Development of severe accident management guidance (SAMG) for the Canadian CANDU 6 nuclear power plants

This paper discusses the severe accident management guidance (SAMG) development process undertaken for the Canadian CANDU 6 nuclear power plants (NPPs); the customization process of the generic CANDU SAMG for the Point Lepreau NPP is presented. Examples of severe accident management (SAM) guidelines related to containment pressure control are included in this paper. This paper also provides an overview summary of the severe accident analysis program at Atomic Energy of Canada Limited (AECL) that complements the SAM guidelines development process for the CANDU 6 NPPs in Canada. These analyses provided insights into the accident progression and basis to develop the SAM guidelines.     

CANDU-6核电机组压力管寿命管理

介绍了CANDU反应堆压力管的使用条件、压力管寿命与电站寿命的关系、AECL多年来对压力管的改进工作 ,论述了影响压力管使用寿命的因素和秦山三期压力管寿命管理的思路和主要措施     

Use of a fuzzy decision-making method in evaluating severe accident management strategies

In developing severe accident management strategies, an engineering decision would be made based on the available data and information that are vague, imprecise and uncertain by nature. These sorts of vagueness and uncertainty are due to lack of knowledge for the severe accident sequences of interest. The fuzzy set theory offers a possibility of handling these sorts of data and information. In this paper, the possibility to apply the decision-making method based on fuzzy set theory to the evaluation of the accident management strategies at a nuclear power plant is scrutinized. The fuzzy decision-making method uses linguistic variables and fuzzy numbers to represent the decision-maker's subjective assessments for the decision alternatives according to the decision criteria. The fuzzy mean operator is used to aggregate the decision-maker's subjective assessments, while the total integral value method is used to rank the decision alternatives. As a case study, the proposed method is applied to evaluating the accident management strategies at a nuclear power plant.     

Quantitative assessment of severe accident management strategies in a nuclear power plant

Nuclear power plants in Korea are preparing improvement countermeasures for severe accidents including mobile gas turbine generators, passive autocatalytic recombiners, containment-filtered venting systems, and external injection using portable pumps. However, these improvement countermeasures have only been determined by expert judgment, and detailed validation of their effects has not been performed. In this paper, the quantitative safety impact of these improvement countermeasures was evaluated for the Westinghouse 3-loop pressurized water reactor. Our evaluation of four improvement countermeasures using the at-power internal event probabilistic safety assessment models revealed that all containment failure modes have positive effects, except for the containment isolation failure and the containment bypass. Therefore, post-Fukushima action plans for coping with a severe accident in Korea have been appropriately evaluated and established.     

Cernavoda CANDU severe accident evaluation

The papers present the activities dedicated to Romania Cernavoda Nuclear Power Plant first CANDU Unit severe accident evaluation. This activity is part of more general PSA assessment activities. CANDU specific safety features are calandria moderator and calandria vault water capabilities to remove the residual heat in the case of severe accidents, when the conventional heat sinks are no more available. Severe accidents evaluation, that is a deterministic thermal hydraulic analysis, assesses the accidents progression and gives the milestones when important events take place. This kind of assessment is important to evaluate to recovery time for the reactor operators that can lead to the accident mitigation. The Cernavoda CANDU unit is modeled for the of all heat sinks accident and results compared with the AECL CANDU 600 assessment.     

Effects of accident management strategy on the severe accident environmental conditions

This paper presents a methodology utilizing an accident management strategy in order to determine accident environmental conditions to be used as inputs to equipment survivability assessments. In the case that there is a well-established accident management strategy for a specific nuclear power plant (NPP), an application of this tool can provide a technical rationale on equipment survivability assessment so that plant-specific and time-dependent accident environmental conditions could be practically and realistically defined in accordance with the equipment and instrumentation required for the accident management strategy or appropriate actions. For this work, three different tools are introduced; probabilistic safety assessment (PSA) outcomes, major accident management strategy actions, and accident environmental stages (AESs). In order to quantitatively investigate an applicability of accident management strategy on equipment survivability, the accident simulation for most likely scenario in Korean standard nuclear power plants (KSNPs) is performed with the MAAP4 code. The accident management guideline (AMG) actions such as the reactor coolant system (RCS) depressurization, water injection into the RCS, the containment pressure and temperature control, and hydrogen concentration control in containment are applied. The effects of these AMG actions on the accident environmental conditions are investigated by comparison to actions from previous normal accident simulation, especially focusing on equipment survivability assessment. As a result, the AMG-involved case shows the higher accident consequences along the accident environmental stages. This implies that plant-specific AMG actions need to be considered in order to determine accident environmental conditions in equipment survivability assessments.     

