Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “SYSTEM FAILURE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Understanding and Exploiting Spatial Properties of System Failures on Extreme-Scale HPC Systems, In: 2015 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks

As we approach exascale, the scientific simulations are expected to experience more interruptions due to increased system failures. Designing better HPC resilience techniques requires understanding the key characteristics of system failures on these systems. While temporal properties of system failures on HPC systems have been well-investigated, there is limited understanding about the spatial characteristics of system failures and its impact on the resilience mechanisms. Therefore, we examine the spatial characteristics and behavior of system failures. We investigate the interaction between spatial and temporal characteristics of failures and its implications for system operations and resilience mechanisms on large-scale HPC systems. We show that system failures have "spatial locality" at different granularity in the system, study impact of different failure-types, and investigate the correlation among different failure-types. Finally, we propose a novel scheme that exploits the spatial locality in failures to improve application and system performance. Our evaluation shows that the proposed scheme significantly improves the system performance in a dynamic and production-level HPC system.

Computer Science↗

Understanding and Exploiting Spatial Properties of System Failures on Extreme-Scale HPC Systems

As we approach exascale, the scientific simulations are expected to experience more interruptions due to increased system failures. Designing better HPC resilience techniques requires understanding the key characteristics of system failures on these systems. While temporal properties of system failures on HPC systems have been well-investigated, there is limited understanding about the spatial characteristics of system failures and its impact on the resilience mechanisms. Therefore, we examine the spatial characteristics and behavior of system failures. We investigate the interaction between spatial and temporal characteristics of failures and its implications for system operations and resilience mechanisms on large-scale HPC systems. We show that system failures have spatial locality at different granularity in the system; study impact of different failure-types; and investigate the correlation among different failure-types. Finally, we propose a novel scheme that exploits the spatial locality in failures to improve application and system performance. Our evaluation shows that the proposed scheme significantly improves the system performance in a dynamic and production-level HPC system.

Rogers, James H↗

Identification of Important Phenomena for Light Water Reactors During Heat Transport System Failure Events in Integrated Energy Systems

This work adapts historical literature and existing phenomena identification and ranking tables (PIRT) to be applicable to a novel nuclear power plant (NPP) and chemical or thermal process integrated energy system (IES), particularly focusing on the process heat and heat transport system failure events that are not a concern during normal NPP operation but become vital when an IES is considered. Nuclear energy has been suggested to go beyond base-load applications and be used for hydrogen co-generation systems, amongst other IESs. Prior to the implementation of nuclear IESs, sufficient analysis must be performed on accident events to ensure public safety. The events considered were deemed important because of their potential to damage systems, structures, and components (SSCs). Process thermal events of concern include loss of heat load and temperature transient events. Loss of heat load events were characterized as having high importance and being well understood. Temperature transient events may be further categorized by the cyclic loading and harmonics phenomena. Cyclic loading issues were classified as medium to high importance with knowledge gaps existing regarding fatigue and low power operation, while harmonics phenomena were classified as low importance and are well understood. Heat transport system failure events of concern include intermediate and process heat exchanger failures, mass addition to reactor coolant, ingress of material from thermal manifold/energy storage, and loss of intermediate fluid. Furthermore, these events tended to be of high or medium importance, with some knowledge gaps needing to be filled for individual reactor systems due to unique designs.

