SEARCH · Engineering Papers

Results for “Critical Function Assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

154 records · Page 9

All sources NASA NTRS DOE OSTI

NASA NTRS2024

Testing of Advanced Capabilities to Enable In-time Safety Management and Assurance for Future Flight Operations

In order to refine an initial Concept of Operations, explore Concepts of Use, and expose/validate requirements for future In-Time Aviation Safety Management Systems (IASMS), testing architectures were created, along with a set of capabilities and underlying information exchange protocols. These systems were conceived and developed based on hazards associated with two envisioned urban area flight domains: (1) highly autonomous small uncrewed aerial systems (sUAS) operating at low altitudes, and (2) highly autonomous air taxis. The initial scope of this development is described in [1]; this report provides an update, focusing on the subsequent developments and test activities. As stated in [1], it is important to note that there are many capabilities already in use by the industry (or soon to be in use) that will play critical roles in future IASMS designs. Those reported here were developed to address a gap in the current state-of-the-art regarding specific hazards/risks, and/or to allow for investigation of the interplay between and across hazard types — particularly regarding how overall safety risk can be reduced or managed effectively. Results of testing and development activities are organized by the operational phase wherein a particular capability would be employed (i.e., preflight, in-flight, and post-flight/off-line). Pre-flight: A set of capabilities were developed to help mitigate safety risk prior to flight (e.g., during flight and mission planning). Results of testing summarize (1) validation activities to raise the Technology Readiness Level (TRL) and (2) evaluation activities where the capabilities were applied to flight/mission planning procedures and used by operators/pilots. For the latter, flight plans were automatically assessed, and operators/pilots were notified of hazardous flight segments so as to enable adjustment of the flight plan and re-evaluation, and/or to better inform go/no-go decisions. Capabilities addressed hazards associated with power consumption, third-party risk, wind, navigation system performance, radiofrequency interference, and proximity to geo-spatial threats (e.g., buildings, trees, and no-fly zones). In-flight: Flight experiments tested capabilities that detect and respond to hazards encountered during flight. In the first series, safety hazards were monitored and assessed onboard, and system-generated mitigation maneuvers were recorded (but not acted upon by the vehicle). In the second series, mitigation maneuver commands directed the aircraft in response to safety hazards (i.e., auto-mitigation). The sUAS used for testing is described in full, as is the test architecture, which included commercial avionics, research avionics, and onboard software designed to detect, assess, and respond to hazards. The onboard system was designed as a run-time assurance framework, consistent with [2] and supportive of both supervisory and automated modes. The primary functions included: real-time risk assessment (RTRA), auto-pilot monitoring, constraint monitoring, and contingency select/triggering. RTRA performs integrated risk assessment considering data from several hazard-related monitors (e.g., battery, motors, navigation, communications, population density, and loss-of-control). Post-flight/off-line: Data monitored and recorded during flights can enable IASMS capabilities that execute after flights have completed (or “off-line”). These include: (1) the ability to identify anomalies and trends that may only be observable when comparing data spanning a number of similar flights; (2) the ability to update and validate pre-flight and in-flight capabilities and any underlying models to improve their performance; (3) the ability to report anomalies/off-nominals that may indicate design changes or maintenance actions are needed; and (4) the ability for humans involved in operations to report safety-relevant observations to help in understanding the flight data and/or the operational context of a flight. Progress on three such capabilities is summarized; the first investigates anomaly detection given a limited set of flight logs and applies an approach previously used for space operations. The second explores what could be identified using a larger set of flight logs, including from web-based forums where flight logs are posted by sUAS autopilot users. The third creates a new means of collecting information on UAS incidents and accidents via the Aviation Safety Reporting System (ASRS).

