Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,387 records · Page 77

Requirements for an Integrated UAS CNS Architecture

The National Aeronautics and Space Administration (NASA) Glenn Research Center (GRC) is investigating revolutionary and advanced universal, reliable, always available, cyber secure and affordable Communication, Navigation, Surveillance (CNS) options for all altitudes of UAS operations. In Spring 2015, NASA issued a Call for Proposals under NASA Research Announcements (NRA) NNH15ZEA001N, Amendment 7 Subtopic 2.4. Boeing was selected to conduct a study with the objective to determine the most promising candidate technologies for Unmanned Air Systems (UAS) air-to-air and air-to-ground data exchange and analyze their suitability in a post-NextGen NAS environment. The overall objectives are to develop UAS CNS requirements and then develop architectures that satisfy the requirements for UAS in both controlled and uncontrolled air space. This contract is funded under NASAs Aeronautics Research Mission Directorates (ARMD) Aviation Operations and Safety Program (AOSP) Safe Autonomous Systems Operations (SASO) project and proposes technologies for the Unmanned Air Systems Traffic Management (UTM) service. Communications, Navigation and Surveillance (CNS) requirements must be developed in order to establish a CNS architecture supporting Unmanned Air Systems integration in the National Air Space (UAS in the NAS). These requirements must address cybersecurity, future communications, satellite-based navigation APNT, and scalable surveillance and situational awareness. CNS integration, consolidation and miniaturization requirements are also important to support the explosive growth in small UAS deployment. Air Traffic Management (ATM) must also be accommodated to support critical Command and Control (C2) for Air Traffic Controllers (ATC). This document therefore presents UAS CNS requirements that will guide the architecture.

Templin, Fred↗

Data & Reasoning Fabric

A Data & Reasoning Fabric shall provide a set of secured software infrastructure, tools, protocols, governance and policies to implement, administer, manage and operate data sharing and reasoning services across the entire span of air mobility and other ”smart” edge nodes.

Aeronautics↗

Data & Reasoning Fabric Overview

A Data & Reasoning Fabric shall provide a set of secured software infrastructure, tools, protocols, governance and policies to implement, administer, manage and operate data sharing and reasoning services across the entire span of air mobility and other ”smart” edge nodes.

National Airspace↗

Real-time digital simulation to improve advanced microgrid design

In this study, there are several ways to address energy reliability concerns during an extended power outage. This can include hardening the energy infrastructure to reduce potential loss of power, adding redundant backup systems with larger fuel tanks, and improving generator reliability through better maintenance. While each is valid, they are often expensive to adequately implement. The traditional emergency power approach for decades has been the use of building-tied emergency generators to start up and supply emergency power until the utility can come back on line. Unfortunately, operational experience from many recent extended power outages has shown that emergency backup generators are often mismatched in size with the building energy load, under-maintained such that their operational reliability is well below expected values, and have insufficient fuel to operate for the entire power outage. Here we describe how energy reliability and security can be enhanced with the use of Advanced Microgrids.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Evaluating the Maturity of Cybersecurity Programs for Building Control Systems

The cyber-physical security threat to buildings is complex, non-linear, and rapidly evolving as operational and information technologies converge and connect buildings to cyberspace. Cyberattacks on buildings can exploit smart building controls and breach corporate networks, causing financial and reputational damage. This may result in the loss of sensitive building information or the disruption of, or damage to, the systems necessary for the safe and efficient operation of buildings. For the buildings and facility infrastructure, there is a need for a robust national cybersecurity strategy for buildings, guidance on the selection and implementation of appropriate cybersecurity controls for buildings, an approach to evaluate the maturity and adequacy of the cybersecurity programs. To provide an approach for evaluating the maturity of the cybersecurity programs for building control systems, the US Department of Energy’s widely used Cybersecurity Capability and Maturity Model (C2M2) has been adapted into a building control systems version. The revised model, the Buildings-C2M2 (B-C2M2) provides maturity level indicators for cybersecurity programmatic domains. A “B-C2M2 Lite” version allows facility managers and building control system engineers, or information technology personnel to perform rapid self-assessments of their cybersecurity program. Both tools have been pilot tested on several facilities. This paper outlines the concept of a maturity model, describes the B-C2M2 tools, presents results and observations from the pilot assessments, and lays out plans for future work.

