Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “system operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,639 records · Page 91

Model Based Autonomy for Robust Mars Operations

Space missions have historically relied upon a large ground staff, numbering in the hundreds for complex missions, to maintain routine operations. When an anomaly occurs, this small army of engineers attempts to identify and work around the problem. A piloted Mars mission, with its multiyear duration, cost pressures, half-hour communication delays and two-week blackouts cannot be closely controlled by a battalion of engineers on Earth. Flight crew involvement in routine system operations must also be minimized to maximize science return. It also may be unrealistic to require the crew have the expertise in each mission subsystem needed to diagnose a system failure and effect a timely repair, as engineers did for Apollo 13. Enter model-based autonomy, which allows complex systems to autonomously maintain operation despite failures or anomalous conditions, contributing to safe, robust, and minimally supervised operation of spacecraft, life support, In Situ Resource Utilization (ISRU) and power systems. Autonomous reasoning is central to the approach. A reasoning algorithm uses a logical or mathematical model of a system to infer how to operate the system, diagnose failures and generate appropriate behavior to repair or reconfigure the system in response. The 'plug and play' nature of the models enables low cost development of autonomy for multiple platforms. Declarative, reusable models capture relevant aspects of the behavior of simple devices (e.g. valves or thrusters). Reasoning algorithms combine device models to create a model of the system-wide interactions and behavior of a complex, unique artifact such as a spacecraft. Rather than requiring engineers to all possible interactions and failures at design time or perform analysis during the mission, the reasoning engine generates the appropriate response to the current situation, taking into account its system-wide knowledge, the current state, and even sensor failures or unexpected behavior.

Kurien, James A.↗

Iodine Satellite

The Iodine Satellite (iSat) spacecraft will be the first CubeSat to demonstrate high change in velocity from a primary propulsion system by using Hall thruster technology and iodine as a propellant. The mission will demonstrate CubeSat maneuverability, including plane change, altitude change and change in its closest approach to Earth to ensure atmospheric reentry in less than 90 days. The mission is planned for launch in fall 2017. Hall thruster technology is a type of electric propulsion. Electric propulsion uses electricity, typically from solar panels, to accelerate the propellant. Electric propulsion can accelerate propellant to 10 times higher velocities than traditional chemical propulsion systems, which significantly increases fuel efficiency. To enable the success of the propulsion subsystem, iSat will also demonstrate power management and thermal control capabilities well beyond the current state-of-the-art for spacecraft of its size. This technology is a viable primary propulsion system that can be used on small satellites ranging from about 22 pounds (10 kilograms) to more than 1,000 pounds (450 kilograms). iSat's fuel efficiency is ten times greater and its propulsion per volume is 100 times greater than current cold-gas systems and three times better than the same system operating on xenon. iSat's iodine propulsion system consists of a 200 watt (W) Hall thruster, a cathode, a tank to store solid iodine, a power processing unit (PPU) and the feed system to supply the iodine. This propulsion system is based on a 200 W Hall thruster developed by Busek Co. Inc., which was previously flown using xenon as the propellant. Several improvements have been made to the original system to include a compact PPU, targeting greater than 80 percent reduction in mass and volume of conventional PPU designs. The cathode technology is planned to enable heaterless cathode conditioning, significantly increasing total system efficiency. The feed system has been designed to include iodine compatible control valves with internal heaters and temperature sensors to coincide with the iodine-compatible thruster. A key advantage to using iodine as a propellant is that it may be stored in the tank as an unpressurized solid on the ground and before flight operations. During operations, the tank is heated to vaporize the propellant. Iodine vapor is then routed through custom flow control valves to control mass flow to the thruster and cathode assembly. The thruster then ionizes the vapor and accelerates it via magnetic and electrostatic fields, resulting in high specific impulse, characteristic of a highly efficient propulsion system. The iSat spacecraft is a 12-unit (12U) CubeSat with dimensions of about 8 inches x 8 inches x 12 inches (20 centimeters x 20 centimeters x 30 centimeters). The spacecraft frame will be constructed from aluminum with a finish to prevent iodine-driven corrosion. The iSat spacecraft includes full three-axis control and will leverage heat generated by spacecraft components and radiators for a passive thermal control system. After the CubeSat has successfully detached from its launch vehicle, it will deploy its solar panels, correct for tip-off and maintain attitude control before ground contact. An initial check-out period of two weeks is planned for testing all subsystems. The spacecraft will charge the power system while in sunlight, using momentum wheels and magnetic torque rods to rotate the vehicle to the required attitude.

