Publications

The Synchronic Web is a distributed network for securing data provenance on the World Wide Web. By enabling clients around the world to freely commit digital information into a single shared view of history, it provides a foundational basis of truth on which to build decentralized and scalable trust across the Internet. Its core cryptographical capability allows mutually distrusting parties to create and verify statements of the following form: “I commit to this information—and only this information—at this moment in time.” The backbone of the Synchronic Web infrastructure is a simple, small, and semantic-free blockchain that is accessible to any Internet-enabled entity. The infrastructure is maintained by a permissioned network of well-known servers, called notaries, and accessed by a permissionless group of clients, called journals. Through an evolving stack of flexible and composable semantic specifications, the parties cooperate to generate synchronic commitments over arbitrary data. When integrated with existing infrastructures, adapted to diverse domains, and scaled across the breadth of cyberspace, the Synchronic Web provides a ubiquitous mechanism to lock the world’s data into unique points in discrete time and digital space. This document provides a technical description of the core Synchronic Web system. The distinguishing innovation in our design—and the enabling mechanism behind the model—is the novel use of verifiable maps to place authenticated content into canonically defined locations off-chain. While concrete specifications and software implementations of the Synchronic Web continue to evolve, the information covered in the body of this document should remain stable. We aim to present this information clearly and concisely for technical non-experts to understand the essential functionality and value proposition of the network. In the interest of promoting discourse, we take some liberty in projecting the potential implications of the new model.

Robust in situ power harvesting underlies all efforts to enable downhole autonomous sensors for real-time and long-term monitoring of CO₂ plume movement and permeance, wellbore health, and induced seismicity. This project evaluated the potential use of downhole thermopile arrays, known as thermoelectric generators (TEGs), as power sources to charge sensors for in situ real-time, long-term data capture and transmission. Real-time downhole monitoring will enable “Big Data” techniques and machine learning, using massive amounts of continuous data from embedded sensors, to quantify short- and long-term stability and safety of enhanced oil recovery and/or commercial-scale geologic CO₂ storage. This project evaluated possible placement of the TEGs at two different wellbore locations: on the outside of the casing; or on the production tubing. TEGs convert heat flux to electrical power, and in the borehole environment, would convert heat flux into or out of the borehole into power for downhole sensors. Such heat flux would be driven by pumping of cold or hot fluids into the borehole—for instance, injecting supercritical CO₂—creating a thermal pulse that could power the downhole sensors. Hence, wireless power generation could be accomplished with in situ TEG energy harvesting. This final report summarizes the project’s efforts that accomplished the creation of a fully operational thermopile field unit, including selection of materials, laboratory benchtop experiments and thermal-hydrologic modeling for design and optimization of the field-scale power generation test unit. Finally, the report describes the field unit that has been built and presents results of performance and survivability testing. The performance and survivability testing evaluated the following: 1) downhole power generation in response to a thermal gradient produced by pumping a heated fluid down a borehole and through the field unit; and 2) component survivability and operation at elevated temperature and pressure conditions representative of field conditions. The performance and survivability testing show that TEG arrays are viable for generating ample energy to power downhole sensors, although it is important to note that developing or connecting to sensors was beyond the scope of this project. This project’s accomplishments thus traversed from a low Technical Readiness Level (TRL) on fundamental concepts of the application and modeling to TRL-5 via testing of the fully integrated field unit for power generation in relevant environments. A fully issued United States Patent covers the wellbore power harvesting technology and applications developed by this project.

