System Software Safety Assessment Process for Certification of Commercial and Military Aircraft

2005 ◽  
Author(s):  
Rohit P. Sheth
Author(s):  
Eugene Babeshko ◽  
Vyacheslav Kharchenko ◽  
Kostiantyn Leontiiev ◽  
Oleg Odarushchenko ◽  
Oleksiy Strjuk

Safety assessment of nuclear power plant instrumentation and control systems (NPP I&Cs) is a complicated and resource consuming process that is required be done so as to ensure the required safety level and comply to normative regulations. A lot of work have been performed in the field of application of different assessment methods and techniques, modifying them and using their combinations so as to provide unified approach in comprehensive safety assessment. Anyway, performed research have shown there are still challenges to overcome, including rationale and choice of the safety assessment method, verification of assessment results, choosing and applying techniques that support safety assessment process, especially in the nuclear field. In our work we present developed framework that aggregates the most appropriate safety assessment methods typically used for NPP I&Cs. Key features that this framework provides are the formal descriptions of all required input information for every safety assessment method, possible data flows between methods, possible output information for every method. Such representation allows to obtain possible paths required to get necessary indicators, analyze the possibility to verify them by application of different methods that provide same indicators etc. During safety assessment of NPP I&Cs it is very important to address software due to its crucial role in I&C safety assurance. Relevant standards like IEC 60880 [1] and IEC 62138 [2] provide requirements for software related activities and supporting processes in the software safety lifecycle of computer-based I&C systems of nuclear power plants performing functions of safety category A, B and C, as defined by IEC 61226 [3]. Requirements and frameworks provided by IEC 60880 and IEC 62138 for the nuclear application sector correspond to IEC 61508, part 3 [4]. These standards define several types of safety related software and specify particular requirements for each software type. So as to verify software and confirm correspondence to required safety level, different techniques are suggested in normative documents. We share our experience obtained during software failure modes and effect analysis (software FMEA) and software fault insertion (software FIT) processes into FPGA-based platform, NPP I&C systems based on that platform, and RPCT, integrated development environment used by RPC Radiy and end users to design user application logic, specify hardware configuration etc. We apply software FIT to outputs of RPCT, considering source code, configuration files and firmware files. Finally, we provide a case study of application the developed safety assessment framework and software FMEA/FIT practices during practical assessment of FPGA-based NPP I&C system.


2000 ◽  
Author(s):  
Jeffery M. Voas ◽  
Gary McGraw ◽  
Anup Ghosh ◽  
Frank Charron ◽  
Michael Schatz

Author(s):  
Ievgen Babeshko ◽  
Kostiantyn Leontiiev

Safety assessment of nuclear power plant instrumentation and control systems (NPP I&Cs) is a complicated and resource-consuming process that is required to be done so as to ensure the required safety level and comply to normative regulations. A lot of work has been performed in the field of application of different assessment methods and techniques, modifying them, and using their combinations so as to provide a unified approach in comprehensive safety assessment. Performed research has shown that there are still challenges to overcome, including rationale and choice of the safety assessment method, verification of assessment results, choosing and applying techniques that support safety assessment process, especially in the nuclear field. This chapter presents a developed framework that aggregates the most appropriate safety assessment methods typically used for NPP I&Cs.


2019 ◽  
Vol 34 (11) ◽  
pp. 58-67 ◽  
Author(s):  
Yunsheng Wang ◽  
Hang Lei ◽  
Richard Hackett ◽  
Martin Beeby

ILAR Journal ◽  
2002 ◽  
Vol 43 (Suppl_1) ◽  
pp. S5-S10 ◽  
Author(s):  
Leonard M. Schechtman

Author(s):  
Peter Vidmar ◽  
Stojan Petelin

The definition of the deterministic approach in safety analyses arises from the need to understand the conditions that emerge during a fire accident in a road tunnel. The key factor of the tunnel operations during the fire is the ventilation, which during the initial phases of the fire have a strong impact on the evacuation of people and later on the access of the intervention units in the tunnel. The paper presents the use of the CFD model in the tunnel safety assessment process. The set-up of the initial and boundary conditions and the requirement for grid density found from validation tests of an FDS (Fire Dynamics Simulator) is used to prepare three kinds of fire scenarios, 20MW, 50MW and 100MW, with different ventilation conditions; natural, semi transverse, transverse and longitudinal ventilation. The observed variables, soot density and temperature, are presented in minutes time steps through the entire tunnel length. Comparing the obtained data in a table allows the analyses of the ventilation conditions for different heat releases from fires. The second step is to add additional criteria of human behaviour inside the tunnel (evacuation) and human resistance to the elevated gas concentrations and temperature. What comes out is a fully deterministic risk matrix that is based on the calculated data where the risk is ranged on five levels, from the lowest to a very dangerous level. The deterministic risk matrix represents the alternative to a probabilistic safety assessment methodology, wherein the fire risk is represented in detail and the CFD (Computational Fluid Dynamics) model results are physically correct.


1988 ◽  
Vol 21 (18) ◽  
pp. 1-6 ◽  
Author(s):  
G. Dahll ◽  
U. Mainka ◽  
J. Märtz

Sign in / Sign up

Export Citation Format

Share Document