Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,027 records · Page 57
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

A Decision Support System for Extravehicular Operations Under Significant Communication Latency

Within the next few decades, humanity hopes to perform extravehicular activities (EVAs) on the surface of Mars; however, several technical and operational challenges must first be overcome. Foremost among these challenges is managing a significant two-way communication latency between Earth and Mars. Current and historical paradigms of EVA operations have required near-real-time communication between the crewmember(s) performing an EVA and an Earth-based mission control. Next-generation operational paradigms for supporting deep space exploration will necessitate a distributed decision authority system, including delayed Earth-based mission control, the on-planet extravehicular crewmember(s), and intermediate mission support from intravehicular crewmember(s) within real-time communication range. This latter group is of particular interest: they must provide operations support without the plentiful resources available to mission control on Earth. For this purpose, NASA is developing the Personalized EVA Informatics and Decision Support (PersEIDS) software platform. PersEIDS is designed to bolster operator situational awareness and offload operator workload by automating the tracking and projection of consumables usage over an EVA timeline, providing real-time probabilistic safety assessments of an EVA timeline given consumables constraints, and recommending alternative EVA timeline(s) when the active timeline is not expected to be completed under consumables limits. The PersEIDS concept of operations, use cases, and models will be presented. A limited version of PersEIDS was demonstrated during a three-day-long study where each day a roughly four-hour-long simulated Martian EVA was performed in virtual reality at the NASA Johnson Space Center. The first day was a control trial without PersEIDS support; the second and third days represented different levels of decision support provided by PersEIDS to the intravehicular crewmember acting as mission control. With PersEIDS support, the IV crewmember was able to manage the mission to completion faster and with more remaining consumables; however, additional testing is required to understand confounding factors, e.g. training bias.

Mars↗
NASA NTRSDate not supplied

Design and Analysis of the Rocket Experiment Demonstration of a Soft X-Ray (REDSoX) Polarimeter Mirror Module Assembly

The Rocket Experiment Demonstration of a Soft X-ray (REDSoX) Polarimeter is a NASA sounding rocket experiment that is designed to demonstrate the technology necessary for measuring linear X-ray polarization as a function of energy below 1 keV. In astrophysics, soft X-ray spectropolarimetry will be used to probe the nature of acceleration mechanisms in quasar jets and to test models of neutron star structure. NASA Marshall Space Flight Center (MSFC) has designed a grazing-incidence mirror module assembly (MMA) for the REDSoX payload and used Finite Element Modelling Software (ANSYS) to perform structural analysis of the design. In this paper we will describe the overall design of the REDSoX MMA, details of the analysis techniques used for predicting factor of safety in the mirror adhesive bonds and structural components, the buckling analysis of the outer housing, and the raytrace technique used to estimate the effect of gravity sag on optical performance during ground testing.

Structural Analysis↗
DOE OSTI2016

Common Cause Failure Mitigation Experience on Digital I and C System in NPP

CCF is failures of redundant or separate structures, systems, or components due to a shared root cause. The CCF includes those are resulted from severe environments, design errors, calibration and maintenance errors, and consequential failures. In addition, digital I and C systems can be vulnerable to CCF caused by software errors or software developed logic, which could defeat the redundancy achieved by the hardware architecture. Therefore, diversity and defense in-depth (D3) has become an important issue to overcome the CCF of the safety I and C system. The U.S. NRC has established regulatory guidance addressing a method for assessing D3 provided by the safety I and C system architecture at a NPP. This method enables determination of whether vulnerabilities to CCF have been adequately addressed. The guidance is included in BTP 7-19 and Chapter 7 of NUREG-0800. The regulatory guidance provides a methodology for designing diversity. APR1400 establishes the mitigating strategies that consider the characteristics of digital I and C system that contribute to the potential for CCF. The diversity strategies consist of a combination of diversity attributes and associated criteria to address potential CCF vulnerabilities in digital safety I and C system. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2021

Simulated Versus Measured UHF Radiated Power at LaRC Street Level

The Airspace Operations and Safety Program, System-Wide Safety Project /Technical Challenge 2 – Emerging Operations at NASA Langley aims to increase the flight safety of unmanned aerial vehicles (UAV’s) by informing UAV operators of regions of airspace where the radio frequency (RF) power at designated frequencies exceeds threshold values, indicating possible damage or interference with on-board systems. WinProp electromagnetic simulation software, a commercially available ray tracing program, has been implemented to predict radiated power from known RF sources. As a test case, the NextNav geolocation system, with nine transmitters operating at 926.227 MHz, was selected and modeled together with other existing structures at Langley. The radiated power at street level was calculated and compared with measurements taken at street level by a Signal Hound receiver and an Electro-Metrics antenna mounted on a van. The two sets of results generally agreed to within about 5 dB.

