ML20127M417

Control Complex Info Sys Bases for Nuplex 80+

ML20127M417
Person / Time
Site:	05200002
Issue date:	01/15/1993
From:	ABB COMBUSTION ENGINEERING NUCLEAR FUEL (FORMERLY, ASEA BROWN BOVERI, INC.
To:
Shared Package
ML20127M408	List: LD-93-005, Forwards Responses to 54 Issues Identified in Draft SER for Sys 80+ ML20127M417 ML20127M425
References
NPX80-IC-DB791, NPX80-IC-DB791-01, NPX80-IC-DB791-1, NUDOCS 9301280199
Download: ML20127M417 (29)

Text

TS(HISC2)/lr1 CONTROL COMPLEX INFORMATION SYSTEM BASES FOR NUPLEX 80*

NPX80-IC-DB791-01 ABB COMBUSTION ENGINEERING, INC.

Nuclear Power Windsor, Connecticut 06095-0500 Issue Date /!/f!93 l

l 9301280199 930118 PDR ADOCK 05200002 PDR A

-4

• e - . _ ,

TS(MISC 2)/lr 2 RECORD OF REVISIONS NO. DATE PAGES INVOLVED PREPARED BY APPROVALS 00 All 4

4 1

1 p

I f

i.

l l

NPX80-IC-DB791-01 - - . . .. . . - . . .-.

l

[ TS(MISC 2)/lr3 i

-l i TABLE OF CONTENTS

i Section Title Eigg j ,

! RECORD OF REVISIONS 2

1.0 INTRODUCTION

5 1.1 PURPOSE 5 1.2 5

!. APPROACH i

j 2.0 SCOPE 6 i

3.0 7 f1MPLEX 80+ CONTROL ROOM IdFORMATION OVERVIEW

! 3.1 MAN-MACHINE INTERFACE 7 l 3.2 -INFORMATION PROCESSING 7 3.3 DOCUMENT DESCRIPTION 10- >

4.0 11 EENERIC INFORMATION PRESENTATION METHODOLOGY

. 4.1 DISPLAY PA:E CREATION CRITERIA 12

! 4.2 COLOR AND SHAPE CODING CONVENTIONS 12 5.0 INTEGRATED _ PROC _ESS STATUS OVERVIE){' 13 l

5.1 IPS0 REPRESENTATIONAL CHARACTERISTICS 13 l

[ AND FEATURES.

! 5.2 DISPLAY CRITERIA FOR IPS0 13

5.3 SYSTEMS REPRESENTED ON IPS0- 14

!' 5.4 SAFETY :INFORMATION . 0N -IPSO . 14 6.0 CRT DISPLAY'PAGES: ARRANGEMENT AND ACCESS 15 i.

4 6.1 NAVIGATION BETWEEN DISPLAY PAGES .15 6.2 OTHER METHODS OF NAVIGATION '15 6.3 CFM DISPLAY PAGES 15

[

1 4

4

'- NPX80-1C-08791 l

TS(MISC 2)/1r 4 4

TABLE OF CONTENTS (continued)

Section Title Eagg 7.0 DISCRETE INDICATION DISPLAYS 16 7.1 DISCRETE INDICATION PRESENTATIONS AND ACCESS 16 7.2 DEDICATED PARAMETER DISPLAYS 17 7.3 MULTIPLE PARAMETER DISPLAYS 17 8.0 ALARM INFORMATION IN NUPLEX 80+. 18 8.1 GENERIC ALARM PROCESSING CHARACTERISTICS 28 8.2 ALARM STATUS AND PRESENTATION METHODS 18 8.3 ALARMS PRESENTED ON CRTS 19 8.4 ALARM DISPLAY ON ALARM TILES 21 9.0 COMPONENT CL'NTROLS REPRESENTATION /INFORMATION 22 9.1 MAN-MACHINE INTERFACE FEATURES 22 9.2 COMPONENT CONTROL CHARACTERISTICS / CONTROL 23 STRATEGIES 9.3 INTERLOCKS AND ACTUATION SIGNALS 23 9.4 OPERATOR SELECTED AUTOMATIC CONTROL SIGNALS 24 9.5 STANDBY CONTROL FUNCTIONS 24 9.6 PROCESS SIGNAL OR COMPONENT SELECTION 25 9.7 SUBGROUP CONTROLS 25 i 10.0 PROCESS CONTROLLERS 26 11.0 SYSTEM OPERATORS MODULES 27

