Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 973 records · Page 54

SBIR Phase II Final Report - A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities

This is the Final Report for the DOE Phase II SBIR project “A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities.” The topics covered herein include technical progress made, progress against the planned milestones and deliverables, project outcomes, and a discussion on future expectations of deployment and impacts of the results of this work. In brief, all planned work for the project was successfully completed, on or ahead of schedule and on budget. The major accomplishment was the successful development of new sensor/communications systems with wideband (WB)/ultra-wideband (UWB) communications based on the software-defined-radio (SDR) technology to improve sensing and control in nuclear power plants and then a broad range of similar sensing applications. The impacts of these disciplines/focuses of this SBIR include: A new multi-frequency SDR-based architecture with WB/UWB communications integrated with sensors was developed, utilizing 310 MHz, 450 MHz, 915 MHz, and 5 GHz frequencies; Secure communications using Advanced Encryption Standard (AES) algorithm; Sensing possibilities not effectively addressed by previous technologies was addressed; and, The newly developed wireless sensor communications system can adapt its communications parameters to its operational environment for optimal performance. The performance of this system has been evaluated by systematic laboratory and field testing. The field testing was conducted at Massachusetts Institute of Technology (MIT)’s Nuclear Test Reactor, and the McClellan Nuclear center at the University of California Davis (UC Davis), as well as at Oak Ridge National Laboratory (ORNL). The success in this project resulted in DSI being awarded “The DOE’s 2018 SBIR/STTR Small Business of the Year”. This technology has attracted interest from The Rolls Royce company with ongoing discussions under NDA for potential strategic partnership between DSI and Rolls Royce in providing wireless sensor communications in nuclear facilities. Furthermore, the success of this project has attracted significant interest from the United Nations International Atomic Agency (IAEA) in Vienna, Austria, as well as other DOE and DOD offices. Currently, per request from IAEA, DOE’s office of International Safeguards has funded DSI to develop a WB/UWB wireless communication system for real-time transmission of images from IAEA’s safeguards cameras in various nuclear facilities. DSI also has received a Phase II and Phase II.5 SBIR awards from ARMY and NAVY for wireless communications capability for various DOD aircraft.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Risk Management for Distributed Energy Resources

The National Institute of Standards and Technology will be hosting on Tuesday, February 2 and Wednesday, February 3, 2021, the second workshop in a new series focusing on the Open Security Controls Assessment Language. NREL extended the scope of the DERCF to include the NIST Risk Management Framework (RMF), addressing the challenges faced by federal energy managers when complying with the NIST RMF for DER systems. The NIST RMF is a cyclical process designed to incorporate principles of security and risk management into an organization’s system policies and procedures. The DER-RM will be downloadable application that runs locally and documents all the major requirements for achieving Authority to Operate the DER.

cybersecurity↗

Nontraditional Sensors for Aqueous Separation Research & Workforce Development

Idaho National Laboratory’s (INL) nuclear fuel cycle capabilities enable the deployment of technologies that sustain the current reactor fleet, support demonstration and deployment of new advanced reactors, and facilitate management and disposition of existing and future radiological waste materials. INL focuses on deploying nuclear energy systems with confidence by decreasing proliferation risk through research that demonstrates process transparency and supports safeguards and security by design. An example of these capabilities is the Beartooth test bed, set to begin operations toward the end of fiscal year 2026. Beartooth will include a cascade of centrifugal contactors, glove box lines, and solidification and dissolution equipment to aid in the progression of novel separation techniques and to provide hands-on experience to cultivate and maintain a robust workforce of experts. To support Beartooth’s enhanced instrumentation and monitoring equipment needs, several nontraditional sensors are being considered for future deployment. The non-traditional sensors include accelerometers, acoustic microphones, and infrared cameras. These nontraditional sensors have the potential to not only help monitor the process but also enhance nuclear safeguards.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

