Search NASA⌕ Search

SEARCH · Search NASA

Results for “REACTOR CONTROL SYSTEMS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI1994

Nuclear Safety [Vol. 35, No. 1, January-June 1994]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. THE CHERNOBYL ACCIDENT: 1 Chernobyl Accident Management Actions, A. R Sich; GENERAL SAFETY CONSIDERATIONS: 25 The IAEA-ASSET Approach to Avoiding Accidents is to Recognize the Precursors to Prevent Incidents, F. Reisch; ACCIDENT ANALYSIS: 36 A Review of the Available Information on the Triggering Stage of a Steam Explosion, D. F. Fletcher; 58 Analysis and Modeling of Flow-Blockage-Induced Steam Explosion Events in the High-Flux Isotope Reactor, R. P. Taleyarkhan, V. Georgevich, C. W. Nestor, U. Gat, B. L. Lepard, D. H. Cook, J. Freels, S. J. Chang, C. Luttrell, R. C. Gwaltney, and J. Kirkpatrick; 74 An Analysis of Disassembling the Radial Reflector of a Thermionic Space Nuclear Reactor Power System, M. S. El-Genk and D. V. Paramonov; CONTROL AND INSTRUMENTATION: 86 Standards for High-Integrity Software, D. R. Wallace, D. R. Kuhn, L M. Ippolito, and L. Beltracchi; DESIGN FEATURES: 98 Adoption of New Design Features for the Next Generation Nuclear Power Reactors, L. S. Tong; 114 Review of Nuclear Piping Seismic Design Requirements, G. C. Slagis and S. E. Moore; ENVIRONMENTAL EFFECTS: 128 PC-Based Probabilistic Safety Assessment Study for a Geological Waste Repository Placed in a Bedded Salt Formation, S. A. Khan; OPERATING EXPERIENCES: 142 Managing Aging in Nuclear Power Plants: Insights from NRC’s Maintenance Team Inspection Reports, A. Fresco and M. Subudhi; 150 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 153 Selected Safety-Related Events, Compiled by G. A. Murphy; RECENT DEVELOPMENTS: 158 Reports, Standards, and Safety Guides, D. S. Queener; 168 Proposed Rule Changes as of Dec. 31, 1993; ANNOUNCEMENTS: 177 Symposium on Radioactive and Mixed Waste—Risk as a Basis for Waste Classification; 177 1995 Incineration Conference 178 Ninth Power Plant Dynamics Control and Testing Symposium; 174 The Authors

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2017

A novel priority selection system for nuclear power plant - 287

The priority selection system is an important component of security level instrument control platform for nuclear power plant, the main function of which is priority processing the manual or automatic command with various security levels and driving engineering safety features and field devices, such as pump and valve. Its stability and safety plays a crucial role in the operation of the power plant. The main objective of the present paper is to describe the new nuclear power plant-oriented priority selection system, which is developed independently by China Nuclear Control System Engineering Company. In this system, the control commands from 1E DCS, ECP and DAS systems are transmitted via hardwire, while those from NC DCS are transmitted by field-bus. The control commands experience priority output to control the field actuators. Meanwhile, in order to control key field devices when failure of the instrument control systems occurs, the issuing interface for native instructions with permissions setting is also offered. The whole system provides collection-feedback functions for field devices, high coverage self-diagnostic functions and periodic test functions for safety systems. Moreover, the feedback information of field devices, the results of self-diagnosis and periodic test will be submitted to DCS of nuclear power plant. In addition, the core part of priority selection system, namely priority selection module, is obtained by pure FPGA technology, which is different from DCS systems and could avoid common cause failure of software effectively. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

The problem analysis of data processing performance in nuclear power plant computerized information and control system - 288

