Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Accident”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 631 records · Page 35

Updated Economic Model for Estimation of GDP Losses in the MACCS Offsite Consequence Analysis Code RDEIM Model Report for MACCS v4.2

This report updates the Regional Disruption Economic Impact Model (RDEIM) GDP-based model described in Bixler et al. (2020) used in the MACCS accident consequence analysis code. MACCS is the U.S. Nuclear Regulatory Commission (NRC) used to perform probabilistic health and economic consequence assessments for atmospheric releases of radionuclides. It is also used by international organizations, both reactor owners and regulators. It is intended and most commonly used for hypothetical accidents that could potentially occur in the future rather than to evaluate past accidents or to provide emergency response during an ongoing accident. It is designed to support probabilistic risk and consequence analyses and is used by the NRC, U.S. nuclear licensees, the Department of Energy, and international vendors, licensees, and regulators. The update of the RDEIM model in version 4.2 expresses the national recovery calculation explicitly, rather than implicitly as in the previous version. The calculation of the total national GDP losses remains unchanged. However, anticipated gains from recovery are now allocated across all the GDP loss types – direct, indirect, and induced – whereas in version 4.1, all recovery gains were accounted for in the indirect loss type. To achieve this, we’ve introduced new methodology to streamline and simplify the calculation of all types of losses and recovery. In addition, RDEIM includes other kinds of losses, including tangible wealth. This includes loss of tangible assets (e.g., depreciation) and accident expenditures (e.g., decontamination). This document describes the updated RDEIM economic model and provides examples of loss and recovery calculation, results analysis, and presentation. Changes to the tangible cost calculation and accident expenditures are described in section 2.2. The updates to the RDEIM input-output (I-O) model are not expected to affect the final benchmark results Bixler et al. (2020), as the RDEIM calculation for the total national GDP losses remains unchanged. The reader is referred to the MACCS revision history for other cost modelling changes since version 4.0 that may affect the benchmark. RDEIM has its roots in a code developed by Sandia National Laboratories for the Department of Homeland Security to estimate short-term losses from natural and manmade accidents, called the Regional Economic Accounting analysis tool (REAcct). This model was adapted and modified for MACCS. It is based on I-O theory, which is widely used in economic modeling. It accounts for direct losses to a disrupted region affected by an accident, indirect losses to the national economy due to disruption of the supply chain, and induced losses from reduced spending by displaced workers. RDEIM differs from REAcct in in its treatment and estimation of indirect loss multipliers, elimination of double-counting associated with inter-industry trade in the affected area, and that it is intended to be used for extended periods that can occur from a major nuclear reactor accident, such as the one that occurred at the Fukushima Daiichi site in Japan. Most input-output models do not account for economic adaptation and recovery, and in this regard RDEIM differs from its parent, REAcct, because it allows for a user-definable national recovery period. Implementation of a recovery period was one of several recommendations made by an independent peer review panel to ensure that RDEIM is state-of-practice. For this and several other reasons, RDEIM differs from REAcct.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Examination of Icing Induced Loss of Control and Its Mitigations

Factors external to the aircraft are often a significant causal factor in loss of control (LOC) accidents. In today s aviation world, very few accidents stem from a single cause and typically have a number of causal factors that culminate in a LOC accident. Very often the "trigger" that initiates an accident sequence is an external environment factor. In a recent NASA statistical analysis of LOC accidents, aircraft icing was shown to be the most common external environmental LOC causal factor for scheduled operations. When investigating LOC accident or incidents aircraft icing causal factors can be categorized into groups of 1) in-flight encounter with super-cooled liquid water clouds, 2) take-off with ice contamination, or 3) in-flight encounter with high concentrations of ice crystals. As with other flight hazards, icing induced LOC accidents can be prevented through avoidance, detection, and recovery mitigations. For icing hazards, avoidance can take the form of avoiding flight into icing conditions or avoiding the hazard of icing by making the aircraft tolerant to icing conditions. Icing detection mitigations can take the form of detecting icing conditions or detecting early performance degradation caused by icing. Recovery from icing induced LOC requires flight crew or automated systems capable of accounting for reduced aircraft performance and degraded control authority during the recovery maneuvers. In this report we review the icing induced LOC accident mitigations defined in a recent LOC study and for each mitigation describe a research topic required to enable or strengthen the mitigation. Many of these research topics are already included in ongoing or planned NASA icing research activities or are being addressed by members of the icing research community. These research activities are described and the status of the ongoing or planned research to address the technology needs is discussed

