Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 991 records · Page 55

Description and Use of SCALE Sampler Parametric Capability for Engineering Analysis and Optimization

The Sampler sequence was introduced into the SCALE nuclear modeling and simulation suite in SCALE 6.2 to perform uncertainty quantification via random sampling of nuclear data, material number densities, and dimensions. Sampler was expanded with the introduction of a parametric capability in SCALE 6.2.2. This paper discusses input for the Sampler parametric sequence and presents two case studies of analyses performed using the sequence. These case studies include preconceptual design of a package for transporting high assay low-enriched uranium (HALEU) oxide and scoping calculations to support subcritical limit development for a future update of the ANSI/ANS-8.1 (ANS-8.1) standard. The parametric capability within Sampler provides many benefits to analysts. For instance, parametric sweeps are frequently used to identify optimum parameter values as part of safety analysis or system design, but such sweeps can require substantial engineering time or may rely on custom-written scripts or scripts such as Write One, Run Many (or WORM) developed outside of any software quality assurance program. With the parametric capabilities in Sampler, however, a large number of inputs can be generated automatically without recourse to scripting by individual analysts. The parametric capability can also be used in lieu of the CSAS5S search sequence to identify optimum parameters more simply with straightforward inputs and outputs. Sampler can also be used to calculate input parameters from engineering specifications. For example, diameters can be converted to radii, or masses can be used to calculate number densities. Overall, the Sampler parametric capability provides a robust feature within SCALE, eliminating the need for user-developed scripting.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Structural Design and Analysis of the Upper Pressure Shell Section of a Composite Crew Module

This paper presents the results of the structural design and analysis of the upper pressure shell section of a carbon composite demonstration structure for the Composite Crew Module (CCM) Project. The project is managed by the NASA Engineering and Safety Center with participants from eight NASA Centers, the Air Force Research Laboratory, and multiple aerospace contractors including ATK/Swales, Northrop Grumman, Lockheed Martin, Collier Research Corporation, Genesis Engineering, and Janicki Industries. The paper discusses details of the upper pressure shell section design of the CCM and presents the structural analysis results using the HyperSizer structural sizing software and the MSC Nastran finite element analysis software. The HyperSizer results showed that the controlling load case driving most of the sizing in the upper pressure shell section was the internal pressure load case. The regions around the cutouts were controlled by internal pressure and the main parachute load cases. The global finite element analysis results showed that the majority of the elements of the CCM had a positive margin of safety with the exception of a few hot spots around the cutouts. These hot spots are currently being investigated with a more detailed analysis. Local finite element models of the Low Impact Docking System (LIDS) interface ring and the forward bay gussets with greater mesh fidelity were created for local sizing and analysis. The sizing of the LIDS interface ring was driven by the drogue parachute loads, Trans-Lunar Insertion (TLI) loads, and internal pressure. The drogue parachute loads controlled the sizing of the gusset cap on the drogue gusset and TLI loads controlled the sizing of the other five gusset caps. The main parachute loads controlled the sizing of the lower ends of the gusset caps on the main parachute fittings. The results showed that the gusset web/pressure shell and gusset web/gusset cap interfaces bonded using Pi-preform joints had local hot spots in the Pi-preform termination regions. These regions require a detailed three-dimensional analysis, which is currently being performed, to accurately address the load distribution near the Pi-preform termination in the upper and lower gusset caps.

Sleight, David W.↗

Software Verification and Validation Guidelines for Non-Linear Soil-Structure Interaction Analysis

Seismic analysis of structures, systems, and components (SSCs), including the consideration of soil-structure interaction (SSI) effects, is an important and required step in the design and licensing of nuclear power plant SSCs important to safety. Historically, the SSI analysis of nuclear structures has been performed using equivalent linear methods. However, there has been considerable industry investment in alternative seismic design and analysis approaches to reduce the construction cost of new reactors. Toward that goal and in alignment with the Licensing Modernization Project (LMP) framework, the Nuclear Regulatory Commission (US NRC) has proposed a risk-informed, performance-based approach to seismic design that allows inelastic response in those nuclear plant structures not required for confinement. As a complementary effort, reactor designers are exploring nonlinear seismic analysis methods to optimize structural designs and reduce construction costs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Light Water Reactor Sustainability Program: Grizzly Year-End Progress Report