Hydrocarbon polymers are used in a wide variety of practical applications. In the field of dynamic compression at extreme pressures, these polymers are used at several high energy density (HED) experimental facilities. One of the most common polymers is poly(methyl methacrylate) or PMMA, also called Plexiglass® or Lucite®. Here, we present high-fidelity, hundreds of GPa range experimental shock compression data measured on Sandia's Z machine. We extend the principal shock Hugoniot for PMMA to more than threefold compression up to 650 GPa and re-shock Hugoniot states up to 1020 GPa in an off-Hugoniot regime, where experimental data are even sparser. These data can be used to put additional constraints on tabular equation of state (EOS) models. The present results provide clear evidence for the need to re-examine the existing tabular EOS models for PMMA above ∼120 GPa as well as perhaps revisit EOSs of similar hydrocarbon polymers commonly used in HED experiments investigating dynamic compression, hydrodynamics, or inertial confinement fusion.

Perovskite solar cells (PSCs) promise high efficiencies and low manufacturing costs. Most formulations, however, contain lead, which raises health and environmental concerns. In this review, we use a risk assessment approach to identify and evaluate the technology risks to the environment and human health. We analyze the risks by following the technology from production to transportation to installation to disposal and examine existing environmental and safety regulations in each context. We review published data from leaching and air emissions testing and highlight gaps in current knowledge and a need for more standardization. Methods to avoid lead release through introduction of absorbing materials or use of alternative PSC formulations are reviewed. We conclude with the recommendation to develop recycling programs for PSCs and further standardized testing to understand risks related to leaching and fires.

Accurately modeling the impact force used in the analysis of loosely constrained cantilevered pipes conveying fluid is imperative. If little information is known of the motion-limiting constraints used in experiments, the analysis of the system may yield inaccurate predictions. Here in this work, multiple forcing representations of the impact force are defined and analyzed for a cantilevered pipe that conveys fluid. Depending on the representation of the impact force, the dynamics of the pipe can vary greatly when only the stiffness of the constraints is known from experiments. Three gap sizes of the constraints are analyzed, and the representation of the impact force used to analyze the system is found to significantly affect the response of the pipe at each gap size. An investigation on the effects of the vibro-impact force representation is performed through using basin of attraction analysis and nonlinear characterization of the system’s response.

Improving the performance of inertial confinement fusion implosions requires physics models that can accurately predict the response to changes in the experimental inputs. Good predictive capability has been demonstrated for the fusion yield using a statistical mapping of simulated outcomes to experimental data [Gopalaswamy et al., Nature 565(771), 581–586 (2019)]. In this paper, a physics-based statistical mapping approach is used to extract and quantify all the major sources of degradation of fusion yield for direct-drive implosions on the OMEGA laser. Here, the yield is found to be dependent on the age of the deuterium tritium fill, the ℓ = 1 asymmetry in the implosion core, the laser beam-to-target size ratio, and parameters related to the hydrodynamic stability. A controlled set of experiments were carried out where only the target fill age was varied while keeping all other parameters constant. The measurements were found to be in excellent agreement with the fill age dependency inferred using the mapping model. In addition, a new implosion design was created, guided by the statistical mapping model by optimizing the trade-offs between increased laser energy coupling at larger target size and the degradations caused by the laser beam-to-target size ratio and hydrodynamic instabilities. When experimentally performed, an increased fusion yield was demonstrated in targets with larger diameters.

As the path towards Urban Air Mobility (UAM) continues to take shape, there are outstanding technical challenges to achieving safe and effective air transportation operations under this new paradigm. To inform and guide technology development for UAM, NASA is investigating the current state-of-the-art in key technology areas including traffic management, detect-and-avoid, and autonomy. In support of this effort, a new perception testbed was developed at NASA Ames Research Center to collect data from an array of sensing systems representative of those that could be found on a future UAM vehicle. This testbed, featuring a Light-Detection-and-Ranging (LIDAR) instrument, a long-wave infrared sensor, and a visible spectrum camera was deployed for a multiday test campaign in the Fog Chamber at Sandia National Laboratories (SNL), in Albuquerque, New Mexico. During the test campaign, fog conditions were created for tests with targets including a human, a resolution chart, and a small unmanned aerial vehicle (sUAV). Here, this paper describes in detail, the developed perception testbed, the experimental setup in the fog chamber, the resulting data, and presents an initial result from analysis of the data with the evaluation of methods to increase contrast through filtering techniques.

