Tragedy on grade crossing: driver failure or systemic fragility?

In 2010, an accident occurred in Americana-SP, Brazil, involving two trains and one bus on a Grade Crossing, when 10 people died and 17 were injured including workers. This paper aims to analyze the accident using the Model of Analysis and Prevention of Work Accidents (MAPA). The method provides observation of work, interviews and analysis of documents to understand precedents of the event in the following stages: to understand the usual work from the involved people, the changes occurred in the system, the operation of barriers, managerial and organizational aspects. By the end, measures are suggested to avoid new occurrences. The accident took place at night in a site with insufficient lighting. The working conditions of bus drivers, train operators and watchmen are inadequate. There were only symbolic barriers (visual and acoustic signals) triggered manually by watchman upon train operator radio communication. The fragility of the barrier system associated to poor lighting and short time to trigger the signaling seem to play a critical role in the event. Contrary to the official report which resulted in guilt of the bus driver, the conclusion of the paper emphasizes the fragility of the safety system and the need of level crossing reproject.

Aircraft accident in Brazil: Boeing vs. Legacy?

Air accidents represent a small proportion of the flights registered worldwide. Airplane collisions in the air are rare. In September of 2006, a Boeing 737-800 collided in midair with a Legacy Jet. It was the largest accident registered in the history of Brazilian aviation until that time. The present study explores aspects of press coverage of the accident. Data and information reported in the media about the accident from September 2006 to August 2007 were collected and discussed. Media coverage called attention to two unusual aspects: politicisation of the discussion, culminating in the opening of congressional inquiries, and equally the concomitance of police investigations interfering in the work of agencies responsible for the official accident investigation. Emphasis on assigning guilt and establishing penalties may close the windows of opportunity an accident had opened for discussions on the improvement of air safety. In Brazil, political imperatives and organizational pressures have interfered and the possibilities of organizational learning from the accident have been drastically curtailed.

Tragedy on grade crossing: driver failure or systemic fragility?

In 2010, an accident occurred in Americana-SP, Brazil, involving two trains and one bus on a Grade Crossing, when 10 people died and 17 were injured including workers. This paper aims to analyze the accident using the Model of Analysis and Prevention of Work Accidents (MAPA). The method provides observation of work, interviews and analysis of documents to understand precedents of the event in the following stages: to understand the usual work from the involved people, the changes occurred in the system, the operation of barriers, managerial and organizational aspects. By the end, measures are suggested to avoid new occurrences. The accident took place at night in a site with insufficient lighting. The working conditions of bus drivers, train operators and watchmen are inadequate. There were only symbolic barriers (visual and acoustic signals) triggered manually by watchman upon train operator radio communication. The fragility of the barrier system associated to poor lighting and short time to trigger the signaling seem to play a critical role in the event. Contrary to the official report which resulted in guilt of the bus driver, the conclusion of the paper emphasizes the fragility of the safety system and the need of level crossing reproject.

Validation of the CFD code NEPTUNE for a full scale simulator for decay heat removal systems with in-pool heat exchangers

In the present work, a multi physics simulation of an innovative safety system for light water nuclear reactor is performed, with the aim to increase the reliability of its main decay heat removal system. The system studied, denoted by the acronym PERSEO (in Pool Energy Removal System for Emergency Operation) is able to remove the decay power from the primary side of the light water nuclear reactor through a heat suppression pool. The experimental facility, located at SIET laboratories (PIACENZA), is an evolution of the Thermal Valve concept where the triggering valve is installed liquid side, on a line connecting two pools at the bottom. During the normal operation, the valve is closed, while in emergency conditions it opens, the heat exchanger is flooded with consequent heat transfer from the primary side to the pool side. In order to verify the correct system behavior during long term accidental transient, two main experimental PERSEO tests are analyzed. For this purpose, a coupling between the mono dimensional system code CATHARE, which reproduces the system scale behavior, with a three-dimensional CFD code NEPTUNE CFD, allowing a full investigation of the pools and the injector, is implemented. The coupling between the two codes is realized through the boundary conditions. In a first analysis, the facility is simulated by the system code CATHARE V2.5 to validate the results with the experimental data. The comparison of the numerical results obtained shows a different void distribution during the boiling conditions inside the heat suppression pool for the two cases of single nodalization and three volume nodalization scheme of the pool. Finaly, to improve the investigation capability of the void distribution inside the pool and the temperature stratification phenomena below the injector, a two and three dimensional CFD models with a simplified geometry of the system are adopted.

Management Challenges in Nurturing a Safe Work Environment

As engineers, we are trained to use logical, rational problem solving to insure our mines operate at maximum efficiency. We tend to use the same technical approach to design safety into all mining systems. This works well for machines, but not so much for the human component. Recent insights in the field of behavioral economics provide useful ideas for addressing the fact that we are driven by emotions more often than by rational thought. Understanding the nonrational aspect of human behavior is an important piece of any safety system design.