sUAS↗

DOE OSTI2014

Development of a 6DOF robotic motion phantom for radiation therapy

Purpose: The use of medical technology capable of tracking patient motion or positioning patients along 6 degree-of-freedom (6DOF) has steadily increased in the field of radiation therapy. However, due to the complex nature of tracking and performing 6DOF motion, it is critical that such technology is properly verified to be operating within specifications in order to ensure patient safety. In this study, a robotic motion phantom is presented that can be programmed to perform highly accurate motion along any X (left–right), Y (superior–inferior), Z (anterior–posterior), pitch (around X), roll (around Y), and yaw (around Z) axes. In addition, highly synchronized motion along all axes can be performed in order to simulate the dynamic motion of a tumor in 6D. The accuracy and reproducibility of this 6D motion were characterized. Methods: An in-house designed and built 6D robotic motion phantom was constructed following the Stewart–Gough parallel kinematics platform archetype. The device was controlled using an inverse kinematics formulation, and precise movements in all 6 degrees-of-freedom (X, Y, Z, pitch, roll, and yaw) were performed, both simultaneously and separately for each degree-of-freedom. Additionally, previously recorded 6D cranial and prostate motions were effectively executed. The robotic phantom movements were verified using a 15 fps 6D infrared marker tracking system and the measured trajectories were compared quantitatively to the intended input trajectories. The workspace, maximum 6D velocity, backlash, and weight load capabilities of the system were also established. Results: Evaluation of the 6D platform demonstrated translational root mean square error (RMSE) values of 0.14, 0.22, and 0.08 mm over 20 mm in X and Y and 10 mm in Z, respectively, and rotational RMSE values of 0.16°, 0.06°, and 0.08° over 10° of pitch, roll, and yaw, respectively. The robotic stage also effectively performed controlled 6D motions, as well as reproduced cranial trajectories over 15 min, with a maximal RMSE of 0.04 mm translationally and 0.04° rotationally, and a prostate trajectory over 2 min, with a maximal RMSE of 0.06 mm translationally and 0.04° rotationally. Conclusions: This 6D robotic phantom has proven to be accurate under clinical standards and capable of reproducing tumor motion in 6D. Such functionality makes the robotic phantom usable for either quality assurance or research purposes.

60 APPLIED LIFE SCIENCES↗

NASA NTRS2022

Assurance Equations: A Cost and Criticality Model for Optimizing Quality Assurance Surveillance

The cost of quality vs cost of failure correction has been a long-running topic of discussion within the Aerospace community. It leads directly to concepts of “risk tolerance”, and risk-based decision-making. It would be valuable if there was a way to compute the optimal investment in customer-executed quality assurance activities using defect significance with respect to performance objectives, the activities’ defect detection effectiveness, and the cost-penalty for late discovery of impactful defects. This optimization is particularly of interest to projects whose budget constraints significantly limit their risk management options.The cost to fix defects (i.e., failure correction) escalates as the project matures. There have been studies attempting to determine the relative cost of fixing defects discovered during various phases of a project life cycle with important implications, all of which suggest growth factors are large. The commonly referred to 1:10:100 rule represents a cost multiplier for repair/rework across the Design to Fab to Test hardware development phases. Cost premiums for QA activities also accumulate when they are treated as mandatory (due to schedule drag) or are performed later than their assigned phase.This paper describes the modeling of development phase -dependencies in the conduct of typical customer-executed quality assurance activities. Our initial modeling encompasses:• Distinct phases of the production lifecycle• Multiple kinds of Defects, each with some a-priori likelihood of being present• Each defect’s impact on performance Objectives for a type of hardware• The cost and efficacy of assurance techniques at detecting such Defects• The costs of fixing those Defects detected in a given phase of the production lifecycleThe model captures assurance activities’ abilities to Detect defects. Upon detection it is assumed that the Defect is immediately fixed. Defects that “escape” detection by some activity may thereafter be detected by a later activity, but by then the cost of fixing the Defect may have escalated. Defects are related to the performance Objectives they would detract from, were those Defects to remain present in the operating system.We have constructed and are exploring, a model that relates the importance of hardware system elements to mission objectives, the impact of types of Defects on those hardware types, the cost of customer-executed assurance activities (i.e., supplier controls) and their effectiveness towards reducing an impactful quality escape, and the cost of Defect correction across production phase. We describe the approach taken to select the key model aspects, why they are relevant to our NASA mission, and our efforts to populate it with relevant and contemporary data. We use a notional example to illustrate model design and function.

Plante, Jeannette↗

DOE OSTI2023

Chromium Tolerant, Highly Active and Stable Electrocatalytic Internal Surface Coating for Cathode of Commercial SOFCs (Final Report)

