SEARCH · Engineering Papers

Results for “certification coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

All sources NASA NTRS DOE OSTI

NASA NTRS2006

Performance, Loads and Stability of Heavy Lift Tiltrotors

Summaries of rotor performance are presented for a 124,000-lb Large Civil Tilt Rotor (LCTR) design, along with isolated-rotor and fully-coupled wing/rotor aeroelastic stability. A major motivation of the present research is the effect of size on rotor dynamics. Simply scaling up existing rotor designs to the vehicle size under study would result in unacceptable rotor weight. The LCTR was the most promising of several large rotorcraft concepts produced by the NASA Heavy Lift Rotorcraft Systems Investigation. It was designed to carry 120 passengers for 1200 nm, with performance of 350 knots at 30,000 ft altitude. Design features included a low-mounted wing and hingeless rotors, with a very low cruise tip speed of 350 ft/sec. The LCTR was sized by the'RC code developed by the U. S. Army Aeroflightdynamics Directorate. The rotor was then optimized using the CAMRAD II comprehensive analysis code. The blade and wing structures were designed by Pennsylvania State University to meet the rotor loads calculated by CAMRAD II and wing loads required for certification. Aeroelastic stability was confirmed by further CAMRAD II analysis, based on the optimized rotor and wing designs.

Acree, Cecil W., Jr.↗

NASA NTRS2009

Assurance Cases for Proofs as Evidence

Proof-carrying code (PCC) provides a 'gold standard' for establishing formal and objective confidence in program behavior. However, in order to extend the benefits of PCC - and other formal certification techniques - to realistic systems, we must establish the correspondence of a mathematical proof of a program's semantics and its actual behavior. In this paper, we argue that assurance cases are an effective means of establishing such a correspondence. To this end, we present an assurance case pattern for arguing that a proof is free from various proof hazards. We also instantiate this pattern for a proof-based mechanism to provide evidence about a generic medical device software.

Chaki, Sagar↗

NASA NTRS1991

Structural dynamics: Probabilistic structural analysis methods. Program overview

A brief description is provided of the fundamental aspects of a quantification process. Progress since the last structural durability conference in 1989 is summarized. The methodology to date and that to be developed during the life of the program is presented. The uncertain factors are presented. The approach is outlined that is required to achieve component and/or system certification in the shortest possible time for affordable reliability risk. Two new elements appear in a block diagram: (1) uncertainties in human factor, and (2) uncertainties in the computer code. Research to quantify the uncertainties in the human factor was initiated and is discussed.

Chamis, Christos C.↗

NASA NTRS2001

Simulation of Aircraft Engine Blade-Out Structural Dynamics

A primary concern of aircraft structure designers is the accurate simulation of the blade-out event and the subsequent windmilling of the engine. Reliable simulations of the blade-out event are required to insure structural integrity during flight as well as to guarantee successful blade-out certification testing. The system simulation includes the lost blade loadings and the interactions between the rotating turbomachinery and the remaining aircraft structural components. General-purpose finite element structural analysis codes such as MSC NASTRAN are typically used and special provisions are made to include transient effects from the blade loss and rotational effects resulting from the engine's turbomachinery. The present study provides the equations of motion for rotordynamic response including the effect of spooldown speed and rotor unbalance and examines the effects of these terms on a cantilevered rotor. The effect of spooldown speed is found to be greater with increasing spooldown rate. The parametric term resulting from the mass unbalance has a more significant effect on the rotordynamic response than does the spooldown term. The parametric term affects both the peak amplitudes as well as the resonant frequencies of the rotor.

