Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “firewall”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Technical Bulletin 005: NTP Monitoring

The Center for Alternative Synchronization and Timing (CAST) views Precision Time Protocol (PTP) and Network Time Protocol (NTP) as critical elements of the grid, from generation to the grid edge. This tech bulletin discusses the operation of NTP. The document shows not only commercial but also open-source applications. In some cases, the commercial applications may already have existing feature sets to secure and monitor NTP streams. From a security standpoint, using subscription NTP is risky unless the open bidirectional ports on local firewalls and routers are properly monitored and controlled.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Zero Trust Strategies for Chemical, Biological, Radiological, and Nuclear Detection Systems: D.1 Cyber Scenarios

The evolving landscape of cybersecurity necessitates a paradigm shift to a Zero Trust (ZT) model, which assumes breaches and continuously verifies trust. This approach reshapes how trust boundaries are established, focusing on identities, devices, networks, applications, and data, rather than solely relying on perimeter defenses such as firewalls. Central to this transformation is the National Institute of Standards and Technology's (NIST) Special Publication 800-207, outlining the Zero Trust Architecture (ZTA), along with Executive Order 14028, which mandates federal agencies to adopt ZT principles. Complementary to these efforts, the Cybersecurity and Infrastructure Security Agency (CISA) developed the Zero Trust Maturity Model (ZTMM), providing a framework with five pillars and three cross-cutting capabilities to guide agencies toward enhanced cybersecurity maturity. In support of these initiatives, the DHS Countering Weapons of Mass Destruction Office (CWMD) is applying ZT principles to secure Chemical, Biological, Radiological, and Nuclear (CBRN) detection systems. Recognizing the diverse deployment models and network connectivity of these systems—from stationary, non-networked units to mobile, cloud-connected devices—the Pacific Northwest National Laboratory (PNNL) is developing cybersecurity scenarios specifically for CBRN environments. These scenarios examine various configurations and technological capabilities, offering insights into the application of ZTMM pillars in enhancing the security postures of CBRN devices. The cybersecurity scenarios presented by PNNL are hypothetical, crafted to explore theoretical situations and stimulate discussion on the potential use or compromise of CBRN detection systems in varied contexts. These narratives are illustrative and do not reference any real events or actual networks. Instead, they employ generalized reference models to highlight concepts and potential issues within CBRN security, focusing on how Zero Trust strategies can be adapted to address these challenges effectively.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Optimized V1G and V2G Electric Vehicle Fleet Management and Grid Transaction at Marine Corps Air Station Miramar in San Diego, CA

The overall technical goal of the project was to demonstrate an all-electric bi-directional non-tactical fleet at Marine Corps Air Station (MCAS) Miramar that was integrated and controlled with other distributed energy resources (DERs) (i.e., PV, stationary battery, and building loads) to provide resilience to critical electric loads in the event of grid outages, to minimize charging costs, and to provide economic energy resources to electricity markets. In this project, the specific, technical objectives were: 1. Demonstrate that bi-directional electric vehicles can provide critical complementary services to fixed storage batteries in microgrid applications while performing function as non-tactical vehicles. 2. Demonstrate participation of bi-directional (V2G) and unidirectional (V1G) PEVs for demand management and minimization of charging costs. 3. Demonstrate integration of multiple DERs for grid service participation. US Marine Corps Air Station (MCAS) Miramar in San Diego was the site of this electric vehicle-to-microgrid-utility grid test and demonstration project. Existing microgrid assets in this study included (1) a public works building; (2) a 30-kW rooftop photovoltaic (PV) system and (3) a separate 250 kW carport PV system. In this project, six bi-directional V2G vans were located at the MCAS Miramar’s showcase building-scale microgrid to develop and test technical capabilities that V2G can provide in microgrid applications (e.g., cost reduction and resiliency). These resources provided aggregated demand management and simulated participation in current retail DR programs. The vehicles used in this demonstration were selected because they provided functionality that MCAS Miramar needed, 15 passenger transport and facilities work cargo carrying capacity, and bi-directional charging capability that the research project required. All vehicles in this study were manufactured and distributed by VIA Motors, Inc. There were six vehicles total and each was VIA’s VTRUX eREV V2G model, a modified General Motors Chevrolet 2500 2WD van. Three of the vans were configured as passenger vans and the other three were configured as cargo vans. Each van had an on-board bi-direcrtional inverter/charger, Bel Power Solutions model 350INVCHGT150-120-240-8G nominally rated at +/-15 kW. The VIA van’s charging connector follows the J1772 charging protocol. The bi-directional EVSEs demonstrated in this study were manufactured by Coritech, Inc. Each VGI-80-AC charging station enabled enhanced V2G charging capability to a Clipper Creek CS-100 charging module. The enhanced capabilities included ethernet communication following the SEP2.0 protocol with a distributed energy resource function set and an operator screen displaying real-time SOC, voltage, and current. The VGI-80-AC charging stations are classified as level 2 with a maximum current output of 80 A or effectively 19 kW. The VIA van’s onboard charger limited the charging and discharging power to 15 kW in each direction. A control computer was installed in the EWOC and connected to an existing monitor. The V2G control communication network was a completely stand-alone closed system that did not have any connection to any other networks on the base. A cybersecure remote communication connection was created with a cellular modem, firewall hardware, and a virtual private network configuration.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Consideration of Decabromodiphenyl Ether Flame Retardant in Thermal and Radiation Aging of Crosslinked Polyethylene Cable Insulation

