Results for “transit bus” — Page 9

DOE OSTI2020

Superconducting metamaterials - the first step toward a microwave quantum bus

Coherent manipulation of quantum states is at the core of quantum information science (QIS). Many state-of-the-art quantum systems rely on microwave fields for quantum operations. As such, the microwave electromagnetic fields serve as the ideal "quantum bus" to integrate different types of QIS systems into a hybrid quantum system. Superconducting metamaterials are artificial materials consisting of arrays of superconducting resonant microstructures with sizes much smaller than the microwave wavelengths of interest. Superconducting metamaterials are a strong candidate medium for the microwave quantum bus, because the effective impedance, field distributions, and frequency response can all be controlled by engineering the microstructures, electrical bias, and magnetic flux while maintaining extremely low loss. In this project, we investigate the fundamental unit of a superconducting metamaterial - a resonator with physical dimensions much smaller than the microwave wavelengths - using NbTiN as the working superconductor, whose high operating temperatures and magnetic fields are desirable attributes for compatibility with a wide variety of quantum systems. We first studied the properties of sputtered NbTiN thin films by correlating the film thickness with the normal state resistivity, superconducting transition temperature, and resonances of transmission line resonators made from these films. We developed a process flow and designed a coplanar waveguide platform for studying small resonators. The platform significantly shortens the turnaround times of the resonator fabrication and testing cycles. Several resonators with different designs were fabricated and tested at 4 Kelvin. Resonances were observed in some resonator testers. Potential paths for improvements and future directions are discussed.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

DOE OSTI2020

Correlation-Aided Robust Decentralized Dynamic State Estimation of Power Systems with Unknown Control Inputs

This paper proposes a correlation-aided robust adaptive unscented Kalman filter for power system decentralized dynamic state estimation with unknown inputs, termed as robust AUKF-UI. The temporal and spatial correlations among the unknown inputs are used to derive a vector auto-regressive (VAR) model in an adaptive manner. This VAR model is further integrated together with state transition and measurement models for joint state and unknown inputs estimation. This allows taking into account the implicit cross-correlations between the states and the unknown inputs. As a result, the rank requirement for unknown input vector estimation is relaxed and the local generator frequency measurement is not required. The temporal correlations of time series innovation vectors, predicted state and input vectors are also leveraged by the robust AUKFUI to detect, identify and process bad data. Without these correlations, it is very challenging to address bad data with unknown inputs. Simulation results carried out on the IEEE 39-bus system demonstrate that the proposed robust AUKF-UI achieves much better results than other methods in the presence of low measurement redundancy, strong nonlinearity, and bad data.

Zhao, Junbo↗

DOE OSTI2025

Feasibility and Qualitative Risk Assessment of Fuel Cell Electric Bus Use for Emergency Backup Power for Airport Applications

Airports rely on robust backup power systems to maintain critical operations during emergencies. This paper investigates the feasibility of using hydrogen fuel cell electric buses (FCEBs) as emergency backup power sources, focusing on their technical specifications, operational challenges, and associated risks. Using Portland International Airport as a case study, the analysis evaluates the power output and hydrogen consumption of New Flyer’s 40’ Xcelsior Charge fuel cell buses, to provide power for key airport systems. Additionally, the paper explores the design and layout of how FCEBs can be connected to airport facilities, and addresses safety considerations, hydrogen supply logistics, and electrical compatibility. While FCEBs present significant advantages in terms of sustainability and resilience, their implementation requires careful planning, infrastructure investment, and adherence to safety standards. This research provides actionable insights for airport stakeholders seeking to transition to hydrogen-based backup power system.

