Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Risk Analyses”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

ARCADE (Advanced Reactor Cyber Analysis and Development Environment)

SAND2025-11780O ARCADE (Advanced Reactor Cyber Analysis and Development Environment) software performs cybersecurity experiments on Defensive Cyber Security Architectures (DCSA) for Distributed Control Systems (DCSs). The application is integrated into a cohesive environment that performs cyber risk analyses and reduces costs. ARCADE can investigate the entire cyber-attack surface of a DCS from the physics of control, down to the firmware of individual components with automated efficiency. ARCADE has five major functional components: the Data Broker system, the virtualization environment, the cyber-attack simulator, the cyber-physical analysis system, and the physics simulator. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Valme, Romuald↗

Examining Rail Transportation Route of Crude Oil in the United States Using Crowdsourced Social Media Data

Safety issues associated with transporting crude oil by rail have been a concern since the boom of the U.S. domestic shale oil production in 2012. During the last decade, over 300 crude-oil-by-rail incidents have occurred in the United States. Some of them have caused adverse consequences including fire and hazardous materials leakage. However, only limited information on crude-on-rail routes and their associated risks is available to the public. To this end, this study proposed an unconventional way to reconstruct crude-on-rail routes using geotagged photos harvested from the Flickr website. The proposed method linked the geotagged photos of crude oil trains posted online with national railway networks to identify potential railway segments that those crude oil trains were traveling on. Here, a shortest path-based method was applied to infer the complete crude-on-rail routes, by utilizing the confirmed railway segments as well as their directional information. Validation of the inferred routes was performed using a public map and official crude oil incident data. The results suggested that the inferred routes based on geotagged photos had high coverage, with approximately 96% of the documented crude oil incidents aligned with the reconstructed crude-on-rail network. The inferred crude oil train routes were found to pass through several metropolitan areas of high population density, who were exposed to potential risk. These findings could improve situational awareness for policy makers and transportation planners. In addition, with the inferred routes, this study has established a good foundation for future crude oil train risk-analyses along the rail route.

42 ENGINEERING↗

Validation of the HyRAM+ physics models for use with propane

The Hydrogen Risk Assessment Model Plus (HyRAM+) toolkit combines quantitative risk assessment with simulations of unignited dispersion, ignited turbulent diffusion flames, and indoor accumulation with delayed ignition of fuels. HyRAM+ is differentiated from HyRAM in that it includes models and leak data for other alternate fuels. The models of the physical phenomena need to be validated for each of the fuels in the toolkit. This report shows the validation for propane which is being used as a surrogate for autogas, which is a mixture of propane and butane and used in internal combustion engines in vehicles. For flame length comparisons, five previously published experiments from peer reviewed journals were used to validate our models. The validation looked at flame lengths and flame widths with respect to different leak diameters, mass flow rates, and source pressures. Most of the sources included more than one set of experimental data, which were collected using different methods (CCD cameras, IR visualization etc.). In general, HyRAM+ overpredicts the flame lengths by around 65%. For heat and radiation models, we compared the heat flux and radiation data reported from two different sources to the values calculated by HyRAM+. For higher mass flow rates, the HyRAM+ calculated flame length results gave a better estimate of what is found in the experiments (65% error), but a higher error (85%) is observed between the HyRAM+ calculated lengths and the experimental flame lengthsfor lower mass flows. Some differences can be attributed to outdoor environmental effects (i.e. wind speed) and uncertainties in jet flame shapes. The propane flame trajectory is predicted for a high Reynolds number case with Re = 12,500 and a low Reynolds number case where Re = 2,000. The Re=12,500 case which is momentum dominated matches well with the experimental flame trajectory, but the agreement for the bouancy driven low Reynolds number case is not as good. Dispersion modeling for unignited propane was also analyzed. We compared the mole fraction, mixture fraction, mean velocity, concentration half width, and inverse mass concentration over an axial distance from different credible journals to the values calculated by HyRAM+. The results display good agreement but generally, HyRAM+ predicts a wider profile for mole fraction and mixture fraction experiments. Overall, HyRAM+’s results are reasonable for predicting the flame length, heat flux, flame trajectory, and dispersion for propane and can be used in risk analyses

08 HYDROGEN↗

Energy-Storing Cryogenic Carbon Capture™ for Utility and Industrial-scale Processes (Final Report)

