ML20093A290

Forwards Safety Analysis of Safety Parameter Display Sys, in Response to Generic Ltr 82-33,Suppl 1 to NUREG-0737.Sys Will Be Available for Control Room Use During Preoperational Testing

ML20093A290
Person / Time
Site:	Midland
Issue date:	06/28/1984
From:	Jackie Cook CONSUMERS ENERGY CO. (FORMERLY CONSUMERS POWER CO.)
To:	Harold Denton Office of Nuclear Reactor Regulation
References
RTR-NUREG-0737, RTR-NUREG-737 29827, GL-82-33, NUDOCS 8407100299
Download: ML20093A290 (45)

Text

_ _ _

1 Consumers Power-

~

Company General offices: 1945 West Parnali Road, Jackson, MI 49201 * (517) 7TpO650 i

a June 28, 1984

/

Mr Harold R Denton Office of Nuclear Reactor Regulation Division of Licensing US Nuclear Regulatory Commission Washington, DC 20555 f

MIDLAND ENERGY CENTER PROJECT -

MIDLAND DOCKET NOS 50-329, 50-330 RESPONSE TO SUPPLEMENT 1 TO NUREG 0737:

SAFETY PARMfETER DISPLAY SYSTEM FILE J-280A SERIAL 29827 REFERENCES (1) CPCO LETTER, SERIAL 26468, DATFD NOVEMBER 10, 1983 SUPPLEMENTAL RESPONSE TO GENEPIC LETTER 82-33 (2) CPCO LETTER, SERIAL 21649, DATED APRIL 13, 1983 RESPONSE TO GENERIC LETTER 82-33, Attached is a copy of a report entitled, " Midland Energy Center Safety Parame-ter Display System." This report provides the safety analysis of the Safety Parameter Display System which Consumers Power Company committed to provide in response to Generic Letter 82-33.

The hardware and software described herein hca been lustalled'at the Midland Plant. The Safety Parameter Display System will Fe available for use in the control room during preoperational testing and in!tial fuel load of the Midland units.

If there is any assistance we can offer to aid your review of our Safety Parameter Display System, such as a demonstration of the system at our Site, please do not hesitate to contact us.

7 JWC/RMH/bjw CC JGKeppler, Administrator, Region III DSHood, Project Manager Licensing Branch #4, US NRC Midland NRC Resident Office 8407100299 840628

{DRADOCK 05000329 PDR 9

OC0484-0177A-MP04 I}

~

CONSUMERS POWER COMPANY Midland Units 1 and 2 Docket No 50-329, 50-330 Letter Serial 29897 Dated June 28, 1984 At the request of the Commission and pursuant to the Atomic Energy Act of 1954, and the Energy Reorganization Act of 1974, as amended and the Commis-sion's Rules and Regulations thereunder, Consumers Power Company submits a report on the Midland Energy Center Safety Parameter Display System in response to related requirements identified in IBC Generic Letter 82-33 CONSUMERS POWER COMPANY By k

Pro / cts, Engineering and Construction ames W Cook, Vice President Sworn and subscribed before me this 3A M.,, day of sn /a, /f O~&: SLx n

N(tary Publ@

Jackson County, Michigan My Commission Expires i f( lh OC0484-0177A-MPO4

1 l

MIDLAND ENERGY CENTER SAFETY PARAMETER DISPLAY SYSTEM r

I i

MIO384-6450A-MP05 t

{

l

1 1.

INTRODUCTION This report provides a description of the Safety Parameter Display System (SPDS) developed for the Midland Project. The SPDS consists of computer driven displays which provide information to the operator regarding the current safety status of the plant. The displays are designed to support the Abnormal Operating Transient Guidelines developed for reactors provided by Babcock and Wilcox.

Included in this report is a description of the computer system and CRT displays including the parameters utilized in the SPDS.

The SPDS CRT displays provide an integrated presentation of plan't process information to the reactor plant operators. The information displayed on the SPDS is available at other locations in the control room.

Emergency plant procedures address the location of instruments to be utilized in the event the SPDS is unavailable. As the operators will be capable and trained to handle emergency conditions without the SPDS present in the control room, the addition of the SPDS was determined to not result in a safety concern.

This report is intended to provide a description of the SPDS hardware and displays.

It is not the intent of this report to cover all uses of these displays during normal or emergency conditions. For a more detailed description of how these displays can be used by the operator to ascer-tain and correct upset conditions, the reader is referred to the "0conee MIO384-6450A-MP05

2 Nuclear Station, Unit 3, Abnormal Transient Operating Guidelines (ATOG)"1.

2.

COMPUTER HARDWARE DESCRIPTION The SPDS for the Midland Plant is incorporated as a part of the plant computer system. The plant computer system is a non-safety grade device

'and is not seismically qualified. The plant computer does incorporate sufficient redundancy to assure high availability.

In the description which follows, only those portions of the plant computer related to the SPDS function are described.

A functional block diagram of the Midland computer system is shown in Figure 1.

The Midland computer system is a highly integrated multipro-cessor system with redundant and interconnected components. The major subsystems of this facility _are:

the front-end preprocessors, the main Plant computers, the radiation monitoring computer, the Technical Support Center (TSC) computer, the Emergency Operations Facility (EOF) computer, and the functional displays and peripherals associated with each computer.

1 "Oconee Nuclear Station, Unit 3, Abnormal Transient Operating Guidelines (ATOG),"

74-1123297-00, Babcock and Wilcox Nuclear Power Generation Division, March 23, 1982; with revisions transmitted to Darrell G Eisenhut, Director, Division of Licensing, NRC, via letter from Daniel D Whitney, Chairman, Operator Support Subcommittee, Babcock and Wilcox Owners Group, June 15, 1982 MIO384-6450A-MP05

3

-Process inputs utilized by the SPDS are provided from both Class 1E and

.non-Class 1E devices. Inputs from Class IE devices are provided through qualified isolaters located remote to the pla1t computer.

The in-plant sensors are connected to the Plant Computer Process I/O which scans the data and performs A/D conversion of analog inputs.

The front-end preprocessors function to scan field inputs, convert inputs to engineering units and perform alarm checking of process variables. These processors also perform validity checks of inputs to verify that inputs are within expected ranges. Additionally, special calculations such as tempera-ture compensation of levels and input validation routines are performed by these computers. Each front-end preprocessor serves as a backup to the ot'er h

and automatically switches when a failure is detected.

i One of the functions of the main plant computers is.co format and update the SPD9 displays.

Each unit of the Midland plant has its own main computer. A third computer is provided which can replace either of the units computer in l

the event of failure. Switchover to the backup main computer is a manual operation requiring less than 15 minutes to accomplish.

The TSC computer receives data inputs from both main plant computers and from o

the radiation monitoring computer. This computer formats and drives displays I

including SPDS displays on the TSC and EOF CRT's.

Additionally, the TSC y

computer supplies the main plant computers with radiation data used in the L.

l SPDS.

t r

L l

MIO384-6450A-MP05 i

[

~s

4 The Emergency Operations Facility (EOF) computer acts as a communication and display buffer. The EOF computer formata and updates displays including SPDS displays on the EOF CRT's.

3.

DISPLAYS DESCRIPTIONS The SPDS provides a concise display of critical plant variables to the control room operator to aid him in determining the safety status of the plant. The SPDS was designed to support the Abnormal Transient Operating Guidelines (ATOG) which serve as the basis for the plant emergency procedures.

