Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 937 records · Page 52

Faster Aerodynamic Simulation With Cart3D

A NASA-developed aerodynamic simulation tool is ensuring the safety of future space operations while providing designers and engineers with an automated, highly accurate computer simulation suite. Cart3D, co-winner of NASA's 2002 Software of the Year award, is the result of over 10 years of research and software development conducted by Michael Aftosmis and Dr. John Melton of Ames Research Center and Professor Marsha Berger of the Courant Institute at New York University. Cart3D offers a revolutionary approach to computational fluid dynamics (CFD), the computer simulation of how fluids and gases flow around an object of a particular design. By fusing technological advancements in diverse fields such as mineralogy, computer graphics, computational geometry, and fluid dynamics, the software provides a new industrial geometry processing and fluid analysis capability with unsurpassed automation and efficiency.

Source record↗

CoNNeCT Antenna Positioning System Dynamic Simulator Modal Model Correlation

The National Aeronautics and Space Administration (NASA) developed an on-orbit, adaptable, Software Defined Radios (SDR)/Space Telecommunications Radio System (STRS)-based testbed facility to conduct a suite of experiments to advance technologies, reduce risk, and enable future mission capabilities on the International Space Station (ISS). The Communications, Navigation, and Networking reConfigurable Testbed (CoNNeCT) Project will provide NASA, industry, other Government agencies, and academic partners the opportunity to develop and field communications, navigation, and networking technologies in both the laboratory and space environment based on reconfigurable, software-defined radio platforms and the STRS Architecture. The CoNNeCT Payload Operations Nomenclature is SCAN Testbed, and this nomenclature will be used in all ISS integration, safety, verification, and operations documentation. The SCAN Testbed (payload) is a Flight Releasable Attachment Mechanism (FRAM) based payload that will launch aboard the Japanese H-II Transfer Vehicle (HTV) Multipurpose Exposed Pallet (EP-MP) to the International Space Station (ISS), and will be transferred to the Express Logistics Carrier 3 (ELC3) via Extravehicular Robotics (EVR). The SCAN Testbed will operate on-orbit for a minimum of two years.

Jones, Trevor M.↗

CoNNeCT Antenna Positioning System Dynamic Simulator Modal Model Correlation

The National Aeronautics and Space Administration (NASA) developed an on-orbit, adaptable, Software Defined Radios (SDR)/Space Telecommunications Radio System (STRS)-based testbed facility to conduct a suite of experiments to advance technologies, reduce risk, and enable future mission capabilities on the International Space Station (ISS). The Communications, Navigation, and Networking reConfigurable Testbed (CoNNeCT) Project will provide NASA, industry, other Government agencies, and academic partners the opportunity to develop and field communications, navigation, and networking technologies in both the laboratory and space environment based on reconfigurable, software-defined radio platforms and the STRS Architecture. The CoNNeCT Payload Operations Nomenclature is "SCAN Testbed," and this nomenclature will be used in all ISS integration, safety, verification, and operations documentation. The SCAN Testbed (payload) is a Flight Releasable Attachment Mechanism (FRAM) based payload that will launch aboard the Japanese H-II Transfer Vehicle (HTV) Multipurpose Exposed Pallet (EP-MP) to the International Space Station (ISS), and will be transferred to the Express Logistics Carrier 3 (ELC3) via Extravehicular Robotics (EVR). The SCAN Testbed will operate on-orbit for a minimum of two years.

Jones, Tevor M.↗

Cloud Computing Option for Modeling the Debris Environment

NASA’s Digital Transformation Initiative aims to promote the agency’s adoption of current and evolving digital technologies. Through agency-wide collaboration with other NASA teams, the Office of Safety and Mission Assurance (OSMA) has directed the Orbital Debris Program Office and the Meteoroid Environment Office to integrate cloud computing technologies in their publicly released software models: the Orbital Debris Engineering Model (ORDEM) and the Meteoroid Engineering Model (MEM). Decoupling the user interface from the backend processor was key for the software packages to run on a cloud computing framework. Benefits to this design include horizontal scaling of computing resources, user authentication and authorization, and automated deployment. Both models are hosted on a cloud computing platform supported by the NASA authorized IT security and compliance framework. This paper focuses on the new ORDEM web application, which includes the current features of the publicly released ORDEM software with an upgraded frontend design. The underlying ORDEM processor is run on a cloud container, allowing the user to run multiple spacecraft and telescope/radar mode simulations. Featuresexclusive to the ORDEM web application, such as importing multiple TLEs, auto-generated plotting, and the ability to check runtime progress are discussed. Comparisons between the current ORDEM software and the web application are summarized.