This project is aimed to develop a chromium (Cr) tolerant, highly active, and stable coating layer on the internal surfaces of the porous composite cathode from commercially available SOFCs. Such coating layer was developed using the additive manufacturing process of Atomic Layer Deposition (ALD) and has been applied on the cathode consisting of either an electronic conductor of LaxSr 1-x MnyO 3-δ (LSM) or mixed ionic and electronic conducting La x Sr 1-x Co y Fe 1-y O 3-δ (LSCF). PI's work has demonstrated that the internal surface of cathode from the commercial cells, can be further tailored using ALD coating to dramatically enhance the cell performance. For instance, ALD layer consisting heterostructured nano composite of nano-Pt and nano-(Mn 0.8 Co 0.2 ) 3 O 4 oxide on the internal surface of porous LSM/YSZ cathode from SOFCs, has resulted in the large reduction of the cell polarizations resistance by up to 53%, and enormous increase of power density over 370%. For the cells with LSCF/Sm 2 O 3 doped CeO 2 (SDC) cathode, the conformal layer of nano-composite consisting of superjacent CoOx and subjacent minimum amount of Pt nano-grains has resulted in the power density enhancement by 126% for the large scale industry tubular cells at 750°C, and both the performance enhancement and nanostructure of the ALD layer are stable over ~ 2000 h continuous operation performed at industry test station. In the meanwhile, those ALD coating layer developed by PI's work is also inherently Cr-tolerant, and could act as physical barrier for preventing Cr diffusion into the cathode backbone, so as to mitigate the Cr poisoning effect on the cathode. In this project, the impact of Cr on the performance of those ALD coated commercial cells has been evaluated. Based on evolution of the cell performance, the ALD coating layer chemistry and ALD coating layer thickness has been optimized to maximize the overall Cr tolerance, cell power density and cell longevity. Different ALD coating has been applied onto the internal surface of LSM/YSZ and LSCF/SDC backbone respectively. The architecture/scaffold structures on the internal surface of different cathode, designed by this project, was catalogued and analyzed using High Resolution Transmission Electron Microscopy (HRTEM), and cell power/durability performance are assured via comprehensive electrochemical performance testing in the industry operation relevant conditions. The impact of the electrochemical operation current density, the water humidity, the cell operation temperature, and cell operation duration on the Cr tolerance of ALD coated cells has been systematically investigated. There is completely different nanostructure degradation mechanisms between LSM and LSCF cells induced by Cr contamination. For the LSCF/SDC baseline cell, With the Cr source, there is no apparent Sr surface segregation phase even for the baseline cell operated for 3000 h at 750 °C. With the Cr source, there is significant amorphous (SrCr)Ox phase accumulated in the original pore region. For the commercial baseline cells, Cr contaminants on the LSM electrode severely impacted the entire cell's electrochemical performance and nanostructure degradation. Those degradations include (1). Peak power density loss of 64 % after 109 h of operation. The dramatic increase in Rp (2). They are cracking at LSM/SSZ interface, LSM grains. SSZ remains intact but with (CrMn)Ox. By contrast, ALD coating (MnCo)Ox/Pt dramatically improves the Cr resistance, as follows (1). ALD-coated cell with a power density is 280-380 % of the baseline cell, depending on the ALD layer thickness. (2). For a cell with a 20 nm thick ALD layer, there is a large performance enhancement (> 200 % power density) induced by ALD coating of Cr-tolerant Mn 0.8 Co 0.2 Ox. (3). For a cell with a 20 nm thick ALD layer, after 168 h at 750 °C power density of the ALD-coated cell is ~ 600% of that baseline cell upon operation with Cr contamination for 109 h. The ALD coating on the internal surface of cathode developed by this project integrated multi-functions. Those multi-functions include (1). Dramatically improving the cell power density for the commercial cells; (2). Dramatically improving contamination resistance of the cathode, for being an excellent protection coating layer sealing off Cr contamination. (3). Dramatically increasing the cell longevity by potentially preventing the microstructure evolution and grain coarsening of the cathode. Overall, this project will provide a simple solution to simultaneously enhance power density and increase the reliability, robustness, and endurance of commercial SOFCs, over the entire operating temperature range of 650-800 °C. For the inherently functional SOFC, the ALD coating of LSM based cathode mitigate the Cr-contamination. Power density of ALD-coated cell is ~ 600% of that baseline cell upon operation with Cr contamination. In addition to SOFCs, the novel on-demand design approach and creation of multifunctional heterogeneous architecture on the electrode surface presented in this work opens further research for their application in other types of fuel cells, batteries, and sensors for which electrochemical reactions on the surface are similarly critical.