Glantz, Clifford S.↗

Secured control of circuit breakers in a digital substation

Methods and systems for secured control of circuit breakers in an electric power substation against undesired direct operation. Consequences of a malicious action are prevented or mitigated using a validation approach that either blocks the command or ensures a negligible effect on system operation. An example method, suitable for implementation in a monitoring device in an electric power substation, includes receiving a command to open or close a circuit breaker. In response, one or more state parameters for the electric power network that comprises the substation are then predicted, the predicted state parameters reflecting an operating state for the network under the assumption that the received command is executed. The method further comprises comparing the predicted one or more state parameters to corresponding operational limits. Execution of the command is then blocked, in response to determining that one or more of the predicted state parameters violate the corresponding operational limits.

Kondabathini, Anil↗

Nuclear Materials Process Modeling at the Y-12 National Security Complex

The Y-12 National Security Complex (Y-12) has implemented process modeling for various accountable nuclear materials operations that are performed throughout the plant. Using a discrete, event-based dynamic simulation program, key nuclear material streams are modeled, allowing Y-12 to effectively manage numerous points of interest within the plant’s production operations. Integration of the various material processes into a single, interdependent supply and demand model is one of the ongoing focuses within Y-12’s process modeling effort. The primary purpose of using dynamic simulation modeling is to allow for analysis of the nuclear materials inventories and forecasted supplies based on future demands. Analysis of these inventories includes capacity evaluation, bottleneck mitigation, and assessments of individual pieces of equipment to inform future facility investment decisions and associated project schedules. Modeling of the nuclear materials processes throughout the complex also allows for incorporation of changes relevant to production capabilities such as the upcoming transition of specific operations to the new Uranium Processing Facility. Prior to implementation of process modeling, Y-12 forecasted supply and demand of accountable nuclear materials streams using Microsoft Excel. With deterministic models such as Microsoft Excel, the annual forecasts, generated within data input condition parameters, can only provide a fixed point of data. Fixed data cannot simulate integrated material streams and account for the possibility of occurrences and other changes that dynamic simulations take into consideration. Y-12’s dynamic process modeling allows integrated simulations of multiple accountable nuclear materials processes, including supply and demand forecasting and analysis, and is a coordinated effort involving many steps of verification and validation (V&V), site briefings, testing, reporting, data mining, planning, and documentation that spans various programs throughout the Y-12 complex.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Fact Sheet - Long-length Scintillating Fibers for Radiation Detection

As the world looks to underground geological repositories for storing nuclear waste, technologies to safeguard the material are needed. An example of a project that developed a new technology is Tripwire. Tripwire proposes a multi-sensor system approach for geological spent nuclear fuel repositories that relies of radiation, vibration, and electromagnetic detection. Tripwire was developed by the Applied Radiation Measurements and Systems (ARMS) group at INL and sponsored by the National Nuclear Security Administration (NNSA). The ARMS group performs research and development, testing and evaluation, operational support, and training focused on applied ionizing radiation detection and measurement. Application areas include nuclear engineering for advanced reactors and fuel cycle operations, nuclear nonproliferation, nuclear counterproliferation, nuclear forensics, and arms control and disarmament.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗

