Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Behavior based safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27

Engineering stable interfaces for three-dimensional lithium metal anodes

Lithium metal has long been considered one of the most promising anode materials for advanced lithium batteries (for example, Li-S and Li-O 2 ), which could offer significantly improved energy density compared to state-of-the-art lithium ion batteries. Despite decades of intense research efforts, its commercialization remains limited by poor cyclability and safety concerns of lithium metal anodes. One root cause is the parasitic reaction between metallic lithium and the organic liquid electrolyte, resulting in continuous formation of an unstable solid electrolyte interphase, which consumes both active lithium and electrolyte. Until now, it has been challenging to completely shut down the parasitic reaction. We find that a thin-layer coating applied through atomic layer deposition on a hollow carbon host guides lithium deposition inside the hollow carbon sphere and simultaneously prevents electrolyte infiltration by sealing pinholes on the shell of the hollow carbon sphere. By encapsulating lithium inside the stable host, parasitic reactions are prevented, resulting in impressive cycling behavior. In conclusion, we report more than 500 cycles at a high coulombic efficiency of 99% in an ether-based electrolyte at a cycling rate of 0.5 mA/cm 2 and a cycling capacity of 1 mAh/cm 2 , which is among the most stable Li anodes reported so far.

25 ENERGY STORAGE↗

Openpronghorn

OpenPronghorn is a simulation tool specifically tailored for modeling thermal-hydraulic phenomena in advanced nuclear reactors. It is built on the Multiphysics Object-Oriented Simulation Environment (MOOSE), an open-source platform that facilitates the development of high-performance scientific computing applications. OpenPronghorn solves the Navier-Stokes equations, which describe the conservation of mass, momentum, and energy in fluid flows, using the finite volume numerical method. The code supports a wide range of fluid flow conditions that are applicable to nuclear reactors, including incompressible and weakly compressible flows, as well as single-phase and multiphase flows. It is capable of modeling diverse flow regimes, including laminar and turbulent flows, using various turbulence models such as the standard k-epsilon models, the v2f model, and the mixing length model. For multiphase flows, OpenPronghorn employs a mixture a Eulerian modeling approach with mixture, drift-flux, and full Eulerian models, and includes open-sourced interfacial transfer correlations for drag, exchange, and heat transfer coming from the scientific literature. OpenPronghorn's modular design allows it to handle multiscale simulations, ranging from detailed Reynolds-Averaged Navier Stokes (RANS) simulations to coarse-mesh and lumped parameter models. This flexibility enables users to perform high-fidelity simulations of specific reactor components as well as system-level analyses of entire reactor circuits. The code can be coupled with other MOOSE-based tools using the MultiApp system, allowing for the transfer of coupling quantities such as mass flow rates, heat fluxes, and boundary conditions between different simulation scales. One of the main features of OpenPronghorn is the it includes built-in validation cases from the open-source scientific literature and supports the implementation of user-defined models and correlations through MOOSE's FunctorMaterial system. OpenPronghorn is designed to be computationally efficient, leveraging the SIMPLE projection method for large-scale problems, and can be run on high-performance computing systems to handle the extensive computational demands of detailed reactor simulations. Overall, OpenPronghorn is a versatile and robust tool that provides critical insights into the thermal-hydraulic behavior of advanced nuclear reactors, supporting the design, safety, and optimization of next-generation nuclear energy systems.

Retamales, Mauricio Eduardo Tano [Idaho National L↗

Development of Novel Functionally Graded Transition Joints for Improving the Creep Strength of Dissimilar Metal Welds in Nuclear Applications

