Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Behavior Based Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Thermal Stability and Outgassing Behaviors of High–nickel Cathodes in Lithium–ion Batteries

LiNiO 2 -based high-nickel layered oxide cathodes are regarded as promising cathode materials for high-energy-density automotive lithium batteries. Most of the attention thus far has been paid towards addressing their surface and structural instability issues brought by the increase of Ni content (>90 %) with an aim to enhance the cycle stability. However, the poor safety performance remains an intractable problem for their commercialization in the market, yet it has not received appropriate attention. In this review, we focus on the gas generation and thermal degradation behaviors of high-Ni cathodes, which are critical factors in determining their overall safety performance. Furthermore, a comprehensive overview of the mechanisms of outgassing and thermal runaway reactions is presented and analyzed from a chemistry perspective. Finally, we discuss the challenges and the insights into developing robust, safe high-Ni cathodes.

25 ENERGY STORAGE↗
DOE OSTI2019

Exploring Intentional Driving Volatility in Naturalistic Driving Environment Prior to Involvement in Unsafe Events

The sequence of instantaneous driving decisions and its variations prior to involvement in safety critical events, defined as event-based volatility, can be a leading indicator of safety. The research issue is characterizing volatility in instantaneous driving decisions in longitudinal and lateral directions, and how it varies across drivers involved in normal driving, crash, and near-crash events. A rigorous quasi-experimental study design is adopted to help compare driving behaviors in normal vs unsafe outcomes. Using a unique real-world naturalistic driving database from the SHRP 2, a test set of 9,593 driving events featuring 2.2 million temporal samples of real-world driving are analyzed. Twenty-four aggregate and segmented driving volatility measures based on acceleration and vehicular jerk are proposed, capturing variations in intentional and unintentional extreme instantaneous driving decisions. Given the possibility of unobserved heterogeneity/omitted variable bias, fixed- and random-parameter discrete choice models are developed that relate crash propensity to driving volatility and other factors. Statistically significant evidence is found that driver volatilities in near-crash and crash events are significantly greater than volatility in normal driving events. After controlling for traffic, roadway, and unobserved factors, the results suggest that greater intentional volatility increases the likelihood of both crash and near-crash events. Importantly, intentional volatility in longitudinal negative jerk has more negative consequences than intentional volatility in positive vehicular jerk. Compared to acceleration/deceleration, vehicular jerk can better characterize the volatility in microscopic driving decisions. The study demonstrates the value of big data analytics for understanding extreme driving behaviors in safe vs. unsafe driving outcomes.

Wali, Behram↗
DOE OSTI2025

Investigating the Role of Accident Tolerant Cladding on Source Term Reduction for High-Burnup PWRs Using MELCOR

The use of accident tolerant fuel (ATF) cladding can increase coping times during and beyond design basis accidents. While such gains may be incremental, they provide a margin that can potentially be recovered to enable high-burnup (HBU) operation. Realizing such a margin requires demonstrating that the combination of HBU and ATF has not led to an overall increase in source term. This study investigates the influence of cladding technology (Zr-based, Cr-coated Zr, and FeCrAl) and fuel cycle length (18 and 24 months) on radiological dose at the boundary of the exclusion zone for a four-loop pressurized water reactor to investigate whether ATF claddings can provide such benefits. We analyze a recovered large break loss-of-coolant accident scenario to investigate the impact of transient timescale on the benefits of such coping time increases. The simulations have been performed using the MELCOR and MELCOR Accident Consequence Code System codes. For the cases analyzed, increased fuel cycle length did not necessarily increase radionuclide release and hydrogen generation, as these were found to be sensitive to the core power distribution. Similarly, off-site dose consequence is dominated by short-lived radionuclides that tend to saturate earlier in the burnup, so higher burnup operation did not necessarily increase the source term for the phenomena and transients analyzed here. Delays in recovery of the lowpressure safety injection system increase hydrogen production and radionuclide release, especially between 780 s and 1620 s, due to the nonlinear oxidation and core degradation behavior. Results show that Cr-coated Zr enhances safety by delaying heatup and gap release. Here, when uncertainty propagation on oxidation properties is considered, FeCrAl exhibits the lowest overall radionuclide release and off-site dose throughout the spectrum. However, while the considered “base model” performance is superior under delayed injection scenarios, upper-bound cases display hydrogen generation risk comparable to the Zr-based cladding.