Andrew Vavrin↗

Actuator and Motor Control End-to-End V&V on the Mars 2020 Rover

The Mars 2020 Perseverance rover is the most advanced robotic exploration system ever sent to another planet. To support the complex scientific and mobility needs of the mission, the rover utilizes 33 actuators, three multi-degree-of-freedom force-torque sensors, fifteen single or dual-speed resolvers, two solenoid valves, and twelve contact switches. The control for these actuators and sensors is achieved by several levels of flight software, coordinated between two computers with varying bandwidth control loops. Furthermore, the actuators and sensors were integrated into multiple larger robotic mechanisms that were delivered by different organizations at various points in the Integration and Test (I&T) timeline. All of this created a very complex Verification and Validation (V&V) scenario involving multiple subsystems and teams, several hardware and software testbeds with varying levels of fidelity, and significant systems engineering to ensure the overall I&T schedule could be maintained while ensuring system hardware safety.This paper details the integrated V&V effort across multiple teams and venues to provide full coverage of all necessary functionality, performance, and fault protection. First, it provides an overview of how the V&V campaign was subdivided among teams and venues and provides descriptions of the various hardware configurations used to support the testing. The Mars 2020 implementation of the plan incorporates many of the lessons learned from Mars Science Laboratory’s test campaign, and these value-added modifications are discussed here. Also included in this section is the system-level environmental testing approach used for mechanisms. Second, the paper describes the phased approach used by the teams to support new hardware and software deliveries to testbed and Systems I&T. In this approach the test campaign was built upon higher-level mechanism needs for performance, functionality, and safety at specific times in the campaign. Finally, the paper discusses lessons learned from the V&V campaign that should be applied to future large-scale motion control testing efforts.

Borne, Davis↗

Cloud Computing Option for Modeling the Debris Environment

NASA’s Digital Transformation Initiative aims to promote the agency’s adoption of current and evolving digital technologies. Through agency-wide collaboration with other NASA teams, the Office of Safety and Mission Assurance (OSMA) has directed the Orbital Debris Program Office and the Meteoroid Environment Office to integrate cloud computing technologies into their publicly released software models: the Orbital Debris Engineering Model (ORDEM) and the Meteoroid Engineering Model (MEM). Decoupling the user interface from the backend processor was key for the software packages to run on a cloud computing framework. Benefits to this design include horizontal scaling of computing resources, user authentication and authorization, and automated deployment. Both models are hosted on a cloud computing platform supported by the NASA authorized IT security and compliance framework. This paper focuses on the new ORDEM web application, which includes the current features of the publicly released ORDEM software with an upgraded frontend design, although parallels between ORDEM and MEM are also discussed. The underlying ORDEM processor is run on a cloud container, allowing the user to run multiple spacecraft and telescope/radar mode simulations. Features exclusive to the ORDEM web application, such as importing multiple TLEs, auto-generated plotting, and the ability to check runtime progress are discussed. Comparisons between the current ORDEM software and the web application are summarized.

