Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “certification coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
NASA NTRS2004

Certification of CFD heat transfer software for turbine blade analysis

Accurate modeling of heat transfer effects is a critical component of the Turbine Branch of the Turbomachinery and Propulsion Systems Division. Being able to adequately predict and model heat flux, coolant flows, and peak temperatures are necessary for the analysis of high pressure turbine blades. To that end, the primary goal of my internship this summer will be to certify the reliability of the CFD program GlennHT for the purpose of turbine blade heat transfer analysis. GlennHT is currently in use by the engineers in the Turbine Branch who use the FORTRAN 77 version of the code for analysis. The program, however, has been updated to a FORTRAN 90 version which is more robust than the older code. In order for the new code to be distributed for use, its reliability must first be certified. Over the course of my internship I will create and run test cases using the FORTRAN 90 version of GlennHT and compare the results to older cases which are known to be accurate, If the results of the new code match those of the sample cases then the newer version will be one step closer to certification for distribution. In order to complete these it will first be necessary to become familiar with operating a number of other programs. Among them are GridPro, which is used to create a grid mesh around a blade geometry, and FieldView, whose purpose is to graphically display the results from the GlennHT program. Once enough familiarity is established with these programs to render them useful, then the work of creating and running test scenarios will begin. The work is additionally complicated by a transition in computer hardware. Most of the working computers in the Turbine Branch are Silicon Graphics machines, which will soon be replaced by LINUX PC's. My project is one of the first to make use the new PC's. The change in system architecture however, has created several software related issues which have greatly increased the time and effort investments required by the project.Although complications with the project continue to arise, it is expected that the goal of my internship can still be achieved within the remaining time period. Critical steps have been achieved and test scenarios can now be designed and run. At the completion of my internship, the FORTRAN 90 version of GlennHT should be well on its way to certification.

Jordan, William A.↗
DOE OSTI2016

Variations in Medicare Reimbursement in Radiation Oncology: An Analysis of the Medicare Provider Utilization and Payment Data Set

Purpose: The purposes of this study were to summarize recently published data on Medicare reimbursement to individual radiation oncologists and to identify the causes of variation in Medicare reimbursement in radiation oncology. Methods and Materials: The Medicare Provider Utilization and Payment Data: Physician and Other Supplier Public Use File (POSPUF), which details nearly all services provided by radiation oncologists in 2012, was used for this study. The data were filtered and analyzed by physician and by billing code. Statistical analysis was performed to identify differences in reimbursements based on sex, rurality, billing of technical services, or location in a certificate of need (CON) state. Results: There were 4135 radiation oncologists who received a total of $1,499,625,803 in payments from Medicare in 2012. Seventy-five percent of radiation oncologists were male. The median reimbursement was $146,453. The code with the highest total reimbursement was 77418 (radiation treatment delivery intensity modulated radiation therapy [IMRT]). The most commonly billed evaluation and management (E/M) code for new visits was 99205 (49%). The most commonly billed E/M code for established visits was 99213 (54%). Forty percent of providers billed none of their new office visits using 99205 (the highest E/M billing code), whereas 34% of providers billed all of their new office visits using 99205. For the 1510 radiation oncologists (37%) who billed technical services, median Medicare reimbursement was $606,008, compared with $93,921 for all other radiation oncologists (P<.001). On multivariate analysis, technical services billing (P<.001), male sex (P<.001), and rural location (P=.007) were predictive of higher Medicare reimbursement. Conclusions: The billing of technical services, with their high capital and labor overhead requirements, limits any comparison in reimbursement between individual radiation oncologists or between radiation oncologists and other specialists. Male sex and rural practice location are independent predictors of higher total Medicare reimbursements.