Integrated Energy System (IES)↗

Graded approach for assessing digital system failure susceptibilities - 305

Owner/operators of nuclear plants must be able to identify and assess susceptibilities to digital system failures and unintended behaviors that could lead to plant system malfunctions, including common-cause failures (CCFs) of multiple controlled components that may impact overall plant safety. Nuclear plant designers and regulators often assess and manage potential failure modes by assuming the failure occurs and showing by analysis that the results are acceptable. In 2016 EPRI published a guideline on Methods for Assuring Safety and Dependability when Applying Digital Instrumentation and Control Systems (EPRI 3002005326), which takes a more holistic approach that considers digital system failure modes from the perspective of their impact on plant risk and includes a graded approach based on safety significance. This paper describes that graded approach. The methodology in EPRI 3002005326 systematically identifies potential I and C vulnerabilities that could lead to significant malfunctions of controlled components and systems, including common-cause failures (CCF), and discusses in detail methods to protect against them. It considers both preventive measures that reduce the likelihood of failures, and plant systems and features that mitigate the effects of component failures and misbehaviors. Coping analysis is then performed as appropriate to provide additional assurance of protection. The safety significance based graded approach is an important feature in that it can help users focus attention on overall plant safety, including potentially risk-significant scenarios that might not be considered in traditional safety analyses. The purpose is to help the user ensure that modifications to the I and C that could potentially be safety significant are treated appropriately and at the same time not waste valuable resources on excessive protection against changes that have little or no impact on safety. The graded approach allows the design engineer to tailor the rigor of the preventive, limiting, and mitigative measures commensurately with the effects the I and C modification has on overall plant safety. The graded approach focuses on safety significance impact, which is effectively a qualitative measure of the potential change in safety (or risk) caused by a proposed I and C modification, as compared to the I and C that is being replaced. Safety significance impact should not be confused with importance to safety or risk significance. It is possible that an upgrade to safety-related and/or risk-significant I and C systems may have little or no safety significant impact and vice versa. The approach considers three factors that influence the impact on safety significance of a proposed I and C modification: context, likelihood of failure, and consequences of failure. The most significant of the three factors is context - what the I and C is connected to, both directly and indirectly, including its potential effects on plant systems that respond to transients or accidents. The graded approach is particularly helpful in assessing potential CCFs resulting from digital I and C failures, and shows why the most problematic CCFs will be those that can affect multiple plant systems. (authors)

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Probabilistic Risk Assessment of Spent Fuel Pool Cooling System Failure Considering Safety and Security Initiating Events

In order to quantify the probable risk associated with a safety system, nuclear safety risk evaluation process is applied which is generally performed in three steps. The first step is to calculate the damage frequency of a critical system. This step is followed by the radioactive source term estimation due to the potential system damage. The final step is the assessment of off-site consequences. The safety risk formula is shown by Eq. (1). P{sub F} is the probability of safety system failure (the probability used describes a random, independent event), and C is the consequence value. R{sub SAF} = P{sub F} * C (1) The security risk associated with an attack on critical infrastructure and/or special nuclear materials theft is usually evaluated using three- term risk equation (probability of attack, probability of adversary success, and consequence). A security threat and the related initiating events are not considered in a pure safety risk analysis. The vulnerability of the physical protection system is performed independently even though the consequence resulting from a security initiating event can be similar to a safety related initiating event and thus gets double counted. The security risk can be calculated using Eq. (2) R{sub SEC} = P{sub A} * P{sub S} * C (2) PA is the probability of attack, P{sub S} is the probability of adversary success (P{sub S} = 1 - P{sub I} P{sub N}). P{sub I} being the probability of interruption which accounts for the probabilities of detection of all timely detection elements along an adversary path. PN being the probability of neutralization: the result of engagement of the response force with the adversaries after the interruption has occurred. C is the consequence magnitude from a successful attack. The two security probabilities do not describe random, independent events. As a result, because of the differences in the randomness and independence of the respective safety and security probabilities, the safety and the security risks are currently calculated separately. The consequence term in nuclear safety and security risk evaluation have the same definition. An effort is made here to study the effect on the overall risk by considering security initiating events along with the subsequent failure of the intermediate safety element. The target selected is a spent fuel storage pool for analyzing the public risk arising from the interplay between nuclear security and safety initiating events. EASI (Estimate of Adversary Sequence Interruption) model is used to calculate the probability of interruption related to a security system that leads to the calculation of the security initiating event frequency. Further progression of this initiating security event to a top event is analyzed using a Probabilistic Safety Assessment (PSA) tool, SAPHIRE (version 8) to obtain a joint pool damage frequency. For the progression of events leading to a top event, the failure of the intermediate safety elements is assumed to be external random events such as heavy load drop and fire events. The objectives of this study is to (1) determine the double accounting of frequency of failure, risk and allocated resources in the scenario of a non-random security initiating event leading to a safety random event chain (2) compare the damage frequency from pure security with the frequency of combined security-safety failure event and pure safety failure events. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Learning from Trending, Precursor Analysis, and System Failures

