Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
NASA NTRS2001

Configuration and Data Management Process and the System Safety Professional

This article presents a discussion of the configuration management (CM) and the Data Management (DM) functions and provides a perspective of the importance of configuration and data management processes to the success of system safety activities. The article addresses the basic requirements of configuration and data management generally based on NASA configuration and data management policies and practices, although the concepts are likely to represent processes of any public or private organization's well-designed configuration and data management program.

Shivers, Charles Herbert↗
DOE OSTI2021

Structural Health Monitoring of Microreactor Safety Systems Using Convolutional Neural Networks

Microreactors, a class of modular reactors with net power output of less than 20 MWth, have innovative applications in nuclear and nonnuclear industries due to their portability, reliability, resilience, and high capacity factors. In order to operate microreactors on a wider scale, it is essential to bring down maintenance life-cycle costs while ensuring the integrity of operating such systems. Autonomous operations in microreactors using augmented digital-twin (DT) technology can serve as a cost-effective solution by increasing awareness about the system’s health. Structural health monitoring (SHM) is a key component of nuclear DT frameworks. Artificial neural networks can be beneficial to detect degradation in the nuclear safety systems, such as piping equipment systems, by monitoring the sensor data obtained from the plant and its corresponding structures, systems and components. In this report, an SHM methodology is presented which uses convolutional neural networks to determine degraded locations and their corresponding degradation-severity levels at various locations of nuclear piping equipment systems. A simple pipe system, subjected to seismic loads, is selected to design the post-hazard SHM framework. The effectiveness of the proposed SHM methodology is demonstrated by obtaining high accuracy in detecting degraded locations as well as the severity levels.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS1982

Using computer graphics to enhance astronaut and systems safety

The Operator Station Design System (OSDS), a technique of applied computer graphics featuring a flexible interactive software package, is presented in terms of man-machine analyses, flight operations, and systems engineering. In man-machine analyses, the OSDS was used to determine if viewing from the Shuttle Remote Manipulator System was satisfactory and to identify requirements for a pallet-mounted television camera. In another study, extravehicular activity was analyzed using the example of emergency access to latches should they fail in orbit. In terms of flight operations, OSDS can be used to evaluate array monitoring of a solar array power system complex and to provide animated scenarios of mission operations. The most important application of OSDS is in relation to systems engineering, as OSDS can be used to analyze spacecraft and payload design and integration. Payload configurations are included.

Brown, J. W.↗
DOE OSTI2022

Multicomponent gas mixture parametric CFD study of condensation heat transfer in small modular reactor system safety

Safety is always the primary concern for designing and analyzing nuclear reactor systems. The requirements for the safety margin for advanced small modular reactor (SMR) systems are targeted even higher than the conventional commercial large-scale nuclear reactors incorporating the passive and inherent safety systems. The SMR systems are designed with the condensation passive containment cooling system (PCCS), which plays a critical role in removing reactor heat during a steam release accident case. However, the presence of non-condensable gas (NCG), like air, reduces the heat transfer performance. This physics phenomenon becomes multifactorial for nuclear reactor containment during a fuel failure accident case that releases hydrogen gas. Besides, the mixture component of steam-air-hydrogen varies in reactor accident cases, which need simulation and validation keeping parameters of importance. Reviews showed that previous studies for SMR’s PCCCS did not cover the condensation heat transfer (CHT) in the presence of multicomponent NCG mixture parametric computational fluid dynamics (CFD) simulation and validation, making a research gap in the SMR design safety. A comprehensive CHT parametric CFD study was performed for SMR PCCS to fill this research gap. This study used experimental data as simulation 3D physics domain inlet and outlet boundary conditions. However, the wall boundary conditions were constant temperature, curve-fit, and annular coolant for verifying the turbulence models. Parametric simulations were performed, verified, and optimized for steam-NCGs mixtures. The multicomponent gases, multiphase mixtures, and fluid film condensation models were applied with associated turbulence models. The results of the parametric study were evaluated for realistic reactor conditions. Results showed that parametric study provided critical insight about the dependency of multicomponent gas mixture parameters that supports reactor safety design, analysis, and licensing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS1974