Reehorst, Andrew L.↗

A Historical Analysis of Crane Mishaps at Kennedy Space Center

Cranes and hoists are widely used in many areas. Crane accidents and handling mishaps are responsible for injuries, costly equipment damage, and program delays. Most crane accidents are caused by preventable factors. Understanding these factors is critical when designing cranes and preparing lift plans. Analysis of previous accidents provides insight into current recommendations for crane safety. Cranes and hoists are used throughout Kennedy Space Center to lift everything from machine components to critical flight hardware. Unless they are trained crane operators, most NASA employees and contractors do not need to undergo specialized crane training and may not understand the safety issues surrounding the use of cranes and hoists. A single accident with a crane or hoist can injure or kill people, cause severe equipment damage, and delay or terminate a program. Handling mishaps can also have a significant impact on the program. Simple mistakes like bouncing or jarring a load, or moving the crane down when it should go up, can damage fragile flight hardware and cause major delays in processing. Hazardous commodities (high pressure gas, hypergolic propellants, and solid rocket motors) can cause life safety concerns for the workers performing the lifting operations. Most crane accidents are preventable with the correct training and understanding of potential hazards. Designing the crane with human factors taken into account can prevent many accidents. Engineers are also responsible for preparing lift plans where understanding the safety issues can prevent or mitigate potential accidents. Cranes are widely used across many areas of KSC. Failure of these cranes often leads to injury, high damage costs, and significant delays in program objectives. Following a basic set of principles and procedures during design, fabrication, testing, regular use, and maintenance can significantly minimize many of these failures. As the accident analysis shows, load drops are often caused or influenced by human factors. Therefore, proper training and understanding of crane safety throughout the workforce is critical. It is important that the engineers designing the cranes, lift planners preparing the lift plans, operators performing the lifts, and training officers conducting the operator training all understand the problems that can happen with cranes and how to ensure the safety of the workforce and equipment being lifted.

Materials Handling↗

Incorporating FLEX Strategies in Multi-Unit Probabilistic Risk Assessment

The catastrophic Fukushima nuclear accident reminded nuclear community about the possibilities of extreme accident scenarios, including those involving multiple reactor units on the same site. As the responses to the Fukushima accident, the nuclear power industry developed and implemented a series of strategies, including the Diverse and Flexible Coping Strategies (FLEX), to enhance the coping capacities of nuclear power plants (NPPs) under extreme accidents. This study intends to examine the impact of FLEX strategies on the risk from all the reactor units on the same NPP site, including risks from accidents involving a single unit and from accidents involving multiple units. The fundamental, methodological element of this study is Multi-Unit Probabilistic Risk Assessment (MUPRA), which requires a shift in Probabilistic Risk Assessment (PRA) from a “one-reactor-at-a-time” mindset to a “considering all reactors sharing a site as a unity” one. An integrated modeling approach for multi-unit event sequence development will be leveraged to develop MUPRA model and address the intra-unit and inter-unit dependencies. Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE), a PRA software developed and maintained by Idaho National Laboratory (INL) for the U.S. Nuclear Regulatory Commission (NRC), will serve as the platform for MUPRA modeling. This study selects Loss Of Offsite Power (LOOP) as a representative initiating event, which may occur on a generic two-unit NPP site and impacts both reactor units on the site. First, an MUPRA model, including multi-unit event trees, will be developed to obtain single-unit and multi-unit accident scenarios. Next, different FLEX strategies will be assumed, including FLEX equipment for a unit cannot be used for another unit, FLEX equipment for multiple units can be used in a cross-connected manner, etc. Lastly, the effectiveness of each postulated FLEX strategy will be evaluated by incorporating the corresponding FLEX equipment and deployment logic in the MUPRA model.