ATOG is a symptom-based guideline which emphasizes continu-ous surveillance of off-normal conditions. The four symptoms described in ATOG are:

i a.

Lack of adequate subcooled margin.

b.

Lack of primary to secondary heat transfer (overheating).

c.

Excessive primary to secondary heat transfer (overcooling).

d.

Indications of steam generator tube rupture.

The information required to identify and track these symptoms is already available in the control room; however, it consists of discrete displays l

of reactor coolant system hot and cold leg temperature, reactor coolant system pressure and steam generator pressure. These discrete displays require mental integration on the part of the operator to quickly assess plant status using individual displays and the steam tables. The SPDS displays were designed to integrate this information on pressure-temperature curves to continuously show the primary subcooled l

MIO384-6450A-MP05 l

5 margin and the dynamic relationship of the primary-to-secondary heat transfer.

The SPDS CRT display consists of three major areas on the screen. These areas are the title area, the pressure-temperature display area and the alert area. Each of these areas is described in detail in the following sections.

3.1 Title Area Figure 2 shows a typical SPDS CRT screen. The section above the pressure

' temperature display is referred to as the Title Area. This area, common to all displays, consists of the display title (composed of time, date, display title and unit number) and the values of important plant parame-ters used elsewhere in the display. Parameters displayed in this area include containment pressure, reactor coolant system pressures and temperatures, core exit thermocouple temperatures and the steam generator saturation temperature. Dynamic data in the title area is updated every two seconds.

3.2 Display Area The display area consists of the pressure-temperature curves upon which important operating limits are superimposed. Markers indicating the actual primary and secondary system operating points are also overlaid on i

the displays. Dynamic data in the display area is updated at two second i

MIO384-6450A-MP05

VT 6

4

- inte rvals. There are four pressure-temperature base displays available to the operator which can be called up depending upon plant status.

RPS Trip Envelope This display, which is shown in Figure 2, is utilized during normal power operations. The reactor protection system trip envelope, as well as a box defining normal operations, are superimposed on the pressure-temperature display.

ATOG-PT This display, shown in Figure 3, is the primary display used by the operator to evaluate plant status during emergency conditions. Following a reactor trip, this display is placed on the SPDS CRT, automatically superceding any other display currently being viewed. The primary limits superimposed on this display are the saturation line, the variable subcooled margin (VSM) line (which 'ecounts for instrument error) and the post-trip window used to define normal post-trip response of primary pressure and temperatures. The symptoms of loss of subcooling margin, overheating and overcooling are visually integrated on this display.

Steam Generator saturation temperature as well as reactor coolant system pressure and temperature are dynamically displ. fed. The pressurizer level, in the form of a bar chart, is also provided in the lower right hand corner of the display.

MIO384-6450A-MP05 t.

7 Low Range P-T This display, shown in Figure 4, is utilized during plant heatups and cooldown when greater resolution is required due to additional limita-tions being placed on control of primary system pressure and temperature.

This display is applicable during low pressure / temperature conditions down to and including refueling conditions.

In addition to the satura-tion and VSM curves, the decay heat removal system maximum pressure is superimposed on this display to indicate operating limits when this system is in operation or is to be placed in operation. The pressurizer level, in the form of a bar chart, is also provided in the lower right hand corner of the display.

-Inadequate Core Cooling (ICC)

~

'This display, shown in Figure 5, is utilized by the operator in the event the core is not adequately being cooled. Limit lines superimposed on this display include the saturation line and the 1400*F and 1800*F clad temperature lines. The marker in this display indicates the location of the average of the five highest incore thermocouples at the current

-reactor coolant system pressure. -Procedure guidelines direct the opera-tor to the actions to be taken in the event that system temperatures and

. pressures are in any region below the saturation curve. The pressurizer level and' hot leg levels are also indicated on this display to provide the operator with information on reactor coolant system inventory.

MIO384-6450A-MP05

p 8

3.3 Overlays There are times during both normal and emergency, operations when addi-tional pressure temperature limits are applicable, and if left on the CRT display at all times would clutter the display and make it more difficult to interpret. To display these additional limits when applicable, the SPDS has been designed to allow these limits to be added through operator selected overlays. This section describes the overlay options available to the operator and indicates when they would be used.

Historical Trend During the course of a transient or normal evolution, the operator may require information on the trend of the reactor coolant system pressure and temperature marker. The trend overlay allows the operator to display this trend information for the previous 30 minutes.

Figure 6 show an example of the ATOG P-T display with the trend overlay selected. This overlay is applicable to all displays.

Thermal Shock Limits During emergency conditions, when high pressure injection is initiated, maximum limits on reactor coolant pressure are imposed to minimize reactor vessel thermal shock. Figure 7 shows an example of the ATOG P-T display with the thermal shock limits overlay selected. This overlay is only applicabic to the ATOG P-T and Low Range P-T displays.

MIO384-6450A-MP05

9 Variable Subcooled Margin - 30*F (VSM-30*F)

During steam generator tube ruptures, the emergency procedure guidelines (ATOG) instruct the operator to maintain RCS pressure as low as possible to minimize the primary-to-secondary leak rate. The VSM-30*F overlay can be superimposed on the CRT displays to give the operator a target window for controlling primary pressure. Figure 8 shows an example of the ATOG P-T display with the VSM-30*F overlay selected. This overlay is only applicable to the ATOG P-T and Low Range P-T displays.

Low Temperature Overpressure Protection (LTOPP)

During normal plant heatups and cooldowns, the operator is directed to change the PORV setpoint and,%r open the DHR isolation valves at various primary temperatures to provide overpressure protection of the RCS. The LTOPP overlay shows the operator the maximum allowable operating pressure based on PORV and DHR relief valve setpoints. Figure 9 shows an example of the ATOG-P-T display with the LTOPP overlay selected. This overlay is only applicable to the ATOG P-T and Low Range P-T displays.

Fuel Compression Limits (FCL)

During normal heatups and cooldowns, the operator is directed to maintain t

primary pressure above certain low pressure limits based on reactor coolant pumps seal staging, reactor coolant pump NPSH requirements and i

i I

fuel pin in compression limits. A composite of these lower pressure l

l MIO384-6450A-MP05

I E J

~

10 limits can be superimposed on the CRT display to graphically depict these l

limits. These limits are based on the number of reactor coolant pumps running. The SPDS monitors pump status and automatically selects the t

correct limit when this overlay is selected. The FCL displayed is also dynamically changed on the screen if the pump status is changed while this overlay is selected. Figure 10 shows an example of the FCL overlay superimposed on the ATOG P-T display. The FCL overlay is only applicable i

to-the ATOG P-T and the Low Range P-T displays.

r i

i Pressure vs Incore Temperature (INCORE)

F i

There are times-in the emergency procedure guidelines when-the operator

-is instructed to control primary pressure and temperature based on incore thermocouple readings rather than T and T The INCORE overlay hot cold.

allows the operator to replace the T and T markers on the ATOG P-T hot cold l

or Low Range P-T display with a marker showing the location of the average of the five highest incore thermocouple readings. Figure 11 shows nn example of the INCORE overlay selected on the Low Range P-T f

l'

. display. Note that the marker symbol is changed to denote that incore j

temperature rather than T rT is being displayed. The INCORE hot eold overlay is only applicable to the ATOG P-T and the Low Range P-T dis-plays.

r The overlays superimposed on a particular display are identified as being f

r selected in the upper left hand corner of the pressure-temperature i

display. Multiple overlays can be superimposed on the same display.

