Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “instrumentation and control system”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Proof-of-Concept for Sensor Modeling in MOOSE for the Design of Autonomous Nuclear Reactor Control

Autonomous operation is essential for the deployment of microreactors and fission batteries, both in terrestrial and space applications. However, prototypes of microreactors and fission batteries do not exist yet, and even the design space has not been narrowed down conclusively, making the instrumentation and control system design difficult. For this reason, there is a need for flexible computational capabilities to create a numerical stand-in of potential microreactor and fission battery designs. The latter can be used to design and test control strategies to support autonomous operations. In this paper, we describe the initial implementation of a pluggable sensor system for the easy implementation of realistic sensor models in the multiphysics object-oriented simulation environment (MOOSE) framework. This new capability will enable MOOSE users to create a numerical stand-in of microreactors and fission batteries, ultimately allowing them to easily test new control algorithms, and instrumentation strategies for advanced systems in the design phase

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Proof-of-Concept for Sensor Modeling in MOOSE for the Design of Autonomous Nuclear Reactor Control

Autonomous operation is essential for the deployment of microreactors and fission batteries, both in terrestrial and space applications. For this reason, recent studies have investigated autonomous control by using adaptive model predictive control and multi-objective optimization for heat pipe–cooled microreactors under normal and heat pipe failure conditions. However, prototypes of microreactors and fission batteries do not exist yet, and even the design space has not been narrowed down conclusively, making the instrumentation and control system design difficult. For this reason, there is a need for flexible computational capabilities to create a numerical stand-in of potential microreactor and fission battery designs. The latter can be used to design and test control strategies to support autonomous operations. In this poster, we describe the initial implementation of a pluggable sensor system for the easy implementation of realistic sensor models in the multiphysics object-oriented simulation environment (MOOSE) framework. This new capability will enable MOOSE users to create a numerical stand-in of microreactors and fission batteries, ultimately allowing them to easily test new control algorithms, and instrumentation strategies for advanced systems in the design phase.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Gen 3 Particle Pilot Plant (G3P3) -- High-Temperature Particle System for Concentrating Solar Power (Phases 1 and 2)

The U.S. Department of Energy Solar Energy Technologies Office initiated the Generation 3 Concentrating Solar Power (CSP) program to achieve higher operating temperatures (>700 °C) to enable next-generation CSP high-temperature power cycles such as the supercritical CO 2 (sCO2) Brayton Cycle. Three teams were selected to pursue high-temperature gas, liquid, and solid pathways for the heat-transfer media. Phases 1 and 2, which lasted from 2018 – 2020, consisted of design, modeling, and testing activities to further de-risk each of the technologies and develop a design for construction, commissioning, and operation of a pilot-scale facility in Phase 3 (2021 – 2024). This report summarizes the activities in Phases 1 and 2 for the solid-particle pathway led by Sandia National Laboratories. In Phases 1 and 2, Sandia successfully de-risked key elements of the proposed Gen 3 Particle Pilot Plant (G3P3) by improving the design, operation, and performance of key particle component technologies including the receiver, storage bins, particle-to-sCO2 heat exchanger, particle lift, and data acquisition and controls. Modeling and testing of critical components have led to optimized designs that meet desired performance metrics. Detailed drawings, piping and instrumentation diagrams, and process flow diagrams were generated for the integrated system, and structural analyses of the assembled tower structure were performed to demonstrate compliance with relevant codes and standards. Instrumentation and control systems of key subsystems were also demonstrated. Together with Bridgers & Paxton, Bohannan Huston, and Sandia Facilities, we have completed a 100% G3P3 tower design package with stamped engineering drawings suitable for construction bid in Phase 3.

