Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safety basis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8
All sourcesNASA NTRSDOE OSTI
NASA NTRS2014

The Evolution of System Safety at NASA

The NASA system safety framework is in the process of change, motivated by the desire to promote an objectives-driven approach to system safety that explicitly focuses system safety efforts on system-level safety performance, and serves to unify, in a purposeful manner, safety-related activities that otherwise might be done in a way that results in gaps, redundancies, or unnecessary work. An objectives-driven approach to system safety affords more flexibility to determine, on a system-specific basis, the means by which adequate safety is achieved and verified. Such flexibility and efficiency is becoming increasingly important in the face of evolving engineering modalities and acquisition models, where, for example, NASA will increasingly rely on commercial providers for transportation services to low-earth orbit. A key element of this objectives-driven approach is the use of the risk-informed safety case (RISC): a structured argument, supported by a body of evidence, that provides a compelling, comprehensible and valid case that a system is or will be adequately safe for a given application in a given environment. The RISC addresses each of the objectives defined for the system, providing a rational basis for making informed risk acceptance decisions at relevant decision points in the system life cycle.

Dezfuli, Homayoon↗
NASA NTRS1994

The use of interactive computer vision and robot hand controllers for enhancing manufacturing safety

Current available robotic systems provide limited support for CAD-based model-driven visualization, sensing algorithm development and integration, and automated graphical planning systems. This paper describes ongoing work which provides the functionality necessary to apply advanced robotics to automated manufacturing and assembly operations. An interface has been built which incorporates 6-DOF tactile manipulation, displays for three dimensional graphical models, and automated tracking functions which depend on automated machine vision. A set of tools for single and multiple focal plane sensor image processing and understanding has been demonstrated which utilizes object recognition models. The resulting tool will enable sensing and planning from computationally simple graphical objects. A synergistic interplay between human and operator vision is created from programmable feedback received from the controller. This approach can be used as the basis for implementing enhanced safety in automated robotics manufacturing, assembly, repair and inspection tasks in both ground and space applications. Thus, an interactive capability has been developed to match the modeled environment to the real task environment for safe and predictable task execution.

Marzwell, Neville I.↗
NASA NTRS2011

Probabilistic Risk Assessment Procedures Guide for NASA Managers and Practitioners (Second Edition)

Probabilistic Risk Assessment (PRA) is a comprehensive, structured, and logical analysis method aimed at identifying and assessing risks in complex technological systems for the purpose of cost-effectively improving their safety and performance. NASA's objective is to better understand and effectively manage risk, and thus more effectively ensure mission and programmatic success, and to achieve and maintain high safety standards at NASA. NASA intends to use risk assessment in its programs and projects to support optimal management decision making for the improvement of safety and program performance. In addition to using quantitative/probabilistic risk assessment to improve safety and enhance the safety decision process, NASA has incorporated quantitative risk assessment into its system safety assessment process, which until now has relied primarily on a qualitative representation of risk. Also, NASA has recently adopted the Risk-Informed Decision Making (RIDM) process [1-1] as a valuable addition to supplement existing deterministic and experience-based engineering methods and tools. Over the years, NASA has been a leader in most of the technologies it has employed in its programs. One would think that PRA should be no exception. In fact, it would be natural for NASA to be a leader in PRA because, as a technology pioneer, NASA uses risk assessment and management implicitly or explicitly on a daily basis. NASA has probabilistic safety requirements (thresholds and goals) for crew transportation system missions to the International Space Station (ISS) [1-2]. NASA intends to have probabilistic requirements for any new human spaceflight transportation system acquisition. Methods to perform risk and reliability assessment in the early 1960s originated in U.S. aerospace and missile programs. Fault tree analysis (FTA) is an example. It would have been a reasonable extrapolation to expect that NASA would also become the world leader in the application of PRA. That was, however, not to happen. Early in the Apollo program, estimates of the probability for a successful roundtrip human mission to the moon yielded disappointingly low (and suspect) values and NASA became discouraged from further performing quantitative risk analyses until some two decades later when the methods were more refined, rigorous, and repeatable. Instead, NASA decided to rely primarily on the Hazard Analysis (HA) and Failure Modes and Effects Analysis (FMEA) methods for system safety assessment.