The Grizzly software application is being developed under the Light Water Reactor Sustainability (LWRS) program to address aging and material degradation issues that could potentially become an obstacle to life extension of nuclear power plants beyond 60 years of operation. Grizzly is based on INL’s MOOSE multiphysics simulation environment, and can simultaneously solve a variety of tightly coupled physics equations, and is thus a very powerful and flexible tool with a wide range of potential applications. Grizzly, the development of which was begun during fiscal year (FY) 2012, is intended to address degradation in a variety of critical structures. The reactor pressure vessel (RPV) was chosen for an initial application of this software. Because it fulfills the critical roles of housing the reactor core and providing a barrier to the release of coolant, the RPV is clearly one of the most safety-critical components of a nuclear power plant. In addition, because of its cost, size and location in the plant, replacement of this component would be prohibitively expensive, so failure of the RPV to meet acceptance criteria would likely result in the shutting down of a nuclear power plant. The current practice used to perform engineering evaluations of the susceptibility of RPVs to fracture is to use the ASME Master Fracture Toughness Curve (ASME Code Case N-631 Section III). This is used in conjunction with empirically based models that describe the evolution of this curve due to embrittlement in terms of a transition temperature shift. These models are based on an extensive database of surveillance coupons that have been irradiated in operating nuclear power plants, but this data is limited to the lifetime of the current reactor fleet. This is an important limitation when considering life extension beyond 60 years. The currently available data cannot be extrapolated with confidence further out in time because there is a potential for additional damage mechanisms (i.e. late blooming phases) to become active later in life beyond the current operational experience. To develop a tool that can eventually serve a role in decision-making, it is clear that research and development must be perfomed at multiple scales. At the engineering scale, a multiphysics analysis code that can capture the thermomechanical response of the RPV under accident conditions, including detailed fracture mechanics evaluations of flaws with arbitrary geometry and orientation, is needed to assess whether the fracture toughness, as defined by the master curve, including the effects of embrittlement, is exceeded. At the atomistic scale, the fundamental mechanisms of degradation need to be understood, including the effects of that degradation on the relevant material properties. In addition, there is a need to better understand the mechanisms leading to the transition from ductile to brittle fracture through improved continuum mechanics modeling at the fracture coupon scale. Work is currently being conducted at all of these levels with the goal of creating a usable engineering tool informed by lower length-scale modeling. This report summarizes progress made in these efforts during FY 2013.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Wetware, Hardware, or Software Incapacitation: Observational Methods to Determine When Autonomy Should Assume Control

Control-theoretic modeling of human operator's dynamic behavior in manual control tasks has a long, rich history. There has been significant work on techniques used to identify the pilot model of a given structure. This research attempts to go beyond pilot identification based on experimental data to develop a predictor of pilot behavior. Two methods for pre-dicting pilot stick input during changing aircraft dynamics and deducing changes in pilot behavior are presented This approach may also have the capability to detect a change in a subject due to workload, engagement, etc., or the effects of changes in vehicle dynamics on the pilot. With this ability to detect changes in piloting behavior, the possibility now exists to mediate human adverse behaviors, hardware failures, and software anomalies with autono-my that may ameliorate these undesirable effects. However, appropriate timing of when au-tonomy should assume control is dependent on criticality of actions to safety, sensitivity of methods to accurately detect these adverse changes, and effects of changes in levels of auto-mation of the system as a whole.