4 MIO384-6450A-MP05 2.,~ -. - -,.,

_.~.._.,_....m.,__.,_.__.m._,~.,.-r m,m,

11 This allows the operator to overlay the LTOPP and FCL curves simultane-ously and have maximum and minimum pressure limitations displayed on a single display for normal plant heatup or cooldown.

3.4 Alert Area Alert signals appear in the area below the pressure-temperature display to key the operator to anomalies in areas not rigorously monitored in the display area. This area, common to all displays, directs the operator's attention to areas with unusual occurences. The alert section is normal-l ly blank; if an alert condition is detected, that alert is lit up in solid yellow with a red flashing block in front of the alert. This i

directs the operator to look at additional instrumentation to confirm and take action if necessary. There are nine alerts which are defined in the following paragraphs and which are shown activated in Figure 2.

Reactivity This alert monitors control rod position and source range nuclear instru-I mentation. Approximately five seconds after a reactor trip all control i

rod positions are monitored.

If any control rod is not on the bottom, the alert is activiated, indicating a stuck rod. Approximately 25 minutes following a reactor trip, the algorithm begins monitoring source range nuclear instrumentation.

If the nuclear instrumentation indicates a count rate above a preset value, the alert is activated, indicating insufficient shutdown margin or a potential reactor restart and flags the i

MIO384-6450A-MP05

12 operator to check other instruments. Monitoring of the source range instrumentation continues until Rod Groups 1 and 2 are 100% withdrawn, indicating a' planned reactor start-up. The algorithm then resets, awaiting the next reactor trip signal.

Low Decay Heat Flow This alert monitors decay heat removal flow and pump status when the RCS pressure and temperature are in the range where the decay heat removal system operation is required and the reactor coolant pumps are not operating. The alert activates upon indication of no decay heat removal pump running or decay heat removal flow less than required.

H:.gt Rad Auxiliary Building Vent This alert monitors radioactivity at the discharge of the auxiliary building vent. Activation of this alert informs the operator that there is a leakage of radioactive material within the Auxiliary Building which is being released to the environment.

9 High Rad Air Ejector This alert monitors radiation at the condensor air ejector. Activation of this alert indicates primary-to-secondary leakage and potential steam generator tube rupture.

MIO384-6450A-MP05 b

13 High Rad Steam Line A This alert monitors radiation in the steam from the A steam generator.

Activation of this alert alone or in conjunction with an air ejector radiation alert indicates the potential for a steam generator tube rupture in steam generator A.

High Rad Steam Line B This alert monitors radiation in the steam from the B steam generator.

Activation of this alert alone or in conjunction with an air ejector radiation alert indicates the potential for a steam generator tube rupture in steam generator B.

CTMT Isolation This alert monitors containment pressure and radiation. Activation of this alert implies that containment pressure or radiation is approaching the containment isolation setpoint. This alert is intended to allow the operator to attempt to correct the problem or manually perform the

-isolation function if required. Containment pressure is indicated in the title area of the SPDS to aid the operator in making this decision.

MIO384-6450A-NT05 L

y, :-

14 CTMT Spray This alert monitors containment pressure. Activation of this alert implies that containment pressure is approaching the containment spray actuation setpoint. This alert is intended to allow the operator to attempt to correct the problem or manually initiate containment spray if required. Containment pressure is indicated in the title area of the SPDS to aid the operator in making this decision.

CTMT Hydrogen This alert monitors containment hydrogen concentration. Activation of this alert informs the-operator of the need to initiate the hydrogen recombiners in containment.

4.

MAN MACHINE INTERFACE Each unit of the Midland Plant has one CRT dedicated to the SPDS func-tion. No other computer generated displays can be placed on these CRT's.

This dedicated CRT is located immediately adjacent to the Safeguards control panel. This location was chosen to allow easy accessability to the information by all personnel within the control room. Figure 12 shows the location of the dedicated SPDS CRT in the control room.

Communication with the dedicated SPDS CRT is via a dedicated keypad located on the safeguards panel immediately adjacent to the SPDS-CRT. A MIO384-6450A-MP05

15 graphical representation of the keypad arrangement is shown in Figure 13.

The alphanumeric keys are utilized to select the base pressure-temperature display and to indicate which loop markers are requested. The function keys on the right hand side of the keypad are utilized to add and/or delete overlays from the base displays. The actual keypads are labeled similar to that shown in Figure 12; however, due to space constraints, acronyms are used under the function keys to describe the overlays.

In the event the operator forgets the meaning of an acronym, the help key (function F4) can be pushed. Pushing the help key displays the SPDS keypad description shown in Figure 13.

This display remains active for 30 seconds, at which time it is timed out and the CRT returns to the previously requested display.

In addition to the dedicated SPDS CRT, the SPDS can be displayed on other CRT's within the control room. The location of these backup CRT displays is shown on Figure 12.

The display of SPDS information on the backup CRT's or at the TSC or EOF requires the use of a menu system through a standard keyboard. The information to be provided'by the operator when requesting the SPDS from a standard keyboard is shown in Figure 14.

After selecting the desired options, the SPDS is displayed on the re-quested CRT. Movement from base display to base display is then possible by utilizing page forward /page back pushbuttons.

If the operator wants to change the selected loop or selected overlay, he must return to the menu to select these new options. Returning to the SPDS menu after the SPDS function has been selected requires only a single keystroke.

MIO384-6450A-MP05

16 5.

INPUT VALIDATION To prevent misleading the operator, analog values displayed by the SPDS are extensively validated in real time prior to display. This validation is achieved by comparing redundant sensor readings and through other checks prior to display of the parameter to the operator.

In the event that the computer is unable to ascertain a valid reading, the analog values in the title areas are filled with question marks, markers in the display area turn yellow and are moved to the valid parameter axis and bar charts turn yellow. These actions readily identify faulty data to the operator. Figure 15 provides an example of a display where parame-ters were determined to be invalid by the computer.

Table 1 is a listing of the analog values displayed to the operator by the SPDS. This table shows the number of inputs provided and the ranges of the inputs used to derive the displayed values. The number of inputs for a displayed value range from a minimum of 2 to a maximum of 6.

Validation of SPDS analog inputs begin by performing limit checks on each input _ signal..This check assures that the input is within its expected operating range.

Inputs identified to be out of limits are flagged and

-alarmed-through the non-SPDS portion of the computer. Following the limit check, those inputs which pass the limit check are further validat-

.d in a manner which is dependent on the number of inputs remaining. For e

parameters having four inputs, the displayed value is the average of the middle two inputs. For parameters having'three inputs, the displayed MIO384-6450A-MP05

17 value is the middle value. For parameters having two inputs, the dis-played value is the average of the inputs. After determining the display value, each input to this value is compared against the display value.

Any input deviating from the display value by a predetermined amount is flagged and alarmed through the non-SPDS portion of the computer system.

If only two inputs make up the display value and if these inputs deviate from the display value by a predetermined amount, the display value is flagged as being invalid and is displayed as described earlier.

Some SPDS parameters are comprised of inputs covering several ranges of the same value.

Each input range is validated as described above for the number of inputs included in that range. The SPDS then selects the range to be displayed. If the narrow range instrument is on scale and is valid, the narrow range value is selected for display.

