SEARCH · Engineering Papers

Results for “Secure by Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 919 records · Page 51

All sources NASA NTRS DOE OSTI

NASA NTRS2007

Large-Scale Cryogen Systems and Test Facilities

NASA has completed initial construction and verification testing of the Integrated Systems Test Facility (ISTF) Cryogenic Testbed. The ISTF is located at Complex 20 at Cape Canaveral Air Force Station, Florida. The remote and secure location is ideally suited for the following functions: (1) development testing of advanced cryogenic component technologies, (2) development testing of concepts and processes for entire ground support systems designed for servicing large launch vehicles, and (3) commercial sector testing of cryogenic- and energy-related products and systems. The ISTF Cryogenic Testbed consists of modular fluid distribution piping and storage tanks for liquid oxygen/nitrogen (56,000 gal) and liquid hydrogen (66,000 gal). Storage tanks for liquid methane (41,000 gal) and Rocket Propellant 1 (37,000 gal) are also specified for the facility. A state-of-the-art blast proof test command and control center provides capability for remote operation, video surveillance, and data recording for all test areas.

Johnson, R. G.↗

NASA NTRSDate not supplied

The State of Cryptolib – The Open-Source Satellite Cryptography Library

What state would the world be in if all internet traffic was unencrypted? Imagine an alternate universe where you can plug a packet sniffing device into your home internet and capture the web traffic of the entire world. It seems obvious that this scenario is less than desirable. If we would not allow this for the internet, why would we allow this in the space domain? With the advent of open-source ground stations, commercial off the shelf hardware, and ground stations as a service, the barrier to entry for space communications is rapidly lowering. New players enter the space realm everydayevery day, and the presence of tools to allow apprentice evildoers the ability to exploit satellite communications is on the horizon. Not only are legacy missions at risk, but future missions are as well - particularly lower budget science missions with more stringent sciencesize, weight, and power constraints. that may find it difficult to utilize hardware-based encryption solutions. In terms of Civilian Aerospace, NASA Standard 1006 generally directs that missions "shall protect the command stack with encryption that meets or exceeds Federal Information Processing Standards (FIPS) 140". Fortunately, the Consultative Committee for Space Data Systems (CCSDS) has published an international standard on Space Data Link Security. The combination of these two forces has resulted in CryptoLib - an open-source, C-based, encryption library that aims to be CCSDS SDLS compliant. CryptoLib is designed to support smaller missions on a tight budget that may be subject to the more stringent command link encryption requirements. Additionally, CryptoLib serves as an underpinning in JPL's Key Management & Cryptography (KMC) suite and is also designed to function as a 'drop-in' for smaller missions. CryptoLib is in active development and currently provides Telecommand (TC), Telemetry (TM), and Advanced Orbiting Systems (AOS) encryption and decryption capabilities with a variety of encryption and authentication schemes. This presentation will report the latest features, current status, and future plans for CryptoLib.

open-source encryption↗

NASA NTRSDate not supplied

The State of CryptoLib – The Open-Source Satellite Cryptography Library

open-source encryption↗

DOE OSTI2021

Building Envelope Characteristics in Cold Climates

Prescriptive guidelines for thermal insulation in the design of buildings in cold climates have traditionally been derived by a holistic consideration of climatic factors, energy policy, environmental policy, and economics. The differences in thermal barrier requirements in buildings across the arctic and subarctic regions of the world are influenced as much by the differing priorities of the governing bodies that set these requirements as by actual physical demands and conditions. Usually, national requirements for building envelope characteristics such as thermal insulation values, building envelope airtightness, vapor permeability, building mass, and detailing are based on economics, durability, and environmental considerations. Consideration of thermal energy system resilience provides a new paradigm through which to view the optimization of these parameters. The paper describes specifics of construction in cold climates; summarizes best practice requirements for the building envelope characteristics for buildings located in cold and arctic climate of the United States, Canada, and Scandinavian countries; provides some details illustrating how to implement these requirements; and compares the effects of different levels of building envelope efficiency and building mass on indoor air temperature decay when heat supply is interrupted. The paper also presents results from experts' discussions during the consultation forum "Thermal Energy Systems Resilience in Cold/Arctic Climates" (ERDC 2020) and research conducted under the IEA EBC Annex 73, the Environmental Security Technology Certification Program (ESTCP) Project "Technologies Integration to Achieve Resilient, Low-Energy Military Installations," and U.S. Army Program project 633734T1500 under Military Engineering Technology Demonstration. The paper complements the Cold-Climate Design Guide (ASHRAE 2015) with a focus on the resilience of thermal energy systems.

