SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This viewgraph presentation makes several recommendations to ensure the safe and effective design of Lithium ion cell batteries. Large lithium ion cells require pressure switches and small cells require pressure disconnects and other safety devices with the ability to instantly interrupt flow. Other suggestions include specifications for batteries and battery chargers.
Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible." To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) opted a development approach that explicitely incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 prelimnary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigative strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.
Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible".1 To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) chose a development approach that explicitly incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 preliminary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigation strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.
Cyber-informed engineering and security-by-design frameworks are important in promoting the need to identify cybersecurity concerns early in the systems engineering lifecycle so risks from adversarial cyber-attacks can be eliminated or reduced through engineering design practices. In addition to adversarial risk, risk in operational technology systems also includes non-adversarial and unintentional risk from other factors such as human performance errors, environmental conditions, design flaws, and device degradation or failure. This paper introduces a new concept for characterizing digital risk, both adversarial and non-adversarial, and provides the basis for initial research into a novel digital risk analysis approach focused on incorporating attack difficulty into a multi-attribute analysis technique using robust decision-making. This digital risk characterization is also used to frame a discussion on the challenges of competing objectives and competing stakeholder requirements in an integrated energy system project that incorporates a small modular reactor and industrial facility.
Power is essential for crewed and uncrewed spaceflight operations. Spacecraft batteries are designed and tested to be safe under extreme environmental conditions.
Aircraft design in commercial air transport safety, discussing turbine blade oxidation and crack prevention, engine cooling, fuels, lightning protection, etc
Traditional systems engineering demonstrates the importance of customer needs in scoping and defining design requirements; yet, in practice, other human stakeholders are often absent from early lifecycle phases. Human factors are often omitted in practice when evaluating and down-selecting design options due to constraints such as time, money, access to user populations, or difficulty in proving system robustness through the inclusion of human behaviors. Advances in systems engineering increasingly include non-technical influences into the design, deployment, operations, and maintenance of interacting components to achieve common performance objectives. Furthermore, such advances highlight the need to better account for the various roles of human actors to achieve desired performance outcomes in complex systems. Many of these efforts seek to infuse lessons and concepts from human factors (enhanced decision-making through Crew Resource Management), systems safety (Rasmussen's “drift toward danger”) and organization science (Giddens' recurrent human acts leading to emergent behaviors) into systems engineering to better understand how socio-technical interactions impact emergent system performance. Safety and security are examples of complex system performance outcomes that are directly impacted by varying roles of human actors. Using security performance of high consequence facilities as a representative use case, this article will outline the System Context Lenses to understand how to include various roles of human actors into systems engineering design. Several exemplar applications of this organizing lenses will be summarized and used to highlight more generalized insights for the broader systems engineering community.
The National Aeronautics and Space Administration (NASA) at the Dryden Flight Research Center (DFRC) has been conducting flight-test research using an F-15 aircraft (figure 1). This aircraft has been specially modified to interface a neural net (NN) controller as part of a single-string Airborne Research Test System (ARTS) computer with the existing quad-redundant flight control system (FCC) shown in figure 2. The NN commands are passed to FCC channels 2 and 4 and are cross channel data linked (CCDL) to the other computers as shown. Numerous types of fault-detection monitors exist in the FCC when the NN mode is engaged; these monitors would cause an automatic disengagement of the NN in the event of a triggering fault. Unfortunately, these monitors still may not prevent a possible NN hard-over command from coming through to the control laws. Therefore, an additional and unique safety monitor was designed for a single-string source that allows authority at maximum actuator rates but protects the pilot and structural loads against excessive g-limits in the case of a NN hard-over command input. This additional monitor resides in the FCCs and is executed before the control laws are computed. This presentation describes a floating limiter (FL) concept1 that was developed and successfully test-flown for this program (figure 3). The FL computes the rate of change of the NN commands that are input to the FCC from the ARTS. A window is created with upper and lower boundaries, which is constantly floating and trying to stay centered as the NN command rates are changing. The limiter works by only allowing the window to move at a much slower rate than those of the NN commands. Anywhere within the window, however, full rates are allowed. If a rate persists in one direction, it will eventually hit the boundary and be rate-limited to the floating limiter rate. When this happens, a persistent counter begins and after a limit is reached, a NN disengage command is generated. The tunable metrics for the FL are (1) window size, (2) drift rate, and (3) persistence counter. Ultimate range limits are also included in case the NN command should drift slowly to a limit value that would cause the FL to be defeated. The FL has proven to work as intended. Both high-g transients and excessive structural loads are controlled with NN hard-over commands. This presentation discusses the FL design features and presents test cases. Simulation runs are included to illustrate the dramatic improvement made to the control of NN hard-over effects. A mission control room display from a flight playback is presented to illustrate the neural net fault display representation. The FL is very adaptable to various requirements and is independent of flight condition. It should be considered as a cost-effective safety monitor to control single-string inputs in general.
