Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “design for safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29
All sourcesNASA NTRSDOE OSTI
NASA NTRS1997

Software Design Improvements: Software Quality and the Design and Inspection Process - Part 2

The application of assurance engineering techniques improves the duration of failure-free performance of software. The totality of features and characteristics of a software product are what determine its ability to satisfy customer needs. Software in safety-critical systems is very important to NASA. We follow the System Safety Working Groups definition for system safety software as: 'The optimization of system safety in the design, development, use and maintenance of software and its integration with safety-critical systems in an operational environment. 'If it is not safe, say so' has become our motto. This paper goes over methods that have been used by NASA to make software design improvements by focusing on software quality and the design and inspection process.

Lalli, Vincent R.↗
DOE OSTI1996

Nuclear Safety [Vol. 37, No. 2, April-June 1996]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 97 The Nuclear Community and the Public: Cognitive and Cultural Influences on Thinking About Nuclear Risk, M. A. Meyer; 109 Twenty-Third Water Reactor Safety Information Meeting, D. A. Copinger; ACCIDENT ANALYSIS: 126 Analysis of a PWR LBLOCA Without SCRAM, Trevor N. Tyler, Rafael Macian-Juan and John H. Mahaffy; DESIGN FEATURES: 139 Vulnerability of Multiple-Barrier Systems, N. C. Lind; ENVIRONMENTAL EFFECTS: 149 A Study of Wet Catalytic Oxidation of Radioactive Spent Ion Exchange Resin by Hydrogen Peroxide, Xingchao Jian, Tianbao Wu, and Guichun Yun; 157 A Comparison Study and Resolution of Differences Between Emergency Response and Safety Analysis Codes Used at the Savannah River Site, A. A. Simpkins; OPERATING EXPERIENCES: 164 Reactor Shutdown Experience, Compiled by J. W. Cletcher; RECENT DEVELOPMENTS: 167 Reports, Standards, and Safety Guides, D. S. Queener; 172 Proposed Rule Changes as of Dec. 31,1995; ANNOUNCEMENTS: 178 American Nuclear Society 1997 Annual Meeting; 178 American Nuclear Society Nuclear Criticality and Safety Division Topical Meeting; 176 The Authors.

05 NUCLEAR FUELS↗
NASA NTRS2003

Building Safer Systems With SpecTRM

System safety, an integral component in software development, often poses a challenge to engineers designing computer-based systems. While the relaxed constraints on software design allow for increased power and flexibility, this flexibility introduces more possibilities for error. As a result, system engineers must identify the design constraints necessary to maintain safety and ensure that the system and software design enforces them. Safeware Engineering Corporation, of Seattle, Washington, provides the information, tools, and techniques to accomplish this task with its Specification Tools and Requirements Methodology (SpecTRM). NASA assisted in developing this engineering toolset by awarding the company several Small Business Innovation Research (SBIR) contracts with Ames Research Center and Langley Research Center. The technology benefits NASA through its applications for Space Station rendezvous and docking. SpecTRM aids system and software engineers in developing specifications for large, complex safety critical systems. The product enables engineers to find errors early in development so that they can be fixed with the lowest cost and impact on the system design. SpecTRM traces both the requirements and design rationale (including safety constraints) throughout the system design and documentation, allowing engineers to build required system properties into the design from the beginning, rather than emphasizing assessment at the end of the development process when changes are limited and costly.System safety, an integral component in software development, often poses a challenge to engineers designing computer-based systems. While the relaxed constraints on software design allow for increased power and flexibility, this flexibility introduces more possibilities for error. As a result, system engineers must identify the design constraints necessary to maintain safety and ensure that the system and software design enforces them. Safeware Engineering Corporation, of Seattle, Washington, provides the information, tools, and techniques to accomplish this task with its Specification Tools and Requirements Methodology (SpecTRM). NASA assisted in developing this engineering toolset by awarding the company several Small Business Innovation Research (SBIR) contracts with Ames Research Center and Langley Research Center. The technology benefits NASA through its applications for Space Station rendezvous and docking. SpecTRM aids system and software engineers in developing specifications for large, complex safety critical systems. The product enables engineers to find errors early in development so that they can be fixed with the lowest cost and impact on the system design. SpecTRM traces both the requirements and design rationale (including safety constraints) throughout the system design and documentation, allowing engineers to build required system properties into the design from the beginning, rather than emphasizing assessment at the end of the development process when changes are limited and costly.