12.0 REFERENCES

28 NPX80-IC-DB791-01 ,

. . - - - - = = .. -_. - .- -. . - _ . - - . _ _ _ _ _

p TS(MISC 2)/1r_5 i

i

1.0 INTRODUCTION

4 j 1.1 PURPOSE i

~

This document providas the bases for the material' presented in the i Control Complex Information System Description (CCISD) for Nuplex 80* . The purpose of the CCISD Basis is to._ provide references and explanations applicable to the CCISD.

4

! 1.2 APPROACH I CCISD Basis information may take one of two forms:

1) Reference - Where bases are provided in design documents or docketed material, direct reference to-the source is provided.

I

2) Rationale --In some cases,~a basis may not exist in

reference material. In these-cases, a rationale is provided i

to explain the reasons 'and justification for the decision.

j In some cases, the rationale may take particular note of a specific section of a reference.

\

! Some CCISD document subheadings are simply introductory or other ,

l general explanatory material. Where a subheading does not itself present design standards or guidance-immediately below, the l-

statement "No CCISD-entries" will ' appear below in its 1

corresponding CCISD Basis entry. References-provided in a higher ,

level heading apply to CCISD entries at lower levels unless more

- specific basis material is provided.

The CCISD Basis begins with Chapter 3 of the CCISD, since Chapter 1 h I was introductory material and Chapter 2 was scope material. ,

NPX80-IC-D3791-01  !

1 i TS(MISC 2)/1r6 -

4 K

[ 2.0 SCOPE i

' Consistent with the CCISD, the bases presented in this document

are applicable for all_ main control room information features in i the NVPLEX 80+ advanced control room and the Nuplex 80+ remote l shutdown panel. These . features are _ expected to be applied to the

! entire plant with exceptions identified _ and evaluated. - Exceptions  ;

to these bases may exist on a case by case basis for pre-packaged f

control room displays that are provided _as an integral part of- i l

i another suppliers product (e.g., Main. Turbine Generator-panel insert). For these displays a mapping is performtd to ensure that l

j there-areino unacceptable conflicts with the Nuplex 80* design.

The bases 'provided herein should support evaluation of.the trade-l offs required for-application of the standard MMI design-features and characteristics to pre-packaged displays and controls, and/or f

1 displays and controls outside of the Main Control Room and Remote Shutdown areas. The majority of design bases for Nuplex 80*

j information presentation is documented in Reference 1.

i 4

?

i.

l i

t NPX80-IC-DE791 _ -

TS(MISC 2)/ir 7 3.0 NVPLEX 80* CONTROL ROOM INFORMATION OVERVIEW Rationale: It is taken to be self-evident that " rapid and accurate, monitoring and control" is needed for safe, reliable and efficient operation of nuclear facilities, as is ease of information availability and provision of an operator-supportive format.

3.1 MAN-MACHINE INTERFACE Rationale: The Nuplex 80' Man-Machine Interfaces (MMI's) are designed in an integrated hierarchial ensemble, with no interface considered as unused "back up",- and with appropriate diversity in hardware and software as defense-in-depth against common-mode failures. As noted in Ref.1 (Section 5.2), a hierechial organization was chosen as being appropriate because an operator requires different levels (e.g., general plant monitoring, specific systems or functions, detailed diagnostics) of information for support of tasks at various times during plant operation. Spatial dedication of selected MMI's was retained as a positive feature of the " current generatior." of control rooms in providing frequently used, and important, functionally related-information.