Decabromodiphenyl ether (decaBDE) has been used as a flame-retardant additive in nuclear-grade electrical cable insulation. However, decaBDE has been identified as a persistent, bioaccumulative and toxic (PBT) substance, leading to regulatory scrutiny. On January 6, 2021, the Environmental Protection Agency (EPA) published a final rule to phase out decaBDE. The 2021 rule set a two-year compliance deadline for “processing and distribution in commerce of decaBDE for use in wire and cable insulation in nuclear power generation facilities.” In recognition of industry concerns following a sudden discontinuation of decaBDE-containing Class 1E wire and cable essential for nuclear power operations and the time needed for qualifying the individual components using the alternative insulation technology, an extended compliance deadline was set in the finalized amendments to the 2021 rule as published by the Environmental Appeals Board on November 12, 2024. The 2024 rule set the compliance deadline for processing and distributing decaBDE-containing wire and cable insulation until the end of the service life of these materials. Since decaBDE has long been relied upon as the flame retardant in one of the most common cross-linked polyethylene (XLPE) nuclear cable insulation formulations, RSCC Firewall III insulation, questions have naturally arisen regarding whether changes in cable performance might be expected for XLPE containing a decaBDE alternative, especially for safety-related cables that must perform their safety function in a design basis event such as a loss of coolant accident.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Holographic Space-Time and Quantum Information

The formalism of Holographic Space-time (HST) is a translation of the principles of Lorentzian geometry into the language of quantum information. Intervals along time-like trajectories, and their associated causal diamonds, completely characterize a Lorentzian geometry. The Bekenstein-Hawking-Gibbons-’t Hooft-Jacobson-Fischler-Susskind-Bousso Covariant Entropy Principle, equates the logarithm of the dimension of the Hilbert space associated with a diamond to one quarter of the area of the diamond’s holographic screen, measured in Planck units. The most convincing argument for this principle is Jacobson’s derivation of Einstein’s equations as the hydrodynamic expression of this entropy law. In that context, the null energy condition (NEC) is seen to be the analog of the local law of entropy increase. The quantum version of Einstein’s relativity principle is a set of constraints on the mutual quantum information shared by causal diamonds along different time-like trajectories. The implementation of this constraint for trajectories in relative motion is the greatest unsolved problem in HST. The other key feature of HST is its claim that, for non-negative cosmological constant or causal diamonds much smaller than the asymptotic radius of curvature for negative c.c., the degrees of freedom localized in the bulk of a diamond are constrained states of variables defined on the holographic screen. This principle gives a simple explanation of otherwise puzzling features of BH entropy formulae, and resolves the firewall problem for black holes in Minkowski space. It motivates a covariant version of the CKN [1] bound on the regime of validity of quantum field theory (QFT) and a detailed picture of the way in which QFT emerges as an approximation to the exact theory

tensor network↗

Deliver Signal Phase and Timing (SPAT) for Energy Optimization of Vehicle Cohort Via Cloud-Computing and LTE Communications