Cesium vapor thermionic converters are an attractive method of converting high-temperature heat directly to electricity, but theoretical descriptions of the systems have been difficult due to the multi-step ionization of Cs through inelastic electron-neutral collisions. This work presents particle-in-cell simulations of these converters, using a direct simulation Monte Carlo collision model to track 52 excited states of Cs. These simulations show the dominant role of multi-step ionization, which also varies significantly based on both the applied voltage bias and pressure. The electron energy distribution functions are shown to be highly non-Maxwellian in the cases analyzed here. A comparison with previous approaches is presented, and large differences are found in ionization rates due especially to the fact that previous approaches have assumed Maxwellian electron distributions. Finally, an open question regarding the nature of the plasma sheaths in the obstructed regime is discussed. The one-dimensional simulations did not produce stable obstructed regime operation and thereby do not support the double-sheath hypothesis.

Magnetized turbulence is ubiquitous in many astrophysical and terrestrial plasmas but no universal theory exists. Even the detailed energy dynamics in magnetohydrodynamic (MHD) turbulence are still not well understood. We present a suite of subsonic, super-Alfvénic, high plasma beta MHD turbulence simulations that only vary in their dynamical range, i.e., in their separation between the large-scale forcing and dissipation scales, and their dissipation mechanism (implicit large eddy simulation, ILES, and direct numerical simulation (DNS)). Using an energy transfer analysis framework we calculate the effective numerical viscosities and resistivities, and demonstrate that all ILES calculations of MHD turbulence are resolved and correspond to an equivalent visco-resistive MHD turbulence calculation. Increasing the number of grid points used in an ILES corresponds to lowering the dissipation coefficients, i.e., larger (kinetic and magnetic) Reynolds numbers for a constant forcing scale. Independently, we use this same framework to demonstrate that—contrary to hydrodynamic turbulence—the cross-scale energy fluxes are not constant in MHD turbulence. This applies both to different mediators (such as cascade processes or magnetic tension) for a given dynamical range as well as to a dependence on the dynamical range itself, which determines the physical properties of the flow. We do not observe any indication of convergence even at the highest resolution (largest Reynolds numbers) simulation at 2048³ cells, calling into question whether an asymptotic regime in MHD turbulence exists, and, if so, what it looks like.