14 SOLAR ENERGY↗

User Access to Scientific Facilities via 5G: A Cyber Security Thought Experiment

5G is more than an over-the-air radio technology upgrade. It is a strategy to extend Mobile Network Operator service offerings beyond traditional voice, instant messaging and Internet access. 5G Mobile Network Operators will offer new telecommunication services that include enhanced guarantees of confidentiality, integrity and availability. How could such services change the way Science collaborations connect scientists to supercomputers and other scientific facilities? Current scientific collaborations implicitly trust cloud service providers to securely store and process data. The perceived risks of outsourcing Science data security are counterbalanced by assurances that cloud providers operate at a scale that allows them to implement security measures impractical for Science collaborations (e.g. continuous system administrator behavioral monitoring and strict individual separation of duties). If that is true for a cloud service provider like Amazon Web Services (2018 revenue: $25.7 billion), could it also be true for Mobile Network Operators like Verizon Wireless (2018 revenue: $91.7 billion) or AT&T Mobility (2018 revenue: $71.3 billion)? DOE Leadership Class supercomputer facility users currently access them from the public Internet via Secure Shell. The sponsors and operators of the supercomputer facilities have determined that the public Internet path between the Scientist’s Device and the Login Node does not natively provide enough confidentiality or integrity to protect those communications. Therefore, the facilities achieve additional confidentiality and integrity by requiring Secure Shell encryption across those untrusted network paths. Using 5G Network Slice technology, a Mobile Network Operator may offer communication services between supercomputer users and facilities that natively provide confidentiality and integrity guarantees. Sponsors and operators of supercomputer facilities may determine that these guarantees provide enough confidentiality and integrity to protect those communications. If so, a 5G Network Slice could replace an SSH session running over the public Internet. Finally, this use case could be extended to other Office of Science user facility access requirements. Consider microscopy instruments at (e.g.) the Center for Nanoscale Materials or the Environmental Molecular Sciences Laboratory. The embedded systems controlling such instruments may not always support encrypted network access technologies like SSH. 5G Network Slices may offer an alternative to current VPN or SSH tunneling techniques, with additional benefits like guaranteed minimum bandwidth.

5G↗

Digital Engineering and Cybersecurity Decision Analysis in Early Phases of SMR-Driven IES Projects

Considerable efforts are underway to ensure cybersecurity is integrated into the systems engineering lifecycle. Cyber-informed engineering and security-by-design frameworks are intended to identify and engineer out cybersecurity risks throughout the lifecycle. While these approaches are valuable for promoting the need to include cybersecurity considerations in early design phases to create more secure systems, they may not consider the entirety of digital risks. Digital risks in a digital instrumentation and control system include adversarial and unintentional risks from internal and external factors, such as human performance errors, design flaws, environmental conditions, and equipment degradation or failure. This report provides a detailed discussion on digital risk prior to describing the background and concept of operations for a small modular reactor-driven integrated energy system connected to industrial applications. The challenges of competing objectives and competing stakeholder requirements are discussed and the impacts on digital engineering, security considerations, and interdependencies are evaluated for mission-level, facility-level, and system-level decisions.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Cyber-Informed Engineering for Nuclear Reactor Digital Instrumentation and Control

As nuclear reactors transition from analog to digital technology, the benefits of enhanced operational capabilities and improved efficiencies are potentially offset by cyber risks. Cyber-Informed Engineering (CIE) is an approach that can be used by engineers and staff to characterize and reduce new cyber risks in digital instrumentation and control systems. CIE provides guidance that can be applied throughout the entire systems engineering lifecycle, from conceptual design to decommissioning. In addition to outlining the use of CIE in nuclear reactor applications, this chapter provides a brief primer on nuclear reactor instrumentation and control and the associated cyber risks in existing light water reactors as well as the digital technology that will likely be used in future reactor designs and applications.

42 ENGINEERING↗

Technical Challenges and Gaps in Integration of Advanced Sensors, Instrumentation, and Communication Technologies with Digital Twins for Nuclear Application

This paper explores integrating advanced sensor, instrumentation, and communication technologies with digital twin technologies for nuclear energy application. Digital twins and digital-twin-enabling technologies are expected to integrate with future nuclear reactor designs and have the potential to impact currently operating nuclear power plants. Greater digital integration, advanced instrumentation and control systems, and advanced operations and maintenance practices are all associated with digital-twin-enabling technologies. Advanced sensors, instrumentation, and communication technology are expected to comprise important elements of the infrastructure required to develop and operate a nuclear digital twin system. This paper identifies and discusses challenges and gaps in developing and implementing advanced sensors and instrumentation and communication technology to be integrated with a digital twin in current and advanced reactor applications. It is important to address some challenge and gap to enable a successful near-term deploying advanced sensors, instrumentation, and communication technologies integrated with digital twins.

Yadav, Vaibhav↗

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Root Cause Correlation Analysis of Software Failures via Orthogonal Defect Classification and Natural Language Processing

Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Root Cause Correlation Analysis of Software Failures via Orthogonal Defect Classification and Natural Language Processing