System safety as applied to Skylab

Procedural and organizational guidelines used in accordance with NASA safety policy for the Skylab missions are outlined. The basic areas examined in the safety program for Skylab were the crew interface, extra-vehicular activity (EVA), energy sources, spacecraft interface, and hardware complexity. Fire prevention was a primary goal, with firefighting as backup. Studies of the vectorcardiogram and sleep monitoring experiments exemplify special efforts to prevent fire and shock. The final fire control study included material review, fire detection capability, and fire extinguishing capability. Contractors had major responsibility for system safety. Failure mode and effects analysis (FMEA) and equipment criticality categories are outlined. Redundancy was provided on systems that were critical to crew survival (category I). The five key checkpoints in Skylab hardware development are explained. Skylab rescue capability was demonstrated by preparations to rescue the Skylab 3 crew after their spacecraft developed attitude control problems.

Kleinknecht, K. S.↗
NASA NTRS2012

System Safety and the Unintended Consequence

The analysis and identification of risks often result in design changes or modification of operational steps. This paper identifies the potential of unintended consequences as an over-looked result of these changes. Examples of societal changes such as prohibition, regulatory changes including mandating lifeboats on passenger ships, and engineering proposals or design changes to automobiles and spaceflight hardware are used to demonstrate that the System Safety Engineer must be cognizant of the potential for unintended consequences as a result of an analysis. Conclusions of the report indicate the need for additional foresight and consideration of the potential effects of analysis-driven design, processing changes, and/or operational modifications.

Watson, Clifford↗
NASA NTRS2002

Software System Safety and the NASA Aeronautics Blueprint

NASA's Aeronautics Blueprint lays out a research agenda for the Agency s aeronautics program. The word software appears only four times in this Blueprint, but the critical importance of safe and correct software to the fulfillment of the proposed research is evident on almost every page. Most of the technology solutions proposed to address challenges in aviation are software dependent technologies. Of the fifty-two specific technology solutions described in the Blueprint, forty-one depend, at least in part, on software for success. For thirty-five of these forty-one, software is not only critical to success, but also to human safety. That is, implementing the technology solutions will require using software in such a way that it may, if not specified, designed, and implemented properly, lead to fatal accidents. These results have at least two implications for the research based on the Blueprint: (1) knowledge about the current state-of-the-art and state-of-the-practice in software engineering and software system safety is essential, and (2) research into current unsolved problems in these software disciplines is also essential.

Holloway, C. Michael↗
NASA NTRS1992

Study report recommendations for the next generation Range Safety System (RSS) Integrated Receiver/Decoder (IRD)

The Integrated Receiver/Decoder (IRD) currently used on the Space Shuttle was designed in the 1980 and prior time frame. Over the past 12 years, several parts have become obsolete or difficult to obtain. As directed by the Marshall Space Flight Center, a primary objective is to investigate updating the IRD design using the latest technology subsystems. To take advantage of experience with the current designs, an analysis of failures and a review of discrepancy reports, material review board actions, scrap, etc. are given. A recommended new design designated as the Advanced Receiver/Decoder (ARD) is presented. This design uses the latest technology components to simplify circuits, improve performance, reduce size and cost, and improve reliability. A self-test command is recommended that can improve and simplify operational procedures. Here, the new design is contrasted with the old. Possible simplification of the total Range Safety System is discussed, as is a single-step crypto technique that can improve and simplify operational procedures.