iSat↗

Thermal Energy Distribution System (TEDS) Startup

The thermal energy distribution system was started to demonstrate preliminary system operability. Some construction and warranty repairs remain before the system can be fully tested and certified for operation.

25 ENERGY STORAGE↗

Image recording requirements for earth observation applications in the next decade

Future requirements for satellite-borne image recording systems are examined from the standpoints of system performance, system operation, product type, and product quality. Emphasis is on total system design while keeping in mind that the image recorder or scanner is the most crucial element which will affect the end product quality more than any other element within the system. Consideration of total system design and implementation for sustained operational usage must encompass the requirements for flexibility of input data and recording speed, pixel density, aspect ratio, and format size. To produce this type of system requires solution of challenging problems in interfacing the data source with the recorder, maintaining synchronization between the data source and the recorder, and maintaining a consistent level of quality. Film products of better quality than is currently achieved in a routine manner are needed. A 0.1 pixel geometric accuracy and 0.0001 d.u. radiometric accuracy on standard (240 mm) size format should be accepted as a goal to be reached in the near future.

Peavey, B.↗

Advancing Autonomy in Distributed Space Systems: Insights From on-Orbit Testing with the Starling 1.0 Mission

Autonomous decision-making is crucial for enhancing mission effectiveness in Distributed Space Systems (DSS), particularly in multi-spacecraft operations where communication constraints and mission complexity pose challenges. The Distributed Spacecraft Autonomy (DSA) team at NASA’s Ames Research Center is advancing autonomy in DSS through five key technical areas: distributed resource and task management, reactive operations, system modeling and simulation, human-swarm interaction, and ad hoc network communications. The DSA experiment onboard the Starling 1.0 Mission showcases collaborative resource allocation for multi-point science data collection with four small spacecraft. Autonomy in decision-making is highlighted as a crucial factor for multi-spacecraft missions, enabling spacecraft to operate independently, reducing reliance on ground control. This capability is particularly significant for future deep-space missions, where communication delays and limited data transmission capacity make traditional command and control approaches impractical. This demonstration focuses on a GPS Channel Selection Experiment, leveraging emergent capabilities like "shared sampling" and "simultaneous sampling" to optimize channel selection across the spacecraft swarm. The experiment aims to capture ionospheric phenomena such as the Equatorial Ionization Anomaly and Polar Patches. The DSA system's autonomous reconfiguration ability is showcased, emphasizing its adaptability to natural phenomena without significant integration efforts. The GPS Channel Selection Experiment utilizes a dual-band GPS receiver to estimate plasma density in the ionosphere. Explorative and exploitative channel selections are employed based on the nature of observed phenomena. The performance of DSA algorithms is evaluated in terms of optimal channel allocations and responsiveness to changes in observed features. The DSA Flight Software utilizes the Core Flight System (cFS) framework, ensuring compatibility with the Starling 1.0 flight mission software. DSA showcases results from RTI’s Connext DDS Micro communication middleware, enabling message routing over the Ad-Hoc Network of Starling 1.0. This paper provides a comprehensive overview of the DSA experiment's initial results, emphasizing the advancements in autonomy for Distributed Space Systems and the successful collaboration with the Starling 1.0 mission.