Andrew Vavrin↗

Novel Serpentine Robot Combinations for Inspection in Hard-to-Reach Areas of Damaged or Decommissioned Structures - 17335

U.S. government agencies, particularly the Dept. of Energy, need robotic tools to handle and inspect high-consequence materials - materials for which mishandling would result in great risk to both application operators and the general public. The remediation and documentation of nuclear waste has become a problem of national significance and it cannot be addressed without robotic tools. The use of robots bypasses the danger and decreases the preparation time to handle harmful materials. In the 1980's and 90's, the US Dept. of Energy (DOE) invested heavily in robotic technologies as part of a comprehensive program of research and development aimed at enabling safer and more efficient cleanup of nuclear waste sites. For the next generation of harder, more complex clean-up problems, there is a clear need for more R and D. There is a clear need for flexible, quickly deployable robotic technologies that can be configured to respond to unforeseen situations -- or can be purpose-built for planned activities -- while keeping human workers safe, yet effective. Modularity and inter-operability are core capabilities for inspection tasks in contaminated facilities with a large variety of inspection problems. With any tool, familiarity breeds ingenuity, and ingenuity leads to new innovations in efficiency, effectiveness, safety, and performance. For example, the simple screwdriver can be held fourteen different ways by an experienced machinist who knows exactly what he or she wants to accomplish at any given moment. As a tool, robots are no different. To maximize the efficiency, effectiveness, safety and performance, redeployment and reuse of familiar tools is essential. Modularity can assist with re-deployment and modularity manifests itself in both hardware and software. In some applications of inspection of high-consequence materials, a common concern has been the simplicity of the tool -- often correlated with cost (which is not always accurate) -- in case it becomes unrecoverable. In the case of robots, which have complex user interfaces and complex dynamics of interaction, the lack of familiarity can lead to clumsy operations and reduced accumulation of knowledge. As a result, while incremental successes may be achieved with sequential uses of different robots, there often is little knowledge gain that is generalizable across multiple uses. Total cost often goes down when a more sophisticated, but more familiar tool, can be used more frequently.An example is the inspection of the H-Canyon Exhaust Air Tunnel at the Savannah River Site nuclear waste facility in the United States [1]. This is a particularly nasty environment, due to the acidic gases, large amounts of erosion and debris, and wet, mucky puddles. Over the past twelve years, six inspections have been attempted with five different robotic vehicles. In fact, these inspections have been successful with their limited, but progressively increasing objectives, although most robots have been abandoned in the tunnel. While each vehicle has cost less than $75,000 (the sacrificial part), the total costs of development have been much higher. The robots used to investigate changed much from iteration to iteration and it is not clear a strong body of generalizable expertise was built up across trials. The authors of this study demonstrated the combination of two types of modular, serpentine, re-configurable robots for locomotion over complex terrains and the inspection of hard-to-reach areas. The MOTHERSHIP is a tread/limb/serpentine hybrid robot design for locomotion over complex terrains, while the CMU snake robot provides highly articulated inspection of highly confined spaces. The demonstration at the Portsmouth Gaseous Diffusion Plant involves a combination of the two whereby gross locomotion is achieved with the MOTHERSHIP and the CMU Snake deploys a sensor package to gather data from behind and under obstacles. Although statically configured in its present state, the combined robot is built of individual modules for which reconfiguration has been demonstrated in both labs at Purdue and CMU. In future work, much higher degrees of reconfiguration and re-purposing of both software and hardware are easily achievable with these unique platforms. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Methodological approach to the sensitivity analysis of failure effects in modern digital I and C systems - 136

Modern I and C systems of nuclear power plants increasingly use digital equipment, software-based applications for I and C functions and different types and topologies of communication networks as well. The structure, operation and communication of digital safety-related I and C systems are strongly influenced by the implemented automatic fault detection and fault treatment procedures as barriers against failure propagation. Thus, these I and C systems can change their operating states automatically during the operation time, e.g. due to the detection and correction of certain failure types. Reasonably because of these dynamic properties of digital I and C systems the use of classical fault tree and event tree methods solely for the reliability analysis of modern I and C systems is less suitable. These methods basically apply static models and do not consider the temporal changes of the operating state of the I and C system or equipment appropriately. In this paper, a recently developed approach for the sensitivity analysis of digital I and C systems will be introduced that allows to investigate the dynamic behavior of such systems in cases of internal faults and to quantify the effects on the system reliability. The development and testing of the analysis methodology is carried out using models of generic I and C systems with different typical architectures of stepwise increased complexity. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

SU-F-T-169: A Periodic Quality Assurance Program for a Spot-Scanning Proton Treatment Facility

