SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Real Time In-Core Instrumentation: From Fuel and Materials Irradiation tests to Advanced Reactor Demonstration -Flux Sensors Project Summary
Functional analysis is a universal methodology, which is able to support NPP and I and C design process. The paper proposes an approach to combining the functional analysis process and I and C design process into a single I and C functional design process. Operation of a system is considered as a set of functions providing not only the achievement of goal, but also keeping material and energy balances. A notation for graphical representation of semantic network (hierarchy of functions) describing a system is suggested. This network includes four levels, namely functional goals, abstract functions level, process functions level, and equipment level. The elements of the hierarchy are connected by three kinds of relationships, namely: parent-child, main-support, and cause-consequence. Then the semantic network (hierarchy) of functions is converted into a functional network which looks as a directed graph. This graph is used for development of control algorithm and for building of instrumentation and control functions hierarchy. Farther analysis of process functions reveals a set of criteria indicating real-time status and effectiveness of functions. The criteria are used for allocation of instruments and actuators. The process of functional analysis and design is illustrated in application to a simple heat generation system. (authors)
Experimental measurement of gaseous fission product release with respect to temperature and burnup is a critical aspect of understanding nuclear fuel performance, validating predictive models, and qualifying new fuels. To measure this phenomenon in real-time, Oak Ridge National Laboratory has developed an instrument for measuring in situ fission gas release from small-scale fuel samples irradiated in the High Flux Isotope Reactor (HFIR). The instrument uses a continuous flow of Heover the fuel samples to sweep gaseous fission products from a sealed capsule in the HFIR Be reflector to an instrument station adjacent to the reactor. The instrument station houses two high-purity germanium (HPGe) detectors that measure decay gamma rays from fission products passing through a room temperature dwell chamber placed over the detector crystal. The sealed capsules in the reactor are designed to modulate fuel sample temperatures between 700 and 1,100°C by changing the Ar/He gas mixture surrounding the capsules during irradiation. N-type thermocouples are incorporated into the capsule housing to record real-time fuel temperatures. The capsules are heated primarily by prompt gamma rays emitted from the HFIR core with minimal heat contributions from fission in the fuel samples to minimize temperature gradients in the specimens for separate-effects characterization of the material. This paper describes modeling of time-dependent nuclear heating and fission product formation in fuel samples, thermal characteristics of the in-core capsules, and expected gaseous fission product gamma spectra at the HPGe instrument station.
Irradiation creep compliance is a critical parameter for evaluating the stress evolution of silicon carbide (SiC) components during operation in various reactor concepts. Recent instrumented irradiation creep testing of SiC, performed at low dose in the Halden reactor, showed a creep compliance that is orders of magnitude higher than previous un-instrumented bend relaxation experiments performed in the High Flux Isotope Reactor (HFIR). This discrepancy illustrates the need for additional irradiation creep data for SiC. To this end, a novel irradiation capsule design has been developed to test miniature SiC tensile specimens under loading during irradiation in the HFIR. The experiment design uses the coolant pressure of the HFIR to compress a bellows, which applies the loading on the specimen. Preliminary thermal finite element models were developed to estimate the temperature distribution within the specimen and surrounding capsule components. Similar structural models were developed to evaluate the stress distribution within the specimen. The thermal analyses show that within the gauge section, the specimen temperatures remain within ~10°C of the nominal 300°C design temperature. Similarly, the structural analysis predicts axial stresses within ~10 MPa of the target stress of 100 MPa. These initial analyses show that irradiation creep testing of SiC in the HFIR is feasible and could provide a low-cost, high-throughput vehicle for gathering needed irradiation creep data.
