Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,477 records · Page 82
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

Technical Maturity Assessment of Risk-Informed Safety Analysis Tools

Ensuring maximum safety while enhancing economic benefit is one of most important goal of In the of US Light Water Reactor Sustainability (LWRS) program. Optimization of the safety margins will provide best practice to achieve this goal which can also lead to cost reduction. Under the LWRS framework, the Risk-Informed Systems Analysis (RISA) Pathway has been focusing on the optimization of safety margin and minimization of uncertainties to ensure both safety and economics at the highest level. One of the important activities of the pathway is to deploy risk-informed analysis tools to related nuclear industry to support precise representation of safety margins and factors that contribute to cost and safety. The tools therefore need highest technical maturity so that industry can use immediately with strong credibility. The tools should have a capability to support risk-informed decision making for both probabilistic and deterministic elements of safety. The RISA Pathway, therefore, have been performing a comprehensive assessment of technical maturity and verification and validation (V&V) status of selected tools to improve adaptability to the industry. The technical maturity assessment includes three work scope: (a) define requirements based on risk-informed concept; (b) investigate and review development and V&V status for technical maturity assessment; and (c) identify technical gap and propose improvement to meet RISA toolkit requirements. The Requirement Traceability Matrix (RTM) concept was used to capture the requirements from user and developer of the project and/or software. The importance of each requirements was evaluated by Phenomena Identification and Ranking Technology (PIRT) which systematically gathers information and ranks the importance of the information. Finally, degree of the maturity was measured by Technology Readiness Level (TRL) for estimating the maturity of the technologies during the development and acquisition phase of certain technology. This paper summarizes development of assessment method and technical maturity evaluation of multi-purpose probabilistic risk analysis tool RAVEN.

, PIRT↗
NASA NTRS2003

Structural Evaluation of Exo-Skeletal Engine Fan Blades

The available computational simulation capability is used to demonstrate the structural viability of composite fan blades of innovative Exo-Skeletal Engine (ESE) developed at NASA Glenn Research Center for a subsonic mission. Full structural analysis and progressive damage evaluation of ESE composite fan blade is conducted through the NASA in-house computational simulation software system EST/BEST. The results of structural assessment indicate that longitudinal stresses acting on the blade are in compression. At a design speed of 2000 rpm, pressure and suction surface outer most ply stresses in longitudinal, transverse and shear direction are much lower than the corresponding composite ply strengths. Damage is initiated at 4870 rpm and blade fracture takes place at rotor speed of 7735 rpm. Damage volume is 51 percent. The progressive damage, buckling, stress and strength results indicate that the design at hand is very sound because of the factor of safety, damage tolerance, and buckling load of 6811 rpm.

Kuguoglu, Latife↗
NASA NTRS2002

Alternative Metrics for Evaluating the Resilence of Advanced Life Support Systems

Ensuring the safety of the crew is a key performance requirement of a life support system. However, a number of conceptual and practical difficulties arise when devising metrics to concretely measure the ability of a life support system to maintain critical functions in the presence of anticipated and unanticipated faults. Resilience is a dynamic property of a life support system that depends on the complex interactions between faults, controls and system hardware. We review some of the approaches to understanding the robustness or resilience of complex systems being developed in diverse fields such as ecology, software engineering and cell biology and discuss their applicability to regenerative life support systems. We also consider how approaches to measuring resilience vary depending on system design choices such as the definition and choice of the nominal operating regime. Finally, we explore data collection and implementation issues such as the key differences between the instantaneous or conditional and average or overall measures of resilience. Extensive simulation of a hybrid computational model of a water revitalization subsystem (WRS) with probabilistic, component-level faults provides data about off-nominal behavior of the system. The data are used to consider alternative measures of resilience as predictors of the system's ability to recover from component-level faults.