If the narrow range instrument is off scale or is determined to be invalid, the wide range value is selected for display.

6.

COMPARISON TO NUREG-0737 SAFETY FUNCTIONS Supplement I to NUREG-0737 states that information is to be provided to plant operators in five categories. This section lists each category and describes the information provided in each category by the Midland SPDS.

MIO384-6450A-MP05 1

t 18 Reactivity Control Information provided by the SPDS to monitor reactivity control includes reactor coolant system pressures and temperatures, control rod positions and source range nuclear instrumentation. Following a reactor trip demand, if not all rods are inserted, the reactor may not go subcritical.

This condition would be indicated by increasing primary temperatures and pressures on the pressure-temperature diagram and by the reactivity alert which monitors control rod positions. For long term monitoring of reactivity when the reactor is shutdown, the SPDS monitors source range nuclear instrumentation.

Events which add positive reactivity such as deboration events would result in increasing source range count levels which will be indicated by the reactivity alert.

f Reactor Core Cooling and Primary Heat Removal Indication of adequate primary heat removal and core cooling is provided by the primary and secondary pressure and temperature indications on the l

pressure-temperature diagrams. The direction and rate of motion of the markers on the pressure-temperature diagrams provide integrated informa-tion to continuously show the dynamic relationship of the primary heat transfer and the degree of primary subcooling.

MIO384-6450A-MP05 t-

19 Reactor Coolant System Integrity i

-Indication of reactor coolant system integrity is provided by monitoring reactor coolant system pressure, temperature, pressurizer level and hot leg level. A loss of RCS integrity would manifest itself by decreasing pressure as indicated on the pressure-temperature diagram, decreasing pressurizer level and, if severe enough, decreasing hot leg level. The r

. pressure-temperature diagram with appropriate operating limits superim-posed can also identify an approach to limits which challenge reactor coolant system integrity.

l Radioactivity Control L

Indication of radioactivity control is provided by monitoring containment radiation, Auxiliary Building vent stack radiation, air ejector radiation

[

and steam line radiation. These radiation values are provided as alerts only. A separate radiation monitoring system computer exists in the Midland design. Containment radiation is monitored to alert the operator l

to potential leaks inside containment and the potential need to isolate containment. Auxiliary Building vent stack radiation is monitored to 1

alert the operator of excessive releases to the environment and the t

potential need to isolate vent pathways. Air ejector and steam line radiation are monitored to alert the operator to potential steam genera-

[

tor tube ruptures.

l l

MIO384-6450A-MP05 i

t i

. ~. _ _ _

20 i

.r Containment Integrity

\\

t a-Indication of' containment integrity is provided by conitoring containment pressure and. containment hydrogen concentration. Indication of contain-t ment pressure is provided in the SPDS title area; additionally, two alerts at different containment pressures are provided to alert the operator that containment pressure is increasing and that the containment may.have to be isolated or containment spray actuated. Containment hydrogen is monitored to provide the operator an alert to start the

{

hydrogen.recombiners.

s 7.

VERIFICATION AND VALIDATION 1

-To assure that a high' quality SPDS was implemented, a verification and L

validation program was conducted throughout the process of design, f

fabrication, installation and testing of the SPDS. A flow chart detail-ing the design steps in completing the SPDS is shown in Figure 16.

This section discusses each major type of design verification performed on the Midland SPDS.

L i

SPDS Functional Specification l

r f

-A detailed specification was written to specify the CRT displays. The bL displays were designed to support the Abnormal Transient Operating Guide-

-lines (ATOG)'which are used as the basis for emergency operating proce-j dures.= The specification detailed the format, content, color and sources r

1 i

MIO384-6450A-MP05

~.. _. _

i l

21 I

of' data for the displays as well as the operator interaction require-ments. The completed specification was provided to a software consultant I

for implementation on the existing plant computer system.

a Control Specification i

An additional specification was written which added additional require-ments specified by the software consultant in consultation with Consumers Power Company. This control specification, which contained the original specification as an Appendix, became the vehicle for documenting the final design including any exceptions or deviations from the original l

specification.

Systems Requirement Review i

The systems requirement review determined whether the system requirements as specified in the controlling specification were complete, feasible, testable and consistent with system purpose. The systems requirement review was performed by individuals not involved in formulation of the controlling specification.

t Test Plan i

i The test plan established the detailed requirements for testing the 4

hardware and software functionability.

l MIO384-6450A-MP05

V/.

22 Hardware Configuration Design Review The existing computer hardware available at Midland was reviewed to assure that the configuration could support the SPDS functional require-ments.

Preliminary Design Review An independent review of the Architectual Documentation was performed to assure that the general design approach was technically adequate.

Critical Design Review The critical design review was conducted on a subsystem basis to assure the acceptability of detailed software coding. The critical design review included validity testing of the software modules.

Validation Test Validation testing of SPDS modules was performed on a development comput-er system at the factory prior to field installation of the software.

The validation testing verified functionability of each module and design requirement which could be tested prior to actual field installation.

MIO384-6450A-MP05

23 Field Validation Test The field validation test was performed following field installation of the software. This testing, performed by individuals independent of the design effort, veritied the functionability of each module and design requirement in accordance with the requirements of the test plan.

[

~ Validation Report The total verification and validation of the SPDS subsystem is summarized

.in the Validation Report. Traceability of the verification and vali-dation activities throughout the project, identification and resolution of descrepancies and reference to detailed documentation is provided in this report.

I

(

MIO384-6450A-MP05

1 i

TABLE 1 SPDS VALIDATED INPUT LIST Parameter-PTID( }

Rapge Ccament Containment Pressure P043 0-27 psia P044-0-27 psia P045 0-27 psia PO46 0-27 psia P079 (P127)

=10-225 psia P080 (P128)10-225 psia RCS Pressure-P721

'1300-2500 psig Loop A P729 1500-2500 psig P201 0-2500 psig P202 0-2500 psig RCS Pressure P722 1500-2500 psig Loop B P730 1500-2500 psig i

P203 0-2500 psig P204 0-2500 psig Pressurizer Pressure P120 0-600 psig P129 0-3000 peig P130 0-3000 psig T-Cold Loop A T195 50-750*F T197 50-750*F T-Cold Loop B T196 50-750*F T198 50-750*F T-Hot Loop A T721 520-620*F T730 520-620*F T197 0-750*F T-Hot Loop B-T722 520-620*F T731 520-620*F T198

.0-750*F t

Incore Thermocouples 24 Inputs 0-2300*F Average of 5 highest of valid inputs Steam Generator' P047 0-1200 psig Steam generator Pressure A PO48 0-1200 psig temperature calcu-P049 0-1200 psig lated from valida-P050 0-1200 psig ted steam generator pressure i

MIO384-6450A-MP05

2 TABLE 1 SPDS VALIDATED INPUT LIST Parameter PTID(

Range Comment Steam Generator P093 0-1200 psig Steam generator Pressure B P094 0-1200 psig saturation tempera-

.P095 0-1200 psig ture calculated from P096 0-1200 psig validated steam gen-erator pressure.