Purpose: To develop daily and monthly quality assurance (QA) programs in support of a new spot-scanning proton treatment facility using a combination of commercial and custom equipment and software. Emphasis was placed on efficiency and evaluation of key quality parameters. Methods: The daily QA program was developed to test output, spot size and position, proton beam energy, and image guidance using the Sun Nuclear Corporation rf-DQA™3 device and Atlas QA software. The program utilizes standard Atlas linear accelerator tests repurposed for proton measurements and a custom jig for indexing the device to the treatment couch. The monthly QA program was designed to test mechanical performance, image quality, radiation quality, isocenter coincidence, and safety features. Many of these tests are similar to linear accelerator QA counterparts, but many require customized test design and equipment. Coincidence of imaging, laser marker, mechanical, and radiation isocenters, for instance, is verified using a custom film-based device devised and manufactured at our facility. Proton spot size and position as a function of energy are verified using a custom spot pattern incident on film and analysis software developed in-house. More details concerning the equipment and software developed for monthly QA are included in the supporting document. Thresholds for daily and monthly tests were established via perturbation analysis, early experience, and/or proton system specifications and associated acceptance test results. Results: The periodic QA program described here has been in effect for approximately 9 months and has proven efficient and sensitive to sub-clinical variations in treatment delivery characteristics. Conclusion: Tools and professional guidelines for periodic proton system QA are not as well developed as their photon and electron counterparts. The program described here efficiently evaluates key quality parameters and, while specific to the needs of our facility, could be readily adapted to other proton centers.

60 APPLIED LIFE SCIENCES↗

Verification and Validation of Safety-Critical Aircraft Systems Operating under Off-Nominal, Contingency, and Emergency Conditions

Verification and validation (V&V) of safety-critical technologies developed for loss of control (LOC) prevention and recovery and other aviation safety concerns pose significant challenges. Aircraft LOC can result from a wide spectrum of hazards, often occurring in combination, which cannot be fully replicated during evaluation. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of hazardous and uncertain conditions, and the verification and validation of these technologies must provide some measure of assurance that the new vehicle safety technologies do no harm (i.e., that they themselves do not introduce new safety risks). V&V technologies must also enable the identification of system limitations and constraints, as well as enable the identification of safe and unsafe operating conditions (and their boundaries). Additionally, the V&V of complex, increasingly autonomous systems is a fundamental concern. Scalable, reproducible and cost-effective techniques for the assurance of safety critical systems during their design and operation is a key barrier to fielding new systems or updating current systems. Moreover, these techniques need to provide artifacts that enable a comprehensive evidence-based approach to certification. This briefing summarizes research performed under NASA’s Aviation Safety Program and follow-on research for the V&V of safety-critical aircraft system technologies developed for LOC prevention and recovery and increasingly autonomous systems, and for a broad assurance capability in both current and emerging aviation applications. Note that, in this briefing, the term “validation” refers to a confirmation that the system implementation (e.g., algorithms etc.) is performing the intended function(s), as well as an affirmation of effectiveness in these functions. “Verification” refers to a confirmation that the system implementation in the software and hardware meets its (hopefully validated) specifications (e.g., correctly executes algorithms as designed).

Validation↗

Status Report on the Development of Micro-Scheduling Software for the Advanced Outage Control Center Project