This project leverages work completed under funding from previous U.S. Department of Energy (DOE) projects and other sources of funding around the Cryogenic Carbon Capture Process™ (CCC). The purpose of this project is to further develop a perturbation of the CCC process that stores energy called the Cryogenic Carbon Capture™ Energy Storing (CCC-ES) process. The successful completion of the tasks in this project has prepared the CCC-ES process for scaling and developed initial plans and a feasibility analysis for an engineering-scale or small-commercial scale system that can store at least 10 MWh of energy. The specific areas of work in this project are: (1) Develop a conceptual, site-specific integrated process flow diagram: Sustainable Energy Solutions (SES) developed a conceptual, site-specific plan including a process flow diagram for integrating CCC-ES at a specific location. The proposed system was based on a typical engineering-scale CCC system designed to capture 30-50 metric tonnes of CO 2 per day (TPD), with modifications and additional changes and equipment put in place to add the energy storage element to the system. The 30-50 TPD scale corresponds to the required 10 MWh of stored energy. This task includes updating simulation software for transient analysis. SES also coordinated with the Jim Bridger Power Plant in Point of Rocks, Wyoming to get site-specific data. Using these data, SES completed site-specific preliminary process flow diagrams, estimated capital and operating costs for the CCC-ES system, and used the upgraded software package to estimate the primary figures of merit. (2) Complete a technoeconomic analysis (TEA): SES completed a full-scale TEA of the CCC-ES system to meet specific success criteria. This TEA used process information from the host site selected above. (3) Technology and data gap assessment for the CCC-ES process: As part of the technology gap assessment, SES performed an assessment of the best alternative energy storage solutions including figures of merit and operational strengths and weaknesses. SES then compared the proposed system with a discussion of how it addresses the weaknesses of alternative systems, showing for example a cost of stored energy at less than $50/MWh and with a roundtrip efficiency of greater than 95%. This assessment includes technical and other risk analyses and technology gaps with research and development needs to commercialize the process by 2030. Finally, work includes a commercialization roadmap/development pathway outlining the major milestones to move to a commercially operating CCC-ES system. (4) Phase II pre-FEED project plan: SES completed a project plan for the Phase II pre-FEED analysis using the same host site as in the Phase I conceptual study.

03 NATURAL GAS↗

User’s Manual for Seal_Flux: A Seal Barrier Reduced-Order Model (Update)

This report provides a brief description on the use of the Seal_Flux computer program developed as part of the effort to quantify the risk of geologic storage of carbon dioxide (CO 2 ) under the U.S. Department of Energy’s (DOE) National Risk Assessment Partnership (NRAP). The Seal_Flux code simulates the flow of CO 2 through a low permeability rock horizon or seal formation overlying the storage reservoir into which CO 2 is injected. A two-phase, relative permeability approach with Darcy’s law is used for one-dimensional (1D) flow computations of CO 2 through the horizon in the vertical direction. The code also allows the simulation of time-dependent processes that can influence such flow. However, as part of its design, Seal_Flux is what can be termed a “reduced-order model” (ROM) and is not intended as a full-functioning flow code. The theory and simulation in the code is streamlined and directed towards the implementation of Monte Carlo risk analyses of CO 2 transport or as termed in this context as “leakage.” While presented in this report as a stand-alone tool, the Seal_Flux code is intended to function in the future as one of several models as part of an integrated, systems-level model of CO 2 storage performance. Finally, the code is written in Python 3.10 to provide an open framework for further development by others and to assist in linking the code with other modules in an integrated assessment model.

58 GEOSCIENCES↗

Orbit Transfer Vehicle Engine Study. Phase A, extension 1: Study plan update

The updated study plan for the Space Transportation System orbit transfer vehicle (OTV) engine study is presented. The study program consists of engine system, programmatic, cost, and risk analyses of OTV engine concepts. Detailed task descriptions for the advanced expander cycle engine optimization, alternate low thrust capability, and safety, reliability, and cost comparisons are given.

