Westinghouse Small Modular Reactor passive safety system response to postulated events
The Westinghouse Small Modular Reactor (SMR) is an 800 MWt (>225 MWe) integral pressurized water reactor. This paper is part of a series of four describing the design and safety features of the Westinghouse SMR. This paper focuses in particular upon the passive safety features and the safety system response of the Westinghouse SMR. The Westinghouse SMR design incorporates many features to minimize the effects of, and in some cases eliminates the possibility of postulated accidents. The small size of the reactor and the low power density limits the potential consequences of an accident relative to a large plant. The integral design eliminates large loop piping, which significantly reduces the flow area of postulated loss of coolant accidents (LOCAs). The Westinghouse SMR containment is a high-pressure, compact design that normally operates at a partial vacuum. This facilitates heat removal from the containment during LOCA events. The containment is submerged in water which also aides the heat removal and provides an additional radionuclide filter. The Westinghouse SMR safety system design is passive, is based largely on the passive safety systems used in the AP1000{sup R} reactor, and provides mitigation of all design basis accidents without the need for AC electrical power for a period of seven days. Frequent faults, such as reactivity insertion events and loss of power events, are protected by first shutting down the nuclear reaction by inserting control rods, then providing cold, borated water through a passive, buoyancy-driven flow. Decay heat removal is provided using a layered approach that includes the passive removal of heat by the steam drum and independent passive heat removal system that transfers heat from the primary system to the environment. Less frequent faults such as loss of coolant accidents are mitigated by passive injection of a large quantity of water that is readily available inside containment. An automatic depressurization system is used to reduce the reactor pressure in a controlled manner to facilitate the passive injection. Long-term decay heat removal is accomplished using the passive heat removal systems augmented by heat transfer through the containment vessel to the environment. The passive injection systems are designed so that the fuel remains covered and effectively cooled throughout the event. Like during the frequent faults, the passive systems provide effective cooling without the need for ac power for seven days following the accident. Connections are available to add additional water to indefinitely cool the plant. The response of the safety systems of the Westinghouse SMR to various initiating faults has been examined. Among them, two accidents; an extended station blackout event, and a LOCA event have been evaluated to demonstrate how the plant will remain safe in the unlikely event that either should occur. (authors)