08 HYDROGEN↗

DOE OSTI2026

Onboard/Origin-Destination Survey - Phoenix - 2007

In 2007, the Valley Metro Regional Public Transportation Authority, with consultant support, conducted an origin and destination survey of Valley Metro riders. The self-administered surveys were conducted among riders of fixed-route bus service: Local, Circulator, Limited, Rural, Express, and RAPID bus. Data collection was performed from October 8 through December 18, 2007. The objectives of the survey were to examine the demographics and travel behavior characteristics of Valley Metro riders. The survey data used for this analysis were appropriately weighted and expanded to represent the unlinked trips made by Valley Metro riders.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2024

Control, Fault Management, and Grid Support Functionality of an MV AC-DC Solid State Transformer based EV Extreme Fast Charging Station

Electric vehicles (EVs) have become increasingly popular in recent times while revolutionizing the consumer and commercial transportation market. The development of charging infrastructure has become one of the priorities for increasing the adoption of EVs. Extreme fast charging (XFC) technology can reduce the so-called ’range anxiety’ of consumers as they significantly reduce the charging time. With the advent of wide band-gap (WBG) power devices and improvement in power electronic converters, medium voltage (MV) solid state transformer (SST) based XFC system has the potential to replace the traditional XFC stations because of the lower footprint, ease of installation, enhanced control feature, and better system efficiency. The control system design is one of the critical aspects of the SST development process. Careful consideration and detailed analysis are required to find out suitable control method for the SST based on its topology among different centralized and decentralized control architectures. Also, the control parameters selection and potential improvement to the transient response of the controller ought to be investigated. Another major concern of the SST is different types of internal fault which reduces the overall reliability of the XFC system. As a result, designing a robust protection system is essential. Among different fault modes, open circuit switch faults have received significant attention as an active research area because of their likelihood and severe effects on converters. Therefore, the power stages used in the XFC system require functional and accurate open circuit switch fault management methods. An equally significant aspect of this SST based XFC is its compatibility in a microgrid where there is no synchronous generator present. When the grid is not available, the XFC SSTs can provide grid forming capability and continue supplying the critical loads in islanded mode. The transition between grid connected and islanded mode, especially the grid resynchronization process has to be carefully performed for the safety of the microgrid components. The challenges posed by the aforementioned issues have inspired the work done in this dissertation. Here, a 13.2 kV, 1 MVA, AC/DC SST for the XFC system is examined and a comparative analysis is conducted to select the control architecture based on feasibility of implementation and performance. A detailed control parameter design process is demonstrated considering the sensor dynamics and delay. The selected decentralized control method is augmented by introducing a novel sensor-less load current feedforward method to provide better voltage regulation at the DC bus during a change of load. Next, in the fault management section, a hierarchical failure mode effect analysis (FMEA) is proposed to enable a systematic design of the internal fault protection of the XFC SST as there are limited examples in the literature regarding the analysis of the safety and design of the protection of a power electronic converter system. Novel open circuit switch fault management methods for the converters in the system are presented. Finally, XFC SST based MV microgrid operations in grid connected mode and islanded mode are explored. A secondary control method for grid resynchronization is presented and a design process of control parameters is shown to ensure the stability of the secondary voltage and frequency regulation.