3.2 INFORMATION PROCESSING COMPONENT / SYSTEM UNAVAILABILITY AND POOR PERFORMANCE Rationale: As stated in the CCISD, the basis for algorithms to monitor equipment / system unavailability and performance is that this information helps notify the operator about undesirable changes in equipment / system status. The use of such algorithms is based on the Nuplex 80* design basis goal of reducing the operators information processing burden. The use of safety-NPX80-IC-DB791-01 TS(MISC 2)/1r 8 l

l related parameters in validation algorithms with non-safety l parameters is to enable alarms and indications to be based upon a  ;

single " Process Representation Value", with the operator being notified of deviations among the set of safety and non-safety )

channels. This enables a reduction (relative to prior control room methods of simultaneously presenting indications of all channels) in the operator's information processing burden, since simple algorithms are continually doing cross-channel comparisons.

This also enables the indicators (DIAS) to be used by the operator at all times (no unused back-ups), since the validity of the single " Process Representation Value" with respect to Post-Accident Monitoring Instrumentation is always known to the operator.

COMPUTERIZED ALARM PROCESSING Critical Functions and Success Paths Monitorino

References:

Reference 1 - 5.2, 5.8 Composed Point Processino Rationale: The basis for composed point processing in the Data Processing System is to establish an organized " building-block" approach, wherein component status and process information is used to compose the next higher level (e.g., flow path) of information, which in turn can be used to compose the next higher level of information (e.g., train), and so on. At each level the various composed points are appropriately-linked to the alarm, status symbol or graphic indication, etc. that. identifies to the operator the required information. This method is used to ensure consistency, provide a relational basis to the operator to rapidly find the sources of problems, and to support the operator's NPX80-IC-DB791-01 i

TS(MISC 2)/lr 9 choices during diagnosis to seek out succeeding lower levels of causes preceding eifects.

Comoosed Component Status Rationale: Composed component activity and status is performed by the Data Processing System (DPS). The DPS uses the component control system actuation logic outputs to present component activity status and composed system ai.d status. Display real estate is also conserved.

Comoosed Alarm Status Rationale: Composed alarm status for a system and its trains follow the method described for Comoosed Point Processina, above, i.e., a building-block approach to providing component alarm information. Critical Function status check acceptance criteria alarms tre separate from the composed system and train alarm algorithms because the critical function alarms are based upon parameters indicative of the adequacy of the maintenance /

restoration of critical safety functions (e.g., RCS heat removal),

rather than the one or more systems that can be used to do the maintenance / restoration (success path monitoring).

COMPOSED COMPONENT AND PARAMETER ALARMS Composed Component Alarms Composed component alarms are based upon combinations of conditions, including plant operating mode, indicative of an unsatisfactory condition of the component.

NPX80-IC-DB791-01

, -1 i

TS(MISC 2)/lr 10

. 1

\

! Composed Parameter Alarms  ;

', l Rationale: Composed paramoter alarms are based upon combinations l

!i of conditions, including plant operating mode, indicative of a process representation parameter value deviation exceeding a setpoint.

j Trend Arrow

i. Rationale: The trend arrow was chosen as an effective and simple i method to quickly inform the operator of static or changing trend.

I- conditions for important parameters and to reduce the amount of

! display space.(relative to continual displays of trend graphs) required to do so. The trend arrow is used for indication and f

F alarm of immediate conditions and does not supplant trend graphs l provided on DIAS indicators or_the DPS Historical Data Storage and

j. Retrieval System, which are used for operator review of system performance over a period of time, i

b Composed Trend Graoh Rationale: The composed trend graph basis is to provide the operator- with information of a current and historical nature which directly supports decision-making and analysis required for normal-

{ and emergency procedures.

i 3.3 DOCUMENT DESCRIPTION-i

! This section merely summarizes the organization of Sections 4.0 -

l through 11.0, and does not require bases.

i l

i NPX80-IC-DB791-01 __ - .-_ ..

TS(MISC 2)/1r 11 j 4.0 GENERIC INFORMATION PRESENTATION METHODOLOGY Rationale: It is taken as self-evident that standardization of information display and access reduces operator workload l

associated.with accessing and processing information. The bases I for conventions in this section are generally included in the description of the feature in the CCISD, and/or can be found in l

the indicated sections of Reference 2. Additional rationale is

! provided below for some cases.

l TEXT AND DATA i

Rationale

Labels, abbreviations and acronyms, and units were judged to be the principal text and data elemer.ts requiring standardization.

