Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “PRA”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Identifying human failure events (HFEs) for external hazard probabilistic risk assessment

In recent years, several advancements in nuclear power plant (NPP) probabilistic risk assessment (PRA) have been driven by increased understanding of external hazards, plant response, and uncertainties. However, major sources of uncertainty associated with external hazard PRA remain. One important source is how risk-significant human actions that are carried out to enable plant response and recovery from natural hazards cause the close coupling of physical impacts on plants and overall plant risk during these hazard events. This makes human reliability and human-plant interactions important elements to consider in resolving PRA gaps in external hazards. One of the challenges in considering human response in external hazard probabilistic risk assessment (XHPRA) is that most existing human reliability analysis (HRA) models were not developed for assessing actions outside the control room (termed ex-control room actions) and hazard response. To support this new scope, HRA models will need to be developed or modified to support identification of human activities, causal factors, and uncertainties inherent in external hazard response, thereby providing insights regarding event timing and physical event conditions as they relate to human performance. In this study, there are two main objectives: (1) evaluate the applicability of an existing cognitive-based HRA method, Phoenix, to ex-control room actions, and (2) identify sources of uncertainty to be characterized or reduced in order to make this method suitable for XHPRA. The first step of such work is performed by assessing the suitability of existing HRA methods to support identifying human failure events (HFEs) for human response to flooding hazards. These HFEs are human actions or inactions that are involved in human responses to flooding hazards and could contribute to the loss of a critical function for the plant in the scenario being examined. Here, in this work, decomposition analyses using the cognitive-based Phoenix HRA model are used to identify HFEs. The Phoenix method was found to be suitable for analyzing ex-control room actions as well as identifying specific HFEs and underlying crew failure modes (CFMs). However, the method's suitability for use in ex-control room actions would benefit from expanding the available CFMs to accommodate a larger variety of physical and communication tasks.

42 ENGINEERING↗
DOE OSTI2021

Event-modeled Risk Assessment Using Linked Diagrams

Event Modeling Risk Assessment using Linked Diagrams (EMRALD) is a software tool developed at INL for researching the capabilities of dynamic PRA (Probabilistic Risk Assessment). In order to promote the effective use of dynamic PRA by the general community, EMRALD focuses on the following key aspects: Simplifying the modeling process by providing a structure that corresponds to traditional PRA modeling methods Providing a user interface (UI) that makes it easy for the user to model and visualize complex interactions Allowing the user to couple with other analysis applications such as physics based simulations. This includes one-way communication for most applications and two-way loose coupling for customizable applications Providing the sequence and timing of events that lead to the specified outcomes when calculating results Traditional aspects of components with basic events, fault trees, and event trees are all captured in a dynamic framework of state diagrams, which are displayed.

Prescott, SteveR↗
DOE OSTI2026

Hazard and risk analysis framework for nuclear power plant–based integrated energy systems

Employing integrated energy systems (IESs) with nuclear power plants (NPPs) can improve NPP utilization by leveraging dedicated thermal and electric power delivery, but it may also increase operational safety risks. This paper presents a framework to identify and quantify hazards and risks for such IESs. The framework combines accidentology to review past industrial accidents with failure modes and effects analysis (FMEA) to identify potential future incidents. Hydrogen explosion and toxic chemical release hazards are of particular concern. Explosion consequences are quantified using the Bauwens-Dorofeev (Bauwens) and trinitrotoluene equivalent mass (TNT-EM) methods, while chemical release consequences are computed using the Gaussian atmospheric dispersion method. Operational disturbances from direct electrical and thermal integration that may affect NPP safety are modeled using probabilistic risk analysis (PRA). Hazards and risks are then evaluated for regulatory compliance. The framework is applied to IESs comprising pressurized or boiling water reactors supplying three levels of thermal and electrical power to industrial customers. Case studies include high-temperature steam electrolysis hydrogen plants of varying capacities and a synthetic fuel production plant. Sensitivity analysis examines piping component failures in the PRA model as a precursor to cost estimation for thermal extraction line design. Additionally, Fussel-Vessely (FV) and risk increase importance (RII) measures identify risk-informed design improvements for the thermal extraction system. FMEA highlights hazards such as loss of offsite power, prompt loss of electrical load, loss of thermal output, and immediate steam diversion, in addition to hydrogen explosions and toxic chemical releases. Both Bauwens and TNT-EM methods suggest maintaining several hundred meters of separation between the NPP and hydrogen facility to mitigate explosion risks. PRA results show a maximum initiating event frequency increase of 1.15% and an overall risk increase of 0.28%. Importance measure analysis identifies upstream pipe leak isolation components as critical. Evaluating the results against safety regulations, it is concluded that hazards and risks can be managed to comply with regulations through risk-informed thermal and electrical connection designs, component selection, maintenance programs, and safe separation distances between NPPs and integrated industrial facilities.