Mellish, J. A.↗

Safety status of space radioisotope and reactor power sources

The current overall safety criterion for both radioisotope and reactor power sources is containment or immobilization in the case of a reentry accident. In addition, reactors are designed to remain subcritical under conditions of land impact or water immersion. A very extensive safety test and analysis program was completed on the radioisotope thermoelectric generators (RTGs) in use on the Galileo spacecraft and planned for use on the Ulysses spacecraft. The results of this work show that the RTGs will pose little or no risk for any credible accident. The SP-100 space nuclear reactor program has begun addressing its safety criteria, and the design is planned to be such as to ensure meeting the various safety criteria. Preliminary mission risk analyses on SP-100 show the expected value population dose from postulated accidents on the reference mission to be very small. It is concluded that the current US nuclear power sources are the safest flown.

Bennett, Gary L.↗

Space Shuttle critical function audit

A large fault-tolerance model of the main propulsion system of the US space shuttle has been developed. This model is being used to identify single components and pairs of components that will cause loss of shuttle critical functions. In addition, this model is the basis for risk quantification of the shuttle. The process used to develop and analyze the model is digraph matrix analysis (DMA). The DMA modeling and analysis process is accessed via a graphics-based computer user interface. This interface provides coupled display of the integrated system schematics, the digraph models, the component database, and the results of the fault tolerance and risk analyses.

Sacks, Ivan J.↗

Universal first-order reliability concept applied to semistatic structures

A reliability design concept was developed for semistatic structures which combines the prevailing deterministic method with the first-order reliability method. The proposed method surmounts deterministic deficiencies in providing uniformly reliable structures and improved safety audits. It supports risk analyses and reliability selection criterion. The method provides a reliability design factor derived from the reliability criterion which is analogous to the current safety factor for sizing structures and verifying reliability response. The universal first-order reliability method should also be applicable for air and surface vehicles semistatic structures.

Verderaime, V.↗

Investigation of Natural and Man-Made Radiation Effects on Crews on Long Duration Space Missions

Over the past several years, NASA has studied a variety of mission scenarios designed to establish a permanent human presence on the surface of Mars. Nuclear electric propulsion (NEP) is one of the possible elements in this program. During the initial stages of vehicle design work, careful consideration must be given to not only the shielding requirements of natural space radiation, but to the shielding and configuration requirements of the on-board reactors. In this work, the radiation transport code MCNP has been used to make initial estimates of crew exposures to reactor radiation fields for a specific manned NEP vehicle design. In this design, three 25 MW(sub th), scaled SP-100-class reactors are shielded by three identical shields. Each shield has layers of beryllium, tungsten, and lithium hydride between the reactor and the crew compartment. Separate calculations are made of both the exiting neutron and gamma fluxes from the reactors during beginning-of-life, full-power operation. This data is then used as the source terms for particle transport in MCNP. The total gamma and neutron fluxes exiting the reactor shields are recorded and separate transport calculations are then performed for a 10 g/sq cm crew compartment aluminum thickness. Estimates of crew exposures have been assessed for various thicknesses of the shield tungsten and lithium hydride layers. A minimal tungsten thickness of 20 cm is required to shield the reactor photons below the 0.05 Sv/y man-made radiation limit. In addition to a 20-cm thick tungsten layer, a 40-cm thick lithium hydride layer is required to shield the reactor neutrons below the annual limit. If the tungsten layer is 30-cm thick, the lithium hydride layer should be at least 30-cm thick. These estimates do not take into account the photons generated by neutron interactions inside the shield because the MCNP neutron cross sections did not allow reliable estimates of photon production in these materials. These results, along with natural space radiation shielding estimates calculated by NASA Langley Research Center, have been used to provide preliminary input data into a new Macintosh-based software tool. A skeletal version of this tool being developed will allow rapid radiation exposure and risk analyses to be performed on a variety of Lunar and Mars missions utilizing nuclear-powered vehicles.