Source record↗
NASA NTRS1998

Investigation and Feasibility Assessment of TOPAZ-2 Derivations for Space Power Applications

The ability to provide continuous power at significant levels is of utmost importance for many space missions, from simple satellite operations to manned Mars missions. One of the main problems faced in delivering solar or chemical space power in the tens of kW range, is the increasingly massive nature of the power source and the costs associated with its launch, operation and maintenance. A national program had been initiated to study the feasibility of using certain advanced technologies in developing an efficient lightweight space power source. The starting point for these studies has been the Russian TOPAZ-2 space reactor system, with the ultimate goal to aid in the development of a TOPAZ-2 derivative which will be ready for flight by the year 2000. The main objective of this project has been to perform feasibility assessment and trade studies which would allow the development of an advanced space nuclear power system based on the in-core thermionic fuel element technology currently used in the Russian TOPAZ-2 reactor. Two of the important considerations in developing the concept are: (1) compliance of the current TOPAZ-2 and of any advanced designs with U.S. nuclear safety expectations, and (2) compliance of the design with the seven years lifetime requirement. The project was composed of two major phases. The initial phase of the project has concentrated on understanding the TOPAZ-2 thermionic reactor in sufficient detail to allow several follow-on tasks. The primary interest during this first phase has been given on identifying the potential of the TOPAZ-2 design for further improvements. The second phase of the project has focused on the feasibility of a TOPAZ-2 system capable of delivering 30-50 kWe. Towards the elimination of single-point failures in the load voltage regulation system an active voltage regulator has been designed to be used in conjunction with the available shunt load voltage regulator. The possible use of a dual-loop, model-based adaptive control system for load-following in the TOPAZ-2 has also been investigated. The objective of this fault-tolerant, autonomous control system is to deliver the demanded electric power at the desired voltage level, by appropriately manipulating the neutron power through the control drums. As a result, sufficient thermal power is produced to meet the required demand in the presence of dynamically changing system operating conditions and potential sensor failures. The designed controller is proposed for use in combination with the currently available shunt regulators, or as a back-up controller when other means of power system control, including some of the sensors, fail.

Parlos, Alexander G.↗
NASA NTRS2014

Aeroelastic Control of a Segmented Trailing Edge Using Fiber Optic Strain Sensing Technology

Currently, design of aircraft structures incorporate a safety factor which is essentially an over design to mitigate the risk of structure failure during operation. Typically this safety factor is to design the structure to withstand loads much greater than what is expected to be experienced during flight. NASA Dryden Flight Research Centers has developed a Fiber Optic Strain Sensing (FOSS) system which can measure strain values in real-time. The Aeroelastics Lab at the AERO Institute is developing a segmented trailing edged wing with multiple control surfaces that can utilize the data from the FOSS system, in conjunction with an adaptive controller to redistribute the lift across a wing. This redistribution can decrease the amount of strain experienced by the wing as well as be used to dampen vibration and reduce flutter.

aeronautics↗
NASA NTRS2014

Orion Multi-Purpose Crew Vehicle (MPCV) Capsule Parachute Assembly System (CPAS) Wake Deficit Wind Tunnel Testing

During descent after re-entry into the Earth's atmosphere, the Orion CM deploys its drogue parachutes at approximately Mach 0.7. Accurately predicting the dynamic pressure experienced by the drogue parachutes at deployment is critical to properly designing the parachutes. This NASA Engineering and Safety Center assessment was designed to provide a complete set of flowfield measurements on and around an idealized Orion Crew Module shape with the most appropriate wind tunnel simulation of the Orion flight conditions prior to parachute deployment. This document contains the details of testing and the outcome of the assessment.

