ML14078A636
| ML14078A636 | |
| Person / Time | |
|---|---|
| Site: | MIT Nuclear Research Reactor |
| Issue date: | 03/06/2014 |
| From: | Lau E Massachusetts Institute of Technology (MIT) |
| To: | Office of Nuclear Reactor Regulation |
| Hardesty D | |
| Shared Package | |
| ML14078A659 | List: |
| References | |
| TAC MF3106 | |
| Download: ML14078A636 (25) | |
Text
MIT Research Reactor MIT Research Reactor Edward S. Lau Assistant Director of Reactor Operations MIT Nuclear Reactor Laboratory Phase 0 Review of MITR Approach to a Digital I&C Upgrade to a Digital I&C Upgrade March 6 2014 March 6, 2014
Discussion Topics
Existing MITR Nuclear Instrumentation & Control
Upgrade to Digital Nuclear Safety System
Fission Chambers & Pre-Amplifiers
Description of DWK 250 Channel
Description of Scram Logic Circuit
Security & Cyber Vulnerability Evaluation License Amendment Request Documents & Schedule
License Amendment Request - Documents & Schedule
Questions & Comments Phase 0 Review Meeting 2
Existing MITR Nuclear I&C Ten channels - Channels #1 through #9 plus Channel #N-16 Channels #1 through #6 are the six fully analog nuclear safety channels to be upgraded to digital Ten channels Channels #1 through #9 plus Channel #N 16 pg g
Ch. #1 through #3 for short reactor period scram Ch #4 th h #6 f Ch. #4 through #6 for high neutron flux level scram Ch. #1 & #2 operate on fission h
b f
d chambers for source range and are switched to ion chambers for power range Ch #3 operates on ion chamber that comes on scale starting 0 5 kW 3
Phase 0 Review Meeting Ch. #3 operates on ion chamber that comes on scale starting ~0.5 kW
Operational Specifications for Nuclear Safety System Ch. #1 - 6 Two out of three period and flux level channels must be operable Two out of three period and flux level channels must be operable whenever the reactor is critical Short period trip at 10 seconds High neutron flux level trip at 6.5 MW (80 kW without primary flow)
Time from initiation of scram signal to 80% control rod insertion is < 1 second.
Channel tests quarterly, before each startup, and after repair or de-energizing 4
Quarterly channel calibration on startup checklists (annual per Tech Spec)
Phase 0 Review Meeting
Instrument Transition from Source Range to High Power Range Prior to startup, Ch. #1 & 2 are on scale with their fission chambers; Ch. #3 is not on scale
~0.5 kW Ch. #3 comes on scale; switch Ch. #1 to ion chamber When Ch. #1 on ion chamber comes back on scale, switch Ch. #2 to ion chamber By 2 kW, Ch. #2 on ion chamber comes back on scale, so all three are now on scale on ion chambers Throughout the startup, Ch. #4 through Ch. #6 are on scale with their ion chambers; perceptible readings appear ~500 kW 5
Phase 0 Review Meeting
Proposed Upgrades for the Nuclear Safety System R
l Ch l #1 6
Replace Channels #1 - 6
Wide-range operation so there will be no detector switching
Field proven with reliable application in nuclear reactors
Field-proven with reliable application in nuclear reactors
Four channels; each can provide scrams on short reactor period and high neutron flux level (same set points and scram time as previous)
Two out of four channels are required to be operable whenever the reactor is critical
Channel test/calibration possible with the reactor operating
Original Tech Spec will be mostly unchanged 6
Phase 0 Review Meeting
Proposed Upgrades for the Nuclear Safety System 7
Phase 0 Review Meeting
Proposed Upgrade to the Nuclear Safety System - Logic Detail 8
Phase 0 Review Meeting
Fission Chambers and Pre-Amplifiers All four fission chambers are All four fission chambers are of identical design and build, from Mirion US Each detector is 10 7 long Each detector is 10.7 long and 2.6 diameter, with a triaxial integral quartz cable 7 feet long Each chamber feeds a pre-amplifier (Mirion TKV 23),
which passes the amplified fission chamber signal to the DWK 250 for processing Pre-amp has a built-in pulse 9
signal and AC signal test generator Phase 0 Review Meeting
Fission Chamber Detector Placement 10 Phase 0 Review Meeting
DWK 250 Analog & Digital Signal Paths (Image removed for proprietary protection.)