Stamatelatos,Michael↗
DOE OSTI2024

Idaho National Laboratory Integrated Multisite SSHAC Level 3: Probabilistic Volcanic Hazards Assessment

The Idaho National Laboratory (INL) resides on the eastern Snake River Plain (ESRP), part of the Snake River Plain (SRP) with a complex origin and geologic history of volcanism. Much of the Quaternary (last 2.58 million years) volcanism within 400 km of INL is genetically associated with a major thermal anomaly referred to as the Yellowstone hotspot, which is currently located more than 180 km northeast of INL. Near INL, local volcanic sources include silicic domes near its southern border, and numerous dike-fed basaltic vents of the ESRP, some of which are near or within the INL boundaries. Quantitative probabilistic assessments of screened-in volcanic hazardous phenomena for nine different facility complexes at the INL are presented for a Senior Seismic Hazard Analysis Committee (SSHAC) Level 3 (SL3) study. The comprehensive, integrated multisite SSHAC study consists of a single regional Probabilistic Volcanic Hazards Assessment (PVHA) that pertains to all nine INL facility complexes, with site-specific information developed at each respective area of interest (AOI), referred to as the "INL facility AOI" (Figure ES-1). Hazard products are generated for specified INL facility AOIs for use by multiple stakeholders from different agencies in risk-informed decision-making regarding site selection, operations, and design of nuclear facilities at INL, consistent with U.S. Department of Energy (DOE) and U.S. Nuclear Regulatory Commission (NRC) regulatory guidance. The study also serves as the basis for future periodic safety assessments required for existing DOE facilities, such as 10-year evaluations of natural-phenomena hazards. Elements of the INL PVHA including initial characterization, screening, quantitative assessments of eruption and hazard potential, and consideration of facility needs are conducted using the three phases of the SSHAC process: evaluation, integration, and documentation. As per regulatory guidance, the SSHAC framework provided the necessary processes and procedures for the PVHA Technical Integration (TI) team, at three workshops, five formal working meetings and many TI team remote meetings, to conduct initial characterization, screen the volcanic hazards, create PVHA model inputs, exercise those models in the PVHA, consider facility-specific volcanic hazard needs, and perform final hazard calculations. The Participatory Peer Review Panel (PPRP) provided independent oversight and performed process and technical reviews of the PVHA throughout its duration. The study included an extensive New Data Collection and Analyses (NDCA) program developed by the PVHA TI team to reduce uncertainties in hazard-significant elements in the PVHA model. NDCA activities generated 20 reports providing important contributory datasets and results to the project database for characterizing the ESRP. For example, a report compiling the dimensions of ESRP shield volcanoes and lava fields was used to construct volcanic footprints (areas of impact), was compared with data from INL subsurface cores, and was used to validate the results of lava-flow inundation modeling on the contemporary terrain. Another example is the acquisition of aeromagnetic data over INL and its surrounding area, with maps of buried magmatic features (e.g., subsurface volcanoes and swarms of feeder dikes) that informed the PVHA conceptual model of volcanism. The SSHAC evaluation process was used to conduct all elements of the PVHA including initial characterization and screening. Existing data and NDCA activities provided the foundation to develop the tectonomagmatic conceptual model of volcanism for the region of geographical interest in the SRP and Yellowstone hotspot volcanic system, and for considering volcanoes in the western US. Considering Quaternary volcanic sources active during this period, the screening approach identified and evaluated magma compositions, types of eruptive and intrusive phenomena, types of hazardous phenomena, and proximity of sources to INL. The PVHA TI team evaluated 18 types of magmatic sources in terms of 20 potentially hazardous phenomena, resulting in 360 screening decisions. The screening process resulted in 140 screened-in hazardous volcanic phenomena for Quaternary volcanic sources 1) proximal to INL facility complexes in the ESRP (64 basaltic and 54 silicic), 2) regional sources associated with the Yellowstone caldera system and Blackfoot Reservoir volcanic field (7), and 3) more distal sources from thirteen Cascade volcanoes and two volcanoes at Long Valley caldera (CA).