Trujillo, Anna C.↗

Open Innovation for a NASA Architecture Library

NASA’s Center of Excellence for Collaborative Innovation (CoECI) uses open innovation, or “crowdsourcing”, to access the global public to find ideas, concepts, designs, or solutions that meet a previously unmet need possibly resulting in significant advances in performance. The Center of Excellence for Collaborative Innovation was launched at the request of the White House Office of Science and Technology Policy. This is both a non-traditional method of innovation and a non-traditional method of outreach to the public to involve them in space technologies and programs. It has been used often for software development and new hardware technology. In this case we applied it to innovate with systems engineering tools for creating space architectures. The challenge was sponsored by NASA Engineering and Safety Center Systems Engineering Technical Fellow as part of a program for NASA’s adoption of MBSE. It was a trial to see if there would be as much participation or quality submissions with this more specialized topic and skill. The challenge sought space architecture representations and decompositions to create a library of modeled parts in a system modeling language (SysML). Mission architects mostly start from scratch to build model elements representing the functional and physical architecture of a system in SysML. There are a few beginning libraries, but these are also local to a program or group. A common library will save system engineers a large amount of time, will allow project stakeholders to recognize common graphics and quickly understand the architecture options. The challenge was promoted internationally, especially through professional organizations and universities with a systems engineering focus. It was open for 4 months, purposefully over the winter holiday break time to allow participants extra time outside of work or school. The challenge was designed so that expertise in space hardware was not necessary but getting to play with models of space architecture could provide motivation to participate. We did not receive as many entries as other broader outreach challenges, but the ones we received were extremely thorough and high quality. Solutions came from individuals and teams, students and professional consultants from the United States and Europe. We learned a few lessons about how to engage with the public and what characteristics of a problem result in good crowdsourcing results. The outreach challenge produced several useful ideas and modeled space elements, and the group will be engaging the winners to learn more about their new approaches.

innovation↗

Design and fabrication of a stereoscopic rear-viewing endoscopic tool (MARVEL)

The use of minimally invasive neurosurgical techniques has experienced a growing interest among patients and surgeons alike due their the numerous advantages over more traditional operations. Current methods employ the use either rigid or articulating endoscopes, both of which are inserted through a small diameter opening in the skull near the intended surgical region. Although these devices aid the surgeon in viewing the operating site, they are severely limited by their inability to provide dimensional awareness to the user. The Multi-Angle Rear-Viewing Endoscopic TooL (MARVEL) has been designed such that the compact form of existing endoscopes is maintained while also providing the user with an enhanced 3-dimensional stereo view. The design of the alpha prototype for MARVEL was completed over the course of three months. In parallel with development, the device's optics were characterized and several software programs were generated. Once assembled, MARVEL will hold many advantages over existing endoscopic tools. It is expected that the device will greatly outperform its traditional counterparts by both increasing safety and decreasing the duration of surgical procedures. After completion, the device will be demonstrated to the project sponsors at the Skull Base Institute where it will undergo full evaluation and a feasibility analysis.

Strongrich, Andrew↗

A Decision Support System for Extravehicular Operations Under Significant Communication Latency

Humanity hopes to perform extravehicular activities (EVAs) on the surface of Mars; however, several technical and operational challenges must first be overcome. Foremost among these challenges is managing a significant communication latency between Earth and Mars. Current and historical paradigms of EVA operations have required near-real-time communication between the crewmember(s) and Earth-based mission control. Nextgeneration operational paradigms for supporting deep space exploration will necessitate a distributed decision authority system, including delayed Earth-based mission control, the onplanet extravehicular crewmember(s), and intermediate mission support from intravehicular (IV) crewmember(s) within real-time communication range. This latter group is of particular interest: they must provide operations support without the plentiful resources available to mission control on Earth. Thus, NASA is developing the Personalized EVA Informatics and Decision Support (PersEIDS) software platform. PersEIDS is designed to bolster operator situational awareness and offload operator workload by automatically tracking and projecting consumables usage over an EVA timeline, providing real-time probabilistic safety assessments and recommending alternative EVA timeline(s) when the active timeline is not expected to be completed under consumables limits. The PersEIDS concept of operations, use cases, and models will be presented. A limited version of PersEIDS was demonstrated during a three-day-long study where each day a roughly four-hour-long simulated Martian EVA was performed in virtual reality at the NASA Johnson Space Center. The first day was a control trial without PersEIDS support; the second and third days represented different levels of decision support provided by PersEIDS to the IV crewmember acting as mission control. With PersEIDS support, the IV crewmember was able to manage the mission to completion faster and with more remaining consumables; however, additional testing is required to understand confounding factors, e.g., training bias.