References:

. Reference 2 - 2.2, 2.4, 2.5 i PROCESS REPRESENTATIONS i

i Rationale: Display designs are initially developed based upon j physical plant layout and design documents (e.g., P & ID's).

! Standard display formats were developed as-defined in Sections 6 -

i- 10 of the CCISD. Initial display designs are subject to modification during design reviews, task analysis, and validation i and verification.

GRAPH LAYOUT AND INFORMATION PRESENTATION

References:

Reference 2 - 2.3.5-l-

NPX80-IC-DB791-01 . _ - - - . .- . - . - .. _ . - . - - . _ _ ,- .,

TS(MISC 2)/1r12 4.1 DISPLAY PAGE CREATION CRITERIA I

Rationale: Guidelines for display page creation are established for consistency among display formats. Consistency is~ needed to reduce operator search and analysis, which otherwise would

, unnecessarily increase because of variability among display formats and layout methods.

j DATA CONTENT / DISPLAY PAGE DENSITY GUIDELINES i

References:

Reference 2 - 4.1 i

, GRAPH CREATION CRITERIA

References:

Reference 2 - 2.4

4.2 COLOR AND SHAPE CODING CONVENTIONS

References:

Reference 2 - 2.3 COMPONENT CODING

SUMMARY

c.

Rationale: The four characteristics of position / status, control, alarm, and data quality are sufficient to characterize the component state for opdator task needs.

I 1

COMPOSED SYSTEM STATES

~

Rationale: . The composed system states are used- on IPS0 and I certain CFM and other system monitoring display pages to represent systems whose operating status is important to-the understanding:

and comprehension of the information provided on the display page, but whose mimic would not_ fit on available_ display "real-estate".

NPX80-IC-DB791-01 . .- .- . . - - .. . ~ . , . . . - . _ . . . - - . _ - -

l TS(MISC 2)/lr13 I i I j i 1

i 5.0 INTEGRATED PROCESS STATUS OVERVIEW (IPS0)

References:

Reference 1: Sections 5.5.1, 5.8; Reference 5: T Section 4.4.8.2 i

Rationale: Advanced control rooms including Nuplex 80* rely on f

i selectable information, much of which is typically presented on CRT's. Although effective in providing detailed information to

! the operators, the operators' ability to obtain a " feel" for the l plant is diminished. An overview display provides the operating i staff with the information necessary to develop an overall assessment of plant operation. Also, the overview display consideration is an EPRI requirement (Ref. 5, Section 4.4.8, i Integrating Displays and Mimics) and is supported by studies at the Helden Reactor Project in Norway.

5.1 IPS0 REPRESENTATIONAL CHARACTERISTICS AND FEATURES-Rationale: The basis of the IPS0 design is that the operator's overall assessment of plant status can adequately be characterized

[

by the status of a limited set of critical safety functions, power l production functions, and the success paths that are.used to j maintain 'or restore' those functions, including availability l monitoring of safety systems per Reg._ Guide 1.47. -The information provided on IPSO is based upon this approach to plant overview display design.- In addition, the design meets the top-level

Safety Parameter Display System (SPDS) continuous display

-requirements per NUREG 0737, Supplement 1.

5.2 DISPLAY CRITERIA FOR IPS0-4 s

References:

Reference 2 - 2.2, 2.3, 2.4, 2.5, 4.1; Reference 3 4

h 4

I NPX80-IC-DB791-01 , , . - . - . .. . . . .- . .- .-.

.- ._ -.. . . - . - . - . . - . . . . - . . . . . - . _ . . -- - -.- - =

1 TS(MISC 2)/lr 14 4

1 5.3 SYSTEMS REPRESENTED ON IPS0 i

References:

Reference 4 .4.0 i

)

i Rationale: The systems chosen for representation on IPS0 are the major heat transport path systems and success paths that are 2

required to support the critical functions. Other, less ~

important, plant systems or functions were judged to be unnecessary for the IPS0 design. Further discussion is provided .

in Ref. 4.