36 MATERIALS SCIENCE↗

DOE OSTI2016

Reliability Assessment of Safety-Critical Network Communication in a Digitalized Nuclear Power Plant

In analog instrumentation and control (I and C) systems for nuclear power plants (NPPs), most connections are comprised of hardwired point-to-point types. Since they are based on analog technologies, they are fragile to noise and require analog-to-digital conversion time. Therefore, many NPPs have adopted communication network for the exchange of safety-critical data between programmable logic controllers (PLCs) in digital I and C systems to effectively accommodate a huge number of field controllers. However, the primary issue of digital network communication in a safety-critical system involves potential hazards, such as partial or total loss of communication between PLCs, which may result in a failure of safety critical signal generation when it is needed. Therefore, the probability that a safety-critical system in digitalized NPP becomes unsafe due to a network failure must be evaluated to quantify the risk of digital I and C system. In Korea, the Engineered Safety Feature-Component Control System (ESF-CCS) was developed as one of the digital safety-critical system in Advanced Power Reactor- 1400 (APR-1400). The function of a digital engineered safety feature (ESF) actuation system and field actuator controllers of conventional NPPs are performed by the ESF-CCS. In this system, safety-critical network, High Reliable- Safety Data Network (HR-SDN), was employed for the safety-critical data transmission from group controllers (GCs) to loop controllers (LCs). In this study, a framework for assessing the reliability of a HR-SDN network communication between GCs and LCs in the ESF-CCS in addition to a fault-tree model for ESF components considering network failure between GCs and LCs were developed to assess the plant risk effect of a newly developed digitalized ESF-CCS. Based on the case studies and cut set analysis, the risk effect of network failure on plant risk and the important risk contributors of network failure were quantitatively addressed. A framework for identifying the potential hazardous states of network communication in the ESFCCS was proposed. In addition, a fault-tree model for network communication failure was developed to estimate the risk effects of network failure between the GCs and LCs on ESF-CCS signal failure. The developed fault-tree model was then applied to several case studies. The fault-tree model of ESF-CCS signal failure for ESF components required for various mitigation actions regarding NPP DBAs was designed by considering the identified hazardous states of network failure that would result in a failure to provide input signals to the corresponding LC. As a sensitivity study, three case studies were performed based on the periodic test methods for hardware components in HR-SDN module and their test intervals in this study. The quantitative results for three case studies demonstrated that the probability of overall network communication failure, which was calculated as the sum of the failure probability associated with each failure cause, contributed up to 1.58% on the Small-LOCA CD frequency. The results also revealed the important basic events related to network failure in the case studies which included CCF of hardware and software in HR-SDN module. This study is expected to provide insight into the development of the fault-tree model for the network failure in digital I and C system and into the quantification of the risk effect of network failure for safety-critical data transmission in NPPs. As a further study, the risk effects of network failure in the ESF-CCS on the plant risk can be estimated in a more detailed manner by analyzing the failure modes and causes in a sub-component level and the fault detection coverage of the fault tolerance techniques for network failure implemented in ESF-CCS after the detailed configuration of ESF-CCS is decided. In terms of the failure of manual ESF actuation, the relationship among the human action failures must be investigated to consider multiple human error condition since ESF-CCS provides multiple manual actuation to assure the diversity of the system. Since the conventional HEP method cannot accommodate the multiple conditions in a fault tree, condition-based human reliability assessment (CBHRA) method or the dynamic human reliability modeling approach can be applied to include a complex relationship among the automated safety signal generation and the human operator's manual actuation, avoiding the optimistic estimation of HEP of the human action failure.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2018

FUSRAP Case Study - Benefits and Lessons Learned from Implementation of a Modern Data Solution at Maywood - 18399

This paper focuses on data production and management practices dating back to 1999 that continue to evolve to support the project today. In 2000, the FUSRAP Maywood Project began using a software environmental data management system and laboratory information management system, developed by a single database administrator (DA) and authored in Microsoft Access{sup TM} (MS Access). The original databases included basic functionality including sample number assignment and label generation, tracking of LIMS gamma spec QC and assignment of basic qualifiers and basic database queries. The DA continued over the next fifteen years to refine the EDMS/LIMS by integrating project-specific data evaluation guidance document processes and Quality Assurance/Quality Control (QA/QC) charting and excursion warning tools. With the retirement of the original DA, the U.S. Army Corps of Engineers (USACE)-Cabrera Team procured and implemented a commercial-leaning solution using modern database tools and an established EDMS vendor. For the database transition process, the project team established and configured the new EDMS/LIMS with basic architecture and accessibility; evaluated existing workflows; established/revised LIMS and EDMS-related documentation (manuals and procedures); and conducted dry runs and validation testing. The overall team coordinated closely to facilitate a seamless transition from initial assessment and authoring, to data migration, and finally to resumption of normal ongoing operations. Key features of the new EDMS Subcontractor's software included lookup tables, an import wizard, data checking options and unique indexes. Since the database systems became operational, the technical staff gathered useful feedback from end users (e.g., lab staff, field engineers, task managers, and the third-party data validator) to refine the EDMS/LIMS operation. This feedback triggered improvements in the performance of onsite laboratory qualification forms, promoted consistency in sample ID numbers between the database sample planning screens and field chain-of-custodies, corrected bugs in the LIMS Duplicate Evaluation Report, eliminated data import issues such as blank, inconsistent or missing data from key fields. One of the advantages of the commercial database solution was that it allowed the project to cut cost over time due to the lower cost of database maintenance provided by the commercial database vendor versus the cost of an on-staff DA. Cost savings are estimated at $40,000 per year. There were also indirect cost savings resulting from implementation of the new database since it allowed better integration of the LIMS and EDMS. While there will always be challenges associated with long term records/data management for any old remediation site, the Maywood Team's approach to an upgraded EDMS/LIMS implementation serves as one element of the overall effort to enhance the integrity and reproducibility of critical data that supports the remediation program while at the same time, more effectively using available resources. These lessons-learned will enhance implementation of cost-effective solutions for similar environmental remediation sites. (authors)