Predictive Signal Phase and Timing (SPAT) message set is one fundamental building block for vehicle-to-infrastructure (V2I) applications such as Eco-Approach and Departure (EAD) at traffic signal controlled urban intersections. Among the two complementary communication methods namely short-range sidelink (PC5) and long-range cellular radio link (Uu), this paper documents the work with long-range link: the complete data chain includes connecting to the traffic signals via existing backhaul communication network, collecting the raw signal phase state data, predicting the signal state changes and delivering the SPAT data via a geofenced service to requests over HTTP protocols. An Application Programming Interface (API) library is developed to support various cellular data transmission reduction and latency improvement techniques. An emulation-based algorithm is applied to predict the traffic signal state changes to provide adequate prediction horizon (e.g., at minimum 2 minutes) for the cohort energy optimization. In fact, the same connectivity and SPAT delivery methodology has been applied to traffic signalized intersections nationwide in the United States upon public agency approvals for access to their firewalled traffic control network and signal control systems or directly to individual controllers. This methodology proves its effectiveness and potential for rapid growth of such SPAT deliveries at mass production scale without needing infrastructure hardware retrofit or excessive communication means. To support the energy optimization of light and heavy-duty vehicle cohorts of mixed automation and propulsion systems (EV, ICE and hybrid), the connection and SPAT deliveries at two sites were completed, including public roads in Washtenaw County, Michigan and closed track test sites at American Center for Mobility (ACM) in Ypsilanti, Michigan. However, only closed test track results at ACM will be presented in this paper. A neuroevolution based optimizer is developed and implemented to control the speed of a vehicle cohort with different propulsion systems and automation levels. Closed track tests showed significant energy savings of the cohort operation.

99 GENERAL AND MISCELLANEOUS↗

Ceramic-Cord Gas Seal

High-temperature gasket material seals at temperatures above 1,100 degrees C. Concentric exhaust pipes are typical of applications in which ceramic-cord seals might be used. Cord is crushed to form seal between inner and outer pipes when inner pipe is expanded into place. Typical applications include engine exhaust ducts or hot pipes passing through firewalls.

Etzel, C. W.↗

Rule groupings: An approach towards verification of expert systems

Knowledge-based expert systems are playing an increasingly important role in NASA space and aircraft systems. However, many of NASA's software applications are life- or mission-critical and knowledge-based systems do not lend themselves to the traditional verification and validation techniques for highly reliable software. Rule-based systems lack the control abstractions found in procedural languages. Hence, it is difficult to verify or maintain such systems. Our goal is to automatically structure a rule-based system into a set of rule-groups having a well-defined interface to other rule-groups. Once a rule base is decomposed into such 'firewalled' units, studying the interactions between rules would become more tractable. Verification-aid tools can then be developed to test the behavior of each such rule-group. Furthermore, the interactions between rule-groups can be studied in a manner similar to integration testing. Such efforts will go a long way towards increasing our confidence in the expert-system software. Our research efforts address the feasibility of automating the identification of rule groups, in order to decompose the rule base into a number of meaningful units.

Mehrotra, Mala↗

Plasma-Spray Metal Coating On Foam

Molds, forms, and other substrates made of foams coated with metals by plasma spraying. Foam might be ceramic, carbon, metallic, organic, or inorganic. After coat applied by plasma spraying, foam left intact or removed by acid leaching, conventional machining, water-jet cutting, or another suitable technique. Cores or vessels made of various foam materials plasma-coated with metals according to method useful as thermally insulating containers for foods, liquids, or gases, or as mandrels for making composite-material (matrix/fiber) parts, or making thermally insulating firewalls in automobiles.