electromagnetic simulation↗
DOE OSTI2016

SU-G-IeP4-05: Experience with a Practical Approach to the Release of Radioactive Patients from Radiation Safety Isolation

Purpose: The radioactive patient releases of the nuclear medicine department in a large cancer center were analyzed to compare the estimated doses to others to the regulatory limit and institutional targets and to gauge how onerous the patients’ instructions were. Methods: In-house software that implements the NUREG 1556 approach and further considers fellow travelers, children and pregnant women and members of the public following Siegel, et al., is used to calculate release timing and to provide patients with individualized instructions. A retrospective analysis of the 218 releases in 2015 that required instructions included all I-131 and Lu-177 treatments. Results: There were 87 male and 131 female patients. They were 45.5±16.5 (8-84) years old, weighed 83.3±21.8 kg and stood 168±10 cm tall with a body mass index of 29.3±6.7 kg/m2. 195 patients received 2.96±2.23 GBq of I-131-NaI for differentiated thyroid carcinoma and eight received 636±231 MBq of I-131-NaI for hyperthyroidism. There were eight administrations of 18.5 GBq of I-131-mIBG and seven administrations of 7.4 GBq of Lu-177-DOTATATE. The dose to the most exposed person was 1.67±1.05 (mode=0.60, median=1.15) mSv. The dose to a fellow traveler was 0.31±0.31 (mode=0.1, median=0.17) mSv. The dose to children and pregnant women was 0.51±0.34 (mode=1.0, median=0.42) mSv. The duration of isolation was 7.7±17.3 (mode=2, median=1.7) hours. The duration of sleeping alone was 60.4±127 (mode=0, median=15.5) hours. The time to delay traveling was 12.2±11 (mode=median=0) hours. The time to completely avoid children and pregnant women was 23.3±26.5 (0–254, mode=median=24) hours followed by limited contact for 20.6±68.1 (0–491, mode=median=0) hours. The time to avoid others (e.g., to wait to return to work) was 12.1±101 (0–1465, mode=median=0) hours. Conclusion: The estimated doses to others were often well below the limits set by regulation, 5 mSv, or prudent practice, 1 mSv. Most patients’ instructions were not hard to comply with.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2015

Education and training in the field of nuclear instrumentation and measurement: CEA/INSTN (National Institute for Nuclear Sciences and Technologies) strategy to improve and develop new pedagogical tools and methods

Part of the French Alternative Energies and Atomic Energy Commission (CEA), the National Institute for Nuclear Science and Technology (INSTN) is a higher education institution whose mission is to provide students and professionals a high level of scientific and technological qualification in all disciplines related to nuclear energy applications. In this frame, INSTN carries out education and training (E and T) programs in nuclear instrumentation and radioprotection. Its strategy has always been to complete theoretical courses by training courses and laboratory works carried out on an extensive range of training tools that includes a large panel of nuclear instrumentation as well as software applications. Since its creation in 1956, the INSTN has conducted both education and vocational programs on ionizing radiation detection. An extensive range of techniques have commonly been used during practical works with students and employees of companies who need to get the knowledge and specialization in this field. Today, the INSTN is mainly equipped with usual detectors and electronics in large numbers in order to be able to accommodate up to 48 trainees at the same time in two classrooms, with only two trainees for one workstation in order to optimize their learning. In the field of the neutron detection systems, the INSTN has strongly developed its offer taking advantage of the use of research reactors, such as ISIS reactor (700 kW) at Saclay. The implementation of neutron detection systems specific to the courses offers a unique way of observing and analysing the signal coming from neutron detectors, as well as learning how to set the parameters of the detection system in real conditions. Providing the trainees with an extensive overview of each part of the neutron monitoring instrumentation apply to a nuclear reactor, hands-on measurements on the ISIS reactor play a major role in ensuring a practical and comprehensive understanding of the neutron detection system and their integration in the safety system of nuclear reactors. It also gives a solid background for the follow up and the development of the neutron detection systems. Another field of activity of the INSTN is the development of new teaching tools using software applications. We describe hereafter two applications that have recently been developed by the institute, O.S.I.R.I.S and DOSIMEX. The INSTN and the company OREKA have developed an innovative teaching tool named O.S.I.R.I.S. The tool is built on a virtual 3D environment in which users operate in a totally free way. The action is located in a pressurised water reactor in the environment of a steam generator building. The users are students or professionals who want to learn and train on concrete situations on how to protect the workers against radiation. Through the use of this serious game, users must: establish a predictive dose evaluation, implement the principles of radiation protection, perform the dose result of the operation, analyse the gap between the predictive collective dose and the collective dose achieved, and decide about the lessons to provide feedback. Taking into account the increasing constraints related to radiation protection, it is essential to use computer codes to evaluate the dose rates generated by sources of ionizing radiation. Many powerful codes exist but are often relatively complex to implement and are dedicated to experts. In addition, these codes are often 'black boxes' that does not allow the user to understand the underlying physics. The objective of DOSIMEX codes developed by the INSTN is to give, by the means of a VBA code with a simple interface, the ability to easily conduct a wide range of radiological exposure situations: calculation of gamma, beta, neutron equivalent dose rate, calculation of internal contamination and atmospheric transfer.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2014

