Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault tree”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

AUTOMATIC GENERATION OF EVENT TREES AND FAULT TREES: A MODEL-BASED APPROACH

In the past few decades, increasing complexity in modern engineering systems has been driven by the integration of a large number of components and by the fact that the system operations involve many disciplines (e.g., thermal-hydraulics, plant operations, cyber-security). Current safety/reliability modeling approaches to such systems are labor intensive, difficult to learn, and rely heavily on simplistic Boolean logic to depict failure propagation and accident progression. While these methods serve well for simple systems (i.e., linear causal systems with limited small inter- and intra-system interactions), their results are difficult to verify when modeling complex systems (typically performed through the extensive use of modeling assumptions). The development of new methods is addressed to meet these challenges through a model-based system engineering (MBSE) lens. Under MBSE philosophy, every aspect of the system (form or function) is represented by a model that completely characterizes its architecture or behavior. MBSE approach greatly improves the management of design, analysis and verification of complex systems. An integration of Dynamic Probabilistic Risk Assessment (DPRA) methods with MBSE models is proposed to perform safety/reliability analyses of engineering systems. In particular, MBSE representation of the system (performed using Systems Modeling Language [SysML]) is coupled with DPRA methods to automatically generate event trees and fault trees.

97 - MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Automatic Generation of Event Trees and Fault Trees: A Model-Based Approach

In the past few decades, the increasing complexity of modern engineering systems has been driven by the integration of a large number of components whose operations may involve many disciplines (e.g., thermal hydraulics, plant operations, cybersecurity). Most computational tools used by industry and regulators for system safety and reliability assessments are still based on the traditional fault tree (FT) and event tree (ET) approach, which may not be able to capture complex interactions among system constituents. The use of simulation tools has widely increased in the past few decades to improve the fidelity of the reliability and safety analyses. However, the direct use of simulation tools as part of dynamic probabilistic risk assessment (DPRA) methods is not getting traction since (1) modeling the whole system under consideration with DPRA methods may be computationally expensive and unnecessary, and (2) the manual integration of DPRA models into existing state-of-practice probabilistic risk assessment models (i.e., based on FTs and ETs) can be time consuming and prone to errors. Here, in this paper we propose a procedure to overcome this limitation by presenting several algorithms designed to automatically construct subsystem ETs and FTs from DPRA methods for integration into an existing ET/FT system model.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Eucalyptus – An Analysis Suite for Fault Trees with Uncertainty Quantification

Eucalyptus is a novel code developed at Lawrence Livermore National Laboratory to incorporate uncertainty quantification into Fault Tree Analysis (FTA). This tool addresses the challenge of imperfect knowledge in “grey-box” systems by allowing analysts to incorporate and propagate uncertainty from component-level assessments to system-level effects. Eucalyptus facilitates a consistent evaluation of the impact of subject matter expert judgment and knowledge gaps on overall system response by Monte Carlo generation of possible system fault trees, sampling probabilities of the existence of subsystems and components. Here, the code supports the specification of fault trees through text and allows export to various formats, including auto-generated images, easing analysis and reducing errors. It has undergone extensive verification testing, demonstrating its reliability and readiness for deployment, and leverages on-node parallelism for rapid analysis. Example analyses are shown that include the identification of system failure paths and quantification of the value of further information about system components.

Fault Tree Analysis↗
DOE OSTI2015

TU-AB-BRD-03: Fault Tree Analysis

Current quality assurance and quality management guidelines provided by various professional organizations are prescriptive in nature, focusing principally on performance characteristics of planning and delivery devices. However, published analyses of events in radiation therapy show that most events are often caused by flaws in clinical processes rather than by device failures. This suggests the need for the development of a quality management program that is based on integrated approaches to process and equipment quality assurance. Industrial engineers have developed various risk assessment tools that are used to identify and eliminate potential failures from a system or a process before a failure impacts a customer. These tools include, but are not limited to, process mapping, failure modes and effects analysis, fault tree analysis. Task Group 100 of the American Association of Physicists in Medicine has developed these tools and used them to formulate an example risk-based quality management program for intensity-modulated radiotherapy. This is a prospective risk assessment approach that analyzes potential error pathways inherent in a clinical process and then ranks them according to relative risk, typically before implementation, followed by the design of a new process or modification of the existing process. Appropriate controls are then put in place to ensure that failures are less likely to occur and, if they do, they will more likely be detected before they propagate through the process, compromising treatment outcome and causing harm to the patient. Such a prospective approach forms the basis of the work of Task Group 100 that has recently been approved by the AAPM. This session will be devoted to a discussion of these tools and practical examples of how these tools can be used in a given radiotherapy clinic to develop a risk based quality management program. Learning Objectives: Learn how to design a process map for a radiotherapy process Learn how to perform failure modes and effects analysis analysis for a given process Learn what fault trees are all about Learn how to design a quality management program based upon the information obtained from process mapping, failure modes and effects analysis and fault tree analysis. Dunscombe: Director, TreatSafely, LLC and Center for the Assessment of Radiological Sciences; Consultant to IAEA and Varian Thomadsen: President, Center for the Assessment of Radiological Sciences Palta: Vice President of the Center for the Assessment of Radiological Sciences.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2016

