Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS1993

WTEC monograph on instrumentation, control and safety systems of Canadian nuclear facilities

This report updates a 1989-90 survey of advanced instrumentation and controls (I&C) technologies and associated human factors issues in the U.S. and Canadian nuclear industries carried out by a team from Oak Ridge National Laboratory (Carter and Uhrig 1990). The authors found that the most advanced I&C systems are in the Canadian CANDU plants, where the newest plant (Darlington) has digital systems in almost 100 percent of its control systems and in over 70 percent of its plant protection system. Increased emphasis on human factors and cognitive science in modern control rooms has resulted in a reduced workload for the operators and the elimination of many human errors. Automation implemented through digital instrumentation and control is effectively changing the role of the operator to that of a systems manager. The hypothesis that properly introducing digital systems increases safety is supported by the Canadian experience. The performance of these digital systems has been achieved using appropriate quality assurance programs for both hardware and software development. Recent regulatory authority review of the development of safety-critical software has resulted in the creation of isolated software modules with well defined interfaces and more formal structure in the software generation. The ability of digital systems to detect impending failures and initiate a fail-safe action is a significant safety issue that should be of special interest to nuclear utilities and regulatory authorities around the world.

Uhrig, Robert E.↗
DOE OSTI2021

Cost- and Risk-Based Seismic Design Optimization of Nuclear Power Plant Safety Systems

Seismic analysis, design, and qualification of systems, structures, and components (SSCs) is a significant contributor to the capital cost of a nuclear power plant. To reduce capital costs of advanced nuclear power plants and make commercial nuclear energy more competitive, innovations are needed in their structural design and construction, and not just in the reactor core and associated systems. Seismic isolation has been identified as an important cost-cutting technology that enables standardization of equipment across various sites. This paper develops and demonstrates a cost- and risk-based seismic design optimization of a representative safety system in a nuclear power plant with the dual goals of minimizing overnight capital cost and meeting safety goals. The design optimization can also include component seismic isolation, in which case, the optimized design includes a set of equipment that needs to be seismically isolated to minimize capital cost. The open-source codes MASTODON and Dakota are used for seismic probabilistic risk assessment and design optimization, respectively. A generic nuclear facility with a safety system comprising SSCs that are common to nuclear power plants is considered for the demonstration of the design optimization and is assumed to be located at the Idaho National Laboratory site. Generic costs and seismic design cost functions are assumed for the SSCs of the safety system. The sum of the costs of the SSCs is minimized in the optimization process, while the risk of failure of the safety system is provided as a constraint. Furthermore, results show that the optimization process reduces capital costs significantly while automatically prioritizing the safety of SSCs that contribute most to the risk of the safety system.

42 ENGINEERING↗
NASA NTRS1987

ESSAA: Embedded system safety analysis assistant

The Embedded System Safety Analysis Assistant (ESSAA) is a knowledge-based tool that can assist in identifying disaster scenarios. Imbedded software issues hazardous control commands to the surrounding hardware. ESSAA is intended to work from outputs to inputs, as a complement to simulation and verification methods. Rather than treating the software in isolation, it examines the context in which the software is to be deployed. Given a specified disasterous outcome, ESSAA works from a qualitative, abstract model of the complete system to infer sets of environmental conditions and/or failures that could cause a disasterous outcome. The scenarios can then be examined in depth for plausibility using existing techniques.

Wallace, Peter↗
DOE OSTI2023

Passive Safety System Reliability Analysis: Lessons Learned and Open Items

Passive safety systems have multiple benefits, largely stemming from their high functional reliability due to their simplicity and lack of dependencies. However, accurately assessing the reliability of passive systems can be challenging due in large part to the possibility of functional failures. Argonne National Laboratory (Argonne) has been involved in several recent efforts concerning the reliability assessment of passive safety systems for advanced, non-light water reactors (non-LWRs). These efforts have focused on the development and application of mechanistic methods for the evaluation of passive system reliability, which rely on system modelling and uncertainty analyses to derive reliability values for use in probabilistic safety assessments (PSAs). Further information on these efforts is provided in ref [1]. The current paper reviews key lessons learned through these projects, along with outstanding open items regarding the reliability assessment of passive systems.