30 DIRECT ENERGY CONVERSION↗

NASA NTRS2002

Optical Properties of Thin Film Molecular Mixtures

Thin films composed of molecular mixtures of metal and dielectric are being considered for use as solar selective coatings for a variety of space power applications. By controlling the degree of molecular mixing, the solar selective coatings can be tailored to have the combined properties of high solar absorptance, alpha, and low infrared emittance, epsilon. On orbit, these combined properties would simultaneously maximize the amount of solar energy captured by the coating and minimize the amount of thermal energy radiated. Mini-satellites equipped with solar collectors coated with these cermet coatings may utilize the captured heat energy to power a heat engine to generate electricity, or to power a thermal bus that directs heat to remote regions of the spacecraft. Early work in this area identified the theoretical boundary conditions needed to operate a Carnot cycle in space, including the need for a solar concentrator, a solar selective coating at the heat inlet of the engine, and a radiator. A solar concentrator that can concentrate sunlight by a factor of 100 is ideal. At lower values, the temperature of the solar absorbing surface becomes too low for efficient heat engine operation, and at higher values, cavity type heat receivers become attractive. In designing the solar selective coating, the wavelength region yielding high solar absorptance must be separated from the wavelength region yielding low infrared emittance by establishing a sharp transition in optical properties. In particular, a sharp transition in reflectance is desired in the infrared to achieve the desired optical performance. For a heat engine operating at 450C, a sharp transition at 1.8 micrometers is desired. The radiator completes the heat flow through the Carnot cycle. Additional work has been done supporting the use of molecular mixtures for terrestrial applications. Sputter deposition provides a means to apply coatings to the tubes that carry a working fluid at the focus of trough-style collectors. Sputtering offers considerable flexibility in coating conditions, including a wide variety of metal and dielectric targets. Coating designs range from simple two or three layer coatings to complex coatings that are purposely graded to be metal-rich at their base and oxide-rich at their surface in order to yield the desired solar selective properties. In these cermet coatings, molecular islands of metal are thought to be embedded in a three dimensional matrix of dielectric. Recent work has identified the use of custom made ion beam sputter deposition targets to produce coatings containing molecular mixtures of metal and dielectric. The targets are cylindrical and the surface consists of a gradually changing composition of metal and dielectric. Rotating the cylinder under the beam during ion beam sputter deposition yields a coating that is a molecular mixture of metal and dielectric, with the composition changing through the thickness of the coating. The optical properties of these coatings are not only dependent on their thickness and chemical composition, but are also dependent on the extent of the through thickness gradient established during deposition. This paper presents a summary of the optical properties of several thin film molecular mixtures designed as solar selective coatings. Optical performance is first identified as a function of wavelength, from the ultraviolet to the visible and infrared. Coating composition, thickness, and gradient from metal to dielectric also play an important role. Additional work for future activities is also identified.

Jaworske, Donald A.↗

NASA NTRS2003

Optical Properties of Thin Film Molecular Mixtures

Thin films composed of molecular mixtures of metal and dielectric are being considered for use as solar selective coatings for a variety of space power applications. By controlling the degree of molecular mixing, the solar selective coatings can be tailored to have the combined properties of high solar absorptance, , and low infrared emittance, . On orbit, these combined properties would simultaneously maximize the amount of solar energy captured by the coating and minimize the amount of thermal energy radiated. Mini-satellites equipped with solar collectors coated with these cermet coatings may utilize the captured heat energy to power a heat engine to generate electricity, or to power a thermal bus that directs heat to remote regions of the spacecraft. Early work in this area identified the theoretical boundary conditions needed to operate a Carnot cycle in space, including the need for a solar concentrator, a solar selective coating at the heat inlet of the engine, and a radiator.1 A solar concentrator that can concentrate sunlight by a factor of 100 is ideal. At lower values, the temperature of the solar absorbing surface becomes too low for efficient heat engine operation, and at higher values, cavity type heat receivers become attractive. In designing the solar selective coating, the wavelength region yielding high solar absorptance must be separated from the wavelength region yielding low infrared emittance by establishing a sharp transition in optical properties. In particular, a sharp transition in reflectance is desired in the infrared to achieve the desired optical performance. For a heat engine operating at 450 C, a sharp transition at 1.8 micrometers is desired.2 The radiator completes the heat flow through the Carnot cycle.

Jaworske, Donald A.↗

DOE OSTI2024

Mitigating Voltage Instability in the Saudi Grid for a Decarbonized, Fully Solar Power System

Lately, solar photovoltaic (PV) has received significant interest due to its economic and environmental benefits. As the integration of renewable energy sources (RES) increases into existing power grids, challenges such as the decrease in short circuit ratio (SCR) are introduced. Here, this paper investigates a case study of the Saudi power grid, examining the voltage stability as the grid transitions from traditional power generation to 100% penetration of solar PV gradually. Moreover, the paper explores the relationship between the increase in solar penetration and the potential effects on the short circuit MVA (SCMVA), which could significantly impact the overall SCR of the system. To meet the North American Electric Reliability Corporation (NERC) recommendation of maintaining SCR at a particular level, synchronous condensers (SC)s were integrated into the grid. The effectiveness of utilizing SCs to maintain the system voltage at optimal levels in a fully solar grid is also considered. In addition, this paper covers the weak grid analysis via utilizing the Newton-Raphson load flow method, along with PV and QV curve analyses. The purpose behind that is to determine weak bus locations in need of voltage improvements, and to meet the amount of reactive power to be injected. Finally, the amount of power being delivered by SCs will be added progressively in three scenarios to show the enhancements on SCR more precisely.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2021