Ammonia (NH₃) is an energy-dense chemical and a vital component of fertilizer. In addition, it is a carbon-neutral liquid fuel and a potential candidate for thermochemical energy storage for high-temperature concentrating solar power (CSP). Currently, NH₃ synthesis occurs via the Haber-Bosch process, which requires high pressures (15-25 MPa) and medium to high temperatures (400-500 °C). N₂ and H₂ are essential feedstocks for this NH₃ production process. H₂ is generally derived from methane via steam reforming; N₂ is sourced from air, after oxygen removal via combustion of hydrocarbons. Both processes consume hydrocarbons, resulting in the release of CO₂. In addition, hydrocarbon fuels are burned to produce the heat and mechanical energy required to perform the NH₃ reaction, further increasing CO₂ emissions. Overall, the production of ammonia via the Haber-Bosch (H-B) process is responsible for up to 1.4% of the world’s carbon emissions. The development of a renewable pathway to NH₃ synthesis, which utilizes concentrated solar irradiation as a process heat instead of fossil fuels and operates under low or ambient pressure, will result in a decrease (or elimination) of greenhouse gas emissions as well as avoid the cost, complexity, and safety issues inherent in high-pressure processes. Most current efforts to “green” ammonia production involve either electrolysis or simply replacing the energy source for H-B with renewable electricity, but otherwise leaving the process intact. The effort proposed here would create a new paradigm for the synthesis of NH₃ utilizing solar-thermal heat, water, and air as feedstocks, providing a truly green method of production. The overall objective of the STAP (Solar Thermal Ammonia Production) project was to develop a solar thermochemical looping technology to produce and store nitrogen (N₂) from air for the subsequent production of ammonia (NH₃) via an advanced two-stage process. The goal is a cost-effective and energy efficient technology for the renewable N₂ production and synthesis of NH₃ from H₂ (produced from H₂O) and air using solar-thermal energy from concentrating sunlight, under pressures an order of magnitude lower than H-B NH₃ production. Our process involves two looping cycles, which do not require catalysts and can be recycled. Over the course of the STAP project, we (1) developed and deeply characterized oxide materials for N₂ separation; (2) developed a method for the synthesis of metal nitrides, producing a series of quaternary compounds that have been heretofore unreported; (3) modeled, designed, and fabricated bench-scale tube and on-sun reactors for the N₂ production step and demonstrated the ability to separate N₂ over multiple cycles in the tube reactor; (4) designed and fabricated a bench-scale Ammonia Synthesis Reactor (ASR) and demonstrated the proof of concept of NH₃ synthesis via a novel looping process using metal nitrides over multiple cycles; and (5) completed a systems- and technoeconomic analysis showing the feasibility of ammonia production on a larger scale via the STAP process. The development of renewable, low-cost NH₃ will be of great interest to the chemicals industry, particularly agricultural sectors. The CSP industry should be both an important customer and potential end-user of this technology, as it affords the capability of synthesizing a promising thermochemical storage material on-site. Since the NH₃ synthesis step also requires H₂, there will exist a symbiotic relationship between this technology and solar-thermochemical water-splitting applications. Green ammonia synthesis will result in the decarbonization of a hydrocarbon-intensive industry, helping to meet the Administration goal of industrial decarbonization by 2050. The resulting decrease in CO₂ and related pollutants will improve health and well-being of society, particularly for those living in the vicinity of commercial production plants.

Fracture and short circuit in the Li₇La₃Zr₂O₁₂ (LLZO) solid electrolyte are two key issues that prevent its adoption in battery cells. In this paper, we utilize phase-field simulations that couple electrochemistry and fracture to evaluate the maximum electric potential that LLZO electrolytes can support as a function of crack density. In the case of a single crack, we find that the applied potential at the onset of crack propagation exhibits inverse square root scaling with respect to crack length, analogous to classical fracture mechanics. Here, we further find that the short-circuit potential scales linearly with crack length. In the realistic case where the solid electrolyte contains multiple cracks, we reveal that failure fits the Weibull model. The failure distributions shift to favor failure at lower overpotentials as areal crack density increases. Furthermore, when flawless interfacial buffers are placed between the applied potential and the bulk of the electrolyte, failure is mitigated. When constant currents are applied, current focuses in near-surface flaws, leading to crack propagation and short circuit. We find that buffered samples sustain larger currents without reaching unstable overpotentials and without failing. Our findings suggest several mitigation strategies for improving the ability of LLZO to support larger currents and improve operability.

We demonstrate a monolithic all-epitaxial resonant-cavity architecture for long-wave infrared photodetectors with substrate-side illumination. An nBn detector with an ultra-thin (t ≈ 350 nm) absorber layer is integrated into a leaky resonant cavity, formed using semi-transparent highly doped (n + +) epitaxial layers, and aligned to the anti-node of the cavity's standing wave. The devices are characterized electrically and optically and demonstrate an external quantum efficiency of ∼25% at T = 180 K in an architecture compatible with focal plane array configurations.