Assessment of two BWR accident management strategies

Candidate mitigative strategies for the management of in-vessel events during the late phase (after-core degradation has occurred) of postulated boiling water reactor (BWR) severe accidents were considered at Oak Ridge National Laboratory (ORNL) during 1990. The identification of new strategies was subject to the constraint that they should, to the maximum extent possible, make use of the existing equipment and water resources of the BWR facilities, and not require major equipment modifications or additions. As a result of this effort, two of these candidate strategies were recommended for further assessment. The first was a strategy for containment flooding to maintain the core and structural debris within the reactor vessel in the event that vessel injection cannot be restored to terminate a severe accident sequence. The second strategy pertained to the opposite case, for which vessel injection would be restored after control blade melting had begun; its purpose was to provide an injection source of borated water at the concentration necessary to preclude criticality upon recovering a damaged BWR core. Assessments of these two strategies were performed during 1991 and this paper provides a discussion of the motivation for and purpose of these strategies, and the potential for their success.     

秦山三期CANDU-6核电机组的核安全审评

秦山三期重水堆核电站是第一次在中国建造的CANDU 6机组 ,核安全评审对NNSA和TQNPC都是新的课题。重点阐述TQNPC作为业主主动参与安全评审 ,积极配合NNSA的安全评审 ,双方共同努力 ,给出恰当的评价 ,要求供货商AECL按照法规和标准要求作出适当的修改。还提出了今后CAN DU 6进一步发展的建议。     

The development and demonstration of integrated models for the evaluation of severe accident management strategies—SAMEM

This study is concerned with the further development of integrated models for the assessment of existing and potential severe accident management (SAM) measures. This paper provides a brief summary of these models, based on Probabilistic Safety Assessment (PSA) methods and the Risk Oriented Accident Analysis Methodology (ROAAM) approach, and their application to a number of case studies spanning both preventive and mitigative accident management regimes. In the course of this study it became evident that the starting point to guide the selection of methodology and any further improvement is the intended application. Accordingly, such features as the type and area of application and the confidence requirement are addressed in this project. The application of an integrated ROAAM approach led to the implementation, at the Loviisa NPP, of a hydrogen mitigation strategy, which requires substantial plant modifications. A revised level 2 PSA model was applied to the Sizewell B NPP to assess the feasibility of the in-vessel retention strategy. Similarly the application of PSA based models was extended to the Barseback and Ringhals 2 NPPs to improve the emergency operating procedures, notably actions related to manual operations. A human reliability analysis based on the Human Cognitive Reliability (HCR) and Technique For Human Error Rate (THERP) models was applied to a case study addressing secondary and primary bleed and feed procedures. Some aspects pertinent to the quantification of severe accident phenomena were further examined in this project. A comparison of the applications of PSA based approach and ROAAM to two severe accident issues, viz hydrogen combustion and in-vessel retention, was made. A general conclusion is that there is no requirement for further major development of the PSA and ROAAM methodologies in the modelling of SAM strategies for a variety of applications as far as the technical aspects are concerned. As is demonstrated in this project, the generic modelling framework was refined to enable a number of applications. Some recommendations have also been made regarding the applicability of these approaches to existing operating reactors and future reactors. The need for further research and development in the area of human reliability quantification was identified.     