The long-term viability of existing nuclear power plants (NPPs) in the United States (U.S.) is dependent upon a number of factors, including maintaining high capacity factors, maintaining nuclear safety, and reducing operating costs, particularly those associated with refueling outages. Refueling outages typically take 20-30 days, and for existing light water NPPs in the U.S., the reactor cannot be in operation during the outage. Furthermore, given that many NPPs generate between $1-1.5 million/day in revenue when in operation, there is considerable interest in shortening the length of refueling outages. Yet, refueling outages are highly complex operations, involving multiple concurrent and dependent activities that are difficult to coordinate. Finding ways to improve refueling outage performance while maintaining nuclear safety has proven to be difficult. The Advanced Outage Control Center project is a research and development (R&D) demonstration activity under the Light Water Reactor Sustainability (LWRS) Program. LWRS is a R&D program which works with industry R&D programs to establish technical foundations for the licensing and managing of long-term, safe, and economical operation of current NPPs. The Advanced Outage Control Center project has the goal of improving the management of commercial NPP refueling outages. To accomplish this goal, this INL R&D project is developing an advanced outage control center (OCC) that is specifically designed to maximize the usefulness of communication and collaboration technologies for outage coordination and problem resolution activities. This report describes specific recent efforts to develop a capability called outage Micro-Scheduling. Micro-Scheduling is the ability to allocate and schedule outage support task resources on a sub-hour basis. Micro-Scheduling is the real-time fine-tuning of the outage schedule to react to the actual progress of the primary outage activities to ensure that support task resources are optimally deployed with the least amount of delay and unproductive use of resources. The remaining sections of this report describe in more detail the scheduling challenges that occur during outages, how a Micro-Scheduling capability helps address those challenges, and provides a status update on work accomplished to date and the path forward.

99 GENERAL AND MISCELLANEOUS↗

Use of New Communication Technologies to Change NASA Safety Culture: Incorporating the Use of Blogs as a Fundamental Communications Tool

The purpose of this paper is to explore an innovative approach to culture change at NASA that goes beyond reorganizations, management training, and a renewed emphasis on safety. Over the last five years, a technological social revolution has been emerging from the internet. Blogs (aka web logs) are transforming traditional communication and information sharing outlets away from established information sources such as the media. The Blogosphere has grown from zero blogs in 1999 to approximately 4.5 million as of November 2004 and is expected to double in 2005. Blogs have demonstrated incredible effectiveness and efficiency with regards to affecting major military and political events. Consequently, NASA should embrace the new information paradigm presented by blogging. NASA can derive exceptional benefits from the new technology as follows: 1) Personal blogs can overcome the silent safety culture by giving voice to concerns or questions that are not well understood or seemingly inconsequential to the NASA community at-large without the pressure of formally raising a potential false alarm. Since blogs can be open to Agency-wide participation, an incredible amount of resources from an extensive pool of experience can focus on a single issue, concern, or problem and quickly vetted, discussed and assessed for feasibility, significance, and criticality. The speed for which this could be obtained cannot be matched through any other process or procedure currently in use. 2) Through official NASA established blogs, lessons learned can be a real-time two way process that is formed and implemented from the ground level. Data mining of official NASA blogs and personal blogs of NASA personnel can identify hot button issues and concerns to senior management. 3) NASA blogs could function as a natural ombudsman for the NASA community. Through the recognition of issues being voiced by the community and taking a proactive stance on those issues, credibility within NASA Management can be restored. For NASA to harness the capabilities of blogs, NASA must develop an Agency-wide policy on blogging to encourage use and provide guidance. This policy should describe basic rules of conduct and content as well as a policy of non-retribution and/or anonymity. The Agency must provide sever space within their firewalls, provide appropriate software tools, and promote blogs in newsletters and official websites. By embracing the use of blogs, a potential pool of 19,000 experts could be available to address each posted safety issue, concern, problem, or question. Blogs could result in real NASA culture change.

Huls, Dale thomas↗

Evolution of International Space Station Program Safety Review Processes and Tools