Steam generators of the small modular Very High Temperature Reactor (VHTR) will require use of Alloy 800 and 2.25Cr-1Mo steel in different regions depending on temperature and corrosion resistance requirements. As a result, Dissimilar Metal Welds (DMWs) between these two materials are critical for design, development, and manufacturing of the VHTR. DMWs are also used in many other applications in the power generation and petrochemical industries. Experience has demonstrated that failures of such DMWs can occur prematurely well below the expected creep life of either base metal, and these failures have significant consequences in terms of plant reliability, safety, and economic impact. These DMWs failures are caused by the abrupt change in composition that occurs at the weld interface between the two alloys. In this research, the concept of developing and optimizing Graded Transition Joints (GTJ) was developed through an integrated modeling and experimental approach. With GTJs, the composition is gradually graded between the two alloys, thus eliminating the sharp change in composition that causes failure. Microstructural modeling was first conducted to identify the optimum grade length required for improved resistance to carbon diffusion that is largely responsible for premature failure. Next, GTJs were fabricated and characterized in detail to understand how the microstructure evolves during fabrication and long term aging. Finally, the creep behavior of the GTJs was investigated and compared to that of conventional DMWs to demonstrate the superior creep strength of the GTJs. The results of this research provide significant insight into design, fabrication, microstructural evolution, and resultant performance of GTJs that can be used for reducing or eliminating DMW failures in a number of high temperature applications. The results also demonstrate that the GTJs can be readily fabricated with either conventional or additive manufacturing processes, and detailed guidelines are provided on the length of grades needed for optimal performance. The results of this research benefits the general public by improving the reliability of power generation and petrochemical plants that rely on DMWs for safe and reliable operation to deliver power and other products.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Lithium Metal Electrode — Understanding Its Unique Characteristics and Functions

Lithium metal electrode (LME) is attractive for the next generation of commercial high-energy rechargeable lithium battery (RLB) design and development. As a light element with a very reducing electrochemical potential, Li metal certainly has the unique characteristics that also present challenges for its application in RLBs. To overcome technical barriers with LME such as the dendrite formation that causes uneven current distributions, excessive SEI formation that consumes Li inventory, and formation of inactive Li metal in granular forms that induces safety hazards, more fundamental understanding of the unique characteristics of LME and its impact on functions in performance in RLBs is critical. Here, we present some recent work based on temporally-correlated reactive molecular dynamics simulations to understand the Li deposition and the associated nucleation and growth process on the LME or graphitic electrode surfaces. Such a study provides some intriguing perspectives on how Li reacts with electrolytes on LME and conventional graphitic electrodes in the RLB operation. Such an insight could help improving our strategy to deal with LME problems and provide functional improvements for LME’s application in RLBs. This presentation is dedicated to Professor Robert Huggins for his life-long teaching of the fundamentals on solid state ionics and its implications in understanding the electrochemical behavior of Li in RLB applications.

25 ENERGY STORAGE↗

Manganese‐Based Spinel Cathodes: A Promising Frontier for Solid‐State Lithium‐Ion Batteries

Recently, all-solid-state lithium-ion batteries (ASSLIBs), which exhibit improved safety and enhanced energy density compared to conventional commercialized lithium-ion batteries (LIBs), thereby have garnered extensive research interest. Among the promising cathode candidates, Mn-based spinel cathodes LiMn 2 O 4 (LMO) and LiNi 0.5 Mn 1.5 O 4 (LNMO), with the unique characteristics of low cost, structural stability, and 3D Li-ion diffusion channels, have demonstrated excellent performance in LIBs and presented great potential in ASSLIBs applications. However, several challenges, including structural degradations, poor interfacial contact, large interfacial resistance, and Mn-dissolution/diffusion during the electrochemical cycling, hinder their practical applications and commercialization in the ASSLIBs. Particularly, the high-voltage LNMO cathodes suffer from the challenge of electrochemical incompatibility with most of the solid-state electrolytes (SSEs). Herein, the spinel structure, the electrochemical behavior, and the structural degradation of the LMO/LNMO are explored. The characteristics and recent progress of the mitigating strategies to the challenges of various SSEs, including polymer-, oxide-, composite-, sulfide-, halide-, and LiPON-based SSEs, are introduced when paired with LMO/LNMO. Finally, the directions for future research to advance Mn-based spinel cathodes and fulfill the requirements of the next-generation ASSLIBs are also discussed.