With the passage of the Infrastructure Investment and Jobs Act in 2021 and the Inflation Reduction Act (IRA) in 2022, the United States stands at a critical juncture for the future of nuclear power. These landmark policies provide significant support for clean energy initiatives, positioning nuclear power as a key component of the nation’s strategy to reduce carbon emissions and achieve energy security. This growing emphasis on nuclear energy is driven by the need for reliable, low-carbon power sources as the country transitions away from fossil fuels. Federal policy, along with increasing state-level support, is encouraging investment in nuclear technology advancements to meet these demands. Building new nuclear power plants (NPPs), however, presents significant challenges due to high costs and long construction timelines. As a result, increasing the power output of existing NPPs through power uprates has emerged as a more feasible and cost-effective strategy. One key area of advancement is the development of accident-tolerant fuel (ATF), such as chromium-coated zirconium alloy cladding, which offers enhanced material performance, enabling power uprates in light water reactors (LWRs). Given the growing demand for nuclear energy fueled by federal policies and state initiatives, it is essential to evaluate the feasibility and benefits of significant power uprates in existing pressurized water reactors (PWRs) using advanced fuel technologies. The introduction of ATF concepts opens new opportunities for safely and economically achieving these power increases. Assessing whether these innovations can support substantial power uprates while maintaining operational safety is crucial to maximizing the potential of the nation’s existing nuclear infrastructure. This project aims to explore how power uprates can be achieved by boosting reactor thermal power output and optimizing reactor core design, while ensuring the safety and economic viability of NPPs. Specifically, it will focus on demonstrating the technical and economic feasibility of power uprates in a PWR using low 5-10% enrichment uranium (LEU+) high burnup (HBU) fuel combined with ATF concepts. In fiscal year 2024 (FY24), the research and development focus on building foundational models and conducting multi-physics performance and safety analyses to support the power uprate. The findings of the study would be shared through LWRS Seasonal Meetings, conferences and workshops with utility companies and researchers. These also serve as a basis for further study of fuel reloading optimization with ATF claddings.
The lessons learned from the S&MA early involvement in the Ares I launch vehicle design phases proved that performing an in-line function jointly with engineering is critical for S&MA to have an effective role in supporting the system, element, and component design. These lessons learned were used to effectively support the Ares V conceptual design phase and planning for post conceptual design phases. The Top level Conceptual LOM assessment for Ares V performed by the S&MA community jointly with the engineering Advanced Concept Office (ACO) was influential in the final selection of the Ares V system configuration. Post conceptual phase, extensive reliability effort should be planned to support future Heavy Lift Launch Vehicles (HLLV) design. In-depth reliability analysis involving the design, manufacturing, and system engineering communities is critical to understand design and process uncertainties and system integrated failures.
This is a NASA-intern briefing of work done over the summer as part of Human Contributions to Safety research on resilience. This reports on the process and rationale for developing a survey focusing on pilot reports of their own behavior and the context in which that behavior occurs.
Cires, the French repository for very low-level waste (VLLW) managed by Andra, has a fifteen-year history of enhancing design and disposal operations, responding to producers' needs by optimizing existing facilities and providing new facilities as needed. Its flexibility allows the facility to adapt to changes in waste delivery flows, to dispose of larger waste volumes without using more space, to integrate new concepts and even envisage disposal capacity extension. The article traces the ever evolving history of technical and operational optimization of this unique disposal facility situated in Eastern France. (authors)
This viewgraph presentation reviews the features of the Lithium-ion batteries, particularly in reference to the hazards and safety of the battery. Some of the characteristics of the Lithium-ion cell are: Highest Energy Density of Rechargeable Battery Chemistries, No metallic lithium, Leading edge technology, Contains flammable electrolyte, Charge cut-off voltage is critical (overcharge can result in fire), Open circuit voltage higher than metallic lithium anode types with similar organic electrolytes. Intercalation is a process that places small ions in crystal lattice. Small ions (such as lithium, sodium, and the other alkali metals) can fit in the interstitial spaces in a graphite lattice. These metallic ions can go farther and force the graphitic planes apart to fit two, three, or more layers of metallic ions between the carbon sheets. Other features of the battery/cell are: The graphite is conductive, Very high energy density compared to NiMH or NiCd, Corrosion of aluminum occurs very quickly in the presence of air and electrolyte due to the formation of HF from LiPF6 and HF is highly corrosive. Slides showing the Intercalation/Deintercalation and the chemical reactions are shown along with the typical charge/discharge for a cylindrical cell. There are several graphs that review the hazards of the cells.