Accident Tolerant Fuel↗
DOE OSTI2018

Implementation of ANL’s Mechanics Based Evolutionary Fatigue Modeling Through ABAQUS-WARP3D Based High-Performance Computing Framework

This report presents an update on the environmental fatigue research that is being conducted at Argonne National Laboratory in support of the Department of Energy’s Light Water Reactor Sustainability (LWRS) program. Argonne is developing a fully mechanistic fatigue evaluation approach without using empirical fatigue (S~N) curves. This approach is based on the fundamental concept of the time evolution of progressive fatigue damage rather than on the conventional S~N curve approaches using end-of-life data. In FY 2017, we performed extensive validation of this approach with respect to fatigue test data for 316 stainless steel [1]. This validation was performed for different loading cases, including constant, variable, and random amplitude. In the present FY 2018 semi-annual report, we present the further advances of Argonne’s environmental fatigue research work in the context for more practical applications. In this report, we discuss a methodology for fully mechanistic (i.e., not using S~N curves) fatigue life evaluation of reactor components subjected to realistic loading cycles, namely, design-basis loading cycles. The loading cycles include plant heat-up, full-power, and cool-down operations. As a test case, we considered a typical pressurized water reactor surge line, which is made of 316 SS. To perform the fatigue simulation for thousands of fatigue cycles in a computationally cost effective way, we modified our previous desktop-based finite element (FE) modeling approach to work in a high-performance computing (HPC) framework. For the HPC implementation, we developed a hybrid framework based on commercial FE software (ABAQUS), open-source FE software (WARP3D), and Argonne-developed evolutionary cyclic-plasticity modeling methods. We validated this HPC-based cycle-by-cycle damage model for the entire fatigue life of a Pressurized Water Reactor (PWR) surge line (SL) pipe with respect to assumed loading cycles. The simulated fatigue life was found to be 5855 cycles, which is 85% accurate as compared to the corresponding small-specimen-based experimental fatigue life (6914 cycles). Also, the simulated stress history captures the cyclic hardening and softening behavior of the material for entire fatigue cycles. The FE simulation of the PWR SL pipe was conducted in a reasonable time of 12.5 days. These results show the promise that a fully mechanistic (not using S~N curves) fatigue life evaluation of a safety-critical nuclear reactor component (or even other safety critical components like those in aircraft, aero-engines, etc.) is possible. We anticipate that this type of methodology will drastically reduce the uncertainly associated with conventional fatigue life estimates based on empirical S~N curves. We also proposed an FE model that is based on a hybrid full-component and single-element approach and that can readily be used by industry if HPC resources are not available. In this approach, a single-cycle FE simulation has to be performed first for the required loading cycle. Then, the resulting strain/stress profile at the hotspot (highest strain/stress location) is used as input strain/stress loading to the single-element FE model. The single-element FE model is run under multiple fatigue cycles as long as the failure criteria are achieved. The cycle number at failure gives the fatigue life of the component in question. This cost-effective framework does not require expensive HPC hardware and can be performed in a reasonable time by using a desktop computer. We demonstrated this approach with respect to PWR SL fatigue evaluation under two realistic design-basis loading cycles (simple and detailed). The associated results were validated with respect to test data obtained through fatigue testing of uniaxial specimens under the in-air condition at 300 °C. The approach is in the development stage and requires further improvement and validation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Multi-Physics Coupled Seismic Safety Analysis of Molten-Salt Reactors