Energy Systems Integration Facility Stewardship Summary: Fiscal Year 2025

A summary of NLR's stewardship of the nationally unique Energy Systems Integration Facility (ESIF) highlighting performance metrics, capability upgrades, and examples of R&D impact. 2025 brought a national focus on energy and ESIF is meeting the moment. All eyes are on data centers and domestic manufacturing and bringing the benefits of artificial intelligence to power system planning and operations. In step with national priorities, ESIF is building out capabilities that advance secure, reliable, and affordable power. ESIF hosted 190 multidisciplinary research projects, 855 high-performance computer users, and collaborated with 81 partners from industry, academia, research, and federal agencies. These research projects resulted in an AI method for detecting high-impedance faults with 90% accuracy, a grid controls demonstration in Connecticut, power quality validation of CorePower's flagship inductor, and a cybersecurity assessment of potential rogue capabilities in digitally connected energy devices. Facility infrastructure improvements enhanced the thermal research network, the SCADA system, the cyber range, power hardware-in-the-loop testing, and more. With support from the U.S Department of Energy (DOE), the ESIF laboratories continue to deliver leading solutions for secure, reliable, and affordable power.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Dante

SAND2022-12905 O Dante is a physical security simulation package used in evaluating protective staffing and physical security elements against adversarial threats. Dante simulates force-on-force scenarios in a batch Monte Carlo process. Analysts use the included Scenario Editor to define the scenarios for their site and then execute and analyze the results using the Batch Manager tool. Dante provides insight into how well a security system performs against threats and lets analysts mine the results for key indicators of system performance. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Hart, Brian↗

Scalability, Interoperability, and Security at the Data Discovery Level: A System Administrator's Perspective

The Global Change Master Directory (GCMD) has been one of the best known Earth science and global change data discovery online resources throughout its extended operational history. The growing popularity of the system since its introduction on the World Wide Web in 1994 has created an environment where resolving issues of scalability, security, and interoperability have been critical to providing the best available service to the users and partners of the GCMD. Innovative approaches developed at the GCMD in these areas will be presented with a focus on how they relate to current and future GO-ESSP community needs.

Source record↗

A Method of Synchrophasor Technology for Detecting and Analyzing Cyber-Attacks

Studying cybersecurity events and analyzing their impacts encourage planners and operators to develop innovative approaches for preventing attacks in order to avoid outages and other disruptions. This work considers two parts in security studies; detecting an integrity attack and examining its effects on power system generators. The detection was conducted through employing synchrophasor technology to provide authentication of ACG commands based on observed system operating characteristics. The examination of an attack is completed via a detailed simulation of a modified IEEE 68-bus benchmark model to show the associated power system dynamic response. The results of the simulation are discussed for assessing the impacts of cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Wireless Sensing and Communication Capability from In-Core to a Monitoring Center

Significant cost savings can be made if electrical cables can be replaced by wireless technology in current Nuclear Power Plants (NPP) and in advance reactor designs. Wireless technology can also provide in-core opportunities by significantly reducing the number of penetrations in the pressure vessel, cost and complexity of sensor installation and by increasing the efficiency of current and advanced reactors. Unlike other deployment scenarios for an industrial environment, operators need to have centralized control over all the networks. Centralized control will reduce implementation costs, provide single point control and enable monitoring of network devices, improve security, and enhance connectivity. Micro-sensors that can simultaneously monitor temperature and pressure within a fuel rod inside nuclear reactors will enable preventative actions during abnormal operating conditions. This ability could avert accidents and enable the expedient development of accident tolerant fuels. A novel micro-sensor suite (~ mm) to simultaneously measure multiple parameters such as temperature, strain, pressure, and neutron/gamma flux inside a fuel rod is being developed for use in reactors. The necessary communication architecture is also being developed to transmit measurement signals from the core to the plant's data cloud or control room. A three three-tier strategy has been developed to support wireless transmission of in-core measurements to the control room or to a secure cloud platform for control, analytics, and decision-making purposes. 1. In-core: data signal from in-core to outside of the pressure vessel within the containment building 2. Containment building: data signal from inside to the outside of the containment building and into the balance of the plant network 3. Balance of the plant network: information transmitted to the data cloud and control room This plan presents a wireless sensing and communication system for use within a reactor core and elsewhere. The communication technology is advantageous to compensate for network equipment failures and adverse data transmission conditions. Wireless technology will significantly increase the resiliency of the plants network system. The wireless system naturally provides multiple transmission path capability and data redundancy.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