62 RADIOLOGY AND NUCLEAR MEDICINE↗
DOE OSTI2021

Global Trends of ASME "N-Stamp" Certifications for Nuclear Component Vendors

Historically, nuclear component manufacturing vendors, from small businesses through large conglomerates, have felt compelled to obtain an American Society for Mechanical Engineers (ASME) Nuclear Certification, known colloquially as an "N-stamp", to assure supply chain quality standards that will be acceptable to regulators and safety concerns. Since the N-stamp quality standard is a U.S.-origin code, combined with the apparent decline in the U.S. nuclear industry alongside the growth of the Asian nuclear industry, there is the question of whether the rest of the world, including new entrants to the nuclear industry, also regard N-stamp as a needed certification. This study addresses this question through analysis of the entire N-stamp database of holders, and former holders, of N-stamp certificates of all types and for all regions worldwide from 1989-2020 (the dates available in the database). From this 30 years of data, we find that actually U.S.-based vendors still consistently obtain the largest number of N-stamps worldwide over all time periods, but also find that the countries participating in the N-stamp certification process has broadly expanded beyond just North America, Japan, S. Korea and Western Europe (the primary N-stamp recipients before the mid-2000's). We produced global heats maps and bar charts to illustrate our findings, as well as further investigation into why the data shows changes over time and region. We note that nuclear entities involved with Soviet-type reactors do not participate in the N-stamp process, but instead pursue the Russian version PNAE, which is substantially similar to the ASME code. We conclude that at least from the N-stamp database, the United States nuclear component manufacturing industry is alive and well, although there have been some consolidations, and that the ASME N-stamp appears to still be a valued certificate worldwide, including in China which now ranks second only to the United States in obtaining N-stamp certificates in recent years. We further note that the vendors of new reactor types, in particular High Temperature Gas-Cooled Reactors (HTGRs) and Small Modular Reactors (SMRs), are actively engaged with ASME (and other U.S.-based nuclear standards bodies such as the American Nuclear Society and Nuclear Energy Institute) to coordinate updates to the ASME N-Stamp criteria to ensure applicability of the code for these new designs. Implications of these findings include the following: The global use of the U.S.-origin N-stamp certification supports the view that, despite the decline of the U.S. nuclear industry, the United States remains an esteemed global leader in the area of nuclear safety. As the U.S. Government works to revitalize the U.S. nuclear industry, especially in the area of exports, it may be beneficial to leverage the global standing of the N-stamp certification. The findings indicate that the N-stamp database would be a useful tool for the U.S. Government to use to track the growth of the civil nuclear industry in foreign countries, under certain circumstances. The Excel-format N-stamp database produced as part of this study may be a useful tool for this purpose. N-stamp data may be a useful tool for foreign governments to use to identify nuclear manufacturers within their own country, especially to identify "targets" for outreach on nuclear export control compliance. The U.S. Government could carry this message to foreign partners during bilateral engagements or as part of Nuclear Suppliers Group (NSG) discussions on industry outreach.

42 ENGINEERING↗
DOE OSTI2025

MasQiTT

SAND2025-03471O MasQiTT software is a proof-of-concept code that implements the Secure MQTT protocol. It demonstrates a publish/subscribe model of message passing within a network where the publishers can encrypt messages according to a topic and the subscribers can decrypt those messages. The example code shows an example of deployment of an end-to-end system that includes certificate authority and key management in addition to basic implementation of the protocol. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Fisher, Andrew [Sandia National Lab. (SNL-CA), Liv↗
NASA NTRSDate not supplied

PRECiSA: a static analysis tool for floating-point programs

This presentation introduces PRECiSA, a static analysis framework for analyzing floating-point programs. PRECiSA computes round-off error bounds for a class of floating-point programs, and produces a formal proof certificate of the correctness of these bounds. PRECiSA also has the capability of generating C code which is instrumented to detect unstable branching conditions from a real-number algorithm specification.

Floating-point↗
DOE OSTI2017

Advanced Grid Simulator for Multi-Megawatt Power Converter Testing and Certification

Grid integration testing of inverter-coupled renewable energy technologies is an essential step in the qualification of renewable energy and energy storage systems to ensure the stability of the power system. New types of devices must be thoroughly tested and validated for compliance with relevant grid codes and interconnection requirements. For this purpose, highly specialized custom-made testing equipment is needed to emulate various types of realistic grid conditions that are required by certification bodies or for research purposes. For testing multi-megawatt converters, a high power grid simulator capable of creating controlled grid conditions and meeting both power quality and dynamic characteristics is needed. This paper describes the new grid simulator concept based on ABB's medium voltage ACS6000 drive technology that utilizes advanced modulation and control techniques to create an unique testing platform for various multi-megawatt power converter systems. Its performance is demonstrated utilizing the test results obtained during commissioning activities at the National Renewable Energy Laboratory in Colorado, USA.