Caleb Ashmore Adams↗

Chess Master Project

This final technical report tracks the accomplishments of the Chess Master Project to the statement of project objects and resulting commercialization of the technology. Objectives for the project include 1) to sustain critical energy delivery functions during a cyber intrusion, control system operators need the ability to automate identification and containment of the affected network areas, and re-route critical information and control flows around; and 2) to effectively isolate impacted network areas and re-route critical flows, control system network operators need a global view of all the communication flows and have a method to proactively determine the whitelisted communications and how to respond to communications when adversarial behavior is detected.

42 ENGINEERING↗

System analysis for the Huntsville Operational Support Center distributed computer system

The Huntsville Operations Support Center (HOSC) is a distributed computer system used to provide real time data acquisition, analysis and display during NASA space missions and to perform simulation and study activities during non-mission times. The primary purpose is to provide a HOSC system simulation model that is used to investigate the effects of various HOSC system configurations. Such a model would be valuable in planning the future growth of HOSC and in ascertaining the effects of data rate variations, update table broadcasting and smart display terminal data requirements on the HOSC HYPERchannel network system. A simulation model was developed in PASCAL and results of the simulation model for various system configuraions were obtained. A tutorial of the model is presented and the results of simulation runs are presented. Some very high data rate situations were simulated to observe the effects of the HYPERchannel switch over from contention to priority mode under high channel loading.

Ingels, F. M.↗

Application Deconfliction Characterization and Alternatives Analysis

This report provides an overview of the domain space and solution techniques that could be used to create a robust, flexible app deconfliction service. Three approaches are reviewed with summaries of the characteristics, elements, and results from preliminary demonstrations of solution techniques based on each approach: 1) rules and heuristics, 2) cooperation, and 3) optimization. The strengths and weaknesses of each solution technique were explored through a set of numerical demonstrations on modified IEEE 123 node and 9500 node test feeders. An alternatives analysis of individual deconfliction elements was performed with each solution technique element evaluated against criteria reflecting the dynamic app environment, need to balance app objectives, and scalability issues versus the number of applications, setpoints, and distributed control areas. It is anticipated that a combined solution for a GridAPPS-D Deconfliction Service can be formulated using a combination of elements from each solution technique. The combined solution would combine 1) device control budgets to reduce the size of the solution space by constraining system setpoints to those will not result in accelerated degradation of physical assets, 2) system operations rules to constrain the solution space by eliminating setpoints that result in violations of system limits or operational best practices, 3) contextual status signals shared with or among apps such that they could update their desired setpoints based on the evolving context, 4) a mediator that incentivizes apps to come to a cooperative solution, and 5) Setpoint-informed optimization as a fallback mechanism if a cooperative solution cannot be agreed upon by applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Mission operations concepts for Earth Observing System (EOS)

Mission operation concepts are described which are being used to evaluate and influence space and ground system designs and architectures with the goal of achieving successful, efficient, and cost-effective Earth Observing System (EOS) operations. Emphasis is given to the general characteristics and concepts developed for the EOS Space Measurement System, which uses a new series of polar-orbiting observatories. Data rates are given for various instruments. Some of the operations concepts which require a total system view are also examined, including command operations, data processing, data accountability, data archival, prelaunch testing and readiness, launch, performance monitoring and assessment, contingency operations, flight software maintenance, and security.

Kelly, Angelita C.↗

Stability of a rigid rotor supported on oil-film journal bearings under dynamic load

Most published work relating to dynamically loaded journal bearings are directed to determining the minimum film thickness from the predicted journal trajectories. These do not give any information about the subsynchronous whirl stability of journal bearing systems since they do not consider the equations of motion. It is, however, necessary to know whether the bearing system operation is stable or not under such an operating condition. The stability characteristics of the system are analyzed. A linearized perturbation theory about the equilibrium point can predict the threshold of stability; however it does not indicate postwhirl orbit detail. The linearized method may indicate that a bearing is unstable for a given operating condition whereas the nonlinear analysis may indicate that it forms a stable limit cycle. For this reason, a nonlinear transient analysis of a rigid rotor supported on oil journal bearings under: (1) a unidirectional constant load, (2) a unidirectional periodic load, and (3) variable rotating load are performed. The hydrodynamic forces are calculated after solving the time-dependent Reynolds equation by a finite difference method with a successive overrelaxation scheme. Using these forces, equations of motion are solved by the fourth-order Runge-Kutta method to predict the transient behavior of the rotor. With the aid of a high-speed digital computer and graphics, the journal trajectories are obtained for several different operating conditions.