Mars↗

PersEIDS: A Biomedical Decision Support System for Extravehicular Operations Under Significant Communication Latency

Humanity hopes to perform extravehicular activities (EVAs) on the surface of Mars; however, several technical and operational challenges must first be overcome. Foremost among these challenges is managing a significant communication latency between Earth and Mars. Current and historical paradigms of EVA operations have required near-real-time communication between the crewmember(s) and Earth-based mission control. Nextgeneration operational paradigms for supporting deep space exploration will necessitate a distributed decision authority system, including delayed Earth-based mission control, the onplanet extravehicular crewmember(s), and intermediate mission support from intravehicular (IV) crewmember(s) within real-time communication range. This latter group is of particular interest: they must provide operations support without the plentiful resources available to mission control on Earth. Thus, NASA is developing the Personalized EVA Informatics and Decision Support (PersEIDS) software platform. PersEIDS is designed to bolster operator situational awareness and offload operator workload by automatically tracking and projecting consumables usage over an EVA timeline, providing real-time probabilistic safety assessments and recommending alternative EVA timeline(s) when the active timeline is not expected to be completed under consumables limits. The PersEIDS concept of operations, use cases, and models will be presented. A limited version of PersEIDS was demonstrated during a three-day-long study where each day a roughly four-hour-long simulated Martian EVA was performed in virtual reality at the NASA Johnson Space Center. The first day was a control trial without PersEIDS support; the second and third days represented different levels of decision support provided by PersEIDS to the IV crewmember acting as mission control. With PersEIDS support, the IV crewmember was able to manage the mission to completion faster and with more remaining consumables; however, additional testing is required to understand confounding factors, e.g., training bias.

Mars↗

Full Lunar Surface Visualization and Simulation Platform

This project created a visualization and simulation software platform for the entire lunar surface. Given the polar Artemis landing targets, the challenging terrain, lighting, and associated integrated crew / vehicle risk assessment, a more integrated approach to mission safety certification, potentially impacting equipment design and crew activity is required. This integrated capability will enable Safety and Mission Assurance (SMA), Flight Operations (FOD), and EVA to effectively collaborate to reduce human lunar exploration operational risk utilizing the identical tools to perform mission planning, rehearsal simulations, and providing the Safety Review Panel with integrated risk analysis capability.

information fusion↗

Acquisition and Implementation of a Comprehensive Environmental Permits Linking Tool at Savannah River Site - 20234

Historically, Savannah River Nuclear Solutions LLC (SRNS) tracked environmental regulatory commitments and the requirements from hundreds of permits at the Savannah River Site (SRS) using several separate methods, making integrated compliance assurance cumbersome and labor-intensive. When SRNS experienced an increase in environmental issues in 2017, SRNS management and U.S. Department of Energy - Savannah River (DOE-SR) management decided a single, proactive approach was needed to capture environmental permit information (including regulations, Consent Orders, DOE Orders, and any other state or federally issued statement of requirements), track the tasks necessary to ensure compliance with these requirements, and thereby mitigate the risk of noncompliance. SRNS developed a list of mandatory objectives that the tool must meet to function as a Comprehensive Environmental Permits Linking Tool (CEPLT). A key requirement was the ability to map Site permits to their governed locations and display the associated requirements at the compliance point (e.g., outfall, stack, waste unit, etc.). Several options included modifying existing onsite resources, building a custom onsite solution, purchasing an off-the-shelf solution, and contracting an offsite developer to build a custom solution. SRNS concluded an off-the-shelf solution with configuration and customization options would provide the flexibility to fit the unique needs of Savannah River Site (SRS) while taking advantage of industry-tested software and providing a reduced deployment timeline. SRNS chose Gensuite{sup R} a, a cloud-based solution that offers numerous a la carte applications in the environmental, health, and safety arenas, as the best candidate. SRNS selected three (3) integrated applications (Compliance Calendar, Permit Manager, and Mapper) to function as the CEPLT. The Compliance Calendar module allows for creation and tracking of regulatory commitment tasks assigned to responsible environmental professionals. Permit Manager organizes permits and other requirement documents, linking the commitments in each to Compliance Calendar tasks and/or implementing procedures. Mapper provides GIS capability for mapping the data from the other two modules to their physical onsite locations. The CEPLT was configured to allow for other SRS Site Tenants to eventually utilize the applications. Additionally, DOE-SR uses the CEPLT to provide an overview of contractor environmental compliance activities and to organize DOE-specific documents and tasks. The CEPLT fulfilled the requirement of meeting current compliance needs as well as providing the ability to grow as new organizations are incorporated and functionality is expanded. SRNS now uses the CEPLT to more effectively manage permit requirements, improve knowledge transfer, and increase the Site's overall protection of the environment, the Site worker, and the public. Possible future uses of the system include integration of mobile applications for timely communication of potential non-compliant conditions and DOE complex-wide deployment allowing for enhanced DOE site and Head Quarters oversight. Implementation of CEPLT will result in cost savings, both in terms of dollars and man-hours. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Trajectory Specification Applied to Terminal Airspace