08 - HYDROGEN↗
DOE OSTI2021

Methods for the Enhancement of Security Probabilistic Risk Assessments

The US Department of Energy is exploring the methods associated with probabilistic risk assessment (PRA) and how they could be used to enhance physical security evaluations for nuclear facilities. A brief review of both international and US Nuclear Regulatory Commission physical security assessment methods is presented. From this review, and with an understanding of the technical elements associated with a traditional nuclear safety PRA, several observations are made pertaining to where physical security analysis methods could be enhanced. These observations principally support and enhance the answers within a physical security context to the risk triplet: (1) What can go wrong? (2) What is the likelihood? and (3) What are the consequences? Finally, benefits and technical challenges toward the development of a full security PRA are presented.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

Evaluation of Joint Cyber/Safety Risk in Nuclear Power Systems

This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Utilization of the LMP Methodology in Support of the VTR Conceptual Safety Design Report

The Versatile Test Reactor (VTR) is a fast spectrum test reactor currently being developed in the United States under the direction of the US Department of Energy (DOE), Office of Nuclear Energy. The VTR is utilizing a risk-informed performance-based (RIPB) approach for design support and authorization by the DOE, derived from recent efforts by the US industry led Licensing Modernization Project (LMP). This document contains an overview of the implementation of the LMP approach in support of the VTR Conceptual Safety Design Report (CSDR). The work reported here is the result of studies supporting a VTR conceptual design, cost, and schedule estimate for DOE-NE to make a decision on procurement. As such, it is preliminary. The VTR RIPB authorization approach utilizes information from the probabilistic risk assessment (PRA), coupled with deterministic analyses, to aid in decision-making regarding the identification and categorization of safety basis events (SBEs), the classification of structures, systems, and components (SSCs), and the evaluation of defense-in-depth (DID) adequacy. As part of initial reactor design efforts, a VTR conceptual design PRA was developed to support the RIPB process, which focused on at-power internal events, with scoping analyses for seismic and sodium fire hazards. In addition to supporting numerous design studies, preliminary results from the RIPB approach and the VTR conceptual design PRA were utilized as the basis of the VTR CSDR. The initial identification and categorization of SBEs, SSC classification, and DID evaluation were contained within the CSDR, which was submitted to DOE in 2019 as part of the CD-1 submittal package. Following review, DOE approved the CSDR in April 2020 and the CD-1 package in late 2020. Valuable experience was gained through the implementation of the RIPB approach for design and authorization during the VTR conceptual design phase, which is summarized in this document. To the extent possible, this experience has been shared with the advanced reactor industry, through publications and participation in licensing tabletops, in addition to informing DOE:NE advanced reactor regulatory development efforts. Furthermore, the approval of the CSDR by the DOE as part of CD-1 represents a significant milestone in the use of RIPB approaches for advanced reactor licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2022

Probabilistic Risk Assessment of a Light-Water Reactor Coupled with a High-Temperature Electrolysis Hydrogen Production Plant