Majumdar, B. C.↗

Requirements for a network storage service

Sandia National Laboratories provides a high performance classified computer network as a core capability in support of its mission of nuclear weapons design and engineering, physical sciences research, and energy research and development. The network, locally known as the Internal Secure Network (ISN), was designed in 1989 and comprises multiple distributed local area networks (LAN's) residing in Albuquerque, New Mexico and Livermore, California. The TCP/IP protocol suite is used for inner-node communications. Scientific workstations and mid-range computers, running UNIX-based operating systems, compose most LAN's. One LAN, operated by the Sandia Corporate Computing Directorate, is a general purpose resource providing a supercomputer and a file server to the entire ISN. The current file server on the supercomputer LAN is an implementation of the Common File System (CFS) developed by Los Alamos National Laboratory. Subsequent to the design of the ISN, Sandia reviewed its mass storage requirements and chose to enter into a competitive procurement to replace the existing file server with one more adaptable to a UNIX/TCP/IP environment. The requirements study for the network was the starting point for the requirements study for the new file server. The file server is called the Network Storage Services (NSS) and is requirements are described in this paper. The next section gives an application or functional description of the NSS. The final section adds performance, capacity, and access constraints to the requirements.

Kelly, Suzanne M.↗

Enabling Exascale Hardware and Software Design through Scalable System Virtualization (Final Report)

In this grant, we enhanced the Palacios virtual machine monitor to increase its scalability and suitability for addressing exascale system software design issues. This included a wide range of research on core Palacios features, large-scale system emulation, fault injection, perfomrance monitoring, and VMM extensibility. This research resulted in large number of high-impact publications in well-known venues, the support of a number of students, and the graduation of two Ph.D. students and one M.S. student. In addition, our enhanced version of the Palacios virtual machine monitor has been adopted as a core element of the Hobbes operating system under active DOE-funded research and development.

