Variations of a passive safety containment for a BWR with active and passive safety systems

The paper presents variations of a certain passive safety containment for a near future BWR. It is tentatively named Mark S containment in the paper. It uses the operating dome as the upper secondary containment vessel (USCV) to where the pressure of the primary containment vessel (PCV) can be released through the upper vent pipes. One of the merits of the Mark S containment is very low peak pressure at severe accidents without venting the containment atmosphere to the environment. Another merit is the capability to submerge the PCV and the reactor pressure vessel (RPV) above the core level by flooding water from the gravity-driven cooling system (GDCS) pool and the upper pool. The third merit is robustness against external events such as a large commercial airplane crash owing to the reinforced concrete USCV. The Mark S containment is applicable to a large reactor that generates 1830 MW electric power. The paper presents several examples of BWRs that use the Mark S containment. In those examples active safety systems and passive safety systems function independently and constitute in-depth hybrid safety (IDHS). The concept of the IDHS is also presented in the paper.     

Condensation heat transfer with noncondensable gas for passive containment cooling of nuclear reactors

Noncondensable gases that come from the containment and the interaction of cladding and steam during a severe accident deteriorate a passive containment cooling system's performance by degrading the heat transfer capabilities of the condensers in passive containment cooling systems. This work contributes to the area of modeling condensation heat transfer with noncondensable gases in integral facilities. Previously existing correlations and models are for the through-flow of the mixture of steam and the noncondensable gases and this may not be applicable to passive containment cooling systems where there is no clear passage for the steam to escape. This work presents a condensation heat transfer model for the downward cocurrent flow of a steam/air mixture through a condenser tube, taking into account the atypical characteristics of the passive containment cooling system. An empirical model is developed that depends on the inlet conditions, including the mixture Reynolds number and noncondensable gas concentration.     

Integrated software safety analysis method for digital I&C systems

The digitalized Instrumentation and Control (I&C) system of Nuclear power plants can provide more powerful overall operation capability, and user friendly man-machine interface. The operator can obtain more information through digital I&C system. However, while I&C system being digitalized, three issues are encountered: (1) software common-cause failure, (2) the interaction failure between operator and digital instrumentation and control system interface, and (3) the non-detectability of software failure. These failures might defeat defense echelons, and make the Diversity and Defense-in-Depth (D3) analysis be more difficult. This work developed an integrated methodology to evaluate nuclear power plant safety effect by interactions between operator and digital I&C system, and then propose improvement recommendations. This integrated methodology includes component-level software fault tree, system-level sequence-tree method and nuclear power plant computer simulation analysis. Software fault tree can clarify the software failure structure in digital I&C systems. Sequence-tree method can identify the interaction process and relationship among operator and I&C systems in each D3 echelon in a design basis event. Nuclear power plant computer simulation analysis method can further analyze the available backup facilities and allowable manual action duration for the operator when the digital I&C fail to function. Applying this methodology to evaluate the performance of digital nuclear power plant D3 design, could promote the nuclear power plant operation safety. The operator can then trust the nuclear power plant than before, when operating the highly automatic digital I&C facilities.     

Best Estimated and Conservative Analyses for a Feedwater Pipe Break Accident of an Integral Type Reactor

An integral type reactor, which is an innovative design to achieve a high degree of safety, is currently being developed at the Korea Atomic Energy Research Institute. A feedwater pipe break accident is one of the most important accidents regarding the safety of an integral type reactor. A best estimated calculation, a conservative calculation, and a parameter study for a feedwater pipe break have been carried out. The sensitivity analysis in this paper performed is to establish the parameters which greatly affect the feedwater pipe break accident. A power level, an initial system pressure, a moderator reactivity coefficient and a break size are the major parameters which maximize a system pressure. The important function that must operate following a feedwater pipe break accident is an opening of the pilot operated safety relief valves, and an initiation of the passive residual heat removal system. The integral reactor safety systems function properly and thus secure the reactor to a safe condition with respect to the safety parameters.     

Review and proposal for best fit of wire-wrapped fuel bundle friction factor and pressure drop predictions using various existing correlations

The aim of this paper is to provide an overview of the existing wire-wrapped fuel bundle friction factor/pressure drop correlations and to qualitatively evaluate which of the existing friction factor correlations are the best in retracing the results of a large set of the experimental data available on wire-wrapped fuel assemblies tested under different coolant conditions.     