Ross, James C.↗
NASA NTRSDate not supplied

NASA Research to Expand UAS Operations for Disaster Response

Natural disasters can result in the loss of life and cost governments and private industry billions to recover each year. Over the past decade the rate and severity of natural disasters such as wildfires and hurricanes have resulted in increasingly negative impacts to communities, public health, natural ecosystems, and the economy. To help reduce these impacts, NASA’s Aeronautics Research Mission Directorate is working to advance technologies and enable the safe and efficient inclusion of novel aviation applications to better assist in disaster response. To execute on these efforts, NASA’s Advanced Capabilities for Emergency Response Operations (ACERO) and System-Wide Safety (SWS) projects have developed coordinated strategic research plans focused on aviation operations for disaster response. The ACERO project will be a multi-year effort that focuses on enabling the use of uncrewed aircraft systems (UAS) to improve firefighter safety and efficiency and enable the use of UAS to conduct new missions such as logistics and aerial suppression. The ACERO project will demonstrate technologies that support the Second Shift concept, enabling UAS and ground technologies to support aerial suppression in degraded visual conditions (e.g., heavy smoke, nighttime). The SWS project will be a multi-year effort that focuses on addressing the key safety barriers that are preventing the authorization of UAS operations in a variety of increasingly complex disaster response applications: post-hurricane response, medical courier, and urban disaster response. The SWS project will demonstrate an In-Time Aviation Safety Management System (IASMS) designed to effectively monitor, assess, and mitigate safety risks associated with hazards to UAS operations for disaster response. This paper will provide a deeper insight into NASA’s research and development plans and discuss how solutions developed in partnership with industry stakeholders and federal agencies will improve disaster response across the globe.

disaster response↗
NASA NTRS1980

Orbit transfer vehicle engine study, phase A extension. Volume 1: Executive summary

A 1980 state-of-the-art advanced expander engine was configured that delivers near-optimum payload-performance and exhibits the simplicity reliability, and life characteristics required of the OTV mission. Engine optimization studies indicate that the performance of the conventional expander cycle engine can be improved substantially through combustion chamber surface area enhancement, thermal enhancement, turbine regeneration, and power cycle efficiency enhancement procedures. The 20K lb. thrust staged combustion engine can be adapted to operate at extended periods in the 1 to 2K lb. thrust regime. The study results indicate that long-life, high performnce operation in the low thrust mode can be achieved with minimum modifications (kitting) of the engine. Although the main contribution to mission success and crew safety stems from propulsion system redundancy, significant reliability can be gained from engine component redundancy, specific engine design features ensuring safety and reliability, including an engine health monitoring system, and from a total program approach to safety and reliability, such as that presently applied to the space shuttle.

Source record↗
NASA NTRS2007

Building Operations Efficiencies into NASA's Ares I Crew Launch Vehicle Design

The U.S. Vision for Space Exploration guides the National Aeronautics and Space Administration's (NASA's) challenging missions that expand humanity's boundaries and open new routes to the space frontier. With the Agency's commitment to complete the International Space Station (ISS) and to retire the venerable Space Shuttle by 2010, the NASA Administrator commissioned the Exploration Systems Architecture Study (ESAS) in 2005 to analyze options for safe, simple, cost-efficient launch solutions that could deliver human-rated space transportation capabilities in a timely manner within fixed budget guidelines. The Exploration Launch Projects (ELP) Office, chartered by the Constellation Program in October 2005, has been conducting systems engineering studies and business planning to successively refine the design configurations and better align vehicle concepts with customer and stakeholder requirements, such as significantly reduced life-cycle costs. As the Agency begins the process of replacing the Shuttle with a new generation of spacecraft destined for missions beyond low-Earth orbit to the Moon and Mars, NASA is designing the follow-on crew and cargo launch systems for maximum operational efficiencies. To sustain the long-term exploration of space, it is imperative to reduce the $4 billion NASA typically spends on space transportation each year. This paper gives toplevel information about how the follow-on Ares I Crew Launch Vehicle (CLV) is being designed for improved safety and reliability, coupled with reduced operations costs. These methods include carefully developing operational requirements; conducting operability design and analysis; using the latest information technology tools to design and simulate the vehicle; and developing a learning culture across the workforce to ensure a smooth transition between Space Shuttle operations and Ares vehicle development.

Dumbacher, Daniel L.↗
DOE OSTI2024

Physical Safety and Security at Electric Vehicle Charging Sites

This help sheet provides an overview of physical safety and security design elements for public EV charging stations and general best practices that can be considered for the safety and comfort of charging station customers.