17 WIND ENERGY↗
DOE OSTI2016

Energy Savings Modeling and Inspection Guidelines for Commercial Building Federal Tax Deductions for Buildings in 2016 and Later

This document provides guidance for modeling and inspecting energy-efficient property in commercial buildings for certification of the energy and power cost savings related to Section 179D of the Internal Revenue Code (IRC) enacted in Section 1331 of the 2005 Energy Policy Act (EPAct) of 2005, noted in Internal Revenue Service (IRS) Notices 2006-52 (IRS 2006), 2008-40 (IRS 2008) and 2012-26 (IRS 2012), and updated by the Protecting Americans from Tax Hikes (PATH) Act of 2015. Specifically, Section 179D provides federal tax deductions for energy-efficient property related to a commercial building's envelope; interior lighting; heating, ventilating, and air conditioning (HVAC); and service hot water (SHW) systems. This document applies to buildings placed in service on or after January 1, 2016.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2016

Deploying a Route Optimization EFB Application for Commercial Airline Operational Trials

The Traffic Aware Planner (TAP), developed for NASA Langley Research Center to support the Traffic Aware Strategic Aircrew Requests (TASAR) project, is a flight-efficiency software application developed for an Electronic Flight Bag (EFB). Tested in two flight trials and planned for operational testing by two commercial airlines, TAP is a real-time trajectory optimization application that leverages connectivity with onboard avionics and broadband Internet sources to compute and recommend route modifications to flight crews to improve fuel and time performance. The application utilizes a wide range of data, including Automatic Dependent Surveillance Broadcast (ADS-B) traffic, Flight Management System (FMS) guidance and intent, on-board sensors, published winds and weather, and Special Use Airspace (SUA) schedules. This paper discusses the challenges of developing and deploying TAP to various EFB platforms, our solutions to some of these challenges, and lessons learned, to assist commercial software developers and hardware manufacturers in their efforts to implement and extend TAP functionality in their environments. EFB applications (such as TAP) typically access avionics data via an ARINC 834 Simple Text Avionics Protocol (STAP) server hosted by an Aircraft Interface Device (AID) or other installed hardware. While the protocol is standardized, the data sources, content, and transmission rates can vary from aircraft to aircraft. Additionally, the method of communicating with the AID may vary depending on EFB hardware and/or the availability of onboard networking services, such as Ethernet, WIFI, Bluetooth, or other mechanisms. EFBs with portable and installed components can be implemented using a variety of operating systems, and cockpits are increasingly incorporating tablet-based technologies, further expanding the number of platforms the application may need to support. Supporting multiple EFB platforms, AIDs, avionics datasets, and user interfaces presents a challenge for software developers and the management of their code baselines. Maintaining multiple baselines to support all deployment targets can be extremely cumbersome and expensive. Certification also needs to be considered when developing the application. Regardless of whether the software is itself destined to be certified, data requirements in support of the application and user interface elements may introduce certification requirements for EFB manufacturers and the airlines. The example of TAP, the challenges faced, solutions implemented, and lessons learned will give EFB application and hardware developers insight into future potential requirements in deploying TAP or similar flight-deck EFB applications.

Roscoe, David A.↗
NASA NTRS2018

The SPACE Computer Code for Analyzing the International Space Station Electrical Power System: Past, Present, and Future