Crosby, Robert H.↗
DOE OSTI2021

INTEGRATED RISK ASSESSMENT OF DIGITAL I&C SAFETY SYSTEMS FOR NUCLEAR POWER PLANTS

Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems provides the foremost means to improve performance and reduce costs for existing light-water reactors (LWRs). However, qualification of digital technologies remains a challenge?especially the issue of software common cause failure (CCF), which has been difficult to address. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, software CCFs due to design flaws might become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multi-layer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission (NRC) licensing procedures. In 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy?s (DOE?s) Light Water Reactor Sustainability (LWRS) Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, secure DI&C technologies for digital upgrades/designs. An integrated risk assessment for the DI&C (RADIC) process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. This paper summarizes these RISA efforts in the risk analysis of safety-related DI& systems at Idaho National Laboratory.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2015

Analysis of Aviation Safety Reporting System Incident Data Associated with the Technical Challenges of the System-Wide Safety and Assurance Technologies Project

The Aviation Safety Program (AvSP) System-Wide Safety and Assurance Technologies (SSAT) Project asked the AvSP Systems and Portfolio Analysis Team to identify SSAT-related trends. SSAT had four technical challenges: advance safety assurance to enable deployment of NextGen systems; automated discovery of precursors to aviation safety incidents; increasing safety of human-automation interaction by incorporating human performance, and prognostic algorithm design for safety assurance. This report reviews incident data from the NASA Aviation Safety Reporting System (ASRS) for system-component-failure- or-malfunction- (SCFM-) related and human-factor-related incidents for commercial or cargo air carriers (Part 121), commuter airlines (Part 135), and general aviation (Part 91). The data was analyzed by Federal Aviation Regulations (FAR) part, phase of flight, SCFM category, human factor category, and a variety of anomalies and results. There were 38 894 SCFM-related incidents and 83 478 human-factorrelated incidents analyzed between January 1993 and April 2011.

Withrow, Colleen A.↗
NASA NTRS2012

NASA System Safety Framework and Concepts for Implementation

This report has been developed by the National Aeronautics and Space Administration (NASA) Human Exploration and Operations Mission Directorate (HEOMD) Risk Management team knowledge capture forums.. This document provides a point-in-time, cumulative, summary of actionable key lessons learned in safety framework and concepts.

System Safety↗
DOE OSTI2023

Passive Safety System Reliability Analysis: Methodology, Application, and Results

Many advanced reactor designs rely on passive systems to provide assurance that certain safety functions, such as reactivity control and reactor heat removal, are maintained during transient scenarios. The performance of these systems is sensitive to boundary and environmental conditions and can lead to functional failure, which is the inability of the system to perform as intended even without any physical failures. Additionally, conditions can cause the passive systems to operate in an intermediate or degraded state. These operational modes of passive systems and their overall reliability can be difficult to capture in traditional probabilistic frameworks where discrete operating modes are assumed or time-dependent boundary conditions are not accounted for. Novel strategies and methods are needed to be able to capture the reliability of these passive systems and their impact on facility safety. The current abstract provides a summary of such a methodology and examples of its use in a case study, the GE Hitachi (GEH) PRISM probabilistic safety assessment (PSA), and the U.S. Department of Energy (USDOE) Versatile Test Reactor (VTR) PSA.

Bucknor, M.↗
DOE OSTI2022

A Systems Engineering Analysis of National Ignition Facility Industrial Controls Systems and Safety Interlock Systems Remote Input/Output Networking Migration from ControlNet to EtherNet/IP

