压水堆核电厂严重事故对策

描述了严重事故的过程和现象，分析了严重事故管理。系统地介绍了西屋用户集团（WOG）严重事故管理技术基础和构成：严重事故管理导则（SAMG）的主控室导则、技术支持中心（TSC）使用导则、计算辅助导则和退出导则。归纳了西屋事故对策的整体逻辑，并对我国开展严重事故对策研究提出建议。     

秦山一厂严重事故管理导则典型事故缓解对策有效性验证

在日本福岛核事故后,国家核安全局要求核电运营单位提升应对严重事故的能力。按照国家核安全局要求,秦山一厂开发了严重事故管理导则。应用MELCOR程序建立了秦山一厂严重事故分析模型,模拟典型严重事故序列,根据严重事故管理导则的缓解对策,分析实施事故缓解对策对核电厂主要参数的影响,从而验证事故缓解对策的有效性。分析结果表明:在严重事故情况下,按照严重事故管理导则实施缓解对策,可有效地延缓或终止堆芯损坏的过程。     

Approach to accident management in RBMK-1500

In order to ensure the safe operation of the nuclear power plants accident management programs are being developed around the world. These accident management programs cover the whole spectrum of accidents, including severe accidents. A lot of work is done to investigate the severe accident phenomena and implement severe accident management in NPPs with vessel-type reactors, while less attention is paid to channel-type reactors CANDU and RBMK.Ignalina NPP with RBMK-1500 reactor has implemented symptom based emergency operation procedures, which cover management of accidents until the core damage and do not extend to core damage region. In order to ensure coverage of the whole spectrum of accidents and meet the requirements of IAEA the severe accident management guidelines have to be developed.This paper presents the basic principles and approach to management of beyond design basis accidents at Ignalina NPP. In general, this approach could be applied to NPPs with RBMK-1000 reactors that are available in Russia, but the design differences should be taken into account.     

核电厂应急运行规程与严重事故管理指南接口分析

福岛核事故后,核工业界及核安全监管当局对严重事故更加重视,严重事故管理指南（SAMG）的制订已经成为国内核安全监管要求.核电厂制定了应急运行规程（EOP）用以防止核电厂事故升级为严重事故,在SAMG研制时,如何从EOP合理地过渡到SAMG成为必须解决的问题.本文详细分析了EOP与SAMG的接口准则和影响因素,并结合国内核电厂SAMG研制现状,对EOP与SAMG接口方案进行了分析和建议,可为其他核电厂SAMG的研制工作提供参考.     

Overview of plant specific severe accident management strategies for Kozloduy nuclear power plant,WWER-1000/320

This paper focuses on the fourth level of the defence in depth concept in nuclear safety, including the transitions from the third level and into the fifth level. The use of the severe accident management guideline (SAMG) is required when an accident situation is not handled adequately through the use of emergency operating procedures (EOP), thus leading to a partial or a total core melt. In the EOPs, the priority is to save the fuel, whereas, in the SAMG, the priority is to save the containment. Actions recommended in the SAMG aim at limiting the risk of radiologically significant radioactive releases in the short- and mid-term (a few hours to a few days). The paper describes basic severe accident management requirements related to nuclear power plant (NPP), specified by the IAEA and in Republic of Bulgaria Nuclear Legislation. It also surveys plant specific severe accident management (SAM) strategies for the Kozloduy NPP, equipped with WWER-1000 type reactors.     

Study on severe accident mitigation measures for the development of PWR SAMG

In the development of the Severe Accident Management Guidelines （SAMG）, it is very important to choose the main severe accident sequences and verify their mitigation measures. In this article, Loss-of-Coolant Accident （LOCA）, Steam Generator Tube Rupture （SGTR）, Station Blackout （SBO）, and Anticipated Transients without Scram （ATWS） in PWR with 300 MWe are selected as the main severe accident sequences. The core damage progressions induced by the above-mentioned sequences are analyzed using SCDAP/RELAP5. To arrest the core damage progression and mitigate the consequences of severe accidents, the measures for the severe accident management （SAM） such as feed and bleed, and depressurizations are verified using the calculation. The results suggest that implementing feed and bleed and depressurization could be an effective way to arrest the severe accident sequences in PWR.     