The System Power Analysis for Capability Evaluation (SPACE) computer code was initially developed by NASA in 1988 to assess the Space Station Freedom electric power system and later adapted to support contractor electrical power system capability analyses for the International Space Station (ISS). Over time, the code has supported many efforts such as ISS redesign activities in the early 1990s, assessment of time-phased loads against power system operating limits for future ISS assembly flights (including Certification of Flight Readiness reviews by the ISS program office), and determining the optimum solar array gimbal positions while respecting keep-out zones which minimize both solar array contamination and structural loads. The code has been validated by comparisons with ISS on-orbit data in multiple validation episodes. Recent updates to the code include the incorporation of a Lithium-Ion battery model in addition to the Nickel Hydrogen battery model and modifications to the solar array degradation model to better match on-orbit test results. SPACE has also been extended beyond the ISS to include modeling of the Orion Multi-Purpose Crew Vehicle electrical power system (SPACE-MPCV) and Mars Surface Electrical Power Systems (MSEPS). Portions of SPACE were integrated with a trajectory code to form a Solar Electric Propulsion Simulation (SEPSim), which can be used for analyzing solar electric propulsion missions. In addition, SPACE methods and subroutines have been adapted to a multitude of other projects. This paper summarizes the initial code development and subsequent code utilization in the context of the overall ISS program development and on-orbit operations. Recent updates and results from the code are discussed, including preliminary analyses for the Orion power system.

Electrical Power System↗
NASA NTRS2009

PCC Framework for Program-Generators

In this paper, we propose a proof-carrying code framework for program-generators. The enabling technique is abstract parsing, a static string analysis technique, which is used as a component for generating and validating certificates. Our framework provides an efficient solution for certifying program-generators whose safety properties are expressed in terms of the grammar representing the generated program. The fixed-point solution of the analysis is generated and attached with the program-generator on the code producer side. The consumer receives the code with a fixed-point solution and validates that the received fixed point is indeed a fixed point of the received code. This validation can be done in a single pass.

Kong, Soonho↗
NASA NTRS2016

Ice-Accretion Test Results for Three Large-Scale Swept-Wing Models in the NASA Icing Research Tunnel

Icing simulation tools and computational fluid dynamics codes are reaching levels of maturity such that they are being proposed by manufacturers for use in certification of aircraft for flight in icing conditions with increasingly less reliance on natural-icing flight testing and icing-wind-tunnel testing. Sufficient high-quality data to evaluate the performance of these tools is not currently available. The objective of this work was to generate a database of ice-accretion geometry that can be used for development and validation of icing simulation tools as well as for aerodynamic testing. Three large-scale swept wing models were built and tested at the NASA Glenn Icing Research Tunnel (IRT). The models represented the Inboard (20 percent semispan), Midspan (64 percent semispan) and Outboard stations (83 percent semispan) of a wing based upon a 65 percent scale version of the Common Research Model (CRM). The IRT models utilized a hybrid design that maintained the full-scale leading-edge geometry with a truncated afterbody and flap. The models were instrumented with surface pressure taps in order to acquire sufficient aerodynamic data to verify the hybrid model design capability to simulate the full-scale wing section. A series of ice-accretion tests were conducted over a range of total temperatures from -23.8 to -1.4 C with all other conditions held constant. The results showed the changing ice-accretion morphology from rime ice at the colder temperatures to highly 3-D scallop ice in the range of -11.2 to -6.3 C. Warmer temperatures generated highly 3-D ice accretion with glaze ice characteristics. The results indicated that the general scallop ice morphology was similar for all three models. Icing results were documented for limited parametric variations in angle of attack, drop size and cloud liquid-water content (LWC). The effect of velocity on ice accretion was documented for the Midspan and Outboard models for a limited number of test cases. The data suggest that there are morphological characteristics of glaze and scallop ice accretion on these swept-wing models that are dependent upon the velocity. This work has resulted in a large database of ice-accretion geometry on large-scale, swept-wing models.

Wing Aerodynamics↗
NASA NTRS2016

Ice-Accretion Test Results for Three Large-Scale Swept-Wing Models in the NASA Icing Research Tunnel