The International Space Station Program at NASA is constantly seeking to improve the processes and systems that support safe space operations. To that end, the ISS Program decided to upgrade their Safety and Hazard data systems with 3 goals: make safety and hazard data more accessible; better support the interconnection of different types of safety data; and increase the efficiency (and compliance) of safety-related processes. These goals are accomplished by moving data into a web-based structured data system that includes strong process support and supports integration with other information systems. Along with the data systems, ISS is evolving its submission requirements and safety process requirements to support the improved model. In contrast to existing operations (where paper processes and electronic file repositories are used for safety data management) the web-based solution provides the program with dramatically faster access to records, the ability to search for and reference specific data within records, reduced workload for hazard updates and approval, and process support including digital signatures and controlled record workflow. In addition, integration with other key data systems provides assistance with assessments of flight readiness, more efficient review and approval of operational controls and better tracking of international safety certifications. This approach will also provide new opportunities to streamline the sharing of data with ISS international partners while maintaining compliance with applicable laws and respecting restrictions on proprietary data. One goal of this paper is to outline the approach taken by the ISS Progrm to determine requirements for the new system and to devise a practical and efficient implementation strategy. From conception through implementation, ISS and NASA partners utilized a user-centered software development approach focused on user research and iterative design methods. The user-centered approach used on the new ISS hazard system utilized focused user research and iterative design methods employed by the Human Computer Interaction Group at NASA Ames Research Center. Particularly, the approach emphasized the reduction of workload associated with document and data management activities so more resources can be allocated to the operational use of data in problem solving, safety analysis, and recurrence control. The methods and techniques used to understand existing processes and systems, to recognize opportunities for improvement, and to design and review improvements are described with the intent that similar techniques can be employed elsewhere in safety operations. A second goal of this paper is to provide and overview of the web-based data system implemented by ISS. The software selected for the ISS hazard systemMission Assurance System (MAS)is a NASA-customized vairant of the open source software project Bugzilla. The origin and history of MAS as a NASA software project and the rationale for (and advantages of) using open-source software are documented elsewhere (Green, et al., 2009).

Ratterman, Christian D.↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi-Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post-landing segment of the Flight Software (FSW). An in-depth trade study was completed to determine optimal characteristics of the touchdown detection method resulting in an algorithm monitoring filtered, lever-arm corrected, 200 Hz Inertial Measurement Unit (IMU) vehicle acceleration magnitude data against a tunable threshold using persistence counter logic. Following the design of the algorithm, high fidelity environment and vehicle simulations, coupled with the actual vehicle FSW, were used to tune the acceleration threshold and persistence counter value to result in adequate performance in detecting touchdown and sufficient safety margin against early detection while descending under parachutes. An analytical approach including Kriging and adaptive sampling allowed for a sufficient number of finite element analysis (FEA) impact simulations to be completed using minimal computation time. The combination of a persistence counter of 10 and an acceleration threshold of approximately 57.3 ft/s2 resulted in an impact performance factor of safety (FOS) of 1.0 and a safety FOS of approximately 2.6 for touchdown declaration. An RCS termination acceleration threshold of approximately 53.1 ft/s(exp)2 with a persistence counter of 10 resulted in an increased impact performance FOS of 1.2 at the expense of a lowered under-parachutes safety factor of 2.2. The resulting tuned algorithm was then tested on data from eight Capsule Parachute Assembly System (CPAS) flight tests, showing an experimental minimum safety FOS of 6.1. The formulated touchdown detection algorithm will be flown on the Orion MPCV FSW during the Exploration Flight Test 1 (EFT-1) mission in the second half of 2014.

Daum, Jared↗

Calibrating Accelerometers Using an Electromagnetic Launcher

A Pulse Forming Network (PFN), Helical Electromagnetic Launcher (HEML), Command Module (CM), and Calibration Table (CT) were built and evaluated for the combined ability to calibrate an accelerometer. The PFN has a maximum stored energy of 19.25 kJ bank and is fired by a silicon controlled rectifier (SCR), with appropriate safety precautions. The HEML is constructed out of G-10 fiberglass and is designed to accelerate 600 grams to 10 meters per second. The CM is microcontroller based running Arduino Software. The CM has a keypad input and 7 segment outputs of the bank voltage and desired voltage. After entering a desired bank voltage, the CM controls the charge of the PFN. When the two voltages are equal it allows the fire button to send a pulse to the SCR to fire the PFN and in turn, the HEML. The HEML projectile's tip hits a target that is held by the CT. The CT consists of a table to hold the PFN and HEML, a vacuum chuck, air bearing, velocity meter and catch pot. The Target is held with the vacuum chuck awaiting impact. After impact, the air bearing allows the target to fall freely for the velocity meter to get an accurate reading. A known acceleration is determined from the known change in velocity of the target. Thus, if an accelerometer was attached to the target, the measured value can be compared to the known value.