ADVANCED PROPULSION SYSTEMS,ENERGY PLANNING, POLIC↗
NASA NTRSDate not supplied

Flying Qualities Analysis and Piloted Simulation Testing of a Lift+Cruise Vehicle with Propulsion Failures in Hover and Low-Speed Conditions

The recent emergence of electric-Vertical Take-Off and Landing (eVTOL) vehicles for Urban Air Mobility (UAM) applications has resulted in a wide variety of configurations with unique stability and control characteristics. NASA is currently conducting research to develop conceptual design tools to accelerate public acceptance of these vehicles which includes requirements for safety during failure scenarios. This paper summarizes progress toward a toolbox for predicting flying qualities of eVTOL vehicles during critical propulsion failures that could impact the allowable design of the vehicle geometry or control system. Key topics include unique vulnerabilities of eVTOL/multirotor vehicles to propulsion failures, relevant flying qualities design metrics, and simulation modeling requirements for assessing flying qualities degradation due to failures. Results of a piloted simulation study conducted in the NASA Ames Vertical Motion Simulator (VMS) are presented. The VMS experiment was designed to assess and validate key handling qualities and safety design metrics for propulsion failures. These results show the correlation between control system design requirements and the degradation in handling qualities for various propulsion failures.

George Altamirano↗
NASA NTRS2011

Formal Verification Toolkit for Requirements and Early Design Stages

Efficient flight software development from natural language requirements needs an effective way to test designs earlier in the software design cycle. A method to automatically derive logical safety constraints and the design state space from natural language requirements is described. The constraints can then be checked using a logical consistency checker and also be used in a symbolic model checker to verify the early design of the system. This method was used to verify a hybrid control design for the suit ports on NASA Johnson Space Center's Space Exploration Vehicle against safety requirements.

Badger, Julia M.↗
NASA NTRS2003

Discrete Abstractions of Hybrid Systems: Verification of Safety and Application to User-Interface Design

Human interaction with a complex control system involves the user, the automation’s discrete mode logic, and the underlying continuous dynamics of the physical system. The user-interface of such systems always displays a reduced set of information about the entire system. Designing interfaces such that all the pertinent information is available and assuring that this information is correct is important for any user-interface, but especially so for safety-critical systems such as automotive systems and autopilots. Here we describe a methodology for the analysis of hybrid control systems that incorporate user interaction, with the goal of assuring that the information provided to the user is correct. That is, the user-interface must contain all information necessary to safely complete a desired procedure or task. We begin with a hybrid system model which incorporates discrete mode logic as well as nonlinear continuous dynamics. Using a hybrid computational tool for reachability, we find the largest region of the state-space in which we can guarantee the state of the system can always remain – this is the safe region of operation. By implementing a controller for safety which arises from this computation, we mathematically guarantee that this safe region is invariant, meaning that the system will always remain within the safe region if the determined controller is used on the boundary of the safe region. Verification within a hybrid framework allows us to account for the continuous dynamics underlying the discrete representations displayed to the user. Using the computed invariant regions as discrete states, we can abstract a discrete event system from this hybrid system with safety restrictions. This abstraction can be used to determine what information must be provided on the display. Furthermore, in cases in which an interface already exists, the abstraction provides the necessary input into existing interface verification methods. We provide two examples: a car traveling through a yellow light at an intersection and an aircraft autopilot in an automatic landing/go-around maneuver. The examples demonstrate the applicability of this methodology to hybrid systems that have operational constraints we can pose in terms of safety. This methodology differs from existing work in hybrid system verification in that we directly account for the user’s interactions with the system.

Meeko Oishi↗
DOE OSTI2022

Development of a high-fidelity multi-physics coupling between MCNP6.2 and CTF4.0 for VVER applications