Non-nuclear Component Signatures for Warhead Dismantlement Confirmation

The verification of warhead dismantlement is expected to be an important component in future arms reduction treaties. Historic approaches developed with future arms control treaty verification in mind often involve intrusive measurements, process monitoring, and/or inspector presence to provide confidence that an authentic warhead has been dismantled. This work explores the possibility of reducing the negative impacts of these invasive approaches while also delivering a method that is more likely to provide non-sensitive data that can be shared with not only other nuclear weapons states but also non-nuclear weapons states partners. This work explores a novel approach for verifying dispositioned non-nuclear weapon components, providing confidence post-dismantlement that a treaty accountable item that was dismantled was in fact a treaty-relevant nuclear weapon system as declared. This method provides an alternative to intrusive inspection processes in nuclear weapons production environments, which would require significant changes to the host’s operational behaviors. It achieves this by identifying intrinsic neutron-induced signatures of non-nuclear components to determine their authenticity and estimate the duration they were exposed within a nuclear weapons system using technologies that are already in use for other national security applications. Intrinsic radiation effects studies are already a part of the stockpile aging and surveillance evaluations. However, none of these technologies and approaches have been previously considered for verification applications of non-nuclear component disposition. In this report, we introduce modeling studies that have been used to identify the most promising candidate parts and materials with signatures that are measurable and actionable. These models have been validated with laboratory measurements of signatures induced by the exposure of candidate materials to neutrons over a range of times. Predictive modeling then demonstrates the methodology for estimating exposure times and/or limits. Laboratory measurements of authentic non-nuclear parts from a dismantled warhead demonstrate the feasibility of employing these signature measurements. And finally, a concept of operations (CONOPS) for the potential use of this methodology is presented.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

CHP Integrated with Burners for Packaged Boilers (Final Report)

The objective of this project was to engineer, design, fabricate, and field demonstrate a Boiler Burner Energy System Technology (BBEST) that integrates a low-cost, clean burning, gas-fired simple-cycle (unrecuperated) 100 kWe (net) microturbine (SCMT) with a new ultra low-NOx gas-fired burner (ULNB) into one compact Combined Heat and Power (CHP) product that can be retrofit on new and existing industrial and commercial boilers in place of conventional burners. The Scope of Work for this project was segmented into two principal phases: (Phase I) Hardware development, assembly and pre-test and (Phase II) Field installation and demonstration testing. Phase I was divided into five technical tasks (Task 2 to 6). These tasks covered the engineering, design, fabrication, testing and optimization of each key component of the CHP system principally, ULNB, SCMT, assembly BBEST CHP package, and integrated controls. Phase I work culminated with the laboratory testing of the completed BBEST assembly prior to shipment for field installation and demonstration. Phase II consisted of two remaining technical tasks (Task 7 and 8), which focused on the installation, startup, and field verification tests at a pre-selected industrial plant to document performance and attainment of all project objectives. Technical direction and administration was under the management of CMCE, Inc. Altex Technologies Corporation lead the design, assembly and testing of the system. Field demonstration was supported by Leva Energy, the commercialization firm founded by executives at CMCE and Altex. Leva Energy has applied for patent protection on the BBEST process under the trade name of Power Burner and holds the license for the burner currently used in the product. The commercial term Power Burner is used throughout this report to refer to the BBEST technology proposed for this project. The project was co-funded by the California Energy Commission and the Southern California Gas Company (SCG), a division of Sempra Energy. These match funds were provided via concurrent contracts and investments available via CMCE, Altex, and Leva Energy The project attained all its objectives and is considered a success. CMCE secured the support of GI&E from Italy to supply 100 kW Turbec T-100 microturbines for the project. One was purchased by the project’s subcontractor, Altex, and a second spare was purchased by CMCE under this project. The microturbines were then modified to convert from their original recuperated design to a simple cycle configuration. Replacement low-NOx silo combustors were designed and bench tested in order to achieve compliance with the California Air Resources Board (CARB) 2007 emission limits for NOx and CO when in CHP operation. The converted microturbine was then mated with a low NOx burner provided by Altex via an integration section that allowed flow control and heat recovery to minimize combustion blower requirements; manage burner turndown; and recover waste heat. A new fully integrated control system was designed and developed that allowed one-touch system operation in all three available modes of operation: (1) CHP with both microturbine and burner firing for boiler heat input greater than 2 MMBtu/hr; (2) burner head only (BHO) when the microturbine is under service; and (3) microturbine only when boiler heat input requirements fall below 2 MMBtu/hr. This capability resulted in a burner turndown performance of nearly 10/1, a key advantage for this technology over conventional low NOx burners. Key components were then assembled into a cabinet with additional support systems for generator cooling and fuel supply. System checkout and performance tests were performed in the laboratory. The assembled system and its support equipment were then shipped and installed at a host facility where final performance tests were conducted following efforts to secure fabrication, air, and operating permits. The installed power burner is now in commercial operation and has achieved all the performance goals.

