turn-around-time, completeness, and accuracy.

design for safety↗

Design of a Novel Information System for Semi-Automated Management of Cybersecurity in Industrial Control Systems

There is an urgent need in many critical infrastructure sectors, including the energy sector, for attaining detailed insights into cybersecurity features and compliance with cybersecurity requirements related to their Operational Technology (OT) deployments. Frequent feature changes of OT devices interfere with this need, posing a great risk to customers. One effective way to address this challenge is via a semi-automated cyber-physical security assurance approach, which enables verification and validation of the OT device cybersecurity claims against actual capabilities, both pre- and post-deployment. To realize this approach, this paper presents new methodology and algorithms to automatically identify cybersecurity-related claims expressed in natural language form in ICS device documents. Here, we developed an identification process that employs natural language processing (NLP) techniques with the goal of semi-automated vetting of detected claims against their device implementation. We also present our novel NLP components for verifying feature claims against relevant cybersecurity requirements. The verification pipeline includes components such as automated vendor identification, device document curation, feature claim identification utilizing sentiment analysis for conflict resolution, and reporting of features that are claimed to be supported or indicated as unsupported. Our novel matching engine represents the first automated information system available in the cybersecurity domain that directly aids the generation of ICS compliance reports.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Application of Objectives-Driven Assurance Cases to System Development in an Evolving Acquisition Model

System properties such as “safety” and “dependability” cannot, in practice, be proven, and must be argued in an “assurance case” aimed at supporting risk-acceptance decisions that have to be made by system acquirers and/or regulatory authorities. The paper is concerned with applications of the “assurance case” idea early in design and development of new systems, when (apart from dedicated testing) the only available operating experience information derives from previous (non-identical) systems. Much of the discussion is based on an evolving acquisition model at the US National Aeronautics and Space Administration; previously, most major systems were developed in-house, but some major systems will now be developed by and acquired from commercial providers. Key points discussed include the following. (1) By promoting a particular kind of focused discussion between acquirers and providers, the use of assurance cases should be particularly valuable under the new acquisition model. (2) In principle, objectives-driven (sometimes called “performance-based”) approaches to assurance of performance have significant advantages in cases where they are applicable. (3) For truly novel systems, completeness of the safety analysis is a significant issue; it is important for the assurance case to include a commitment by the provider (or applicant) to seriously pursue analysis of operating experience, so that previously unrecognized hazards can be identified and addressed. (4) Inquiries into major accidents often point to deficiencies in management oversight in all parts of the life cycle; management processes need to be addressed in the formulation and the implementation of an assurance case. Under the new acquisition model, these considerations imply a serious reconsideration of the way in which the development process is managed by both providers and acquirers.

Objectives-driven↗

Consequence analyses of sabotage-induced radiological releases in high-temperature helium-cooled prismatic microreactors

Here, this study analyzes the radiological dose consequences of sabotage-induced accidents at three high-temperature helium-cooled prismatic microreactors (HTPMs) with thermal power ratings of 1, 10, and 50 MWt. Each HTPM employs uranium oxycarbide tristructural isotropic fuel enriched to 19.75 wt% high-assay low-enriched uranium. Simulations were conducted to estimate reactor core inventory at the point of fuel discharge––when the effective multiplication factor reduced to less than 1––representing peak radionuclide inventory. Postulated sabotage scenarios leading to reactor shutdown were analyzed at two intervals: immediately post-shutdown (0 h) and 3 days after shutdown using the SCALE code for radionuclide inventories and the RASCAL tool for dose consequences. Results show that although HTPMs benefit from inherent safety features and robust fuel design, radiological consequences scale with reactor power because of increased source term inventories. Smaller microreactors exhibited proportionally lower dose consequences. To support the economic and regulatory feasibility of microreactor deployment, this study emphasizes the value of a risk-informed, performance-based approach, as supported by regulations like 10 CFR Parts 100 and 53 in the United States. Microreactor developers should perform site-specific assessments of potential sabotage or low-probability, high-consequence events, especially when considering minimal on-site or full off-site emergency response.