Dou, Yu [Concordia University, Montreal, QC (Canad↗

Step-loaded creep testing of Zircaloy-4 cladding at higher temperatures in the α-phase

A refined understanding of zirconium-based cladding thermomechanical performance during rapid transients is essential for enhancing the safety and operation of light-water reactors. Traditional models for zirconium alloys under accident conditions generally assume that creep dominates fuel cladding performance. Here, these historic models have largely remained unchanged and serve as the basis for safety criteria development. As the U.S. nuclear industry pursues higher burnup levels, the increased release of fission gases during transients raises the risk of cladding failure in the low-temperature hcp α-phase, making the fidelity of these models of greater importance. Creep testing was conducted from 550–700°C with 25–120 MPa applied hoop stresses to investigate Zircaloy-4 deformation at accident-relevant temperatures in the α-phase. Step-loading was employed to capture creep behavior across a wide stress range from a single sample. The stress-strain rate data at higher temperatures (650 and 700°C) were well-described by isotropic versions of the Erbacher and Kaddour models, while the lower temperature data (550 and 600°C) were underpredicted by both anisotropic and isotropic model variants. Greater strain rates during the initial loading step at 650 and 700°C were attributed to recrystallization and grain growth of sub-micron crystallites. Yet, texture analysis revealed the basal split texture remained after testing. These observations produced results suggesting Zircaloy-4 claddings experience higher creep rates across the α-phase than previously thought, possibly related to dynamic anisotropy due to temperature dependent activation of deformation mechanisms, effects of biaxial loading, and variation in material condition between the current testing used in previous model development.

36 MATERIALS SCIENCE↗

Explanation Constraint Programming for Model-based Diagnosis of Engineered Systems

We can expect to see an increase in the deployment of unmanned air and land vehicles for autonomous exploration of space. In order to maintain autonomous control of such systems, it is essential to track the current state of the system. When the system includes safety-critical components, failures or faults in the system must be diagnosed as quickly as possible, and their effects compensated for so that control and safety are maintained under a variety of fault conditions. The Livingstone fault diagnosis and recovery kernel and its temporal extension L2 are examples of model-based reasoning engines for health management. Livingstone has been shown to be effective, it is in demand, and it is being further developed. It was part of the successful Remote Agent demonstration on Deep Space One in 1999. It has been and is being utilized by several projects involving groups from various NASA centers, including the In Situ Propellant Production (ISPP) simulation at Kennedy Space Center, the X-34 and X-37 experimental reusable launch vehicle missions, Techsat-21, and advanced life support projects. Model-based and consistency-based diagnostic systems like Livingstone work only with discrete and finite domain models. When quantitative and continuous behaviors are involved, these are abstracted to discrete form using some mapping. This mapping from the quantitative domain to the qualitative domain is sometimes very involved and requires the design of highly sophisticated and complex monitors. We propose a diagnostic methodology that deals directly with quantitative models and behaviors, thereby mitigating the need for these sophisticated mappings. Our work brings together ideas from model-based diagnosis systems like Livingstone and concurrent constraint programming concepts. The system uses explanations derived from the propagation of quantitative constraints to generate conflicts. Fast conflict generation algorithms are used to generate and maintain multiple candidates whose consistency can be tracked across multiple time steps.

Narasimhan, Sriram↗

Autonomous Control of Space Nuclear Reactors

Nuclear reactors to support future robotic and manned missions impose new and innovative technological requirements for their control and protection instrumentation. Long-duration surface missions necessitate reliable autonomous operation, and manned missions impose added requirements for failsafe reactor protection. There is a need for an advanced instrumentation and control system for space-nuclear reactors that addresses both aspects of autonomous operation and safety. The Reactor Instrumentation and Control System (RICS) consists of two functionally independent systems: the Reactor Protection System (RPS) and the Supervision and Control System (SCS). Through these two systems, the RICS both supervises and controls a nuclear reactor during normal operational states, as well as monitors the operation of the reactor and, upon sensing a system anomaly, automatically takes the appropriate actions to prevent an unsafe or potentially unsafe condition from occurring. The RPS encompasses all electrical and mechanical devices and circuitry, from sensors to actuation device output terminals. The SCS contains a comprehensive data acquisition system to measure continuously different groups of variables consisting of primary measurement elements, transmitters, or conditioning modules. These reactor control variables can be categorized into two groups: those directly related to the behavior of the core (known as nuclear variables) and those related to secondary systems (known as process variables). Reliable closed-loop reactor control is achieved by processing the acquired variables and actuating the appropriate device drivers to maintain the reactor in a safe operating state. The SCS must prevent a deviation from the reactor nominal conditions by managing limitation functions in order to avoid RPS actions. The RICS has four identical redundancies that comply with physical separation, electrical isolation, and functional independence. This architecture complies with the safety requirements of a nuclear reactor and provides high availability to the host system. The RICS is intended to interface with a host computer (the computer of the spacecraft where the reactor is mounted). The RICS leverages the safety features inherent in Earth-based reactors and also integrates the wide range neutron detector (WRND). A neutron detector provides the input that allows the RICS to do its job. The RICS is based on proven technology currently in use at a nuclear research facility. In its most basic form, the RICS is a ruggedized, compact data-acquisition and control system that could be adapted to support a wide variety of harsh environments. As such, the RICS could be a useful instrument outside the scope of a nuclear reactor, including military applications where failsafe data acquisition and control is required with stringent size, weight, and power constraints.