4 i 5.4 SAFETY INFORMATION ON IPS0 i

References:

Reference 4 - 3.2, 4.0 1

i i

i l

l i

l l

l NPX80-IC-DB791 7:

. . . - . ~ . ~ - - .

TS(MISC 2)/1r15

-f l

6.0 CRT DISPLAY pAGES: ARRANGEMENT AND ACCESS l

References:

Reference 1 - 5.5.4; Reference 2 - 4.0 i

6.1 NAVIGATION BETWEEN DISPLAY PAGES ON THE CRT'S

References:

Reference 1 - 5.5.4; Reference 2 - 3.4.9, 4.2; I

Reference 5 - 4.4.9.3 6.2 OTHER METHODS OF NAVIGATION: POINT POKE Rationale: The point-poke method of navigation is helpful in-directly providing the operator with information related to a component or parameter, without the operator having to search among menu options or directories. Also, point-poke is the means by which important information can be directly accessed, but which is not provided on another display page.

6.3 CFM DISPLAYS Rationale: The CFM Level 1 pages provides more detail on the 4

critical function matrix presented on IPS0; this helps guide the operator to the appropriate Level 2 critical-function display page. The CFM Level 2 display pages are provided to give the >

operator summary information on the status checks for a critical  !

function, and the success path availability and performance status for maintenance or restoration of that Nnction. The displays are j developed'and organized to be consistent with Emergency Procedure l Guidelines.

i

. NPX80-IC-DB791-01 '

TS(HISC2)/1r16 7.0 QLSCRETE INDICATION DISPL AYS

References:

Reference 1 - 5.5.2, 5.5.3; Reference 2 - 2.3, 4.0, 5.0 7.1 DISCRETE INDICATION PRESENTATIONS AND ACCESS Rationale: The choice of using single process representation parameters, that are validated, meets task analysis requirements, while reducing stimulus overload and task loading that would otherwise result from presentation of multiple sensor channels that represent a single plant parametar. Trends are provided on discrete indicators when task analysis indicate the trend is useful for routine monitoring or abnormal event diagnosis. Auto-ranging (with operator notification) results from the aeove approach of giving the operator a single process representation parameter (vs. many), and avoids having to have a process representation parameter displayed to the operator for each range.

Cross validation of DPS and DIAS displayed values is performed to ensure consistency and avoid operator confusion. Temperature compensation of levels is provided so that the same process representation parameter is valid for both " hot" and " cold" conditions.

INFORMATION ACCESS Rationale: DIAS provides menus for monitoring of individual sensors so that the operator can have discretionary access to all sensor values that are being used for calculation of the process representation parameter value. This is primarily required for continued operation with the failure of the DPS (i.e., CRT information is not available). It also allows an individual sensor to be chosen by the operator for display in analog bar NPX80-IC-DB791-01 ~16-

1 l

l TS(MISC 2)/1r17 i

i L

! l

! graph format in the event that the algorithm is not able to  !

calculate a process representation value.

l

. TOUCH BUTTON PHILOSOPHY l

i j Rationale: Touch button interaction with DIAS displays was chosen f as an effective use of available technology for flat-panel

displays, versus other possibilities such as command languages

' )

! (keyboard), wr trackball (with cursor). Also see Reference 2,

! Section 3.4.9.

?

,' 7.2 DEDICATED PARAMETER DISPLAYS f

i j Rationale: The trend / analog-page was designed to give a generally 1 complete (process representation value, quality flag, PAMI I

correlation flag, range scale, normal operating range delimiters, l analog bar graph, trend-time-scale, and trend graph) display of a

! single process parameter. The menu page was designed to 4 supplement-the trend / analog page to give operator access to the

- individual sensor values and enable. operator selection of an f individual sensor when the validation algorithm cannot calculate a

! process representation-value.

l 7.3 MULTIPLE PARAMETER DISPLAYS I

i i Rationale: The multiple parameter _ display-is ' designed to support normal operation and continued operation without the DPS system.