58 GEOSCIENCES↗
NASA NTRS1994

Evaluation in context: ATC automation in the field

The process for incorporating advanced technologies into complex aviation systems is as important as the final product itself. This paper described a process that is currently being applied to the development and assessment of an advanced ATC automation system, CTAS. The key element of the process is field exposure early in the system development cycle. The process deviates from current established practices of system development -- where field testing is an implementation endpoint -- and has been deemed necessary by the FAA for streamlining development and bringing system functions to a level of stability and usefulness. Methods and approaches for field assessment are borrowed from human factors engineering, cognitive engineering, and usability engineering and are tailored for the constraints of an operational ATC environment. To date, the focus has been on the qualitative assessment of the match between TMA capabilities and the context for their use. Capturing the users' experience with the automation tool and understanding tool use in the context of the operational environment is important, not only for developing a tool that is an effective problem-solving instrument but also for defining meaningful operational requirements. Such requirements form the basis for certifying the safety and efficiency of the system. CTAS is the first U.S. advanced ATC automation system of its scope and complexity to undergo this field development and assessment process. With the rapid advances in aviation technologies and our limited understanding of their impact on system performance, it is time we opened our eyes to new possibilities for developing, validating, and ultimately certifying complex aviation systems.

Harwood, Kelly↗
DOE OSTI2021

Review of Graphite Properties Relevant to Micro-Reactor Design

Microreactors are advanced reactors that are designed to be small, scalable, and portable with up to 20 MW power. These reactors could operate independently, or as part of a microgrid, without need of a frequent refueling. Micro-reactors are designed to be deployable to provide electric power in remote locations, therefore providing greater flexibility. Several micro-reactors are under development in the US. These reactors are based on advanced gas-cooled or heat-pipe concepts. While Graphite can be found in various applications, some high-temperature reactors plan to employ Graphite in their core components due to its role as a moderator and its ability to maintain its structural integrity when subjected to elevated temperatures and high neutron fluence. Although there is significant experience with use of Graphite in nuclear applications, there are still unknowns that should be addressed. Graphite properties depend on the graphite type and affected by the fabrication procedures. Material properties are functions of the temperature and irradiation dose. The fundamental properties also affected by the oxidation environment. Therefore, in-depth understanding of graphite properties, including the effect of irradiation, oxidation and other influencing parameters are required to evaluate the design accurately. This draft aims to provide a comprehensive review of material properties for Graphite relevant to micro reactor design. For this work, two distinct grades of graphite were considered, namely IG-110 and Mersen-2114. Physical, thermal, and mechanical properties for these grades were comparatively evaluated. The properties that are discussed in this draft aim to serve as a basis for design and safety analysis.

42 ENGINEERING↗
DOE OSTI2023

Initial Delayed Critical Configuration of SHEBA I and Subcritical Measurements by Californium Source-Driven Noise Analysis