This paper is based on the data processing performance problems of operating command delay and system display not updating real-time for nuclear power plant computerized information and control system. The plant computerized information and control system is responsible for monitoring and controlling the plant operation, and it is a key part in the plant DCS system. Its data processing performance will affect the operation stability of nuclear power plant. The architecture, hardware configuration and data communication for plant computerized information and control system among the different levels in DCS are described. The main reasons affecting data processing performance in different signal channels are analyzed according to the plant load test results. The CPU load curves for real time server and central processing server are displayed, although the detailed cause for operating command delay and system display not updating realtime are not found, central processing server load is heavier than real time server which remind us to analyze the data processing of software resource scheduling deeply. So the resource distribution problem of software execution task is also analyzed according to CPU load test results. This paper provides the optimization analysis for data processing performance, and it is available and effective according to the latest test results. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

Methodology on cyber security evaluation in nuclear facilities considering I and C architecture - 224

Cyber security has become a major issue in nuclear facilities recently due to obsolescence of existing analog system and increasing the use of digital system for instrumentation and control (I and C) system. There are several cases which are similar to cyber-attacks in nuclear facilities such as Davis-Besse NPP, Browns Ferry NPP, Hatch NPP, Natanz Nuclear Facility, and Monju NPP. Since the cyber-attack called 'Stuxnet' occurred to a Natanz Nuclear Facility at 2010, the regulatory agencies have developed regulatory guidance for cyber security of nuclear facilities. In this paper, we will propose a methodology on cyber security evaluation in nuclear facilities considering I and C architecture. We will introduce the cyber security evaluation model for I and C system with Bayesian Belief Network (BBN). The cyber security evaluation model for nuclear facilities consists of I and C architecture, cyber threat such as malicious activity of attacker, and mitigation measure against malicious activity. In order to make benchmark model with I and C architecture, cyber threat, and mitigation measure, the likelihood and consequence concepts are used as prior information to the model. Bayesian update can be used to evaluate the cyber security for nuclear facility by calculating posterior information and comparing between prior information and posterior information with the model. Moreover, we will propose the methodology on application of the cyber security to existing PSA by using the cyber security evaluation model with BBN. It presents quantitative information for cyber security against cyber-attack and it is helpful to communicate between licensee and regulator on nuclear facilities. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2016

Suggestion of a Framework to Evaluate the Extent of Cyber Security Enhancements in NPP

Digital I and C systems have been developed and installed in nuclear power plants (NPPs). However, due to installation of digital I and C systems, cyber security concerns have been emerged. One of the major problems is that nuclear industry is in very early stage in dealing with cyber security issues. It is because that cyber security has received less attention compared to other safety problems. In addition, late adoption of digital I and C systems has resulted in lower level of cyber security advancements in nuclear industry than ones in other industries. With this regards, recently, international standard organizations, regulatory institutes, and research institutes have performed a number of studies addressing these cyber security issues in nuclear industries. In order to provide useful information about cyber security issues including cyber security enhancements, this paper suggests a framework to evaluate how much cyber security is improved when a specific cyber security enhancement is applied in NPPs. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

Cybersecurity Vulnerability Assessment Methodologies for Nuclear Power Plants

As any mechanical system ages, broken or outdated parts must be replaced; nuclear power plants (NPPs) are no different. The average age of a NPP in the United States' aging fleet of commercial reactors is 35 years, with many of these plants operating under extensions of their original licenses. These plants, originally designed in the 1960's and 1970's, are controlled by analog instrumentation and control (I and C) systems, and have since been upgraded (to varying degrees) to hybrid analog-digital systems. As these NPPs are upgraded to continue operating and to meet more stringent safety requirements imposed by the Nuclear Regulatory Commission (NRC), the implementation of digital systems to monitor and run the power plant introduces new vulnerabilities that must be addressed. The main objectives of a vulnerability assessment (VA) are to identify, quantify, and prioritize all of the susceptibilities inherent in a system. This allows for all weaknesses to be analyzed, and for the most serious concerns to be addressed first. Traditional VA methodologies deal with the analysis of physical systems associated with the NPP; with the introduction of digital control systems and computer networks, these methodologies must be expanded to include these fundamentally different systems and vulnerability concerns. Digital systems have been used in NPPs since the 1980's, but only for non-safety control systems; attacks on these systems were not deemed consequential, and no dedicated VA methodology was required. However, 'all new NPPs are being designed with integrated digital instrumentation and control systems as the backbone of protection, controls, alarms, and display and monitoring'. This gives rise to new vulnerabilities such as disrupted data displays, the suppression of critical alarms, or unauthorized access to secure systems from connected networks. The NRC released formal cybersecurity regulations in March 2009 (10 CFR 73.54), as well as a guide for the program in January 2010 (RG 5.71). However, the regulations and guide provide limited insight on how to identify these vulnerabilities; the focus is on remediating them once found. Hence, there is a need for a comprehensive, systematic methodology to conduct a VA on digital computer and communications and network systems. In this paper, we review traditional VA methodologies and discuss relevant cases. Then we discuss challenges to vulnerabilities within the context of modernization of the fleet and what needs to be done to address this issue.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