Cranston, J.↗

High-Temperature Graphite/Phenolic Composite

Graphite-fiber/phenolic-resin composite material retains relatively high strength and modulus of elasticity at temperatures as high as 1,000 degrees F. Costs only 5 to 20 percent as much as refractory materials. Fabrication composite includes curing process in which application of full autoclave pressure delayed until after phenolic resin gels. Curing process allows moisture to escape, so when composite subsequently heated in service, much less expansion of absorbed moisture and much less tendency toward delamination. Developed for nose cone of external fuel tank of Space Shuttle. Other potential aerospace applications for material include leading edges, parts of nozzles, parts of aircraft engines, and heat shields. Terrestrial and aerospace applications include structural firewalls and secondary structures in aircraft, spacecraft, and ships. Modified curing process adapted to composites of phenolic with other fiber reinforcements like glass or quartz. Useful as high-temperature circuit boards and electrical insulators.

Seal, Ellis C.↗

Recent improvements in the NASA technical report server

The NASA Technical Report Server (NTRS), a World Wide Web (WWW) report distribution service, has been modified to allow parallel database queries, significantly decreasing user access time by an average factor of 2.3, access from clients behind firewalls and/or proxies which truncate excessively long Uniform Resource Locators (URL's), access to non-Wide Area Information Server (WAIS) databases, and compatibility with the Z39-50.3 protocol.

Maa, Ming-Hokng↗

General Aviation Interior Noise: Source/Path Identification - Part 1

There were two primary objectives of the research effort reported herein. The first objective was to identify and evaluate noise source/path identification technology applicable to single engine propeller driven aircraft that can be used to identify interior noise sources originating from structure-borne engine/propeller vibration, airborne propeller transmission, airborne engine exhaust noise, and engine case radiation. The approach taken to identify the contributions of each of these possible sources was first to conduct a Principal Component Analysis (PCA) of an in-flight noise and vibration database acquired on a Cessna Model 182E aircraft. The second objective was to develop and evaluate advanced technology for noise source ranking of interior panel groups such as the aircraft windshield, instrument panel, firewall, and door/window panels within the cabin of a single engine propeller driven aircraft. The technology employed was that of Acoustic Holography (AH). AH was applied to the test aircraft by acquiring a series of in-flight microphone array measurements within the aircraft cabin and correlating the measurements via PCA. The source contributions of the various panel groups leading to the array measurements were then synthesized by solving the inverse problem using the boundary element model.

Unruh, James F.↗

Security for Multimedia Space Data Distribution over the Internet

Distribution of interactive multimedia to remote investigators will be required for high quality science on the International Space Station (ISS). The Internet with the World Wide Web (WWW) and the JAVA environment are a good match for distribution of data, video and voice to remote science centers. Utilizing the "open" Internet in a secure manner is the major hurdle in making use of this cost effective, off-the-shelf, universal resource. This paper examines the major security threats to an Internet distribution system for payload data and the mitigation of these threats. A proposed security environment for the Space Station Biological Research Facility (SSBRP) is presented with a short description of the tools that have been implemented or planned. Formulating and implementing a security policy, firewalls, host hardware and software security are also discussed in this paper. Security is a vast topic and this paper can only give an overview of important issues. This paper postulates that a structured approach is required and stresses that security must be built into a network from the start. Ignoring security issues or putting them off until late in the development cycle can be disastrous.

Stone, Thom↗

Elastomers that Endure

Through assistance from NASA's Kennedy Space Center, Dow Corning developed a strong, heat-protecting coating with applications in a variety of fields. Previously, NASA used silicate coatings that simply failed to adequately protect, which resulted in the frequent recoating of the damaged areas. The enormous expense of this repeat procedure led Kennedy's Materials Science Laboratory to investigate the possibilities of ablative-type coatings. The investigations resulted in the creation of a silicone ablative material known as the Dow Corning 3-6376 Fast Cure Elastomer. The new product, which does not require a primer coating, is a 100 percent silicone material. It is currently used in the automotive and aerospace industries and serves as an exceptional coating for engine compartment firewalls. Dow Corning's Fast Cure Elastomer has also proved to be an effective sealant. Moreover, it reduces the turnaround time for reuse of the launch structure because of fewer refurbishing operations. This means that NASA is not held up due to repairs when it comes time to launch another Shuttle. To date, the Agency has launched dozens of successful missions without the need for recoating.