99 GENERAL AND MISCELLANEOUS↗

Economic Model for Estimation of GDP Losses in the MACCS Offsite Consequence Analysis Code

The MACCS (MELCOR Accident Consequence Code System) code is the U.S. Nuclear Regulatory Commission (NRC) tool used to perform probabilistic health and economic consequence assessments for atmospheric releases of radionuclides. It is also used by international organizations, both reactor owners and regulators. It is intended and most commonly used for hypothetical accidents that could potentially occur in the future rather than to evaluate past accidents or to provide emergency response during an ongoing accident. It is designed to support probabilistic risk and consequence analyses and is used by the NRC, U.S. nuclear licensees, the Department of Energy, and international vendors, licensees, and regulators. This report describes the modeling framework, implementation, verification, and benchmarking of a GDP-based model for economic losses that has recently been developed as an alternative to the original cost-based economic loss model in MACCS. The GDP-based model has its roots in a code developed by Sandia National Laboratories for the Department of Homeland Security to estimate short-term losses from natural and manmade accidents, called the Regional Economic Accounting analysis tool (REAcct). This model was adapted and modified for MACCS and is now called the Regional Disruption Economic Impact Model (RDEIM). It is based on input-output theory, which is widely used in economic modeling. It accounts for direct losses to a disrupted region affected by an accident, indirect losses to the national economy due to disruption of the supply chain, and induced losses from reduced spending by displaced workers. RDEIM differs from REAcct in its treatment and estimation of indirect loss multipliers, elimination of double counting associated with inter-industry trade in the affected area, and that it is designed to be used to estimate impacts for extended periods that can occur from a major nuclear reactor accident, such as the one that occurred at the Fukushima Daiichi site in Japan. Most input-output models do not account for economic adaptation and recovery, and in this regard RDEIM differs from its parent, REAcct, because it allows for a user-definable national recovery period. Implementation of a recovery period was one of several recommendations made by an independent peer review panel to ensure that RDEIM is state-of-practice. For this and several other reasons, RDEIM differs from REAcct. Both the original and the RDEIM economic loss models account for costs from evacuation and relocation, decontamination, depreciation, and condemnation. Where the original model accounts for an expected rate of return, based on the value of property, that is lost during interdiction, the RDEIM model instead accounts for losses of GDP based on the industrial sectors located within a county. The original model includes costs for disposal of crops and milk that the RDEIM model currently does not, but these costs tend to contribute insignificantly to the overall losses. This document discusses three verification exercises to demonstrate that the RDEIM model is implemented correctly in MACCS. It also describes a benchmark study at five nuclear power plants chosen to represent the spectrum of U.S. commercial sites. The benchmarks provide perspective on the expected differences between the RDEIM and the original cost-based economic loss models. The RDEIM model is shown to consistently predict larger losses than the original model, probably in part because it accounts for national losses by including indirect and induced losses; whereas, the original model only accounts for regional losses. Nonetheless, the RDEIM model predicts losses that are remarkably consistent with the original cost-based model, differing by 16% at most for the five sites combined with three source terms considered in this benchmark.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Method for Real-Time Salt Aerosol Concentration and Size Measurements for Molten Salt Reactor Safety Assessments

Licensing a new nuclear reactor involves evaluating credible accident scenarios by developing models that simulate accident progression to predict possible outcomes and their impact on safety. The formation of radionuclide-bearing aerosols in the respirable size range can significantly affect dose consequence and threaten human health and is therefore a focus of nuclear reactor safety assessments. Recent reviews of the literature identified a lack of existing experimental data describing the mechanisms of formation and properties (size, concentration, and composition) of radionuclide-bearing aerosols that may be produced from molten salt reactor (MSR) facilities during postulated accident scenarios. Experiments on aerosol formation from molten salt systems are a high priority need that will support MSR licensing by indicating the radiological consequences of aerosol formation and providing the data required for model development and validation. The evolving conditions that occur during a MSR accident, such as a spill of molten fuel salt, may affect aerosol formation mechanisms and aerosol properties over time. There is a need to conduct experiments that simulate credible MSR accidents in a laboratory to generate aerosols with realistic characteristics and behaviors and a need to measure these aerosols in real time under accident-relevant conditions. This report describes the development of a method that can be used to quantify the size and concentration of salt aerosol particles that form from molten salt systems in real time. This method will be employed in future integral effects tests that are conducted at an engineering scale to simulate realistic MSR accidents and in future separate effects tests that will provide mechanistic insight into aerosol formation and properties to support process model development.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Improving Dose Modeling With Dynamic Modeling Tools [Slides]