Pressurizer-level L772 0-400 in Temperature compen-L773 0-400 in sated from pressuri-L774 0-400 in zer level and pres-sure inputs Hot Leg Level L111-488-610 in Temperature compen-Loop A sated level calculated from hot leg level, temperature and refer-ence leg temperature for each hot leg Hot Leg Level L112 488-610 in Temperature compen-Loop B:

sated level calculated from hot leg level, temperature and refer-ence leg temperature for each hot leg

(

PTID - Point identifier used in computer. If PTID's differ.between Unit I and 2. Unit 2 is shown'in parenthesis.

7:

r

-MIO384-6450A-MP05 L:-_

e r

FIGURE 2 MIDLAND PLAUT COMPUTER BL0cK DIAGRAM IN-PLANT SENSORS ISOLATION FOR IN-PLANT SENSORS h

. SAFETY RELATED h

SIGNALS COMPUTER UNIT I UNIT 2 INPUT PROCESS 1/0 PROCESS 1/0 ROOM

</

N NS UNIT.I UNIT 2 FRONT-END FRONT-END PREPROCESSOR PREPROCESSOR N

_______1 PROGRAM 4lNG

/y[.f ROOM BACKUP N

I bCOMPUTER j \\

C

~

MAIN MAIN DISK COMPUTER-

- /

COMPUTER UNIT l'

/

Q UN!T 2 g u

h t

l PERIPHERAL PERI PHERAL-l l

SWITCH L' WITCH l

1 TECHNICAL

]LiNE LINE SUPPORT jPRINTER l

PRINTER.

CENTER MAG TAPE -.!

(SEESH2) l-MAG TAPE

.____________j

.__ _ JL_;

w _ __ _ __ _ -.

CONTROL UNIT l-DISPLAY 3, WIT 2-DIS?dYS, ROOM ALARM TYPER,

.;.YP ER,

t KEYBOARDS KEYBOARDS l

RADIAT10N HONITORING DISPLAY J

' RADIATION AUXILLARY SHUTDOWN l

AUXILLARY AUXILLARY SHUTDOWN BUILDING PANEL DISPLAY HONITORlHG PANEL O! SPLAY COMPUTER

.r Jgt1mg_

FIGURE 1 (Contd)

MIDLAND PLANT COMPUTER BLOCK DIAGRAM P

~

RADIATION MONITORING COMPUTER RADIATION PRIMARY UNIT l N0NITORING UNIT 2 MET.

OUTPUT OTHER COMPUTER COMPUTER COMPUTER TOWER DISPLAYS TECHNICAL SUPPORT CENTER SWITCH TSC COMPUTER RADIATION

' MAG TAPE MONITORING DISK DISPLAY s

DISPLAYS, OFF-SITE

COPlER,

> DATA LINKS KEYBOARDS I

EMERGENCY.

OPERATIONS FACI LITY '

l EOF COMPUTER

DISPLAYS, C0F I ER,

KEYBOARDS PRIMARY DATA PATH SECONDARY OR BACKUP DATA PATH d

o 9

FIGURE 2 RPS TRIP ENVELOPE DISPLAY l'

b N

O

>==

0.

ed O

s.- m o

T CD F.-

O.

Z I

~

CD

illl:

$ m

• -e Lu o

e O

o t,:t Co

- efe v

.J CI: CE:

~-

C:3 CC C3 O

g3 D=

CL,

+

C g-

g e

W >C g

p,,,,,

g EE O

o-u_,

7 O

C>

C) C)

+gQ g,

.~r cn o

m M M e

3

~.

O i.a O

u>

O n-

=

o, CD C G1 W

Iti g

gg C

Q C3 CC. GC4 W

0 t/t D--

~U j

WC) L.L.J L.d

~

="

+

o O W t LJ 2:: Z O

o e.

~

e yaag3

- % O tti E C2'"

C=

CC

'?

s cc: ce cc g -+

g a = = =_::,

C = ww<

m_

u_,

tti W - e-o e-o 4

U7 tti G.

CC :"C CI:ll g

-OM M M j

>~

a-o tJ O

O m

T L

U~>

n N"

E

>==

W M

== =-

e o

W Z C

4

, P R dW e

m a c=

g 5d i

E? o 2i O

l-o esa O =

m_ x, O

c.2 o

f i

C4 us g

ets Cr o

O O

O c

m, O,

o o

e-o C=

cm c,

o.

c-c, O

Gi 0)

CD-CJ CC g

c4 g

y e4 e4 c4 C4 C4 C4

- 1.d Cd

>-- C3 a

N M

Lf"J y

y 6-. tra y

g gQm A $ l,a.I 0/l 0/0 ) $ N l

b. YI M o

E -

r I

t I

l I

i 1

I l

o 9

FIGURE 3 ATOG PRESSURE-TEMPERATURE DISPLAY

(%J O

O W

n.

b w

=

lll2 ; W O

WJ

=D

>- CQ O

• 2.

M N::>

Q. J C"1 Z

== 4 CD l2lll

~

i CC t> e l

I i 4 ' i e

-E O

O O

O O

O O4 07 O,

6--

fD i

o c.4 CC D==

CD c

o g%.,-

s--*

ess W

M z

a y

m J CC Ca:::

=:-

Jg w

I-.ht::::3

• Z O I Id 8tl O

CD CC C O

W a-3.g

',s

=

+

'-"' C.t') Z O

a WX d D.r-d

~

W*

%o a--

.r O 0.

O

+ e) C W

3 H - >--- >==

,s=W rO h

o UQC)

M F-r3+

3 p

E E E a"

N

(

j T

w o

a

$.:"2 4

^

g 3

O

,4 O

u, g

>- w r~

p Q

IA-O CD U">

2 I

La. CM CD CC flX:lt I

A M >--

F_

4 W C ll La.J t L.J l

+

C W LA.J Z ::C O

CL w

CC M *--'

P--*

4 C.D 4

Y O LA3 3

l tD W

C3 Q C1:ll E lE==

p k-- >--

e 'CC <n e.n

[

C.C a

^

O W

=

ej s ~

O"i

.J Co u")

e o

C3 O g

y ~ W C=1 C"3 C"1 G3 CC cC cc cC a

O

'k D CM CEl: Ck:=

crs I^

H H.4 O

4 Z

"'C

-.C U>

w CC CD CD CD 4

up W

e--e e- -e G. Z 3lll 3::

E-W M M M CC O

N O

g Q.

r>

0 W

M W

0::

C Z

D N

u m

M ese O

).

3 n.

C=)

W O

4 m

.- ! L.D Q:

O

_J E

~

a C::a

,r a.

cs; CC W O

Z _>

i s

o, w

O D--

C::

,e O

c J O.

O O

O O

O 04 O

O O

O O

- CC C""1 in O

U1 O

U1

s=

C-.)

CC r4 e4 c4

• --* LJ J CE:

i

>=== i=2 u-)

m 12 3 C-.)

"C

>= m em CU

(%J CC

~2 CD C%J F-6C CC O M

a. CC W M lts "ll K W I

Q. M M O L&J CD *--*

CE:

J C O u.