20 FOSSIL-FUELED POWER PLANTS↗

Cybersecurity Lessons Learned from Vehicle to Grid Engagement

As the transportation industry continues to become electrified, introduction of additional digital devices within associated actions such as recharging bring additional potential for cybersecurity attacks. Devices that are designed, implemented, and operated with cybersecurity as a crucial consideration exacerbate these concerns by failing to provide strict boundaries on access to and use of the equipment. Emerging use cases such as Vehicle to Grid (V2G) charging may expand the potential physical effects of a cybersecurity attack by providing indirect access to electrical components of a building microgrid or portions of the larger power grid. This paper serves as an overview of findings and recommendations based on cybersecurity testing performed at a V2G implementation site operated by a member of the Memorandum of Understanding (MOU) to Establish the Vehicle-to-Everything (V2X) Collaboration [1]. The Department of Energy Office of Cybersecurity, Energy Security, and Emergency Response is a signatory of the MOU, and has funded this research paper and associated body of work regarding V2X cybersecurity. Sandia has a large background of previous research focused on Electric Vehicle (EV) cybersecurity, such as reference [2], which includes an overall survey of EV infrastructure cybersecurity and recommendations based on those findings. This report seeks to expand knowledge of EV cybersecurity status and needs by focusing on a specific implementation of V2G charging, and providing recommendations based on the relevant findings. This report serves as a publicly available, sanitized description of applied vulnerability testing on an operational V2G implementation. A more in-depth technical version of the report is provided to the MOU partner, but not available at the time of writing due to inclusion of proprietary information. V2G charging comes with many research problems that must be solved before the technology can securely implemented in sites with unrestricted public access or where cybersecurity attacks could have increased consequences, such as government offices. V2G charging requires many stakeholders such as end users, host sites, equipment vendors, and integrators, which all rely on operational safety and security as well as security and trustworthiness of any associated financial transactions.

33 ADVANCED PROPULSION SYSTEMS↗

High-Altitude ADS-B Flight Tests on a NASA ER-2 Research Airplane

Researchers at the National Aeronautics and Space Administration (NASA) Armstrong Flight Research Center (Edwards, California); the Federal Aviation Administration (FAA); and Regulus Group, LLC (Atlantic City, New Jersey) collaborated for the flight-test demonstration of an Automatic Dependent Surveillance-Broadcast (ADS-B) system equipped on a high-altitude Earth Resources-2 (ER-2) research airplane. The unique ER-2 airplane is a NASA-owned and operated airborne science version of the United States Air Force / Lockheed Martin Aeronautics (Bethesda, Maryland) U-2S airplane. The FAA has mandated that by the year 2020, aircraft operating within certain sections of the United States National Airspace system be equipped with ADS-B Out technology; the research presented in this paper is the first to show how the NASA ADS-B architecture satisfies the mandate for a unique high-altitude aircraft. An exceptional military aircraft design, security protocols, and the performance envelope of the ER-2 airplane made the avionics integration remarkably challenging. The design required the ADS-B avionics to survive the harsh flight environment of the ER-2 airplane. The most prominent challenge was the functional integration of modern civilian avionics into federated military legacy avionics. Flight-test objectives were to certify an ADS-B Out (1090ES) passive surveillance integrated with a Traffic Alert and Collision Avoidance System (TCAS) I active surveillance system on an ER-2 platform for high-altitude cruise operations. In April 2022, NASA conducted three flights at Edwards Air Force Base (Edwards, California) - each greater than one-hour flight reaching altitudes above 60,000 ft.