Overview of plant specific severe accident management strategies for Kozloduy nuclear power plant,WWER-1000/320

This paper focuses on the fourth level of the defence in depth concept in nuclear safety, including the transitions from the third level and into the fifth level. The use of the severe accident management guideline (SAMG) is required when an accident situation is not handled adequately through the use of emergency operating procedures (EOP), thus leading to a partial or a total core melt. In the EOPs, the priority is to save the fuel, whereas, in the SAMG, the priority is to save the containment. Actions recommended in the SAMG aim at limiting the risk of radiologically significant radioactive releases in the short- and mid-term (a few hours to a few days). The paper describes basic severe accident management requirements related to nuclear power plant (NPP), specified by the IAEA and in Republic of Bulgaria Nuclear Legislation. It also surveys plant specific severe accident management (SAM) strategies for the Kozloduy NPP, equipped with WWER-1000 type reactors.     

Optimum RCS depressurization strategy for effective severe accident management of station black out accident

Plant specific severe accident management guidelines (SAMG) for operating plants are developed and implemented in Korea as was required by government policy on severe accident. Korea Institute of Nuclear Safety (KINS) has recently reviewed feasibility of the developed SAMG for Ulchin unit 1 plant. Among the strategies referred in SAMG, we have intensively analyzed the reactor coolant system (RCS) depressurization strategy during station black out (SBO) accident scenario, which has a high probability of occurrence according to Ulchin unit 1 Probabilistic Safety Analysis (PSA). In depressurization strategy of the current SAMG, operators need to depressurize rapidly RCS pressure below 2.75 MPa using pressurizer (PZR) pilot operated safety relief valves (POSRVs) for high pressure accident like SBO. The rapid depressurization is effective in allowing the water of safety injection tank (SIT) to be injected into the core, but an excessive discharge of the SIT water is not desirable for an economical use of SIT inventory. Lack of SIT water accelerates the core damage in case the failed electric power do not recover in due to time. The SIT inventory economy means here that we should not waste the water inventory of SIT and use it in the most efficient way to cool the core. In case we do not use it in an economical way, the SIT might be depleted too rapidly, thus leaving an insufficient reservoir for post-depressurization cooling. The quantification of this SIT inventory economy for plant specific situation is of interest to develop an optimum depressurization strategy. In this study we have analyzed an effectiveness of current depressurization strategy for SBO accident with the severe accident analysis code MELCOR 1.8.5 which has been used for regulatory purpose in KINS. The entry time of severe accident management, a grace time gained by the current strategy, and the economy of the discharge mass flow rate for Ulchin plant were evaluated. Moreover, through a simple energy balance equation we could find an optimum strategy for RCS depressurization. The proposed strategy is based on finding an optimum discharge rate for an efficient use of the SIT inventory and it allows us to handle an SBO accident with higher confidence. The proposed strategy is yet a theoretical one, but possibilities of how to incorporate this strategy into engineered safety features are also discussed.     

A consistent approach to severe accident management

The approach adopted for severe accident management (SAM) at the Loviisa nuclear power plant (in Finland) is presented and discussed. The approach includes a number of significant hardware changes and procedures that allow lowering of the lower head thermal insulation and neutron shield assembly, opening of the ice condenser doors, and spraying (externally) of the steel shell of the containment. It is expected that with these changes we can assure in-vessel debris coolability and retention, gradual burning of the hydrogen with good access to the ice condenser, and long term stabilization of the containment pressure, even in the absence of the residual heat removal system. Methodological aspects of demonstrating these SAM objectives, and the status of work in support of related quantifications (of key phenomena), are included in sufficient detail to provide an integrated perspective of the approach taken. The detailed quantifications, separately on each task, will follow, as respective research and quantification programs come to completion.     

Probabilistic method for determining optimal ROP detector locations in the CANDU-6 reactor