Utilities aiming for higher fuel enrichment for power uprates or extended operation times before refueling must conduct a new dose analysis. Current conservative dose estimation standards may cause utilities to exceed regulatory limits for proposed increased fuel enrichment. A more accurate modeling of doses from reactor accidents can lower these conservative assumptions. Prescott et al. (2022) demonstrated that the Event Modeling Risk Assessment using Linked Diagrams (EMRALD) software tool, developed at Idaho National Laboratory (INL), can be coupled with the Modular Accident Analysis Program (MAAP5) for dynamic accident analysis in reactor plants. EMRALD forms models of potential accident scenarios, while MAAP5 simulates the accident progression and dose consequences. By integrating these software tools with utility-specific data, a more precise estimation of dose consequences from plant accidents can be achieved. Preliminary findings indicate that EMRALD provides accurate mean core damage frequencies for generalized accident scenarios. Future work includes expanding the model to account for plant-specific data and mitigation factors.

97 - MATHEMATICS AND COMPUTING↗

Current Safety Nets Within the U.S. National Airspace System

There are over 70,000 flights managed per day in the National Airspace System, with approximately 7,000 aircraft in the air over the United States at any given time. Operators of each of these flights would prefer to fly a user-defined “4D” trajectory (4DT), which includes arrival and departure times; preferred gates and runways at the airport; efficient, wind-optimal routes for departure, cruise and arrival phase of flight; and fuel efficient altitude profiles. To demonstrate the magnitude of this achievement a single flight from Los Angeles to Baltimore, accesses over 35 shared or “constrained” resources that are managed by roughly 30 air traffic controllers (at towers, approach control and en route sectors); along with traffic managers at 12 facilities, using over 22 different, independent automation system (including TBFM, ERAM, STARS, ASDE-X, FSM, TSD, GPWS, TCAS, etc.). In addition, dispatchers, ramp controllers and others utilize even more systems to manage each flight’s access to operator-managed resources. Flying an ideal 4DT requires successful coordination of all flight constraints among all flights, facilities, operators, pilots and controllers. Additionally, when conditions in the NAS change, the trajectories of one or more aircraft may need to be revised to avoid loss of flight efficiency, predictability, separation or system throughput. The Aviation Safety Network has released the 2016 airliner accident statistics showing a very low total of 19 fatal airliner accidents, resulting in 325 fatalities1. Despite several high profile accidents, the year 2016 turned out to be a very safe year for commercial aviation, Aviation Safety Network data show. Over the year 2016 the Aviation Safety Network recorded a total of 19 fatal airliner accidents [1], resulting in 325 fatalities. This makes 2016 the second safest year ever, both by number of fatal accidents as well as in terms of fatalities. In 2015 ASN recorded 16 accidents while in 2013 a total of 265 lives were lost. How can we keep it that way and not upset the apple cart by premature insertion of innovative technologies, functions, and procedures? In aviation, safety nets function as the last system defense against incidents and accidents. Current ground-based and airborne safety nets are well established and development to make them more efficient and reliable continues. Additionally, future air traffic control safety nets may emerge from new operational concepts.

Smith, Brian E.↗

Domestic and International Consensus Standards for Nuclear Criticality Safety - Overview & Status

The domestic and international consensus standards for nuclear criticality safety (NCS) were developed based on the lessons-learned from process criticality accidents. These consensus standards were developed to reduce the rate of process criticality accidents in facilities that process, store, handle, or transport fissionable materials by hand. After a significant increase in criticality accidents through the mid-1960s, the rate of criticality accidents decreased as a result of these standards, and the criticality accident rate is extremely low from an industrial safety perspective. The last known criticality accident inside the United States was in 1978 (nearly 47 years ago) at the Idaho Chemical Processing Plant, and outside the United States, an accident occurred at Tokai-mura, Japan, in 1999 (almost 26 years ago). The domestic consensus standards for NCS include the American National Standards (ANS) that are prepared and published by the American Nuclear Society and approved by the American National Standards Institute (ANSI). The ANS Standards Board, the NCS Consensus Committee, and the ANS-8 Subcommittee oversee the development and maintenance of these standards. There are currently 18 standards in the ANS-8 series. Nine ANS-8 standards are either in revision mode or planned for revision. A new standard for the use of nondestructive assay measurements (ANSI/ANS-8.28-2024) for NCS was approved in March of 2024. The international consensus standards for NCS calculations, procedures, and practices are maintained and developed within the International Organization for Standardization, Technical Committee 85 “Nuclear Energy,” Subcommittee 5, “Nuclear Fuel Technology,” and Working Group 8, “Nuclear Criticality Safety.” Eleven standards are currently available, four standards are proposed for revision, and four standards are at various stages of development. This paper provides the NCS community with a high-level overview and status report of domestic and international NCS consensus standards to stimulate interest and to support their continued development.