Sistema de control de tracción y salida para un monoplaza de la Fórmula SAE

En este proyecto de final de carrera se detalla el proceso de diseño, fabricación, montaje y ajuste de un dispositivo electrónico que sirva como sistema de control de tracción de un vehículo y que acoplaremos sobre un monoplaza de carreras que participa en la competición Formula SAE. La Formula SAE (Society of Automotive Engineers - Sociedad de Ingenieros de Automoción), es una competición de coches de carreras monoplaza a nivel universitario que promueve el desarrollo de la ingeniera aplicada a la automoción. Se pretende que este libro sirva de guía para el correcto manejo y desempeño del sistema fabricado. Además se ha pretendido que su lectura resulte fácil y comprensible para que la persona que lea este libro sea capaz de entender el sistema realizado para así poderlo mejorar. Gracias a la colaboración entre la Escuela Técnica Superior de Ingeniería y Sistemas de Telecomunicación (ETSIST) de la Universidad Politécnica de Madrid (UPM), la Escuela de Ingenieros Industriales de esta misma Universidad (ETSII) y el Instituto Universitario de Investigación del Automóvil (INSIA), se sientan las bases de una plataforma docente en la cual se posibilita la formación y desarrollo de un vehículo tipo formula que participa en la ya mencionada competición Formula SAE. Para ello, se formo en el 2003 el equipo UPMRacing, primer representante español en el evento. El equipo se compone de más de 50 alumnos de la UPM y del Máster de Ingeniería en Automoción del INSIA. Es por tanto, en el vehículo fabricado por el equipo UPMRacing, en el que se pretende instalar este sistema de control de tracción. El control de tracción es un sistema de seguridad del automóvil diseñado para prevenir la perdida de adherencia cuando alguna rueda presenta deslizamiento, bien porque el conductor se excede en la aceleración o bien porque el firme este resbaladizo. La unidad de procesamiento del sistema de control de tracción fabricado lee la velocidad de cada rueda del vehículo mediante unos sensores y determina si existe deslizamiento, en tal caso, manda una señal a la centralita para disminuir la potencia hasta que el deslizamiento disminuya a unos valores controlados. El sistema cuenta con un control remoto que sirve como interfaz para que el piloto pueda manejarlo. Por ultimo, el dispositivo es capaz de conectarse a un bus de comunicaciones CAN para configurar ciertos parámetros. El objetivo del sistema es, básicamente, hacer que el coche no derrape en aceleraciones fuertes; concretamente en las salidas desde parado y al tomar una curva, aumentando así la velocidad en circuito y la seguridad del piloto. ABSTRACT. The purpose of this project is to describe the design, manufacture, assembly and adjustment processes of an electronic device acting as the traction control system (TCS) of a vehicle, that we will attach to a single-seater competition formula SAE car. The Formula SAE (Society of Automotive Engineers) is a graduate-level singleseater racing car competition promoting the development of automotive applied engineering. We also intend this work to serve as a technical user guide of the manufactured system. It is drafted clearly and concisely so that it will be easy for all those to whom it is addressed to understand and subject to further improvements. The close partnership among the Escuela Técnica Superior de Ingeniería y Sistemas de Telecomunicación (ETSIST), Escuela de Ingenieros Industriales (ETSII) of Universidad Politécnica de Madrid (UPM), and the Instituto Universitario de Investigación del Automóvil (INSIA), lays the foundation of a teaching platform enabling the training and development of a single-seater racing car taking part in the already mentioned Formula SAE competition. In this respect, UPMRacing team was created back in 2003, first spanish representative in this event. The team consists of more than 50 students of the UPM and of INSIA Master in Automotive Engineering. It is precisely the vehicle manufactured by UPMRacing team where we intend to install our TCS. TCS is an automotive safety system designed to prevent loss of traction when one wheel has slip, either because the driver exceeds the acceleration or because the firm is slippery. The device’s central processing unit is able to detect the speed of each wheel of the vehicle via special sensors and to determine wheel slip. If this is the case, the system sends a signal to the ECU of the vehicle to reduce the power until the slip is also diminished to controlled values. The device has a remote control that serves as an interface for the pilot to handle it. Lastly, the device is able to connect to a communication bus system CAN to set up certain parameters. The system objective is to prevent skidding under strong acceleration conditions: standing-start from the starting grid or driving into a curve, increasing the speed in circuit and pilot’s safety.