Validating fuel performance codes, such as BISON, requires an extensive amount of experiments covering a wide range of operating conditions and fuel types. Within the light-water reactor (LWR) space, there have been several international experimental programs that have contributed to the wealth of available experimental data available for use. One of those international programs, the Halden Reactor Project (HRP), began in 1958 and utilized the Halden Boiling Water Reactor to conduct many highly instrumented experiments until the reactor closed in 2018. Idaho National Laboratory, through the U.S. Department of Energy, has utilized several Halden experiments to perform the initial validation of the BISON code based upon their inclusion in international modeling and simulation benchmarks. Recently, the HRP has provided member organizations a complete copy of all available data, reports, and presentations since the HRP began. This report provides an initial exploration of the data available in the database for use in validating the multiscale models under development in the Nuclear Energy Advanced Modeling and Simulation (NEAMS) program for LWR applications. Ranking tables that identify potential validation cases are provided for the high priority models of interest. It was found that some of the recommended high priority experiments correspond to additional rods in existing assemblies already available in the BISON validation suite. It is expected that several of these cases will be incorporated into future NEAMS milestones in the fuels technical area for increased validation of BISON.
The U.S. nuclear power industry primarily relies on mature, well-proven analog technology as the basis for most instrumentation and control (I and C) equipment employed in its nuclear power plants (NPPs). However, the market for this legacy instrumentation is very small and availability of such equipment for spare parts or replacement is increasingly limited. Frequently, modern I and C equipment contains embedded digital devices (EDDs), such as microprocessors and programmable logic devices. While the enhanced functional capabilities provided by the digital components offer improved performance, reliability, and maintainability, the corresponding complexity of sophisticated digital implementations also exacerbate concerns about an increased potential for undetected systematic faults, which can lead to common-cause failure (CCF). As part of a research project sponsored by the U.S. Department of Energy, an investigation has been conducted of commercially available instrumentation marketed for nuclear or industrial application. The objective was to identify the usage of EDDs and to determine the types of functional roles allocated to the devices. Examples of the equipment surveyed include smart sensors, sequencers for emergency diesel generators, pumps, valve actuators, motor control centers, breakers, priority logic modules, and uninterruptible power sources. Where sufficient detail was found, an evaluation was performed to ascertain the nature and role of the digital technology implemented in the instrumentation. The information gained through this investigation serves as technical input for defining a classification approach for EDDs based on the functional impact of the device. For example, the role of an EDD can involve any of the following functions: performance monitoring and diagnostics, information extraction and communication, instrument condition monitoring and protection, or execution of core instrument functions. Classifying digital devices according to their role in the operation of the instrumentation in which they are embedded can enable determination of the potential functional impact of failure of that device and contribute to determination of the potential safety significance of a CCF event disabling all instances of that device. This paper will report on the findings of the investigation of instrumentation with EDDs and indicate considerations for the emerging classification approach. The higher-level goal of this effort is to determine whether a graded approach to qualification testing may be possible based on classification. (authors)
When a digital Instrumentation and Control (I and C) system or its associated components produce an unintended operation, it is known as a spurious actuation. Spurious actuations could lead to unnecessary challenges to safety equipment, challenge the ability of safety systems to provide their intended functions, or place the plant in an un-analyzed state. There is arguably a lack of clear and sufficient regulatory guidance for assessing spurious actuations. In an attempt to address this guidance gap, this paper provides a generic framework for evaluating spurious actuations in digital I and C systems, components, or supporting systems that are important to safety. The framework provides a methodology for: (1) defining the scope of the evaluation including supporting assumptions; (2) providing options for excluding a spurious actuation from the evaluation; (3) assessing the potential consequences from the assessed spurious actuations; and, (4) defining a high-level acceptance criteria. The methodology discussed by this paper is not to be construed as a requirement, regulation, or acceptable guidance by either domestic or international regulators; instead, it is intended to serve as a potential foundation or technical basis to be used for developing clear and sufficient regulatory guidance for assessing spurious actuations in digital I and C systems. (authors)