The OSIRIS-REx Asteroid Sample Return Mission Operations Design

OSIRIS-REx is an acronym that captures the scientific objectives: Origins, Spectral Interpretation, Resource Identification, and Security-Regolith Explorer. OSIRIS-REx will thoroughly characterize near-Earth asteroid Bennu (Previously known as 1019551999 RQ36). The OSIRIS-REx Asteroid Sample Return Mission delivers its science using five instruments and radio science along with the Touch-And-Go Sample Acquisition Mechanism (TAGSAM). All of the instruments and data analysis techniques have direct heritage from flown planetary missions. The OSIRIS-REx mission employs a methodical, phased approach to ensure success in meeting the mission's science requirements. OSIRIS-REx launches in September 2016, with a backup launch period occurring one year later. Sampling occurs in 2019. The departure burn from Bennu occurs in March 2021. On September 24, 2023, the Sample Return Capsule (SRC) lands at the Utah Test and Training Range (UTTR). Stardust heritage procedures are followed to transport the SRC to Johnson Space Center, where the samples are removed and delivered to the OSIRIS-REx curation facility. After a six-month preliminary examination period the mission will produce a catalog of the returned sample, allowing the worldwide community to request samples for detailed analysis. Traveling and returning a sample from an Asteroid that has not been explored before requires unique operations consideration. The Design Reference Mission (DRM) ties together spacecraft, instrument and operations scenarios. Asteroid Touch and Go (TAG) has various options varying from ground only to fully automated (natural feature tracking). Spacecraft constraints such as thermo and high gain antenna pointing impact the timeline. The mission is sensitive to navigation errors, so a late command update has been implemented. The project implemented lessons learned from other "small body" missions. The key lesson learned was 'expect the unexpected' and implement planning tools early in the lifecycle. This paper summarizes the ground and spacecraft design as presented at OSIRIS-REx Critical Design Review(CDR) held April 2014.

mission operations↗

Predicting Safety Rod Reactivity Insertion in the Advanced Test Reactor

The Advanced Test Reactor (ATR), and complimentary zero-power ATR Critical (ATRC) reactor, located at Idaho National Labs (INL), are undergoing conversion from Highly Enriched Uranium (HEU) to Low Enriched Uranium (LEU). Both have a variety of testing locations that can receive large variations in flux due to its unique serpentine design, consisting of five lobes surrounding nine flux traps (see Figure 1). Initial criticality and power distribution throughout the core are controlled by core-external outer shim control cylinders (OSCCs). Distinct test loops allow for testing at specific temperatures, pressures, and irradiation conditions such as flux and fission density. The ATR is one of the key nuclear engineering research and testing facilities within the DOE National Laboratory Complex, and the ATRC supports its operation [1]. Currently, the Office of Material Management and Minimization (M3) within the National Nuclear Security Administration of the DOE is working to convert the remaining research reactors, including the ATR, from 93% HEU fuel to 19.75% LEU fuel (LEU) to support non-proliferation [2]. Extensive materials testing at INL and internationally has demonstrated that a high-density uranium molybdenum (U 10Mo) alloy can meet the performance requirements of the remaining high powered research reactors. The current LEU fuel element design is named the LOWE element. However, there are many technical challenges to address before the conversion to LEU can be successful, including the accurate characterization of the reactor core physics with LEU fuel. To ensure safe operation of the ATR, reactor engineers prepare a CSAP (Core Safety Assurance Package) before each cycle. The purpose of the CSAP is to verify the reactor performance calculation used to determine if the selected fuel loading meets operational, experimental, and safety criteria. Many of the criteria in the CSAP are limits on reactivity insertion in various accident scenarios.