Bowen, Douglas G [ORNL] (ORCID:0000000212460026)↗

Nuclear Safety [Vol. 36, No. 2, July-December 1995]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. THE CHORNOBYL ACCIDENT: 195 The Chornobyl Accident Revisited, Part III: Chernobyl Source Term Release Dynamics and Reconstruction of Events During the Active Phase, A. R. Sich; GENERAL SAFETY CONSIDERATIONS: 218 Second ANS Workshop on the Safety of Soviet-Designed Nuclear Power Plants, R. A. Bari; 234 Elements of a Nuclear Criticality Safety Program, C. M. Hopper; 243 Rickover, Excellence, and Criticality Safety Programs, R. E. Wilson; ACCIDENT ANALYSIS: 249 Transient Analysis of the PIUS Advanced Reactor Design with the TRAC-PF1/MOD2 Code, B. E. Boyack, J. L Steiner, S. C. Harmony, H. J. Stumpf, and J. F. Lime; 278 The Hierarchy-By-Interval Approach to Identifying Important Models that Need Improvement in Severe-Accident Simulation Codes, T. J. Heames, M. Khatib-Rahbar, J. E. Kelly, R. P. Jenks-Johnson, and Y.-S. Chen; 290 RELAP5/MOD3 Code Coupling Model, R. P. Martin; 299 Missiles Caused by Severe Pressurized-Water Reactor Accidents, R. Krieg; DESIGN FEATURES: 310 Validation of COMMIX with Westinghouse AP-600 PCCS Test Data, J. G. Sun, T. H. Chien, J. Ding, and W T. Sha; ENVIRONMENTAL EFFECTS: 321 Spent Nuclear Fuel Characterization for a Bounding Reference Assembly for the Receiving Basin for Off-Site Fuel, S. D. Kahook, R. L. Garrett, L. R. Canas, and M J. Beckum; OPERATING EXPERIENCES: 332 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 335 Reactor Coolant System Blowdown at Wolf Creek on September 17, 1994, J. V. Kauffman and S. L. Israel; RECENT DEVELOPMENTS: 344 Reports, Standards, and Safety Guides, D. S. Oueener; 349 Proposed Rule Changes as of June 30, 1995; ANNOUNCEMENTS: 320 Symposium on Acceptability of Risk From Radiation—Application to Manned Space Flight; 320 24th DOE/NRC Nuclear Air Cleaning and Treatment Conference; 361 Radiation Biology and Radiation Protection— Modern Developments and Tendencies in Radiation Biology; 362 1997 IEEE Sixth Conference on Human Factors and Power Plants; 354 The Authors; 360 Reviewers of Nuclear Safety, Vol. 36.