Models of reliability growth relate current system unreliability to currently accumulated experience. But “experience” comes in different forms. Looking back after a major accident, one is sometimes able to identify previous events or measurable performance trends that were, in some sense, signaling the potential for that major accident: potential that could have been recognized and acted upon, but was not recognized until the accident occurred. This could be a previously unrecognized cause of accidents, or underestimation of the likelihood that a recognized potential cause would actually operate. Despite improvements in the state of practice of modeling of risk and reliability, operational experience still has a great deal to teach us, and work has been going on in several industries to try to do a better job of learning from experience before major accidents occur. It is not enough to say that we should review operating experience; there is too much “experience” for such general advice to be considered practical. The paper discusses the following: 1. The challenge of deciding what to focus on in analysis of operating experience. 2. Comparing what different models of learning and reliability growth imply about trending and precursor analysis.

97 MATHEMATICS AND COMPUTING↗

Integrated system failure analysis software toolchain (IS-FAST)

Systems and methods are provided for generating faults and analyzing fault propagation and its effects. Starting from the ontologies of components, functions, flows, and faults, systems and methods are provided that describe, generate and track faults in a computer system across multiple domains throughout design and/or development. In order to construct the system and fault models, a series of concepts is introduced in the form of ontologies and their dependencies. An investigation is performed into the faults, including their type, cause, life-cycle aspects, and effect. Principles and rules are created to generate various faults based on system configurations. After the modeling process, a simulation engine is described to execute actions and simulate the process of fault generation and propagation. As a result, fault paths that impact components and functions can be obtained.

Diao, Xiaoxu↗

Failure diagnosis and trend‐based performance losses routines for the detection and classification of incidents in large‐scale photovoltaic systems

Abstract Fault detection and classification in photovoltaic (PV) systems through real‐time monitoring is a fundamental task that ensures quality of operation and significantly improves the performance and reliability of operating systems. Different statistical and comparative approaches have already been proposed in the literature for fault detection; however, accurate classification of fault and loss incidents based on PV performance time series remains a key challenge. Failure diagnosis and trend‐based performance loss routines were developed in this work for detecting PV underperformance and accurately identifying the different fault types and loss mechanisms. The proposed routines focus mainly on the differentiation of failures (e.g., inverter faults) from irreversible (e.g., degradation) and reversible (e.g., snow and soiling) performance loss factors based on statistical analysis. The proposed routines were benchmarked using historical inverter data obtained from a 1.8 MWp PV power plant. The results demonstrated the effectiveness of the routines for detecting failures and loss mechanisms and the capability of the pipeline for distinguishing underperformance issues using anomaly detection and change‐point (CP) models. Finally, a CP model was used to extract significant changes in time series data, to detect soiling and cleaning events and to estimate both the performance loss and degradation rates of fielded PV systems.

14 SOLAR ENERGY↗

Analysis of the Heliotrope Flight System Failure on May 29 2015

The flight and unscheduled termination of a prototype solar powered hot air balloon are described. Impact speeds of the falling payload are estimated, and the cause of the unexpected release is discussed. Modifications to the flight system to reduce the chances of this failure mode are presented.

14 SOLAR ENERGY↗

A Theoretical Open Architecture Framework and Technology Stack for Digital Twins in Energy Sector Applications

Digital twin is often viewed as a technology that can assist engineers and researchers make data-driven system and network-level decisions. Across the scientific literature, digital twins have been consistently theorized as a strong solution to facilitate proactive discovery of system failures, system and network efficiency improvement, system and network operation optimization, among others. With their strong affinity to the industrial metaverse concept, digital twins have the potential to offer high-value propositions that are unique to the energy sector stakeholders to realize the true potential of physical and digital convergence and pertinent sustainability goals. Although the technology has been known for a long time in theory, its practical real-world applications have been so far limited, nevertheless with tremendous growth projections. In the energy sector, there have been theoretical and lab-level experimental analysis of digital twins but few of those experiments resulted in real-world deployments. There may be many contributing factors to any friction associated with real-world scalable deployment in the energy sector such as cost, regulatory, and compliance requirements, and measurable and comparable methods to evaluate performance and return on investment. Those factors can be potentially addressed if the digital twin applications are built on the foundations of a scalable and interoperable framework that can drive a digital twin application across the project lifecycle: from ideation to theoretical deep dive to proof of concept to large-scale experiment to real-world deployment at scale. This paper is an attempt to define a digital twin open architecture framework that comprises a digital twin technology stack (D-Arc) coupled with information flow, sequence, and object diagrams. Those artifacts can be used by energy sector engineers and researchers to use any digital twin platform to drive research and engineering. This paper also provides critical details related to cybersecurity aspects, data management processes, and relevant energy sector use cases.