Development of functional requirements specification for digital instrumentation and control systems upgrades used at nuclear power plants (NPPs) - 396

Recent market conditions have driven the nuclear industry to become more innovative at reducing cost in order to remain competitive. Instrumentation and Control (I and C) systems used by many NPPs are based on outdated 1960's and 70's technology. Many of the components used in these digital systems are no longer supported by Original Equipment Manufacturers (OEMs) and are rapidly becoming obsolete. Coping with the high cost of replacing I and C equipment due to obsolescence adds to this economic challenge. While other industries have migrated from analog to modern digital I and C technology, implementation of digital I and C controls within the nuclear industry has been very slow. This is primarily due to the high capital cost related to implementation of digital I and C upgrades, which is compounded by regulatory uncertainties that present significant licensing risks. The Nuclear Regulatory Commission (NRC), Nuclear Energy Institute (NEI) and the industry's Digital I and C Working Group are working to address many of the regulatory barriers that adversely impacts implementation of digital upgrades at NPPs. The NRC has developed an 'Integrated Action Plan to Modernize Digital Instrumentation and Controls Regulatory Infrastructure' (ML16097A182), Reference 1. Once fully implemented, this plan is expected to help reduce regulatory uncertainties that affects project cost. Excluding regulatory uncertainty, most OEM's will concur that one of the most important factors in reducing project cost is assuring that all requirements are well defined and complete prior to starting the project. A detailed and high quality Functional Requirements Specification (FRS) is critical in documenting these requirements. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

Graded approach for assessing digital system failure susceptibilities - 305

Owner/operators of nuclear plants must be able to identify and assess susceptibilities to digital system failures and unintended behaviors that could lead to plant system malfunctions, including common-cause failures (CCFs) of multiple controlled components that may impact overall plant safety. Nuclear plant designers and regulators often assess and manage potential failure modes by assuming the failure occurs and showing by analysis that the results are acceptable. In 2016 EPRI published a guideline on Methods for Assuring Safety and Dependability when Applying Digital Instrumentation and Control Systems (EPRI 3002005326), which takes a more holistic approach that considers digital system failure modes from the perspective of their impact on plant risk and includes a graded approach based on safety significance. This paper describes that graded approach. The methodology in EPRI 3002005326 systematically identifies potential I and C vulnerabilities that could lead to significant malfunctions of controlled components and systems, including common-cause failures (CCF), and discusses in detail methods to protect against them. It considers both preventive measures that reduce the likelihood of failures, and plant systems and features that mitigate the effects of component failures and misbehaviors. Coping analysis is then performed as appropriate to provide additional assurance of protection. The safety significance based graded approach is an important feature in that it can help users focus attention on overall plant safety, including potentially risk-significant scenarios that might not be considered in traditional safety analyses. The purpose is to help the user ensure that modifications to the I and C that could potentially be safety significant are treated appropriately and at the same time not waste valuable resources on excessive protection against changes that have little or no impact on safety. The graded approach allows the design engineer to tailor the rigor of the preventive, limiting, and mitigative measures commensurately with the effects the I and C modification has on overall plant safety. The graded approach focuses on safety significance impact, which is effectively a qualitative measure of the potential change in safety (or risk) caused by a proposed I and C modification, as compared to the I and C that is being replaced. Safety significance impact should not be confused with importance to safety or risk significance. It is possible that an upgrade to safety-related and/or risk-significant I and C systems may have little or no safety significant impact and vice versa. The approach considers three factors that influence the impact on safety significance of a proposed I and C modification: context, likelihood of failure, and consequences of failure. The most significant of the three factors is context - what the I and C is connected to, both directly and indirectly, including its potential effects on plant systems that respond to transients or accidents. The graded approach is particularly helpful in assessing potential CCFs resulting from digital I and C failures, and shows why the most problematic CCFs will be those that can affect multiple plant systems. (authors)