05 NUCLEAR FUELS↗

Nuclear Safety [Vol. 29, No. 1, January-March 1988]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. THE CHERNOBYL ACCIDENT: 1 Core History and Nuclide Inventory of the Chernobyl Core at the Time of Accident by Gerald Kirchner and Cornelius C. Noack; GENERAL SAFETY CONSIDERATIONS: 6 Nonprescriptive Nuclear Safety Regulation: The Example of Loss of Offsite Power by M. W. Golay, V. P. Manno, and C. Vlahoplus, Jr., 20 Nuclear Power Safety Goals in Light of the Chernobyl Accident by C. Whipple and C. Starr; ACCIDENT ANALYSIS: 29 Containment Loads from Severe Accidents—U.S. Program by W. Kerr and M. K. Dey; PLANT SAFETY FEATURES: 36 Safety Characteristics of Modern High-Temperature Reactors: Focus on German Designs by W. Kröger, H. Nickel, and R. Schulten; ENVIRONMENTAL EFFECTS: 49 Radiation Hormesis and Nuclear Safety by C. C. Congdon; OPERATING EXPERIENCES: 58 Evaluation of Nonradiological Water Chemistry at Power Reactors by Harvey Zibulsky, James J. Kottan, Walter J. Pasciak, Mary Ann Castrogivanni, and Sujit Banerjee, 64 Reactor Shutdown Experience Compiled by J. W. Cletcher, 67 Operating U.S. Power Reactors Compiled by E. G. Silver; RECENT DEVELOPMENTS: 85 General Administrative Activities Compiled by E. G. Silver, 94 Reports, Standards, and Safety Guides by D. S. Queener, 100 Status of Power-Reactor Projects Undergoing Licensing Review Compiled by E. G. Silver, 103 Proposed Rule Changes as of Sept. 30, 1987; ANNOUNCEMENTS: 5 Northwestern University Short Course on Radiation Safety, 28 International Approach to Nuclear Safety (After Three-Mile Island and Chernobyl), 57 RPI Short Course on Modern Developments in Boiling Heat Transfer and Two-Phase Flow, 107 20th DOE/NRC Nuclear Air Cleaning Conference, 110 Third International Topical Meeting on Nuclear Power Plant Thermal Hydraulics and Operations, 108 The Authors, 111 Indexes to Nuclear Safety, Volume 28.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Oxidation Resistance in 1200°C Steam of a FeCrAl Alloy Fabricated by Three Metallurgical Processes

Abstract FeCrAl alloys are a leading candidate material for accident tolerant fuel cladding due to their good performance in both normal light-water reactor operating conditions as well as their resilience to high-temperature accident scenarios. For commercial-scale production, new fabrication techniques need to be investigated. In this study, the effects of fabrication methods on the high-temperature steam oxidation performance of C26M (Fe12Cr6Al2Mo in wt.%) were investigated. Three variants of C26M were manufactured: wrought (cast and forged) (WC26M), powder metallurgy hot isostatic pressing (PMC26M), and laser powder bed fusion additive manufacturing (AMC26M). All three variants were exposed to steam at 1200°C for 2 h. Results showed no significant variation in mass change between the variants after steam exposure. All three variants effectively formed stable protective alumina films with ~0.6–1.3 µ m thickness. This study suggests FeCrAl alloys have excellent resilience to high-temperature steam in nuclear reactor accident scenarios regardless of the fabrication method.

Materials Science↗

Conduct of Operations and Nuclear Criticality Safety Standards

Since the beginning of the nuclear age in 1943, there have been 22 criticality accidents in process facilities worldwide in which fissionable materials were processed by hand for various purposes. Of these 22 process criticality accidents, 16 involved faulty or flawed conduct of operations. Most of these process accidents (17 of 22) occurred before 1970, mostly due to the implementation of formal conduct of operations—such as the use of operating procedures and training—and the use of consensus standards for nuclear criticality safety (NCS). Obviously, the nuclear facilities applied lessons learned from their accident history, and the rate of criticality accidents was significantly reduced as a result. Over the years, it has been emphasized in NCS training courses and other venues in the United States that the consensus standards, such as ASA N6.1-1964, were the key contributors to this reduction in accidents. The formality of operations required to implement and apply the standards at a facility is also a crucial prerequisite that must be sufficiently robust to ensure NCS. This prerequisite is crucial to success fully implement the NCS consensus and other safety standards at a site.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

RELAP-7 Application and Enhancement for FLEX Strategies and ATF Behavior under Extended Loss of AC Power Conditions