Bell, Ann Maria↗
NASA NTRS2001

Team Expo: A State-of-the-Art JSC Advanced Design Team

In concert with the NASA-wide Intelligent Synthesis Environment Program, the Exploration Office at the Johnson Space Center has assembled an Advanced Design Team. The purpose of this team is two-fold. The first is to identify, use, and develop software applications, tools, and design processes that streamline and enhance a collaborative engineering environment. The second is to use this collaborative engineering environment to produce conceptual, system-level-of-detail designs in a relatively short turnaround time, using a standing team of systems and integration experts. This includes running rapid trade studies on varying mission architectures, as well as producing vehicle and/or subsystem designs. The standing core team is made up of experts from all of the relevant engineering divisions (e.g. Power, Thermal, Structures, etc.) as well as representatives from Risk and Safety, Mission Operations, and Crew Life Sciences among others. The Team works together during 2- hour sessions in the same specially enhanced room to ensure real-time integration/identification of cross-disciplinary issues and solutions. All subsystem designs are collectively reviewed and approved during these same sessions. In addition there is an Information sub-team that captures and formats all data and makes it accessible for use by the following day. The result is Team Expo: an Advanced Design Team that is leading the change from a philosophy of "over the fence" design to one of collaborative engineering that pushes the envelope to achieve the next-generation analysis and design environment.

Tripathi, Abhishek↗
DOE OSTI2017

Analysis of, and defense against, spurious actuations and other incorrect behaviors of digital control systems - 390

Modern digital instrumentation and control (I and C) systems offer nearly unlimited functional capability. However, the complexity of their design (including their system software and application software) is significantly higher than that of conventional, hardwired systems, to the point that it is generally impossible to demonstrate that there are no residual design errors, even when the best development and verification techniques have been applied. When activated by specific conditions, design errors could result in systematic failures, i.e., failures that occur deterministically each time and wherever an activating condition is present. Redundancy could be defeated when the same design error affects multiple channels or systems, and the activating condition affects several of these channels or systems. In the case of safety I and C systems, most of the functions are poised protection functions that must be actuated when and only when a demand situation occurs in the plant. In nuclear power plants, the most dangerous failure mode for such functions generally is failure to actuate, and many measures are taken to protect from such failure mode. This paper considers the other failure modes of safety I and C functions, and also the failure modes of the other I and C functions that are less important to safety. It is not limited to poised functions, and considers other types of functions such as regulation functions or human interface functions. It proposes a framework for analyzing and providing defense against spurious actuations and other incorrect behaviors from digital I and C systems directly interacting with the plant process or with operators: these might be useful for example to justify that design bases for reactor protection are adequate, or to ensure plant performance and availability. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2024

NASA Engineering and Safety Center Technical Bulletins 2007-2023

An NESC Technical Bulletin captures critical knowledge in the form of new engineering information or best practices in a one-page format that have resulted from NESC independent testing, analysis, and assessments. This document contains all NESC Technical Bulletins from 2007 through 2023.

additive manufacturing, battery, braycote, capacit↗
DOE OSTI2014

SU-E-J-103: Setup Errors Analysis by Cone-Beam CT (CBCT)-Based Imaged-Guided Intensity Modulated Radiotherapy for Esophageal Cancer

Purpose: To quantify setup errors by pretreatment kilovolt cone-beam computed tomography(KV-CBCT) scans for middle or distal esophageal carcinoma patients. Methods: Fifty-two consecutive middle or distal esophageal carcinoma patients who underwent IMRT were included this study. A planning CT scan using a big-bore CT simulator was performed in the treatment position and was used as the reference scan for image registration with CBCT. CBCT scans(On-Board Imaging v1. 5 system, Varian Medical Systems) were acquired daily during the first treatment week. A total of 260 CBCT scans was assessed with a registration clip box defined around the PTV-thorax in the reference scan based on(nine CBCTs per patient) bony anatomy using Offline Review software v10.0(Varian Medical Systems). The anterior-posterior(AP), left-right(LR), superiorinferior( SI) corrections were recorded. The systematic and random errors were calculated. The CTV-to-PTV margins in each CBCT frequency was based on the Van Herk formula (2.5Σ+0.7σ). Results: The SD of systematic error (Σ) was 2.0mm, 2.3mm, 3.8mm in the AP, LR and SI directions, respectively. The average random error (σ) was 1.6mm, 2.4mm, 4.1mm in the AP, LR and SI directions, respectively. The CTV-to-PTV safety margin was 6.1mm, 7.5mm, 12.3mm in the AP, LR and SI directions based on van Herk formula. Conclusion: Our data recommend the use of 6 mm, 8mm, and 12 mm for esophageal carcinoma patient setup in AP, LR, SI directions, respectively.