]

j They do_not have trends because trend information is not critical

for- parameters selected for. this type of' display, and because of i the number of values required to be displayed. Note that dedicated DIAC displays with trends are.available with DPS unavailability.

i NPX80-IC-DB791-01 ~ .- .. - - - ~ . . . _ . - . - - _ - .-

, TS(MISC 2)/1r18 1

i

$ i

8.0 ALARM INFORMATION IN NVPLEX BO' I  !

I i

References:

Reference 1 - 5.3, 5.8; Reference 2 - 2.0, 5.0; i

Reference 4 - 4.3 i

8.1 GENERIC ALARM PROCESSING CHARACTERISTICS

References:

l Partitioning: Reference 2 - 5.3.1 (a), (d)-

! Mode Dependency: Reference 2 - 5.1.1 (c)

Equipment Status Dependency

Reference 2 - 5.1.1 (c) t

! Acknowledgement: Reference 2 - 5.4.1 (a)

! Messages: Reference 2 - 5.1.1 (e), 5.4.1 (a) ,

! Prioritization: Reference 2 - d.l.2 Operator Aids: Reference 2 - 5.1.2 (c)

! 8.2 ALARM STATUS AND PRESENTATION METHODS

References:

}

l Annunciator States:- Reference 2 - 5.1.3-4 Representations: Reference 2 - 5.1.2 (e) l l Flash Coding: Referencee ' - 5.3 .

I' Audible Information: Reference 2 - 5.2 i .

j Flash Suppression: Reference 2 - 5.4.1.

l Unacknowledged Alarm Buffer: Rationale: This provides-alarm i

handling to allow display on retl devices f

of the most pertinent j alarm information, i

i NPX80-IC-DB791-01 -

18-i

'ar -e- + --

e r te ,+-+,-,y -w e -wr e- e v *w - - -r ,aw s- +s eraw v-*-c---

J TS(MISC 2)/1r19 j 8.3 ALARMS PRESENTED ON CRT'S i

I ALARM ACCESS VIA CRT MENU AND DIRECTORY PAGES 1

Rationale: Use of the navigation method, i.e., Menu's and ll Directories, was judged to be an appropriate and effective method I to assirt the operator in locating the display page(s) on which the source (s) of the alarm could be located. The method is direct and rapid, in contrast to solely using other methods such as requiring the operator to first go to an alarm list, or having the 1

operator choose the appropriate display page(s)- on_ his/her own judgement.

i

! ALARM ACKNOWLEDGEMENT SINGLE ALARMS (Rationale):

l 1. Tiles: This method chosen was selected to be consistent L with the DIAS method.

i

2. Display Page Descriptors: -This method was selected to allow i alarm acknowledgement in the context of related process-

[ information and to be consistent with the " Point-Poke" l method of lower-level information and display page choices.

! MULTIPLE ALARMS (Rationale):-

i 3. Unacknowledged Alarms List: This method _was chosen so that when more than one alarm comes in, the operator has a method to rapidly review and. acknowledge multiple alarms.

i

4. Display Page Descriptors: This method allows th operator >

.to quickly go through acknowledgement of a11 ' alarms -

l associated with. a given display page descriptor in the q

! context'of_related process information.

I

i l

l - .

i F

_NPX80-IC-DB791-01 o

i l

._ . I

TS(MISC 2)/1r 20

5. DIAS Alarm Tile: This method allows the operator to acknowledge and view alarm conditions using the same method j (via CRT) that would be used had he chosen to acknowledge the DIAS alarm tile.

METHODOLOGY FOR LOWER LEVEL ALARMS 10 "f!LTER UP" TO HIGHER LEVELS Rationale: The described method was chosen as an appropriately

> logical method to direct an operator for alarm acknowledgement, i when an alarm can feasibly be displayed on more than 1 display page. The examples provided in the CCISD show the implementation of the bases provided in the CCISD.

i CRT ALARM LISTS 4

References:

Reference 5 - 4.3.4; Reference 4 - 4.3.4.8.1 I

Rationale: The prioritized list, hierarchial group list and time

' sequential list were chosen to provide alarm organizations that support the operator in accessing alarm information to assist in finding the source (s) of faults or responding to alarm conditions.