97 MATHEMATICS AND COMPUTING↗

NASA NTRSDate not supplied

Informing New Concepts for UAS and Autonomous System Safety Management using Disaster Management and First Responder Scenarios

As emerging flight operations become more prevalent and increasingly automated and distributed, the capabilities for managing safety of vehicles and operations will also need to evolve. To address this challenge, the National Academies has envisioned an In-Time Aviation Safety Management System (IASMS) capability for a wide range of aviation operations including current commercial operations as well as new entrants envisioned with advanced air mobility (AAM). The suite of IASMS services, functions, and capabilities (SFCs) would be implemented in a federated approach and would address trends as well as individual operations. Through predictive modeling and data analysis, IASMS is envisioned to identify arising risks so that they can be mitigated, in-time, before a safety incident occurs. IASMS and its requisite set of SFCs must leverage a wide range of information to perform. To better understand these new needs, FSF worked with the aviation and humanitarian communities to develop and validate scenarios that include traditional aviation operations and UAS operations intermingled as they are deployed for disaster management and first responder (DMFR) situations. The three scenarios developed include: • Post Natural disaster response, such as a hurricane, involving multiple parties utilizing traditional aviation and UAS to support rescue operations, surveil damage, and locate survivors needing assistance. • Wildfire fighting in remote locations with traditional aircraft for transport and fire-retardant delivery combined with UAS for surveillance of fire locations as well as to track individual firefighter locations. • Medical Operations and AAM in Urban Environments including passenger-carrying helicopters and AAM vehicles, medical missions (such as transport of radio-pharmaceuticals), and other UAS delivery operations (such as the delivery of defibrillators). Each scenario was developed and validated by representatives with expertise in humanitarian operations, urban and rural emergency response, air traffic management, UAS operations, and traditional flight operations. The scenario definitions address roles and responsibilities of individual actors, the appropriate utilization of UAS, and the actions taken by those actors to appropriately manage risks associated with the mission and environment. The risks to aviation traffic and to people on the ground explored included potential risks arising from incompatibilities in calculating reference altitudes (eg, differing uses of AGL, MSL, barometric, or GPS-derived values), loss of command and control (C2) communications, rapid changes in weather and winds, and physical interference. For each risk, IASMS SFCs were postulated in the context of monitoring services, risk assessment capabilities, and identifying appropriate mitigation strategies. The identified SFC capabilities were envisioned from known services postulated for IASMS and for UTM. For these unique environments, IASMS SFCs are needed to address conditions such as hazardous payloads, micro-climates and urban canyons, and the need to keep uninvolved air traffic out of the area where DMFR operations are being conducted. The second phase of analysis focused on inferring the specific information needs and the SFCs for IASMS, utilizing a structure of 16 information classes to organize requirements. For each of the risks identified in the workshops, it was postulated what data sources would be necessary to monitor critical aspects of the risk (eg, surrounding air traffic, ground population, terrain, etc). to be directly measured as well as data that would be derived, which implies additional SFCs for different actors to understand what information would likely be exchanged between parties. For an IASMS to be effective, additional research is needed to develop the advanced algorithms that can address the increasingly autonomous and complex operations in differing environments and to develop means of identifying unknown risks. Looking at these scenarios highlighted a number of research issues. These include the ability to quickly "cordon off" airspace thru temporary flight restrictions (TFRs) or other means, developing clear definitions to enable automation-based algorithms for prioritizing operations, defining airspace density metrics, standardization of altitude reporting, and establishing a basis for safety data metrics definition and collection. This paper seeks to outline the development of an IASMS in the context of the DMFR scenarios and resulting demonstrations. Utilizing this contextual approach, NASA will generate recommendations for an assured safety framework for AAM operations that enables AAM operations to safely access the NAS.