This report summarizes the results of a three-year research project sponsored by the U.S. Department of Energy (DOE) Nuclear Energy University Program (NEUP) to enhance and apply the RELAP-7 code by adding and improving several important components (e.g., a mechanistic Reactor Core Isolation Cooling (RCIC) system model) for thermal hydraulic studies of LWRs under ELAP conditions and evaluating the time available for transition to portable FLEX equipment. The project team included University of Massachusetts–Lowell, The Ohio State University, Texas A&M University, Idaho National Laboratory and Oak Ridge National Laboratory. In the Fukushima accident, it was found that the RCIC system played a crucial role in delaying core meltdown by almost three days in Fukushima Daiichi Unit 2, because of self-regulated operation of the steam driven RCIC turbine-pump injection system. Steam flow in the convergent-divergent nozzles of the RCIC Terry turbine is two-phase non-equilibrium transonic flow with homogenous nucleation condensation. To more accurately predict the dynamic process and behavior of the transonic compressible steam flow, a one-dimensional transient two-phase analytical model is presented. A simplified four-fluid model was employed in the present work with the consideration of four separate fluid fields: vapor, liquid film, entrained droplets and condensed droplets. The mass, momentum and energy interactions between the fluids were considered and modeled. An extended seven-equation non-equilibrium critical flow model was developed to obtain the critical pressure and velocities of each phase at the nozzle throat. To predict the wetness in the divergent section, a mechanistic nucleation condensation model was integrated in the nozzle analysis model, considering the generation and consequent growth of droplets. The governing differential equations on a staggered grid were discretized using the second-order Lax-Wendroff scheme with a flux limiter, and the Semi-Implicit Method for Pressure-Linked Equation (SIMPLE) algorithm was employed to solve the discrete linear system. To demonstrate the predictability and reliability of the physical models and the numerical method proposed in the present work, three representative nozzles were modeled and simulated. The results show good agreement with the available experimental data, even for condensation shock. Then, the 1D nozzle model was employed to obtain nozzle flow tables of the Terry turbine nozzle for different working pressures which can cover the operation pressure range of the RCIC system. A mechanistic RCIC turbine-pump system model was developed and implemented in the system code TRACE to simulate dynamic responses of the RCIC system under Beyond Design Basis Accident (BDBA) conditions. The turbine-pump governing equations are based on the control volume approach of the angular momentum balance. The physics based mechanistic RCIC model was developed using the TRACE control system components (i.e., signal variables, control blocks, and tables), and incorporated into a TRACE boiling water reactor (BWR) model. The TRACE model in this report has a detailed nodalization of the reactor pressure vessel (RPV), and all of the major flow paths and system components, including the safety relief valves (SRVs) and the containment suppression pool and drywell. Based on the nozzle flow tables generated from the 1D nozzle model developed, the turbine drive torque can be calculated from table lookup. Since the detailed specifications of the RCIC pump are unavailable, the homologous curves for a Bingham pump were used in the current pump component. A station black-out (SBO) accident test problem was selected to demonstrate the TRACE RCIC model. The short-term SBO simulations were performed for two cladding materials: Zircaloy and FeCrAl, to demonstrate the effect of the accident tolerant fuel cladding on fuel heat-up under BDBA accident conditions. The wetwell plays a vital safety role in SBO and other BWR accident scenarios in that it can reduce containment pressure and supply additional core make-up water. The suppression pool temperature distribution has a very large impact on both RPV and containment pressure. Thus, another novel contribution of the project comes mainly from an improved, systems-level wetwell model which can capture buoyancy-induced thermal stratification effects due to steam injection and condensation. A two-zone stratified wetwell model has been implemented in RELAP-7 and some results from that model are presented. This wetwell model is capable of simulating thermal stratification due to a low steam mass injection rate. With a low mass flow rate, the model assumes that all the steam condenses within the pipe and the resulting plume can be approximated with a purely buoyant, heat-source driven model. The wetwell model developed with these assumptions is adequate to simulate slow transients such as extended SBO transients.

42 ENGINEERING↗

Default Radioactive and Hazardous Waste Management (RHWM) Dose Conversion Factors (DCFs) and Weighting Factors and plutonium-239 equivalent Curie (PE-Ci) methodology for acceptance into the Waste Storage Facilities