Merk, John↗

Nuclide Release Pathways in and Around a Trench Repository for Radioactive Waste - 16014

An effective model for a safety assessment of a conceptual trench repository system, in which low-and intermediate level radioactive waste (LILW) is disposed of has been developed. The repository system is assumed to be located in the surface area of a mountain hill near the seashore. An easy-to-use computer program based on this model, developed as a GoldSim template, has been extended based on the previous one in consideration of the rather possible complex pathways in and around the trench for its performance assessment, which is able to evaluate a nuclide release from the repository and farther transport into the geosphere and biosphere under various normal, disruptive natural, and manmade events, and scenarios that can occur after a failure of waste drums with associated uncertainty. To demonstrate the nuclide release and transport behavior through these various possible pathways in the near- and far-fields of the repository system under certain scenarios, some illustrative evaluations and a simple sensitivity investigation with C-14 for the concrete barriers of the trench were made. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Small Scale Mixing Demonstration Batch Transfer and Sampling Performance of Simulated HLW - 12307

The ability to effectively mix, sample, certify, and deliver consistent batches of High Level Waste (HLW) feed from the Hanford Double Shell Tanks (DST) to the Waste treatment Plant (WTP) has been recognized as a significant mission risk with potential to impact mission length and the quantity of HLW glass produced. At the end of 2009 DOE's Tank Operations Contractor, Washington River Protection Solutions (WRPS), awarded a contract to EnergySolutions to design, fabricate and operate a demonstration platform called the Small Scale Mixing Demonstration (SSMD) to establish pre-transfer sampling capacity, and batch transfer performance data at two different scales. This data will be used to examine the baseline capacity for a tank mixed via rotational jet mixers to transfer consistent or bounding batches, and provide scale up information to predict full scale operational performance. This information will then in turn be used to define the baseline capacity of such a system to transfer and sample batches sent to WTP. The Small Scale Mixing Demonstration (SSMD) platform consists of 43'' and 120'' diameter clear acrylic test vessels, each equipped with two scaled jet mixer pump assemblies, and all supporting vessels, controls, services, and simulant make up facilities. All tank internals have been modeled including the air lift circulators (ALCs), the steam heating coil, and the radius between the wall and floor. The test vessels are set up to simulate the transfer of HLW out of a mixed tank, and collect a pre-transfer sample in a manner similar to the proposed baseline configuration. The collected material is submitted to an NQA-1 laboratory for chemical analysis. Previous work has been done to assess tank mixing performance at both scales. This work involved a combination of unique instruments to understand the three dimensional distribution of solids using a combination of Coriolis meter measurements, in situ chord length distribution measurements, and electro-resistive tomography. This current work utilized the same instruments to monitor simulated waste transfers. This paper will discuss some of the scaling compromises when it came to the scaled sampling system design, handling of large quantities of material for sampling, and present data for the discuss of likely behavior of the full scale DST based on scaling correlations using a scale ratio exponent (SRE) from 0.25 to 0.45 and the behavior observed in the SSMD platform. This does not establish a scaling factor for DST mixing using paired jet mixers but is an attempt to envelope the likely performance ranges in terms of certification sampling bias, certification sample root-mean-square-deviation, and bath to batch relative standard deviation. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

