05000313/LER-2003-001
Docket Number | |
Event date: | 08-29-2003 |
---|---|
Report date: | 10-28-2003 |
Reporting criterion: | 10 CFR 50.73(a)(2)(iv)(A), System Actuation |
3132003001R00 - NRC Website | |
A. Plant Status (ANO-1) was operating in Mode 1 at approximately 100 percent power. The ANO-1 area was experiencing inclement weather in the form of thunderstorm activity.
Event Description
At 1428 CDT on August 29, 2003, ANO-1 experienced an automatic actuation of the Reactor Protection System (RPS)[JC] due to high Reactor Coolant System (RCS)[AB1 pressure. The RCS high pressure condition was caused by the closure of the main turbine governor valves. The closure of these valves was likely due to a lightning-induced Electro Hydraulic Control (EHC)rNfl System malfunction. All control rods fully inserted and the unit was in stable Not Standby conditions (Mode 3) shortly after the reactor trip.
Following the reactor trip, the main generator output breakers failed to open automatically due to failure of both the primary and secondary reverse power relays to trip. The output breakers were manually opened approximately 1.5 minutes after the reactor trip in accordance with post-trip procedures. The main turbine tripped as a result of the reactor trip.
Main Feedwater Block Valve CV-2675 to the "B" Once-Through Steam Generator (OTSG) [AB] failed to fully close resulting in erratic control of feedwater flow to the steam generator. The "B" Main Feedwater (MFW)(Sji Pump was placed in manual in an attempt to control steam generator level. When steam generator level reached the automatic actuation setpoint, the Emergency Feedwater Initiation and Control (EFIC) [JB] System actuated as expected and initiated Emergency Feedwater (EFW)[B10 flow to the affected steam generator. EFW flow quickly restored the steam generator level to setpoint. Both MFW pumps remained operable throughout the transient and MFW flow was never lost. The EFW System recirculated for approximately two hours. Valve CV-2675 was manually closed at 1713. The Auxiliary Feedwater ISJ] Pump was placed in service and the EFW and MFW pumps were secured.
Fifteen main steam safety valves (MSSVs) [SB] lifted. All valves performed satisfactorily. MSSV PSV-2697 did not appear to lift.
The highest pressure indicated for the PSV-2697 steam header was less than the +3 percent setpoint margin for this valve; therefore, the performance of PSV-2697 was determined to be acceptable.
The Reactor Protection and Emergency Feedwater Systems performed as designed. No technical specification limits were exceeded.
C. Root Cause
The reactor trip was initiated by an electrical perturbation that caused a malfunction of the Main Turbine EHC System. The lightning-induced electrical perturbation simulated an "output breaker open" permissive causing the EHC System to change control states briefly. The change in the control signal resulted in closure of the main turbine governor valves.
The main generator output breakers failed to open automatically due to failure of both the primary and secondary reverse power relays to trip. The primary reverse power relay is set to actuate three seconds after sensing a reverse power of greater than 2MWe. If the primary relay fails to operate, the backup reverse power relay should actuate in 30 seconds. The primary relay failed due to binding. The secondary relay was found to be nonfunctional due to a flaw in the control logic that deenergized the relay before it could actuate.
In addition, Main Feedwater Block Valve CV-2675 did not fully close due to the failure of its valve operator. CV-2675 is an 18-inch gate valve with a two-speed motor operator powered by 480 volt AC. The speed change in the operator, accomplished by the use of high-speed and slow-speed clutches, gives the motor operator the ability to close the valve at high speed, but protects the valve from seating damage by slowing during the last 5 percent of travel. The high-speed and slow-speed clutches are DC powered. To obtain the required DC supply from the 480 volt source, the motor operator has an integral full-wave bridge rectifier, followed by fly-back capacitors. Troubleshooting revealed that two of the four diodes of the full-wave rectifier were damaged. This condition degraded the DC supply to the clutches and prevented clutch operation. The damage to the rectifier diodes was likely caused by a bad connection on one of the fly-back capacitors. This allowed the collapsing magnetic field from the high-speed clutch to be impressed across the diode bridge.
D. Corrective Actions
Following replacement of the damaged components, testing was performed to verify operability of Main Feedwater Block Valve CV-2675.
The primary reverse power relay for the main generator output breaker was replaced with a new unit, eliminating the binding condition that was found on the failed relay. The main generator output breaker was tested to verify operability of the system.
The trip logic of the backup reverse power relay will be I corrected during the next refueling outage scheduled for the NRC FORM MA (1.2C01) Arkansas Nuclear One - Unit 1 � 05000313 � 2003 001 � 00 FACILITY NAME (1) 001 � 00 LER NUMBER6) (.,
PAGE
spring of 2004. Operations personnel have been provided with contingency actions during the interim period of plant operation.
A functional test of the EHC System was conducted and no problems were identified. The system's power supplies were tested and found satisfactory.
Improvements to the EHC System are being developed to provide circuit isolation for the main generator output breaker contact to prevent false breaker indication due to lightning.
Safety Significance
The RPS initiated a reactor trip upon reaching the high RCS pressure setpoint as designed. The plant response to the transient was complicated by the failure of a main feedwater block valve to fully close. The EFIC System actuated as a result of low steam generator level and initiated EFW flow to the affected steam generator.
Although this event was complicated by equipment malfunctions, the unit was returned to normal post-trip parameters shortly after the trip. Therefore, this event is considered to be of low safety significance.
Basis for Reportability Automatic actuations of the Reactor Protection System and Emergency Feedwater System are being reported in accordance with 10CFR50.73(a)(2)(iv)(A). An initial report of this event was made to the NRC Operations Center at 1559 CDT on August 29, 2003, in accordance with 10CFR50.72(b)(2)(iv)(B) and 10CFR50.72(b)(3)(iv)(A). Supplemental notifications were made to the NRC Operations Center at 0044 CDT and 1815 CDT on August 30, 2003.
Additional Information
Although there have been previous lightning-induced plant transients, the only previous similar event was reported in LER 50-313/86-004-00 (letter 1CAN058604 dated May 8, 1986).
The valve operator for Main Feedwater Block Valve CV-2675, model SMB-4, was manufactured by Limitorque Corporation (MFR Code L200). The main generator output breaker primary reverse power relay, model 12GGP53C1A, was manufactured by General Electric Company (MFR Code G080).
Energy Industry Identification System (EIIS) codes are identified in the text as [XX].