In order to maximize the regional overpower protection (ROP) trip margin under any condition in the CANada Deuterium Uranium (CANDU) reactors, several methods have been devised and applied at the sites, such as steam generator cleaning and adjustor rod lock-in. However, the operating margins obtained from these techniques are calculated based on the current locations of the fixed in-core ROP detectors. There is a possibility for increasing the trip margin if insignificant ROP detectors are removed and new critical detectors are added at different positions that do not conflict with the current locations. In fact, AECL had proposed such a deterministic detector layout optimization (DLO) technique to minimize the number of ROP detectors in 1998. However, this deterministic approach could not propose the best or optimized three-channel solution for each shutdown system, which has the maximum trip setpoint. Recently, in order to overcome the defect of the current DLO method, KEPRI adopted a probabilistic approach to determine the ROP detector location and incorporated it in the ROP design code, ROVER-K. To verify the applicability of the new method, the optimal ROP shutdown system was obtained for an initial and aged core condition, respectively, based on only the current 58 detector locations. The results show that the total number of ROP detectors decreases from 58 to 46 or 49 and the small TSP gain is obtained simultaneously based on the re-arranged best three safety channels. Therefore, the new method can be used to select the best ROP detector locations and also to estimate the optimal ROP TSP for an aged CANDU reactor to recover the operation margin.     

SAMEX: A severe accident management support expert

A decision support system for use in a severe accident management following an incident at a nuclear power plant is being developed which is aided by a severe accident risk database module and a severe accident management simulation module. The severe accident management support expert (SAMEX) system can provide the various types of diagnostic and predictive assistance based on the real-time plant specific safety parameters. It consists of four major modules as sub-systems: (a) severe accident risk data base module (SARDB), (b) risk-informed severe accident risk data base management module (RI-SARD), (c) severe accident management simulation module (SAMS), and (d) on-line severe accident management guidance module (on-line SAMG). The modules are integrated into a code package that executes within a WINDOWS XP operating environment, using extensive user friendly graphics control. In Korea, the integrated approach of the decision support system is being carried out under the nuclear R&D program planned by the Korean Ministry of Education, Science and Technology (MEST). An objective of the project is to develop the support system which can show a theoretical possibility. If the system is feasible, the project team will recommend the radiation protection technical support center of a national regulatory body to implement a plant specific system, which is applicable to a real accident, for the purpose of immediate and various diagnosis based on the given plant status information and of prediction of an expected accident progression under a severe accident situation.     

Static strength analysis of CANDU-6 reactor fuel bundle

A static analysis, finite-element (FE) model was developed to simulate out-reactor fuel–string strength tests with use of the well-known, structural analysis computer code ABAQUS. The FE model takes into account the deflection of fuel elements, and stress and displacement in endplates subjected to hydraulic drag loads. It was adapted to the strength tests performed for CANFLEX 43-element bundles and the existing 37-element bundles. The FE model was found to be in good agreement with experiment results. With use of the FE model, the static behavior of the fuel bundle string, such as load transfer between ring elements, endplate rib effects, hydraulic drag load incurring plastic deformation in fuel string and hydraulic flow rate effects were investigated.     

Development of a risk-informed accident diagnosis and prognosis system to support severe accident management

RISARD, risk-informed severe accident risk diagnosis system, is a computerized tool developed to improve a severe accident management (SAM) for a nuclear power plant and to effectively support the MCR and the TSC in executing the relevant SAM activities. In order to provide a diagnostic capability to a state of the plant and a prognostic capability for an anticipated accident progression, the system examines (a) a symptom-based diagnosis of a plant damage state (PDS) sequence in a risk-informing way and (b) a PDS sequence-based prognosis of key plant parameter behavior, through a prepared database (DB) containing plant-specific severe accident risk (SAR)-related information. For a given accident, the replicated use of these two processes makes it possible to obtain information about the functional states of the plant and containment safety systems expected at the time of a severe accident as well as future trend of the key plant parameters that are essentially required for taking the relevant SAM action, eventually leading to an answer about the best strategy for SAM. The foregoing concept for an accident diagnosis and prognosis can give the SAM practitioners more time to take action for mitigating the consequences of the potential accident scenarios since they are made in a simple, fast, and efficient way through a prepared SAR database and it is useful especially when the plant information available for SAM is incomplete and limited. The main purpose of this paper is to (a) introduce the concept of the RISARD system proposed to support SAM and its implementation through a prepared OPR1000 plant- and MAAP code-specific SAR database and (b) assess prediction capabilities of major events expected during the evolution of a severe accident through the system.     