Consequence↗

A review of recent developments in flight test techniques at the Ames Research Center, Dryden Flight Research Facility

New flight test techniques in use at Ames Dryden are reviewed. The use of the pilot in combination with ground and airborne computational capabilities to maximize data return is discussed, including the remotely piloted research vehicle technique for high-risk testing, the remotely augmented vehicle technique for handling qualities research, and use of ground computed flight director information to fly unique profiles such as constant Reynolds number profiles through the transonic flight regime. Techniques used for checkout and design verification of systems-oriented aircraft are discussed, including descriptions of the various simulations, iron bird setups, and vehicle tests. Some newly developed techniques to support the aeronautical research disciplines are discussed, including a new approach to position-error determination, and the use of a large skin friction balance for the measurement of drag caused by various excrescencies.

Layton, G. P.↗

Radiation and Thermal Cycling Effects on EPC1001 Gallium Nitride Power Transistors

Electronics designed for use in NASA space missions are required to work efficiently and reliably under harsh environment conditions. These include radiation, extreme temperatures, and thermal cycling, to name a few. Information pertaining to performance of electronic parts and systems under hostile environments is very scarce, especially for new devices. Such data is very critical so that proper design is implemented in order to ensure mission success and to mitigate risks associated with exposure of on-board systems to the operational environment. In this work, newly-developed enhancement-mode field effect transistors (FET) based on gallium nitride (GaN) technology were exposed to various particles of ionizing radiation and to long-term thermal cycling over a wide temperature range. Data obtained on control (un-irradiated) and irradiated samples of these power transistors are presented and the results are discussed.

Patterson, Richard L.↗

Cyber-Informed Engineering Case Study of an Integrated Hydrogen Generation Plant

Strategies for securing digital instrumentation and control (I&C) systems within the nuclear industry are provided by multiple standards and guidance documents. However, since selection and use of security controls outlined in these documents are frequently only considered during or after installation, there are often limitations on their use, such as technological constraints related to design or operation. Furthermore, alternative controls intended to provide the same or similar security countermeasure as the primary control may also be infeasible at these stages, leaving the I&C system vulnerable to cyber-attacks. The limitations associated with ‘bolting on’ security controls late in the systems engineering lifecycle can be reduced by integrating Cyber-Informed Engineering (CIE) into the process. This paper evaluates the use of CIE during the high-level design stage of a hydrogen generation project where heat and electricity are provided by a nuclear power plant. Applying CIE to this project highlighted potential cyber vulnerabilities of the initial design, leading to recommendations for process flow and I&C system design modifications to reduce, and at times eliminate, the risk from both deliberate and unintentional cyber incidents.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Space Radiation and Exploration - Information for the Augustine Committee Review

Space radiation presents significant health risks including mortality for Exploration missions: a) Galactic cosmic ray (GCR) heavy ions are distinct from radiation that occurs on Earth leading to different biological impacts. b) Large uncertainties in GCR risk projections impact ability to design and assess mitigation approaches and select crew. c) Solar Proton Events (SPEs) require new operational and shielding approaches and new biological data on risks. Risk estimates are changing as new scientific knowledge is gained: a) Research on biological effects of space radiation show qualitative and quantitative differences with X- or gamma-rays. b) Expert recommendations and regulatory policy are changing. c) New knowledge leads to changes in estimates for the number of days in space to stay below Permissible Exposure Limits (PELS).