The promise of metal-halide-perovskite solar photovoltaics: A brief review

Solar photovoltaics (PVs) based on metal-halide perovskites (MHPs) have taken the renewable-energy world by storm. The excitement stems from the promise of a high-efficiency, low-cost, and low “carbon-footprint” new PV technology. Here, a brief overview of the important topics pertaining to MHPs, perovskite solar cells (PSCs) and perovskite solar modules (PSMs) is presented. The topics include: (1) PSC architectures, (2) MHPs, (3) synthesis and processing of MHP thin films, (4) MHP thin-film microstructures, (5) PSC functional layers, (6) interfacial engineering in PSCs, (7) PSC performance, (8) PSC stability, (9) PSMs, (10) lead toxicity, and (11) mechanical behavior and reliability. The significant challenges in the path toward commercialization of this burgeoning PV technology are also highlighted. Chief among them are scalability, stability, reliability, and safety, while achieving high efficiency, low cost, and low “carbon-footprint.” Furthermore, the promise of this new PV technology and the fascinating underlying science make it a worthwhile endeavor to address these challenges.

14 SOLAR ENERGY↗

The Trip Itinerary Optimization Platform: A Framework for Personalized Travel Information

The New Concepts Incubator team at the National Renewable Energy Laboratory (NREL) developed a three-stage online platform for travel diary collection, personal travel plan optimization and travel itinerary visualization. In the first stage, users provide a travel diary for the previous day through an interactive map and calendar interface and survey for travel attitudes and behaviors. One or more days later, users are invited via email to engage in a second stage where they view a personal mobility dashboard displaying recommended travel itineraries generated from a novel framework that optimizes travel outcomes over a sequence of interrelated trips. A week or more after viewing these recommended travel itineraries on the dashboard, users are emailed again to engage in a third stage where they complete a final survey about travel attitudes and behaviors. A usability study of the platform conducted online showed that, in general, users found the system valuable for informing their travel decisions. A total of 274 individuals were recruited through Amazon Mechanical Turk, an online survey platform, to participate in a transportation study using this platform. On average, the platform distilled 65 feasible travel plans per individual into two recommended itineraries, each optimal according to one or more outcomes and dependent on the fixed times and locations from the travel diary. For 45 percent of users, the trip recommendation algorithm returned only a single, typically automobile-centric, itinerary because there were no other viable alternative transportation modes available. Platform users generally agreed that the dashboard was enjoyable and easy to use, and that it would be a helpful tool in adopting new travel behaviors. Users generally agreed most that the time, cost and user preferred recommendations 'made sense' to them, and were most willing to implement these itineraries. Platform users typically expressed low willingness to try the carbon and calories optimized itineraries. Of the platform users who viewed the dashboard, 13 percent reported changing their travel behavior, most adopting the time, calories or carbon optimized itineraries. While the algorithm incorporates a wealth of travel data obtained from online APIs pertaining to a travelers route such as historic traffic condition data, public transit time-tables, and bike path routes, open-ended responses from users expressed an interest in the integration of even more fine-grained traffic data and the ability to dynamically model the effect of changes in travel times. Users also commonly expressed concerns over the safety of walking and biking recommendations. Responses indicate that more information about the amenities available to cyclists and pedestrians (sidewalks, shade from trees, access to food) and routes that avoid areas of perceived elevated danger would reduce barriers to implementing these recommendations. More accurate representations of personal vehicle trips (based on vehicle make and model, implications of parking) and the identification of routes that optimize caloric intensity (seeking out elevation changes or longer walks to public transit) are promising avenues for future research.