ADS-B↗

Autonomous System Subversion Tactics: Prototypes and Recommended Countermeasures

One of the fielding requirements for Advanced and Small Modular Reactors (AR/SMR) is the ability to support remote and autonomous operations. Autonomous Control Systems (ACS) are found on platforms such as Autonomous Space Vehicles, Cruise Missiles, and advanced driver-assistance systems. Each of these ACS implementations depends upon a set of decision support subsystems responsible for supporting Autonomous Mission Managers (names vary based upon field and author preferences). These Autonomous Mission Managers receive inputs from system sensors (e.g., LIDAR collection from an automobile travelling down a street; transients from a nuclear reactor), and perform a set of classifications (e.g., Red Traffic Light; Small Pedestrian at 10m; Load Rejection; Single Coolant Pump Trip), and then use these classifications in combination with recommendation algorithms to achieve platform goals (e.g., Stop the Vehicle at the Traffic Light, Avoid the Small Pedestrian; Trip the Reactor to prevent a Safety Event). The design, implementation, and fielding of an ACS capability will alter the cyber-attack surface such that existing risk management plans will need to be updated to include how to protect and defend against data-science and decision-support-system attack classes. These attack classes would include protection of the design and training environments where algorithm selection and testing and training data would be obvious attack vectors. These attack classes would also require an informed set of detection and response procedures to identify anomalous behaviors and document best practices for anomaly assessment and vulnerability mitigation and remediation. Last year we published a Cyber Threat Assessment Methodology for Autonomous and Remote Operations for AR/SMRs along with a companion publication on Cyber Attack and Defense Use Cases. The focus of the methodology was on describing and enumerating ACS processes, components, and functions such that security engineers could: evaluate subversion options against the target; identify threat actor attributes and capabilities derived from each subversion option; and identify security controls and response countermeasures. The Use Cases document offered detailed methodology examples including an assessment of a Military Base SMR, an Autonomous System Decision Loop, and implementation of AR/SMR Machine Learning algorithms. Our proposal at the end of last year was to focus on implementation of subversion prototypes related to the last Use Case area: AR/SMR Machine Learning (ML) Algorithms. We included six attack scenarios in our Use Cases paper: a Poisoning Attack against ML functions implemented using an FPGA; a Trojaning Attack against ML classifiers exploiting the excitability of Nuclear Engineers; a Backdooring Attack against ML Training environments to ensure persistence of an attack vector; a False Positive Evasion Attack against multi-factor Access Control Systems using clever inputs; an Inference Attack against ML models by an Insider with access to the Operational environment; and an Adversarial Reprogramming Attack against a Material Access Control Video Surveillance System. At the beginning of this year these six attack scenarios were provided to our research teams at Georgia Tech and Idaho State University and each team successfully implemented a subversion attack against a ML implementation to include transient misclassifications. While this is a notable outcome from this type of research, this paper offers the reader insight into not only how to structure and execute these types of attacks, but into the thought process behind how the researcher investigated the problem space, performed initial algorithm implementation, and the trial-and-error behind arriving at the successful subversion prototypes. We include in this paper a set of associated Scenarios on how these subversion prototypes could be implemented and an initial set of guidance for AR/SMR architects, Nuclear Regulators, and Cyber Defenders to implement awareness and defense capabilities into their current operational portfolios.

42 ENGINEERING↗

Thermal Assessment of OSIRIS-REx OVIRS Cryogenic Instrument During Flight System TVAC Test and in Flight

The Origins, Spectral Interpretation, Resource Identification, Security, Regolith Explorer (OSIRIS-REx) Visible and Infrared Spectrometer (OVIRS) is a cryogenic instrument. At the Outbound Cruise nominal spacecraft attitude, sunlight impinges on several multilayer insulation blankets on the forward deck. It is reflected or scattered to other components on the deck. This solar illumination adds heat load to the OVIRS, and causes its detector temperature to exceed the 105K maximum operating allowable flight temperature limit by 0.8K. During the flight system thermal vacuum test, the solar simulator beam reflected or scattered from the test fixtures to the OVIRS added non-flight heat load. The detector temperature was 9K warmer than that in flight. At those temperatures, the science data was acceptable, despite its quality was not as high as that of 105K or colder.