Multi Time-scale Imputation aided State Estimation in Distribution System

With the transition to a smart grid, we are witnessing a significant growth in sensor deployments and smart metering infrastructure in the distribution system. However, information from these sensors and meters are typically unevenly sampled at different time-scales and are incomplete. It is critical to effectively aggregate these information sources for situational awareness. In order to reconcile the heterogeneous multi-scale time-series data, we present a multi-task Gaussian process framework. This framework exploits the spatio-temporal correlation across the time-series data to impute data at any desired timescale while providing confidence bounds on the imputations. The value of the imputed data for distribution system operation is illustrated via a matrix completion based state estimation strategy. Results on the IEEE 37 bus distribution system reveals the superior performance of the proposed approach relative to linear interpolation approaches.

Dahale, Shweta↗

DOE OSTI2021

Building Blocks of Electric Vehicle Deployment: A Guide for Developing Countries

Countries can use electric transportation to help fulfill numerous goals, including greenhouse gas (GHG) emissions targets, local air quality goals, mobility objectives, energy security, and transportation resiliency. Vehicle electrification is a promising pathway to achieving clean energy transitions in the transport sector at scale. As vehicles electrify, the traditionally siloed electricity and transport sectors increasingly converge to create technical, institutional, and economic opportunities and challenges. To navigate this transition effectively, we propose the following foundational pillars or “building blocks” that undergird effective electric vehicle (EV) deployment. Jurisdictions with experience and mature EV markets offer useful lessons learned that may enable developing countries to leapfrog over common roadblocks. Nonetheless, developing countries face distinct challenges collectively, and individually, from developed countries that require careful consideration. From our work around the world, the U.S. Agency for International Development (USAID) and National Renewable Energy Laboratory (NREL) have witnessed interest growing in EVs for a variety of reasons. Lao People’s Democratic Republic (PDR), for example, looks toward EVs as a way to use their surplus of hydropower to displace expensive oil. Thailand and Pakistan seek economic development opportunities in EV manufacturing. Cities including Mexico City, Surat, India, and Kingston, Jamaica see the potential of bus electrification to improve local air quality and reduce traffic congestion. Many USAID partner countries in Southeast Asia are trying to understand how to reach ambitious EV deployment targets and implement EV and transportation plans. This pursuit is prompting questions about EV supply equipment (EVSE) standards, tariff design, and business models that affirm the importance of the building blocks outlined in this report.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

NASA NTRSDate not supplied

MOC Automation with GMSEC and the Generic Extendable Message Utility (GEMU)

Automation has become critical for ground systems, improving efficiency and reliability while reducing costs across mission operations. The Goddard Mission Services Evolution Center (GMSEC) software suite has played a significant role in enabling this automation, leveraging its publish/subscribe paradigm through a message bus architecture to facilitate seamless communication and data flow. Historically, the GMSEC suite, through components like Criteria Action Table (CAT) has been pivotal in automating ground system capabilities. However, as technology advances, limitations in automation with CAT have emerged, creating an opportunity to enhance ground system automation through the introduction of GEMU. This new GMSEC component brings new capabilities and addresses specific automation constraints that CAT could not overcome, allowing for more sophisticated, flexible, and efficient message processing. GEMU, at its core, is designed to accelerate the development of custom GMSEC-compliant applications. It enables users to construct automated message processing pipelines quickly, supporting both drag-and-drop web-based configuration and scripting through a simple domain-specific language. This advancement not only simplifies the process but also reduces the time needed for implementing automated solutions. This presentation will outline GEMU’s potential value in improving mission operations automation. It will highlight the benefits of transitioning from CAT to GEMU and offer insights into how GEMU can drive operational efficiencies. We will also provide an overview of the automation capabilities of GEMU and its potential impact on mission operations centers (MOCs).