Icing simulation tools and computational fluid dynamics codes are reaching levels of maturity such that they are being proposed by manufacturers for use in certification of aircraft for flight in icing conditions with increasingly less reliance on natural-icing flight testing and icing-wind-tunnel testing. Sufficient high-quality data to evaluate the performance of these tools is not currently available. The objective of this work was to generate a database of ice-accretion geometry that can be used for development and validation of icing simulation tools as well as for aerodynamic testing. Three large-scale swept wing models were built and tested at the NASA Glenn Icing Research Tunnel (IRT). The models represented the Inboard (20% semispan), Midspan (64% semispan) and Outboard stations (83% semispan) of a wing based upon a 65% scale version of the Common Research Model (CRM). The IRT models utilized a hybrid design that maintained the full-scale leading-edge geometry with a truncated afterbody and flap. The models were instrumented with surface pressure taps in order to acquire sufficient aerodynamic data to verify the hybrid model design capability to simulate the full-scale wing section. A series of ice-accretion tests were conducted over a range of total temperatures from -23.8 deg C to -1.4 deg C with all other conditions held constant. The results showed the changing ice-accretion morphology from rime ice at the colder temperatures to highly 3-D scallop ice in the range of -11.2 deg C to -6.3 deg C. Warmer temperatures generated highly 3-D ice accretion with glaze ice characteristics. The results indicated that the general scallop ice morphology was similar for all three models. Icing results were documented for limited parametric variations in angle of attack, drop size and cloud liquid-water content (LWC). The effect of velocity on ice accretion was documented for the Midspan and Outboard models for a limited number of test cases. The data suggest that there are morphological characteristics of glaze and scallop ice accretion on these swept-wing models that are dependent upon the velocity. This work has resulted in a large database of ice-accretion geometry on large-scale, swept-wing models.

Wind-Tunnel Tests↗
NASA NTRS2023

Towards Streamlining Auditing for Compliance With Requirements in Open-Source Software at NASA

Context: NASA requires all software to meet several requirements (NPR 7150.2) depending on software criticality. The instantiation of these requirements may vary per project; however, once decided upon, projects must undergo audits to evaluate compliance with these requirements. Aim: We propose that audit effort can be reduced when requirements are realized by leveraging commonly used open-source infrastructure for version control, issue tracking and continuous integration, and the generated records are analyzed using a repository mining software tool to quantify process compliance. Method: We perform a case study in the NASA-funded Copilot project, utilizing Kaiaulu, a repository mining software tool. We define four software compliance metrics based on the Copilot’s requirements, and analyze their impact on source code quality. Results: Our work demonstrates how it is possible to leverage existing open source tools and platforms to facilitate software certification and qualification, and to streamline the auditing process required even when stringent requirements must be enforced. Conclusion: Together, both project and tool can be utilized to visualize project compliance, and metrics can be defined to more easily identify process irregularities to minimize auditing efforts. Project Repository: github.com/Copilot-Language/copilot Tool Repository: github.com/sailuh/kaiaulu

code-quality↗
NASA NTRS2015

Mock Certification Basis for an Unmanned Rotorcraft for Precision Agricultural Spraying

This technical report presents the results of a case study using a hazard-based approach to develop preliminary design and performance criteria for an unmanned agricultural rotorcraft requiring airworthiness certification. This case study is one of the first in the public domain to examine design and performance criteria for an unmanned aircraft system (UAS) in tandem with its concept of operations. The case study results are intended to support development of airworthiness standards that could form a minimum safety baseline for midsize unmanned rotorcraft performing precision agricultural spraying operations under beyond visual line-of-sight conditions in a rural environment. This study investigates the applicability of current methods, processes, and standards for assuring airworthiness of conventionally piloted (manned) aircraft to assuring the airworthiness of UAS. The study started with the development of a detailed concept of operations for precision agricultural spraying with an unmanned rotorcraft (pp. 5-18). The concept of operations in conjunction with a specimen unmanned rotorcraft were used to develop an operational context and a list of relevant hazards (p. 22). Minimum design and performance requirements necessary to mitigate the hazards provide the foundation of a proposed (or mock) type certification basis. A type certification basis specifies the applicable standards an applicant must show compliance with to receive regulatory approval. A detailed analysis of the current airworthiness regulations for normal-category rotorcraft (14 Code of Federal Regulations, Part 27) was performed. Each Part 27 regulation was evaluated to determine whether it mitigated one of the relevant hazards for the specimen UAS. Those regulations that did were included in the initial core of the type certification basis (pp. 26-31) as written or with some simple modifications. Those regulations that did not mitigate a recognized hazard were excluded from the certification basis. The remaining regulations were applicable in intent, but the text could not be easily tailored. Those regulations were addressed in separate issue papers. Exploiting established regulations avoids the difficult task of generating and interpreting novel requirements, through the use of acceptable, standardized language. The rationale for the disposition of the regulations was assessed and captured (pp. 58-115). The core basis was then augmented by generating additional requirements (pp. 38-47) to mitigate hazards for an unmanned sprayer that are not covered in Part 27.