"OSIRIS-REx; OVIRS; cryogenic instrument; parasiti↗

Issues and Methods for Assessing COTS Reliability, Maintainability, and Availability

Many vendors produce products that are not domain specific (e.g., network server) and have limited functionality (e.g., mobile phone). In contrast, many customers of COTS develop systems that am domain specific (e.g., target tracking system) and have great variability in functionality (e.g., corporate information system). This discussion takes the viewpoint of how the customer can ensure the quality of COTS components. In evaluating the benefits and costs of using COTS, we must consider the environment in which COTS will operate. Thus we must distinguish between using a non-mission critical application like a spreadsheet program to produce a budget and a mission critical application like military strategic and tactical operations. Whereas customers will tolerate an occasional bug in the former, zero tolerance is the rule in the latter. We emphasize the latter because this is the arena where there are major unresolved problems in the application of COTS. Furthermore, COTS components may be embedded in the larger customer system. We refer to these as embedded systems. These components must be reliable, maintainable, and available, and must be with the larger system in order for the customer to benefit from the advertised advantages of lower development and maintenance costs. Interestingly, when the claims of COTS advantages are closely examined, one finds that to a great extent these COTS components consist of hardware and office products, not mission critical software [1]. Obviously, COTS components are different from custom components with respect to one or more of the following attributes: source, development paradigm, safety, reliability, maintainability, availability, security, and other attributes. However, the important question is whether they should be treated differently when deciding to deploy them for operational use; we suggest the answer is no. We use reliability as an example to justify our answer. In order to demonstrate its reliability, a COTS component must pass the same reliability evaluations as the custom components, otherwise the COTS components will be the weakest link in the chain of components and will be the determinant of software system reliability. The challenge is that there will be less information available for evaluating COTS components than for custom components but this does not mean we should despair and do nothing. Actually, there is a lot we can do even in the absence of documentation on COTS components because the customer will have information about how COTS components are to be used in the larger system. To illustrate our approach, we will consider the reliability, maintainability, and availability (RMA) of COTS components as used in larger systems. Finally, COTS suppliers might consider increasing visibility into their products to assist customers in determining the components' fitness for use in a particular application. We offer ideas of information that would be useful to customers, and what vendors might do to provide it.

Schneidewind, Norman F.↗

Orbit Determination Strategy and Simulation Performance for OSIRIS-REx Proximity Operations

The Origins Spectral Interpretation Resource Identification Security Regolith Explorer (OSIRISREx)is a NASA New Frontiers mission to the near-earth asteroid Bennu that will rendez vousin 2018, create a comprehensive and detailed set of observations over several years, collect a regolith sample, and return the sample to Earth in 2023. The Orbit Determination (OD) team isa sub-section of the Flight Dynamics System responsible for generating precise reconstructions and predictions of the spacecraft trajectory. The OD team processes radiometric data, LIDAR, as well as center-finding and landmark-based Optical Navigation images throughout the proximity operations phase to estimate and predict the spacecraft location within several meters. Stringent knowledge requirements stress the OD teams concept of operations and procedures to produce verified and consistent high quality solutions for observation planning, maneuver planning, and onboard sequencing. This paper will provide insight into the OD concept of operations and summarize the OD performance expected during the approach and early proximity operation phases,based on our pre-encounter knowledge of Bennu. Strategies and methods used to compare and evaluate predicted and reconstructed solutions are detailed. The use of high fidelity operational tests during early 2017 will stress the teams concept of operations and ability to produce precise OD solutions with minimal turn-around delay.