47 OTHER INSTRUMENTATION↗

Probabilistic Multi-Hazard Performance Assessment of Concrete Structures in Nuclear Installations

Concrete structures in nuclear installations are subject to time-dependent degradation mechanisms that can deteriorate their physical and mechanical properties, potentially exacerbating the risk of structural failure under external forces such as a seismic event. Previous research has extensively investigated the seismic response of nuclear concrete structures and the associated risk, as well as their effect on structural components safety margins. However, substantial work is still necessary to incorporate concrete aging effects into such evaluations. In fact, most models in the literature assume pristine concrete conditions and do not account for the impact of aging on the structural components’ fragility curves. This work identifies relevant time-dependent degradation mechanisms and provides simplified models to predict the the evolution of key material properties based on data from the literature. Namely, this work focuses on the aging effects of corrosion, alkali–silica reaction (ASR), and irradiation on reinforced concrete within US Department of Energy (DOE) nuclear facilities and nuclear power plants (NPP) structures. Furthermore, degradation models based on literature data are presented that define the relationship between probabilistic material properties and the concrete’s age. In this work, sampled material properties served as input for a simplified finite element model (FEM) of a critical nuclear structural system, with the output of the FEM being the seismic response for a given ground motion. The results of the FEM were then used within a probabilistic performance assessment with a statistically significant number of samples. The research presented herein addresses the detrimental effects of hazards caused by natural phenomena on deteriorated concrete elements of nuclear installations. This work directly benefits the safety analysis performed on US DOE/ National Nuclear Security Administration (NNSA) nuclear facilities located in areas prone to seismic activity. The results presented herein could aid in the improvement of DOE-STD-1020, the DOE Standard that addresses seismic risk analysis and capacity evaluation in DOE facilities. DOE-STD-1020 refers to the requirements in American Society of Civil Engineers (ASCE) 4-98, now superseded by ASCE 4-16, that shall be met in performing dynamic response analyses and generating in-structure response spectra, provided that such requirements are consistent with the requirements of ASCE/Structural Engineering Institute (SEI) 43-05. Moreover, the results presented herein could also aid in the updating of section C3.1.1. of ASCE 4-16 to account for the effects of aging on the stiffness of reinforced elements and American Concrete Institute (ACI) 349.3R-18, “Report on Evaluation and Repair of Existing Nuclear Safety-Related Concrete Structures.” Ultimately, this work can assist the risk assessment of potential lifetime extension of the existing US commercial nuclear fleet (light water reactors) and the safety analysis of the emerging advanced nuclear reactors. The proposed proof-of-concept methodology employs open-source DOE computational tools and is transferable to commercial software commonly used by engineering firms.

42 ENGINEERING↗

The Strengths and Weaknesses of Logic Formalisms to Support Mishap Analysis

The increasing complexity of many safety critical systems poses new problems for mishap analysis. Techniques developed in the sixties and seventies cannot easily scale-up to analyze incidents involving tightly integrated software and hardware components. Similarly, the realization that many failures have systemic causes has widened the scope of many mishap investigations. Organizations, including NASA and the NTSB, have responded by starting research and training initiatives to ensure that their personnel are well equipped to meet these challenges. One strand of research has identified a range of mathematically based techniques that can be used to reason about the causes of complex, adverse events. The proponents of these techniques have argued that they can be used to formally prove that certain events created the necessary and sufficient causes for a mishap to occur. Mathematical proofs can reduce the bias that is often perceived to effect the interpretation of adverse events. Others have opposed the introduction of these techniques by identifying social and political aspects to incident investigation that cannot easily be reconciled with a logic-based approach. Traditional theorem proving mechanisms cannot accurately capture the wealth of inductive, deductive and statistical forms of inference that investigators routinely use in their analysis of adverse events. This paper summarizes some of the benefits that logics provide, describes their weaknesses, and proposes a number of directions for future research.

Johnson, C. W.↗

Component based approach to modeling for model checking

This paper presents a portion of an overall research project on the generation of a software security assessment instrument to aid developers in assessing and assuring the security of software in the development and maintenance lifecycles.

security toolset model checking security safety fo↗