Arctic↗

DOE OSTI2025

PUFFIn Software Modeling for Quality Management

PUFFIn (PENELOPE User Friendly Fast Interface) was designed as a fast and simple Monte Carlo simulation tool for the transport of photons and electrons, with a primary purpose as a learning and education tool for a broad range of static configurations in the radiation processing industry. Development of the PUFFIn software is funded by the Office of Radiological Security (ORS) within the United States National Nuclear Security Administration (NNSA). PUFFIn helps fill the education and knowledge gaps in the industry, as identified in reports by Fermilab (2017) and the IAEA (2020). PUFFIn uses the PENELOPE (NEA-2023) physics engine to perform simulations on static configurations. PUFFIn has support for multiple geometry types from simple, single material simulations to full 3D configurations created from CAD input files or images from X-Ray Tomography scans. PUFFin was designed to be easy for the novice user, it will generate the input and geometry files required by PENLOPE and will display the output plots within the PUFFIn interface. PUFFin is distributed for free but requires a free workshop so users can be adequately trained in its use. Workshops have been presented in the past at Texas A&M university, the Aerial-CRT facility in Strasbourg France and Jakarta Indonesia. PUFFIn simulations have been validated by 10 MeV ebeam experiments done at Aerial-CRT in France (Radiation Physics and Chemistry 222 (2024) 111774). Further user experimental comparisons were made at the medical product hands on workshop at Texas A&M in October 2024.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2023

High Power Targetry R&D and support for future generation accelerator

A high-power target system is a key beam element to complete future High Energy Physics (HEP) experiments. The target endures high power pulsed beam, leading to high cycle thermal stresses/pressures and thermal shocks. The increased beam power will also create significant challenges such as corrosion and radiation damage that can cause harmful effects on the material and degrade their mechanical and thermal properties during irradiation. This can eventually lead to the failure of the material and drastically reduce the lifetime of targets and beam intercepting devices. Designing a reliable target is already a challenge for MW class facilities today and has led several major accelerator facilities to operate at lower power due to target concerns. With present plans to increase beam power for next generation accelerator facilities in the next decade and the multi-year time-scale to acquire the knowledge on material behavior under such extreme environment, timely R&D of robust high-power targets is critical to fully secure the physics benefits of ambitious accelerator power upgrades. The next generation of high-power targets for future accelerators will use more complex geometries, novel materials, and new concepts allowing better high heat flux cooling methods. Advanced numerical simulations need to be developed to satisfy the physical design requirements of reliable beam-intercepting devices. In parallel, radiation hardened beam instrumentation irradiation methods for high-power targets must be further developed. Additional irradiation facilities are needed since only a few facilities worldwide offer beams for target testing, and the beam provided may not be appropriate for the specific facility or project. Thus, a comprehensive research and development program must be implemented to address the challenges that multi-MW targets face.

Pellemoine, F.↗

NASA NTRS2005

Documentation: No Substitute for Communication

SO WHAT IS AN RFI? IT WAS ONE OF THE FIRST THINGS I learned about back when I started my project management career with my first large construction firm. I learned how to use these forms as a convenient and effective means of documenting the many legitimate clarifications needed on a major project. However, like most other young engineers, I also learned to use the RFI as a weapon in the ongoing battle between owners. or their designer and the construction contractors. Recently, our project team has done a few simple things to greatly reduce the waste and frustration that comes from this type of battle. The RFI form can be a great tool if used properly, and I certainly don t recommend that they be eliminated entirely. The RFI form was created to document the many clarifications that are commonly required on projects. Typically, the contractor uses the top half of the form to clarify-or request permission to vary from-the contract documents. The bottom half of the form is used to record the answer. But this seemingly simple process is plagued by a number of problems. From the contractor s perspective, RFIs are needed to secure information that should have been in the contract documents in the first place. The missing information keeps their crews from working effectively, and it makes hitting already demanding cost and schedule targets even more difficult. Owners, or their design firms, often view the RFI as a means of harassment. Both sides of the issue have legitimate complaints, and both sides cause most of their own pain.