Lawrence, Charles↗

NASA NTRS2001

Simulation of Aircraft Engine Blade-Out Structural Dynamics

Lawrence, Charles↗

NASA NTRS2009

Group Capability Model

The Group Capability Model (GCM) is a software tool that allows an organization, from first line management to senior executive, to monitor and track the health (capability) of various groups in performing their contractual obligations. GCM calculates a Group Capability Index (GCI) by comparing actual head counts, certifications, and/or skills within a group. The model can also be used to simulate the effects of employee usage, training, and attrition on the GCI. A universal tool and common method was required due to the high risk of losing skills necessary to complete the Space Shuttle Program and meet the needs of the Constellation Program. During this transition from one space vehicle to another, the uncertainty among the critical skilled workforce is high and attrition has the potential to be unmanageable. GCM allows managers to establish requirements for their group in the form of head counts, certification requirements, or skills requirements. GCM then calculates a Group Capability Index (GCI), where a score of 1 indicates that the group is at the appropriate level; anything less than 1 indicates a potential for improvement. This shows the health of a group, both currently and over time. GCM accepts as input head count, certification needs, critical needs, competency needs, and competency critical needs. In addition, team members are categorized by years of experience, percentage of contribution, ex-members and their skills, availability, function, and in-work requirements. Outputs are several reports, including actual vs. required head count, actual vs. required certificates, CGI change over time (by month), and more. The program stores historical data for summary and historical reporting, which is done via an Excel spreadsheet that is color-coded to show health statistics at a glance. GCM has provided the Shuttle Ground Processing team with a quantifiable, repeatable approach to assessing and managing the skills in their organization. They now have a common frame of reference across NASA/contractor lines to communicate and mitigate any critical skills concerns.

Olejarski, Michael↗

DOE OSTI2017

The Impact of Operating Parameters and Correlated Parameters for Extended BWR Burnup Credit

Applicants for certificates of compliance for spent nuclear fuel (SNF) transportation and dry storage systems perform analyses to demonstrate that these systems are adequately subcritical per the requirements of Title 10 of the Code of Federal Regulations (10 CFR) Parts 71 and 72. For pressurized water reactor (PWR) SNF, these analyses may credit the reduction in assembly reactivity caused by depletion of fissile nuclides and buildup of neutron-absorbing nuclides during power operation. This credit for reactivity reduction during depletion is commonly referred to as burnup credit (BUC). US Nuclear Regulatory Commission (NRC) staff review BUC analyses according to the guidance in the Division of Spent Fuel Storage and Transportation Interim Staff Guidance (ISG) 8, Revision 3, Burnup Credit in the Criticality Safety Analyses of PWR Spent Fuel in Transportation and Storage Casks.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2005

Development of Advanced Verification and Validation Procedures and Tools for the Certification of Learning Systems in Aerospace Applications

Adaptive control technologies that incorporate learning algorithms have been proposed to enable automatic flight control and vehicle recovery, autonomous flight, and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments. In order for adaptive control systems to be used in safety-critical aerospace applications, they must be proven to be highly safe and reliable. Rigorous methods for adaptive software verification and validation must be developed to ensure that control system software failures will not occur. Of central importance in this regard is the need to establish reliable methods that guarantee convergent learning, rapid convergence (learning) rate, and algorithm stability. This paper presents the major problems of adaptive control systems that use learning to improve performance. The paper then presents the major procedures and tools presently developed or currently being developed to enable the verification, validation, and ultimate certification of these adaptive control systems. These technologies include the application of automated program analysis methods, techniques to improve the learning process, analytical methods to verify stability, methods to automatically synthesize code, simulation and test methods, and tools to provide on-line software assurance.

Jacklin, Stephen↗

DOE OSTI2021

Universal Utility Data Exchange (UUDEX) – Security and Administration: Cybersecurity of Energy Delivery Systems (CEDS) Research and Development