Analysis of different containment models for IRIS small break LOCA, using GOTHIC and RELAP5 codes

Advanced nuclear water reactors rely on containment behaviour in realization of some of their passive safety functions. Steam condensation on containment walls, where non-condensable gas effects are significant, is an important feature of the new passive containment concepts, like the AP600/1000 ones.In this work the international reactor innovative and secure (IRIS) was taken as reference, and the relevant condensation phenomena involved within its containment were investigated with different computational tools. In particular, IRIS containment response to a small break LOCA (SBLOCA) was calculated with GOTHIC and RELAP5 codes. A simplified model of IRIS containment drywell was implemented with RELAP5 according to a sliced approach, based on the two-pipe-with-junction concept, while it was addressed with GOTHIC using several modelling options, regarding both heat transfer correlations and volume and thermal structure nodalization. The influence on containment behaviour prediction was investigated in terms of drywell temperature and pressure response, heat transfer coefficient (HTC) and steam volume fraction distribution, and internal recirculating mass flow rate. The objective of the paper is to preliminarily compare the capability of the two codes in modelling of the same postulated accident, thus to check the results obtained with RELAP5, when applied in a situation not covered by its validation matrix (comprising SBLOCA and to some extent LBLOCA transients, but not explicitly the modelling of large dry containment volumes).The option to include or not droplets in fluid mass flow discharged to the containment was the most influencing parameter for GOTHIC simulations. Despite some drawbacks, due, e.g. to a marked overestimation of internal natural recirculation, RELAP5 confirmed its capability to satisfactorily model the basic processes in IRIS containment following SBLOCA.     

Design evaluation of emergency core cooling systems using Axiomatic Design

In designing nuclear power plants (NPPs), the evaluation of safety is one of the important issues. As a measure for evaluating safety, this paper proposes a methodology to examine the design process of emergency core cooling systems (ECCSs) in NPPs using Axiomatic Design (AD). This is particularly important for identifying vulnerabilities and creating solutions. Korean Advanced Power Reactor 1400 MWe (APR1400) adopted the ECCS, which was improved to meet the stronger safety regulations than that of the current Optimized Power Reactor 1000 MWe (OPR1000). To improve the performance and safety of the ECCS, the various design strategies such as independency or redundancy were implemented, and their effectiveness was confirmed by calculating core damage frequency. We suggest an alternative viewpoint of evaluating the deployment of design strategies in terms of AD methodology. AD suggests two design principles and the visualization tools for organizing design process. The important benefit of AD is that it is capable of providing suitable priorities for deploying design strategies. The reverse engineering driven by AD has been able to show that the design process of the ECCS of APR1400 was improved in comparison to that of OPR1000 from the viewpoint of the coordination of design strategies.     

Development and diversity and defense-in-depth application of ABWR feedwater pump and controller model

This work developed an advanced boiling water reactor (ABWR) feedwater pump and controller model, which was incorporated into Personal Computer Transient Analyzer (PCTran)-ABWR, a nuclear power plant simulation code. The feedwater pump model includes three turbine-driven feedwater pumps and one motor-driven feedwater pump. The feedwater controller includes a one-element/three-element water level controller and a specific feedwater speed controller for each feedwater pump. The performance tests, including step change of dome pressure, feedwater pumps transfer, inadvertent closure of all turbine control valves, and one feedwater pump trip at 100% power, demonstrate the feasibility of dynamic response of stand-alone model and incorporated model. Furthermore, a diversity and defense-in-depth analysis is performed to demonstrate the feasibility for motor-driven feedwater pump as an emergency core cooling system (ECCS) automatic diverse back-up. In Lungmen nuclear power plant (NPP), a diverse manual initiation means for the high pressure core flooder (HPCF) loop C is designed as the back-up of digitalized engineered safety features actuation system (ESFAS). If the motor-driven feedwater pump (MDFWP) can be an automatic digital diverse back-up for ESFAS, Lungmen NPP would be more robust to defend against software common-cause failure (CCF).     