In September 1980, the initial delayed critical configuration of the Solution High-Energy Burst Assembly (SHEBA I) was assembled, and the US Department of Energy’s Oak Ridge National Laboratory (ORNL) staff performed near critical and subcritical measurements using the californium source-driven noise analysis (CSDNA) method at the Los Alamos National Laboratory (LANL) Critical Experiments Facility. An unreflected 56 cm outside diameter stainless-steel cylindrical tank was partially filled with uranyl fluoride solution (235U enrichment was 4.95 wt %) until delayed criticality was achieved. Then, measurements were performed for various fuel solution heights from delayed critical to 60% of the height required for delayed criticality. The stainless-steel tank had an inside diameter of 54.6 cm and a height of 105 cm and was partially (20–36.5 cm) filled with an aqueous solution of uranyl fluoride (with a density of 2.162 g/cm 3 ). The density of the uranium in solution was 1.042 g/cm 3 , and the solution had a H/U atomic ratio of 20.43. The tank had a 6.35 mm wall thickness and an axial reentrant tube with an inside diameter of 6.02 cm and wall thickness of 0.165 cm. The tank was essentially unreflected on the top and sides because it was in a thin metal shed. The reactivity of the near–delayed critical configuration was −10.4 cents, which corresponds to a k eff value of 0.99922. In addition to the CSDNA measurements, the prompt neutron decay constants were determined from break frequency noise analysis (BNFA) measurements. The subcritical neutron multiplication factors from CSDNA and BFNA compared extremely well. These data can be used as the basis of International Nuclear Criticality Safety Evaluation benchmark for the near-critical configuration, and the k eff values at various subcritical configurations can be used as subcritical benchmarks. Furthermore, the measured prompt neutron decay constants can be used as reactor physics benchmarks. This report documents the experimental information for the measurements performed so that, at a later date, researchers could perform the required uncertainty and calculational analyses and documentation to use these data for an International Criticality Safety Benchmark Evaluation Program (ICSBEP) or Nuclear Energy Agency benchmarks. The measured prompt neutron decay constants can be used as the basis of a benchmark for the International Reactor Physics Evaluation Program (IRPhEP). The data from these measurements are available from the ORNL Records Management Services Department, and the logbook is available from ICSBEP at Idaho National Laboratory.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
NASA NTRS2020

Cyclomatic Complexity and Basis Path Testing Study

The NASA Chief Engineer requested the NASA Engineering and Safety Center (NESC) to conduct a study to determine the benefits of cyclomatic complexity and basis path testing (BPT) for software and whether they should be required. The principal focus of the assessment was to assess the use of cyclomatic complexity and BPT on safety-critical software. The purpose was to ensure that safety-critical software is not overly complicated to the point of increasing coding errors and that verification is more robust than for non-safety-critical software. This document contains the outcome of the assessment.

Cyclomatic Complexity; NASA Engineering and Safety↗
NASA NTRS2011

Towards Measurement of Confidence in Safety Cases

Arguments in safety cases are predominantly qualitative. This is partly attributed to the lack of sufficient design and operational data necessary to measure the achievement of high-dependability targets, particularly for safety-critical functions implemented in software. The subjective nature of many forms of evidence, such as expert judgment and process maturity, also contributes to the overwhelming dependence on qualitative arguments. However, where data for quantitative measurements is systematically collected, quantitative arguments provide far more benefits over qualitative arguments, in assessing confidence in the safety case. In this paper, we propose a basis for developing and evaluating integrated qualitative and quantitative safety arguments based on the Goal Structuring Notation (GSN) and Bayesian Networks (BN). The approach we propose identifies structures within GSN-based arguments where uncertainties can be quantified. BN are then used to provide a means to reason about confidence in a probabilistic way. We illustrate our approach using a fragment of a safety case for an unmanned aerial system and conclude with some preliminary observations

Denney, Ewen↗
NASA NTRS1982

A system safety model for developmental aircraft programs

Basic tenets of safety as applied to developmental aircraft programs are presented. The integration of safety into the project management aspects of planning, organizing, directing and controlling is illustrated by examples. The basis for project management use of safety and the relationship of these management functions to 'real-world' situations is presented. The rationale which led to the safety-related project decision and the lessons learned as they may apply to future projects are presented.