62 RADIOLOGY AND NUCLEAR MEDICINE↗
NASA NTRSDate not supplied

Results from NASA Agile Teams Study

In order to meet the demands of the current global economy, a study of agile teams at NASA was conducted by the NASA Engineering and Safety Center (NESC) to explore how the Agency can become more adaptable and flexible due to several influences, including the maturity and availability of digital tools and NASA’s increased reliance on commercial providers. NESC Technical Discipline Teams (TDTs) perform annual studies to understand the needs of their stakeholders, establish a state of the discipline, and inform strategic planning efforts. As part of the 2022 interview series, the Systems Engineering TDT utilized the dissertation work of Dr. Jackelynne Silva-Martinez that focused on NASA agile teams. The Systems Engineering TDT partnered with the Software and Human Factors TDTs on the formulation of interview questions and subsequent solicitation of customer inputs, which helped attract diverse agile teams across the Agency. 34 participants were interviewed, including civil servants and contractors, with open-ended questions related to their teams’ adoption and transition to agile. Participants were also questioned about their perceptions of the implementation of agile approaches across the Agency. Results showed a consistent framing of agile as incremental knowledge growth, a way of showing progress, and as the incorporation of frequent customer feedback. However, participants emphasized a lack of a common understanding of agile across the Agency, which sometimes caused managers and engineers to be reluctant to accept and support them. Results also showed the most successful agile teams had formal training with over five years of agile experience, used retrospectives, and tailored their agile processes for their specific situation and needs. This paper provides details of the interview responses gathered in the study and suggests actions for NASA to become more agile.

NASA↗
NASA NTRSDate not supplied

Controlled Rest: Investigating the Use of an In-Flight Sleepiness Countermeasure

INTRODUCTION: Sleepiness is commonly reported amongst commercial airline pilots and is recognized as a safety risk due to its impact on performance. Controlled Rest (CR) refers to a short, voluntary nap opportunity taken by pilots on the flight deck as a countermeasure to unanticipated sleepiness in flight. This study explores the profile of CR use in a long-haul commercial airline. METHODS: Forty-four pilots filled in an application-based sleep/work diary and wore actiwatches for approximately 2 weeks. Complete data sets from 239 flights including sleep diaries, actigraphy, and schedules were merged and analyzed. Sleep diary entries were used to set CR intervals in the actigraphy software, which was then used to predict sleep within these intervals. All time-stamps of sleep periods and flight schedules were adjusted for home-base time of the pilots. Pearson Correlations were used to assess the influence of pilot demographics on CR use. A mixed-effects logistic regression was used to analyze the impact of schedule factors on CR. RESULTS: Pilots reported taking CR on 46% (n=110) of observed flights. Average CR attempt duration was 43.1 ± 11.0 minutes. Eighty-percent (n=106/133) of all CR attempts were estimated by actigraphy to have successfully achieved sleep with an average sleep duration during successful rest periods of 31.7 ± 12.2 minutes. Captains reported taking CR on 38% of flights (n=39/102), compared to First Officers reporting 52% (n=71/137) of flights with CR (p=0.131). Age, experience, BMI, and sleep need were not associated with the percentage of flights with CR (all p>0.244). The following schedule factors were associated with a higher frequency of CR: night (55%, n=76) vs. day flights (34%, n=34); <10h (63%, n=80) vs. >10h duration flights (27%, n=30); return (60%, n=71) vs. outbound flights (33%, n=39); and 2-pilot (69%, n=83) vs. >2-pilot flights (23%, n=27) (all p≤0.001). There was a trend for more CR on eastbound flights, but this was not significant (eastbound: 51%, n= 57; westbound: 40%, n= 44; p=0.059). Of note, 22% (n=26) of augmented flights (>2-pilots) contained both CR and Bunk Rest (in a designated rest facility). DISCUSSION: Data from this airline show that pilots commonly use CR to mitigate sleepiness in-flight, especially on flights <10h duration and during home-base nighttime flights. Future studies are required to determine generalizability of these results to other airlines.