Regulatory-based design considerations for potential common cause failures (CCF) in digital instrumentation and control (I and C) systems have evolved over time and have impacted the development of protection system I and C architectures. The single failure criterion used to be the main design driver for a protection system I and C architecture and resulted in the familiar four-fold and three-fold system architectures. The single failure criterion has now been replaced by the conservative assumptions associated with digital CCF concerns (i.e., assumed digital CCF coincident with an anticipated operational transient or postulated accident) which are classified as 'beyond design basis events' by regulatory authorities. It is unusual for a beyond design basis event to be the controlling factor for a safety system design but that is now the reality for I and C system designers. The preferred regulatory solution is to introduce diversity into I and C system designs to guard against the general concern of digital CCF. However, the lack of clear criteria on how to define sufficient diversity (i.e., how much, what kind, and whether it is linked to identified digital CCF vulnerabilities) had led to more complex I and C architectures. The trend has been towards lengthy and more difficult reviews for the treatment of digital CCF vulnerabilities and I and C system architectures because of the subjective definition of digital CCF vulnerabilities and the lack of clear acceptance criteria for diversity strategy. Improvement in the treatment of digital CCF is needed to reverse the trend of increased I and C system architecture complexity and longer regulatory reviews. (authors)
As the instrumentation and control (I and C) systems in nuclear power plants (NPPs) have been replaced with digital-based systems, the need to incorporate software failures into NPP probabilistic risk assessments has arisen. In order to assess the probability of software failure on demand, a Bayesian belief network (BBN) model was developed which estimates the number of defects and the resulting probability of software failure on demand in nuclear safety-related software. To assess the feasibility of the BBN framework, the BBN model was applied to the prototype Integrated Digital Protection System-Reactor Protection System (IDiPS-RPS) to estimate the number of remaining faults and the software failure probability of a target software. The developmental- and V and V-activities carried out during the IDiPS-RPS development process were evaluated based on the well-defined checklist derived by the V and V team and were estimated based on expert elicitation. In addition, the attribute evaluations and the number of FPs of the target software is provided as the inputs for the BBN model. The application results showed the feasibility of using BBNs for quantifying software failure probabilities and several insights were gained from the applications of the BBN model. The proposed BBN framework can be applied to estimate the software failure probability for other safety-related NPP software and provide an insight on modeling the software development process that involves iterations between different development phases. (authors)
Cybersecurity requirements and controls for digital I and C systems are increasingly added to well-established safety-oriented provisions. Interactions and potential side-effects are possible and must be mastered, taking into account the nuclear I and C system specificities as well as their normative and regulatory contexts. The new international standard IEC 62859 'Nuclear power plants - Instrumentation and control systems - Requirements for coordinating safety and cyber security' aims to optimize the integration of cybersecurity provisions in nuclear I and C architecture and systems, to prevent conflicts between safety and cybersecurity provisions, and to aid the identification and the leveraging of the potential synergies between safety and cybersecurity. The paper presents the structure and the key aspects of this standard. IEC 62859 is structured along three main sections: one dealing with the overall I and C architecture, a second one focusing on the system level, a third one dealing with organizational and procedural issues. The paper also discusses related work in the nuclear industry, and in other sectors. (authors)
The paper discusses approach, applicable to certify digital instrumentation and control (I and C) platform under US Nuclear Regulatory Commission (NRC) requirements. Currently, Radics LLC is certifying its Field-Programmable Gate Array (FPGA)-based RadICS Platform using Platform-based test specimen. The Platform has been recently certified under IEC 61508 to meet Safety Integrity Level (SIL) 3 requirements. Up to now Radics LLC has developed a number of FPGA-based I and C applications based on RadICS Platform. Those applications include applications based on customer's specification and reverse engineering applications (Fit, Form and Function reproduction of existing equipment). The life cycles of applications include independent verification and validation of FPGA-based I and C systems/components, Commercial Grade Dedication of components for FPGA-based I and C systems, turnkey implementation of I and C project, supply of hardware, engineering tools and application design process. The paper also describes in details certification approach, which is based on Digital I and C-ISG- 06 and includes the following stages: general agreement with the US NRC, Topical Report submittal, timely responses and successful audits, and timely issuance of approved Topical Report. Such approach is supported by 10 CFR 50 Appendix B Quality Management System, which is also discussed in the paper. In addition, an overview of RadICS Platform Topical Report is presented, including its overview and structure, certification scope and obligatory appendixes. (authors)