24 POWER TRANSMISSION AND DISTRIBUTION↗

In Situ Monitoring of Groundwater Contamination for Sustainable Remediation Using the Kalman Filter - 18423

Groundwater monitoring is critical for nuclear-related facilities as well as radioactively contaminated sites. Recent advances in sensing, data analytics and simulation capabilities provide substantial opportunities to improve and change current monitoring procedures. In particular, we need a paradigm shift from contaminant-only or compliance-only monitoring programs to comprehensive monitoring, i.e., including other ancillary environmental variables for a holistic understanding of the groundwater systems and plume behaviors. Such new approaches are needed for the effective implementation of sustainable remediation (enhanced and natural attenuation), and they have great potential for cost reduction in site monitoring. This paper reviews recent developments for improving long-term monitoring, with focus on the effective use of in situ sensors, data analytics and simulation capabilities. In particular, we highlight a recent application of the Kalman filter algorithm to estimate contaminant concentrations continuously in real time, based on in-situ measured water quality parameters (e.g. electrical conductance and pH) and sparse groundwater sampling. The results show that we can reduce the groundwater sampling frequency significantly, while capturing the dynamics of short- and long-term contaminant concentration changes. Such advanced and integrated monitoring systems will be beneficial for local residents (e.g., to ensure the safety by detecting adverse events early, enabling a swift response) as well as for site operators (e.g., to gain/improve public acceptance, to be better prepared for litigations and false claims, and to reduce overall monitoring cost). (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Determining appropriate data analytics for transformer health monitoring - 107

Transformers are vital assets for the safe, reliable and cost-effective operation of nuclear power plants. The unexpected failure of a transformer can lead to different consequences ranging from a lack of export capability, with the corresponding economic penalties, to catastrophic failure, with the associated health, safety and economic effects. Condition monitoring techniques examine the health of the transformer periodically, with the aim to identify early indicators of anomalies. However, many transformer failures occur because diagnostic and monitoring models do not identify degraded conditions in time. Therefore, health monitoring is an essential component to transformer life cycle management. Existing tools for transformer health monitoring use traditional dissolved gas analysis based diagnostics techniques. With the advance of prognostics and health management (PHM) applications, we can enhance traditional transformer health monitoring techniques using PHM analytics. The design of an appropriate data analytics system requires a multi-stage design process including: (i) specification of engineering requirements; (ii) characterization of existing data sources and analytics to identify complementary techniques; (iii) development of the functional specification of the analytics suite to formalize its behavior, and finally (iv) deployment, validation, and verification of the functional requirements in the final platform. Accordingly, in this paper we propose a transformer analytics suite which incorporates anomaly detection, diagnostics, and prognostics modules in order to complement existing tools for transformer health monitoring. (authors)

42 ENGINEERING↗

Bayesian Optimization of Non-Invariant Systems with Constraints Developed for Application to the ECR Ion Source VENUS

In this work, we consider the optimization of non-invariant systems with both safety and control constraints. We present a new approach based on Bayesian optimization for the dynamic, safe and controlled optimization of such systems. Although there are other possible use cases, we focus on the application to the electron cyclotron resonance ion source VENUS. From experimental data, we have observed that VENUS behaves to first order as a non-invariant dynamic system with moving areas of instability. Our novel approach aims at providing a tool that can maintain system optimization in a safe way. This is accomplished by making sure the objective function, the beam current in the case of VENUS, does not fall under an operational minimum, while simultaneously requiring the optimization to avoid areas where VENUS is unstable. We compare the result of our approach on synthetic data modeled to mimic the behavior of VENUS with two methods from the literature, a standard Bayesian optimizer and a safe Bayesian optimizer, both adapted to deal with dynamic systems. A cross Student T-test is conducted to show the significance of the improvement given by the new method we introduce here, regarding the two preexisting methods we compared to. The results of the tests conducted on synthetic data show that the proposed method succeeds at maintaining the system optimized and obeys the predefined constraints better than the literature methods explored.