SU-E-I-10: Automatic Monitoring of Accumulated Dose Indices From DICOM RDSR to Improve Radiation Safety in X-Ray Angiography

Purpose: To investigate the potential benefits of automatic monitoring of accumulated patient and staff dose indicators, i.e., CAK and KAP, from DICOM Radiation Dose Structured Reports (RDSR) in x-ray angiography (XA). Methods: Recently RDSR has enabled the convenient aggregation of dose indices and technique parameters for XA procedures. The information contained in RDSR objects for three XA systems, dedicated to different types of clinical procedures, has been collected and aggregated in a database for over one year using a system developed with open-source software at the Karolinska University Hospital. Patient weight was complemented to the RDSR data via an interface with the Hospital Information System (HIS). Results: The linearly approximated trend in KAP over a time period of a year for cerebrovascular, pelvic/peripheral vascular, and cardiovascular procedures showed a decrease of 12%, 20%, and 14%, respectively. The decrease was mainly due to hardware/software upgrades and new low-dose imaging protocols, and partially due to ongoing systematic radiation safety education of the clinical staff. The CAK was in excess of 3 Gy for 15 procedures, and exceeded 5 Gy for 3 procedures. The dose indices have also shown a significant dependence on patient weight for cardiovascular and pelvic/peripheral vascular procedures; a 10 kg shift in mean patient weight can result in a dose index increase of 25%. Conclusion: Automatic monitoring of accumulated dose indices can be utilized to notify the clinical staff and medical physicists when the dose index has exceeded a predetermined action level. This allows for convenient and systematic follow-up of patients in risk of developing deterministic skin injuries. Furthermore, trend analyses of dose indices over time is a valuable resource for the identification of potential positive or negative effects (dose increase/decrease) from changes in hardware, software, and clinical work habits.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2019

A mathematical programming approach for the optimal placement of flame detectors in petrochemical facilities

Flame detectors provide an important layer of protection for personnel in petrochemical plants, but effective placement can be challenging. A mixed-integer nonlinear programming formulation is proposed for optimal placement of flame detectors while considering non-uniform probabilities of detection failure. We show that this approach allows for the placement of fire detectors using a fixed sensor budget and outperforms models that do not account for imperfect detection. In this study, we develop a linear relaxation to the formulation and an efficient solution algorithm that achieves global optimality with reasonable computational effort. We integrate this problem formulation into the Python package, Chama, and demonstrate the effectiveness of this formulation on a small test case and on two real-world case studies using the fire and gas mapping software, Kenexis Effigy.