Systems theoretic process analysis (STPA) is becoming an increasingly popular technique to assess how complex digital software systems can fail. Rather than defining failures by their observable failure events, which may be sparse especially for safety rated nuclear digital instrumentation and control systems (DI&C), failures are defined as postulated unsafe actions under specific contextual conditions. This permits a top-down analysis of system hazards and identifies whether imposed constraints and requirements can sufficiently address undesirable hazards. However, STPA is a qualitative approach at identifying inadequacies in the development process and cannot currently be used to quantify unsafe action likelihoods for probabilistic risk assessment. Therefore, in this work, we examine the root causes of software failure and explore whether a consistent correlation can be linked to specific unsafe action classes. We implement Lbl2Vec, an unsupervised document classification and retrieval algorithm, on a database of 4,096 software defect reports acquired from various open-source software systems. By analyzing sentence structure, embedded labels, and word vectors, we show that certain defect types positively correlate to specific unsafe action classes over others. The correlations developed can be used to estimate the failure probability of safety intended DI&C systems which provides a licensing basis for nuclear plant modernization efforts.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Non-Nuclear Test Facility Development to Support Verification and Validation Needs

This study focuses on developing a non-nuclear test facility to help meet the verification and validation (V&V) requirements of a water-cooled small modular reactor (SMR) system. The scaling analysis necessary for reactor system experimentation and assessment model V&V considers various reactor system accident scenarios such as main steam line break (MSLB), steam generator tube rupture (SGTR), and containment condensation and heat transfer. The goal is to identify key physics based phenomena of interest (POI), specific figures of merit (FOMs), and the state of knowledge (SOK) by employing phenomena identification and ranking table (PIRT) studies. Important physics phenomena such as heat transfer, fluid dynamics, structural integrity, and material selection must be addressed when scaling a thermal-hydraulics system. Alongside these considerations, modifications to the facility may be needed to align the scaled system with the available footprint (height and space) of the facility. These modifications may include infrastructure upgrades, changes to the piping layout, implementation of safety measures, and installation of new instrumentation and control systems. The test facility aims to provide a scaled-down version of prototypic facilities for comprehensive V&V activities by overcoming these challenges and making the necessary modifications. This approach minimizes scaling distortion, simulates prototypic plant conditions, and accurately models accident event progressions. Thus, the facility will be capable of adequately modeling a scaled SMR system to support the design, development and licensing needs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Embedded EPICS server for PowerPMAC motion controllers

An embedded server layer of Experimental Physics and Industrial Control System (EPICS) for PowerPMAC motion controllers has been developed and deployed at two undulator beamlines of the National Institute of General Medical Sciences and the National Cancer Institute (GM/CA) Structural Biology Facility at the Advanced Photon Source (APS). This compact, open source solution makes the power and versatility of PowerPMAC motion controls directly accessible to distributed EPICS clients. At GM/CA the system controls about 200 servo and stepper motors — both encoded and unencoded — and multiple digital and analog I/O accessories. The server stack comprises two sublayers: a lower-level driver and database that communicates directly with PowerPMAC, and a facility-specific soft sublayer built on top. The paper describes installing EPICS on PowerPMAC, the implementation of both layers and client examples, including on-the-fly scanning.

EPICS↗

Detectors and Instrumentation [Slides]

D&I targets diagnostic maturation and development for subcritical and hydrodynamic experiments 2 to 5 years into the future. Key technology areas include imaging, detectors, instruments and control systems. Most of the work scope is funded from Stockpile Stewardship’s Hydrodynamic and Subcritical Experiment Execution Support (HSEES) portfolio.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Progress on the MARVEL Cybersecurity by Design Model-Based Systems Engineering Project

Formal model-based systems engineering (MBSE) combines a model, systems thinking, and systems engineering to visually depict the boundaries, context, and behavior of interconnected systems, facilitating effective design, development, and utilization of engineered systems throughout the systems engineering lifecycle. Although nuclear reactor vendors employ these tools to integrate functionality, performance, and safety, they are not yet addressing digital risk concerns introduced by use of operational technology, such as digital instrumentation and control systems. To accomplish this objective, the Microreactor Applications Research Validation and EvaLuation (MARVEL) microreactor was used as an MBSE case study. This real-world application provides a first-of-a-kind opportunity to demonstrate the benefits of integrating digital risk and cybersecurity into the MBSE design process of a nuclear reactor. This paper provides an update of the ongoing MARVEL Cyber MBSE project as it specifically relates to the integration of digital risk management and cybersecurity by design.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Survey of Cyber Risk Analysis Techniques for Use in the Nuclear Industry

Using traditional probabilistic risk analysis methods for severe accident safety risk management on non-digital systems, structures, and components at nuclear power plants is well-established. In contrast, cyber risk analysis of digital assets is still an immature field with unproven techniques due, in part, to the continuously changing threat environment and the challenge of digital assets failing in unexpected ways. As the nuclear fleet continues to adopt digital instrumentation and control systems, it is increasingly important to have effective and efficient cyber risk analysis techniques to support risk management decisions, such as risk elimination by system redesign or risk mitigation by implementation of prioritized security controls. To understand the state of the art in cyber risk analysis for future research, we surveyed 36 publications across ten application domains. We describe our survey methodology and rate each technique based upon scope, adoptability, and repeatability. In this work, we examine the unique constraints of the nuclear industry and outline the strengths and weaknesses of using the cyber risk analysis techniques in the industry, highlighting gaps with current techniques. We also discuss challenges and potential research directions for advancing the science for both existing and new advanced reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