Grabaskas, David↗
DOE OSTI2020

The upgrade and re-validation of the Compact Muon Solenoid Electromagnetic Calorimeter Control and Safety Systems during the Second Long Shutdown of the Large Hadron Collider at CERN

The Electromagnetic Calorimeter (ECAL) is one of the subdetectors of the Compact Muon Solenoid (CMS), a general-purpose particle detector at the CERN Large Hadron Collider (LHC). The CMS ECAL Detector Control System (DCS) and the CMS ECAL Safety System (ESS) have supported the detector operations and ensured the detector’s integrity since the CMS commissioning phase, more than 10 years ago. Over this long period, several changes to both systems were necessary to correct issues, extend functionality and keep them in-line with current hardware technologies and the evolution of software platforms. Due to the constraints imposed on significant changes to a running system, major hardware and software upgrades were therefore deferred to the second LHC Long Shutdown (LS2). This paper presents the architectures of the CMS ECAL control and safety systems, discusses the ongoing and planned upgrades, details implementation processes and validation methods and highlights the expectations for the post-LS2 systems.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
NASA NTRS2004

Improving Performance of the System Safety Function at Marshall Space Flight Center

The Columbia Accident Investigation Board (CAIB) determined that organizational and management issues were significant contributors to the loss of Space Shuttle Columbia. In addition, the CAIB observed similarities between the organizational and management climate that preceded the Challenger accident and the climate that preceded the Columbia accident. To prevent recurrence of adverse organizational and management climates, effective implementation of the system safety function is suggested. Attributes of an effective system safety program are presented. The Marshall Space Flight Center (MSFC) system safety program is analyzed using the attributes. Conclusions and recommendations for improving the MSFC system safety program are offered in this case study.

Kiessling, Ed↗
NASA NTRS1971

System safety education focused on industrial engineering

An educational program, designed to train students with the specific skills needed to become safety specialists, is described. The discussion concentrates on application, selection, and utilization of various system safety analytical approaches. Emphasis is also placed on the management of a system safety program, its relationship with other disciplines, and new developments and applications of system safety techniques.

W. L. Johnston↗
NASA NTRS1979

Implementation Procedure for STS Payloads, System Safety Requirements

Guidelines and instructions for the implementation of the SP&R system safety requirements applicable to STS payloads are provided. The initial contact meeting with the payload organization and the subsequent safety reviews necessary to comply with the system safety requirements of the SP&R document are described. Waiver instructions are included for the cases in which a safety requirement cannot be met.

Source record↗
NASA NTRS1972

Manned space flight nuclear system safety. Volume 4: Space shuttle nuclear system transportation. Part 1: Space shuttle nuclear safety

An analysis of the nuclear safety aspects (design and operational considerations) in the transport of nuclear payloads to and from earth orbit by the space shuttle is presented. Three representative nuclear payloads used in the study were: (1) the zirconium hydride reactor Brayton power module, (2) the large isotope Brayton power system and (3) small isotopic heat sources which can be a part of an upper stage or part of a logistics module. Reference data on the space shuttle and nuclear payloads are presented in an appendix. Safety oriented design and operational requirements were identified to integrate the nuclear payloads in the shuttle mission. Contingency situations were discussed and operations and design features were recommended to minimize the nuclear hazards. The study indicates the safety, design and operational advantages in the use of a nuclear payload transfer module. The transfer module can provide many of the safety related support functions (blast and fragmentation protection, environmental control, payload ejection) minimizing the direct impact on the shuttle.