Leonard, Jason M.↗

Some Aeronautical Communications Experiments

Classically there has existed an asymmetry between the computing and communicating sides of aerospace systems. Over the past few decades, this asymmetry has shifted to favoring communication link technologies, meaning that advancements in available central processing units (CPUs), storage devices, and internal data buses have stagnated. Indeed, the increased emphasis placed on refining subsystem performance such as with antenna bandwidth in phased arrays, amplifier power efficiency, software defined radio (SDR) flexibility and encoding for data compression and error correction has given rise to successful debuts of multi-gigabit-per-second data return from long space-link distances. These accomplishments are easily quantifiable through link budgets and illustrate what is possible, but also reveal the deficiencies in overall communications capabilities. In particular, the ever-accelerating presence of aerospace vehicles gives rise to newer and larger classes of challenges to address the needs of 21st century systems. Furthermore remote sensing and imaging capabilities have far outpaced our ability to transmit their products to the ground, so we are increasingly dependent on pre-processing and downselection to contend with the communications bottleneck. No longer may we depend upon the constrained logistics in delivering end-to-end data delivery through manual reconfigurations, static event scheduling and execution on a per-vehicle basis, for these methods do not scale and therefore must give way to dynamic, networked approaches with an overall systems view in mind. Emerging mission requirements exhibit a trend toward multiple smaller-scale vehicles working together to perform dissimilar observations. Such operations necessitate sensor fusion across a constellation, and where data processing may be distributed throughout a fairly disconnected network whose topology changes over time in non-deterministic manners. Individual communications link performance is still very relevant to deploying an effective communications system, but now must be embedded within a greater architecture of capability to optimally utilize the bandwidth available from each link to generate an ultimate end-to-end quality of service. The deleterious effects of timing uncertainty across the arrangement presents a challenge to measurement synchronization and delivery, so a successful deployed system needs to be tolerant to the delays inherent in time-of-light between elements and digital processing latencies existing at each node. In this presentation we share the flight test results from a high performance Gbps laser communications terminal evaluated with a suite of store and forward capabilities called High-rate Delay Tolerant Networking (HDTN). The communications payload is operated over Lake Erie across a range of configurations including several convergence layers, and is evaluated to determine recovery time after link disruptions, information loss, efficiency and speed. The effectiveness of utilizing a flying laboratory to increase the Technology Readiness Level (TRL) of an integrated system in relevant environments is discussed, as well as the value of conducting aeronautics experiments to retire risk for technology infusion into space missions. Upcoming flight campaigns will be presented, including opportunities to demonstrate secure command and control, data intensive hyperspectral imaging, quantum link characterization, 4k High Definition (HD) video streaming and internetworked space-ground-aero relay operations. These experiments will pave the way for future missions which will depend upon interoperability across disparate government and privately owned networks, involve contention with uncertain and dynamic timing, and require agility to autonomously configure optimal parameters across networks of ever-increasing size and complexity to ensure data delivery. https://www1.grc.nasa.gov/space/scan/acs/tech-studies/dtn/

Daniel Raible↗

Demand Response and Smart Buildings: A Survey of Control, Communication, and Cyber-Physical Security

In this paper, we perform a comprehensive survey of the technical aspects related to the implementation of demand response and smart buildings. Specifically, we discuss various smart loads such as heating, ventilating, and air-conditioning (HVAC) systems and plug-in electric vehicles (PEVs); the power architecture with multibus characteristics; different control algorithms such as the hybrid centralized and decentralized control and the distributed coordination among buildings; the communication technologies and network architectures; and the potential cyber-physical security issues and possible mechanisms for enhancing the system security at both cyber and physical layers. Finally, the current status of the demand response in United States, Europe, Japan, and China is reviewed, and the benefits, costs, and challenges of implementing and operating demand response and smart buildings are also discussed.

42 ENGINEERING↗

The First Human Trial of Transoral Robotic Surgery Using a Single-Port Robotic System in the Treatment of Laryngo-Pharyngeal Cancer

Background: This study aimed to evaluate the feasibility and safety of the DaVinci SP system for performing transoral robotic surgery (TORS) in patients with head and neck cancer. Methods: From October 2018 to April 2019, the medical records of 41 patients who underwent TORS using the DaVinci SP system were retrospectively reviewed. Results: During TORS, three robotic arms could be used to perform a geometric resection of the lesion in a narrow working space. The mean total operation time was 60 min, and the average time required to set up the robotic system was 10 min or less. All patients successfully underwent TORS. All robotic arms were inserted through a single port, which widened the working space around the patient’s head and allowed the operative assistant an easy approach to the patient during the operation. The joggle joint of the robotic arms aided easy manipulation within the confined working space. The joggle joints of the endoscopic arm were controlled through the navigation system, which was very helpful in securing superior visualization of the surgical site, especially in the area of the larynx and the hypopharynx. Conclusion: The study confirmed that the DaVinci SP system provided technical advantages above the Si and Xi systems for performing TORS. It was especially helpful in ensuring proper visualization of the surgical field and in performing precise surgery during surgery to the tongue base or the hypopharyngeal lesion.