A critical component of the Universal Utility Data Exchange (UUDEX) approach is the integrated security contained within its processing. This document describes how that security is designed and expected to be implemented by UUDEX Implementations (U-Implementations), including the UUDEX Server (U-Server) and UUDEX Clients (U-Clients). The UUDEX security hierarchy consists of three levels: 1. The UUDEX Instance (U-Instance) itself, which sits at the top of the hierarchy and contains the U-Server, the UUDEX Identity Authority (U-Identity Authority), and the UUDEX Administrator (U-Administrator) functions; 2. A group of one or more UUDEX Participants (U-Participants) that present “organizations” that participate in the U-Instance and contains the UUDEX Administrator Participant (U-U-Administrator Participant) function; 3. A group of one or more UUDEX Endpoints (U-Endpoints) that represent the individual UUDEX Publish Clients (U-Publish Client) responsible for supplying data to the U-Instance that is consumed by UUDEX Subscriber Clients (U-Subscriber Clients). U-Endpoints can be either autonomous devices that publish and subscribe data such as data exchange servers found in supervisory control and data acquisition and energy management systems, or they can be tied to users of applications that, for example, submit DOE OE-417 disturbance reports. U-Participants and U-Endpoints can be organized into UUDEX Groups (U-Groups). Any number of U-Participants or U-Endpoints can be members of a U-Group. A given U-Participant or U-Endpoint can be a member of multiple U-Groups, but a U-Group cannot contain other U-Groups. For example, a U-Group could be created to contain all U-Participant Transmission Operators within the purview of a Reliability Coordinator, and another U-Group could be created to contain all U-Participant Generator Operators within the purview of a Reliability Coordinator. U-Participants that are both Transmission Operators and Generator Operators would be members of both U-Groups. U-Participants, U-Endpoints, and U-Groups are used in the access control structures to provide access to individual UUDEX Subjects (U-Subjects). U-Groups are created by the U-Administrator and are managed by the U-Administrator or the designated U-Group Managers. U-Endpoints can be assigned UUDEX Roles (U-Roles) that can be used to further restrict access. U-Roles are assigned to individual U-Endpoints. For example, a U-Role of “Security Analyst” could be used to restrict which U-Endpoints can publish or subscribe security incident reports and vulnerability notifications, while a U-Role of “Transmission Planner” can be used to restrict which U-Endpoints can publish power system model updates. U-Role definitions are created by the U-Administrator, but the U-Roles are assigned to U-Endpoints by their respective UUDEX Participant Administrators (U-Participant Administrator). Because all information required to make security decisions is either included within the U-Endpoint’s X.509 digital certificate or stored in a datastore on the U-Server, all security decisions are performed and enforced within the U-Server. This reduces the complexity of the U-Client code and minimizes the chance for compromise of the integrity of the UUDEX security features.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2024

INL High-Performance and Sustainable Building Strategy

High-performance buildings are reliable, cost effective, and sustainable structures that minimize energy and water use, reduce solid waste and pollutant emissions, and limit the depletion of natural resources. High-performance buildings also provide a thermally and visually comfortable working environment that increases productivity for building occupants. As Idaho National Laboratory (INL) is the nation’s premier nuclear energy research laboratory, the physical infrastructure requires continual updating and repurposing to help accomplish that mission. INL’s infrastructure must incorporate high-performance sustainable design features to be fiscally responsible and reflect an image of innovation to the public and prospective employees. INL is a large consumer of energy with annual energy costs exceeding $16M. This High-Performance and Sustainable Building Strategy will help engineering and construction project teams design sustainable facilities, reduce life cycle operating costs, and support the INL net-zero plan while providing INL employees with a safe and healthy working environment. With these goals in mind, the recommendations described in this document are intended to form INL’s foundation for sustainable and high-performance building standards. This strategy incorporates the latest federal and Department of Energy (DOE) orders and directives, including DOE Order 436.1A, “Departmental Sustainability,” the DOE Sustainability Plan (SP), the INL Site Sustainability Plan (SSP), and Code of Federal Regulations (CFR). This document identifies the requirements of the “Guiding Principles for Sustainable Federal Buildings” (Guiding Principles) and briefly highlights the Leadership in Energy and Environmental Design (LEED) Gold certification. LEED Gold certification can be used to meet many of the requirements of the Guiding Principles.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

NASA NTRS2013

Evidence Arguments for Using Formal Methods in Software Certification

We describe a generic approach for automatically integrating the output generated from a formal method/tool into a software safety assurance case, as an evidence argument, by (a) encoding the underlying reasoning as a safety case pattern, and (b) instantiating it using the data produced from the method/tool. We believe this approach not only improves the trustworthiness of the evidence generated from a formal method/tool, by explicitly presenting the reasoning and mechanisms underlying its genesis, but also provides a way to gauge the suitability of the evidence in the context of the wider assurance case. We illustrate our work by application to a real example-an unmanned aircraft system- where we invoke a formal code analysis tool from its autopilot software safety case, automatically transform the verification output into an evidence argument, and then integrate it into the former.