97 MATHEMATICS AND COMPUTING↗

Exe-Guard Project

The exe-Guard Project is an alliance between Dominion Virginia Power (DVP), Sandia National Laboratories (SNL), Dartmouth University, and Schweitzer Engineering Laboratories (SEL). SEL is primary recipient on this project. The exe-Guard project was selected for award under DE-FOA-0000359 with CFDA number 81.122 to address Topic Area of Interest 4: Hardened platforms and Systems. The exe-Guard project developed an antivirus solution for control system embedded devices to prevent the execution of unauthorized code and maintain settings and configuration integrity. This project created a white list antivirus solution for control systems capable of running on embedded Linux® operating systems. White list antivirus methods allow only credible programs to run through the use of digital signatures and hash functions. Once a system’s secure state is baselined, white list antivirus software denies deviations from that state because of the installation of malicious code as this changes hash results. Black list antivirus software has been effective in traditional IT environments but has negative implications for control systems. Black list antivirus uses pattern matching and behavioral analysis to identify system threats while relying on regular updates to the signature file and recurrent system scanning. Black list antivirus is vulnerable to zero day exploits which have not yet been incorporated into a signature file update. System scans hamper the performance of high availability applications, as revealed in NIST special publication 1058 which summarizes the impact of blacklist antivirus on control systems: Manual or “on-demand” scanning has a major effect on control processes in that they take CPU time needed by the control process (Sometimes close to 100% of CPU time). Minimizing the antivirus software throttle setting will reduce but not eliminate this effect. Signature updates can also take up to 100% of CPU time, but for a much shorter period than a typical manual scanning process. Control systems are vulnerable to performance losses if off-the-shelf blacklist antivirus solutions aren’t implemented with care. This investment in configuration in addition to constant decommissioning to perform manual signature file updates is unprecedented and impractical. Additionally, control systems are often disconnected or islanded from the network making the delivery of signature updates difficult. Exe-Guard project developed a white list antivirus solution that mitigated the above drawbacks and allows control systems to cost-effectively apply malware protection while maintaining high reliability. The application of security patches can also be minimized since white listing maintains constant defense against unauthorized code execution. Security patches can instead be applied in less frequent intervals where system decommissioning can be scheduled and planned for. Since control systems are less dynamic than IT environments, the feasibility of maintaining a secure baselined state is more practical. Because upgrades are performed in infrequent, calculated intervals, it allows a new security baseline to be established before the system is returned to service. Exe-Guard built on the efforts of SNL under the Code Seal project. SNL demonstrated prototype Trust Anchors on the project which are independent monitoring and control devices that can be integrated into untrustworthy components. The exe-Guard team started with the lessons learned under this project then designed commercial solution for white list malware protection. Malware is a real threat, even on islanded or un-networked installations, since operators can unintentionally install infected files, plug in infected mass storage devices, or infect a piece of equipment on the islanded local area network that can then spread to other connected equipment. Protection at the device level is one of the last layers of defense in a security-in-depth defense model before an asset becomes compromised. This project provided non-destructive intrusion, isolation and automated response solution, achieving a goal of the Department of Energy (DOE) Roadmap to Secure Control Systems. It also addressed CIP-007-R4 which requires asset owners to employ malicious software prevention tools on assets within the electronic security perimeter. In addition, the CIP-007-R3 requirement for security patch management is minimized because white listing narrows the impact of vulnerabilities and patch releases. The exe-Guard Project completed all tasks identified in the statement of project objective and identified additional tasks within scope that were performed and completed within the original budget. The cost share was met and all deliverables were successfully completed and submitted on time. Most importantly the technology developed and commercialized under this project has been adopted by the Energy sector and thousands of devices with exe-Guard technology integrated in them have now been deployed and are protecting our power systems today

24 POWER TRANSMISSION AND DISTRIBUTION↗

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗

Effects of GdCl{sub 3} on U Electrochemical Properties in LiCl-KCl-UCl{sub 3}-GdCl{sub 3} Salt

Studies on pyro-processing technology have been stimulated in several countries including the United State, Russia, France, Japan, South Korea, and India. The main purpose of this technology is to treat the irradiated nuclear fuel, reduce volume of the nuclear waste, recycle actinides, and close the fast reactor fuel cycle. Therefore, ongoing researches and developments are expected. In pyro-processing, the most important process is an electro-refiner (ER) where uranium and minor actinides are separated on electrode surface while rare earth fission products are accumulated in LiCl- KCl eutectic salt. Due to the fact that the recovery of the U and actinide (An) materials are conducted via an electrolysis, many researchers have been investigating fundamental properties of U in LiCl- KCl system by using various electrochemical techniques. The resulting datasets are useful for effective system operation and development of safeguards in ER system. However, these values have been measured in pure UCl{sub 3} system in LiCl- KCl salt, which may not be practical to the real ER system owing to the fact that a variety of other fission products including An and lanthanide (Ln) are coexisting in the ER system. Therefore, in this work, gadolinium (Gd) was selected as a surrogate material for An or Ln materials in ER system. This is because that Gd has similar physical characteristics to Ln and An elements such as ionic size and reduction potential. By conducting electrochemical methods including cyclic voltammetry (CV), open circuit potential (OCP), and electrochemical impedance spectroscopy (EIS), effects of Gd coexistence on the electrochemical, thermodynamic, and kinetic properties of U were observed. It is hoped that this study will help us further understanding fundamental effect of the Ln/An effect on LiCl- KCl-UCl{sub 3}, yielding closer to the practical ER unit operation.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