In Time Aviation Safety Management System↗

NASA NTRSDate not supplied

An Approach for Defining IASMS Services, Functions, and Capabilities

Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.

In-Time Aviation Safety Management System↗

DOE OSTI2014

Future of Electron Scattering and Diffraction

The ability to correlate the atomic- and nanoscale-structure of condensed matter with physical properties (e.g., mechanical, electrical, catalytic, and optical) and functionality forms the core of many disciplines. Directing and controlling materials at the quantum-, atomic-, and molecular-levels creates enormous challenges and opportunities across a wide spectrum of critical technologies, including those involving the generation and use of energy. The workshop identified next generation electron scattering and diffraction instruments that are uniquely positioned to address these grand challenges. The workshop participants identified four key areas where the next generation of such instrumentation would have major impact: A – Multidimensional Visualization of Real Materials B – Atomic-scale Molecular Processes C – Photonic Control of Emergence in Quantum Materials D – Evolving Interfaces, Nucleation, and Mass Transport Real materials are comprised of complex three-dimensional arrangements of atoms and defects that directly determine their potential for energy applications. Understanding real materials requires new capabilities for three-dimensional atomic scale tomography and spectroscopy of atomic and electronic structures with unprecedented sensitivity, and with simultaneous spatial and energy resolution. Many molecules are able to selectively and efficiently convert sunlight into other forms of energy, like heat and electric current, or store it in altered chemical bonds. Understanding and controlling such process at the atomic scale require unprecedented time resolution. One of the grand challenges in condensed matter physics is to understand, and ultimately control, emergent phenomena in novel quantum materials that necessitate developing a new generation of instruments that probe the interplay among spin, charge, orbital, and lattice degrees of freedom with intrinsic time- and length-scale resolutions. Molecules and soft matter require imaging and spectroscopy with high spatial resolution without damaging their structure. The strong interaction of electrons with matter allows high-energy electron pulses to gather structural information before a sample is damaged. Electron ScatteringImaging, diffraction, and spectroscopy are the fundamental capabilities of electron-scattering instruments. The DOE BES-funded TEAM (Transmission Electron Aberration-corrected Microscope) project achieved unprecedented sub-atomic spatial resolution in imaging through aberration-corrected transmission electron microscopy. To further advance electron scattering techniques that directly enable groundbreaking science, instrumentation must advance beyond traditional two-dimensional imaging. Advances in temporal resolution, recording the full phase and energy spaces, and improved spatial resolution constitute a new frontier in electron microscopy, and will directly address the BES Grand Challenges, such as to “control the emergent properties that arise from the complex correlations of atomic and electronic constituents” and the “hidden states” “very far away from equilibrium”. Ultrafast methods, such as the pump-probe approach, enable pathways toward understanding, and ultimately controlling, the chemical dynamics of molecular systems and the evolution of complexity in mesoscale and nanoscale systems. Central to understanding how to synthesize and exploit functional materials is having the ability to apply external stimuli (such as heat, light, a reactive flux, and an electrical bias) and to observe the resulting dynamic process in situ and in operando, and under the appropriate environment (e.g., not limited to UHV conditions). To enable revolutionary advances in electron scattering and science, the participants of the workshop recommended three major new instrumental developments: A. Atomic-Resolution Multi-Dimensional Transmission Electron Microscope: This instrument would provide quantitative information over the entire real space, momentum space, and energy space for visualizing dopants, interstitials, and light elements; for imaging localized vibrational modes and the motion of charged particles and vacancies; for correlating lattice, spin, orbital, and charge; and for determining the structure and molecular chemistry of organic and soft matter. The instrument will be uniquely suited to answer fundamental questions in condensed matter physics that require understanding the physical and electronic structure at the atomic scale. Key developments include stable cryogenic capabilities that will allow access to emergent electronic phases, as well as hard/soft interfaces and radiation- sensitive materials. B. Ultrafast Electron Diffraction and Microscopy Instrument: This instrument would be capable of nano-diffraction with 10 fs temporal resolution in stroboscopic mode, and better than 100 fs temporal resolution in single shot mode. The instrument would also achieve single- shot real-space imaging with a spatial/temporal resolution of 10 nm/10 ps, representing a thousand fold improvement over current microscopes. Such a capability would be complementary to x-ray free electron lasers due to the difference in the nature of electron and x-ray scattering, enabling space-time mapping of lattice vibrations and energy transport, facilitating the understanding of molecular dynamics of chemical reactions, the photonic control of emergence in quantum materials, and the dynamics of mesoscopic materials. C. Lab-In-Gap Dynamic Microscope: This instrument would enable quantitative measurements of materials structure, composition, and bonding evolution in technologically relevant environments, including liquids, gases and plasmas, thereby assuring the understanding of structure function relationship at the atomic scale with up to nanosecond temporal resolution. This instrument would employ a versatile, modular sample stage and holder geometry to allow the multi-modal (e.g., optical, thermal, mechanical, electrical, and electrochemical) probing of materials’ functionality in situ and in operando. The electron optics encompasses a pole piece that can accommodate the new stage, differential pumping, detectors, aberration correctors, and other electron optical elements for measurement of materials dynamics. To realize the proposed instruments in a timely fashion, BES should aggressively support research and development of complementary and enabling instruments, including new electron sources, advanced electron optics, new tunable specimen pumps and sample stages, and new detectors. The proposed instruments would have transformative impact on physics, chemistry, materials science, engineering