This report details an expansion of the original two generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to a light-water reactor, one for a pressurized-water reactor and one for a boiling-water reactor. The new material in this revision includes a new HES design, direct electrical coupling of the nuclear power plant to the High-Temperature Electrolysis Facility (HTEF), and a smaller 100-MWt HTEF analysis. The results investigate the applicability of the potential licensing approaches, which do not require a full United States Nuclear Regulatory Commission licensing review. The PRAs are generic and include some assumptions. We eliminated many conservative assumptions from the preliminary pressurized-water reactor PRA report using design data for both the HES and HTEF. The PRA results indicate that the 10 CFR 50.59 licensing approach is justified due to the minimal increase in initiating event frequencies for all design basis accidents, with none exceeding 5.6%. The PRA results for core damage frequency and large early release frequency support the use of RG 1.174 as further risk information that supports a change without a full licensing amendment review. Further insights provided through hazard analyses and sensitivity studies confirm with high confidence that the safety case for licensing an HES addition and an HTEF sited 1.0 km from the nuclear power plant is strong and that the placement of a HTEF at 0.5 km is also a viable case. Site-specific information can alter these conclusions.

08 HYDROGEN↗
DOE OSTI2022

Regulatory Treatment of Non-Core Sources of Radioactivity for Advanced Reactor Designs

The recent resurgence in advance (non-light water) reactor development has been paralleled by the development of risk-informed performance-based (RIPB) licensing pathways. Specifically, the creation of the RIPB Licensing Modernization Project (LMP) approach and subsequent endorsement by the U.S. Nuclear Regulatory Commission (NRC) now provides advanced reactor vendors with a defined RIPB method to develop an affirmative safety case for licensing. In addition, the Technology Inclusive Content of Applications Project (TICAP) has published guidance on developing a license application based on the LMP approach. To support the utilization of risk information as part of advanced reactor design and licensing efforts, the American Society of Mechanical Engineers (ASME)/American Nuclear Society (ANS) Joint Committee on Nuclear Risk Management (JCNRM) has developed a probabilistic risk assessment (PRA) standard for advanced reactors. The standard, which was formerly approved by the American National Standards Institute (ANSI) in 2021 and recently endorsed by the NRC in trial use Regulatory Guide (RG) 1.247, is an integral standard, covering from initiating events to offsite consequence. A major feature of the standard is that it permits the inclusion of any source of radioactivity material at the site within the plant PRA. Therefore, non-core sources of radioactivity, such as fuel storage, fuel processing, and purification systems, can be included within a single comprehensive plant PRA. For those advanced reactor vendors utilizing a RIPB licensing approach, there is an opportunity to include the non-core sources of radioactivity within the RIPB framework for licensing decision-making, such as the categorization of events, classification of structures, systems, and components (SSCs), and evaluation of the adequacy of defense-in-depth (DID). For advanced reactor designs that contain multiple non-core sources of radioactivity, or for monolithic plant sites that include associated fuel facilities, this approach could potentially simplify licensing applications through the use of a single, uniform, and consistent decision-making framework across all radioactive sources at the site. In addition, a RIPB approach could provide additional insights regarding plant behavior, flexibility regarding licensing decision-making, and potentially allow the use of risk information as part of the plant oversight process. Risk-informing these aspects of advanced reactor licensing would also be consistent with the NRC’s risk policy statement. However, there is diverse regulation and guidance regarding the licensing of non-core sources of radioactivity and generally limited experience using RIPB approaches for the evaluation as part of licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Industrial Facilities

