Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Criticality Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 757 records · Page 42
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Effects of Communication Delay on Human Spaceflight Missions

Missions onboard the International Space Station rely on the real-time availability of a large ground team of system experts to command the vehicle, solve safety-critical problems, and guide the crew during complex operations. Also, in Low Earth Orbit (LEO), supplies can be sent and crews evacuated quite quickly if needed. Future missions Beyond Low Earth Orbit (BLEO) will not have this 24/7, real-time safety net as communication latency increases, resupply difficulty increases, and evacuation opportunities diminish. There are few, if any, terrestrial analogs for human spaceflight missions BLEO that reflect the conditions—including extreme environments, long mission durations, and small crew sizes – that make these missions so high risk. Studies on specific conditions, such as communication delays and asynchronous interactions, have been performed in NASA Earth-based analog missions and have found that communication delays can disrupt ground-crew interactions and adversely impact team performance. However, there are gaps and limitations in studies conducted to date, notably on human spacecraft system failure response and recovery, the impacts of shorter lunar-relevant communication delays on complex operations, and the effectiveness of countermeasures. The work presented here breaks down real anomalies that occurred on ISS and Apollo missions and creates example scenarios fort Lunar Surface and Mars missions to explore the impact of communication delays of varying length on onboard operations and mission outcomes. Our analyses indicate that short communication delays (e.g., seconds to a minute) adversely impact the ability for ground to provide real-time oversight and guidance and to catch quickly emerging problems in time. Longer communication delays (e.g., up to 40 minutes on Mars missions) call for a shift of responsibility for tactical operations from ground to crew; crew must make time-critical decisions independently and respond to time-critical vehicle anomalies to prevent consequences.

human-systems integration↗
DOE OSTI2026

ICSBEP evaluation lessons learned and good practice

This document describes lessons learned during my nearly 20 years of experience in International Criticality Safety Benchmark Evaluation Project (ICSBEP) meetings and in the development of several evaluations employing the IPEN/MB-01 reactor. The evaluations cover a wide range of possible configurations at the reactor core of this facility. Most of the evaluations are related to critical configurations, although two of them concern subcritical measurements. Examples of the evaluations submitted and approved for ICSBEP publication are the critical configurations employed in the standard core; critical configurations employing heavy reflectors composed of stainless steel, nickel, and carbon steel; and critical configurations employing the standard fuel rods and fuel rods composed of UO 2 -Gd 2 O 3 , among several others. Additionally, this document addresses good practices for the development of ICSBEP evaluations; the intention is to help beginners who are going to start evaluations for ICSBEP. The sections of the ICSBEP evaluation are described and illustrated with several examples.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS1990

Payload deployment systems and advanced manipulators

The results of discussions on future development of avionics to support payload deployment systems and advanced manipulators are discussed. The discussions summarized here were held during the Space Transportation Avionics Technology Symposium in Williamsburg, Virginia on November 7 to 9, 1989. Symposium participants agreed that this subpanel would have benefitted from more participation by users. It was suggested that inputs from Shuttle payload users should be incorporated, either by direct discussions with users or by incorporating comments from users as kept by Payload Accommodations. The Jet Propulsion Laboratory (JPL), Goddard, and Langley, as builders of payloads, and the Space Station Utilization Office could also provide useful inputs. Other potential users for future systems should also be identified as early as possible to determine what they anticipate their needs to be. Symposium participants also recognized that payload deployment is normally not a safety critical area, and as such, is vulnerable to budget cuts that defer costs from development to operations. This does give opportunities for upgrades of operational systems, but these must be very cost effective to compete with vehicle requirements that enhance safety or increase lifetime.

Source record↗
NASA NTRS2019

Reliability Requirements and Research Strategies for Urban Air Mobility Propulsion