Role of the man–machine interface in accident management strategies

First, this paper gives a short general review on important safety issues in the field of man–machine interaction as expressed by important nuclear safety organisations. Then follows a summary discussion on what constitutes a modern Man–Machine Interface (MMI) and what is normally meant with accident management and accident management strategies. Furthermore, the paper focuses on three major issues in the context of accident management. First, the need for reliable information in accidents and how this can be obtained by additional computer technology. Second, the use of procedures is discussed, and basic MMI aspects of computer support for procedure presentation are identified followed by a presentation of a new approach on how to computerise procedures. Third, typical information needs for characteristic end-users in accidents, such as the control room operators, technical support staff and plant emergency teams, is discussed. Some ideas on how to apply virtual reality technology in accident management is also presented.     

Development of a CFD model for the CANDU-6 moderator analysis using a coupled solver

A computational fluid dynamics (CFD) moderator analysis model by using a coupled solver has been developed for the moderator analysis of Canada deuterium uranium (CANDU) reactors. For Wolsong Units 2/3/4, a steady-state moderator circulation under operating conditions and the local moderator subcooling during a LOCA transient were evaluated using the CFD tool. When compared to a former study in the Final Safety Analysis Reports, the current analysis provided well-matched trends and reasonable results. This new CFD model based on a coupled solver shows a dramatic increase in the computing speed, when compared to that based on a segregated solver.     

CANDU-6 operation post-simulations using the reactor physics codes DRAGON/DONJON

The operating CANDU-6 reactors are refueled on-power to compensate for the reactivity loss due to fuel burnup. In order to track the core behavior over a long period of operating history without having to use on-site measurement data, a consistent set of nuclear properties must be defined. The 2D as well as 3D capabilities of the DRAGON code are exploited to generate consistent two-group nuclear properties and increments using two different microscopic libraries. These properties are then used in a DONJON core-follow simulation of 220 full power days of operating history at the Gentilly-2 power plant. Comparisons with detectors show that differences tend to decrease with time. This core-follow application was pursued by post-simulations of reactivity mechanism measurements, which are shown to be in good agreement with reactor data. All these simulations demonstrate the DONJON capabilities of fuel management, detector reading evaluation and critical state determination.     

Sustainable integration of EU research in severe accident phenomenology and management

In order to optimise the use of the available means and to constitute sustainable research groups in the European Union, the Severe Accident Research NETwork of Excellence (SARNET) has gathered, between 2004 and 2008, 51 organizations representing most of the actors involved in severe accident (SA) research in Europe plus Canada. This project was co-funded by the European Commission (EC) under the 6th Euratom Framework Programme. Its objective was to resolve the most important pending issues for enhancing, in regard of SA, the safety of existing and future nuclear power plants (NPPs).SARNET tackled the fragmentation that existed between the national R&D programmes, in defining common research programmes and developing common computer codes and methodologies for safety assessment. The Joint Programme of Activities consisted in:

-

Implementing an advanced communication tool for accessing all project information, fostering exchange of information, and managing documents;

-

Harmonizing and re-orienting the research programmes, and defining new ones;

-

Analyzing the experimental results provided by research programmes in order to elaborate a common understanding of relevant phenomena;

-

Developing the ASTEC code (integral computer code used to predict the NPP behaviour during a postulated SA) by capitalizing in terms of physical models the knowledge produced within SARNET;

-

Developing scientific databases, in which the results of research experimental programmes are stored in a common format;

-

Developing a common methodology for probabilistic safety assessment of NPPs;

-

Developing short courses and writing a text book on severe accidents for students and researchers;

-

Promoting personnel mobility amongst various European organizations.

This paper presents the major achievements after four and a half years of operation of the network, in terms of knowledge gained, of improvements of the ASTEC reference code, of dissemination of results and of integration of the research programmes conducted by the various partners.Most initial objectives were reached but the continuation of the SARNET network, co-funded by EC in the 7th Framework Programme (SARNET2 project that started in April 2009 for 4 years), will consolidate the first assets and focus mainly on the highest priority pending issues as determined during the first period. The objective will be also to make the network evolve towards a complete self-sustainability.