Hayhurst, Kelly J.↗
DOE OSTI2020

Summary Report for the NEPA Impact Analysis. Revision 1

The Waste Isolation Pilot Plant (WIPP), located in southeastern New Mexico, has been developed by the U.S. Department of Energy (DOE) for the geologic (deep underground) disposal of defense-related transuranic (TRU) waste. Containment of TRU waste at the WIPP facility is derived from standards set forth in Title 40 of the Code of Federal Regulations (CFR), Part 191. The DOE assesses compliance with the containment standards according to the Certification Criteria in Title 40 CFR Part 194 by means of Performance Assessment (PA) calculations performed by Sandia National Laboratories (SNL). WIPP PA calculations estimate the probability of radionuclide releases from the repository to the accessible environment for a regulatory period of 10,000 years after facility closure. The DOE Carlsbad Field Office (CBFO) has initiated a National Environmental Policy Act (NEPA) action for a proposal to excavate and use additional transuranic (TRU) waste disposal panels at the WIPP facility. This report documents an analysis undertaken as part of an effort to evaluate the potential environmental consequences of the proposed action. Although not explicitly required for a NEPA analysis, evaluations of a dose indicator to hypothetical members of the public after final facility closure are presented in this report. The analysis is carried out in two stages: first, Performance Assessment (PA) calculations quantify the potential releases to the accessible environment over a 10,000-year post-closure period. Second, dose was evaluated for three hypothetical exposure pathways using the conservative radionuclide concentrations assumed to be released to the accessible environment.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

Scaling Up to Zero Energy Ready - and Down to 530 ft2

There is a demonstrated need for affordable housing and smaller homes. Reduced square footage new construction projects present a solution for this growing need. Completion of these types of projects is not without challenges however, as high efficiency building measures present problems with proper equipment sizing and indoor environmental quality. This case study describes the support provided by FSEC to the Manatee County Habitat for Humanity to create a small footprint home design that qualifies for Zero Energy Ready Home (ZERH) certification in Florida. Specific measures to address equipment sizing challenges, and interior air quality targets are identified among other construction elements that contribute to qualifying for ZERH certification. Discussion of the approach to meeting these challenges is informative to other efforts to build to above code standards in hot humid climates, and other regions.

ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATION↗
NASA NTRS1991

Preparation of the Ice Certification of the Dornier 328 Regional Airliner By Numerical Simulation and By Ground Test

The Dornier 328, a new regional airliner, is to be qualified to FAR25/JAR25 requirements for operation into known icing conditions. All lifting surfaces are pneumatically deiced. Impingement limits were determined using a validated computational fluid dynamic (CFD) code. Wind tunnel tests with a model of the whole aircraft and the isolated empennage equipped with artificial ice shapes showed a degradation of handling characteristics due to ice accretion. Extensive two and three dimensional CFD calculations evaluated ice accretion at the deflection elevator horn. Icing tunnel tests were performed with a model of the horizontal tail with icing similitude fulfilled. The Dornier Do328 powerplant air induction system has successfully completed a program of icing tests in support of aircraft certification for operation into known icing conditions. Potential flight icing conditions were extensively analyzed using a CFD potential flow code and 3-D particle tracking routine to identify critical flight icing conditions. The tunnel test program verified the analytically predicted critical ice accretion surfaces of the air induction system, the adequacy of the ice protection provisions and demonstrated compliance with the applicable (JAR25) regulatory material.

D Welte↗
DOE OSTI2024

Fermilab s Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All of the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility but some experiments are beginning to transition to stop using them. There have been some glitches and learning curve issues but in general the system has been performing well and is being improved as operational problems are addressed.

Dykstra, David↗