43 PARTICLE ACCELERATORS↗

DOE OSTI2022

Liquid Salt Combined-Cycle Pilot Plant Design

The work described in this report is responsive to the Office of Fossil Energy program ‘Energy Storage for Fossil Power Generation.’ This Phase I report has been prepared by Pintail Power LLC, with support from Nexant ECA, Electric Power Research Institute (EPRI) and Southern Company Services as a deliverable for the U.S. Department of Energy for NETL Award DE-FE-00320016. The Liquid Salt Combined Cycle™ (LSCC™) technology provides large-scale energy storage integrated with Fossil Electric Generating Units (FEGUs) to meet critical needs in the energy transition by providing: • the lowest cost large-scale storage for time-shifting of renewable energy, • superior fuel efficiency to reduce GHGs from dispatchable resources, • flexible capacity and ramping to balance variability of wind and solar resources, • essential grid stability services to assure reliability of a low-carbon grid. The LSCC approach: • employs equipment that has already been proven in utility service, • uses safe, non-toxic, non-degrading, perpetual-life storage medium, • leverages and repurposes existing FEGU assets, • expands the value stack of energy storage to reduce market, financing, and commodity risks. Pintail Power has developed the LSCC technology to meet the need for reliable, efficient, and cost-effective integration of Variable Renewable Energy (VRE) into a low-carbon electric grid by coupling proven thermal energy storage with proven gas turbines, steam turbines, and heat transfer equipment. This novel approach is intended to address the key issues facing the grid and operators of renewable and fossil generating units including: • Overgeneration and curtailment of renewables, • Need for fast ramping dispatchable resources, • Improved efficiency and flexibility of fossil units, • Additional peaking capacity to support electrification of transportation and heating, • Provision of reliability services to support high penetration of VRE, especially synchronous inertia and fast frequency response. A Technology Readiness assessment by EPRI confirmed that LSCC technology consists of commercially proven hardware used in industrial and utility applications. Although the novel LSCC approach has not yet been demonstrated as a complete system, interfaces between major components have been conservatively specified. A Phase III pilot is planned to demonstrate equipment integration and operation. The patented innovation is removal of the evaporator section from the exhaust heat recovery system, with the evaporation performed by stored energy in a separate steam generator. This arrangement couples renewable and fossil power generation via long-duration energy storage to deliver cost, performance, and operational synergies, including superior charging and discharging flexibility, reduced fuel consumption and lower CO 2 emissions compared to conventional Combined Cycle Power Plants, and low-cost, large-scale energy storage. The LSCC technology is composed of proven equipment integrated with gas turbine exhaust heat in a novel system. During charging, electric heaters raise the salt temperature as it flows from the Cold Salt Tank to the Hot Salt Tank. During discharging, hot salt produces steam from feedwater that is heated with gas turbine exhaust, which also superheats steam to drive a steam turbine. LSCC technology can be added to any combustion-turbine to integrate renewable energy, provide needed grid services, and increase the value of fossil electric generating units based on the technology’s following attributes: • Long-duration storage enables time-shifting of VRE to avoid curtailment and impairment of renewable assets. • Long storage duration combined with fast-charging capability increases arbitrage opportunities by storing more energy when the price is low and discharging more hours when the price is high. • Long storage duration allows resource adequacy to be supplied across multiple days to increase reliability and reduce risk. • The stored energy reduces fuel heat rate and GHG emissions, and increases merit, so the LSCC dispatches earlier and longer to increase the plant’s capacity factor and asset value. • The stored energy enables pre-heating and startup of the steam cycle, without operating the gas turbine, to enable fast startup and ramping when dispatched for discharge. • The steam turbine can operate without the gas turbine so it can provide valuable synchronous inertia during charging without consuming fuel. • Fast frequency response and regulation services can be provided during charging using solid-state heater and pump controls to vary the charge power input in response to grid signals. • The LSCC