T OPERATOR AIDS

References:

Reference 2 - 5.1.2 (c)

OPERATOR ESTABLISHED ALARMS 4

References:

Reference 1 - 5.3; Reference 5 - 4.3.2.4; Reference 4 - 4.3.2.4 f

NPX80-IC-DB791-01 . - - - - . - . . . -_ --

TS(MISC 2)/1r 21 j HISTORICAL DATA STORAGE AND RETRIEVAL: HDSR

(

Rationale: The retention of alarm history and other parameter l data points is necessary to review and analyze plant evolutions, either for diagnostic or optimization purposes.

! 8.4 ALARM DISPLAY ON ALARM TILES

References:

Alarm Tile and List Pages: Reference 1 - 5.3

, Reference 2 - 5.3.1 (a), (d)

! Alarm Conditions: Reference 1 - 5.3 Reference 2 - 5.1.2, 5.1.3, 5.3  ;

l l I

l o

'l NPX80-IC-DB791-01 -. . . - - - . - . . ..

. _ - - _ - . - . - . _ - _ . _ - - = _ -_- _

TS(MISC 2)/1r 22 9.0 COMPONENT CONTROL REPRESENTATION /INFORMATION

References:

Reference 1 - 5.4, 5.5.6 Rationale: Standardization of component control representations and information lessens the number of different types of status indications and control logics which the operator was required to remember on prior, unstandardized control rooms. Nuplex 80'

design selections are " encompassing" for the types of plant components described in the CCISD which are used in the System 80*

l plant design. If any specific component and its operation are

found to not be encompassed by the standard design of this i section, either a new category for a standard would be developed, or, as is more likely, a modification to a standard design would be made so that it encompassed the component.

4 9.1 HAN-HACHINE INTERFACE FEATURES No CCISD entries.

9.1.1 Switch Tvoes Rationale: Momentary type switches are easily replaced without affecting component control, and facilitate bumpless transfer of control between the Main Control Room (MCR) and the Remote Shutdown Panel (RSP). The three types of control switches are sufficient to provide physically distinguishable interfaces to the types of equipment for which MCR and RSP switches will be i i

provided.

NPX80-IC-DB791-01 _-

t TS(MISC 2)/1r 23 l i i

I l 9.1.2 Valves i 4

3 Rationale: The designs described in the CCISD for the categories l.

I and sub-categories of valves were based upon the types of valves h on the System 80+ plant that are controlled via Nuplex 80*.

! t 9.2 COMPONENT CONTROL CHARACTERISTICS / CONTROL STRATEGIES

j i

j No CCISD entries.

i

! 9.2.1 ESFAS Control Sianals i

References:

Reference 1 - 5.7 Rationale: ESFAS signals are generated at a system level by l automatic sensing of plant conditions, or by the operator. The operator is given the capability to override the ESFAS signal to

an activated component (only after the ESFAS signal is generated) ,

l in order to respond to specific plant conditions and/or 'to i

j undertake recovery operations after an abnormal event. If the l operator action to override the ESFAS signal results in an improper equipment lincup, alarms are generated.

f 9.2.2 Bvoassed or Inoperable Status Monitorina l ~

! . Referencos: Reference 1 - 5.7 4

i l 9.2.3 ESF Activation Status Monitorina L '

i

References:

Reference 1 - 5.7 L 9.3 INTERLOCKS AND ACTUATION SIGNALS No CCISD entries.

l NPX80-IC-DB791-01. [

-+ . . . . _ ._,...,-..r-,.--ee .,.1 , - - . ,..,,-c. w: , .. , --e... , .r.., ., . . , , ,, ,O. ,ME,,,.e , . - - .virr y.m.. ,.n r y,. , - --,.%,y,,.7r .r, , . ,

TS(MISC 2)/Ir 24 1

r 9.3.1 Interlock Sianals Rationale: " Interlocks" are provided in Nuplex 80* as permissive functions that inhibit an operator action and cannot be overridden by the operator. They are distinguished from the class of

" activation" signals (9.3.2), which in some cases can be overridden by the operator. Interlocks are used to prevent high risk actions from occurring due to equipment failures or operator ,

error.