62 RADIOLOGY AND NUCLEAR MEDICINE↗

Impact of Distributed Energy Resources on the Bulk Electric System: Combined Modeling of Transmission and Distribution Systems and Benchmark Case Studies

The high penetration of distributed energy resources (DERs) on modern distribution systems introduces intermittent power generation, stochastic system operating conditions, and bi-directional power flows that impact the system responses to various types of disturbances and may pose challenges to the operations and reliability of the Bulk Electric System (BES). In order to understand the impact of DERs on the planning and operation of the BES, the distribution system can no longer be represented as a single load at a node on the transmission system. At the same time, advanced control capabilities of DERs offer potential opportunities for improving BES reliability by transforming DERs from a passive “do no harm” resource to an active “support reliability” resource when applied in a planned and well-thought-out manner. This concept is often described as DER “flexibility.” With the persistent trend towards a high- penetration of DERs in distribution systems, regulators such as the North American Electric Reliability Corporation (NERC), planning coordinators and grid operators are in serious need of understanding the full-spectrum impact of DERs on the BES to ensure secure and reliable grid planning and operations.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Common Communications, Navigation and Surveillance Infrastructure for Accommodating Space Vehicles in the Next Generation Air Transportation System

Suborbital space flight and space tourism are new potential markets that could significantly impact the National Airspace System (NAS). Numerous private companies are developing space flight capabilities to capture a piece of an emerging commercial space transportation market. These entrepreneurs share a common vision that sees commercial space flight as a profitable venture. Additionally, U.S. space exploration policy and national defense will impose significant additional demands on the NAS. Air traffic service providers must allow all users fair access to limited airspace, while ensuring that the highest levels of safety, security, and efficiency are maintained. The FAA's Next Generation Air Transportation System (NextGen) will need to accommodate spacecraft transitioning to and from space through the NAS. To accomplish this, space and air traffic operations will need to be seamlessly integrated under some common communications, navigation and surveillance (CNS) infrastructure. As part of NextGen, the FAA has been developing the Automatic Dependent Surveillance Broadcast (ADS-B) which utilizes the Global Positioning System (GPS) to track and separate aircraft. Another key component of NextGen, System-Wide Information Management/ Network Enabled Operations (SWIM/NEO), is an open architecture network that will provide NAS data to various customers, system tools and applications. NASA and DoD are currently developing a space-based range (SBR) concept that also utilizes GPS, communications satellites and other CNS assets. The future SBR will have very similar utility for space operations as ADS-B and SWIM has for air traffic. Perhaps the FAA, NASA, and DoD should consider developing a common space-based CNS infrastructure to support both aviation and space transportation operations. This paper suggests specific areas of research for developing a CNS infrastructure that can accommodate spacecraft and other new types of vehicles as an integrated part of NextGen.

VanSuetendael, RIchard↗

Obfuscated authentication systems, devices, and methods

Embodiments of the present invention are directed toward authentication systems, devices, and methods. Obfuscated executable instructions may encode an authentication procedure and protect an authentication key. The obfuscated executable instructions may require communication with a remote certifying authority for operation. In this manner, security may be controlled by the certifying authority without regard to the security of the electronic device running the obfuscated executable instructions.

97 MATHEMATICS AND COMPUTING↗

Power Hardware-in-the-Loop (PHIL) Testing Facility for Distributed Energy Storage (Poster)

The growing deployment of distributed, variable generation and evolving end-user load profiles presents a unique set of challenges to grid operators responsible for providing reliable and high quality electrical service. Mass deployment of distributed energy storage systems (DESS) has the potential to solve many of the associated integration issues while offering reliability and energy security benefits other solutions cannot. However, tools to develop, optimize, and validate DESS control strategies and hardware are in short supply. To fill this gap, NREL has constructed a power hardware-in-the-loop (PHIL) test facility that connects DESS, grid simulator, and load bank hardware to a distribution feeder simulation.

25 ENERGY STORAGE↗