Despite major efforts to automate air traffic control (ATC), it is still performed by humans today. The complexity and safety-criticality of ATC makes it very difficult to safely automate, but it must be automated to increase airspace capacity (the density of traffic that can be safely managed) and airport throughput (the number of arrivals and departures that an airport can safely handle in a given period of time) beyond what is possible with human controllers. This paper presents the Trajectory Specification (TS) concept, which can help to safely automate ATC. TS is a method of specifying aircraft trajectories such that the position at any given time in flight is restricted to a precisely defined bounding space, removing all ambiguity as to where the flight is allowed to be. The bounding space or volume is determined by tolerances relative to a reference trajectory (position as a function of time). The tolerances are dynamic and are based on the aircraft navigation capabilities and the traffic situation. The tolerances can be a piecewise linear function of time or distance along the route, allowing the tolerances to vary as needed, typically increasing with time for departures and decreasing for arrivals. A Trajectory Specification Language (TSL) is proposed for communicating trajectories from aircraft to ATC as requests and from ATC to aircraft as assignments. The TS concept requires a new generation of airborne Flight Management Systems (FMS) that understand the TSL and can fly the assigned trajectories, but this paper focuses on the ATC functions and the prototype ATC algorithms and software that were developed to test the TS concept. Assuming conformance, TS can guarantee safe separation for an arbitrary length of time even in the event of an ATC system or communication outage. It can help to achieve the high level of safety and reliability needed for ATC automation, and it can also reduce the reliance on ATC backup systems for tactical conflict detection and resolution during normal operation. TS can be applied to any controlled airspace, including enroute, terminal, and urban airspace, but this paper presents algorithms and software for arrival spacing and conflict detection and resolution in the terminal airspace serving a major airport. In a fast-time simulation of a full day of traffic in a major terminal airspace, all conflicts were resolved in near real time, demonstrating the computational feasibility and the preliminary operational feasibility of the TS concept. This paper is a compilation of previous papers, and it adds significant information that was omitted from those papers due to length limitations. It also updates some of the results of those earlier papers due to algorithm refinements and corrections of minor software errors.

air traffic control, trajectory↗

The effectiveness of pretreatment physics plan review for detecting errors in radiation therapy

Purpose: The pretreatment physics plan review is a standard tool for ensuring treatment quality. Studies have shown that the majority of errors in radiation oncology originate in treatment planning, which underscores the importance of the pretreatment physics plan review. This quality assurance measure is fundamentally important and central to the safety of patients and the quality of care that they receive. However, little is known about its effectiveness. The purpose of this study was to analyze reported incidents to quantify the effectiveness of the pretreatment physics plan review with the goal of improving it. Methods: This study analyzed 522 potentially severe or critical near-miss events within an institutional incident learning system collected over a three-year period. Of these 522 events, 356 originated at a workflow point that was prior to the pretreatment physics plan review. The remaining 166 events originated after the pretreatment physics plan review and were not considered in the study. The applicable 356 events were classified into one of the three categories: (1) events detected by the pretreatment physics plan review, (2) events not detected but “potentially detectable” by the physics review, and (3) events “not detectable” by the physics review. Potentially detectable events were further classified by which specific checks performed during the pretreatment physics plan review detected or could have detected the event. For these events, the associated specific check was also evaluated as to the possibility of automating that check given current data structures. For comparison, a similar analysis was carried out on 81 events from the international SAFRON radiation oncology incident learning system. Results: Of the 356 applicable events from the institutional database, 180/356 (51%) were detected or could have been detected by the pretreatment physics plan review. Of these events, 125 actually passed through the physics review; however, only 38% (47/125) were actually detected at the review. Of the 81 events from the SAFRON database, 66/81 (81%) were potentially detectable by the pretreatment physics plan review. From the institutional database, three specific physics checks were particularly effective at detecting events (combined effectiveness of 38%): verifying the isocenter (39/180), verifying DRRs (17/180), and verifying that the plan matched the prescription (12/180). The most effective checks from the SAFRON database were verifying that the plan matched the prescription (13/66) and verifying the field parameters in the record and verify system against those in the plan (23/66). Software-based plan checking systems, if available, would have potential effectiveness of 29% and 64% at detecting events from the institutional and SAFRON databases, respectively. Conclusions: Pretreatment physics plan review is a key safety measure and can detect a high percentage of errors. However, the majority of errors that potentially could have been detected were not detected in this study, indicating the need to improve the pretreatment physics plan review performance. Suggestions for improvement include the automation of specific physics checks performed during the pretreatment physics plan review and the standardization of the review process.