PELICAN Design, Test Planning, and Commissioning Results

To support design efforts for the Versatile Test Reactor (VTR) core assemblies, an experimental facility has been designed and constructed at Argonne National Laboratory to match the hydraulic flow conditions within the VTR’s primary heat transport system (PHTS). This facility, the Pressure drop Experimental Loop for Investigations of Core Assemblies in advanced Nuclear reactors, PELICAN, provides the ability to measure pressure drop across a full-scale fuel assembly containing prototypic axial reflectors, fuel, and plena components. The PELICAN facility was designed and built to offer maximum flexibility, allowing testing from short sub-sections all the way to the full-length core fuel assemblies. The report presents the high-level program objectives, a summary of the facility design, instrumentation, and control systems, and the testing procedure. The outcomes from facility characterization efforts and first test matrix results are then presented and then, finally, the conclusion contains a summary of the future work to be performed. This test facility was designed to match the hydraulic conditions of the flowing sodium in the VTR using water as a surrogate fluid. To do so, the water is elevated to a temperature of 110°C where its viscosity matches that of sodium, and with a 50-HP centrifugal pump, is capable of generating full scale flow rates to achieve prototypic Reynolds and Euler number flow conditions. To prevent boiling, the system is maintained at elevated pressure of at least 2.7-3.0 bar (40-44 psig). A set of 15 tests have been used to perform checkout activities in order to commission the device, survey the capabilities of PELICAN, and generate experimental data at isothermal conditions and over a range of flow rates up to 44 kg/s (700 GPM) to produce datasets used in the verification and validation of VTR design and modeling efforts. Initial testing focused on facility characterization, which assessed the operational capabilities of various control systems. The thermal control system was qualified, including the thermal response of the loop to the heat added by self- and auxiliary heaters, the chiller and heat exchanger systems for removing excess heat, and their coupled ability to maintain steady-state isothermal conditions as desired. Additionally, the pressure control system was verified to ensure necessary operating environments that promote pump health and prevent boiling of loop inventory at high temperatures could be met. With these systems in place, the first set of matrix tests have been carried out using orifice plates with inner diameters of 2.25-inches and 2.5-inches. Orifice plate flow behavior is well covered in scientific literature, and the results find good agreement with the measured pressure drop vs flow rate and those of theoretical predictions. This initial testing not only helps to validate the experiment, but it also produces a high quality data set for a geometry that is easily reproducible for simulations. Finally, the report is concluded with a discussion of the work to come and provides a snapshot of the test articles in the experimental pipeline whose designs are being inspired by the current designs from the VTR.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Application of Orthogonal Defect Classification for Software Reliability Analysis

The modernization of existing and new nuclear power plants with digital instrumentation and control systems (DI&C) is a recent and highly trending topic. However, there lacks strong consensus on best-estimate reliability methodologies by both the United States (U.S.) Nuclear Regulatory Commission (NRC) and the industry. This has resulted in hesitation for further modernization projects until a more unified methodology is realized. In this work, we develop an approach called Orthogonal-defect Classification for Assessing Software Reliability (ORCAS) to quantify probabilities of various software failure modes in a DI&C system. The method utilizes accepted industry methodologies for software quality assurance that are also verified by experimental or mathematical formulations. In essence, the approach combines a semantic failure classification model with a reliability growth model to predict (and quantify) the potential failure modes of a DI&C software system. The semantic classification model is used to address the question: How do latent defects in software contribute to different software failure root causes? The use of reliability growth models is then used to address the question: Given the connection between latent defects and software failure root causes, how can we quantify the reliability of the software? A case study was conducted on a representative I&C platform (ChibiOS) running a smart sensor acquisition software developed by Virginia Commonwealth University (VCU). The testing and evidence collection guidance in ORCAS was applied, and defects were uncovered in the software. Qualitative evidence, such as condition coverage, was used to gauge the completeness and trustworthiness of the assessment while quantitative evidence was used to determine the software failure probabilities. The reliability of the software was then estimated and compared to existing operational data of the sensor device. It is demonstrated that by using ORCAS, a semantic reasoning framework can be developed to justify software reliability (or unreliability) while still leveraging the strength of the existing methods.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