Pool-type Molten Salt Reactors (MSRs) are a promising advanced nuclear reactor concept relying on passive physical behavior to provide increased safety characteristics. The high heat capacity, high boiling point, unpressurized liquid salt contains the nuclear fuel and as it passes through the vessel achieves criticality and produces nuclear power. The salt then carries away the heat produced along with the delayed neutron precursors towards heat exchangers and primary pumps before entering the core. This forms a highly coupled multiphysics problem between neutronics and fluid flow, which makes modeling these reactors challenging. The safety/licensing case heavily relies on modeling and simulation to prove their safety, and significant effort has been expanded by the Nuclear Energy Advanced Modeling and Simulation (NEAMS) program to develop the appropriate simulation tools. Their safety/licensing will require a thorough analysis of their behavior during earthquake-based transients. Earthquakes are a transient condition commonly experienced in many regions, and are safely survived by dozens of reactors every year. Nonetheless, significant conservatisms were introduced with limited predictive modeling and simulation available. The first-of-a-kind capability developed by this research will allow for engineers to analyze ranges of design-basis and beyond-design basis accident scenarios to assess the integrity of the reactor vessel and surrounding system, possibly allowing for limiting the costly conservatisms in the design. This projects uses MASTODON, Griffin, and Pronghorn in the NEAMS ecosystem to model the coupled multiphysics problem posed by an earthquake in a molten salt reactor. It marches through a number of number of coupling schemes, from uncoupled simulations to tightly two-way coupled simulations. The appropriate level of coupling for these simulations will then be determined based on the accuracy in the quantities of interest (QoI) and computational effort involved in each scheme. The QoIs chosen for this paper include the mass flow rate across the heat exchanger (for Pronghorn simulations), power output of the reactor (for Griffin simulations), and the maximum Von Mises stress (for MASTODON simulations). This summary paper reports on the current progress of this project, with 2D tightly coupled multiphysics results.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2023

Compliant Robotic Behaviors for Satellite Servicing

The demands of traditional industrial robotics differ significantly from those of space robotics. While industry requires robots that can perform repetitive tasks with precision and speed, the space environment needs robots to cope with uncertainties, dynamics, and communication delays or interruptions, similar to human astronauts. These demands make a well-suited application for compliant robotics and behavior-based programming. Pose Target Wrench Limiting (PTWL) is a compliant behavior paradigm developed specifically to meet these demands. PTWL controls a robot by moving a virtual attractor to a target pose. The attractor applies virtual forces, based on stiffness and damping presets, to an underlying admittance controller. Guided by virtual forces, the robot will follow the attractor until safety conditions are violated or success criteria are met. We tested PTWL on a variety of quasi-static tasks that may be useful for future space operations. Our results demonstrate that PTWL is an extremely powerful tool. It makes teleoperation easy and safe for a wide range of quasi-static tasks. It also facilitates the creation of semi-autonomous state machines that can reliably complete complex tasks with minimal human intervention.

Compliance↗
NASA NTRS2023

PE99155 Point-Of-Load Buck Regulator Total Ionizing Dose Test Report

Teledyne’s PE99155 point-of-load buck regulator was tested to evaluate an applicationspecific question about the start-up behavior of the device. This test determined if accumulated total ionizing dose (TID) affected any start-up voltage transient characteristics. Testing was based on pass/fail criterial for the magnitude of the output voltage to ensure the safety of downstream electronics. Two sets of radiation tests were performed. The first group of PE99155s used a high dose rate (HDR) irradiation to 25 krad(Si). A second group of PE99155s used high dose rate irradiation to 30 krad(Si).

TID↗
NASA NTRS2016

AirSTAR Hardware and Software Design for Beyond Visual Range Flight Research

The National Aeronautics and Space Administration (NASA) Airborne Subscale Transport Aircraft Research (AirSTAR) Unmanned Aerial System (UAS) is a facility developed to study the flight dynamics of vehicles in emergency conditions, in support of aviation safety research. The system was upgraded to have its operational range significantly expanded, going beyond the line of sight of a ground-based pilot. A redesign of the airborne flight hardware was undertaken, as well as significant changes to the software base, in order to provide appropriate autonomous behavior in response to a number of potential failures and hazards. Ground hardware and system monitors were also upgraded to include redundant communication links, including ADS-B based position displays and an independent flight termination system. The design included both custom and commercially available avionics, combined to allow flexibility in flight experiment design while still benefiting from tested configurations in reversionary flight modes. A similar hierarchy was employed in the software architecture, to allow research codes to be tested, with a fallback to more thoroughly validated flight controls. As a remotely piloted facility, ground systems were also developed to ensure the flight modes and system state were communicated to ground operations personnel in real-time. Presented in this paper is a general overview of the concept of operations for beyond visual range flight, and a detailed review of the airborne hardware and software design. This discussion is held in the context of the safety and procedural requirements that drove many of the design decisions for the AirSTAR UAS Beyond Visual Range capability.