42 ENGINEERING↗

Remote Sensing Laboratory - RSL

One of the primary resources supporting homeland security is the Remote Sensing Laboratory, or RSL. The Laboratory creates advanced technologies for emergency response operations, radiological incident response, and other remote sensing activities. RSL emergency response teams are on call 24-hours a day, and maintain the capability to deploy domestically and internationally in response to threats involving the loss, theft, or release of nuclear or radioactive material. Such incidents might include Nuclear Power Plant accidents, terrorist incidents involving nuclear or radiological materials, NASA launches, and transportation accidents involving nuclear materials. Working with the US Department of Homeland Security, RSL personnel equip, maintain, and conduct training on the mobile detection deployment unit, to provide nuclear radiological security at major national events such as the super bowl, the Indianapolis 500, New Year's Eve celebrations, presidential inaugurations, international meetings and conferences, just about any event where large numbers of people will gather.

54 ENVIRONMENTAL SCIENCES↗

NIF Operations Management Plan, August 2011

Lawrence Livermore National Laboratory’s (LLNL) National Ignition Facility (NIF) is a key component of the National Nuclear Security Administration’s (NNSA) Stockpile Stewardship Program, whose purpose is to maintain the safety, reliability, and effectiveness of our nation’s nuclear stockpile without underground nuclear testing. The NIF is crucial to the Stockpile Stewardship Program because it is the only facility that can create the conditions of extreme temperature and pressure—conditions that exist only in stars or in exploding nuclear weapons—that are relevant to understanding how our modern nuclear weapons operate. As such, the NIF’s primary mission is to attain fusion ignition in the laboratory. Fusion ignition not only supports Stockpile Stewardship needs, but also provides the basis for future decisions about fusion’s potential as a long-term energy source. Additionally, NIF provides scientists with access to high-energy-density regimes that can yield new insight and understanding in the areas of astrophysics, hydrodynamics, material properties, plasma physics, and radiative properties. The use of the NIF to support the Stockpile Stewardship Program and the advancement of basic high-energy-density science understanding is planned and managed through program-level execution plans and NIF directorate-level management teams. An example of a plan is the National Ignition Campaign Execution Plan. The NIF Operations Management Plan provides an overview of the NIF Operations organization and describes how the NIF is supported by the LLNL infrastructure and how it is safely and responsibly managed and operated. Detailed information on NIF management of the organization is found in a series of supporting plans, policies, and procedures. A list of related acronyms can be found in Appendix A of this document. The purpose of this document is to provide a roadmap of how the NIF Operations organization functions. It provides a guide to understanding the requirements, document flow down, organizational vision and mission, performance metrics, and interrelationship of the NIF Operations organization with other directorate and laboratory organizations. This document also provides a listing of roles and responsibilities, core processes, procedures, authority matrices, change control boards, and other information necessary for successfully functioning in the NIF Operations organization. This document, the NIF Shot Operations Plan, and the NIF Maintenance Plan together represent the primary documents satisfying our Conduct of Operations compliance requirement.

42 ENGINEERING↗

Accessible Telemetry Streams using a Zero Trust Architecture for the Flight Operations Directorate

As a result of information technology based work becoming increasingly distributed, unique challenges have been presented within the realm of defined network perimeters, namely with respect to secure access to resources. Historically, and from a simplistic abstract perspective, the common approach has been to adopt the, so-called, moat model whereby a physical network perimeter (or interconnected perimeters) is defined to encapsulate resources behind a boundary protected by a firewall. Users are provisioned access through a virtual private network (VPN) and may be further constrained to resources through specific firewall allow and disallow rulesets. Virtual Private Networks and firewall rulesets lead to common problems, particularly at scale and, as a result, perimeter-less architectures provided over the public internet are increasingly becoming prevalent, particularly with its more popular implementation, the Zero Trust Architecture. We present a proposed implementation of the Zero Trust Architecture with a particular concrete example utilizing a de-perimeterized network that requires authentication and authorization for each action between nodes and does not operate within an implicit trust boundary. It should be noted that this paper is not an attempt at providing comprehensive resolutions for the specific problem space with respect to perimeter based security and is more directed at providing information with regard to our proposed implementation of a Zero Trust Architecture for the Flight Operations Directorate. We direct the reader to our Introduction and Background section for more details on specific documentation and where it can be located as it relates to de-perimeterization and Zero Trust.

Paul Shoemaker↗