SUBSYSTEM REQUIREMENTS

Initially, a system s hierarchy is identified for subsystems, sub-subsystems and so on to the components for which data must be found. The top event specifies system failure subsystems required for operation of the system in the mode specified are input to the top event s OR gate. Redundancy is represented by the redundant systems inputting an AND gate. This process of grouping subsystems under OR gates, if they can individually fail a function, or under AND gates if concurrent failures are necessary, is continued to the component or support system level until the tree is completed. This process grades the hierarchy from top to bottom, down the fault tree. 

Fig. 5. Three principal subsystems required to convert hydrocarbon fuel to electric power...

Ultimately, only the whole universe can be described by a pure state, whereas all subsystems require a description in terms of density operators. 

During preliminary design, EnerSol evaluated a variety of technologies for each of the subsystems required for the 25 TPD pilot unit. Design criteria for the subsystems in Figure 2 are briefly described below. 

The study of a reaction in solution involving small molecules (i.e., molecules having a size compatible with a full quantum chemical computation) can be performed by means of a QM/MM approach. The subsystem requiring a quantum mechanical treatment consists of the molecules that take part in the reaction, and all the spectator solvent molecules of the sample are represented by the classical force field. Therefore, the energy of the system can be written as follows ... 

The requirements for hardware fault tolerance can apply to individual components or subsystems required to perform a SIF. For example, in the case of a sensor subsystem comprising a number of redundant sensors, the fault tolerance requirement applies to the sensor subsystem in total, not to individual sensors. 

The nuclear instrumentation must be operable prior to reactor startup. The automatic rod control during startup will not operate if more than one of the three ex-vessel wide-range channels is out of service. The Safety Protection Subsystem requires at least three of its four nuclear input channels operating. The power range neutron flux control will not operate automatically with more than two of the six input channels out of service. 

During the 1990s the concept of Safety Integrity Levels (SIL) was developed [1]. It serves to assess safety-related systems and concerns aU components and subsystems required to realize safety functions from the sensor to the final element. Apart from that it applies to application software, which was developed for systems with limited variability language (no branching) or programmable logic controllers (PLC). 

The notion of a temporal firewall is built on the assumption that the external environment of a system or subsystem cannot induce a failure in the temporal domain. With a state-only interface this is straightforward, although coordinated executions between subsystems requires a global time base. Event ports, however, introduce the possibility that assumptions about the frequency of events may be violated at run-time. If static analysis is not adequate, then the source and/or the destination of events must be monitored and controlled. 

High-Level S/W Requirements are SAV requirements developed and defined from analysis of system requirements, safety-related requirements and system architecture they are predominantly specified at an abstraction that is usually independent of the SAV architecture and target computer. High-Level SAV Requirements are the first level of requirements specified when capturing system or subsystem requirements allocated to SAV. 

The enterprise shall prepare a preliminary subsystem specification for each subsystem identified in the system design architecture. Preliminary subsystem specifications should identify subsystem requirements (fimctional and performance requirements, design characteristics, and design constraints) and the qualification requirements for each requirement in the specification. The qualification section of the specifications should identify the methods used to confirm that each subsystem requirement has been satisfied imder normal and abnormal conditions. 

In many enzymes, a substantial part of the protein itself plays a significant role in the chemical reaction. Along with the substrate, any required cofactors, and sometimes active-site water molecules, certain amino acid residues must be described quantum mechanically. Inclusion of residues in the QM subsystem requires one or more covalent bonds across the QM/MM boundary. The bond between the Ca and Cp atoms of an amino acid is a popular choice for the QM/MM interface, as it is a reasonably well- behaved, nonpolar bond, and it is often sufficiently far away from the reactive center. 

USA, NRC 10 C.F. Part 60 Waste package containment for 300-1000 a release via engineered barriers < 10-5/a of the max. inventory groundwater travel time <1000 a NRC subsystem requirements shall comply with the EPA standard. 

General physical principles of constructing hybrid QM/MM approaches state that the subsequent derivation of junction between quantum and classical subsystems requires a QM wave function underlying the MM description of PESs. This QM method is necessary, for example, to perform averaging of the effective Hamiltonian in Eq. (7). At the same time more important that this method should produce in a consistent manner one-electron states necessary for explicit formation of boundary and its response on the changes in molecular geometry of fragments and/or electronic structure of the i -subsystem. 

For the transfer tests and liquid acquisition systems, COLD-SAT parameters from all four studies are compiled in Table A.2. Wherever parameters were not readily available, assumptions were made to derive those parameters. For example, MEOPs were determined from the anticipated maximum ranges of tank pressures during pressurization/ outflow tests. Flow rates were determined from LAD or no vent fill (NVF) subsystem requirements. Re numbers in the transfer line were determined based on total flow delivery from the LAD subsystem and the internal diameter of the pipe. Line velocities were determined using conservation of mass. 

Such complex design of smart composite structures connected with the testing necessity of every subsystem requires selection and application of adapted experimental techniques. A short overview of the common techniques enabling characterization of smart fiber-reinforced composites is presented in the following sections. Stimulated by different levels of measurement, the described techniques have been differentiated into quahtative and quantitative ones. 

Stability of a subsystem of a single variable X requires that da < 0, and stability of any two variable subsystem requires that Sij- < 0 and that Aij > 0. The stability ofthe entire three variable system (9) requires that 5 < 0, A < 0, and 5S - A < 0 (Hurwitz criterion [9]). We will assume that these latter three conditions are fulfilled. 

It is quite possible for the composite system to be in a state of equilibriiun when some or none of the thermodynamic parameters and external forces satisfy Eqs. (191) and (192). Equilibrium states of this type are realized when the imposed restraints prevent the occurrence of some or all of the transfer processes described by the differentials d 0f ) anddaj° (If a given transfer process is forbidden, the differential representing that transfer process must be set equal to zero.) In view of the possibility of such restrictions, we conclnde that equilibrium between the two subsystems requires identical thermodynamic parameters and identical external forces when the transfer processes associated with these quantities are allowed by the restraints placed on the composite system. This is a general thermodynamic criterion for equihbrium between the two systems. 

---