Laughter, Sean↗
NASA NTRS2019

Towards Resilient Autonomous Navigation of Drones

Robots and particularly drones are especially useful in exploring extreme environments that pose hazards to humans. To ensure safe operations in these situations, usually perceptually degraded and without good GNSS, it is critical to have a reliable and robust state estimation solution. The main body of literature in robot state estimation focuses on developing complex algorithms favoring accuracy. Typically, these approaches rely on a strong underlying assumption: the main estimation engine will not fail during operation. In contrast, we propose an architecture that pursues robustness in state estimation by considering redundancy and heterogeneity in both sensing and estimation algorithms. The architecture is designed to expect and detect failures and adapt the behavior of the system to ensure safety. To this end, we present HeRO (Heterogeneous Redundant Odometry): a stack of estimation algorithms running in parallel supervised by a resiliency logic. This logic carries out three main functions: a) perform confidence tests both in data quality and algorithm health; b) re-initialize those algorithms that might be malfunctioning; c) generate a smooth state estimate by multiplexing the inputs based on their quality. The state and quality estimates are used by the guidance and control modules to adapt the mobility behaviors of the system. The validation and utility of the approach are shown with real experiments on a ying robot for the use case of autonomous exploration of subterranean environments, with particular results from the STIX event of the DARPA Subterranean Challenge.

Agha-mohammadi, Ali-akbar↗
NASA NTRS2004

Debris Dispersion Model Using Java 3D

This paper describes web based simulation of Shuttle launch operations and debris dispersion. Java 3D graphics provides geometric and visual content with suitable mathematical model and behaviors of Shuttle launch. Because the model is so heterogeneous and interrelated with various factors, 3D graphics combined with physical models provides mechanisms to understand the complexity of launch and range operations. The main focus in the modeling and simulation covers orbital dynamics and range safety. Range safety areas include destruct limit lines, telemetry and tracking and population risk near range. If there is an explosion of Shuttle during launch, debris dispersion is explained. The shuttle launch and range operations in this paper are discussed based on the operations from Kennedy Space Center, Florida, USA.

Thirumalainambi, Rajkumar↗
DOE OSTI2018

Andra's Underground Research Laboratory as a Tool to Prepare Monitoring System of Cigeo Project - 18070

Andra, as French radioactive waste management agency, plans to build an underground disposal facility, named Cigeo, dedicated to high and intermediate level, long lived radioactive wastes. To ensure the safety during the disposal operations that includes the principle of reversibility, the design of the associated monitoring system will be based on specific research and development program and feedback obtained over more than 15 years on tests performed in representative conditions. Andra's Underground Research Laboratory (URL), located at 500 m deep, is excavated in a clay-rich formation. It is dedicated to (i) assess the thermo-hydro-mechanical, chemical and radiologic behaviors of the rock and supporting layers (concrete and steel), (ii) test envisaged monitoring system, (iii) provide feedback on operational organization and safety management and (iv) qualify operating methods (digging, concrete pouring, monitoring system design, etc.) to be implemented in the future disposal. Data collected from (i) characteristics of samples retrieved from boreholes, (ii) experts' observations, (iii) sensors installed in situ and (iv) manual measurements, are integrated in a database. This database is dedicated to samples management (more than 73 600 classified samples), data measurements collection, and conversion to physical values and available to plots or exports. Each day, approximately 1.6 million of values are integrated in the database. Finally, a geo-referenced database is linked to the main database in order to allow the spatial localization, both on the surface or in the underground galleries. All these tools give confidence in Andra's capacity to monitor Cigeo and be ready for the future industrial pilot phase. The monitoring system will also allow, step by step, optimizing the disposal design, performing regular safety control, helping in decision making for reversibility and improving long term safety. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2018

Continuous plating/stripping behavior of solid-state lithium metal anode in a 3D ion-conductive framework

Significance Solid-state lithium metal anode possesses great promise owing to its high energy density and improved safety. This work introduces a strategy for constructing a 3D Li metal anode, which is hosted in a solid-state ion-conducting host and shows a safe and dendrite-free plating/stripping behavior. The host is based on a garnet-type ion-conductive framework and a bottom-deposited Cu current collector. The Li anode is plated within the solid garnet framework from the bottom Cu layer and shows a dendrite-free deposition behavior, effectively averting the dendrite penetration issue. Owing to the 3D ion-conductive host, the volume change and interface contact problem of the Li anode have been significantly mitigated, realizing a high-capacity and safe Li metal anode for solid-state high-energy-density batteries.