Amberboy, E. J.↗
NASA NTRS1993

NASA safety program activities in support of the Space Exploration Initiatives Nuclear Propulsion program

The activities of the joint NASA/DOE/DOD Nuclear Propulsion Program Technical Panels have been used as the basis for the current development of safety policies and requirements for the Space Exploration Initiatives (SEI) Nuclear Propulsion Technology development program. The Safety Division of the NASA Office of Safety and Mission Quality has initiated efforts to develop policies for the safe use of nuclear propulsion in space through involvement in the joint agency Nuclear Safety Policy Working Group (NSPWG), encouraged expansion of the initial policy development into proposed programmatic requirements, and suggested further expansion into the overall risk assessment and risk management process for the NASA Exploration Program. Similar efforts are underway within the Department of Energy to ensure the safe development and testing of nuclear propulsion systems on Earth. This paper describes the NASA safety policy related to requirements for the design of systems that may operate where Earth re-entry is a possibility. The expected plan of action is to support and oversee activities related to the technology development of nuclear propulsion in space, and support the overall safety and risk management program being developed for the NASA Exploration Program.

Sawyer, J. C., Jr.↗
DOE OSTI2025

Loss of Flow Conditions in a Modern Pool-type SFR and In-Pile Experiment Design

The metallic fuel safety performance under unprotected design-basis transients is a key consideration for the deployment of advanced sodium fast reactors (SFRs). Reliable data are needed to validate advanced safety codes, reduce uncertainty in cladding failure thresholds, and strengthen confidence in licensing approaches. To address this need, this report develops blueprints for a conceptual sodium loss-of-flow (LOF) experiment in the Mk-IIIR loop at the Transient Reactor Test Facility (TREAT), providing the technical foundation for future integral testing.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2020

Distributed Solar Quality and Safety in India: Key Challenges and Potential Solutions

The quality and safety of solar systems and their installation has become a concern for investors, regulators, consumers, and Discoms in India. The push for low prices and lack of quality standards are driving project developers to install low quality products, with poor system design and execution on-site. Existing literature and stakeholder interviews point to the rampant use of low quality, sub-standard solar products in India. These products deliver less energy than expected, or have high detrition rates, or have lower product life–all of which are serious issues for developers whose return on investment depend on the amount of power generation from these solar systems for the expected life of the project. Equipment which does not conform to the minimum quality standards also creates safety risks for the distribution network. Performance and safety concerns lower investor and consumer confidence in solar products with the potential to threaten market development. This report formulates a set of recommendations to concerned authorities in India to improve the quality and safety of rooftop solar systems. Primary and secondary sources are employed to understand the current solar quality and safety scenario in India to provide the basis for future recommendations. An overview of international experiences and lessons learned on solar quality and safety issues is also conducted to understand potential solutions for India.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Review of the Safety Analyses of the Konrad Repository - 20530

The Bundesgesellschaft fuer Endlagerung (BGE) is the license holder of all geological repository sites in Germany since 2017. Besides the construction of the Konrad repository for the emplacement of low- and intermediate-level waste (LILW), the operation of the Asse II mine including the retrieval of the emplaced waste, and the preparation for the closure of the Morsleben repository, BGE is responsible to carry out the operative tasks of selecting a site for a high-level waste (HLW) repository. The Konrad repository is Germany's first repository for radioactive waste with negligible heat generation, which was fully licensed under atomic law within the scope of a plan approval procedure from the original application in 1982 until the license was granted in 2002 and finally confirmed by the Federal Administrative Court in 2007. The emplacement of LILW was licensed up to a volume of 303,000 m{sup 3} with a total β/γ-activity of 5 x 10{sup 18} Bq and a total α-activity of 1.5 x 10{sup 17} Bq. Currently, the former iron ore mine Konrad is being converted to a repository and is expected to come into operation in 2027. But what if there is no safety case in place nor a regulatory framework tailored for a change of documents in order to ensure the safety according to the state-of-the-art of science and technology during the evolution of a long-term project such as a geological repository? In this presentation, a review procedure of the safety analyses, that have been the basis of the plan approval decision for the Konrad repository at that time, will be described. Furthermore, the first results of this graduated review procedure for updating the safety analyses will be presented. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS1976

Report to the NASA Administrator by the Aerospace Safety Advisory Panel on the Space Shuttle Program. Part 1: Observations and Conclusions

Each system was chosen on the basis of its importance with respect to crew safety and mission success. An overview of the systems management is presented. The space shuttle main engine, orbiter thermal protection system, avionics, external tanks and solid rocket boosters were examined. The ground test and ground support equipment programs were studied. Program management was found to have an adequate understanding of the significant ground and flight risks involved.