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI1993

Nuclear Safety [Vol. 34, No. 1, January-March 1993]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 An Integrated Regional Approach To Risk Management of Industrial Systems, S. Chakraborty and R. Stratton; 9 Annual Technical Meeting of the NRC Cooperative Severe Accident Research Program, E. G. Silver; ACCIDENT ANALYSIS: 13 Deterministic Severe Accident Criteria as Severe Accident Design Criteria and Policy for the New Production Reactor-Heavy Water Reactor, P. T. Rhoads; 20 Proposed Deterministic Severe Accident Criteria for the Heavy Water Reactor-New Production Reactor Containment, K. D. Bergeron, S. E. Slezak, and C. E. Leach; 33 Quasi-Static Core Liquid Level Depression and Long-Term Core Uncovery During a PWR LOCA, Y. Kukita, R. R. Schultz, H. Nakamura, and J. Katayama; 49 LIRA: An Advanced Containment System to Minimize the Accidental Radioactivity Releases, A. Turricchia; 63 Errata to “A Review of Hydrogen Production During Melt/Water Interaction in LWRs,” Vol. 33, No. 4; CONTROL AND INSTRUMENTATION: 64 The Nuplex 80+™ Advanced Control Complex from ABB Combustion Engineering, F. Ridolfo, D. Harmon, and K. Scarola; DESIGN FEATURES: 76 A Scheme for Passive Isolation of the Containment of a Reactor, A. K. Ghosh, V. V. Raj, and K. Kakodkar; 84 Utility Requirements for Safety in the Passive Advanced Light-Water Reactor, T. U. Marston, W. H. Layman, and G. Bockhold, Jr.; WASTE AND SPENT FUEL MANAGEMENT: 91 Activities Related to Waste and Spent Fuel Management, Compiled by M. D. Muhlheim and E. G. Silver; OPERATING EXPERIENCES: 103 Testing Deficiencies in Auxiliary Systems Feedwater Systems, J. D. Kueck; 110 Reactor Shutdown Experience, Compiled by J. W. Cletcher; 113 Selected Safety-Related Events, Compiled by G. A. Murphy; 115 Operating U.S. Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver; RECENT DEVELOPMENTS: 133 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 145 Reports, Standards, and Safety Guides, D. S. Queener; 150 Proposed Rule Changes as of Sept. 30, 1992; ANNOUNCEMENTS: 75 Harvard Short Course on Risk: Science, Assessment, and Management; 102 International Conference on Reactor Physics and Reactor Computations; 102 The Fourth International Conference on Nuclear Waste Reprocessing and Waste Management [RECOD ’94]; 132 International Symposium on the Radiological Exposure of the Population of the European Community from Radioactivity in the Mediterranean Sea [MARINA-MED]; 162 International High-Level Radioactive Waste Conference ‘Technology Integration—Above and Below”; 154 The Authors; 158 Indexes to Nuclear Safety, Volume 33.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2016

Bioreactor with Ipomoea hederifolia adventitious roots and its endophyte Cladosporium cladosporioides for textile dye degradation