An emerging new mission for aeronautics is Urban Air Mobility (UAM), a concept for air transportation around metropolitan areas with passenger-carrying operations. UAM vehicles must be capable of vertical take-off and landing, and this requirement presents unique technical challenges for electric and hybrid-based vertical take-off and landing (eVTOL). A critical challenge for UAM market growth is to gain public acceptance for being as safe as - or safer than - commercial air travel and automotive transportation. There is a lack of data for propulsion systems, components, and the associated thermal management systems for UAM eVTOL propulsion systems. The new mission, new propulsion system concepts, safety criticality of propulsion component performance during vertical take-off and lift operations, and lack of data presents many research challenges and opportunities. NASA has developed and published UAM vehicle concept studies. For a subset of the said concept vehicles, NASA has contracted for a study to identify failure modes and hazards associated with the propulsion systems of the concept vehicles and to perform functional hazard analyses (FHA) and failure modes and effects criticality analyses (FMECA) for each. From the completed study results, it was recommended for NASA to support research toward developing electric/hybrid-electric propulsion components with improved reliability and to explore powertrain architectures that can take advantage of higher reliability components to achieve inherent air-vehicle safety. NASA has started a research effort for UAM propulsion with a focus toward improving safety and reliability. Recent results and research strategy will be discussed toward the goals by means of: 1) improving individual component reliability through advanced materials and design methods, 2) improving the thermal management system, and 3) designing propulsion system architectures to provide inherent UAM vehicle safety.

Krantz, Timothy↗
NASA NTRS1993

WTEC monograph on instrumentation, control and safety systems of Canadian nuclear facilities

This report updates a 1989-90 survey of advanced instrumentation and controls (I&C) technologies and associated human factors issues in the U.S. and Canadian nuclear industries carried out by a team from Oak Ridge National Laboratory (Carter and Uhrig 1990). The authors found that the most advanced I&C systems are in the Canadian CANDU plants, where the newest plant (Darlington) has digital systems in almost 100 percent of its control systems and in over 70 percent of its plant protection system. Increased emphasis on human factors and cognitive science in modern control rooms has resulted in a reduced workload for the operators and the elimination of many human errors. Automation implemented through digital instrumentation and control is effectively changing the role of the operator to that of a systems manager. The hypothesis that properly introducing digital systems increases safety is supported by the Canadian experience. The performance of these digital systems has been achieved using appropriate quality assurance programs for both hardware and software development. Recent regulatory authority review of the development of safety-critical software has resulted in the creation of isolated software modules with well defined interfaces and more formal structure in the software generation. The ability of digital systems to detect impending failures and initiate a fail-safe action is a significant safety issue that should be of special interest to nuclear utilities and regulatory authorities around the world.

Uhrig, Robert E.↗
NASA NTRS2019

Real-Time UAV Trajectory Prediction for Safety Monitoring in Low-Altitude Airspace

The rising number of small unmanned aerial vehicles (UAVs) expected in the next decade will enable a new series of commercial, service, and military operations in low altitude airspace as well as above densely populated areas. These operations may include on-demand delivery, medical transportation services, law enforcement operations, traffic surveillance and many more. Such unprecedented scenarios create the need for robust, efficient ways to monitor the UAV state in time to guarantee safety and mitigate contingencies throughout the operations. This work proposes a generalized monitoring and prediction methodology that utilizes realtime measurements of an autonomous UAV following a series of way-points. Two different methods, based on sinusoidal acceleration profiles and high-order splines, are utilized to generate the predicted path. The monitoring approach includes dynamic trajectory re-planning in the event of unexpected detour or hovering of the UAV during flight. It can be further extended to different vehicle types, to quantify uncertainty affecting the state variables, e.g., aerodynamic and other environmental effects, and can also be implemented to prognosticate safety-critical metrics which depend on the estimated flight path and required thrust. The proposed framework is implemented on a simplified, scalable UAV modeling and control system traversing 3D trajectories. Results presented include examples of real-time predictions of the UAV trajectories during flight and a critical analysis of the proposed scenarios under uncertainty constraints.

UAV trajectory prognosis↗
NASA NTRS2003

Associations between errors and contributing factors in aircraft maintenance

In recent years cognitive error models have provided insights into the unsafe acts that lead to many accidents in safety-critical environments. Most models of accident causation are based on the notion that human errors occur in the context of contributing factors. However, there is a lack of published information on possible links between specific errors and contributing factors. A total of 619 safety occurrences involving aircraft maintenance were reported using a self-completed questionnaire. Of these occurrences, 96% were related to the actions of maintenance personnel. The types of errors that were involved, and the contributing factors associated with those actions, were determined. Each type of error was associated with a particular set of contributing factors and with specific occurrence outcomes. Among the associations were links between memory lapses and fatigue and between rule violations and time pressure. Potential applications of this research include assisting with the design of accident prevention strategies, the estimation of human error probabilities, and the monitoring of organizational safety performance.