Simplified seismic analysis methods used by AECL for the seismic qualification of CANDU nuclear power plants

This paper presents some of the simplified procedures and methods used by AECL for the seismic qualification of CANDU Nuclear Power Plants (NPPs). The approaches described herein are well tested and have been used in Canada and elsewhere for a number of years. Most of these simplified seismic analysis, testing and inspection procedures, and their underlying principals, have been accepted by the Atomic Energy Control Board of Canada for licensing purposes. In this respect, a comprehensive inspection of completed NPPs, to determine their ability to safely survive a design basis earthquake (DBE), is a prerequisite for licensing of CANDU NPP's in Canada. Many of the methods and recommendations given in the following tie in closely with [1].     

Severe accident management strategy verification for VVER-1000 (V320) reactor

Severe accident analysis of a reactor is an important aspect in evaluation of source term. This in turn helps in emergency planning and Severe Accident Management (SAM). The use of the Severe Accident Management Guideline (SAMG) is required for accident situation which is not handled adequately through the use of Emergency Operating Procedures (EOP), thus leading to a partial or a total core melt. Actions recommended in the SAMG aim at limiting the risk of radiologically significant radioactive releases in the short- and mid-term (a few hours to a few days). Initiation of SAMG for VVER-1000 is considered at two core exit temperatures viz. 650 °C as a desirable entry temperature and 980 °C as a backup action. Analyses have been carried out for VVER-1000 (V320) for verification of some of the strategies namely water injection in primary and secondary circuit. These strategies are analysed for a high and low pressure primary circuit transients. Station Black Out (SBO) is one such high pressure transient for which core heat can be removed by natural circulation of the primary circuit inventory by maintaining the secondary side inventory. This strategy has been verified where the feed water injection to secondary side of SG is considered from external power sources (e.g. mobile DG sets) as suggested in SAM guidelines. The second transient, a low pressure event is analysed for verification of the SG flooding and core flooding strategies. The analysis shows that SG flooding is not adequate to arrest the degradation of the core. In case of core flooding strategy, the analyses show that core flooding is not adequate to arrest the degradation of the core for the large break LOCA where as for small break LOCA the injections through available safety systems are adequate. The assessments are carried out with integral severe accident computer code ASTEC V1.3.     

Safety assessment of nuclear power plant under volcanic phenomena part2 – revision of JEAG4625 on the safety assessment of severe accident measures equipment and maintenance programme

Japan is one of the countries with abundant active volcanoes. In the field of Nuclear Energy, it is necessary to assess safety against volcanic hazards, and voluntary guidelines were published in JEAG4625 in 2009 to set up the requirements of site assessments and the basic designs of nuclear power plants (NPPs). Revised guidelines were published in 2014, which stated the need to examine volcanic phenomena and concrete countermeasures in the detailed designs of NPPs. A further revision included the requirement of the safety assessment of equipment used for measures in a severe accident. This paper focuses on the background and technical basis of the revision of the voluntary guidelines and shows the basic policy on the concept of defence in depth for protecting NPPs against volcanic phenomena and the requirements of equipment to perform measures in the case of a severe accident to prevent nuclear hazards due to volcanic phenomena and the maintenance programme after a volcanic eruption.     