Strickland, John↗

NASA NTRS2009

Controlling Infrastructure Costs: Right-Sizing the Mission Control Facility

Johnson Space Center's Mission Control Center is a space vehicle, space program agnostic facility. The current operational design is essentially identical to the original facility architecture that was developed and deployed in the mid-90's. In an effort to streamline the support costs of the mission critical facility, the Mission Operations Division (MOD) of Johnson Space Center (JSC) has sponsored an exploratory project to evaluate and inject current state-of-the-practice Information Technology (IT) tools, processes and technology into legacy operations. The general push in the IT industry has been trending towards a data-centric computer infrastructure for the past several years. Organizations facing challenges with facility operations costs are turning to creative solutions combining hardware consolidation, virtualization and remote access to meet and exceed performance, security, and availability requirements. The Operations Technology Facility (OTF) organization at the Johnson Space Center has been chartered to build and evaluate a parallel Mission Control infrastructure, replacing the existing, thick-client distributed computing model and network architecture with a data center model utilizing virtualization to provide the MCC Infrastructure as a Service. The OTF will design a replacement architecture for the Mission Control Facility, leveraging hardware consolidation through the use of blade servers, increasing utilization rates for compute platforms through virtualization while expanding connectivity options through the deployment of secure remote access. The architecture demonstrates the maturity of the technologies generally available in industry today and the ability to successfully abstract the tightly coupled relationship between thick-client software and legacy hardware into a hardware agnostic "Infrastructure as a Service" capability that can scale to meet future requirements of new space programs and spacecraft. This paper discusses the benefits and difficulties that a migration to cloud-based computing philosophies has uncovered when compared to the legacy Mission Control Center architecture. The team consists of system and software engineers with extensive experience with the MCC infrastructure and software currently used to support the International Space Station (ISS) and Space Shuttle program (SSP).

Martin, Keith↗

DOE OSTI2021

Radiological Handling and Containment Considerations in Support of an American Medical Isotope Producer

This work will discuss evaluation and design of new and modified facility level radiological containment, transfer, and handling systems in support of the United States’ American Medical Isotope Production Act. In the United States alone, Molybdenum-99 (Mo-99) is used as a precursor to locally generate its decay product, technetium-99m (Tc-99m), for use in approximately 40,000 medical procedures every day to detect cancer and heart disease. Currently, however, Mo-99 is primarily produced overseas and typically requires highly enriched uranium (HEU) which is classified as weapon -usable. This poses a serious security risk to the United States and, in 2012, Congress passed the American Medical Isotope ACT which aimed to cease all Mo-99 production that requires HEU and support American based companies who have found safer production methods. Through this effort, a system was designed and developed to access irradiated material in processing hot cells for ease of material introduction and removal in the confined area. The proposed solution uses a double-door design that allows for easy access to material while also providing shielding through a mechanically manipulated carousel. A system was also designed to transport irradiated materials from target reactors to a target receipt box using a rail guide system, pneumatic motor, and lead screw drive.

07 ISOTOPE AND RADIATION SOURCES↗

DOE OSTI2025

High-Power Targetry R&D Roadmap for High Energy Physics

Designing a reliable target is already a challenge for MW-class facilities today and has led several major accelerator facilities to operate at lower power due to target concerns. With present plans to increase beam power for next-generation accelerator facilities in the next decade, timely R&D in support of robust high-power targets is critical to secure the full physics benefits of ambitious accelerator power upgrades. The next generation of high-power targets and beam-intercepting devices (beam dumps, absorbers, collimators ) will have more complex geometries, novel materials, and new concepts that allow for use of improved high-heat-flux cooling methods. Advanced numerical simulations need to be developed to support design of reliable high-power beam targets. In parallel, development of radiation-hardened beam instrumentation is needed. Irradiation methods for high-power targets must be further developed, and new irradiation facilities are needed since only a few facilities worldwide offer beams suitable for target testing. A comprehensive R&D program must be implemented to address the many complex challenges faced by multi-MW beam intercepting devices.