sleepiness↗
DOE OSTI2018

Four-dimensional calibration turntable of the motional Stark effect diagnostic on EAST

The motional Stark effect (MSE) diagnostic is applied to measure the safety factor q and current density profile of a tokamak device, which are important parameters in realizing the high-performance and long-pulse steady state of a tokamak. A single-channel MSE diagnostic based on dual photoelastic modulators, whose sightline meets with the neutral beam injection at a major radius of R = 2.12 m, has been built for the D window of the Experimental Advanced Superconducting Tokamak (EAST). According to the requirements of MSE diagnostic polarimetric calibration, a high-precision four-dimensional calibration turntable, driven by four stepping motors and controlled by software running on the computer, was designed for EAST. The turntable allows us to rapidly calibrate the MSE diagnostic in a series of positions and angles during EAST maintenance. The turntable can move in four dimensions of translation, yaw, pitch, and roll of the polarizer and can create linearly polarized light at any given angle with accuracy of ~0.05° for the MSE system offline calibration. As a result, the experimental results of the MSE diagnostic calibration in the laboratory show that the turntable has the advantages of high positioning accuracy, flexible spatial movement, and convenient control and fully meets the calibration requirements of an MSE diagnosis system.

47 OTHER INSTRUMENTATION↗
NASA NTRS2005

Extending a Flight Management Computer for Simulation and Flight Experiments

In modern transport aircraft, the flight management computer (FMC) has evolved from a flight planning aid to an important hub for pilot information and origin-to-destination optimization of flight performance. Current trends indicate increasing roles of the FMC in aviation safety, aviation security, increasing airport capacity, and improving environmental impact from aircraft. Related research conducted at the Langley Research Center (LaRC) often requires functional extension of a modern, full-featured FMC. Ideally, transport simulations would include an FMC simulation that could be tailored and extended for experiments. However, due to the complexity of a modern FMC, a large investment (millions of dollars over several years) and scarce domain knowledge are needed to create such a simulation for transport aircraft. As an intermediate alternative, the Flight Research Services Directorate (FRSD) at LaRC created a set of reusable software products to extend flight management functionality upstream of a Boeing-757 FMC, transparently simulating or sharing its operator interfaces. The paper details the design of these products and highlights their use on NASA projects.

Madden, Michael M.↗
NASA NTRS2005

Launch Commit Criteria Monitoring Agent

The Spaceport Processing Systems Branch at NASA Kennedy Space Center has developed and deployed a software agent to monitor the Space Shuttle's ground processing telemetry stream. The application, the Launch Commit Criteria Monitoring Agent, increases situational awareness for system and hardware engineers during Shuttle launch countdown. The agent provides autonomous monitoring of the telemetry stream, automatically alerts system engineers when predefined criteria have been met, identifies limit warnings and violations of launch commit criteria, aids Shuttle engineers through troubleshooting procedures, and provides additional insight to verify appropriate troubleshooting of problems by contractors. The agent has successfully detected launch commit criteria warnings and violations on a simulated playback data stream. Efficiency and safety are improved through increased automation.