Professional Competence↗
NASA NTRS2010

Safety Arguments for Next Generation, Location Aware Computing

Concerns over accuracy, availability, integrity, and continuity have limited the integration of Global Positioning System (GPS) and Global Navigation Satellite System (GLONASS) for safety-critical applications. More recent augmentation systems, such as the European Geostationary Navigation Overlay Service (EGNOS) and the North American Wide Area Augmentation System (WAAS) have begun to address these concerns. Augmentation architectures build on the existing GPS/GLONASS infrastructures to support location based services in Safety of Life (SoL) applications. Much of the technical development has been directed by air traffic management requirements, in anticipation of the more extensive support to be offered by GPS III and Galileo. WAAS has already been approved to provide vertical guidance for aviation applications. During the next twelve months, the full certification of EGNOS for SoL applications is expected. This paper discusses similarities and differences between the safety assessment techniques used in Europe and North America.

Johnson, C. W.↗
DOE OSTI2024

Effect of Heat Treatment on Microstructure and Mechanical Property of 316L Stainless Steel Produced by Laser Powder Bed Fusion

The advanced non-light water reactor designs (Gen IV reactors), including molten salt/ very high temperature/ sodium-cooled and lead-cooled fast reactors, typically operate at higher temperatures and more extreme radiation conditions than light water reactors. An intrinsic part of the deployment and progress of Gen IV reactor designs is selecting the most suitable structural material for a specific application. Additive manufacturing (AM), a fairly new process of making physical, three-dimensional objects from a computer design file, is going to completely change the way of design, build and certify nuclear systems. It offers a range of opportunities to produce complex geometries from existing materials, offers new routes for processing of previously difficult to process materials, allows for design of new high-performance materials, and finally facilitates hybridization of dissimilar materials. This emerging technology has successfully produced cars, wind turbine blade molds and even live cells. It could also open up big opportunities for the nuclear industry to quickly deploy technologies at a fraction of the cost. So far, AM techniques have been preliminarily applied in the field of nuclear reactors, including the classical parts such as the pressure vessel of a small reactor with 508-III steel, the bottom nozzle of a fuel assembly with 304L steel, the fuel cladding with zirconium alloy and the integrated impeller of a pump and the multi-channel valve body with 316L steel [6,7]. The AM applications for operating nuclear reactors started in auxiliary plant components and have slowly migrated to metallic reactors and core components, but many of these are not safety critical components. Although many parts used for nuclear reactors have been fabricated by AM techniques, practical applications in engineering are still a long way off due to the uncertainty factors focused on the processing, material properties, analysis methods and application standards, which feeds the safety and life-cycle of the nuclear reactor. Due to rapid, repeated heating and cooling during production, a high dislocation density was present in the AM material. This microstructure feature is unstable at elevated temperature while high temperature is one of the typical operation environments for nuclear reactors. Thus, it is important to understand the thermal effect on the microstructure of AM material. The objectives of this study are to investigate the effect of heat treatment on the microstructure and mechanical properties of 316L stainless steel produced by laser powder bed fusion additive manufacturing, and to determine an appropriate heat treatment practice that will be applied to the lightweight AM lattice-structured material with the same chemistry. The heat treatment study consisted of annealing the samples at a temperature range of 800 to 1200 oC with a 50 oC increment for different times (1-24 hours), followed by vacuum or air cooling. Microstructural characterization was carried out by Scanning Electron Microscope (SEM). Grain size and crystallographic orientation were investigated by Electron Backscatter Diffraction (EBSD). Vickers hardness tests with a 0.5 kg load were employed to determine the hardness of samples after different heat treatments. After heat treatment, the random crystallographic orientation was preserved, and the volume fraction of high-angle grain boundaries (grain boundary misorientation =15 oC) remained the same. The dislocation density decreased with annealing temperature due to recovery. The fine subgrain structures in the as-printed specimen were quite stable up to 1200 oC. Minimal recrystallization was observed up to 1200 oC. Recrystallization initiated only after 8.5 hours at 1200 oC. The SEM images did not show obvious dependence of microstructure on cooling rate. The hardness of the specimens decreased with increasing annealing temperature as a result of the decrease in dislocation density. It is interesting to note that the AM material showed very similar hardness to the wrought material when annealing at similar temperature, although the microstructures are very different. Annealing at 1050 oC for 1 hour followed by air cooling was selected as the heat treatment procedure for the lattice designed lightweight AM 316L material.