11 Phase 0 Review Meeting
One of Four New Mirion DWK 250 Channels for MITR Each channel provides Each channel provides short reactor period scram
& high reactor power scram Each channel utilizes one Each channel utilizes one fission chamber for wide-range power operation Reactor power and period Reactor power and period calibration and scram checks can be done with the reactor operating Test signal travels along the detector signal path starting from the fission chamber 12 pre-amplifier Phase 0 Review Meeting
One of Four New Mirion DWK 250 Channels for MITR Each DWK 250 monitor incorporates three different incorporates three different microprocessor modules for signal processing Each microprocessor executes its Each microprocessor executes its function as set by the firmware permanently programmed into its non-volatile memory EPROMs Execution of firmware is confirmed by continual checksum comparison Microprocessors and firmware have field-proven reliable for
>25 years in European nuclear 13 industry Phase 0 Review Meeting
One of Four New Mirion DWK 250 Channels for MITR The microprocessors p
handle pulse signals and also perform Campbelling, allowing wide-range indication indication Trip set-points do not drift Detector voltage and g
internal operating voltages monitored for compliance with adjustable tolerances Continuous Op-code handshaking between the DWKs microprocessors as an active check of 14 as an active check of functionality Phase 0 Review Meeting
One of Four New Mirion DWK 250 Channels for MITR Ei ht bi
(
l
)
t t
Eight binary (relay) outputs
- DWK uses two for internal fault indication; MITR uses two for scram circuit Two analog outputs Two analog outputs One serial communication output (RS232 port)
MITR will use these for 15 Phase 0 Review Meeting MITR will use these for display and recording
DWK 250 Functional Diagram (Image removed for proprietary protection.)
16 Phase 0 Review Meeting
DWK 250 Quality Standards
DWK 250s, their firmware, and their TKV 23 pre-amps were designed and manufactured in Germany
Qualified by TUV per German nuclear regulatory KTA guidelines 3501, 3505, 3507, and 1401, for type approval tests of safety-related I&C systems in accordance with Category A of IEC 61226
Category A is equivalent to IEEE 323 Classification 1E equipment for nuclear power stations and to IEEE 344 equipment for nuclear power stations, and to IEEE 344 Classification 1E equipment with regards to seismic qualification 17 Phase 0 Review Meeting
MITR Protection System Logic Circuit Two-out-of-four coincidence logic used in this design logic used in this design A single scram output from a DWK 250 will not result in an immediate reactor scram unless immediate reactor scram unless a second unit has tripped or faulted.
Total of 29 inputs to the Scram
Total of 29 inputs to the Scram Logic System Scram Logic System has two identical logic circuits in Card 1 identical logic circuits in Card 1 and Card 2 Coincidence logic is applied in the cards to produce a reactor the cards to produce a reactor scram 18 Phase 0 Review Meeting
Logic Circuit - concept detail Any combination of trips Any combination of trips or fault conditions on two DWK 250s will result in a reactor scram
19
Logic Circuit - development B
l l
i di f
Boolean logic diagram for two-out-of-four coincidence Verified by computer-based logic gate simulator logic gate simulator FPGA device for logic test 29 inputs to logic circuits 29 inputs to logic circuits Testing board created Generation of CAD layout for prototype printed circuit board prototype printed circuit board 20 Phase 0 Review Meeting
Boolean Diagram - Output of Logic Gate Simulator 21 Phase 0 Review Meeting
Logic Diagram - Output from Quartus II 22 Phase 0 Review Meeting
Security & Cyber Vulnerability Evaluation
Firmware on the three microprocessors for each DWK 250 Firmware on the three microprocessors for each DWK 250 cannot be altered
Firmware and its downloading are safeguarded at Mirion Germany Germany
Adjustable parameters (alarm set points, discriminator threshold, etc.) can be changed from the front keypad only when a key switch is enabled; otherwise the terminal block at the back must be used, as the front RS232 connector will be physically removed once testing phase is complete
Final position of DWK 250s will be in the control room, which is continuously monitored or safeguarded
System will not be connected to any network 23
System will not be connected to any network Phase 0 Review Meeting
License Amendment Request
Final logic circuit design & testing plan
SAR Revision
Amendment to Technical Specifications
Projected Schedule 24 Phase 0 Review Meeting
Concluding Material
Questions & Comments Contact Info:
Contact Info:
Edward S. Lau MIT N l
R t
L b t
MIT Nuclear Reactor Laboratory 138 Albany Street, NW12-122 Cambridge, MA 02139 617-253-4211 eslau@mit.edu 25 Phase 0 Review Meeting