In vitro grown untransformed adventitious roots (AR) culture of Ipomoea hederifolia and its endophytic fungus (EF) Cladosporium cladosporioides decolorized Navy Blue HE2R (NB-HE2R) at a concentration of 20 ppm up to 83.3 and 65%, respectively within 96 h. Whereas the AR-EF consortium decolorized the dye more efficiently and gave 97% removal within 36 h. Significant inductions in the enzyme activities of lignin peroxidase, tyrosinase and laccase were observed in roots, while enzymes like tyrosinase, laccase and riboflavin reductase activities were induced in EF. Metabolites of dye were analyzed using UV—vis spectroscopy, FTIR and gas chromatography-mass spectrometry. Possible metabolic pathways of NB-HE2R were proposed with AR, EF and AR-EF systems independently. Looking at the superior efficacy of AR-EF system, a rhizoreactor was developed for the treatment of NB-HE2R at a concentration of 1000 ppm. Control reactor systems with independently grown AR and EF gave 94 and 85% NB-HE2R removal, respectively within 36 h. The AR-EF rhizoreactor, however, gave 97% decolorization. The endophyte colonization additionally increased root and shoot lengths of candidate plants through mutualism. Combined bioreactor strategies can be effectively used for future eco-friendly remediation purposes. - Highlights: • Endophytic fungus on Ipomoea hederifolia promotes root growth and shoot development • Endophytic Cladosporium cladosporioides synergistically degrade Navy Blue-HE2R dye • Endophyte colonized I. hederifolia roots proved superior in dye decolorization • Dye stress and toxicity was efficiently dealt by root-endophyte consortium • Root-endophyte consortium can be used as a sustainable remediation strategy.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2016

Preliminary Cyber-Informed Dynamic Branch Conditions for Analysis with the Dynamic Simplified Cyber MELCOR Model

Instrumentation and control of nuclear power is transforming from analog to modern digital assets. These control systems perform key safety and security functions. This transformation is occurring in new plant designs as well as in the existing fleet of plants as the operation of those plants is extended to 60 years. This transformation introduces new and unknown exploits involving both digital asset induced safety issues and security exploits. Traditional the open literature of nuclear power risk assessment tools and cyber security assessment methods have not been modified or developed to address the unique nature of cyber failure modes and of cyber security threats. Starting in 2015, Sandia National Laboratories (SNL) embarked on a two year dynamic cyber-risk informed project to facilitate the analysis of unique cyber failure modes and the time sequencing of cyber faults, both malicious and non-malicious, and impose those cyber exploits and cyber faults onto a nuclear power plant accident sequence simulator code to assess how cyber exploits and cyber faults could interact with a plant's digital instrumentation and control (DI and C) system in the absence of digital controls. This will be achieved by coupling SNL's existing dynamic scheduler code (ADAPT), nuclear accident simulator code (MELCOR), and cyber Emulytics code (SCEPTRE) to demonstrate real-time simulation of cyber exploits and their impact on automatic DI and C responses. Studying such potential time-sequenced cyber-attacks and their risks (i.e., the associated impact and the associated degree of difficulty to achieve the attack vector) as they pertain to accident management will provide a risk informed basis for developing effective cyber security controls for nuclear power. This paper will discuss the rationale behind the proposed generic cyber exploits for an abstracted Pressurized Water Reactor that has adopted a unified DI and C System. Other papers related to this project submitted to this conference discuss: - The MELCOR model for this abstracted reactor, called the Dynamic Simplified Cyber (DSC) model, - Modifications to ADAPT to: Extend the framework for multiple simulators, Incorporation of importance measures into dynamic event tree analysis, Sort and reduce the dynamic event tree based upon inputs to or outputs from the tree, and - A feasibility study for using density based clustering methods with dynamic time wrapping to cluster and prune dynamic event trees. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

Using Generative AI to implement the discrepancy checker for a Nearly Autonomous Management and Control System for Advanced Reactors