Cucinotta, Francis↗

A Synthetic Vision Preliminary Integrated Safety Analysis

This report documents efforts to analyze a sample of aviation safety programs, using the LMI-developed integrated safety analysis tool to determine the change in system risk resulting from Aviation Safety Program (AvSP) technology implementation. Specifically, we have worked to modify existing system safety tools to address the safety impact of synthetic vision (SV) technology. Safety metrics include reliability, availability, and resultant hazard. This analysis of SV technology is intended to be part of a larger effort to develop a model that is capable of "providing further support to the product design and development team as additional information becomes available". The reliability analysis portion of the effort is complete and is fully documented in this report. The simulation analysis is still underway; it will be documented in a subsequent report. The specific goal of this effort is to apply the integrated safety analysis to SV technology. This report also contains a brief discussion of data necessary to expand the human performance capability of the model, as well as a discussion of human behavior and its implications for system risk assessment in this modeling environment.

Hemm, Robert↗

Development Testing of the Gateway Integrated Bipropellant Refueling Subsystem

The Lunar Gateway is a deep space orbiting outpost being developed by the National Aeronautics and Space Administration (NASA) in partnership with the European Space Agency (ESA) and other domestic and international partners. Because Gateway is a vital component of NASA’s Artemis program supporting long-term human exploration of the moon, it is designed for on-orbit refueling to allow for a longer life performance. The reaction control system (RCS) bipropellant refueling system onboard the station will have the capability to transfer propellants, monomethyl hydrazine (MMH) and mixed oxides of nitrogen-3 (MON-3), under controlled conditions and will span across three modules: the European System Providing Refueling Infrastructure and Telecommunication Refueling Module (ESPRIT-RM or ERM), the Habitation and Logistics Outpost (HALO), and the Propulsion and Power Element (PPE). These propellant transfers are complex operations with known hazards, and one of the risk areas is exceeding the flight system’s maximum design pressure (MDP) in priming and refueling pause/stop operations. In priming, liquid propellant is transferred from a pressurized source tank to evacuated transfer lines, which could result in excessive transient surge pressures and potentially damage hardware. In refueling pause/stop operations, fast-acting isolation valves (IV) are closed, which could lead to damaging water hammer. To mitigate these risks and develop the system, a collaborative NASA/ESA/Thales Alenia Space – United Kingdom (TAS-UK) test program was completed at TAS-UK on a simplified refueling breadboard representing ERM, HALO, and PPE bipropellant transfer systems. The objectives of the integrated breadboard testing were to (1) gather performance data to characterize and demonstrate critical refueling operations, (2) help inform flight designs, and (3) to validate numerical models that can be extended to predicting flight system performance. Integrated breadboard test data has shown the architected system performance is closing initial design assumptions. Further testing with propellant on a higher fidelity fluid simulator and analysis are planned.

Adela D Han↗

Development Testing of the Gateway Integrated Bipropellant Refueling Subsystem

The Lunar Gateway is a deep space orbiting outpost being developed by the National Aeronautics and Space Administration (NASA) in partnership with the European Space Agency (ESA) and other domestic and international partners. Because Gateway is a vital component of NASA’s Artemis program supporting long-term human exploration of the moon, it is designed for on-orbit refueling to allow for a longer life performance. The reaction control system (RCS) bipropellant refueling system onboard the station will have the capability to transfer propellants, monomethyl hydrazine (MMH) and mixed oxides of nitrogen-3 (MON-3), under controlled conditions and will span across three modules: the European System Providing Refueling Infrastructure and Telecommunication Refueling Module (ESPRIT-RM or ERM), the Habitation and Logistics Outpost (HALO), and the Propulsion and Power Element (PPE). These propellant transfers are complex operations with known hazards, and one of the risk areas is exceeding the flight system’s maximum design pressure (MDP) in priming and refueling pause/stop operations. In priming, liquid propellant is transferred from a pressurized source tank to evacuated transfer lines, which could result in excessive transient surge pressures and potentially damage hardware. In refueling pause/stop operations, fast-acting isolation valves (IV) are closed, which could lead to damaging water hammer. To mitigate these risks and develop the system, a collaborative NASA/ESA/Thales Alenia Space – United Kingdom (TAS-UK) test program was completed at TAS-UK on a simplified refueling breadboard representing ERM, HALO, and PPE bipropellant transfer systems. The objectives of the integrated breadboard testing were to (1) gather performance data to characterize and demonstrate critical refueling operations, (2) help inform flight designs, and (3) to validate numerical models that can be extended to predicting flight system performance. Integrated breadboard test data has shown the architected system performance is closing initial design assumptions. Further testing with propellant on a higher fidelity fluid simulator and analysis are planned.