Source record↗

Aerogel: From Aerospace to Apparel

Aspen Systems Inc. developed an aerogel-manufacturing process solved the handling problems associated with aerogel-based insulation products. Their aerogels can now be manufactured into blankets, thin sheets, beads, and molded parts; and may be transparent, translucent, or opaque. Aspen made the material effective for window and skylight insulation, non-flammable building insulation, and inexpensive firewall insulation that will withstand fires in homes and buildings, and also assist in the prevention of forest fires. Another Aspen product is Spaceloft(TM); an inexpensive, flexible blanket that incorporates a thin layer of aerogel embedded directly into the fabric. Spaceloft, is incorporated into jackets intended for wear in extremely harsh conditions and activities, such as Antarctic expeditions.

Source record↗

Automotive Insulation

Under a Space Act Agreement between Boeing North America and BSR Products, Space Shuttle Thermal Protection System (TPS) materials are now used to insulate race cars. BSR has created special TPS blanket insulation kits for use on autos that take part in NASCAR events, and other race cars through its nationwide catalog distribution system. Temperatures inside a race car's cockpit can soar to a sweltering 140 to 160 degrees, with the extreme heat coming through the engine firewall, transmission tunnel, and floor. It is common for NASCAR drivers to endure blisters and burns due to the excessive heat. Tests on a car insulated with the TPS material showed a temperature drop of some 50 degrees in the driver's cockpit. BSR-TPS Products, Inc. now manufactures insulation kits for distribution to race car teams around the world.

Source record↗

Making Wireless Networks Secure for NASA Mission Critical Applications using Virtual Private Network (VPN) Technology

With so many security issues involved with wireless networks, the technology has not been fully utilized in the area of mission critical applications. These applications would include the areas of telemetry, commanding, voice and video. Wireless networking would allow payload operators the mobility to take computers outside of the control room to their offices and anywhere else in the facility that the wireless network was extended. But the risk is too great of having someone sit just inside of your wireless network coverage and intercept enough of your network traffic to steal proprietary data from a payload experiment or worse yet hack back into your system and do even greater harm by issuing harmful commands. Wired Equivalent Privacy (WEP) is improving but has a ways to go before it can be trusted to protect mission critical data. Today s hackers are becoming more aggressive and innovative, and in order to take advantage of the benefits that wireless networking offer, appropriate security measures need to be in place that will thwart hackers. The Virtual Private Network (VPN) offers a solution to the security problems that have kept wireless networks from being used for mission critical applications. VPN provides a level of encryption that will ensure that data is protected while it is being transmitted over a wireless local area network (IAN). The VPN allows a user to authenticate to the site that the user needs to access. Once this authentication has taken place the network traffic between that site and the user is encapsulated in VPN packets with the Triple Data Encryption Standard (3DES). 3DES is an encryption standard that uses a single secret key to encrypt and decrypt data. The length of the encryption key is 168 bits as opposed to its predecessor DES that has a 56-bit encryption key. Even though 3DES is the common encryption standard for today, the Advance Encryption Standard (AES), which provides even better encryption at a lower cycle cost is growing acceptance. The user computer running the VPN client and the. target site that is running the . VPN firewall exchange this encryption key and therefore are the only ones that are able to decipher the data. The level of encryption offered by the VPN is making it possible for wireless networks to pass the strict security policies that have kept them from being used in the past. Now people will be able to benefit from the many advantages that wireless networking has to offer in the area of mission critical applications.

Nichols, Kelvin F.↗

Optimizing the NASA Technical Report Server

The NASA Technical Report Server (NTRS), a World Wide Web report distribution NASA technical publications service, is modified for performance enhancement, greater protocol support, and human interface optimization. Results include: Parallel database queries, significantly decreasing user access times by an average factor of 2.3; access from clients behind firewalls and/ or proxies which truncate excessively long Uniform Resource Locators (URLs); access to non-Wide Area Information Server (WAIS) databases and compatibility with the 239-50.3 protocol; and a streamlined user interface.

Nelson, Michael L.↗