SimSup's Loop: A Control Theory Approach to Spacecraft Operator Training

Immersive simulation is a staple of training for many complex system operators, including astronauts and ground operators of spacecraft. However, while much has been written about simulators, simulation facilities, and operator certification programs, the topic of how one develops simulation scenarios to train a spacecraft operator is relatively understated in the literature. In this paper, an approach is presented for using control theory as the basis for developing the immersive simulation scenarios for a spacecraft operator training program. The operator is effectively modeled as a high level controller of lower level hardware and software control loops that affect a select set of system state variables. Simulation scenarios are derived from a STAMP-based hazard analysis of the operator's high and low level control loops. The immersive simulation aspect of the overall training program is characterized by selecting a set of scenarios that expose the operator to the various inadequate control actions that stem from control flaws and inadequate control executions in the different sections of the typical control loop. Results from the application of this approach to the Lunar Atmosphere and Dust Environment Explorer (LADEE) mission are provided through an analysis of the simulation scenarios used for operator training and the actual anomalies that occurred during the mission. The simulation scenarios and inflight anomalies are mapped to specific control flaws and inadequate control executions in the different sections of the typical control loop to illustrate the characteristics of anomalies arising from the different sections of the typical control loop (and why it is important for operators to have exposure to these characteristics). Additionally, similarities between the simulation scenarios and inflight anomalies are highlighted to make the case that the simulation scenarios prepared the operators for the mission.

LADEE↗

On the impact of tidal generation and energy storage integration in PV-rich electric distribution systems

Deep decarbonization of power system operations requires the maximal utilization of available renewable resources. At distribution-level operations, however, grid operators can face numerous challenges in integrating renewables at scale owing to the inherent intermittence of renewable energy resources. These include phenomena such as voltage fluctuations, which are typically mitigated through control actuators such as on-load tap changers (OLTC) as well as energy storage devices, such as battery energy storage systems (BESS). On the one hand, high intermittence of the available renewable portfolio may require increasingly aggressive control of actuators, thereby accelerating the probability of equipment failure. On the other hand, integrating BESS operations and having a diverse renewable generation portfolio can typically help stagger power/energy flow to mitigate the aforementioned adverse impacts. In this paper, we employ a Bayesian framework for equipment lifetime estimation to understand the impact of including tidal energy resources and BESS in distribution system operations for feeders having substantial distribution photovoltaic generation. Our results indicate that while tidal energy alone may slightly decrease equipment reliability, the adverse impact on reliability is significantly magnified by a generation portfolio consisting of tidal generation and photovoltaic generation. Here, we also study the tidal and photovoltaic hosting capacity problem with and without energy storage systems using equipment reliability as an added constraint. We conclude that energy storage increases the reliability-constrained hosting capacity of the distribution system.

14 SOLAR ENERGY↗

Hyperspectral Thermal Fabry-Perot Modeling

Fabry-Perot interferometer are simple elegant, tunable filters that can be used to make compact hyperspectral thermal imaging system. To foster the development of these sensors, software tools for the design and simulation of tunable Fabry-Perot infrared imagers have been developed. The tools are provided at three levels: basic, design, and system. Basic tools describe a nearly ideal Fabry-Perot filter with perfectly flat and parallel mirrors in collimated space. Design tools that take into account non-ideal behavior such as mirror and collimation defects calculate free spectral range, finesse, and spectral width of the interferometer. System tools help analyze an integration of the Fabry-Perot filter into a camera system. They include spectral convolution, first-order optical layout, and an estimation of signal-to-noise ratio. The complete set of tools allows for simulations of system operation and performance with various illumination sources. Spectral images generated in such simulations were used to examine applicability of Fabry-Perot system in remote sensing of atmospheric gases including detection of environmental pollutants and hazardous gases. Different operating conditions and system configurations are presented.

Ryan, Robert↗