60 APPLIED LIFE SCIENCES↗

Hydrogen Plus Other Alternative Fuels Risk Assessment Models (HyRAM+) (Technical Reference Manual V.4)

The HyRAM+ software toolkit provides a basis for conducting quantitative risk assessment and consequence modeling for hydrogen, methane, and propane infrastructure and transportation systems. HyRAM+ is designed to facilitate the use of state-of-the-art science and engineering models to conduct robust, repeatable assessments of safety, hazards, and risk. HyRAM+ includes generic probabilities for equipment failures, probabilistic models for the impact of heat flux on humans and structures, and experimentally validated first-order models of release and flame physics. HyRAM+ integrates deterministic and probabilistic models for quantifying accident scenarios, predicting physical effects, and characterizing hazards (thermal effects from jet fires, overpressure effects from delayed ignition), and assessing impact on people and structures. HyRAM+ is developed at Sandia National Laboratories to support the development and revision of national and international codes and standards. HyRAM+ is a research software in active development and thus the models and data may change. This report will be updated at appropriate developmental intervals. This document provides a description of the methodology and models contained in HyRAM+ version 4.0. The most significant change for HyRAM+ version 4.0 from HyRAM version 3.1 is the incorporation of other alternative fuels, namely methane (as a proxy for natural gas) and propane into the toolkit. This change necessitated significant changes to the installable graphical user interface as well as changes to the back-end Python models. A second major change is the inclusion of physics models for the overpressure associated with the delayed ignition of an unconfined jet/plume of flammable gas.

02 PETROLEUM↗

RELAP-7 Simulation Resolving an SBO Scenario on a Simplified Geometry of a BWR

The RELAP-7 code is the next generation nuclear reactor system safety analysis code being developed at the Idaho National Laboratory (INL). RELAP-7 will become the main reactor systems toolkit for the Risk-Informed Safety Margin Characterization Pathway of the Light Water Reactor Sustainability Program and the next generation tool in the RELAP reactor safety/systems analysis application series (i.e., the replacement for RELAP5). The code is being developed based on Idaho National Laboratory’s modern scientific software development framework – MOOSE (the Multi-Physics Object-Oriented Simulation Environment). During Fiscal Year 2013, a number of physical components with two-phase flow capability have been developed to support the simplified boiling water reactor (BWR) station blackout analyses. The case selected for demonstration calculation is built from the specifications documented in an Organization for Economic Cooperation and Development benchmark problem for BWR turbine trip analysis. The reference design for the benchmark problem was from the Peach Bottom-2 nuclear station, which is a General Electric BWR-4 design. The demonstration case includes the major components for the primary system of a BWR, as well as the safety system components for reactor core isolation cooling (RCIC) and the wet well of a BWR containment. The case was initially run to steady-state with RELAP-7. The station blackout transient simulations were subsequently initiated by using the INL-developed RAVEN code. Two scenarios for the station blackout simulations have been considered. Scenario I represents an extreme station blackout accident with no safety injection functioning. The reactor core could experience dry out fairly quickly with this scenario. Scenario II represents a more probable station blackout accident progression with the RCIC system functioning. In this scenario, the RCIC system is fully coupled with the reactor primary system and the safety injection to provide makeup cooling water to the reactor core from the suppression pool is dynamically simulated. With the RCIC system functioning, the core dry out is significantly postponed when compared to the results from Scenario I. This fully coupled RCIC system simulation capability represents the first-of-a-kind simulation capability. Sensitivity studies have also been carried out to study the effect of RCIC control strategy with varying core makeup cooling water mass flow rates. The next stage of development will be to demonstrate more refined BWR station blackout analyses with more realistic geometries, to be reported in the next demonstration simulation report.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