25 ENERGY STORAGE↗
DOE OSTI2024

A Theoretical Analysis on the Dynamic Behavior and Electromechanical Response of PZT

Piezoelectric materials are used as a power source in stockpile components for safety and reliability assurances. The objective of this project is to gain insights into the fundamental pressure-induced behavior and electromechanical response of lead zirconate titanate (PZT). Specifically, to establish the basis for an accurate, physics-based material model for robust model-based design to rapidly optimize PZT-based materials and components for performance studies. Established ab-initio methods are used to interrogate and understand the dynamic behavior of PZT as a function of composition (50/50, 65/35, 80/20, 95/5) and dopants (La, Nb) to overcome the costly and time-consuming experimental methodologies. New cold curves for pure and doped single-crystal PZT are obtained as the reference equation-of-state (EOS). A negligible change in the pressure responses was observed for the systems and strains studied. Dielectric and piezoelectric responses of pure and doped single-crystal PZT were also calculated as a function of pressure. For undoped PZT, there is a clear and orderly pressure and composition dependence. For doped PZT, there is a significant increase in the responses, but the behavior is very disordered and inconclusive.

36 MATERIALS SCIENCE↗
DOE OSTI2021

Assessment of Cladding-Cladding Delamination Failures in U-Mo Fuel Plates

Monolithic fuel is a candidate fuel form for the conversion of high-performance research reactors. This plate-type fuel consists of a high-density, U-Mo alloy-based fuel in a monolithic form that is sandwiched between zirconium diffusion barriers and encapsulated in an aluminum cladding. To qualify this fuel system, the program must demonstrate that the fuel meets the safety standards, has a predictable behavior, and performs well in a reactor. Although many plates have shown satisfactory thermo-mechanical performance in reactor, a small number of experimental plates exhibited failures, rendering performance of these plates unacceptable. Post-irradiation examinations of failed plates have revealed that various failures modes are present, including pillowing, blistering, buckling, warping, delamination, fracture, rupture, oxide spallation, etc. Previous studies have implied that such various operational and loading conditions could generate a complex stress-strain state, facilitating distinct failure modes that could impact the structural integrity. To understand such various failure modes, a comprehensive set of studies focusing on failure modes is being performed. As a part of these studies, this work studies the cladding-cladding separation failures that were observed in some of previous irradiation tests. To understand the root cause of cladding separation failures, selected plates from previous irradiation experiments were simulated under comparable operational conditions. Stress-strain state of the plates at the interface were examined. The results were comparatively evaluated to understand possible effects of stress state of the bond-line on delamination failures. This paper presents these findings, discusses such failure modes, and examines the influence of various factors on previously observed cladding delamination failures.

42 ENGINEERING↗
DOE OSTI2020

Effects of cryogenic temperature and grain size on fatigue-crack propagation in the medium-entropy CrCoNi alloy

CrCoNi-based high-entropy alloys have demonstrated outstanding mechanical properties, particularly at cryogenic temperatures. Here we investigate the fatigue-crack propagation properties of the equiatomic, single-phase, face-centered cubic, medium-entropy alloy (MEA), CrCoNi, that displays exceptional strength, ductility and toughness, all of which are enhanced at cryogenic temperatures. Fatigue-crack growth is examined, at a load ratio of 0.1 over a wide range of growth rates, from ~10 –11 to >10 –7 m/cycle, at room (293 K) and cryogenic (198 K, 77 K) temperatures for two grain sizes (~7 and 68 µm), with emphasis on near-threshold behavior. We find that the ΔK th fatigue thresholds are increased with decreasing temperature and increasing grain size: from 5.7 MPa√m at 293 K to 8 MPa√m at 77 K in the fine-grained alloy, and from 9.4 MPa√m at 293 K to 13.7 MPa√m at 77 K in the coarse-grained alloy. Mechanistically, transgranular cracking at 293 K transitions to a mixture of intergranular and transgranular at cryogenic temperatures, where the increased propensity of nano-twins appears to inhibit growth rates by deflecting the crack path. However, the main factor affecting near-threshold behavior is roughness-induced crack closure from interference between the crack flanks, which is enhanced by the rougher fracture surfaces at low temperatures, particularly in the coarser-grained microstructure. Here, fatigue-crack propagation behavior in CrCoNi is comparable to nickel-based superalloys but is superior to that of the high-entropy CrMnFeCoNi (Cantor) alloy and many high-strength steels, making the CrCoNi alloy an excellent candidate material for safety-critical applications, particularly involving low temperatures.