Rough-terrain groundspeed measurement:a radar-based commercial solution

Off-highway motive plant equipment is costly in capital outlay and maintenance. To reduce these overheads and increase site safety and workrate, a technique of assessing and limiting the velocity of such equipment is required. Due to the extreme environmental conditions met on such sites, conventional velocity measurement techniques are inappropriate. Ogden Electronics Limited were formed specifically to manufacture a motive plant safety system incorporating a speed sensor and sanction unit; to date, the only such commercial unit available. However, problems plague the reliability, accuracy and mass production of this unit. This project assesses the company's exisiting product, and in conjunction with an appreciation of the company history and structure, concludes that this unit is unsuited to its intended application. Means of improving the measurement accuracy and longevity of this unit, commensurate with the company's limited resources and experience, are proposed, both for immediate retrofit and for longer term use. This information is presented in the form of a number of internal reports for the company. The off-highway environment is examined; and in conjunction with an evaluation of means of obtaining a returned signal, comparisons of processing techniques, and on-site gathering of previously unavailable data, preliminary designs for an alternative product are drafted. Theoretical aspects are covered by a literature review of ground-pointing radar, vehicular radar, and velocity measuring systems. This review establishes and collates the body of knowledge in areas previously considered unrelated. Based upon this work, a new design is proposed which is suitable for incorporation into the existing company product range. Following production engineering of the design, five units were constructed, tested and evaluated on-site. After extended field trials, this design has shown itself to possess greater accuracy, reliability and versatility than the existing sensor, at a lower unit cost.

Intellect Sensing of Neural Network that Trained to Classify Complex Signals

An experimental comparison of information features used by neural network is performed. The sensing method was used. Suboptimal classifier agreeable to the gaussian model of the training data was used as a probe. Neural nets with architectures of perceptron and feedforward net with one hidden layer were used. The experiments were carried out with spatial ultrasonic data, which are used for car’s passenger safety system neural controller learning. In this paper we show that a neural network doesn’t fully make use of gaussian components, which are first two moment coefficients of probability distribution. On the contrary, the network can find more complicated regularities inside data vectors and thus shows better results than suboptimal classifier. The parallel connection of suboptimal classifier improves work of modular neural network whereas its connection to the network input improves the specialization effect during training.

Retail Food Establishments: Guide to HACCP Plans

A Hazard Analysis and Critical Control Point (HACCP) system is a plan to reduce the risk of safety hazards in food. The HACCP System identifies potential biological, chemical and physical hazards from the time the food enters the facility to when it is served. The Hazard Analysis identifies critical control points based on the ingredients, raw materials and processes. Control measures are then identified, implemented and monitored to ensure the ongoing safety of the finished products.

Modelling and Uncertainty Quantification application to SA simulation codes in advanced SMR

In the framework of a global transition to a low-carbon energy mix, the interest in advanced nuclear Small Modular Reactors (SMRs) has been growing at the international level. Due to the high level of maturity reached by Severe Accident Codes for currently operating rectors, their applicability to advanced SMRs is starting to be studied. Within the present work of thesis and in the framework of a collaboration between ENEA, UNIBO and IRSN, an ASTEC code model of a generic IRIS reactor has been developed. The simulation of a DBA sequence involving the operation of all the passive safety systems of the generic IRIS has been carried out to investigate the code model capability in the prediction of the thermal-hydraulics characterizing an integral SMR adopting a passive mitigation strategy. The following simulation of 4 BDBAs sequences explores the applicability of Severe Accident Codes to advance SMRs in beyond-design and core-degradation conditions. The uncertainty affecting a code simulation can be estimated by using the method of Input Uncertainty Propagation, whose application has been realized through the RAVEN-ASTEC coupling and implementation on an HPC platform. This probabilistic methodology has been employed in a study of the uncertainty affecting the passive safety system operation in the DBA simulation of ASTEC, providing a further characterization of the thermal-hydraulics of this sequence. The application of the Uncertainty Quantification method to early core-melt phenomena has been investigated in the framework of a BEPU analysis of the ASTEC simulation of the QUENCH test-6 experiment. A possible solution to the encountered challenges has been proposed through the application of a Limit Surface search algorithm.

Motion Control of an Advanced Electric Implement for Agricultural Autonomous Vehicles