..e O

M M M

+--*

e 0,

d

\\

FIGURE h LOW RANGE PRESSURE-TEMPERATURE DISPLAY

(

\\s H-iL EJ

-4

=

M N>

= W O

ik J u

p ga O

s a

a e

i ' i '

I s'

v O

O O

O O

a H O

O O

O O

U,1 h

T M

N

,,I, N-[

==

=

.m M=0%WM

_J O

3 lf,"I h

D a:

_,D-CD a= a-C3 0.0 C3

~

U">

Q >-

• -* s'#3 Z HX b

l--

l--

H=

', s O,

E

= = c o-u d

u u '--

H-H u

,=Q w

=

_h 8

mam M

O u")

v-w C%

H.=

Ct G U")

I 1

O CC A:4 1

[m M H g

W uww h

g W LLJ ZZ E M - W

<g g,o ID LLJ J

J

• ,y O

W g

Sti O Q Z: Z:

• -* GG f

=_: oS a,

-g-M i c:

u c

t a go

[

o W ca ca c,

'- g y_

g e

..s E E E p

_8 1

zmm o_

-+

C w

mwww W---

O. E E

5, O maa O

m O

N O

LL U7 W

g,,,

,,a O

m eB

s 3

a =-

H s

-Jw g

"5

-r o.

n3 e W 03 W

>-- p:=

~

o

> o c

l O tr O Z y x e" J O

.o y3 f

j N.

u~

l I

I l

I I

h I

tre O_

c=

l

[-3 o

o c.

o o

o ci O

O t--- :-

i o

,3 o

o o

e o

e

- c: cm

+ ny b

w W

t M-N

> u CC t

e-*

Lt.J Q:

"RJ t3 ' '==

u, c: = w e J G g O efe

n. E Wltaett2 % W l

.IL M ***t3 C'

.. v a.

5::

aam I

i F.

l l

l l

o 9

FIGURE 5 INADEQUATE CORE COOLING DISPLAY P

c'%J F--

G.

- =

O

== W O

O R H Cu O

O O

O O

M W-O O

O O

~

O "

C"'3 H

T tl N

ll;I"

E H <Z v'M2 'a ""*ue H' A * "l A -

J W W Z e

o O

WX g

l 6

g a g i g i l ir -

O

% H-H O Q.

O O

Ltl its its O g

i= Eg O

U7 e

p--

H p-ZW fO b

N e.* w CJ C J C, )

.v g g Co O

Z Oo a

J O

Lf"J e

k o

Hw P-C O CD U">

t/3 C)

I Wm 8

O W C=b CC 5:ca LLJ Ha go 13 C ) L 1J 1 L.s O

E k-CE

+

O CC' O

W t.LJ Z:E=:

C.-)

<Z CO a

a *- >

e.- e se j

LM JJ L a.J g

Y k

Oc 2C l F-*

^

W -

e.-.E.lll O

c=

0 u,.

s.%

O

=3 Ow OJ 6

a:s E CC C,t"J C,t")

(

C:38.._JtD U~J o

-lt s

6.LJ O

E H C"3 C""3 C"3 f '.'

C~3 O

e 4 CC CZ-CZ":

CC 1^

.- E CM CE C;hc

=

H+

O O

W w

U")

0. :"C "E Z"

o "I

tJ~J g

= C CD wD C D.

rfi e

.e C"I H :"E :'Z'" CC CA-

~ x W M M M O')

E O

E O

~

O N

O E

u, B

O o

=

W w

H.-

sr L.2J l2lll

)

te's a t/s Ifl O O

4

=l::

=;p-Ww o

4 so O

c;;)

er 03 O

_J O

J C.D

~

• "f" O.

O.J K

LaJ Lfl L.A.

C=3 CO W =

J O

O H--

A::3 O

E^

O ll'::

CC DJ

+

C

\\

w

=.C O

D Lf's l

l l

l l

l l-l l

\\,-

l

~%

~

O D

cc

<Z O

Od o O

O O

O Ge O

O O

O OF H

D O

O O

O O

O O

O O

JD O

ee C :: C3 0) to T

C4 0

0) to r

N

=s-C) cc ef '. O4 C

.=

=*

-e

>--* LJJ C:aC Cr)

N La*.s t/t U""J H C::3 C)

"Z" H 83)

• T

= LJ

&J C :: ""= CD OJ F it ir O 8tt G. K W1/8'/lD E W l

G Ill M 83 LLJ O e.--*

O u.

Ca::: J.2:::

C=

• ==*

M M M

(

o 9

FIGURE 6 ATOG P-T DISPLAY WITH TREND

~

{

\\

O O

H-.

G b

m

=

=

W O

MJ

D H CD C

.,.g'.:..': t J -l>

v QJ CD >=

llliC:

r

===

CD

-J O

g g

g g

CC D--

CD CD O ===b---

Ew N,

\\

'O 3C :l O Q.

O 6---

l-- >--

o=

uJ U UC3 (O

=. W

• p m

M M &

Y s.rq l

m O

O Oo Pw CD O CD LO g)

La. CC C=1 CC 5:ct 1

Ifl >--

H.-

W W L.LJ t LJ l

+

Lt"J W l.J.J l2*.

E CL.

MM W *-*

<I s'.D

C.f">

T, y,

o

(

O~

u e W C"3 C3 C""lI c.

.a Ca 03 i

y C3 O

\\

M CC CC CC

\\ ^,

CL,.

O D CC CC Cn:

r.,o e.*

~ F-

>- +

LJ">

<I :"C Z 2""

rO MrD r D. C D w

===

s.c lliillll t LJ D

== =n-tys 1.r) t.G O

O W

O

<1 J CD E

J Q l &-

4:3 T

u.

OJ CC

=

l CO W W

>=== GCI O

> g CC O &

O H L.LJ >:0 c-Q C

O

C :"3 LO l

l l

l O

D--

CC cJO O

O O

O OCd F---

N

~

O O.

O O

O

~ CC C3 b1' O

If8 O

Di C-O CC W L.LJ CC Cre c4 c4 H C3 LJ")

4/s LO U

ZI'"

C: C= f D H III

.:=>

I", W sS.J co Hg g O oft

n. M WIfeLO D E W l

IL LO *

• 13 1 L.J CD W CC -- J II:

ee o G.

O.

M M.M 4.

O i

l L

o e

FIGURE 7 ATOG P-T DISPLAY WITH THERMAL SHOCK UNITS

(

C%J O

O D--

AL b

o--*

C

'O W

O EJ j

a -

z I"l

<Z C"3 Z

i 3

0 3

g rr t/s

=

.-e 3aJ J

O O

O CD O

O rD c c C:D e--.e of:

T

r-r')

e4

_.J CC ca.

~2

+

= c I W I/3 O

CC' Chi C C2 o

C.n Q =>--

- C.n ~I np W ><

• N

>-- W >--

gw

= =.--

III la N

>"')*

H OE Lt"8

+

CJ C

C., )

W rO

'-* b-f-'

f M M M

, s+

v A

h

.O Hw Cr")

""' O O :D LO M

1,a. Cn:

"C.

CD CZ: g2lll t

1/s >---

>-- >^

W r) 14 I a.J l

+

C W

L.AJ lllE :

m 331:

cL,,,

g

-e C

C.43 4

O I.LJ

-,,1 J

rD W

ce o Ca X: X:ll

^

c:".

O O.

• -e I CZ: (J"I C./"J ow

• 1" O

{

J ID LJ")

O W C"2 C3 C

\\-

C./"I '

gg i

C O

1. g CI: CZ: CZ:

o_

o o

C== oc ce r.n 3a t-LO

>. +

42 llZ: ':'Z:: T rO grD C O C Es

<Z LD W e-o e--e

>--e i

0 3'".

Z: 22:

O M M M

.O N

O O

t G.