The interplay between hydrogen and dislocations (e.g., core and elastic energies, and dislocation–dislocation interactions) has implications on hydrogen embrittlement but is poorly understood. Continuum models of hydrogen enhanced local plasticity have not considered the effect of hydrogen on dislocation core energies. Energy minimization atomistic simulations can only resolve dislocation core energies in hydrogen-free systems because hydrogen motion is omitted so hydrogen atmosphere formation can’t occur. Additionally, previous studies focused more on face-centered-cubic than body-centered-cubic metals. Discrete dislocation dynamics studies of hydrogen–dislocation interactions assume isotropic elasticity, but the validity of this assumption isn’t understood. Here, we perform time-averaged molecular dynamics simulations to study the effect of hydrogen on dislocation energies in body-centered-cubic iron for several dislocation character angles. We see atmosphere formation and highly converged dislocation energies. We find that hydrogen reduces dislocation core energies but can increase or decrease elastic energies of isolated dislocations and dislocation–dislocation interaction energies depending on character angle. We also find that isotropic elasticity can be well fitted to dislocation energies obtained from simulations if the isotropic elastic constants are not constrained to their anisotropic counterparts. These results are relevant to ongoing efforts in understanding hydrogen embrittlement and provide a foundation for future work in this field.

In this work, we investigate the potential of liquid hydrogen storage (LH₂) on-board Class-8 heavy duty trucks to resolve many of the range, weight, volume, refueling time and cost issues associated with 350 or 700-bar compressed H₂ storage in Type-3 or Type-4 composite tanks. We present and discuss conceptual storage system configurations capable of supplying H₂ to fuel cells at 5-bar with or without on-board LH₂ pumps. Structural aspects of storing LH₂ in double walled, vacuum insulated, and low-pressure Type-1 tanks are investigated. Structural materials and insulation methods are discussed for service at cryogenic temperatures and mitigation of heat leak to prevent LH₂ boiloff. Failure modes of the liner and shell are identified and analyzed using the regulatory codes and detailed finite element (FE) methods. The conceptual systems are subjected to a Failure modes and effects analysis (FMEA) and a safety, codes, and standards (SCS) review to rank failures and identify safety gaps. The results indicate that the conceptual systems can reach 19.6% usable gravimetric capacity, 40.9 g-H₂/L usable volumetric capacity and $174-183/kg-H₂ cost (2016 USD) when manufactured 100,000 systems annually.

Complex angle theory can offer new fundamental insights into refraction at the absorptive interface. In this work we propose a new method to induce isofrequency opening via addition of scattering in the dual interface system.

The V31 containment vessel was procured by the US Army Recovered Chemical Material Directorate (RCMD) as a third-generation EDS containment vessel. It is the fifth EDS vessel to be fabricated under Code Case 2564 of the 2019 ASME Boiler and Pressure Vessel Code, which provides rules for the design of impulsively loaded vessels. The explosive rating for the vessel, based on the code case, is 24 lb (11 kg) TNT-equivalent for up to 1092 detonations. This report documents the results of explosive tests that were performed on the vessel at Sandia National Laboratories in Albuquerque, New Mexico to qualify the vessel for field operations use. There were three design basis configurations for qualification testing. Qualification test (1) consisted of a simulated M55 rocket motor and warhead assembly of 24 lb (11 kg) of Composition C-4 (30 lb [14 kg] TNT equivalent). This test was considered the maximum load case, based on modeling and simulation methods performed by Sandia prior to the vessel design phase. Qualification test (2) consisted of a regular, right circular cylinder, unitary charge, located central to the vessel interior of 19.2 lb (8.72 kg) of Composition C-4 (24 lb [11 kg] TNT equivalent). Qualification test (3) consisted of a 12-pack of regular, right circular cylinders of 2 lb (908 g) each, distributed evenly inside the vessel (totaling 19.2 lb [8.72 kg] of C-4, or 24 lb [11 kg] TNT equivalent). All vessel acceptance criteria were met.