Ensuring system safety in the design, licensing, and operation phases is a priority in the nuclear industry. Performing extensive, full-scale reactor safety experiments is often prohibitive due to the large associated costs. Computational simulations offer an alternative safety analysis method, typically with significant cost reductions. Recent high-level developments in technology and increased availability of computational resources have allowed the development of high-fidelity, high-resolution multi-physics coupled codes. Such developments may be used to generate reference models for deterministic core calculations. Under this framework, the high-fidelity continuous energy Monte Carlo-based neutron transport code MCNP6.2 was coupled externally with the state-of-the-art thermal-hydraulics subchannel code, CTF4.0 for VVER (Water-Water Energetic Reactor) applications. A VVER-1000 fuel assembly model was used to demonstrate the capability of the coupled code. The converged coupled solution is compared to initial results, consisting of the first MCNP evaluation and first CTF evaluation after initialization. The VVER-1000 type assembly results are compared to other evaluations of the same assembly model. The findings indicate good agreement with expectations and reference cases, where available. The initial results of the coupled MCNP6.2/CTF4.0 calculations at the assembly level for steady-state calculations are presented in this study, which may support future work toward high-fidelity coupled full-core modeling capabilities. The multi-physics model may be further improved, enhanced, and expanded for both cycle depletion and transient applications. Such a multi-physics system will also be applicable to the VVER-1200 and other triangular lattice designs and support their deployment and operation safely and economically. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2025

HFIR LEU High Density Silicide Dispersion Optimized Design Steady-State Heat Transfer Analyses

Steady-state heat transfer simulations of the Oak Ridge National Laboratory High Flux Isotope Reactor (HFIR) with the low-enriched uranium (LEU) high-density silicide dispersion Optimized fuel design were performed to support comprehensive performance and safety metric studies concerning this design. The LEU Optimized design operates at 95 MW to maintain HFIR’s current highly enriched uranium (HEU) core performance level at 85 MW. Full cycle Mode 1 full flow Case 1 (inlet temperature), Case 2 (flux-to-flow), and Case 3 (inlet pressure) safety limit analyses were performed to assess the margins to critical heat flux. Under the prescribed conditions, this LEU design meets the safety limit and limiting control setting requirements outlined in HFIR’s documented safety analysis; however, the safety margins are less than those for the 85 MW HEU core, and several assumptions were made where fuel fabrication and qualification data are currently lacking for the silicide fuel design. Effects of changes to pertinent fuel fabrication assumptions and uncertainty factors on thermal safety margins were also evaluated, showing that the margins are sensitive to many of these parameters. Power and pressure perturbations were also performed, indicating that significant steady-state thermal margins could be gained by increasing the coolant inlet pressure.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2023

An In-time Aviation Safety Management System (IASMS) Concept of Operations for Vertiport Design and Operations

The National Airspace System is foreseen to undergo revolutionary change with Urban Air Mobility (UAM) and its use of vertiports to transport passengers and cargo. To assure safety with UAM and more broadly with Advanced Air Mobility (AAM), the National Academies recommended an In-time Aviation Safety Management System (IASMS) that is extensible to the design and operation of vertiports. Vertiport designs will scale in several dimensions including physical size and infrastructure depending upon location and in the Services, Functions, and Capabilities required for assuring safety with increasingly complex vertiport designs and operations. These operations will be enabled by evolving technologies including electric vertical takeoff and landing (eVTOL) aircraft for passenger-and cargo-carrying commercial transportation. Within this construct, safety hazards and risk mitigations involving predictive data analytics and modeling will be used. Use cases and future challenges are examined to guide maturation of the IASMS ConOps for vertiports.

K Ellis↗
NASA NTRSDate not supplied

Design and Testing of an Approach to Automated In-Flight Safety Risk Management for sUAS Operations

An onboard risk management automation design is presented based on run-time assurance principles, as well as the concept for In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. The automation is designed to operate independently of the autopilot and perform real-time risk assessment spanning multiple classes of hazards, predict constraint violations, and track autopilot states. In the event of elevated risk conditions or predicted constraint violations, the automation will select from a set of available contingencies and trigger autopilot mode changes if necessary to mitigate risk exposure. The onboard automation also informs the remote operator/pilot of what the independent monitor is observing and any contingency decisions or actions that may arise during flight. Details of an implementation of this design and results of verification and validation activities, as required to meet stringent NASA software and system assurance standards, are also presented. This includes simulation and flight testing using small unmanned aircraft systems.

Ersin Ancel↗
DOE OSTI2024

SCALE 6.3.2 User Manual

SCALE is a comprehensive modeling and simulation suite for nuclear safety analysis and design developed and maintained by Oak Ridge National Laboratory under contract with the U.S. Nuclear Regulatory Commission, U.S. Department of Energy, and the National Nuclear Security Administration to perform reactor physics, criticality safety, radiation shielding, and spent fuel characterization for nuclear facilities and transportation/storage package designs. Visit the SCALE website for additional information.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