Model extension and improvement for simulator-based software safety analysis

One of the major concerns when employing digital I&C system in nuclear power plant is digital system may introduce new failure mode, which differs with previous analog I&C system. Various techniques are under developing to analyze the hazard originated from software faults in digital systems. Preliminary hazard analysis, failure modes and effects analysis, and fault tree analysis are the most extensive used techniques. However, these techniques are static analysis methods, cannot perform dynamic analysis and the interactions among systems. This research utilizes “simulator/plant model testing” technique classified in (IEEE Std 7-4.3.2-2003, 2003. IEEE Standard for Digital Computers in Safety Systems of Nuclear Power Generating Stations) to identify hazards which might be induced by nuclear I&C software defects. The recirculation flow system, control rod system, feedwater system, steam line model, dynamic power-core flow map, and related control systems of PCTran–ABWR model were successfully extended and improved. The benchmark against ABWR SAR proves this modified model is capable to accomplish dynamic system level software safety analysis and better than the static methods. This improved plant simulation can then futher be applied to hazard analysis for operator/digital I&C interface interaction failure study, and the hardware-in-the-loop fault injection study.     

A feasibility assessment of the use of nanofluids to enhance the in-vessel retention capability in light-water reactors

Nanofluids, colloidal dispersions of nanoparticles, exhibit a substantially higher critical heat flux (CHF) compared to water. As such, they could be used to enhance the in-vessel retention (IVR) capability in the severe accident management strategy implemented by certain light-water reactors. It is envisioned that, at normal operating conditions, the nanofluid would be stored in dedicated storage tanks, which, upon actuation, would discharge into the reactor cavity through injection lines. The design of the injection system was explored with risk-informed analyses and computational fluid dynamics. It was determined that the system has a reasonably low failure probability, and that, once injected, the nanofluid would be delivered effectively to the reactor vessel surface within seconds. It was also shown analytically that the increase in decay power removal through the vessel using a nanofluid is about 40%, which could be exploited to provide a higher IVR safety margin or, for a given margin, to enable IVR at higher core power. Finally, the colloidal stability of a candidate alumina-based nanofluid in an IVR environment was experimentally investigated, and it was found that this nanofluid would be stable against dilution, exposure to gamma radiation, and mixing with boric acid and lithium hydroxide, but not tri-sodium phosphate.     

System-level hazard analysis using the sequence-tree method

A system-level PHA using the sequence-tree method is presented to perform safety-related digital I&C system SSA. The conventional PHA involves brainstorming among experts on various portions of the system to identify hazards through discussions. However, since the conventional PHA is not a systematic technique, the analysis results depend strongly on the experts’ subjective opinions. The quality of analysis cannot be appropriately controlled. Therefore, this study presents a system-level sequence tree based PHA, which can clarify the relationship among the major digital I&C systems. This sequence-tree-based technique has two major phases. The first phase adopts a table to analyze each event in SAR Chapter 15 for a specific safety-related I&C system, such as RPS. The second phase adopts a sequence tree to recognize the I&C systems involved in the event, the working of the safety-related systems and how the backup systems can be activated to mitigate the consequence if the primary safety systems fail. The defense-in-depth echelons, namely the Control echelon, Reactor trip echelon, ESFAS echelon and Monitoring and indicator echelon, are arranged to build the sequence-tree structure. All the related I&C systems, including the digital systems and the analog back-up systems, are allocated in their specific echelons. This system-centric sequence-tree analysis not only systematically identifies preliminary hazards, but also vulnerabilities in a nuclear power plant. Hence, an effective simplified D3 evaluation can also be conducted.     

Accident management following loss-of-coolant accidents during cooldown in a Westinghouse two-loop PWR

Operation of pressurised water reactors involves shutdown periods for refuelling and maintenance. In preparation for this, the reactor system is cooled down, depressurised and partially drained. Although reactor coolant pressure is lower than during full-power operation, there remains the possibility of a loss-of-coolant accident (LOCA), with a certain but low probability. While the decay heat to be removed is lower than that from a LOCA at full power, the reduced availability of safety systems implies a risk of failing to maintain core cooling, and hence of core damage. This is recognised though probabilistic safety analyses (PSA), which identify low but non-negligible contributions to core damage frequency from accidents during cooldown and shutdown. Analyses are made for a typical two-loop Westinghouse PWR of the consequences of a range of LOCAs during hot and intermediate shutdown, 4 and 5 h after reactor shutdown respectively. The accumulators are isolated, while power to some of the pumped safety injection systems (SIs) is racked out. The study assesses the effectiveness of the nominally assumed SIs in restoring coolant inventory and preventing core damage, and the margin against core damage where their actuation is delayed. The calculations use the engineering-level MELCOR1.8.5 code, supplemented by the SCDAPSIM and SCDAP/RELAP5 codes, which provide a more detailed treatment of coolant system thermal hydraulics and core behaviour. Both treatments show that the core is readily quenched, without damage, by the nominal SI which assumes operation of only one pump. Margins against additional scenario and model uncertainties are assessed by assuming a delay of 900 s (the time needed to actuate the remaining pumps) and a variety of assumptions regarding models and the number of pumps available in conjunction with both MELCOR and versions of SCDAP. Overall, the study provides confidence in the inherent robustness of the plant design with respect to LOCA during cooldown to cold shutdown, and in the validity of a two-tier calculational method. The results have been directly used in updating the plant shutdown PSA, by changing the success criteria for core cooling during cooldown of the plant and showing a reduction in overall risk.     