36 MATERIALS SCIENCE↗
NASA NTRS2004

Adding Assurance to Automatically Generated Code

Code to estimate position and attitude of a spacecraft or aircraft belongs to the most safety-critical parts of flight software. The complex underlying mathematics and abundance of design details make it error-prone and reliable implementations costly. AutoFilter is a program synthesis tool for the automatic generation of state estimation code from compact specifications. It can automatically produce additional safety certificates which formally guarantee that each generated program individually satisfies a set of important safety policies. These safety policies (e.g.. array-bounds, variable initialization) form a core of properties which are essential for high-assurance software. Here we describe the AutoFilter system and its certificate generator and compare our approach to the static analysis tool PolySpace.

Denney, Ewen↗
DOE OSTI2026

Understanding the Thermal Physics and Metallurgy of Metal Big Area Additive Manufacturing

The research goal of this EPSCoR-DOE partnership is to mitigate defects in parts made using a new type of additive manufacturing (AM) process called metal Big Area Additive Manufacturing (m-BAAM). To realize this goal, the PIs will detect and correct defects in the part as it is being printed by combining fundamental knowledge of the thermal physics and metallurgy of m-BAAM with in-process sensor data. Developed at the DOE-funded Manufacturing Demonstration Facility at Oak Ridge National Laboratory, the m-BAAM process involves one or more robots working together to produce a part by fusing metal wire layer-by-layer using arc welding. The process can print large metal parts such as turbine blades, which is not possible using other AM processes. In addition, m-BAAM production rates are more than ten times faster than other AM processes while requiring one-tenth of the material cost. Despite their potential to become a critical force multiplier in the energy generation industry, m-BAAM parts may fail to print accurately due to retention of heat and uneven cooling. Overheating and anomalous cooling rates in turn can cause inconsistencies in the microstructure, leading to sudden failure when used in safety-critical applications. In other words, flaw formation in m-BAAM parts is governed by the thermal history – intensity and spatial distribution of heat inside the part during printing. The thermal history is a complex function of the part shape and process settings such as welding energy, path taken by the welding torch for deposition (tool path), wire feed rate, among others.

36 MATERIALS SCIENCE↗
NASA NTRS2015

Application of SAE ARP4754A to Flight Critical Systems

This report documents applications of ARP4754A to the development of modern computer-based (i.e., digital electronics, software and network-based) aircraft systems. This study is to offer insight and provide educational value relative to the guidelines in ARP4754A and provide an assessment of the current state-of-the- practice within industry and regulatory bodies relative to development assurance for complex and safety-critical computer-based aircraft systems.

Peterson, Eric M.↗
DOE OSTI2022

A multi-scale time-series dataset with benchmark for machine learning in decarbonized energy grids

The electric grid is a key enabling infrastructure for the ambitious transition towards carbon neutrality as we grapple with climate change. With deepening penetration of renewable resources, the reliable operation of the electric grid becomes increasingly challenging. In this paper, we present PSML, a first-of-its-kind open-access multi-scale time-series dataset, to aid in the development of data-driven machine learning (ML)-based approaches towards reliable operation of future electric grids. The dataset is synthesized from a joint transmission and distribution electric grid to capture the increasingly important interactions and uncertainties of the grid dynamics, containing power, voltage and current measurements over multiple spatio-temporal scales. Using PSML, we provide state-of-the-art ML benchmarks on three challenging use cases of critical importance to achieve: (i) early detection, accurate classification and localization of dynamic disturbances; (ii) robust hierarchical forecasting of load and renewable energy; and (iii) realistic synthetic generation of physical-law-constrained measurements. We envision that this dataset will provide use-inspired ML research in safety-critical systems, while simultaneously enabling ML researchers to contribute towards decarbonization of energy sectors.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRSDate not supplied

Assurance Issues in Developing AI/ML Components (and their Standards) for Civil Aviation

Standards development activities require a keen and deep understanding of the problem being solved by the standard as well as the technologies being deployed in any reference implementation of the solution. It is important to understand the mechanisms and limits of the fundamental, underlying science of implementation and verification technologies used to realize and assure systems. We need to understand the limits of what current process and metrics can provide with respect to new technologies. US leadership is important in this endeavor, and it is vital that we have a measured approach that yields sound results. We wish to start with simple, well-defined, non-safety critical applications and then progress to functions which have (1) clearly defined requirements, (2) means of checking the answer/output, and (3) means of intervention and mitigation of incorrect answers/outputs.