Pellemoine, Frederique [Fermilab]↗

DOE OSTI2026

A practical control strategy for demand flexibility with ensured occupant comfort in grid-interactive efficient buildings

This study proposes a practical and simplified demand response (DR) control strategy from the perspective of grid-interactive efficient buildings (GEBs), aiming to secure demand flexibility while ensuring occupant thermal comfort. Focusing on summer on-peak periods, a linear demand response (LDR) strategy that integrates cooling setpoint adjustment and lighting dimming was designed, and its performance was quantitatively evaluated. A case study was conducted using EnergyPlus-based simulations for a U.S. DOE small office prototype building under summer on-peak weather conditions. Compared with a conventional rapid demand response (RDR) strategy, the proposed LDR approach gradually reduced electrical loads while maintaining occupant thermal comfort indices, including predicted mean vote (PMV) and predicted percentage of dissatisfied (PPD), within acceptable comfort ranges. Quantitative analysis of demand flexibility using the grid-interactive impact index (GII) and the flexibility strength index (FSI) showed that the LDR strategy provided approximately 12.5% demand flexibility during DR periods and achieved an electricity cost reduction of about 8.8%. In addition, the results of the part-load ratio (PLR)-based cooling system performance analysis showed that, in the on-peak period, the LDR strategy exhibited improved cooling performance compared with the baseline. Overall, this study shows the potential of a practical DR control strategy that can simultaneously achieve occupant comfort and demand flexibility without relying on complex advanced control technologies.

Jung, Dong Eun↗

DOE OSTI2025

Distribution System Blackstart and Restoration Using DERs and Dynamically Formed Microgrids

Extreme weather events have led to long-duration outages in the distribution system (DS), necessitating novel approaches to blackstart and restore the system. Existing blackstart solutions utilize blackstart units to establish multiple microgrids (MGs), sequentially energize non-blackstart units, and restore loads. However, these approaches often result in isolated MGs. In DERs-aided blackstart, the continuous operation of these MGs is limited by the finite energy capacity of commonly used blackstart units like battery energy storage (BES)-based gridforming inverters (GFMIs). To address this issue, this article proposes a holistic blackstart and restoration framework that incorporates synchronization between dynamic MGs and the entire DS with the transmission grid (TG). To support synchronization, we leveraged virtual synchronous generator-based control for GFMIs to estimate their frequency response to load pick-up events using only initial/final quasi-steady-state points. Subsequently, a synchronization switching condition is developed to model synchronizing switches, aligning them seamlessly with a linearized branch flow problem. Finally, we designed a bottomup blackstart and restoration framework that considers the switching structure of the DS, energizing/synchronizing switches, DERs with grid-following inverters, and BES-based GFMIs with frequency security constraints. In conclusion, the proposed framework is validated in IEEE-123-bus system, considering cases with two and four GFMIs under various TG recovery instants.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS1991

National Launch System Space Transportation Main Engine

The present liquid-oxygen/liquid-hydrogen engine is described as meeting the specific requirements of the National Launch System (NLS) Program including cost-effectiveness and robustness. An overview of the NLS and its objectives is given which indicates that the program aims to develop a flexible launch system to meet security, civil, and commercial needs. The Space Transportation Main Engine (STME) provides core and boost propulsion for the 1.5-stage vehicle and core propulsion for the solid booster vehicle. The design incorporates step-throttling, order-of-magnitude reductions in welds, and configuration targets designed to optimize robustness. The STME is designed to provide adaptable and dependable propulsion while minimizing recurring costs and is designed to meet the needs of NLS and other typical space-transportation programs currently being planned.

Hoodless, Ralph M., Jr.↗

NASA NTRS1995

Reusable launch vehicle: Technology development and test program

The National Aeronautics and Space Administration (NASA) requested that the National Research Council (NRC) assess the Reusable Launch Vehicle (RLV) technology development and test programs in the most critical component technologies. At a time when discretionary government spending is under close scrutiny, the RLV program is designed to reduce the cost of access to space through a combination of robust vehicles and a streamlined infrastructure. Routine access to space has obvious benefits for space science, national security, commercial technologies, and the further exploration of space. Because of technological challenges, knowledgeable people disagree about the feasibility of a single-stage-to-orbit (SSTO) vehicle. The purpose of the RLV program proposed by NASA and industry contractors is to investigate the status of existing technology and to identify and advance key technology areas required for development and validation of an SSTO vehicle. This report does not address the feasibility of an SSTO vehicle, nor does it revisit the roles and responsibilities assigned to NASA by the National Transportation Policy. Instead, the report sets forth the NRC committee's findings and recommendations regarding the RLV technology development and test program in the critical areas of propulsion, a reusable cryogenic tank system (RCTS), primary vehicle structure, and a thermal protection system (TPS).