This report provides a roadmap and toolkit for site-specific risk assessments across a broad range of industrial customers co-located with nuclear power plants (NPPs). This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Plant Operation and Generation Pathway that presented hazards assessment and generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors co-located with hydrogen production facilities. The report expands the hazards assessments to include other industrial facilities: an oil refinery, a methanol plant, a synthetic fuel (synfuel) plant, the production of synthetic gas (syngas) as part of the methanol and synfuel plants, and wood pulp and paper mills. All these facilities are specified through industrial process and requirements research performed by national laboratories, universities, and interaction with industry. Many of the processes used in this report are pre-conceptual designs to use for decarbonization of the current technology facilities. A process of failure modes and effects analysis (what can go wrong) and accidentology (what has historically gone wrong) was used to determine the hazards presented to the NPP by the addition of the HES and the industrial customer. Chemical properties of feedstocks and products are summarized as part of the hazards assessment. Example analysis procedures are provided for each of the hazard types identified. These deterministic analyses can be used to assess adherence to licensing criteria. They can also be used to meet other safety goals like protection of the public, workers, or industrial facility equipment. The probabilistic analysis consisted of three sizes of HESs modeled in a PRA to assess the impact on the initiating events (IE) and results of the PRA. The PRA results conclude that the resulting increases in IE frequencies are below the limits required for small changes to existing NPPs under 10 CFR 50.59.

08 HYDROGEN↗
NASA NTRS1977

Effect of hypovolemia, infusion, and oral rehydration on plasma electrolytes, ADH, renin activity, and +G/z/ tolerance

Effects on plasma volume, electrolyte shifts, and +G(z) tolerance induced by: (1) blood withdrawal; (2) blood infusion; and (3) oral fluid intake, were determined at 0.5 G/min in centrifugation tests of six ambulatory male patients, aged 21 to 27 yrs. Hypovolemia induced by withdrawal of 400 ml blood, blood infusion followed by repeated centrifugation, effects of consuming an isotonic drink (0.9% NaCl) to achieve oral rehydration, and donning of red adaptation goggles were studied for effects on acceleration tolerance, pre-acceleration and post-acceleration plasma renin activity (PRA) and plasma vasopressin levels. No significant changes in post-acceleration PRA compared to pre-acceleration PRA were found, and administration of oral rehydration is found as effective as blood replacement in counteracting hypovolemic effects.

Greenleaf, J. E.↗
NASA NTRS1982

Evidence for a distant ( 8700 R sub J) Jovian magnetotail: Voyager 2 observations

A correlative survey of magnetometer (MAG) and Planetary Radio Astronomy (PRA) 1.2 kHz continuum radiation measurements from Voyager 2 provide evidence for at least eight distant Jovian magnetotail sightings occurring about once a month over the first 2/3 of 1981 at distances of approximately 5,000 to 9,000 R sub J. The occurrences of these events are in good agreement with prior Plasma Wave Science and Plasma Science identifications. Observations of these distant magnetotail, or tail filament, encounters appear most prevalent in both MAC and PRA data sets when the spacecraft was closest to the Jupiter-Sun axis at approximately 6,500 R sub J from the planet; the PRA events are also most intense during those times. A specific tail encounter occurring in mid-February 1981 is analyzed and shown to possess a remarkably symmetric magnetic field signature and to have a bipolar field structure in the central region. The bipolarity is characteristic of most of the eight events.

Lepping, R. P.↗
NASA NTRS1985

Analysis of Jovian decametric data: Study of radio emission mechanisms

The Voyager 1 and Voyager 2 Planetary Radio Astronomy Experiments (PRA) have produced the finest set of Jovian decametric radio emission data ever obtained. Jovian decametric L-burst and S-burst arcs were characterized and the data reconciled with models for the radio emission geometry and mechanisms. The first major results involve comparisons of the distribution of arc separations with longitudes. The identification and analyses of systematic variations in the PRA data have yielded interesting results, but only the most obvious features of the data were examined. Analyses of the PRA data were extended with the use of new 6-Sec formats that are more sensitive to the S-bursts.

Staelin, D. H.↗
NASA NTRS1985

Analysis of Jovian decametric data: Study of radio emission mechanisms

Data gathered by the Voyager 1 and Voyager 2 Planetary Radio Astronomy Experiments (PRA) are unique in many ways including their frequency range, time resolution, polarization information and geometric characteristics. Studies of rapidly varying phenomena have thus far been hampered by paper display techniques which require large amounts of paper to exploit the full PRA time resolution. A software package capable of effectively displaying full 6s resolution PRA dynamic spectra on a high quality video monitor while compensating for the aforementioned variations was developed. The most striking phenomena revealed by the new display techniques is called Modulated Spectral Activity (MSA) because of its appearance in dynamic spectra as a series at least two parallel emission bands which drift back and forth in frequency on time scales of tens of seconds. In an attempt to locate and understand the MSA source mechanism, a catalogue has been compiled of the start and end of all known MSA events.