Gourisetti, Sri, Nikhil Gupta (ORCID:0000000188778↗

A Method for Estimating Time-Series PV Production Loss From Solar Tracking Failures

Solar tracking system failures can dramatically reduce photovoltaic (PV) system energy output through suboptimal irradiance capture and self-shading loss. Detecting tracker failures is not always straightforward; unlike other common PV system failures like inverter outages and blown fuses which take portions of a system completely offline, tracker failures only partially reduce output power and can go unnoticed as a result. Additionally, tracker failures can take one of several forms, each with their own loss characteristics. Here we present two methods of detecting tracker failure events from time-series production data and a method for estimating the associated production loss. Compared with existing detection methods, the proposed power-based detection method showed 0-17% reductions in Type I error rate depending on weather conditions. Here, the loss model estimated production loss with low error (mean bias error = -2.3 %, root-mean-squared error = 6%) in a rudimentary validation.

14 SOLAR ENERGY↗

Failure Diagnosis for the Holdup Tank System via ISFA

This paper discusses the use of the integrated system failure analysis (ISFA) technique for fault diagnosis for the holdup tank system. ISFA is a simulation-based, qualitative and integrated approach used to study fault propagation in systems containing both hardware and software subsystems. The holdup tank system consists of a tank containing a fluid whose level is controlled by an inlet valve and an outlet valve. We introduce the component and functional models of the system, quantify the main parameters and simulate possible failure-propagation paths based on the fault propagation approach, ISFA. The results show that most component failures in the holdup tank system can be identified clearly and that ISFA is viable as a technique for fault diagnosis. Since ISFA is a qualitative technique that can be used in the very early stages of system design, this case study provides indications that it can be used early to study design aspects that relate to robustness and fault tolerance.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Lazy Checkpointing: Exploiting Temporal Locality in Failures to Mitigate Checkpointing Overheads on Extreme-Scale Systems, In: 2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks

Continuing increase in the computational power of supercomputers has enabled large-scale scientific applications in the areas of astrophysics, fusion, climate and combustion to run larger and longer-running simulations, facilitating deeper scientific insights. However, these long-running simulations are often interrupted by multiple system failures. Therefore, these applications rely on "check pointing'" as a resilience mechanism to store application state to permanent storage and recover from failures. Unfortunately, check pointing incurs excessive I/O overhead on supercomputers due to large size of checkpoints, resulting in a sub-optimal performance and resource utilization. In this paper, we devise novel mechanisms to show how check pointing overhead can be mitigated significantly by exploiting the temporal characteristics of system failures. We provide new insights and detailed quantitative understanding of the check pointing overheads and trade-offs on large-scale machines. Our prototype implementation shows the viability of our approach on extreme-scale machines.

Computer Science↗

Failure Diagnosis for the Holdup Tank System via ISFA

This paper discusses the use of the integrated system failure analysis (ISFA) technique for fault diagnosis for the holdup tank system. ISFA is a simulation-based, qualitative and integrated approach used to study fault propagation in systems containing both hardware and software subsystems. The holdup tank system consists of a tank containing a fluid whose level is controlled by an inlet valve and an outlet valve. We introduce the component and functional models of the system, quantify the main parameters and simulate possible failure-propagation paths based on the fault propagation approach, ISFA. The results show that most component failures in the holdup tank system can be identified clearly and that ISFA is viable as a technique for fault diagnosis. Since ISFA is a qualitative technique that can be used in the very early stages of system design, this case study provides indications that it can be used early to study design aspects that relate to robustness and fault tolerance. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Preliminary System Interface Failure Mode Analysis for Two Advanced Reactors