47 OTHER INSTRUMENTATION↗
DOE OSTI2019

A Domain-Specific Language for High-Consequence Control Software

While most software development for control systems is directed at what the system is supposed to do (i.e., function), high-consequence controls must account for what the system is not supposed to do (i.e., safety, security and reliability requirements). A Domain Specific Language (DSL) for high-consequence digital controls is proposed. As with similar tools for the design of controls, the DSL will have plug-in modules for common controller functions. However, the DSL will also augment these modules with attendant "templates" that aid in the proof of safety, security and reliability requirements, not available in current tools. The object is to create a development methodology that makes construction of high-assurance control systems as easy as controls that are designed for function alone.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Hazards and Probabilistic Risk Assessments of Advanced Nuclear Reactors Coupled with Industrial Facilities

This report provides a roadmap and tool kit for site specific risk assessments across a broad range of industrial customers co-located with advanced nuclear power plants (ANPP) that are not currently built and operating in the U.S. This report builds upon the body of work sponsored by the Department of Energy (DOE) Integrated Energy Systems Pathway that has produced industrial requirements studies and techno-economic assessments on the topics of feasibility of ANPP supported industrial processes. This report also leverages the DOE Light Water Reactor Sustainability (LWRS) program that has presented hazards assessment and generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors (LWRs) co-located with hydrogen production facilities. Many of the hazard assessments and risk assessments performed for the LWRS report are agnostic to whether the nuclear reactor is an ANPP or were adapted to the ANPP focus. The report performs hazards assessments to include industrial facilities: an oil refinery, a methanol plant, a synthetic fuel (synfuel) plant, the production of synthetic gas (syngas) as part of the methanol and synfuel plants, wood pulp and paper mills, and hydrogen production. Hydrogen production facilities are assessed in depth through prior reports in the LWRS program and the results are leveraged in this report. All these facilities are specified through industrial process and requirements research performed by national laboratories, universities, and interaction with industry. Many of the processes used in this report are pre-conceptual designs to use for decarbonization of the current technology facilities. A process of failure modes and effects analysis (what can go wrong) and accidentology (what has historically gone wrong) was used to determine the hazards presented to the nuclear power plant by the addition of the HES and the industrial customer. Chemical properties of feedstocks and products are summarized as part of the hazards assessment. Example analysis procedures are provided for each of the hazard types identified. These deterministic analyses can be used to assess adherence to licensing criteria. They can also be used to meet other safety goals like protection of the public, workers, or industrial facility equipment. A modular high temperature gas-cooled reactor (MHTGR) PRA only existing on paper was modeled and verified in modern PRA software. This will provide a tool for representative ANPP probabilistic analyses for future research.

10 SYNTHETIC FUELS↗
NASA NTRS2006

An Executable Choreography Framework for Dynamic Service-Oriented Architectures

Interoperability and loose coupling requirements are pushing the next generation of distributed applications towards more decentralized and more dynamic interaction schemes, which the classic requestJresponse communication paradigm can hardly accommodate. Hence, sound foundations and mechanisms for the establishment of unmticiptitteb peer-to-peer interactions across organizational boundaries are of significant importance to upcoming middleware platforms. The Executable Choreography Framework (ECF) is a middleware-level framework that targets dynamic and decentralized service compositions. The ECF combines transparent context propagation with aspect-oriented software composition techniques to dynamically refine the default control and data flow of service invocations. The framework provides a ground for experimentation with dynamic and distributed workflows, and a base to assess their safety and applicability when depioyed across organizational boundaries.

Akkawi, Faisal↗
NASA NTRS2006

Statistical Detection of Atypical Aircraft Flights

A computational method and software to implement the method have been developed to sift through vast quantities of digital flight data to alert human analysts to aircraft flights that are statistically atypical in ways that signify that safety may be adversely affected. On a typical day, there are tens of thousands of flights in the United States and several times that number throughout the world. Depending on the specific aircraft design, the volume of data collected by sensors and flight recorders can range from a few dozen to several thousand parameters per second during a flight. Whereas these data have long been utilized in investigating crashes, the present method is oriented toward helping to prevent crashes by enabling routine monitoring of flight operations to identify portions of flights that may be of interest with respect to safety issues.

Statler, Irving↗
NASA NTRS2013

An Operational Safety and Certification Assessment of a TASAR EFB Application

This paper presents an overview of a Traffic Aware Strategic Aircrew Requests (TASAR) Electronic Flight Bag application intended to inform the pilot of trajectory improvement opportunities while en route that result in operational benefits. The results of safety analyses and a detailed review of Federal Aviation Administration (FAA) regulatory documents that establish certification and operational approval requirements are presented for TASAR. The safety analyses indicate that TASAR has a likely Failure Effects Classification of “No Effect,” and at most, is no worse than “Minor Effect.” Based on this safety assessment and the detailed review of FAA regulatory documents that determine certification and operational approval requirements, this study concludes that TASAR can be implemented in the flight deck as a Type B software application hosted on a Class 2 Portable Electronic Device (PED) Electronic Flight Bag (EFB). This implementation approach would provide a relatively low-cost path to certification and operational approval for both retrofit and forward fit implementation, while at the same time facilitating the business case for early ADS-B IN equipage. A preliminary review by FAA certification and operational approvers of the analyses presented here confirmed that the conclusions are appropriate and that TASAR will be considered a Type B application.