Developments related to generative artificial intelligence (AI) have brought a major breakthrough in AI. These developments are rapidly accelerating developments in different science and engineering applications. Nearly Autonomous Management and Control (NAMAC) system provides recommendations to the operator for maintaining the safety and performance of the reactor. The discrepancy checker (DC) is an important component of the NAMAC) system, whose goal is to determine if the plant is moving towards the expected system state after the control actions are injected. In this work, we explore generative AI methods, particularly, a generative pretrained transformer (GPT) for implementing the DC function in NAMAC. The GPT-based DC aims to alert the operator in situations outside NAMAC’s scope and act as a chatbot the operator can use to retrieve relevant information. This study involves two versions of GPT developed by OpenAI: GPT-3.5 and GPT-4. These GPTs are trained on huge amounts of undisclosed general domain datasets. We explored two methods to adapt GPTs for DC implementation in NAMAC: fine-tuning and retrieval augmented generation. A small knowledge base (information file) that encompasses rules for DC implementation and some general information related to NAMAC has been created to support DC implementation using GPT. In this work, the GPT-based DC implementations have been tested for their reasoning abilities, comprehension, information retrieval, and extraction abilities. It should be noted that this paper only presents a preliminary study to test the feasibility of DC implementation using generative AI technology. Given the potential risks and severe consequences associated with nuclear reactor applications, combined with the black-box nature of AI, extensive offline and online testing and reliability analyses of GPT-based DCs are needed for further developing such capabilities.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI1994

Nuclear Safety [Vol. 35, No. 2, July-December 1994]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 179 Consideration of Postaccident Consequences in the Determination of Safety Objectives for Future Nuclear Power Plants in France, D. Queniart, A. Sugier, and J. Lochard; ACCIDENT ANALYSIS: 187 Nuclear Safety Research: The Phebus FP Severe Accident Experimental Program, P. von der Hardt, A. V. Jones, C. Lecomte, and A. Tattegrain; 205 Containment Performance Analysis of the Advanced Neutron Source Reactor at the Oak Ridge National Laboratory, S. H. Kim, R. P. Taleyarkhan, and V. Georgevich; 213 Assessment of Fission Product Deposits in the Reactor Coolant System: The DEVAP Program, G. Le Marois and M. Megnin; 222 Erratum to “A Review of the Available Information on the Triggering Stage of a Steam Explosion," Vol. 35, No. 1, CONTROL AND INSTRUMENTATION: 223 Effects of Normal Aging on Calibration and Response Time of Nuclear Plant Resistance Temperature Detectors and Pressure Sensors, H. M. Hashemian; DESIGN FEATURES: 235 Defense in Depth Against the Hydrogen Risk—A European Research Program, F. Fineschi; ENVIRONMENTAL EFFECTS: 246 Technical Note: A Preliminary Analysis of the Risks to Hong Kong Resulting from Potential Accidents of Daya Bay Nuclear Power Plant, Z. Shi and X. Wei; OPERATING EXPERIENCES: 253 Reactor Shutdown Experience, Compiled by J. W. Cletcher; SPECIAL SECTION ON TMI-2 VESSEL INVESTIGATION PROJECT: 256 Three Mile Island—New Findings 15 Years After the Accident A. M. Rubin and E. Beckjord; 269 Relocation of Molten Material to the TMI-2 Lower Head, J. R. Wolf, D. W. Akers, and L. A. Neimark; 280 Insight Into the TMI-2 Core Material Relocation Through Examination of Instrument Tube Nozzles, L. A. Neimark; 288 Physical and Radiochemical Examinations of Debris from the TMI-2 Lower Head, D. W. Akers and B. K. Schuetz; 301 Results of Metallographic Examinations and Mechanical Tests of Pressure Vessel Samples from the TMI-2 Lower Head, D. R. Diercks and G. E. Korth; 313 Margin-to-Failure Calculations for the TMI-2 Vessel, J. Rempe, L. Stickler, S. Chavez, G. Thinnes, R. Witt, and M. Corradini; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 328 1993 Accident Sequence Precursor (ASP) Program Results, L. N. Vanden Heuvel, J. W. Cletcher, D. A. Copinger, J. W. Minarick, B. W. Dolan, and P. D. O’Reilley; RECENT DEVELOPMENTS: 339 Reports, Standards, and Safety Guides, D. S. Queener; 345 Proposed Rule Changes as of June 30, 1994; ANNOUNCEMENTS: 234 Thirty-First Annual Meeting of the National Council on Radiation Protection and Measurements; 356 1995 International Incineration Conference; 358 Fifth International Controls and Instrumentation Conference; 359 ANS International Topical Meeting on Safety of Operating Reactors; 359 Fifth International Conference on Nuclear Criticality Safety; 360 International Conference on Probabilistic Safety Assessment Methodology and Applications; 351 The Authors; 357 Reviewers of Nuclear Safety, Vol. 35.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2017