Adela D Han↗

Advanced Engineering Environments for Space Transportation System Development

There are significant challenges facing today's launch vehicle industry. Global competition, more complex products, geographically-distributed design teams, demands for lower cost, higher reliability and safer vehicles, and the need to incorporate the latest technologies quicker, all face the developer of a space transportation system. Within NASA, multiple technology development and demonstration projects are underway toward the objectives of safe, reliable, and affordable access to space. New information technologies offer promising opportunities to develop advanced engineering environments to meet these challenges. Significant advances in the state-of-the-art of aerospace engineering practice are envisioned in the areas of engineering design and analytical tools, cost and risk tools, collaborative engineering, and high-fidelity simulations early in the development cycle. At the Marshall Space Flight Center, work has begun on development of an advanced engineering environment specifically to support the design, modeling, and analysis of space transportation systems. This paper will give an overview of the challenges of developing space transportation systems in today's environment and subsequently discuss the advanced engineering environment and its anticipated benefits.

Thomas, L. Dale↗

An Overview of the Orbital Debris and Meteoroid Environments, Their Effects on Spacecraft, and What Can We Do About It?

Because of the high speeds needed for orbital space flight, hypervelocity impacts with objects in space are a constant risk to spacecraft. This includes natural debris - meteoroids - and the debris remnants of our own activities in space. A number of space surveillance assets are used to measure and track spacecraft, used upper stages, and breakup debris. However, much of the debris and meteoroids encountered by spacecraft in Earth orbit is not easily measured or tracked. For every man-made object that we can track, there are hundreds of small debris that are too small to be tracked but still large enough to damage spacecraft. In addition, even if we knew today's environment with perfect knowledge, the debris environment is dynamic and would change tomorrow. This means that much of the risk from both meteoroids and anthropogenic debris is statistical in nature. NASA uses and maintains a number of instruments to statistically monitor the meteoroid and orbital debris environments, and uses this information to compute statistical models for use by spacecraft designers and operators. Because orbital debris is a result of human activities, NASA has led the US government in formulating national and international strategies that space users can employ to limit the growth of debris in the future. This talk will summarize the history and current state of meteoroid and space debris measurements and modeling, how the environment influences spacecraft design and operations, how we are designing the experiments of tomorrow to improve our knowledge, and how we are working internationally to preserve the space environment for the future.

Matney, Mark↗

Perspectives on flood forecast-based early action and opportunities for Earth observations

This paper seeks to identify opportunities to integrate Earth observations (EO) into flood forecast-based early action and propose future directions for research and collaboration between EO and humanitarian communities. Forecast-based early action (FbA) is an approach to shift disaster response toward anticipation to mitigate impacts to at-risk communities; however, timely and accurate information is needed in the development of data-based triggers and thresholds for action. Therefore, this paper considers the readiness of a wide range of EO for flood monitoring and forecasting in the design, operations, and evaluation phases of FbA. The most significant opportunities for EO to inform FbA efforts lie in the design and evaluation phases, as EO can aid in the development of impact-based triggers. The EO products most readily applicable include precipitation, streamflow estimates, and exposure mapping, and those requiring the greatest amount of further research include vulnerability and impact assessments. This paper identifies collaboration opportunities for the EO and humanitarian communities to create tailored products, such as overlays combining flood extents with exposure maps. Such collaboration opportunities can be fostered by open data sharing, data verification efforts, and incentives for supporting boundary organizations capable of enabling the use of EO for FbA.

disasters↗