Source record↗
DOE OSTI2020

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗
NASA NTRS2003

System Safety Hazards Assessment in Conceptual Program Trade Studies

Providing a program in the concept development phase with a method of determining system safety benefits of potential concepts has always been a challenge. Lockheed Martin Space and Strategic Missiles has developed a methodology for developing a relative system safety ranking using the potential hazards of each concept. The resulting output supports program decisions with system safety as an evaluation criterion with supporting data for evaluation. This approach begins with a generic hazards list that has been tailored for the program being studied and augmented with an initial hazard analysis. Each proposed concept is assessed against the list of program hazards and ranked in three derived areas. The hazards can be weighted to show those that are of more concern to the program. Sensitivities can be also be determined to test the robustness of the conclusions

Eben, Dennis M.↗
NASA NTRS1972

System safety engineering analysis handbook

The basic requirements and guidelines for the preparation of System Safety Engineering Analysis are presented. The philosophy of System Safety and the various analytic methods available to the engineering profession are discussed. A text-book description of each of the methods is included.

Ijams, T. E.↗
NASA NTRS1974

A guide for performing system safety analysis

A general guide is presented for performing system safety analyses of hardware, software, operations and human elements of an aerospace program. The guide describes a progression of activities that can be effectively applied to identify hazards to personnel and equipment during all periods of system development. The general process of performing safety analyses is described; setting forth in a logical order the information and data requirements, the analytical steps, and the results. These analyses are the technical basis of a system safety program. Although the guidance established by this document cannot replace human experience and judgement, it does provide a methodical approach to the identification of hazards and evaluation of risks to the system.

Brush, J. M.↗
NASA NTRS2011

The Parable of the Boiled System Safety Professional: Drift to Failure

Recall from the Parable of the Boiled Frog, that tossing a frog into boiling water causes the frog to jump out and hop away while placing a frog in suitable temperature water and slowly bringing the water to a boil results in the frog boiling due to not being aware of the slowly increasing danger, theoretically, of course. System safety professionals must guard against allowing dangers to creep unnoticed into their projects and be ever alert to notice signs of impending problems. People have used various phrases related to the idea, most notably, latent conditions, James Reason in Managing the Risks of Organizational Accidents (1, pp 10-11), Drift to Failure, Sydney Dekker (2, pp 82-86) in Resilience Engineering: Chronicling the Emergence of Confused Consensus in Resilience Engineering: Concepts and Precepts, Hollnagel, Woods and Leveson, and normalization of deviance, Diane Vaughan in The Challenger Launch Decision: Risky Technology, Culture, and Deviance at NASA (3). Reason also said, If eternal vigilance is the price of liberty, then chronic unease is the price of safety (1, p 37). Our challenge as system safety professionals is to be aware of the emergence of signals that warn us of slowly eroding safety margins. This paper will discuss how system safety professionals might better perform in that regard.

Shivers, C. Herbert↗
NASA NTRS2008

Autonomous Flight Safety System - Phase III

The Autonomous Flight Safety System (AFSS) is a joint KSC and Wallops Flight Facility project that uses tracking and attitude data from onboard Global Positioning System (GPS) and inertial measurement unit (IMU) sensors and configurable rule-based algorithms to make flight termination decisions. AFSS objectives are to increase launch capabilities by permitting launches from locations without range safety infrastructure, reduce costs by eliminating some downrange tracking and communication assets, and reduce the reaction time for flight termination decisions.

Source record↗
NASA NTRS2005

System Safety in Early Manned Space Program: A Case Study of NASA and Project Mercury

This case study provides a review of National Aeronautics and Space Administration s (NASA's) involvement in system safety during research and evolution from air breathing to exo-atmospheric capable flight systems culminating in the successful Project Mercury. Although NASA has been philosophically committed to the principals of system safety, this case study points out that budget and manpower constraints-as well as a variety of internal and external pressures can jeopardize even a well-designed system safety program. This study begins with a review of the evolution and early years of NASA's rise as a project lead agency and ends with the lessons learned from Project Mercury.

Hansen, Frederick D.↗
NASA NTRS2009

Ares I Integrated Vehicle System Safety Team

Complex systems require integrated analysis teams which sometimes are divided into subsystem teams. Proper division of the analysis in to subsystem teams is important. Safety analysis is one of the most difficult aspects of integration.

Wetherholt, Jon↗