Staelin, D. H.↗
NASA NTRS1993

Gender differences in endocrine responses to posture and 7 days of 6 deg head down bed rest

Endocrine regulation of fluids and electrolytes during seven days of 6 deg head down bed rest (HDBR) was compared in male (n = 8) and, for the first time, female (n = 8) volunteers. The subjects' responses to quiet standing for 2 hr before and after HDBR were also tested. In both sexes, diuresis and natriuresis were evident during the first 2-3 days of HDBR, resulting in a marked increase in the urinary Na/K ratio and significant Na retention on reambulation. After the first day of HDBR, plasma renin activity (PRA) was increased relative to aldosterone, plasma volume was decreased, and the renal response to aldosterone appeared to be appropriate. Circulating levels of arginine vasopressin (AVP), cortisol, and ACTH were unchanged during HDBR. Plasma testosterone decreased slightly on day 2 of HDBR in males. The ratio of AM ACTH to cortisol was lower in females than in males because ACTH was lower in females. Urinary cortisol increased and remained elevated throughout the HDBR in males only. There were no gender differences in the responses to 7 day HDBR, except those in the pituitary-adrenal system; those differences appeared unrelated to the postural change. The provocative cardiovascular test of quiet standing before and after bed rest revealed both sex differences and effects of HDBR. There were significant sex differences in cardiovascular responses to standing, before and after HDBR. Females had greater PRA and aldosterone responses to standing before bedrest and larger aldosterone responses to standing after HDBR than males. Cardiovascular responses to standing before and after bedrest differed markedly: arterial pressure and heart rates increased with standing before HDBR, by contrast, arterial pressure decreased, with greater increases in heart rates after HDBR. In both sexes, all hormonal responses to standing were greater after HDBR. The results show clearly that similar responses to standing as well as to HDBR occur in both sexes, but that females exhibit greater PRA and aldosterone responses than males.

Vernikos, J.↗
NASA NTRS1993

Voyager planetary radio astronomy studies

Analysis of nonthermal radio emission data obtained by the Planetary Radio Astronomy (PRA) spectrometers on the Voyager 1 and 2 spacecraft was performed. This PRA data provided unique insights into the radio emission characteristics of the outer planets because of PRA's unique spectral response below the terrestrial ionospheric plasma frequency and its unprecedented proximity to the source. Of those results which were documented or published, this final report surveys only the highlights and cites references for more complete discussions. Unpublished results for Uranus, Neptune, and theoretical Ionian current distributions are presented at greater length. The most important conclusion to be drawn from these observations is that banded spectral emission is common to the radio emission below 1-2 MHz observed from all four Jovian planets. In every case multiple spectral features evolve on time scales of seconds to minutes. To the extent these features drift in frequency, they appear never to cross one another. The Neptunian spectral features appear to drift little or not at all, their evolution consisting principally of waxing and waning. Since other evidence strongly suggests that most or all of this radio emission is occurring near the local magnetospheric electron cyclotron frequency, this implies that this emission preferentially occurs at certain continually changing planetary radii. It remains unknown why certain radii might be favored, unless radial electric field components or other means serve to differentiate radially the magnetospheric plasma density, particle energy vectors, or particle coherence. Calculation of the spatial distribution and intensity of the Io-generated magnetospheric currents are also presented; these currents may be limited principally by wave impedance and local field strengths.