TH-EF-BRC-03: Fault Tree Analysis

This Hands-on Workshop will be focused on providing participants with experience with the principal tools of TG 100 and hence start to build both competence and confidence in the use of risk-based quality management techniques. The three principal tools forming the basis of TG 100’s risk analysis: Process mapping, Failure-Modes and Effects Analysis and fault-tree analysis will be introduced with a 5 minute refresher presentation and each presentation will be followed by a 30 minute small group exercise. An exercise on developing QM from the risk analysis follows. During the exercise periods, participants will apply the principles in 2 different clinical scenarios. At the conclusion of each exercise there will be ample time for participants to discuss with each other and the faculty their experience and any challenges encountered. Learning Objectives: To review the principles of Process Mapping, Failure Modes and Effects Analysis and Fault Tree Analysis. To gain familiarity with these three techniques in a small group setting. To share and discuss experiences with the three techniques with faculty and participants. Director, TreatSafely, LLC. Director, Center for the Assessment of Radiological Sciences. Occasional Consultant to the IAEA and Varian.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2020

Identification of potential CO 2 leakage pathways and mechanisms in oil reservoirs using fault tree analysis

Geological storage of CO 2 technologies has become an important and effective way to reduce the greenhouse gas emissions, especially when it is combined with CO 2 enhanced oil recovery (EOR), which can not only trap CO 2 but also enhance oil recovery. However, the risk of CO 2 leakage has always been a prominent issue. In this paper, the mechanisms and pathways of CO 2 leakage during geological storage in oil reservoirs were analyzed using fault tree analysis (FTR). Besides, monitoring technologies were discussed and deployed in a CO 2 EOR demonstration project. The analysis results showed that the sealing failures of oil producer and CO2 injector wells, like well cement failure and casing failure, are the main reasons for the CO 2 leakage, which has been observed in the oil field monitoring project. The monitoring results indicated that there is no large-scale CO 2 leakage, while relatively high and abnormal CO 2 concentration in soil gas near some wellbores are observed, which indicates there is some leakage of CO 2 through incomplete cement ring and well casing string. FTR results provide guidelines for monitoring and preventing of CO 2 leakage during geological storage in oil reservoirs. Finally, the near-surface monitoring methods, especially the soil gas monitoring technologies, can effectively detect the leakage of CO 2 , and are a proper method for CO 2 leakage monitoring.

58 GEOSCIENCES↗
DOE OSTI2012

Extending Performance and Evaluating Risks of PV Systems Failure Using a Fault Tree and Event Tree Approach: Analysis of the Possible Application

Performance and reliability of photovoltaic (PV) systems are important issues in the overall evaluation of a PV plant and its components. While performance is connected to the amount of energy produced by the PV installation in the working environmental conditions, reliability impacts the availability of the system to produce the expected amount of energy. In both cases, the evaluation should be done considering information and data coming from indoor as well as outdoor tests. In this paper a way of re-thinking performance, giving it a probabilistic connotation, and connecting the two concepts of performance and reliability is proposed. The paper follows a theoretical approach and discusses the way to obtaining such information, facing benefits and problems. The proposed probabilistic performance accounts for the probability of the system to function correctly, thus passing through the complementary evaluation of the probability of system malfunctions and consequences. Scenarios have to be identified where the system is not functioning properly or at all. They are expected to be combined in a probabilistic safety analysis (PSA) based approach, providing not only the required probability, but also being capable of giving a prioritization of the risks and the most dominant scenario associated to a specific situation. This approach can offer the possibility to highlight the most critical parts of a PV system, as well as providing support in design activities identifying weak connections.