Nowadays, the development of intelligent and autonomous vehicles used to perform agricultural activities is essential to improve quantity and quality of agricultural productions. Moreover, with automation techniques it is possible to reduce the usage of agrochemicals and minimize the pollution. The University of Bologna is developing an innovative system for orchard management called ORTO (Orchard Rapid Transportation System). This system involves an autonomous electric vehicle capable to perform agricultural activities inside an orchard structure. The vehicle is equipped with an implement capable to perform different tasks. The purpose of this thesis project is to control the vehicle and the implement to perform an inter-row grass mowing. This kind of task requires a synchronized motion between the traction motors and the implement motors. A motion control system has been developed to generate trajectories and manage their synchronization. Two main trajectories type have been used: a five order polynomial trajectory and a trapezoidal trajectory. These two kinds of trajectories have been chosen in order to perform a uniform grass mowing, paying a particular attention to the constrains of the system. To synchronize the motions, the electronic cams approach has been adopted. A master profile has been generated and all the trajectories have been linked to the master motion. Moreover, a safety system has been developed. The aim of this system is firstly to improve the safety during the motion, furthermore it allows to manage obstacle detection and avoidance. Using some particular techniques obstacles can be detected and recovery action can be performed to overcome the problem. Once the measured force reaches the predefined force threshold, then the vehicle stops immediately its motion. The whole project has been developed by employing Matlab and Simulink. Eventually, the software has been translated into C code and executed on the TI Lauchpad XL board.

Progetto per il monitoraggio e l'assistenza alla guida in contesti automotive

Nel panorama dell’automotive negli ultimi decenni si sono moltiplicate le normative nazionali, europee e mondiali per ridurre l'impatto socio-economico derivato dall’alto numero di sinistri stradali. Dall’analisi dei dati è emerso che una delle cause più impattanti dei sinistri è la distrazione: sono stati estrapolati i fattori che la inducono e raggruppati nelle macro-categorie di disattenzione, inattenzione, sonnolenza e stati mentali alterati. TESSA (Tecnology EEG Safety System Automotive) propone un approccio di assistenza alla guida che sfrutta le onde cerebrali del conducente, costantemente monitorate da un auricolare EEG, rileva fattori problematici e interviene con un’assistenza vocale considerando reazioni e necessità dell’utente, gravità della problematica e tempo di reazione necessario. Interagendo con il conducente TESSA sfrutta le tecnologie disponibili per comunicare il pericolo e condurre l’utente verso un’adeguata ripresa della guida. Il progetto è stato sviluppato considerando un target con un alto impatto sulla quantità dei sinistri stradali e che ricoprisse un notevole ruolo sociale: la fascia d’età più idonea su cui intervenire è 18-25 anni, un target ancora inesperto alla guida e adatto a recepire e promuovere lo scenario dell’automotive in veloce trasformazione verso un futuro sempre più orientato alla prevenzione e alla connettività. Seppur lo studio del concept sia rivolto principalmente a una popolazione giovanile TESSA è in grado di adattarsi a qualsiasi fascia d’età perché progettata per soddisfare le necessità del singolo conducente e della singola problematica, e può guidarlo nella ripresa del controllo della guida intervenendo al variare delle onde cerebrali. L’approccio di intervento mediato con l’assistenza vocale permette all’utente di mantenere il controllo del veicolo: TESSA non sostituisce il conducente ma mira a renderlo consapevole del rischio di pericolo e pronto a intervenire in prima persona in modo cosciente e adeguato.

A safety assessment methodology applied to CNS/ATM-based air traffic control system

In the last decades, the air traffic system has been changing to adapt itself to new social demands, mainly the safe growth of worldwide traffic capacity. Those changes are ruled by the Communication, Navigation, Surveillance/Air Traffic Management (CNS/ATM) paradigm, based on digital communication technologies (mainly satellites) as a way of improving communication, surveillance, navigation and air traffic management services. However, CNS/ATM poses new challenges and needs, mainly related to the safety assessment process. In face of these new challenges, and considering the main characteristics of the CNS/ATM, a methodology is proposed at this work by combining ""absolute"" and ""relative"" safety assessment methods adopted by the International Civil Aviation Organization (ICAO) in ICAO Doc.9689 [14], using Fluid Stochastic Petri Nets (FSPN) as the modeling formalism, and compares the safety metrics estimated from the simulation of both the proposed (in analysis) and the legacy system models. To demonstrate its usefulness, the proposed methodology was applied to the ""Automatic Dependent Surveillance-Broadcasting"" (ADS-B) based air traffic control system. As conclusions, the proposed methodology assured to assess CNS/ATM system safety properties, in which FSPN formalism provides important modeling capabilities, and discrete event simulation allowing the estimation of the desired safety metric. (C) 2011 Elsevier Ltd. All rights reserved.

A risk-based system to penalize and reward line management for occupational safety and health performance

Penalizing line management for the occurrence of lost time injuries has in some cases had unintended negative consequences. These are discussed. An alternative system is suggested that penalizes line management for accidents where the combination of the probability of recurrence and the maximum reasonable consequences such a recurrence may have exceeds an agreed limit. A reward is given for prompt effective control of the risk to below the agreed risk limit. The reward is smaller than the penalty. High-risk accidents require independent investigation by a safety officer using analytical techniques. Two case examples are given to illustrate the system. Continuous safety improvement is driven by a planned reduction in the agreed risk limit over time and reward for proactive risk assessment and control.