LFJ O

W M

H ll2E:

ang 1/5

""=

O c:a W $

O 42

! CD

&n J 2 u cm v at C%j g afi

.,,_j 03 W

w l---

A o

> Z CC

=> g O

F-N L.J.J >l:

e NJ O

C Z ::"3 LO l

I l

g g

O D-=

CI CNJ O O

g o

O Oc4 3--

O,

[,

- cz; c O

g g

v lo g,

gfi

=>

C J, CZ:

u.

cc

,e c4 W

_e p

c (Y"5 GO LO C)

Z

>- to CZ:== C D g Q l.rg Cl., g W 1/1 f.O "b' C W I

Ik LO " O

... o,u O

M M M

. t=-=e

/

\\s

mh*

ho 7g g

g f"$E mE

~

y i %"

p 0

2 0

T P

0 I

l 7

l N E 0

U TB 0

RL 4

ZV D T PL N A N

l A S O

N

~

I E

L 0

0 0

9 0

T G

0 GA 5

0 0

9 I

S 4

A Y0 3

2 1

L A R a[

l

[

+

I 1

C E

0 O R D j

g 0

S P Y g

/

I S H 6

)

EX R(

T T I l

l H

OP 0

f i Ct 5

+

T T T 1

l E 6

/

g CC C l

e IT a

saa

)

0 0

0 T(

9 0

g OB 5

5 H

FR O AB T

T)

ST

+

5 EC EE E E N N P

(

1 A

6 A

R J I I f

GELL G

E 0

D Rl l

i i T

)

A 0

0 I T T

- AS S D(

4 0

S LB 5

0 ED DD O O 4

P C R A AA

.,S

- )

U R RR T+

5 T

(

6 A HHH A

5 R G G G E I I I w

g P HHH 1

1 E asa r

R 0

T Z

0 0

F 5

0 E

1 3

I R

0 H

S E

5M 0

5 Y

W V E

0 A 0 O

F 1

L 3 LG 4

F 2

R F D 8

E L

t t

e!

/ C V 5 TB O V A

RM 5

0 E X 0

2 0

H U

/

0 Y

A 1

1 2

0 0

0 02 T Y 0

0 0

I RD 0

5 0

VC A 8

2 1

1 I E R 2

- 5 5

T D C

H T5 l

8 iE 2

A G

t l

3 TR 5 p 5'

E P5IG E 0 I CF R L H 0

aaa 1

i

e r

FIGURE 9 ATOG P-T DISPLAY WITH LOW TEMPERATURE OVERPRESSURE PROTECTION LIMITS t*%J O

O F--

G.

f%

>-e

=

=

W O

E.J D

P-ID OT M N::>

Q. J I"'3

315:

<I g

3 g

3

3::

i i

CC M O

O sm IS C

\\

> - - >.- W Ew

E: CE O LL C

OZ U"'A

+

F-- > -

6--

CJC) W g *Z W

(.J3

~

sf H m

M M M v

O O

g g

6- -

Cr">

C itJ U")

g la. ("hc I

C3 CC 52:2 4

t/l >--=

>== >= ^

W C) L.s.J t a.J 4

+

IM W IaJ l2:: l3l:

CL.

w E *> e-o e-o

.cI cO

<1

\\

I.3 1 LJ J J

(D W

rm O Ch:: ::= lE l:

H

^

~

e-- >--

CC O

O I CC C.t") fC Ow

7" o

(

CJ">

J in in O W C"3 C"3 C'"3 O

' t"3 O

1. E CZ". CZ: C2:"

)

Q.

O

,3 CM Chlll Ch:::

U">

I^

D-F- +

LA

<I ::C 3""

I'2""

w C.JD

-

m o

CD W

O

-- EA O

> >=

O at O

J N

CC LLJ DiC C'.J O

O 2:: =3 Lt")

l l

l l

O CC l

iN O O

O O

O ON D- -

O O.

O O

O e-* (Z" C3 l

Its "

O tti O

Lrt

• ll> CJ CZ::

i T

N N

w L.LJ C:t:::

9-= C l

U""t tra u")

C3

""Z" i

.. >- 4e CC ::"!:ll' rD r% CW

("%J W C:::).-*

F#

t-it E O lte IL E W Iftt#s: DEW I

Q. lll ** 8.3 CM J =C

.. O u.

O M MM s<~

e O I

\\

I k

e FIGURE 10 ATOG P-T WITH FUEL COMPRESSION LIMITS

~

f O

O H 1 h

U h C

EJ

$ e go C

"T" N>

AJ C3 H

=

<I i'I

i t

e

=

w = 0 I W t/s o

c:::3 o

40 m

WX Ew o 0.,

O OC W

tW co

-r m

• o W

Oo pw

&J C LQ T

m k

D H^

W 3

+

C W

w O

m E

q CO

<1 O

Q

/.._ %

o

^

/

c. o O

't I

(

ow CsJ O

5 sW co m,

or.g m

c=

o c_

O 3

m I^

H H+

O 4

Lf">

w M

4 0">

+

W b

Q O

M O

N O

O a

W

+

g W

co W

J N

h, o L

.n o

o o

1 I

G w.

g g

o" e

v 0j Os W

b 04 ea W

g o ej)

A E W1/1/ID E W l

AW"U t

O u.

.--e we*9 e

e 9

r FIGURE 11 LOW RANGE P-T WITH INCORE TEMPERATURE SELECTED N

H G-EJ E

HD

="': W O

ga CD >- llQ O

i e

i i i e a

i

• T*

O O

O O

O C"3 O

O O

O O

Z

Hw aJ 0----

O Q3 C"

CL.

I ta.

+

l Z

>= ^

t/I Lt J

-t-O

~

W r.D w

Ln W

"J'll

O W

t

(.n o

'l m

I

.)

CL.

H+

C f s")

LD

<I

w W

9:

W CC O

O in N

O n.

In W

Dnn ^

ttg an o O

Ww O

O c.

(C a O =

eN

+

O O

O l

i I

I I

I l'

l

.--e 4

r-in O

O O

O O

O O

O O

O O

O O

O O-

.O O

r,s,e tw iIs ul y

M e4 r"r >

e*r e tri LA ee F t.re r% %W O.J t.f",e

>- u; (C o tre

c. g W tri et $ g W 3

n,, tn w IJ

.o OQ C:P

(

\\

4

9 rp,ittttliittilittillittitilitilitilllillfilfllill FMiliIIIJ!.IIII!IJjjlj]jjr FM ! ! l ! ! ! ! ! !M ! ! ! !

c'TM'1 l p _ _ _ _ _ _ _ _ __ __ _ _ _ _ _ _ _e A A Fy..

W 8 MdN: j:.Q4 c

! @Q P 3 io$

E. ' "L --fi[},$;2 i I 0

!! ! W

)

_ w t.ep L

i...... '.m s

,e2, n

~.t_

=r

' = >

~

s,

1 b

'h' Gf.iteth

...,,, Y I., ' m :g....-

W

- g.,

~

BACKUP SPDS CRT A

5

\\

~

j I

j 8,

cg.:}h

{! {q n 1

~1

{*

g a=ssqq-SPD3 CRT

,gx. k: -r_.azi.w-25 l

I f

l

.. s -

+

1 c

.. mOs -

s.

i..: %. - -...,

gg t

snp3 gEypA

=

,K-

1.:x ;

m e

s

[

- t

. _. i_i; _N

..a

. i

... r. s 7.ii%

e p

s rI 4'!s. 7j

/*

yI \\9l' q.@,yh},

C 1

=

~-

/

J W 3_

~

1N,

MYj i l%(c I

d

@^ "

i 1

-1 9

/

'y.