This study explores two distinct Balance of Plant (BOP) configurations: the Rankine cycle for a sodium-cooled fast reactor (SFR) and the Brayton cycle for a gas-cooled reactor (GCR). As representative designs, the Power Reactor Innovative Small Module (PRISM) by GE Hitachi Nuclear Energy was selected for the SFR, while the Gas Turbine Modular Helium Reactor (GT MHR) by General Atomics was chosen for the gas-cooled reactor. Both configurations were adapted to deliver high-quality heat for industrial applications. A Failure Modes and Effects Analysis (FMEA) was conducted for each system to identify critical failure modes affecting key components. This study marks the first phase of a two-step design optimization approach, integrating FMEA into the design process. Based on the analysis, design modifications and mitigation strategies were proposed to enhance system resilience. The second phase, to be detailed in a subsequent report, will focus on the role of the control system in mitigating these failures. The FMEA serves as a foundation for defining the control topology, ensuring system resilience against component failures that could compromise essential functions, such as electricity and heat production.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Prognostic Relevance of Treatment Failure Patterns in Pediatric High-Grade Glioma: Is There a Role for a Revised Failure Classification System?

Purpose: We sought to investigate the pattern of treatment failure with respect to anatomic extent, radiation dose, and criteria for failure according to the Response Assessment in Neuro-Oncology (RANO). We evaluated the corresponding prognostic significance of these factors in patients with pediatric high-grade glioma (pHGG). Methods and Materials: Fifty-six patients with pHGG were enrolled in an institutional phase 1 to 2 prospective trial that included maximal safe resection and radiation therapy with concurrent and adjuvant erlotinib. The radiation therapy dose administered was 54 to 59.4 Gy at 1.8 Gy/d. Tumor progression was defined according to clinical symptoms and imaging features and was classified in relation to the original extent of the tumor, radiation prescription target volume coverage, and RANO criteria (RANOc). Results: With a median follow-up period of 90 months (range, 70-124 months), progression occurred in 48 patients (85.7%) while 8 (14.3%) were without progression. Central failure represented 42.6% of the total cohort, while in-field, marginal, and distant failures occurred in 7.4%, 9.3%, and 22.2%, respectively. Patients with biopsy or subtotal resection had increased rates of central failure and represented 14.81% and 16.67% of the total cohort, respectively. Tumor progression was classified as local, local plus distant, or distant. Among patients with local failure as a component of failure, 5 were considered to have marginal failure. Patients with frontal, temporal, and parietal disease had the highest rates of multifocal failure. A comparison between responses defined by RANOc demonstrated varied time to death (TTD) from progression. Conclusions: Pediatric high-grade glioma was shown to have high rates of central failure, particularly in cases with limited resection. Patients with central failure had a trend toward more prolonged TTD from failure relative to other failure patterns. The low marginal failure rates seen in this group suggest that less conservative radiation target margins may be possible. TTD from failure varied according to RANO type, suggesting that adult RANOc require modification before being applied to pHGG.

62 RADIOLOGY AND NUCLEAR MEDICINE↗

WSEAT Shock Testing Margin Assessment Using Energy Spectra Final Report

Several programs at Sandia National Laboratories have adopted energy spectra as a metric to relate the severity of mechanical insults to structural capacity. The purpose being to gain insight into the system's capability, reliability, and to quantify the ultimate margin between the normal operating envelope and the likely system failure point -- a system margin assessment. The fundamental concern with the use of energy metrics was that the applicability domain and implementation details were not completely defined for many problems of interest. The goal of this WSEAT project was to examine that domain of applicability and work out the necessary implementation details. The goal of this project was to provide experimental validation for the energy spectra based methods in the context of margin assessment as they relate to shock environments. The extensive test results concluded that failure predictions using energy methods did not agree with failure predictions using S-N data. As a result, a modification to the energy methods was developed following the form of Basquin's equation to incorporate the power law exponent for fatigue damage. This update to the energy-based framework brings the energy based metrics into agreement with experimental data and historical S-N data.

47 OTHER INSTRUMENTATION↗