Optimum RCS depressurization strategy for effective severe accident management of station black out accident

Plant specific severe accident management guidelines (SAMG) for operating plants are developed and implemented in Korea as was required by government policy on severe accident. Korea Institute of Nuclear Safety (KINS) has recently reviewed feasibility of the developed SAMG for Ulchin unit 1 plant. Among the strategies referred in SAMG, we have intensively analyzed the reactor coolant system (RCS) depressurization strategy during station black out (SBO) accident scenario, which has a high probability of occurrence according to Ulchin unit 1 Probabilistic Safety Analysis (PSA). In depressurization strategy of the current SAMG, operators need to depressurize rapidly RCS pressure below 2.75 MPa using pressurizer (PZR) pilot operated safety relief valves (POSRVs) for high pressure accident like SBO. The rapid depressurization is effective in allowing the water of safety injection tank (SIT) to be injected into the core, but an excessive discharge of the SIT water is not desirable for an economical use of SIT inventory. Lack of SIT water accelerates the core damage in case the failed electric power do not recover in due to time. The SIT inventory economy means here that we should not waste the water inventory of SIT and use it in the most efficient way to cool the core. In case we do not use it in an economical way, the SIT might be depleted too rapidly, thus leaving an insufficient reservoir for post-depressurization cooling. The quantification of this SIT inventory economy for plant specific situation is of interest to develop an optimum depressurization strategy. In this study we have analyzed an effectiveness of current depressurization strategy for SBO accident with the severe accident analysis code MELCOR 1.8.5 which has been used for regulatory purpose in KINS. The entry time of severe accident management, a grace time gained by the current strategy, and the economy of the discharge mass flow rate for Ulchin plant were evaluated. Moreover, through a simple energy balance equation we could find an optimum strategy for RCS depressurization. The proposed strategy is based on finding an optimum discharge rate for an efficient use of the SIT inventory and it allows us to handle an SBO accident with higher confidence. The proposed strategy is yet a theoretical one, but possibilities of how to incorporate this strategy into engineered safety features are also discussed.     

Analyses for VVER-1000/320 reactor for spectrum of break sizes along with SBO

Severe accident analysis of a reactor is an important aspect for evaluation of source term. This in turn helps in emergency planning and severe accident management (SAM). Analyses have been carried out for VVER-1000 (V320) reactor following LOCA along with station blackout (SBO) to generate information on these aspects. Availability and unavailability of hydro-accumulators (HAs) are also considered for this study. Integral code ASTEC V1.3 (jointly developed by IRSN, France, and GRS, Germany) is used for analysing the transients. The predictions of different severe accident parameters like vessel rupture time, hydrogen and corium production and radioactivity release to containment have been compared for a spectrum of break sizes to provide information for probabilistic safety analysis (PSA) level-2 and severe accident management (SAM) guidelines.     

严重事故管理导则入口条件研究

严重事故管理导则的入口是从电厂应急运行规程(EOP)向严重事故管理导则(SAMG)转换的条件,也是严重事故缓解行动的重要依据。本文选取失去四级电源导致的典型高压熔堆序列以及大破口失水事故(LLOCA)导致的典型低压熔堆序列,根据严重事故堆芯剧烈氧化机理,得出了燃料温度、氢气产生速率及产氢量、入口集管过冷度以及慢化剂液位的关系。结果表明入口集管过冷度小于0且持续十几分钟,同时慢化剂系统的状态指示慢化剂液位低于6 900mm,可以作为严重事故管理的入口条件。最后,阐述了目前电厂EOP向SAMG转换的机制,并提出了改进的意见。     

Generic CANDU 6 plant severe accident analysis employing SCAPSIM/RELAP5 code

The purpose of the present study is to assess the capability of SCDAPSIM/RELAP5 to perform the deterministic analysis for postulated severe accidents for CANDU plant and to gain information for potential improvements in code modelling. SCDAPSIM/RELAP5 is a widespread and detailed computer code for severe accident analysis that can be adapted to benchmark the CANDU dedicated tools, MAAP4–CANDU and ISAAC. Simulations of station blackout (SBO) and large loss-of-coolant accident (LOCA) scenarios, which, through further system failures, may eventually lead to severe core damage (SCD) accident in a CANDU 6, are presented. The paper provides details concerning the methodology and nodalization used, and interprets the results obtained. Comparisons of the SCDAPSIM/RELAP5 simulations with the MAAP4–CANDU code reported results are presented. Also, some insights are given on possible reasons for the discrepancies between the SCDAPSIM/RELAP5 and MAAP4–CANDU code predictions.     