Bolch, Wesley E.↗

Characterization of the Space Shuttle Ascent Debris using CFD Methods

After video analysis of space shuttle flight STS-107's ascent showed that an object shed from the bipod-ramp region impacted the left wing, a transport analysis was initiated to determine a credible flight path and impact velocity for the piece of debris. This debris transport analysis was performed both during orbit, and after the subsequent re-entry accident. The analysis provided an accurate prediction of the velocity a large piece of foam bipod ramp would have as it impacted the wing leading edge. This prediction was corroborated by video analysis and fully-coupled CFD/six degree of freedom (DOF) simulations. While the prediction of impact velocity was accurate enough to predict critical damage in this case, one of the recommendations of the Columbia Accident Investigation Board (CAIB) for return-to-flight (RTF) was to analyze the complete debris environment experienced by the shuttle stack on ascent. This includes categorizing all possible debris sources, their probable geometric and aerodynamic characteristics, and their potential for damage. This paper is chiefly concerned with predicting the aerodynamic characteristics of a variety of potential debris sources (insulating foam and cork, nose-cone ablator, ice, ...) for the shuttle ascent configuration using CFD methods. These aerodynamic characteristics are used in the debris transport analysis to predict flight path, impact velocity and angle, and provide statistical variation to perform risk analyses where appropriate. The debris aerodynamic characteristics are difficult to determine using traditional methods, such as static or dynamic test data, due to the scaling requirements of simulating a typical debris event. The use of CFD methods has been a critical element for building confidence in the accuracy of the debris transport code by bridging the gap between existing aerodynamic data and the dynamics of full-scale, in-flight events.

Murman, Scott M.↗

Difficult Decisions Made Easier

NASA missions are extremely complex and prone to sudden, catastrophic failure if equipment falters or if an unforeseen event occurs. For these reasons, NASA trains to expect the unexpected. It tests its equipment and systems in extreme conditions, and it develops risk-analysis tests to foresee any possible problems. The Space Agency recently worked with an industry partner to develop reliability analysis software capable of modeling complex, highly dynamic systems, taking into account variations in input parameters and the evolution of the system over the course of a mission. The goal of this research was multifold. It included performance and risk analyses of complex, multiphase missions, like the insertion of the Mars Reconnaissance Orbiter; reliability analyses of systems with redundant and/or repairable components; optimization analyses of system configurations with respect to cost and reliability; and sensitivity analyses to identify optimal areas for uncertainty reduction or performance enhancement.

Source record↗

Mars Earth Return Vehicle (MERV) Propulsion Options

The COMPASS Team was tasked with the design of a Mars Sample Return Vehicle. The current Mars sample return mission is a joint National Aeronautics and Space Administration (NASA) and European Space Agency (ESA) mission, with ESA contributing the launch vehicle for the Mars Sample Return Vehicle. The COMPASS Team ran a series of design trades for this Mars sample return vehicle. Four design options were investigated: Chemical Return /solar electric propulsion (SEP) stage outbound, all-SEP, all chemical and chemical with aerobraking. The all-SEP and Chemical with aerobraking were deemed the best choices for comparison. SEP can eliminate both the Earth flyby and the aerobraking maneuver (both considered high risk by the Mars Sample Return Project) required by the chemical propulsion option but also require long low thrust spiral times. However this is offset somewhat by the chemical/aerobrake missions use of an Earth flyby and aerobraking which also take many months. Cost and risk analyses are used to further differentiate the all-SEP and Chemical/Aerobrake options.

Oleson, Steven R.↗

Probabilistic Risk Assessment Procedures Guide for NASA Managers and Practitioners (Second Edition)

Probabilistic Risk Assessment (PRA) is a comprehensive, structured, and logical analysis method aimed at identifying and assessing risks in complex technological systems for the purpose of cost-effectively improving their safety and performance. NASA's objective is to better understand and effectively manage risk, and thus more effectively ensure mission and programmatic success, and to achieve and maintain high safety standards at NASA. NASA intends to use risk assessment in its programs and projects to support optimal management decision making for the improvement of safety and program performance. In addition to using quantitative/probabilistic risk assessment to improve safety and enhance the safety decision process, NASA has incorporated quantitative risk assessment into its system safety assessment process, which until now has relied primarily on a qualitative representation of risk. Also, NASA has recently adopted the Risk-Informed Decision Making (RIDM) process [1-1] as a valuable addition to supplement existing deterministic and experience-based engineering methods and tools. Over the years, NASA has been a leader in most of the technologies it has employed in its programs. One would think that PRA should be no exception. In fact, it would be natural for NASA to be a leader in PRA because, as a technology pioneer, NASA uses risk assessment and management implicitly or explicitly on a daily basis. NASA has probabilistic safety requirements (thresholds and goals) for crew transportation system missions to the International Space Station (ISS) [1-2]. NASA intends to have probabilistic requirements for any new human spaceflight transportation system acquisition. Methods to perform risk and reliability assessment in the early 1960s originated in U.S. aerospace and missile programs. Fault tree analysis (FTA) is an example. It would have been a reasonable extrapolation to expect that NASA would also become the world leader in the application of PRA. That was, however, not to happen. Early in the Apollo program, estimates of the probability for a successful roundtrip human mission to the moon yielded disappointingly low (and suspect) values and NASA became discouraged from further performing quantitative risk analyses until some two decades later when the methods were more refined, rigorous, and repeatable. Instead, NASA decided to rely primarily on the Hazard Analysis (HA) and Failure Modes and Effects Analysis (FMEA) methods for system safety assessment.