36 MATERIALS SCIENCE↗
DOE OSTI2024

A Vision–based Robust $\mathcal{H}$ ∞ Gain Scheduling Longitudinal and Lateral Following Controller for Autonomous Vehicles on Urban Curved Roads

Implementing advanced driver assistance systems (ADAS) in congested and intricate urban traffic scenarios poses significant challenges. To address the frequent stop–and–go motions exhibited by autonomous vehicles (AVs) navigating urban roads with changes in curvature, we propose a vision–based robust $\mathcal{H}$ ∞ adaptive cruise control system (ACC) for longitudinal control, plus a lane keeping assist system (LKAS) for lateral control. For the vision-based ACC, a weighted probability objective function for the vehicle following behavior is formulated. We incorporate $\mathcal{H}$ ∞ performance and gain scheduling techniques to mitigate the impact of uncertainty in visual sensor measurements. Furthermore, the optimal time headway is scheduled based on the velocity to ensure traffic flow efficiency and safety during the vehicle following process. For the LKAS, we introduce a road curvature estimation method that integrates lane and vehicle dynamics information to obtain the lateral and heading offsets. Next, the design criterion of the observer–based robust gain scheduling lateral motion controller is established by linear matrix inequality (LMI). Here, a series of experiments conducted within a camera–in–loop platform validate the proposed method.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2025

Ship Motion Testing Needs Evaluation

The American Bureau of Shipping performed an evaluation of national maritime nuclear testing capabilities and determined there currently is an inability to test maritime nuclear power plants in a ship motion environment. A Ship Motion Test Facility (SMTF) is proposed to fill this gap. To inform design of this facility, this report documents an evaluation performed by a panel of technical experts that identifies key physical phenomena associated with maritime nuclear power plant operation that are important to safety and reliability and have a low state of knowledge. This evaluation concluded that all of the major test needs to understand a nuclear plant's behavior in a ship motion environment are for thermal-hydraulics related phenomena. Based on this finding, the evaluation panel concluded that the SMTF would not be required to use nuclear fuel to provide a heat source for the fluids. This would significantly decrease the cost, timeline, and complexity for this test facility to enable the advancement of maritime nuclear technology.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRSDate not supplied

Overarching Properties as Means of Compliance: An Industrial Case Study

The Overarching Properties (OPs) have been created by an inter-national working group and are being evaluated by the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), industry, and other certifying agencies in an effort to streamline certification processes. Their intent is to facilitate the use of alternative approaches and to al-low flexibility to combine the system, software, and complex hardware certification. The hope is that the FAA may eventually establish an Advisory Circular that offers the OPs as a Means of Compliance (MoC) for software approval (and eventually systems and hardware) by showing the product possesses the three OPs: Intent (specification of the intended behavior), Correctness (implementation of the intended behavior) and Innocuity (safety of unintended behavior). In the certification community, there is still a concern about the practicability of using such high level properties in certification. This paper aims to address that concern by showing possession of the OPs in an industrial case study using assurance arguments. The two main contributions of this paper are: a certification process based on OPs as Means of Compliance, and a certification argument for an on-board physical model of an UAV, as industrial example. We pro-pose a hybrid approach for the certification process that combines OPs with existing certification standards. Thus, OPs can be used for parts of a system that uses technologies that are not supported by current standards or for which existing standards require additional effort without commensurate additional safety assurance.

certification↗