When exposed to mechanical environments such as shock and vibration, electrical connections may experience increased levels of contact resistance associated with the physical characteristics of the electrical interface. A phenomenon known as electrical chatter occurs when these vibrations are large enough to interrupt the electric signals. It is critical to understand the root causes behind these events because electrical chatter may result in unexpected performance or failure of the system. The root causes span a variety of fields, such as structural dynamics, contact mechanics, and tribology. Therefore, a wide range of analyses are required to fully explore the physical phenomenon. This paper intends to provide a better understanding of the relationship between structural dynamics and electrical chatter events. Specifically, electrical contact assembly composed of a cylindrical pin and bifurcated structure were studied using high fidelity simulations. Structural dynamic simulations will be performed with both linear and nonlinear reduced-order models (ROM) to replicate the relevant structural dynamics. Subsequent multi-physics simulations will be discussed to relate the contact mechanics associated with the dynamic interactions between the pin and receptacle to the chatter. Each simulation method was parametrized by data from a variety of dynamic experiments. Both structural dynamics and electrical continuity were observed in both the simulation and experimental approaches, so that the relationship between the two can be established.

We present the SEU sensitivity and SEL results from proton and heavy ion testing performed on NVIDIA Xavier NX and AMD Ryzen V1605B GPU devices in both static and dynamic operation.

Subhourly changes in solar irradiance can lead to energy models being biased high if realistic distributions of irradiance values are not reflected in the resource data and model. This is particularly true in solar facility designs with high inverter loading ratios (ILRs). When resource data with sufficient temporal and spatial resolution is not available for a site, synthetic variability can be added to the data that is available in an attempt to address this issue. In this work, we demonstrate the use of anonymized commercial resource datasets with synthetic variability and compare results with previous estimates of model bias due to inverter clipping and increasing ILR.

A quantum-cascade-laser-absorption-spectroscopy (QCLAS) diagnostic was used to characterize post-detonation fireballs of RP-80 detonators via measurements of temperature, pressure, and CO column pressure at a repetition rate of 1 MHz. Scanned-wavelength direct-absorption spectroscopy was used to measure CO absorbance spectra near 2008.5 cm−1 which are dominated by the P(0,31), P(2,20), and P(3,14) transitions. Line-of-sight (LOS) measurements were acquired 51 and 91 mm above the detonator surface. Three strategies were employed to facilitate interpretation of the LAS measurements in this highly nonuniform environment and to evaluate the accuracy of four post-detonation fireball models: (1) High-energy transitions were used to deliberately bias the measurements to the high-temperature outer shell, (2) a novel dual-zone absorption model was used to extract temperature, pressure, and CO measurements in two distinct regions of the fireball at times where pressure variations along the LOS were pronounced, and (3) the LAS measurements were compared with synthetic LAS measurements produced using the simulated distributions of temperature, pressure, and gas composition predicted by reactive CFD modeling. The results indicate that the QCLAS diagnostic provides high-fidelity data for evaluating post-detonation fireball models, and that assumptions regarding thermochemical equilibrium and carbon freeze-out during expansion of detonation gases have a large impact on the predicted chemical composition of the fireball.

Multiple Input Multiple Output (MIMO) vibration testing provides the capability to expose a system to a field environment in a laboratory setting, saving both time and money by mitigating the need to perform multiple and costly large-scale field tests. However, MIMO vibration test design is not straightforward oftentimes relying on engineering judgment and multiple test iterations to determine the proper selection of response Degree of Freedom (DOF) and input locations that yield a successful test. This work investigates two DOF selection techniques for MIMO vibration testing to assist with test design, an iterative algorithm introduced in previous work and an Optimal Experiment Design (OED) approach. The iterative-based approach downselects the control set by removing DOF that have the smallest impact on overall error given a target Cross Power Spectral Density matrix and laboratory Frequency Response Function (FRF) matrix. The Optimal Experiment Design (OED) approach is formulated with the laboratory FRF matrix as a convex optimization problem and solved with a gradient-based optimization algorithm that seeks a set of weighted measurement DOF that minimize a measure of model prediction uncertainty. The DOF selection approaches are used to design MIMO vibration tests using candidate finite element models and simulated target environments. The results are generalized and compared to exemplify the quality of the MIMO test using the selected DOF.