Since the digital instrumentation and control systems are expected to play an important role for the safety systems in nuclear power plants (NPPs), the need has emerged to not only establish a basis for incorporating software behavior into digital I and C system reliability models, but also to quantify the failure probability of the software used in NPP digital protection systems. In this study, a Bayesian belief network (BBN) model is developed to quantitatively assess software reliability by estimating the number of faults in a software program considering its software development life cycle (SDLC). The model structure and parameters are established based on the information applicable to NPP safety-related systems and the evidence used to construct and quantify the BBN model was collected from three stages of expert elicitation. The software failure probability is estimated from the number of residual defects in a software program at the end of SDLC phase. As a case study, the BBN model was applied to quantify the software reliability of a typical digital protection software having the size of 50 function points and having the Medium development and validation and verification (V and V) qualities. The developed model can be applied to estimate the failure probability for both developing and deployed safety-related NPP software, and such results can be used to evaluate the quality of the digital I and C systems in addition to estimating potential reactor risk due to software failure. (authors)
Modern digital instrumentation and control (I and C) systems offer nearly unlimited functional capability. However, the complexity of their design (including their system software and application software) is significantly higher than that of conventional, hardwired systems, to the point that it is generally impossible to demonstrate that there are no residual design errors, even when the best development and verification techniques have been applied. When activated by specific conditions, design errors could result in systematic failures, i.e., failures that occur deterministically each time and wherever an activating condition is present. Redundancy could be defeated when the same design error affects multiple channels or systems, and the activating condition affects several of these channels or systems. In the case of safety I and C systems, most of the functions are poised protection functions that must be actuated when and only when a demand situation occurs in the plant. In nuclear power plants, the most dangerous failure mode for such functions generally is failure to actuate, and many measures are taken to protect from such failure mode. This paper considers the other failure modes of safety I and C functions, and also the failure modes of the other I and C functions that are less important to safety. It is not limited to poised functions, and considers other types of functions such as regulation functions or human interface functions. It proposes a framework for analyzing and providing defense against spurious actuations and other incorrect behaviors from digital I and C systems directly interacting with the plant process or with operators: these might be useful for example to justify that design bases for reactor protection are adequate, or to ensure plant performance and availability. (authors)
The paper discusses importance of secure development and operational environment establishment process, its particular stages, including security-oriented analysis and assessment of safety-critical instrumentation and control (I and C) systems. Two particular aspects are covered - security assessment and security assurance related to processes established by Quality Management System (QMS). One of the underlying ideas for the security assessment approach is in performance of gap analysis. Such analysis considers influence of all different factors within I and C system development process, and further application of Intrusion Modes and Effect Criticality Analysis (IMECA) technique. It makes the approach applicable to various safety-critical systems, considering underlying technologies (for example, Field-Programmable Gate Arrays (FPGA). Nowadays FPGA technology is often used in wide spectrum of hardware devices - from personal devices to complex I and C systems for Nuclear Power Plants (NPPs). The problem of cyber security assessment and assurance for FPGA technology in general and its application in safety-critical I and C systems in particular is not completely solved due to several reasons that cover regulations, QMS processes, implementation of development and verification activities, etc. The paper overviews existing regulations, which cover various aspects of NPP I and C systems development and operation, FPGA technology implementation, and secure development and operational environment establishment and assurance. The paper also emphasizes that complex approach should be used to identify and mitigate all specific vulnerabilities thorough the whole life cycle on the basis on Intrusion Modes, Effect and Criticality Analysis technique. The paper also proposes approach to the development of safety-critical I and C systems in the scope of cyber security assurance process at developer site. Secure development environment is described as a key factor during the development process and the paper also discusses establishment and maintenance of such environment as a part of company's Nuclear Quality Assurance's QMS. (authors)