An estimation of an operator's action time by using the MARS code in a small break LOCA without a HPSI for a PWR

To estimate the success criteria of an operator's action time for a probabilistic safety/risk assessment (PSA/PRA) of a nuclear power plant, the information from a safety analysis report (SAR) and/or that by using a simplified simulation code such as the MAAP code has been used in a conventional PSA. However, the information from these is often too conservative to perform a realistic PSA for a risk-informed application. To reduce the undue conservatism, the use of a best-estimate thermal hydraulic code has become an essential issue in the latest PSA and it is now recognized as a suitable tool. In the same context, the ‘ASME PRA standard’ also recommends the use of a best-estimate code to improve the quality of a PSA. In Korea, a platform to use a best-estimate thermal hydraulic code called the MARS code has been developed for the PSA of the Korea standard nuclear power plant (KSNP). This study has proposed an estimation method for an operator's action time by using the MARS platform. The typical example case is a small break loss of coolant accident without the high pressure safety injection system, which is one of the most important accident sequences in the PSA of the KSNP. Under the given accident sequence, the operator has to perform a recovery action known as a fast cooldown operation. This study focuses on two aspects regarding an operator's action; one is how they can operate it under some restrictions; the other is how much time is available to mitigate this accident sequence. To assess these aspects, this study considered: (1) the operator's action model and (2) the starting time of the operation. To show an effect due to an operator's action, three kinds of control models (the best-fitting, the conservative, and the proportional-integral) have been assessed. This study shows that the developed method and the platform are useful tools for this type of problem and they can provide a valuable insight related to an operator's actions.     

Comparison of hydrogen generation for TVSM and TVSA fuel assemblies for water water energy reactor (VVER)-1000

This paper presents the results received during investigation of hydrogen generation for both types fuel assemblies—the old modernistic type of fuel assemblies (TVSM) and recently installed new one alternative type of fuel assemblies (TVSA) in case of severe accident. There are some differences between both types FAs. They have different geometry as well as different burnable poisons. To investigate behavior of new fuel assemblies during the severe conditions it have been performed comparison of fuel behavior of old type TVSM fuel assembly to new one TVSA.To perform this investigation it has been used MELCOR “input model” for Kozloduy Nuclear Power Plant (KNPP) VVER 1000. The model was developed by Institute for Nuclear Research and Nuclear Energy-Bulgarian Academy of Sciences (INRNE-BAS) for investigation of severe accident scenarios and Probabilistic Safety Analyses (PSA) level 2. The model provides a significant analytical capability for the Bulgarian technical specialists, working in the field of the NPP safety, for analysis of core and containment damaged states and the estimation of radionuclides release outside fuel cladding.It was accepted criteria for vessel integrity about hydrogen concentration to be 8%. This criterion was based on the decision of RSK (Germany commission for reactor safety).Generally based on the received results it was made conclusion that using both types of fuel assemblies it was not disturbance safety conditions of NPP.     

An overview of instrumentation and control systems of a Korea standard nuclear power plant: A signal interface standpoint

This paper presents an overview of instrumentation and control (I&C) systems of a pressurized water reactor (PWR) type nuclear power plant (NPP) in Korea. Yonggwang unit 3, which was constructed as a basis model for a Korea standard nuclear power plant (KSNP), is selected as an example for the presentation. This overview is derived from analyzing the I&C systems based on a top-down approach. The I&C systems consist of 30 systems. The 183 I&C cabinets are also analyzed and mapped to the systems. The overview is focused on an interface between the systems and the cabinets. This information will be used to understand the implementation of the I&C systems and to group the systems for an upgrade.