Stamatelatos,Michael↗

Meteoroid Flux from Lunar Impact Monitoring

The flux of kilogram-sized meteoroids has been determined from the first 5 years of observations by NASA's Lunar Impact Monitoring Program (Suggs et al. 2014). Telescopic video observations of 126 impact flashes observed during photometric conditions were calibrated and the flux of meteoroids to a limiting mass of 30 g was determined to be 6.14 x 10(exp -10) m(exp -2) yr(exp -1) at the Moon, in agreement with the Grun et al. (1985) model value of 7.5 x 10(exp -10) m(exp -2) yr(exp -1). After accounting for gravitational focusing effects, the flux at the Earth to a limiting impact energy of 3.0 x10(exp -6) kilotons of TNT (1.3 x 10(exp 7) J) was determined to be consistent with the results in Brown et al. (2002). Approximately 62% of the impact flashes were correlated with major meteor showers as cataloged in visual/optical meteor shower databases. These flux measurements, coupled with cratering and ejecta models, can be used to develop impact ejecta engineering environments for use in lunar surface spacecraft design and risk analyses.

Suggs, Robert↗

Cassini Ring Plane Crossings: Hypervelocity Impact Risks to Sun Sensor Assemblies

For both F/G and D-ring crossings: Probability of a penetration damage of the SSH (Sun Sensor Head) window glass is very low; Optical attenuation due to craters on the surface of the window glass caused by direct HVI (Hyper-Velocity Impact) by dust particle is estimated to be less than 1 percent; Optical attenuation due to secondary debris cloud generated by the disintegrated ring dust particles is estimated to be less than 1 percent. To better manage the Sun sensor damage risk during selected proximal orbit crossings, it is highly desirable to follow the contingency procedures mentioned in Section VII of the paper: Details of this contingency procedure are given in the paper entitled "Cassini Operational Sun Sensor Risk Management During Proximal Orbit Saturn Ring Plane Crossings" authored by David M. Bates. Based on results of risk analyses documented in this work and contingency planning work described in the paper mentioned above, we judge that the proximal orbit campaign will be safe from the viewpoint of dust HVI hazard.

dust particles↗

NASA Orbital Debris Engineering Model (ORDEM) 3.1: Model Verification and Validation

The NASA Orbital Debris Engineering Model (ORDEM) 3.1 Model Verification and Validation (V&V) document accompanies the delivery of the latest ORDEM 3.1 model (Vavrin & Manis, 2019) and provides a detailed description of the V&V activities used to verify that the model was built correctly and validate the model against independent, real world sources of data obtained from sampling the orbital debris environment. This ORDEM 3.1 Model V&V document, along with the related ORDEM 3.1 Model Process document – which covers details of the mathematical, statistical, and physical basis of the model – are intended to inform credibility assessments, risk analyses, uncertainty characterizations, and other applications derived from use of the model by the ORDEM 3.1 user community.

Timothy Kennedy↗

Development of Space Mission Integrated Operations Scenarios

Integrated Operations Scenarios (IOS) describe nominal operations planned for a space mission. Operational scenarios are key to an operations concept, as they help identify issues and drivers on the operations system. This paper covers the tools, processes, and inputs that feed into an IOS product, and how IOS iterations during a mission lifecycle can buy down operational risks. A case used for this paper is nominal operations for an initial crewed Artemis mission that includes cross-program sequence of tasks required to accomplish end to end functions from launch through transit, on-orbit operations, to safely return to Earth. An IOS product serves as a reference for discussions during requirements development, task and risk analyses, concept of operations development, and as foundation to prepare space mission flight plans.

integrated operations scenarios↗