Argumentation↗

NASA NTRSDate not supplied

Close out the Critical Commitment for System Wide Safety’s Technical Challenge 3 (TC 3)

- Deliver validated methods and recommended practices to reduce certification costs for ground and onboard vehicle guidance and control systems through expanded acceptability of analysis as evidence for certification FY 2022. - Communicate results to maximize public awareness of the research and transfer capabilities via a set of on-demand training seminars and supporting materials including reports, publications and open source software codes where applicable.

Joseph C Coughlan↗

DOE OSTI2019

INL High-Performance and Sustainable Building Strategy

High-performance buildings are reliable, cost-effective, and sustainable structures that minimize energy and water use, reduce solid waste and pollutant emissions, and limit the depletion of natural resources while also providing a thermally and visually comfortable working environment that increases productivity for building occupants. As Idaho National Laboratory (INL) is the nation’s premier nuclear energy research laboratory, the physical infrastructure requires continual updating and re-purposing to help accomplish that mission. INL’s infrastructure must incorporate high-performance sustainable design features to be fiscally responsible and reflect an image of innovation to the public and prospective employees. INL is a large consumer of energy with annual energy costs exceeding $9M. In the current fiscal reality and with energy costs constantly increasing, this High-Performance and Sustainable Building Strategy will help engineering and construction project teams design facilities that are sustainable and will help to reduce life-cycle operating costs while providing INL employees with a safe and healthy working environment. With these goals in mind, the recommendations described in this document are intended to form INL’s foundation for sustainable and high-performance building standards. This strategy incorporates the latest federal and Department of Energy (DOE) orders and directives including Executive Order (EO) 13834, “Efficient Federal Operations” and its associated implementing instructions, DOE Order 436.1, “Departmental Sustainability,” the DOE Sustainability Report and Implementation Plan (SRIP), the INL Site Sustainability Plan (SSP), and Code of Federal Regulations (CFR). This document identifies the requirements of the Guiding Principles for Sustainable Federal Buildings (Guiding Principles) and briefly highlights the requirements of Leadership in Energy and Environmental Design (LEED®) Gold certification. LEED Gold certification, while optional, can be used to meet many of the requirements of the Guiding Principles.

13834↗

NASA NTRS2015

ASME Section VIII Recertification of a 33,000 Gallon Vacuum-jacketed LH2 Storage Vessel for Densified Hydrogen Testing at NASA Kennedy Space Center

The Ground Operations Demonstration Unit for Liquid Hydrogen (GODU-LH2) has been developed at NASA Kennedy Space Center in Florida. GODU-LH2 has three main objectives: zero-loss storage and transfer, liquefaction, and densification of liquid hydrogen. A cryogenic refrigerator has been integrated into an existing, previously certified, 33,000 gallon vacuum-jacketed storage vessel built by Minnesota Valley Engineering in 1991 for the Titan program. The dewar has an inner diameter of 9.5 and a length of 71.5; original design temperature and pressure ranges are -423 F to 100 F and 0 to 95 psig respectively. During densification operations the liquid temperature will be decreased below the normal boiling point by the refrigerator, and consequently the pressure inside the inner vessel will be sub-atmospheric. These new operational conditions rendered the original certification invalid, so an effort was undertaken to recertify the tank to the new pressure and temperature requirements (-12.7 to 95 psig and -433 F to 100 F respectively) per ASME Boiler and Pressure Vessel Code, Section VIII, Division 1. This paper will discuss the unique design, analysis and implementation issues encountered during the vessel recertification process.

Liquefaction↗

NASA NTRS2005

International Space Station Electric Power System Performance Code-SPACE

The System Power Analysis for Capability Evaluation (SPACE) software analyzes and predicts the minute-by-minute state of the International Space Station (ISS) electrical power system (EPS) for upcoming missions as well as EPS power generation capacity as a function of ISS configuration and orbital conditions. In order to complete the Certification of Flight Readiness (CoFR) process in which the mission is certified for flight each ISS System must thoroughly assess every proposed mission to verify that the system will support the planned mission operations; SPACE is the sole tool used to conduct these assessments for the power system capability. SPACE is an integrated power system model that incorporates a variety of modules tied together with integration routines and graphical output. The modules include orbit mechanics, solar array pointing/shadowing/thermal and electrical, battery performance, and power management and distribution performance. These modules are tightly integrated within a flexible architecture featuring data-file-driven configurations, source- or load-driven operation, and event scripting. SPACE also predicts the amount of power available for a given system configuration, spacecraft orientation, solar-array-pointing conditions, orbit, and the like. In the source-driven mode, the model must assure that energy balance is achieved, meaning that energy removed from the batteries must be restored (or balanced) each and every orbit. This entails an optimization scheme to ensure that energy balance is maintained without violating any other constraints.