system can be configured for resilience including black start, islanded/micro-grid operation, and even self-recharging of storage using either gas turbine power or gas turbine exhaust heat. The commercialization plan is to add LSCC technology to existing simple cycle gas turbine power plants with the 50MW GE LM6000 aero-derivative gas turbine as the reference design basis. A Techno-economic assessment of the reference design evaluated the benefits (Levelized Avoided Cost of Energy) and costs (Levelized Cost of Energy). The plant definition included all major systems and budgetary vendor quotes. Pintail Power and NexantECA developed the overall cost estimate for the LSCC plant up to the total plant cost level, following the DOE-NETL cost estimate guidelines at AACE Class 3 (-20%/+30%). This includes the equipment cost, bulk material, direct and indirect labor costs to arrive at the bare erected cost. Engineering costs are factored from the BEC and added to it to arrive at the EPC cost. Process and project contingencies were then factored from the EPC cost and rolled-up to yield the total plant cost of $\$$184 million for 1746 MWh of discharge electricity. • At $\$$105/kWh, the reference plant costs less than any of the Energy Storage Systems evaluated by PNNL in 2020 for the Energy Storage Grand Challenge. Operations and Maintenance cost estimates were scaled from combined cycle practice, assuming that the LSCC unit was co-located with and sharing some labor expense with other units, to arrive at $\$$2.2 million per year. Plant economics were evaluated using prices from the ERCOT Day-Ahead Market for calendar year 2019 (excluding the market disruptions from the COVID pandemic and the February 2020 deep freeze event). Assuming economic dispatch in the ERCOT Day-Ahead market, the reference plant capacity factor would have discharged for 2777 hours at 91.9 MW, a 31.66% capacity factor, with a marginal cost of $\$$25.59/MWh, and a LACE of $\$$82.41/MWh. Fixed charges were calculated according to EIA guidelines to arrive at an LCOE of $\$$83.48. The benefit-to-cost ratio of 0.99 suggests that the reference plant would have been cost-effective and competitive in the market. EPRI interviewed selected utilities to gauge the need for, applicability of and interest in the LSCC system. Several utilities are currently managing increased load growth along with the inclusion of increasing levels of renewable generation, putting pressure on conventional generation by requiring increased turndown requirements and ultimately lower capacity factors. All of the utilities interviewed have CO 2 reduction targets in the 2030-2050 timeframe that will severely limit the participation of fossil generation and require better utilization of carbon free generation. While there is limited opportunity for storage in the current markets, the utilities interviewed stated that there will be a substantial need for long duration energy storage in the future given the expected trends. Utilizing an energy storage system will generally be preferred over new gas capacity in some cases, with the capabilities of the LSCC system being a potential option for retrofit to existing simple cycle gas turbine units, allowing them to deliver greater participation in the market with lower carbon intensity. A technology gap assessment and technology maturation plan identified a pilot-scale demonstration as the final step before commercialization. Key gaps to be addressed during the Phase II FEED (Front-End Engineering Design) are component selection and design, commissioning procedures, and operational procedures and the control system for LSCC charging and discharging. The project team has been expanded to include Wood Group PLC as EPC. The proposed Phase II work leads to a pilot-scale engineering demonstration (TRL 6) to be conducted at Southern Company’s Plant Rowan, where the prototype system will perform “all the functions that will be required of the operational system.” The proposed pilot will facilitate commercialization (TRL-9) by scale-up to utility-scale systems integrated with peaking GTs or directly to facility scale systems using industrial GTs. The conceptual design for the pilot plant focuses on the novel integration aspects of LSCC technology. A slipstream of gas turbine exhaust will feed a waste heat recovery unit coupled to a molten salt steam generator heated by stored energy. The pilot is intended to demonstrate all key operating modes of the LSCC technology during charging, discharging and standby. The pilot equipment will be approximately one-seventh scale of the LM6000 commercial target and is expected to have commercial off-ramp potential for facility-scale applications.

01 COAL, LIGNITE, AND PEAT↗