Staelin, David H.↗
NASA NTRS2001

Overview of Probabilistic Risk Assessment at NASA: Past, Present and Future

PRA (Probabilistic Risk Assessment) adds the "probability" dimension to the traditional "deterministic" dimension of engineering and safety analyses. Although PRA, as a discipline, has been the evolutionary product of only the last couple of decades, much of the underlying methodology has been in use for a long time. In fact, the concept of probability for describing the likelihood that rare events happen is ancient and dates from Ancient Greece. Our vision is for NASA to achieve world-class state-of-the-art capability in performing and using PRA in technical and management decisions. Since NASA is a leader in many technical fields in which it is involved, we hope, before long, to see NASA become a leader in this field also.

Stamatelatos, Michael G.↗
NASA NTRS2004

Assessment and Control of Spacecraft Charging Risks on the International Space Station

The International Space Station (ISS) operates in the F2 region of Earth's ionosphere, orbiting at altitudes ranging from 350 to 450 km at an inclination of 51.6 degrees. The relatively dense, cool F2 ionospheric plasma suppresses surface charging processes much of the time, and the flux of relativistic electrons is low enough to preclude deep dielectric charging processes. The most important spacecraft charging processes in the ISS orbital environment are: 1) ISS electrical power system interactions with the F2 plasma, 2) magnetic induction processes resulting from flight through the geomagnetic field and, 3) charging processes that result from interaction with auroral electrons at high latitude. Recently, the continuing review and evaluation of putative ISS charging hazards required by the ISS Program Office revealed that ISS charging could produce an electrical shock hazard to the ISS crew during extravehicular activity (EVA). ISS charging risks are being evaluated in an ongoing measurement and analysis campaign. The results of ISS charging measurements are combined with a recently developed model of ISS charging (the Plasma Interaction Model) and an exhaustive analysis of historical ionospheric variability data (ISS Ionospheric Specification) to evaluate ISS charging risks using Probabilistic Risk Assessment (PRA) methods. The PRA combines estimates of the frequency of occurrence and severity of the charging hazards with estimates of the reliability of various hazard controls systems, as required by NASA s safety and risk management programs, to enable design and selection of a hazard control approach that minimizes overall programmatic and personnel risk. The PRA provides a quantitative methodology for incorporating the results of the ISS charging measurement and analysis campaigns into the necessary hazard reports, EVA procedures, and ISS flight rules required for operating ISS in a safe and productive manner.

Koontz, Steve↗
NASA NTRS2005

Uncertainty Considerations for Ballistic Limit Equations

The overall risk for any spacecraft system is typically determined using a Probabilistic Risk Assessment (PRA). A PRA attempts to determine the overall risk associated with a particular mission by factoring in all known risks (and their corresponding uncertainties, if known) to the spacecraft during its mission. The threat to mission and human life posed by the mircro-meteoroid & orbital debris (MMOD) environment is one of the risks. NASA uses the BUMPER II program to provide point estimate predictions of MMOD risk for the Space Shuttle and the International Space Station. However, BUMPER II does not provide uncertainty bounds or confidence intervals for its predictions. With so many uncertainties believed to be present in the models used within BUMPER II, providing uncertainty bounds with BUMPER II results would appear to be essential to properly evaluating its predictions of MMOD risk. The uncertainties in BUMPER II come primarily from three areas: damage prediction/ballistic limit equations, environment models, and failure criteria definitions. In order to quantify the overall uncertainty bounds on MMOD risk predictions, the uncertainties in these three areas must be identified. In this paper, possible approaches through which uncertainty bounds can be developed for the various damage prediction and ballistic limit equations encoded within the shuttle and station versions of BUMPER II are presented and discussed. We begin the paper with a review of the current approaches used by NASA to perform a PRA for the Space Shuttle and the International Space Station, followed by a review of the results of a recent sensitivity analysis performed by NASA using the shuttle version of the BUMPER II code. Following a discussion of the various equations that are encoded in BUMPER II, we propose several possible approaches for establishing uncertainty bounds for the equations within BUMPER II. We conclude with an evaluation of these approaches and present a recommendation regarding which of them would be the most appropriate to follow.

Schonberg, W. P.↗