Hojnicki, Jeffrey↗

NASA NTRS2014

Ice Roughness in Short Duration SLD Icing Events

Ice accretion codes depend on models of roughness parameters to account for the enhanced heat transfer during the ice accretion process. While mitigating supercooled large droplet (SLD or Appendix O) icing is a significant concern for manufacturers seeking future vehicle certification due to the pending regulation, historical ice roughness studies have been performed using Appendix C icing clouds which exhibit mean volumetric diameters (MVD) much smaller than SLD clouds. Further, the historical studies of roughness focused on extracting parametric representations of ice roughness using multiple images of roughness elements. In this study, the ice roughness developed on a 21-in. NACA 0012 at 0deg angle of attack exposed to short duration SLD icing events was measured in the Icing Research Tunnel at the NASA Glenn Research Center. The MVD's used in the study ranged from 100 micrometer to 200 micrometers, in a 67 m/s flow, with liquid water contents of either 0.6 gm/cubic meters or 0.75 gm/cubic meters. The ice surfaces were measured using a Romer Absolute Arm laser scanning system. The roughness associated with each surface point cloud was measured using the two-dimensional self-organizing map approach developed by McClain and Kreeger (2013) resulting in statistical descriptions of the ice roughness.

Icing↗

DOE OSTI2024

Nuclear Requalification of the ATR Core

The Advanced Test Reactor (ATR) creates a unique, high neutron flux materials testing environment that subsequently causes neutron embrittlement damage to its beryllium reflector. The reflector is eventually required to be replaced during a reactor Outage. Concurrently, a piece-for-piece core replacement is conducted to maintain reactor functionality called a core internals changeout (CIC). Once changeout is complete, ATR Reactor Engineering utilizes previous CIC data, notably 1977-1994 CIC data, to conduct predictive criticality analysis on the new, unirradiated core. However, CIC data has been inconsistently reported over the years making it difficult, and in some cases impossible, to utilize. These inconsistencies arise in various forms of not using correct units, inconsistent diagram usage, and not portraying the same kind of data similarly across the reports. To work around this inconsistency issue, Reactor Engineering is implementing the use of several new neutronic modeling codes that utilize modern computation speeds and methods to model the new core in different criticality environments. Further validation is then conducted by nuclear testing and bringing the reactor critical and conducting various irradiation tests. Upon completion and certification that the reactor passed all testing requirements, ATR can once again re-start normal operations.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

DOE OSTI2021

An infeasible-start framework for convex quadratic optimization, with application to constraint-reduced interior-point and other methods

A framework is proposed for solving general convex quadratic programs (CQPs) from an infeasible starting point by invoking an existing feasible-start algorithm tailored for inequality-constrained CQPs. The central tool is an exact penalty function scheme equipped with a penalty-parameter updating rule. The feasible-start algorithm merely has to satisfy certain general requirements, and so is the updating rule. Under mild assumptions, the framework is proved to converge on CQPs with both inequality and equality constraints and, at a negligible additional cost per iteration, produces an infeasibility certificate, together with a feasible point for an (approximately) ℓ 1 -least relaxed feasible problem, when the given problem does not have a feasible solution. The framework is applied to a feasible-start constraint-reduced interior-point algorithm previously proved to be highly performant on problems with many more inequality constraints than variables (“imbalanced”). Numerical comparison with popular codes (OSQP, qpOASES, MOSEK) is reported on both randomly generated problems and support-vector machine classifier training problems. The results show that the former typically outperforms the latter on imbalanced problems. Finally, application of the proposed infeasible-start framework to other feasible-start algorithms is briefly considered, and is tested on a simplex iteration.

97 MATHEMATICS AND COMPUTING↗