A new template for developing C++ applications in NASA's Core Flight System

In this presentation, we will demonstrate an example Core Flight System (cFS) application written in C++, compatible with the Draco releases of the Core Flight Executive (cFE) and NASA Operating System Abstraction Layer (OSAL). The application boilerplate, supporting library, and associated generation script were recently developed and licensed under the permissive Apache License 2.0 with the goal of easing the cFS app development with C++. The design and features of this application will be presented, including a higher-level interface for interactions with the cFE software bus pipes, tables, and event services. Data structures are provided for centralized telecommand and telemetry parsing which isolates bookkeeping of message components from the calling code in an application's core logic. Specific advantages of writing a cFS application in C++ will be shown, including easier avoidance of symbol collisions via namespaces, expanded compile-time checks via constant expressions, default initialization for data structures, null safety via references, improved syntax for operating on multi-dimensional arrays, and reliable serialization of enumerations via enumeration classes. Special considerations needed for integrating a C++ application will be identified, including function linkage, exceptions, and stack unwinding. Evidence for the usefulness of this template will be discussed in the context of development of a flight software application used for interfacing with a solid-state data recorder.

Dominick Allen↗

Assessment of Cloud-based Applications for Enabling a Scalable Riskinformed Predictive Maintenance Strategy

The current light-water reactor fleet uses time-based maintenance strategies to achieve high-capacity factors. But to make nuclear more competitive in the energy market, these reactors could utilize emerging artificial intelligence (AI) and cloud computing technologies to achieve a cost-effective, predictive-maintenance strategy. This paper presents discussion and results on the application of cloud computing in the nuclear industry. The technical viability of cloud computing was analyzed using data from a boiling-water reactor’s safety relief valve. The models were hosted on three different systems: a local personal computer, Idaho National Laboratory’s high-performance computer system, and Microsoft Azure. The data were loaded and processed, and two types of models were trained in an A/B fashion. Based on the speed at which these actions were completed, it was determined that cloud computing affords adequate computing resources. Additionally, the computing power can scale with the demanded load. To enable cloud computing in the existing fleet, additional sensors, networks, and other requirements must be implemented to ensure a smooth transition from current maintenance strategies. However, the benefit is that the plants no longer need to manage their own servers, software, cybersecurity, and information technology support staff for in-house data analytics purpose. Many of these features can be offloaded to the cloud provider for a potential cost savings. Demonstrating how AI can improve the maintenance and operation of non-safety-related systems seems the likely path forward for implementing AI and cloud computing resources inside nuclear power plants.

azure↗

A novel priority selection system for nuclear power plant - 287

The priority selection system is an important component of security level instrument control platform for nuclear power plant, the main function of which is priority processing the manual or automatic command with various security levels and driving engineering safety features and field devices, such as pump and valve. Its stability and safety plays a crucial role in the operation of the power plant. The main objective of the present paper is to describe the new nuclear power plant-oriented priority selection system, which is developed independently by China Nuclear Control System Engineering Company. In this system, the control commands from 1E DCS, ECP and DAS systems are transmitted via hardwire, while those from NC DCS are transmitted by field-bus. The control commands experience priority output to control the field actuators. Meanwhile, in order to control key field devices when failure of the instrument control systems occurs, the issuing interface for native instructions with permissions setting is also offered. The whole system provides collection-feedback functions for field devices, high coverage self-diagnostic functions and periodic test functions for safety systems. Moreover, the feedback information of field devices, the results of self-diagnosis and periodic test will be submitted to DCS of nuclear power plant. In addition, the core part of priority selection system, namely priority selection module, is obtained by pure FPGA technology, which is different from DCS systems and could avoid common cause failure of software effectively. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