Dynamic attack surfaces in nuclear power plants - 162

In this paper, we will summarize a group of architectural principles that inform the development of secure control system architectures, followed by a methodology that allows designers to understand the attack surface of components and subsystems in a way that supports the integration of these surfaces into a single attack surface. We will then show how this methodology can be used to analyze the control system attack surface from a variety of threats, including knowledgeable insiders. We close the paper with an overview of how this approach can be folded into a more rigorous mathematical analysis of the system to define the system's security posture. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2017

Spurious actuations in digital instrumentation and control systems - evaluation framework - 137

When a digital Instrumentation and Control (I and C) system or its associated components produce an unintended operation, it is known as a spurious actuation. Spurious actuations could lead to unnecessary challenges to safety equipment, challenge the ability of safety systems to provide their intended functions, or place the plant in an un-analyzed state. There is arguably a lack of clear and sufficient regulatory guidance for assessing spurious actuations. In an attempt to address this guidance gap, this paper provides a generic framework for evaluating spurious actuations in digital I and C systems, components, or supporting systems that are important to safety. The framework provides a methodology for: (1) defining the scope of the evaluation including supporting assumptions; (2) providing options for excluding a spurious actuation from the evaluation; (3) assessing the potential consequences from the assessed spurious actuations; and, (4) defining a high-level acceptance criteria. The methodology discussed by this paper is not to be construed as a requirement, regulation, or acceptable guidance by either domestic or international regulators; instead, it is intended to serve as a potential foundation or technical basis to be used for developing clear and sufficient regulatory guidance for assessing spurious actuations in digital I and C systems. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1988

Aeroassisted orbital transfer vehicle control technology

The focus of this control has been to develop the control technology required to identify the sophistication required for the Aeroassisted Orbital Transfer Vehicle (AOTV) control system. An angle of attack, bank angle command control technique has been developed which uses either on-off thruster or proportional thruster. An angle of attack adaptive controller was included to minimize the reactor control system (RCS) usage due to payload center of gravity uncertainties. The guidance and control techniques were verified using a detail six degrees-of-freedom simulation. Mission sensitivity was developed for uncertainties in the entry state, mass properties, atmosphere, aerodynamic, and sensor.

Langehough, M. A.↗
DOE OSTI2017

Impacts of common cause failure regulatory requirements on protection system architectures - 304

Regulatory-based design considerations for potential common cause failures (CCF) in digital instrumentation and control (I and C) systems have evolved over time and have impacted the development of protection system I and C architectures. The single failure criterion used to be the main design driver for a protection system I and C architecture and resulted in the familiar four-fold and three-fold system architectures. The single failure criterion has now been replaced by the conservative assumptions associated with digital CCF concerns (i.e., assumed digital CCF coincident with an anticipated operational transient or postulated accident) which are classified as 'beyond design basis events' by regulatory authorities. It is unusual for a beyond design basis event to be the controlling factor for a safety system design but that is now the reality for I and C system designers. The preferred regulatory solution is to introduce diversity into I and C system designs to guard against the general concern of digital CCF. However, the lack of clear criteria on how to define sufficient diversity (i.e., how much, what kind, and whether it is linked to identified digital CCF vulnerabilities) had led to more complex I and C architectures. The trend has been towards lengthy and more difficult reviews for the treatment of digital CCF vulnerabilities and I and C system architectures because of the subjective definition of digital CCF vulnerabilities and the lack of clear acceptance criteria for diversity strategy. Improvement in the treatment of digital CCF is needed to reverse the trend of increased I and C system architecture complexity and longer regulatory reviews. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