14 SOLAR ENERGY↗
DOE OSTI2011

A SCOPING STUDY: Development of Probabilistic Risk Assessment Models for Reactivity Insertion Accidents During Shutdown In U.S. Commercial Light Water Reactors

This report documents the scoping study of developing generic simplified fuel damage risk models for quantitative analysis from inadvertent reactivity insertion events during shutdown (SD) in light water pressurized and boiling water reactors. In the past, nuclear fuel reactivity accidents have been analyzed both mainly deterministically and probabilistically for at-power and SD operations of nuclear power plants (NPPs). Since then, many NPPs had power up-rates and longer refueling intervals, which resulted in fuel configurations that may potentially respond differently (in an undesirable way) to reactivity accidents. Also, as shown in a recent event, several inadvertent operator actions caused potential nuclear fuel reactivity insertion accident during SD operations. The set inadvertent operator actions are likely to be plant- and operation-state specific and could lead to accident sequences. This study is an outcome of the concern which arose after the inadvertent withdrawal of control rods at Dresden Unit 3 in 2008 due to operator actions in the plant inadvertently three control rods were withdrawn from the reactor without knowledge of the main control room operator. The purpose of this Standardized Plant Analysis Risk (SPAR) Model development project is to develop simplified SPAR Models that can be used by staff analysts to perform risk analyses of operating events and/or conditions occurring during SD operation. These types of accident scenarios are dominated by the operator actions, (e.g., misalignment of valves, failure to follow procedures and errors of commissions). Human error probabilities specific to this model were assessed using the methodology developed for SPAR model human error evaluations. The event trees, fault trees, basic event data and data sources for the model are provided in the report. The end state is defined as the reactor becomes critical. The scoping study includes a brief literature search/review of historical events, developments of a small set of comprehensive event trees and fault trees and recommendation for future work.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2014

TU-C-BRE-01: KEYNOTE PRESENTATION - Emerging Frontiers in IMRT QA

As IMRT treatment processes advance and mature, so must the quality assurance processes being used to validate their delivery. In some respects, treatment delivery advancements (e.g. VMAT) have out-paced QA advancements. The purpose of this session is to describe new processes that are being implemented to bring IMRT QA up-to-date with the treatment delivery advances. It would explore emerging IMRT QA paradigms, including requirements-based IMRT QA which necessitates definition of delivery errors (e.g. patient dose error, leaf positioning error) and development of processes to ensure reliable error detection. Engineeringbased QA approaches, including use of IMRT treatment delivery process trees, fault tree analysis and failure modes effects analysis would be described. Approaches to detect errors such as (1) during treatment delivery validation using exit fluence detectors (e.g. EPIDs); (2) analysis of treatment delivery via use of machine parameter log files; (3) dose recalculation using (3a) treatment planning system; (3b) record-and-verify; or (3c) entrance and exit fluence measurement parameters would be explained. The relative advantages and disadvantages of each method would be discussed. Schemes for error classification and root cause analysis would be described – steps which are essential for future error prevention. For each QA method, testing procedures and results would be presented indicating the types of errors that can be detected, those that cannot be detected, and the reliability of the error detection method (for example determined via ROC analysis). For speakers, we are seeking to engage non-commercially biased experts. Those listed below are a sub-sample of possible qualified individuals.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2017

Characterizing the Benefits of Seismic Isolation of Nuclear Structures in Terms of Reduced Risk and Cost