The ControlNet industrial communications protocol and modules used in the Industrial Control System (ICS) and Safety Interlock System (SIS) at the National Ignition Facility (NIF) are no longer necessary and the ICS and SIS would be better served by migrating the communications structure to use EtherNet/Industrial Protocol (IP) and EtherNet bridge modules instead. By the admission of the vendor of ControlNet hardware, Rockwell Automation, in literature by Bill Petro [1], “Moving forward, customers will be able to optimize their asset utilization better using EtherNet/IP protocol than with ControlNet.” The NIF is one of the key elements of the Inertial Confinement Fusion (ICF) program at Lawrence Livermore National Laboratory (LLNL), a federally funded research and development center (FFRDC). The NIF contains the systems and provides the operational capacity to perform ICF, high energy density (HED), and discovery science experiments utilizing 192 individual beamlines, a host of diagnostics, and all the industrial systems required to facilitate these beamlines and diagnostics. The industrial systems are governed by the ICS and SIS, with the ICS providing control and the SIS providing monitoring and permissives. Construction on the NIF began in 1997 and was certified complete in 2009 and, as a result, the ICS and SIS were developed during this time using the tools that were available then. This includes the communications structure and protocols for these systems, much of which was, and still is, ControlNet. ControlNet, particularly during the time that the ICS and SIS were being built, has several attractive features. ControlNet hardware is exclusive to Rockwell Automation, which was the automation hardware chosen for the ICS and SIS. One feature that could be considered an advantage or a disadvantage depending on the communication needs of the system is that ControlNet also utilizes no active network components, excluding repeaters which are not always necessary. According to the architect of the ICS system at the NIF, Gordon Lau, one of the most attractive features of the ControlNet protocol during development of the ICS and SIS was that it is deterministic, providing timing of data transfer that is executed exactly as it is defined by the developer.

42 ENGINEERING↗
NASA NTRS1977

Shuttle remote manipulator system safety and rescue support capabilities

The Remote Manipulator System (RMS) incorporates a manipulator arm with a payload-handling end effector, an arm positioning mechanism and a control system. The RMS is designed to capture and deploy free-flying payloads up to 4.6 m in diameter and 18.3 m long, weighing 14,515 kg. This paper describes the RMS with attention given to the arm, the supporting subsystems, and safety design features (displays and controls, the mechanical subsystem and operations). Man-in-the-loop simulations for the assurance of RMS and crew safety are described and the use of the RMS for EVA rescue support is considered in detail.

Brown, J. W.↗
DOE OSTI2023

Overview of International Activities in Hydrogen System Safety in IEA Hydrogen TCP Task 43

Safety and reliability have long been recognized as key issues for the development, commercialization, and implementation of new technologies and infrastructure, and hydrogen systems are no exception to this rule. Reliability engineering, quantitative risk assessment (QRA), and knowledge exchange each play a key role in proactive addressing safety - before problems happen - and help us learn from problems if they happen. Many international research activities are focusing on both reliability and risk assessment for hydrogen systems. However, the element of knowledge exchange is sometimes less visible. To support international collaboration and knowledge exchange, the International Energy Agency (IEA) convened a new Technology Collaboration Program, "Task 43: Safety and Regulatory Aspects of Emerging Large Scale Hydrogen Energy Applications" started in June 2022. Within Task 43, Subtask E focuses on Hydrogen Systems Safety. This paper discusses the structure of the Hydrogen Systems Safety subtask and the aligned activities and introduces opportunities for future work.

HYDROGEN↗
DOE OSTI2021

REGULATORY REQUIREMENTS, GUIDANCE, AND REVIEW OF EMBEDDED DIGITAL DEVICES IN SAFETY SYSTEMS

Interest in embedded digital devices (EDDs) for monitoring and providing control of components is increasing in the nuclear power market as more and more users both within and outside the nuclear sector are employing EDDs. EDDs in other industries or countries may be known by the related terms as smart devices, devices of limited functionality, or intelligent devices. EDDs can sometimes perform a safety role when embedded in components such as temperature transmitters, pressure transmitters, voltage regulators, gas analyzers, boiler controllers, relays, and radiation monitors. The introduction of EDDs can affect safety by creating new hazards, vulnerabilities, failure modes, triggering mechanisms, and other potential safety concerns at both the component and system levels. The U.S. Nuclear Regulatory Commission’s (NRC’s) existing regulations and guidance cover the use of EDDs in safety-related and important to safety systems in nuclear power plants (NPPs). In addition to potential future challenges, the nature of EDDs being implemented in similar or identical manners between different plants and industries opens up the potential of leveraging the reviews of other regulators or utilization of industry certifications.Key words: embedded digital device, firmware

Halverson, D. S.↗