Aviation Safety↗
NASA NTRS2013

Evidence Report: Risk of Inadequate Human-Computer Interaction

Human-computer interaction (HCI) encompasses all the methods by which humans and computer-based systems communicate, share information, and accomplish tasks. When HCI is poorly designed, crews have difficulty entering, navigating, accessing, and understanding information. HCI has rarely been studied in an operational spaceflight context, and detailed performance data that would support evaluation of HCI have not been collected; thus, we draw much of our evidence from post-spaceflight crew comments, and from other safety-critical domains like ground-based power plants, and aviation. Additionally, there is a concern that any potential or real issues to date may have been masked by the fact that crews have near constant access to ground controllers, who monitor for errors, correct mistakes, and provide additional information needed to complete tasks. We do not know what types of HCI issues might arise without this "safety net". Exploration missions will test this concern, as crews may be operating autonomously due to communication delays and blackouts. Crew survival will be heavily dependent on available electronic information for just-in-time training, procedure execution, and vehicle or system maintenance; hence, the criticality of the Risk of Inadequate HCI. Future work must focus on identifying the most important contributing risk factors, evaluating their contribution to the overall risk, and developing appropriate mitigations. The Risk of Inadequate HCI includes eight core contributing factors based on the Human Factors Analysis and Classification System (HFACS): (1) Requirements, policies, and design processes, (2) Information resources and support, (3) Allocation of attention, (4) Cognitive overload, (5) Environmentally induced perceptual changes, (6) Misperception and misinterpretation of displayed information, (7) Spatial disorientation, and (8) Displays and controls.

Kritina Holden↗
NASA NTRS2022

Bayesian Deep Learning for Segmentation for Autonomous Safe Planetary Landing

Hazard detection is critical for enabling autonomous landing on planetary surfaces. Current state-of-the-art methods leverage traditional computer vision approaches to automate the identification of safe terrain from input digital elevation models (DEMs). However, performance for these methods can degrade for input DEMs with increased sensor noise. In the last decade, deep learning techniques have been developed for various applications. Nevertheless, their applicability to safety-critical space missions has often been limited due to concerns regarding their outputs’ reliability. In response to these limitations, this paper proposes an application of the Bayesian deep learning segmentation method for hazard detection. The developed approach enables reliable, safe landing site detection by i) generating simultaneously a safety prediction map and its uncertainty map via Bayesian deep learning and semantic segmentation, and ii) using the uncertainty map to filter out the uncertain pixels in the prediction map so that the safe site identification is performed only based on the certain pixels (i.e., pixels for which the model is certain about its safety prediction). Experiments are presented with simulated data based on a Mars HiRISE digital terrain model by varying uncertainty threshold and noise levels to demonstrate the performance of the proposed approach.

Kento Tomita↗
DOE OSTI2020

Data from Rossi-α and Pulsed Neutron Prompt Neutron Time Decay Measurements at the Oak Ridge Critical Experiments Facility

This report briefly describes the prompt neutron decay measurements by the Rossi-α and pulsed neutron methods performed at the Oak Ridge Critical Experiments Facility. It briefly describes the measurement equipment, the type of data, and how to access the actual data from the Laboratory Records Department at Oak Ridge National Laboratory and the International Nuclear Criticality Safety Benchmark Evaluation Program at Idaho National Laboratory. Most of the data was acquired between 1960 and 1975 with weapons-grade enriched uranium metal assemblies. It also includes measurement of these types performed at Los Alamos National Laboratory by Oak Ridge National Laboratory with the JEZEBEL and FLATTOP criticality assemblies and other plutonium metal parts. The purpose of this report is to support future mining of the data for publication of additional information that can be used to verify calculational methods and nuclear cross sections. Present calculational methods can be used to directly calculate the measured data.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
DOE OSTI2022

Distributed Transient Safety Verification via Robust Control Invariant Sets: A Microgrid Application

Modern safety-critical energy infrastructures are increasingly operated in a hierarchical and modular control framework which allows for limited data exchange between the modules. In this context, it is important for each module to synthesize and communicate constraints on the values of exchanged information in order to assure system-wide safety. To ensure transient safety in inverter-based microgrids, we develop a set invariance-based distributed safety verification algorithm for each inverter module. Applying Nagumo's invariance condition, we construct a robust polynomial optimization problem to jointly search for safety-admissible set of control set-points and design parameters, under allowable disturbances from neighbors. We use sum-of-squares (SOS) programming to solve the verification problem and we perform numerical simulations using grid-forming inverters to illustrate the algorithm.

Bouvier, Jean-Baptiste H.↗