GMSEC↗

NASA NTRS2002

Heat Shield Cavity Parametric Experimental Aeroheating for a Proposed Mars Smart Lander Aeroshell

The proposed Mars Smart Lander is to be attached through its aeroshell to the main spacecraft bus, thereby producing cavities in the heat shield. To study the effects these cavities will have on the heating levels experienced by the heat shield, an experimental aeroheating investigation was performed at the NASA Langley Research Center in the 20-Inch Mach 6 Air Tunnel. The effects of Reynolds number, angle-of-attack, and cavity size and location on aero-heating levels and distributions were determined and are presented. To aid the discussion on the effects of the cavities, laminar, thin-layer Navier-Stokes flow field solutions were post-processed to calculate relevant boundary layer properties such as boundary layer height and momentum thickness, edge Mach number, and streamwise pressure gradient. It was found that the effect of the cavities varies with angle-of-attack, freestream Reynolds number, and cavity size and location. The presence of a cavity raised the downstream heating rates by as much as 325% as a result of boundary layer transition.

Liechty, Derek S.↗

DOE OSTI2022

Manufacturing Supply Chain Development for Modular Solar-Thermochemical Conversion Platform - CRADA 387 (Final Report)

Modular chemical process intensification (MCPI) is an emerging field where chemical processing is performed using small-scale modular equipment instead of conventional large centralized chemical plants. Conventional chemical plants benefit from economies of scale that encourage scale-up to ever larger plants. A goal of MCPI is to develop technology that intensifies processing so that equipment can be dramatically smaller and integrated into modular systems. Scale-up occurs by adding more modules in parallel rather than making the equipment larger. A key concept is that equipment and modules can ultimately be cheaper by leveraging economies of mass production, analogous to the automotive industry, in manufacturing the equipment. This project made significant progress toward this outcome by meeting the RAPID institute metric to reduce equipment cost by 20% for each doubling in manufacturing volume. The MCPI application was thermochemical technology that is being commercialized by STARS Technology Corporation, one of the CRADA partners. The technology converts solar and renewable power to chemical energy to produce renewable hydrogen, fuels, and chemicals. The benefit to the public is reduction in greenhouse gases that are contributing to climate change. The project transitioned the steam methane reforming (SMR) reactor from conventional fabrication methods to additive manufacturing (AM) direct metal laser sintering (DMLS) process. This is projected to reduce the cost of making a reactor by 58% when producing 100 reactors per year. Innovations in the DMLS process produced a patented design that reduces reactor weight by 60%. Reductions in material costs and processing time extend the DMLS advantage to higher production volumes. The new design promises to be 38% cheaper than the conventional processes at 1000 units per year. The resulting 87% reduction in the steam methane reforming (SMR) module cost in scaling from current costs meets the RAPID metric. The project was successful in producing and testing the first ever additively manufactured SMR reactors. A reactor achieved over 82% efficiency in converting electric power to chemical energy, which is a world record for an inductively heated SMR. The project has contributed to the design and assembly of a first demonstration plant that is headed to a hydrogen bus filling station in Thousand Palms, CA.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

DOE OSTI2022

Recursive Gaussian Process over graphs for Integrating Multi-timescale Measurements in Low-Observable Distribution Systems

The transition to a smarter grid is empowered by enhanced sensor deployments and smart metering infrastructure in the distribution system. Measurements from these sensors and meters can be used for many applications, including distribution system state estimation (DSSE). However, these measurements are typically sampled at different rates and could be intermittent due to losses during the aggregation process. These multi timescale measurements should be reconciled in real-time to perform accurate grid monitoring. This paper tackles this problem by formulating a recursive multi-task Gaussian process (RGP-G) approach that sequentially aggregates sensor measurements. Specifically, we formulate a recursive multi-task GP with and without network connectivity information to reconcile the multi time-scale measurements in distribution systems. Here, the proposed framework is capable of aggregating the multi-time scale measurements batch-wise or in real-time. Following the aggregation of the multi time-scale measurements, the spatial states of the consistent time-series are estimated using matrix completion based DSSE approach. Simulation results on IEEE 37 and IEEE 123 bus test systems illustrate the efficiency of the proposed methods from the standpoint of both multi time-scale data aggregation and DSSE.