'T iaj y

.. /:

m

...m e.,

,,4

/,,pc, i

y y

..i..cq,,,\\, +'<,,.py-2-

r-t

/m.

/

t--

c.

,I i

L._ _- _,

w

-w

r. -

5 41tdGKl> -fi D Glad Fai.tB41$

~ ~ ~

l G

SPDs C a 8

/

6 r

+

m

%,' ' '"' R m>u. :v ~

1

-n-e-if WEHS #

3-l SPD3 KEYPA T

w u-.s I

m r. @ "" 7 - Dx

+

ss

g-

s. -.u 8

-J.

j-

.I.

l h

h A

3 M AIN cowTeot Roou AE R ANGE u s N T (a.ooa es.e v c.w - o- )

i

_.. s.

l BACKUP l

BACKUP SPDS CRT a

SPD3 CRT e

I I

I,

?.

1. m.

CI r-s 3

s u

.r....

\\j y

I i

r.m.

[.

p,H l'l ll I:

e

.m...y rc y.,

- c_.s g ge., _ _

r,,.

., t.

[

ai

<l r

y; r-

. ~

1.

n

/,

l=j g

c.

m.

. j ^\\

j s m.

l s-s j' l.w,l' l W.e-l a re_ b wl

\\. '. <. -- l

'"4' W

a vr s

g Q

o,. e*

[

\\.~

~

3 SECT 60*J A-A mai g..'.e-FIGURE 12 SPD3 lICPLAY LOCATIOr a

7 1

6 j

5 lt 4

~

.\\

11:59:54 1/20/84 SPD3 KE'lPB0 CESCRIPTI0ll MIDLAtlD Utill 2

~

110TE: KEY 5 A THROUGH F

~

Il0T USED L

L L

~

o o

o 0

0 0

F6 F7 - V5tt-30 DEGREES F 1

i p

p p

A B

A/B HISTORICAL TREHD RPS TRIP EllVELOPE 7

8 9

F4 F5 - LOH TEMP OVER PRESSURE PROTECTION E0 l

8 HELP ATOG P-T 4

5 6

5 eN F2 F3 - FUEL COMPRESSION

>c DC LIllITS Loll RAtlGE P-T 1

2 3

l

@g gg THERt1AL SHOCK LIMITS a

C IllADEQUATE CORE O

E C

F1 - PRE 5SURE US INCORE p

j

. COOLING

- l TEMPERATURE y

-l I

f

- CLEAR HOT USED ICC ENTER i

j

~

O d

i o

n-

o 9

FIGURE 14 SPDS MENU FORMAT N

OJ w

e--*

==

0.0 D

2 E L&J C=8 Q e-*

C""3=-

H-=

O CC t) ("o J

L&J

>-- I Q

CD I

Cd E Q >--*

rD LLJ CC CC CC r t"J :D 2 r./=>

• --* r /J C"3 2: LJ J La.J Oa

• --* CC J W t/s J Q CD Jw p

()

O WZ LA.J M

M QC r_3 Its o 2

-J

f. J LL.J 8:A M

O LL.J A

CD CD-l3' OH M

40

C C:3 Lo 6- 0.

H CC Lo o

o

>==

C"L-LL.A IJt W

CC CL-J Ei:

J Q >=

.J J

CD CC W fl22 J4 W

CL.

CD

==

6---

CC WJ m

40 I

QC

• • g Lu :"E Oc 6W H

C G

C C:3 CE A

6---

J n=

to o D

r.O 4

4 c

.M...M...M..

F-Q L

=

y

- m 24 Q

07 m

+

m I. h,

&J EN' W

LLJ

.W 4 CM tJ 4

23 O EL.

O H--

4m w

C=i 6--*

4Dllll1 CC (C

• Q M-=

CC 4Q Z

G)

CL.

LAJ 2

e.'

=

CD fO Q

f.h oW

• =3 CD Jil:

Z: >==

m 46 L

J LLJ >==*

>= 4

.X""

= to 4

W CD O

LLJ I

H LL.1 r3 CE CC o.

O Q

C3 J!: C"3.

Wo

=

rJ m

z

.C=3

>o CD L&.J

- -

• LAJ ZI J

Ce

• "f" LLJ

>- - C=1

>-* r.J"3 CM W

CO Cs-I r, J U3 P-s

==

Q

()

r o u.J o

LAJ

• Lt.J iu

=>- Ce J

.N F.--

CC W >-

_s C:i c=

c._)

J CL H.-

r-.o Cc Lu t u== r a t

Lu CL-

.--* i :=

3 oJ cec) *--*

I

-J C=

co Ce CA c: Ca

=a r ) Ce Lu t-C4 Lu f.D CD

<_o C3 Cc to :J >--

co CL-C::3 ro CD r.rf CD x C2:

u.J Lu t o CL CD LAJ Q_

b---

CD Z Cd CC :D *--*

C, J

rO Cc CC.J. -

• Lu Q-ia

=c c.

CD C=

=s-

.E...D...E.. N..

C=>

..M...M.. M..

an a

.M..

r.:A l

e

e TIGURE 15 ATOG P-T DISPLAY WITH INVALID DATA s

N G

O G.

N

- =

E!!iin 2:: W c--

g

=3

>- ta C--

muy e--

n.a C""3

~

C 41 g

l I

I g.

CIll t/l J

O e

O G

G G

(=3 43 4 1.D G

G O

G

>--e s/s T

F M

N E

• • = 0 I W 813 O

a WM gw OG O

O=

W

'llll W M

• + t-m N'

G O

l.f'*>

G p.

c4 M

O G2 "T"

1,s.

I 1

1/I

>=== >*

W I

+

O W

O i.

g c,A,.

w

<Z CO

<Z c

r.,3 W

O CD c,

^

t---

CC O

Lf")

.l Ow C4 O

r.f')

J to t"O O W g

F gg C:'l

.O CL O

D

/

r.r p I*

M F-f F+

('--

q w

O--

g

<Z 0--

W G.EU Ci g

C N

O O

u.

LO

+

W M

E.

N Ill e-i, e

R:

N

-J" u.

C-*

E W ~

co W

=

O

> O O g Q =

c4 O

C O

I I

I g

o o

o o

O O C4

'D,

o O

O O

o, gf o

its O

l#1 c4 N'

cq

,sta Lf">

""Z" H en y

g Q eft Q 12; W Ift /llD & W l.

0 III M G 8

O o.

W e==4

(

o 6

g_.

- _ - (

FIGURE 16

~

SPDS DESIGN FLOW CHART e

SPDS FUNCTIONAL SPECIFICATION

.c I

CONTROL SPECIFICATION 1

SYSTEMS REQUIREMENT REVIEW

• 1 I

TEST PLAN ARCHITECTURE DWARE*

CONFIGURATION DESIGN PREL M NARY

• REVIEW DESIGN REVIEW I

1 DETAILED DESIGN 1

I CRITICAL

• DESIGN REVIEW I

i l

SOFTWARE INTEGRATION l

I I

I SYSTEM INTEGRATION I

1 VALIDATION

• TEST I

I FIELD INSTALLATION I

I FIELD VALIDATION" TEST I

I VALIDATION

• REPORT "V&V Activity

.