The author gives a survey of the principles of stress analysis and design of airplane structures, and discusses the fundamental strength specifications and their effect on the stress analysis as compared with the safety factors used in other branches of engineering.
Following a Commercial Launch Vehicle On-Pad COPV (Composite Overwrapped Pressure Vessels) failure, a request was received by the NESC (NASA Engineering and Safety Center) June 14, 2014. An assessment was approved July 10, 2014, to develop and assess the capability of scanning eddy current (EC) nondestructive evaluation (NDE) methods for mapping thickness and inspection for flaws. Current methods could not identify thickness reduction from necking and critical flaw detection was not possible with conventional dye penetrant (PT) methods, so sensitive EC scanning techniques were needed. Developmental methods existed, but had not been fully developed, nor had the requisite capability assessment (i.e., a POD (Probability of Detection) study) been performed.
As an empirically established design criterion, Nelson curves that relate the service temperature and the allowable hydrogen partial pressure have been developed and utilized for more than sixty years in pressure vessels and piping (PVP) safety design. Despite a relatively clear thermodynamic understanding of the high-temperature-hydrogen-attack (HTHA) problem, the detailed fracture process on the microstructural length scales, however, remains elusive, and a quantitative assessment of the PVP lifetime under HTHA from the available creep fracture dataset is still not possible. This work develops a microstructure-informed and micromechanics-based model by incorporating a synergy between hydrogen transport and intergranular-cavity-based fracture process. Based on the available creep lifetime data of C-0.5Mo steels, we are able to calibrate material constitutive parameters, and then conduct nonlinear finite element simulations that reveal a real-time stress-induced hydrogen diffusional transport along grain boundaries, coupled with a microstructure-explicit failure process, from which Nelson curves can be computed. Such failure analyses allow us to delineate two distinct regimes on the Nelson curves, i.e., dislocation-creep-controlled or grain boundary diffusion-assisted cavity growth. More importantly, we found that a small change of the pipe thickness and applied stresses can significantly shift these lifetime curves. However, these two parameters are usually not provided in Nelson curves, thus limiting their usage in material selection and safety design. In conclusion, this discrepancy can clearly be mitigated by extensive parametric studies from our micromechanical modeling/simulation framework.
Department of Energy National Nuclear Security Administration Office of Material Management and Minimization’s mission includes the conversion of civilian research reactors from highly enriched uranium (HEU) to low-enriched uranium (LEU) fuel. Analyses have shown that the Oak Ridge National Laboratory High Flux Isotope Reactor (HFIR) will need to operate at 95 MW for the LEU silicide dispersion fuel designs to match key performance metrics obtained with HEU fuel at 85 MW. To prove safe operation of HFIR after installation of plant modifications to increase power, a high power HEU test cycle was proposed. Neutronics model updates and reactor physics analyses are performed to support the development of safety design reports for the high power (HP) HEU test cycle. Reactor physics metrics evaluated herein include fuel depletion, actinide production, cycle length, fission rate density distributions, axial power peaking factors, and reactor kinetic parameters. These reactor physics analyses support the development of future LEU safety design reports by providing key input for future HP HEU HFIR thermal hydraulics and reactor transient safety analyses.
Unlike conventional generators, inverter-based generation are fundamentally incapable of providing rotational inertia. While grid-forming inverters alleviate some of that problem by synthesizing small inertia via feedback control, additional control mechanisms are needed to ensure safety and security during transients. In this paper, we propose novel real-time safety-constrained feedback controllers (``safety filters'') for droop-based (grid-forming) inverters to ensure transient security of the grid. The safety filter acts as a buffer between the network operational layer and the inverter-control layer, and only lets those dispatch control signals pass to the inverter droop-controller, which are guaranteed to not violate the safety specifications (frequency, voltage, current limits). Using a distributed barrier certificates method, we construct sector-like conditions on the control policies, which guarantee the satisfaction of transient safety specifications. Sum-of-square programming is used to synthesize the safety filters. Numerical simulation results are provided to illustrate the performance of the proposed filter on inverter-based microgrids.