Koczo, Stefan↗
NASA NTRS1989

Computational methods and software systems for dynamics and control of large space structures

The deployment, assembly and mission-oriented maneuvering of space structures in orbit will trigger large motions of flexible, truss-type structures. In addition, the presence of on-board controls both for attitude stabilization and specified vibration tolerance requirements may further complicate the dynamic behavior of the orbiting structures. Because of safety and cost considerations, the dynamic response of the combined structural and control systems must be predicted reliably. This need can only be met through the development of reliable and efficient simulation capabilities, since there is general agreement that on-orbit experiments should be limited because of cost, time and facility constraints. The long-term objective of this research effort is to develop a next-generation computer simulator for the dynamics and control of large space structures. The simulator will be based on integrating four research thrusts: a new multibody dynamics formulation methodology, modeling capabilities in long/slender truss-beam components with realistic joints, efficient computational procedures that can be implemented either in sequential or concurrent computers, and prototype simulation modules that can be easily processed into a modern large-scale engineering software system such as the NASA/Computational Structural Mechanics (CSM) testbed.

Park, K. C.↗
DOE OSTI2025

Transition of SRT Source Term Software to Modern Version Control System to Enable More Efficient Verification, Validation, and User Engagement

The Simplified Radionuclide Transport (SRT) code assists in reactor design and licensing by providing a detailed analysis of radionuclide transport under specific transient scenarios. This analysis is essential for ensuring that reactors meet safety and regulatory standards before they are authorized to operate. Mechanistic source term analysis, which involves a realistic evaluation of radionuclide behavior from the source to the environment, is a key component of this process. It provides a comprehensive understanding of potential release scenarios, supporting the development of robust safety measures.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2012

Preliminary high-fidelity simulation of duct wall deformation in sodium fast reactor subassembly

Computational Fluid Dynamics simulations of nuclear energy systems have received extensive interest and have achieved a certain level of maturity. This gives opportunities for a more realistic mechanical analysis of a sodium fast reactor subassembly that is based on more accurate estimates of pressure and temperature distributions within a subassembly. In fast reactor systems, important reactivity feedbacks can be a result of such subassembly duct wall deformation, with an impact on reactor safety considerations. The structural analysis in this work focuses on the stress-strain distributions in a fast reactor subassembly duct wall that are the result of pressure and temperature gradients across the duct. The RANS-based commercial CFD software STAR-CCM+ was used to perform the structural analysis of the duct wall in a 61-pin subassembly that was irradiated in EBR-II as a lead test subassembly. A loose coupling was performed for the thermal-hydraulics and structural mechanics to reduce the mesh cell number and computation time. It is found that the duct wall displacements are dominated by the thermal expansion, but the stress distributions are dominated by the pressure gradients between the inside and outside of the duct. However, the predicted stresses were far less than the yield stress, indicating large margin to the structural integrity of the non-irradiated duct wall. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS1990

Next manned transportation system

Avionics is the connecting link that integrates the hardware and software which satisfy systems requirements. Issues of the next manned transportation system are outlined: STS evolution; personnel launch system (PLS) sizing issues and constraints; PLS thermal protection system; PLS launch vehicle concepts; reliability and safety; advanced launch systems (ALS); near-term issues; avionics requirements; guideline to reduce operational costs; and critical human factors design considerations.

Erwin, Harry↗
NASA NTRS2002

Real-Time Embedded Software Verification and Validation 2001

As the space applications become more complex and timing constraints on control actions are more stringent, the task of integrating and testing NASA's real-time systems (such as X-38 Crew Return Vehicle, and certain International Space Station autonomous systems) has become a great challenge. A testing environment where can preserve consistent temporal behaviors as in the target execution must be established for system-level verification and software quality assurance. Our goal is to develop an analysis suite for validation and verification of real-time systems that are used to perform human- in-the-loop control operations during safety-critical missions. The suite will be able to carry out quantitative approaches of coverage diagnostic and temporal behavior evaluation in order to measure test coverage, to optimize test utilization, and to verify timing correctness.

Lee, Yann-Hang↗