Semmel, Glenn S.↗
NASA NTRS2014

UAS-Systems Integration, Validation, and Diagnostics Simulation Capability

As part of the Phase 1 efforts of NASA's UAS-in-the-NAS Project a task was initiated to explore the merits of developing a system simulation capability for UAS to address airworthiness certification requirements. The core of the capability would be a software representation of an unmanned vehicle, including all of the relevant avionics and flight control system components. The specific system elements could be replaced with hardware representations to provide Hardware-in-the-Loop (HWITL) test and evaluation capability. The UAS Systems Integration and Validation Laboratory (UAS-SIVL) was created to provide a UAS-systems integration, validation, and diagnostics hardware-in-the-loop simulation capability. This paper discusses how SIVL provides a robust and flexible simulation framework that permits the study of failure modes, effects, propagation paths, criticality, and mitigation strategies to help develop safety, reliability, and design data that can assist with the development of certification standards, means of compliance, and design best practices for civil UAS.

Buttrill, Catherine W.↗
DOE OSTI2017

Wide-range fission chambers signal simulator - 373

Fission chambers (FC) signal simulators are a useful means to test neutron flux instrumentation channels of the reactors control and protection systems (CPS). Well-known signal simulators do not provide a secondary equipment testing in all modes of measurement. A wide range simulator that simulates a full range of FC signal changes (pulse, fluctuation, current) was designed. The simulator takes into account the statistical nature of neutrons detection in the FC, including the shape of the pulse and the spectrum of the pulse amplitude distribution. The simulator uses the principle of mathematical simulation of the fission chambers signal with realtime calculations using the FPGA. The wide-range simulator reproduces a FC signal in the range of ten orders without switching ranges or playback modes while ensuring very good linearity. It allows to generate both static and dynamic test signals such as: stair-step, linearly and exponential varying signals, exponential varying signals with a linearly changing period or a signal change simulating the response of the nuclear reactor power to a given reactivity response. Continuity of reproduced signals and the ability to playback dynamic effects makes it possible the simulator using to check the algorithms of cross-linking of measuring paths, reactivity and period measuring tools and to monitor the operation of interlocking and alarm CPS functions. This article discusses the simulator's software and hardware, its features and specifications, user interface and example of the simulator using to check the neutron flux monitoring channels. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2012

Effective Software Design and Development for the New Graph Architecture HPC Machines

Software applications need to change and adapt as modern architectures evolve. Nowadays advancement in chip design translates to increased parallelism. Exploiting such parallelism is a major challenge in modern software engineering. Multicore processors are about to introduce a significant change in the way we design and use fundamental data structures. In this work we describe the design and programming principles of a software library of highly concurrent scalable and nonblocking data containers. In this project we have created algorithms and data structures for handling fundamental computations in massively multithreaded contexts, and we have incorporated these into a usable library with familiar look and feel. In this work we demonstrate the first design and implementation of a wait-free hash table. Our multiprocessor data structure design allows a large number of threads to concurrently insert, remove, and retrieve information. Non-blocking designs alleviate the problems traditionally associated with the use of mutual exclusion, such as bottlenecks and thread-safety. Lock-freedom provides the ability to share data without some of the drawbacks associated with locks, however, these designs remain susceptible to starvation. Furthermore, wait-freedom provides all of the benefits of lock-free synchronization with the added assurance that every thread makes progress in a finite number of steps. This implies deadlock-freedom, livelock-freedom, starvation-freedom, freedom from priority inversion, and thread-safety. The challenges of providing the desirable progress and correctness guarantees of wait-free objects makes their design and implementation difficult. There are few wait-free data structures described in the literature. Using only standard atomic operations provided by the hardware, our design is portable; therefore, it is applicable to a variety of data-intensive applications including the domains of embedded systems and supercomputers.Our experimental evaluation shows that our hash table design outperforms the most advanced locking solution, provided by Intel's TBB library, by 22%. When compared to more traditional locking designs we show a performance improvement by a factor of 7.92. When compared to alternative non-blocking designs, our hash table demonstrates solid performance gains in a large majority of cases, typically by a factor of 3.44.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRS1981