DOE-STD-5506-2007 (Ref. 1) is the standard that provides the methodology for preparing hazard analysis and accident analysis for transuranic (TRU) waste facilities. The Waste Storage Facilities hazard and accident analysis for the DSA is developed in accordance with DOE-STD- 5506-2007. Two related issues need to be addressed when implementing DOE-STD-5506-2007 regarding the calculation of consequences from TRU waste releases in accident analysis: Consequences determined in accident analysis must be modeled using inhalation Dose Conversion Factors (DCFs) that are consistent with those from the International Commission on Radiological Protection Publication 72 (ICRP-72, Ref. 2).; The use of a statistical Material at Risk (MAR) representing the distribution of radiological loading of TRU waste containers based on the use of a plutonium-239 equivalent Curie (PE-Ci) methodology. The PE-Ci methodology simplifies accident analysis by allowing one to model releases based on the Curie value of one standard nuclide (e.g., Pu-239) instead of needing to model releases for every potential nuclide of interest. This is accomplished by normalizing the Curie value of all nuclides to a single Curie value of a standard nuclide by using a Weighting Factor that is a ratio of the DCFs associated with the nuclides and that of the standard nuclide. By using the ICRP-72 DCFs to calculate PE-Ci values used in the statistical MAR, the accident analysis that uses that statistical MAR will be consistent with the consequence methodology identified in DOE-STD- 5506-2007.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

The practical application of mishap data in Army aircraft system safety programs

The means are discussed by which the the United States Army Board for Aviation Accident Research (USABAAR) now utilizes the vast store of historical accident data in the application of the system safety concept for developmental aircraft. USABAAR serves as the central agency for the Army Accident Prevention Program which includes the receipt, processing, and analysis of all data and information related to Army aircraft accident experience. It is pointed out that methods which served the cause of accident prevention so well in the past are no longer adequate and that traditional parameters used to measure mishap experience have become obsolete. USABAAR has developed, and recently put into use, completely revised accident reporting forms which greatly expand the scope and detail of information provided as a result of investigation. This and other factors which have resulted in an improved data system are discussed in detail.

James T. Darrah, Jr↗

Archetypes for Organisational Safety

We propose a framework using system dynamics to model the dynamic behavior of organizations in accident analysis. Most current accident analysis techniques are event-based and do not adequately capture the dynamic complexity and non-linear interactions that characterize accidents in complex systems. In this paper we propose a set of system safety archetypes that model common safety culture flaws in organizations, i.e., the dynamic behaviour of organizations that often leads to accidents. As accident analysis and investigation tools, the archetypes can be used to develop dynamic models that describe the systemic and organizational factors contributing to the accident. The archetypes help clarify why safety-related decisions do not always result in the desired behavior, and how independent decisions in different parts of the organization can combine to impact safety.

Marais, Karen↗

A Formal Methods Approach to the Analysis of Mode Confusion

The goal of the new NASA Aviation Safety Program (AvSP) is to reduce the civil aviation fatal accident rate by 80% in ten years and 90% in twenty years. This program is being driven by the accident data with a focus on the most recent history. Pilot error is the most commonly cited cause for fatal accidents (up to 70%) and obviously must be given major consideration in this program. While the greatest source of pilot error is the loss of situation awareness , mode confusion is increasingly becoming a major contributor as well. The January 30, 1995 issue of Aviation Week lists 184 incidents and accidents involving mode awareness including the Bangalore A320 crash 2/14/90, the Strasbourg A320 crash 1/20/92, the Mulhouse-Habsheim A320 crash 6/26/88, and the Toulouse A330 crash 6/30/94. These incidents and accidents reveal that pilots sometimes become confused about what the cockpit automation is doing. Consequently, human factors research is an obvious investment area. However, even a cursory look at the accident data reveals that the mode confusion problem is much deeper than just training deficiencies and a lack of human-oriented design. This is readily acknowledged by human factors experts. It seems that further progress in human factors must come through a deeper scrutiny of the internals of the automation. It is in this arena that formal methods can contribute. Formal methods refers to the use of techniques from logic and discrete mathematics in the specification, design, and verification of computer systems, both hardware and software. The fundamental goal of formal methods is to capture requirements, designs and implementations in a mathematically based model that can be analyzed in a rigorous manner. Research in formal methods is aimed at automating this analysis as much as possible. By capturing the internal behavior of a flight deck in a rigorous and detailed formal model, the dark corners of a design can be analyzed. This paper will explore how formal models and analyses can be used to help eliminate mode confusion from flight deck designs and at the same time increase our confidence in the safety of the implementation. The paper is based upon interim results from a new project involving NASA Langley and Rockwell Collins in applying formal methods to a realistic business jet Flight Guidance System (FGS).

Butler, Ricky W.↗