The Advanced Test Reactor (ATR) is a versatile nuclear research reactor located at the Idaho National Laboratory (INL) in Eastern Idaho, United States of America. It is one of the most powerful and flexible research reactors in the world and is primarily used for materials testing, isotope production and basic nuclear science research. The ATR is a light-water-cooled, beryllium-moderated reactor with a nominal thermal power capacity of 250 MW utilizing specially designed fuel, arranged in a serpentine pattern to create 9 flux traps. The special design of ATR allows for the neutron flux within each of the flux traps providing flexibility for experiments, programs and allowing experiments with different dose requirements to be irradiated simultaneously. The Advance Test Reactor Critical (ATRC) is a full-scale replica of the ATR core but is housed in a pool instead of a pressure vessel. ATRC is usually operated at less than 600 watts [1]. There are 12 dry instrument thimbles located around the outside of the core tank where a variety of measurement equipment is housed to facilitate reactor operations. Currently Instrument Thimble 11 (IT-11) is not utilized in ATR or ATRC. A range of measurements is ongoing to qualify IT-11 as a test platform for nuclear instrumentation research, development and further experimentation.
Nuclear power plants (NPPs) increasingly apply digital equipment for instrumentation and control (I and C) systems. During the life cycle of NPPs the operators, designers and manufactures are facing the need to replace or upgrade obsolete equipment or to implement new digital I and C systems. A relatively new challenge in this area is the deployment of programmable logic devices (PLDs) for the equipment of I and C systems. Regulatory approval for safety and safety related I and C systems demands confirmation of evidence that design as well as verification and validation (V and V) processes have ensured that the application of new equipment will fulfil safety and reliability requirements and its intended design function. The objective of the recent research project of GRS is developing a systematic approach for the assessment of PLD-based equipment in safety and safety-related I and C systems regarding the fulfilment of regulatory requirements and identification of undesired failure effects. A generic approach for the safety-oriented assessment of PLD-based equipment has been developed, based on the principles of a Plan-Do-Check-Act (PDCA) cycle. The approach comprises planning of the assessment, predefined analysis steps and methodologies, as well as required input information, criteria for decision making process, the tasks concerning identification of improvement potential and determining documentation. (authors)
Apparatuses and methods produce radioisotopes in instrumentation tubes of operating commercial nuclear reactors. Irradiation targets may be inserted and removed from instrumentation tubes during operation and converted to radioisotopes otherwise unavailable during operation of commercial nuclear reactors. Example apparatuses may continuously insert, remove, and store irradiation targets to be converted to useable radioisotopes or other desired materials at several different origin and termination points accessible outside an access barrier such as a containment building, drywell wall, or other access restriction preventing access to instrumentation tubes during operation of the nuclear plant.
Standards are promoting the enhancement of cybersecurity in Nuclear Power Plants (NPP). Standardizing processes and procedures are also crucial to achieve successful international collaboration. Many information security standards were developed in recent years; however, not many of them could be directly applied to NPPs. This paper provides an overview of the development of a new cybersecurity standard dealing with cybersecurity controls for nuclear power plants around the world. For I and C systems in NPPs, the new IEC 63096 standard targeted for issue in 2019, focuses specifically on the selection and application of cybersecurity controls from the included security controls catalogue. The role of selected and applied cybersecurity controls is to prevent, detect and react to digital attacks against computer-based I and C systems. This standard applies to the I and C of new nuclear power plants and to the I and C modernization in existing plants. It is being prepared and based on IEC 62645 , ISO/IEC 27000 series , IAEA , and country specific guidance in this expanding the technical and the security focus area. The Standard is intended to be used by designers and operators of NPPs (utilities), systems evaluators, vendors and subcontractors, and by licensors. While the development of international standards is essential it is also a lengthy process, taking multiple years. Especially with regard to cybersecurity, all involved stakeholders have to collaborate. (authors)