Design and verification of a multiple fault tolerant control system for STS applications using computer simulation

General Dynamics/Convair is under NASA contract to integrate the Centaur upper stage into the space transportation system for future planetary missions. This requires that control of all safety critical functions be two-failure tolerant. The control system developed consists of five asynchronous computers, each contributing at their outputs to a 3-out-of-5 voting plane. Subsystem control is based on an end function redundancy management scheme. Analysis of multiple component failures and worst-case time-phase asynchrony among the computers is performed by a real-time computer simulation. The simulation emulates the hardware and subsystem interfaces, wire by wire, providing assessibility to any component for the insertion of preprogrammed failures. Observability is provided via a graphics system and diagnostic software. The simulation provides an engineering tool where the integrity of control system hardware and imbedded software can be demonstrated.

Szatkowski, G. P.↗
NASA NTRS1985

Validation of a fault-tolerant multiprocessor: Baseline experiments and workload implementation

In the future, aircraft must employ highly reliable multiprocessors in order to achieve flight safety. Such computers must be experimentally validated before they are deployed. This project outlines a methodology for validating reliable multiprocessors. The methodology begins with baseline experiments, which tests a single phenomenon. As experiments progress, tools for performance testing are developed. The methodology is used, in part, on the Fault Tolerant Multiprocessor (FTMP) at NASA-Langley's AIRLAB facility. Experiments are designed to evaluate the fault-free performance of the system. Presented are the results of interrupt baseline experiments performed on FTMP. Interrupt causing exception conditions were tested, and several were found to have unimplemented interrupt handling software while one had an unimplemented interrupt vector. A synthetic workload model for realtime multiprocessors is then developed as an application level performance analysis tool. Details of the workload implementation and calibration are presented. Both the experimental methodology and the synthetic workload model are general enough to be applicable to reliable multiprocessors beside FTMP.

Feather, Frank↗
DOE OSTI2020

Building commissioning costs and savings across three decades and 1500 North American buildings

B.V. Building commissioning (Cx) is a process for assuring efficient building operations that can be applied to new construction and existing buildings, resulting in energy and non-energy benefits. Quantifying the benefits of commissioning is challenging, but a 2009 study of 643 commercial buildings provided a solid initial data set to which we added 839 additional buildings for a significantly expanded and updated meta-analysis representing 34.7 million square meters (373 million square feet) of floor area. Since 2009 the commissioning industry has continued to grow, driven by building codes, utility programs, and rising awareness of commissioning benefits. In parallel, building controls have become more sophisticated, and analytics software has emerged to assist with commissioning. We find that delivery mechanism and market segment are key determinants of outcomes, although significant and cost-effective savings are found across the spectrum. Median primary energy savings for Cx projects in existing buildings ranged from 5 percent for those conducted under utility programs, 9 percent for monitoring-based commissioning utility programs (i.e., augmented with submetering and diagnostics), and 14 percent for Cx projects outside of utility programs. Across all project types, median savings ranged from 3 percent for the lodging market segment to 16 percent for public order and safety facilities. Outcomes did not vary significantly by building size or by market segment. Energy savings are rarely estimated for new construction commissioning. We found that the median costs of Cx were lower for the 2018 sample than for the 2009 sample—$\$$2.85 per square meter ($\$$0.26 per square foot) for existing buildings (a 33 percent reduction) and $\$$8.78 per square meter ($\$$0.82 per square foot) for new construction (a reduction of almost 50 percent). The median simple payback time for existing buildings was 1.7 years, with a 25th–75th percentile range of 0.8–3.5 years. Overall, this article summarizes these and other key findings, and discusses how the 2018 data reflects shifts in commissioning practice and outcomes.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