Bayesian optimization↗

Contingency Operations of Americas Next Moon Rocket, Ares V

America has begun the development of a new space vehicle system which will enable humans to return to the moon and reach even farther destinations. The system is called Constellation: it has 2 earth-launch vehicles, Ares I and Ares V; a crew module, Orion; and a lander, Altair with descent and ascent stages. Ares V will launch an Earth Departure Stage (EDS) and Altair into low earth orbit. Ares I will launch the Orion crew module into low earth orbit where it will rendezvous and dock with the Altair and EDS "stack". After rendezvous, the stack will contain four complete rocket systems, each capable of independent operations. Of course this multiplicity of vehicles provides a multiplicity of opportunities for off-nominal behavior and multiple mitigation options for each. Contingency operations are complicated by the issues of crew safety and the possibility of debris from the very large components impacting the ground. This paper examines contingency operations of the EDS in low earth orbit, during the boost to translunar orbit, and after the translunar boost. Contingency operations under these conditions have not been a consideration since the Apollo era and analysis of the possible contingencies and mitigations will take some time to evolve. Since the vehicle has not been designed, much less built, it is not possible to evaluate contingencies from a root-cause basis or from a probability basis; rather they are discussed at an effects level (such as the reaction control system is consuming propellant at a high rate). Mitigations for the contingencies are based on the severity of the off-nominal condition, the time of occurrence, recovery options, options for alternate missions, crew safety, evaluation of the condition (forensics) and future prevention. Some proposed mitigations reflect innovation in thinking and make use of the multiplicity of on-orbit resources including the crew; example: Orion could do a "fly around" to allow the crew to determine the condition and cause of a partially separated payload shroud. Other mitigations are really alternate missions; example, an engine out on during ascent resulted in insufficient propellant for the lunar mission, but the on-orbit vehicle stack is otherwise perfect and can pursue an alternate mission, such as a high ballistic trajectory to test the high-speed atmospheric reentry of Orion. Evaluation and presentation of contingency operations at this early stage of the development of the Ares V rocket will improve the design of the vehicle and lay the groundwork for the exhaustive contingency planning which must be done after the vehicle is built as preparations for operations.

Jaap, John↗

Beyond a series of security nets: Applying STAMP & STPA to port security

Port security is an increasing concern considering the significant role of ports in global commerce and today’s increasingly complex threat environment. Current approaches to port security mirror traditional models of accident causality -- ‘a series of security nets’ based on component reliability and probabilistic assumptions. Traditional port security frameworks result in isolated and inconsistent improvement strategies. Recent work in engineered safety combines the ideas of hierarchy, emergence, control and communication into a new paradigm for understanding port security as an emergent complex system property. The ‘System-Theoretic Accident Model and Process (STAMP)’ is a new model of causality based on systems and control theory. The associated analysis process -- System Theoretic Process Analysis (STPA) -- identifies specific technical or procedural security requirements designed to work in coordination with (and be traceable to) overall port objectives. This process yields port security design specifications that can mitigate (if not eliminate) port security vulnerabilities related to an emphasis on component reliability, lack of coordination between port security stakeholders or economic pressures endemic in the maritime industry. As a result, this article aims to demonstrate how STAMP’s broader view of causality and complexity can better address the dynamic and interactive behaviors of social, organizational and technical components of port security.

97 MATHEMATICS AND COMPUTING↗

Assessing information transfer in full mission flight simulations

Considerable attention must be given to the important topic of aircrew situation awareness in any discussion of aviation safety and flight deck design. Reliable means of assessing this important aspect of crew behavior without simultaneously interfering with the behavior are difficult to develop. Unobtrusive measurement of crew situation awareness is particularly important in the conduct of full mission simulations where considerable effort and cost is expended to achieve a high degree of operational fidelity. An unobtrusive method of assessing situational awareness is described here which employs a topical analysis of intra-crew communications. The communications were taken from videotapes of crew behavior prior to, during, and following an encounter with a microburst/windshear event. The simulation scenario re-created an actual encounter with an event during an approach into Denver Stapleton Airport. The analyses were conducted on twelve experienced airline crews with the objective of determining the effect on situation awareness of uplinking ground-based information of the crew during the approach. The topical analysis of crew communication was conducted on all references to weather or weather-related topics. The general weather topic was further divided into weather subtopical references such as surface winds, windshear, precipitation, etc., thereby allowing for an assessment of the relative frequency of subtopic reference during the scenario. Reliable differences were found between the relative frequency of subtopic references when comparing the communications of crews receiving a cockpit display of ground-based information to the communications of a control group. The findings support the utility of this method of assessing situation awareness and information value in full mission simulations. A limiting factor in the use of this measure is that crews vary in the amount of intra-crew communications that may take place due to individual differences and other factors associated with crew coordination. This factor must be taken into consideration when employing this measure. Viewgraphs are given.

Lee, Alfred T.↗