Machining-based deformation processing is used to produce metal foil and flat wire (strip) with suitable properties and quality for electrical power and renewable energy applications. In contrast to conventional multistage rolling, the strip is produced in a single-step and with much less process energy. Examples are presented from metal systems of varied workability, and strip product scale in terms of size and production rate. By utilizing the large-strain deformation intrinsic to cutting, bulk strip with ultrafine-grained microstructure, and crystallographic shear-texture favourable for formability, are achieved. Implications for production of commercial strip for electric motor applications and battery electrodes are discussed.

Due to their increased levels of reliability, meshed low-voltage (LV) grid and spot networks are common topologies for supplying power to dense urban areas and critical customers. Protection schemes for LV networks often use highly sensitive reverse current trip settings to detect faults in the medium-voltage system. As a result, interconnecting even low levels of distributed energy resources (DERs) can impact the reliability of the protection system and cause nuisance tripping. This work analyzes the possibility of modifying the reverse current relay trip settings to increase the DER hosting capacity of LV networks without impacting fault detection performance. The results suggest that adjusting relay settings can significantly increase DER hosting capacity on LV networks without adverse effects, and that existing guidance on connecting DERs to secondary networks, such as that contained in IEEE Std 1547-2018, could potentially be modified to allow higher DER deployment levels.

Phosphor thermometry has become an established remote sensing technique for acquiring the temperature of surfaces and gas-phase flows. Often, phosphors are excited by a light source (typically emitting in the UV region), and their temperature-sensitive emission is captured. Temperature can be inferred from shifts in the emission spectra or the radiative decay lifetime during relaxation. While recent work has shown that the emission of several phosphors remains thermographic during x-ray excitation, the radiative decay lifetime was not investigated. The focus of the present study is to characterize the lifetime decay of the phosphor Gd2O2S:Tb for temperature sensitivity after excitation from a pulsed x-ray source. These results are compared to the lifetime decays found for this phosphor when excited using a pulsed UV laser. Results show that the lifetime of this phosphor exhibits comparable sensitivity to temperature between both excitation sources for a temperature range between 21 °C to 140 °C in increments of 20 °C. This work introduces a novel method of thermometry for researchers to implement when employing x-rays for diagnostics.

Prescriptive approaches for the cybersecurity of digital nuclear instrumentation and control (I&C) systems can be cumbersome and costly. These considerations are of particular concern for advanced reactors that implement digital technologies for monitoring, diagnostics, and control. A risk-informed performance-based approach is needed to enable the efficient design of secure digital I&C systems for nuclear power plants. This paper presents a tiered cybersecurity analysis (TCA) methodology as a graded approach for cybersecurity design. The TCA is a sequence of analyses that align with the plant, system, and component stages of design. Earlier application of the TCA in the design process provides greater opportunity for an efficient graded approach and defense-in-depth. The TCA consists of three tiers. Tier 1 is design and impact analysis. In Tier 1 it is assumed that the adversary has control over all digital systems, components, and networks in the plant, and that the adversary is only constrained by the physical limitations of the plant design. The plant's safety design features are examined to determine whether the consequences of an attack by this cyber-enabled adversary are eliminated or mitigated. Accident sequences that are not eliminated or mitigated by security by design features are examined in Tier 2 analysis. In Tier 2, adversary access pathways are identified for the unmitigated accident sequences, and passive measures are implemented to deny system and network access to those pathways wherever feasible. Any systems with remaining susceptible access pathways are then examined in Tier 3. In Tier 3, active defensive cybersecurity architecture features and cybersecurity plan controls are applied to deny the adversary the ability to conduct the tasks needed to cause a severe consequence. Tier 3 is not performed in this analysis because of the design maturity required for this tier of analysis.