Effectiveness and adverse effects of in-vessel retention strategies under a postulated SGTR accident of an OPR1000

During a steam generator tube rupture (SGTR) accident, direct release of radioactive nuclides into the environment is postulated via bypassing the containment building. This conveys a significant threat in severe accident management (SAM) for minimization of radionuclide release. To mitigate this risk, a numerical assessment of SAM strategies was performed for an SGTR accident of an Optimized Power Reactor 1000 MWe (OPR1000) using MELCOR code. Three in-vessel mitigation strategies were evaluated and the effect of delayed operation action was analyzed. The MELCOR calculations showed that activation of a prompt secondary feed and bleed (F&B) operation using auxiliary feed water and use of an atmospheric dump valve could prevent core degradation. However, depressurization using the safety depressurization system could not prevent core degradation, and the injection of coolant via high-pressure safety injection without the use of reactor coolant system (RCS) depressurization increased fission product release. When mitigation action was delayed by 30 minutes after SAMG entrance, a secondary F&B operation failed in depressurizing the RCS sufficiently, and a significant amount of fission products were released into the environment. These results suggest that appropriate mitigation actions should be applied in a timely manner to achieve the optimal mitigation effects.     

Uncertainty analysis of CsI distribution for typical CANDU6 station blackout accident

This paper illustrates an application of a severe accident analysis code, ISAAC (Integrated Severe Accident Analysis Code for the CANDU plants), to the uncertainty analysis of fission product behaviors during a severe reactor accident. The ISAAC code is a system-level computer code capable of performing integral analyses of potential severe accident progressions in nuclear power plants, and whose main purpose is to support a level 2 probabilistic safety assessment or severe accident management strategy developments. The code employs lots of user options for supporting sensitivity and uncertainty analyses. The present application is mainly focused on determining an estimate of the fission products in the release and transport processes and the relative importance of the dominant contributors to the predicted fission products. The key modeling parameters and phenomenological models employed for the present uncertainty analysis are closely related to the fission product release correlations, vapor–aerosol equilibrium, vapor–surface equilibrium for a revaporization calculation, and aerosol decontamination factors. A typical CANDU6 type plant, the Wolsong nuclear power plant, was used as a reference plant for the analysis.     

An evolution of molten core cooling strategies

Fundamental mechanisms behind the molten core cooling strategies are revisited to provide an insight for a proper implementation of severe accident management guideline (SAMG) and a development of an engineered safety feature. From the results of a qualitative evaluation and a quantitative plant analysis, weak points of the current severe accident management guideline for an operating plant are identified and a revision of the molten core cooling strategies is proposed. In addition, technical issues for various kinds of core catcher concepts are discussed.     

The development and demonstration of integrated models for the evaluation of severe accident management strategies—SAMEM

This study is concerned with the further development of integrated models for the assessment of existing and potential severe accident management (SAM) measures. This paper provides a brief summary of these models, based on Probabilistic Safety Assessment (PSA) methods and the Risk Oriented Accident Analysis Methodology (ROAAM) approach, and their application to a number of case studies spanning both preventive and mitigative accident management regimes. In the course of this study it became evident that the starting point to guide the selection of methodology and any further improvement is the intended application. Accordingly, such features as the type and area of application and the confidence requirement are addressed in this project. The application of an integrated ROAAM approach led to the implementation, at the Loviisa NPP, of a hydrogen mitigation strategy, which requires substantial plant modifications. A revised level 2 PSA model was applied to the Sizewell B NPP to assess the feasibility of the in-vessel retention strategy. Similarly the application of PSA based models was extended to the Barseback and Ringhals 2 NPPs to improve the emergency operating procedures, notably actions related to manual operations. A human reliability analysis based on the Human Cognitive Reliability (HCR) and Technique For Human Error Rate (THERP) models was applied to a case study addressing secondary and primary bleed and feed procedures. Some aspects pertinent to the quantification of severe accident phenomena were further examined in this project. A comparison of the applications of PSA based approach and ROAAM to two severe accident issues, viz hydrogen combustion and in-vessel retention, was made. A general conclusion is that there is no requirement for further major development of the PSA and ROAAM methodologies in the modelling of SAM strategies for a variety of applications as far as the technical aspects are concerned. As is demonstrated in this project, the generic modelling framework was refined to enable a number of applications. Some recommendations have also been made regarding the applicability of these approaches to existing operating reactors and future reactors. The need for further research and development in the area of human reliability quantification was identified.     