Source record↗

NASA NTRS2009

Developing a Standard Method for Link-Layer Security of CCSDS Space Communications

Communications security for space systems has been a specialized field generally far removed from considerations of mission interoperability and cross-support in fact, these considerations often have been viewed as intrinsically opposed to security objectives. The space communications protocols defined by the Consultative Committee for Space Data Systems (CCSDS) have a twenty-five year history of successful use in over 400 missions. While the CCSDS Telemetry, Telecommand, and Advancing Orbiting Systems protocols for use at OSI Layer 2 are operationally mature, there has been no direct support within these protocols for communications security techniques. Link-layer communications security has been successfully implemented in the past using mission-unique methods, but never before with an objective of facilitating cross-support and interoperability. This paper discusses the design of a standard method for cryptographic authentication, encryption, and replay protection at the data link layer that can be integrated into existing CCSDS protocols without disruption to legacy communications services. Integrating cryptographic operations into existing data structures and processing sequences requires a careful assessment of the potential impediments within spacecraft, ground stations, and operations centers. The objective of this work is to provide a sound method for cryptographic encapsulation of frame data that also facilitates Layer 2 virtual channel switching, such that a mission may procure data transport services as needed without involving third parties in the cryptographic processing, or split independent data streams for separate cryptographic processing.

Biggerstaff, Craig↗

NASA NTRS2011

Kennedy Space Center ITC-1 Internship Overview

As an intern for Priscilla Elfrey in the ITC-1 department, I was involved in many activities that have helped me to develop many new skills. I supported four different projects during my internship, which included the Center for Life Cycle Design (CfLCD), SISO Space Interoperability Smackdown, RTI Teacher Mentor Program, and the Discrete Event Simulation Integrated Visualization Environment Team (DIVE). I provided the CfLCD with web based research on cyber security initiatives involving simulation, education for young children, cloud computing, Otronicon, and Science, Technology, Engineering, and Mathematics (STEM) education initiatives. I also attended STEM meetings regarding simulation courses, and educational course enhancements. To further improve the SISO Simulation event, I provided observation feedback to the technical advisory board. I also helped to set up a chat federation for HLA. The third project involved the RTI Teacher Mentor program, which I helped to organize. Last, but not least, I worked with the DIVE team to develop new software to help visualize discrete event simulations. All of these projects have provided experience on an interdisciplinary level ranging from speech and communication to solving complex problems using math and science.

Ni, Marcus↗

NASA NTRS2016

Technical Reference Suite Addressing Challenges of Providing Assurance for Fault Management Architectural Design

Research into complexities of software systems Fault Management (FM) and how architectural design decisions affect safety, preservation of assets, and maintenance of desired system functionality has coalesced into a technical reference (TR) suite that advances the provision of safety and mission assurance. The NASA Independent Verification and Validation (IV&V) Program, with Software Assurance Research Program support, extracted FM architectures across the IV&V portfolio to evaluate robustness, assess visibility for validation and test, and define software assurance methods applied to the architectures and designs. This investigation spanned IV&V projects with seven different primary developers, a wide range of sizes and complexities, and encompassed Deep Space Robotic, Human Spaceflight, and Earth Orbiter mission FM architectures. The initiative continues with an expansion of the TR suite to include Launch Vehicles, adding the benefit of investigating differences intrinsic to model-based FM architectures and insight into complexities of FM within an Agile software development environment, in order to improve awareness of how nontraditional processes affect FM architectural design and system health management. The identification of particular FM architectures, visibility, and associated IV&V techniques provides a TR suite that enables greater assurance that critical software systems will adequately protect against faults and respond to adverse conditions. Additionally, the role FM has with regard to strengthened security requirements, with potential to advance overall asset protection of flight software systems, is being addressed with the development of an adverse conditions database encompassing flight software vulnerabilities. Capitalizing on the established framework, this TR suite provides assurance capability for a variety of FM architectures and varied development approaches. Research results are being disseminated across NASA, other agencies, and the software community. This paper discusses the findings and TR suite informing the FM domain in best practices for FM architectural design, visibility observations, and methods employed for IV&V and mission assurance.

Fitz, Rhonda↗

DOE OSTI2023

CyberStrike STORMCLOUD

This presentation will be shared at the "Securing Solar for the Grid (S2G)" workshop at RE+ 2023. It provides an overview of the work INL and Sandia have done to develop CyberStrike STORMCLOUD, a training program was designed to enhance the ability of renewable energy and operators to prepare for a cyber incident impacting industrial control systems with specific considerations of the architectures and limitations of renewable energy.

14 SOLAR ENERGY↗