Source record↗
DOE OSTI2025

Consideration of Decabromodiphenyl Ether Flame Retardant in Thermal and Radiation Aging of Crosslinked Polyethylene Cable Insulation

Decabromodiphenyl ether (decaBDE) has been used as a flame-retardant additive in nuclear-grade electrical cable insulation. However, decaBDE has been identified as a persistent, bioaccumulative and toxic (PBT) substance, leading to regulatory scrutiny. On January 6, 2021, the Environmental Protection Agency (EPA) published a final rule to phase out decaBDE. The 2021 rule set a two-year compliance deadline for “processing and distribution in commerce of decaBDE for use in wire and cable insulation in nuclear power generation facilities.” In recognition of industry concerns following a sudden discontinuation of decaBDE-containing Class 1E wire and cable essential for nuclear power operations and the time needed for qualifying the individual components using the alternative insulation technology, an extended compliance deadline was set in the finalized amendments to the 2021 rule as published by the Environmental Appeals Board on November 12, 2024. The 2024 rule set the compliance deadline for processing and distributing decaBDE-containing wire and cable insulation until the end of the service life of these materials. Since decaBDE has long been relied upon as the flame retardant in one of the most common cross-linked polyethylene (XLPE) nuclear cable insulation formulations, RSCC Firewall III insulation, questions have naturally arisen regarding whether changes in cable performance might be expected for XLPE containing a decaBDE alternative, especially for safety-related cables that must perform their safety function in a design basis event such as a loss of coolant accident.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1982

Integrated Application of Active Controls (IAAC) technology to an advanced subsonic transport project. ACT/Control/Guidance System study, volume 1

The active control technology (ACT) control/guidance system task of the integrated application of active controls (IAAC) technology project within the NASA energy efficient transport program was documented. The air traffic environment of navigation and air traffic control systems and procedures were extrapolated. An approach to listing flight functions which will be performed by systems and crew of an ACT configured airplane of the 1990s, and a determination of function criticalities to safety of flight, are the basis of candidate integrated ACT/Control/Guidance System architecture. The system mechanizes five active control functions: pitch augmented stability, angle of attack limiting, lateral/directional augmented stability, gust load alleviation, and maneuver load control. The scope and requirements of a program for simulating the integrated ACT avionics and flight deck system, with pilot in the loop, are defined, system and crew interface elements are simulated, and mechanization is recommended. Relationships between system design and crew roles and procedures are evaluated.

Source record↗
NASA NTRS1994

The Charlotte (TM) intra-vehicular robot

NASA has identified telerobotics and telescience as essential technologies to reduce the crew extra-vehicular activity (EVA) and intra-vehicular activity (IVA) workloads. Under this project, we are developing and flight testing a novel IVA robot to relieve the crew of tedious and routine tasks. Through ground telerobotic control of this robot, we will enable ground researchers to routinely interact with experiments in space. Our approach is to develop an IVA robot system incrementally by employing a series of flight tests with increasing complexity. This approach has the advantages of providing an early IVA capability that can assist the crew, demonstrate capabilities that ground researchers can be confident of in planning for future experiments, and allow incremental refinement of system capabilities and insertion of new technology. In parallel with this approach to flight testing, we seek to establish ground test beds, in which the requirements of payload experimenters can be further investigated. In 1993 we reviewed manifested SpaceHab experiments and defined IVA robot requirements to assist in their operation. We also examined previous IVA robot designs and assessed them against flight requirements. We rejected previous design concepts on the basis of threat to crew safety, operability, and maintainability. Based on this insight, we developed an entirely new concept for IVA robotics, the CHARLOTTE robot system. Ground based testing of a prototype version of the system has already proven its ability to perform most common tasks demanded of the crew, including operation of switches, buttons, knobs, dials, and performing video surveys of experiments and switch panels.

Swaim, Patrick L.↗