Seismic isolation is a mature technology that has been implemented in many civil structures, including buildings, bridges, liquid natural gas tanks, and off shore oil platforms, both in the United States and other countries, to mitigate the damaging effects of earthquakes. Seismic isolation has also been used in nuclear structures in France and South Africa, but not yet in the United States: neither in the Department of Energy facilities nor in commercial nuclear power plants (NPPs). This is primarily due to a lack of guidelines, codes and standards for the analysis, design and construction specific to seismically isolated nuclear structures. However, seismic isolation of nuclear structures has seen increased research interest in the recent years and the recently published national consensus standard, America Society of Civil Engineers (ASCE) Standard 4-16 'Seismic analysis of safety related nuclear structures', now incorporates language and commentary (Chapter 12) for seismically isolating surface or near-surface-mounted nuclear facilities, including NPPs. Seismic isolation substantially reduces horizontal seismic loads (demands) on structures, systems, and components. Reduction in demand results in four potential benefits: (1) economic: reduction in capital cost, (2) increased safety: reduction in the mean annual frequency of unacceptable performance, (3) insurance: protection against increases in the known seismic hazard after construction by minimizing the effort to re-qualify and re-certify structures, systems and components, and (4) recertification: the opportunity to certify an existing NPP design for a region of higher seismic hazard. Item (2) above, an increase in safety (reduction of seismic risk), was explored in Huang et al., wherein it was demonstrated that the implementation of seismic isolation reduced seismic risk in nuclear power plant structures. Studies that assess item (1) have not been performed although the use of isolation may lead to large reductions in the capital cost of safety-related nuclear facilities. Funding provided by Nuclear Safety Research and Development in the Department of Energy (DOE) allowed the authors to develop a framework for assessing the economic benefits and reductions in seismic risk afforded by the use of seismic (base) isolation. The framework includes probabilistic risk assessment and estimation of overnight capital costs (OCC's) of a sample generic DOE nuclear facility (GDNF). The project is documented in detail in Bolisetti et al. and Yu et al., and key results are presented here. The GDNF considered in this study is based on a facility constructed at the Idaho National Laboratory. The GDNF is a two-story reinforced concrete building with an embedded basemat and is founded on soft rock at the boundary of Site Class B and Site Class C (B/C boundary) as characterized by ASCE/SEI Standard 7. The GDNF is assumed to handle radiological materials, and its structure, systems and components (SSC's) are designed to effectively confine these materials in the event of an internal failure. The GDNF is populated with components that are generic to safety-related nuclear structures. A single system, which is intended to confine a loss of materials-at-risk (MAR) to the interior of the structure, is chosen for this study. Accordingly, a hypothetical event tree and fault tree are assumed for risk assessment. The isolation system for the GDNF is designed per Chapter 12 of ASCE/SEI 4-16 but is not optimized. The isolation system consists of 38 lead rubber bearings installed in one horizontal plane below the basemat. Details of the GDNF, including the SSC's, event tree and fault tree, and isolation system, are presented in the project report and Yu et al.. This study includes seismic risk assessment and cost estimation for four cases: (1) the GDNF is located at a site of low to moderate seismic hazard and is constructed on a conventional (non-isolated) foundation; (2) the GDNF is located at the same site as case 1, but is seismically isolated; (3) the GDNF is located at a site of high seismic hazard and is constructed on a conventional foundation; and (4) the GDNF is located at the same site of high seismic hazard as case 3, but is seismically isolated. In this study, the DOE site at Idaho National Laboratory (INL) is chosen as the low to moderate seismic hazard site for cases 1 and 2, and the Los Alamos National Laboratory (LANL) is chosen as the high seismic hazard site for cases 3 and 4.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2011

INCORPORATING DYNAMIC 3D SIMULATION INTO PRA

Through continued advancement in computational resources, development that was previously done by trial and error production is now performed through computer simulation. These virtual physical representations have the potential to provide accurate and valid modeling results and are being used in many different technical fields. Risk assessment now has the opportunity to use 3D simulation to improve analysis results and insights, especially for external event analysis. By using simulations, the modeler only has to determine the likelihood of an event without having to also predict the results of that event. The 3D simulation automatically determines not only the outcome of the event, but when those failures occur. How can we effectively incorporate 3D simulation into traditional PRA? Most PRA plant modeling is made up of components with different failure modes, probabilities, and rates. Typically, these components are grouped into various systems and then are modeled together (in different combinations) as a “system” with logic structures to form fault trees. Applicable fault trees are combined through scenarios, typically represented by event tree models. Though this method gives us failure results for a given model, it has limitations when it comes to time-based dependencies or dependencies that are coupled to physical processes which may themselves be space- or time-dependent. Since, failures from a 3D simulation are naturally time related, they should be used in that manner. In our simulation approach, traditional static models are converted into an equivalent state diagram representation with start states, probabilistic driven movements between states and terminal states. As the state model is run repeatedly, it converges to the same results as the PRA model in cases where time-related factors are not important. In cases where timing considerations are important (e.g., when events are dependent upon each other), then the simulation approach will typically provide superior results and insights. We also couple the state model with the dynamic 3D simulation analysis representing events (such as flooding) to determine which (if any) components fail. Not only does the simulation take into account any failed items from the state model, but any failures caused by the simulation are incorporated back into the state model and factored into the overall results. Using this method we incorporate accurate 3D simulation results, eliminate static-based PRA issues, and have time ordered failure information.

3D Simulation↗