42 ENGINEERING↗

DOE OSTI2025

Online energy consumption forecast for battery electric buses using a learning-free algebraic method

Accurately predicting the energy consumption plays a vital role in battery electric buses (BEBs) route planning and deployment. Based on the algebraic derivative estimation, we present a novel method to forecast the energy consumption in real time. In contrast to the mainstream machine-learning-based methods, the proposed method does not require access to the historical energy consumption data. It eliminates the time-consuming and computationally expensive offline training. Consequently, its prediction performance is not constrained by the quantity and quality of the training data. Moreover, the method can swiftly adapt to new situations not included in the previous driving cycles, which makes it especially suitable for emerging transport modes, e.g., on-demand transit services. In addition, its online execution only involves algebraic calculations, yielding superior calculation efficiency. Using real-world data, we comprehensively compare the performance of the proposed learning-free algebraic method with multiple representative machine-learning-based methods. Finally, the advantages and limitations of the proposed method are discussed in detail.

33 ADVANCED PROPULSION SYSTEMS↗

NASA NTRS2019

Follow-on studies using the Voyager spacecraft thermal model

The 42-year-old Voyager mission, now named the Voyager Interstellar Mission (VIM) is operating long beyond its design life. In 2012, Voyager 1 crossed the heliopause into interstellar space and Voyager 2 made the same transit in November 2018. Due to declining power output from the Radioisotope Thermoelectric Generators (RTGs) the Science and Flight Operations teams continue to make difficult choices in terms of managing both the power and thermal margins to preserve critical science observations and maintain the health of the two spacecraft. A previous paper, “Creating a Voyager Thermal Model 39 Years Into the Flight Mission, Along With Model Correlation and Application” described how a thermal model of these 1977 spacecraft was developed and correlated without many design artifacts and with limited temperature telemetry. This paper describes how the thermal model has been used to establish an Allowable Flight Temperature (AFT) limit for hydrazine propellant in the propulsion subsystem to minimize the risk of freezing. Voyager 2 temperatures have already descended to this limit in the vicinity of the Roll thruster propellant lines. The Flight Operations team has investigated several ways of detecting propellant freezing based on analysis and trending of thruster performance telemetry. In addition, the Voyager thermal model is being used to predict the spacecraft response to possible changes in power state. These changes could involve turning off outboard science instruments and/or their heaters to increase power margin and hence power dissipation inside the spacecraft bus (i.e. in Bay 7, where the power regulation electronics are located). Changes might also be made to turn on or off other loads inside the bus to more effectively heat the coldest propellant lines.

Medina, Enrique↗

NASA NTRS2019

Follow-on studies using the Voyager spacecraft thermal model

The 42-year-old Voyager mission, now named the Voyager Interstellar Mission (VIM) is operating long beyond its design life. In 2012, Voyager 1 crossed the heliopause into interstellar space and Voyager 2 made the same transit in November 2018. Due to declining power output from the Radioisotope Thermoelectric Generators (RTGs) the Science and Flight Operations teams continue to make difficult choices in terms of managing both the power and thermal margins to preserve critical science observations and maintain the health of the two spacecraft. A previous paper, “Creating a Voyager Thermal Model 39 Years Into the Flight Mission, Along With Model Correlation and Application” described how a thermal model of these 1977 spacecraft was developed and correlated without many design artifacts and with limited temperature telemetry. This paper describes how the thermal model has been used to establish an Allowable Flight Temperature (AFT) limit for hydrazine propellant in the propulsion subsystem to minimize the risk of freezing. Voyager 2 temperatures have already descended to this limit in the vicinity of the Roll thruster propellant lines. The Flight Operations team has investigated several ways of detecting propellant freezing based on analysis and trending of thruster performance telemetry. In addition, the Voyager thermal model is being used to predict the spacecraft response to possible changes in power state. These changes could involve turning off outboard science instruments and/or their heaters to increase power margin and hence power dissipation inside the spacecraft bus (i.e. in Bay 7, where the power regulation electronics are located). Changes might also be made to turn on or off other loads inside the bus to more effectively heat the coldest propellant lines. Many of these changes have been or will be tested first on Voyager 1 which has more power margin and does not have the power matrix commanding issues experienced on Voyager 2. Ultimately this assessment may assist the Voyager project in making decisions on the order in which science instruments are permanently turned off.

Medina, Enrique↗

DOE OSTI2024

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