CANDU6核电厂无过滤安全壳通风模式的研究

CANDU6核电厂早期设计未考虑严重事故对策,在严重事故下,CANDU6核电厂的安全壳容易失效。为了解决这一问题,本文研究了无过滤安全壳通风模式对CANDU6核电厂安全壳的影响。本文选取典型的全厂断电严重事故,利用重水蒸气回收系统作为无过滤安全壳通风的路径,初步研究了该通风模式下对安全壳完整性的保持和对裂变产物源项的滞留能力。研究表明:该通风模式可以有效保持安全壳的完整性,同时,对裂变产物源项也有一定的滞留能力。     

全厂断电引发的严重事故下蒸汽发生器传热管蠕变失效风险研究

全厂断电引发的严重事故若处置不当,可能发展为长期、高压的严重事故进程,此时堆芯冷却系统中的自然循环在导出部分堆芯余热的同时,也增加了蒸汽发生器（SG）传热管、稳压器波动管以及热管段出现蠕变失效的风险。本文基于两环路设计的秦山二期核电厂设计特点,结合蠕变失效风险模型,对全厂断电引发的严重事故后未能执行“严重事故管理导则中向蒸汽发生器注水（SAG-1）”时SG传热管的蠕变失效风险进行了研究,从而为全厂断电引发的严重事故的负面影响提供量化结果,为技术支持中心（TSC）最终决策提供参考依据。分析结果表明,全厂断电引发的严重事故后16 361 s可能出现蠕变失效;自事故后16 610 s,SG传热管出现蠕变失效的可能性均远低于稳压器波动管与热管段,秦山二期核电厂全厂断电引发的严重事故下因SG传热管蠕变失效而导致安全壳旁通的风险很小。     

Development of a risk-informed accident diagnosis and prognosis system to support severe accident management

RISARD, risk-informed severe accident risk diagnosis system, is a computerized tool developed to improve a severe accident management (SAM) for a nuclear power plant and to effectively support the MCR and the TSC in executing the relevant SAM activities. In order to provide a diagnostic capability to a state of the plant and a prognostic capability for an anticipated accident progression, the system examines (a) a symptom-based diagnosis of a plant damage state (PDS) sequence in a risk-informing way and (b) a PDS sequence-based prognosis of key plant parameter behavior, through a prepared database (DB) containing plant-specific severe accident risk (SAR)-related information. For a given accident, the replicated use of these two processes makes it possible to obtain information about the functional states of the plant and containment safety systems expected at the time of a severe accident as well as future trend of the key plant parameters that are essentially required for taking the relevant SAM action, eventually leading to an answer about the best strategy for SAM. The foregoing concept for an accident diagnosis and prognosis can give the SAM practitioners more time to take action for mitigating the consequences of the potential accident scenarios since they are made in a simple, fast, and efficient way through a prepared SAR database and it is useful especially when the plant information available for SAM is incomplete and limited. The main purpose of this paper is to (a) introduce the concept of the RISARD system proposed to support SAM and its implementation through a prepared OPR1000 plant- and MAAP code-specific SAR database and (b) assess prediction capabilities of major events expected during the evolution of a severe accident through the system.