I 9.3.2 Actuation Sianals a

References:

Reference 1 - 5.5.6 Rationale: The design approaches selected were chosen to encompass the actuation and override conditions required for System 80* plant equipment.

9.4 OPERATOR SELECTED AUTOMATIC CONTROL SIGNALS

References:

Reference 1 - 5.56 Rationale: The design approaches selected in 9.4 were chosen to encompass the automatic control mode selection options required for operator interface with System 80' plant equipmr .t.

9.5 STANDBY CONTROL FUNCTIONS

References:

Reference 1 - 5.5.6 Rationale: The design approaches selected in 9.5 were chosen to encompass the standby control functions rcquired for System 80+

4 plant equipment.

- NPX80-IC-DB791-01 __ _- _- .

TS(MISC 2)/1r25 i

i j 9.6 PROCESS SIGNAL OR COMPONENT SELECTION i

Rationale: One switch and status indicator per available process 1

instrumentation channel was chosen to enable clear and positive l selection and status of the operator's choice of input to the i I

! component control logic.

O 9.7 SUBGROUP CONTROLS i

I

Rationale

Because subgroup control functional modes (on, auto l off) are similar to individual component control functional modes 1

(on, auto, off), status indicator designs for both were selected

]

to be consistent where practical, so that variability in  ;

approaches to subgroup control is reduced.  ;

i COMPONENT DISCREPANCY s

Rationale: Component discrepancies are individually indicated to l the operttor via ' Operator Aids" (see 8.2 of the CCISD), because

the effects of the discrepancies are manifested as alarms by composed system status and alarms as described in Section 8.2.

t i

?

i 1

1 4

1

! NPX80-IC-DB791-01 _ _ _ - . . - . - - . - - . .

4 i i

TS(HISC2)/1r 26 i

l 1 10.0 PROCESS CONTROLLERS

References:

Reference 1 - 5.5.5 l

Rationale: Process controllers are designed to reduce the number of separate auto / manual control stations with which the operator  !

l must interact. Panel space is saved, cross-channel checking is accommodated, and easier control loop interaction for multiple i

related controls is provided.

i f

l a

i 4

i i

l I

i I

l l

l l

I'

(~ NPX80-IC-DB791-01 t

. . - . - . . - -. - . - - . - , . - = . - . . - . . -

TS(MISC 2)/ir 27 i

1 f 11. SYSTEM OPERATQRS MODULES

}

i

Reference:

Reference I - 5.5.5.E i

Rationale: As noted in the CCISD, operators modules are provided for control of specific systems or functions where the type of operator tasks or system control are better suited for control using physical control devices or task-oriented discrete

! indication and control devices. In addition, the CCS operator's modules provide access to all CCS controls and indication, and are i used in the event of a failure of any CCS discrete controls or process controllers.

l I

i e

t I

i t

1

?

I r

}

i NPX80-IC-DB791-01 .

, . ,n._. , . - _ . ,,-,c , -.-,-e-.- , , , 3 . -.--- , _. --+ -

TS(MISC 2)/lr28 l

)

i

12.0 REFERENCES

1. Nuplex 80* Advanced Control Complex Design Bases, NPX80.lC-DB-790-01, January 4, 1990.

2. Human factors Engineering Standards, Guidelines, and Bases for System 80*, NPX80-IC-DR-791-02.

3. NUREG-0700 i 4. System Description for Critical Function and Success Path Monitoring in Nuplex 80*, NPX80-IC-SD790-02, Rev. 01.

5. EPRI ALWR Evolutionary Plant Utility Requirements Document.

i 1

e a

d NPX80-IC-DB791-01 _

. . - . . . .. .- . . - - . - . .. - . . _ = . - - - _ _ - - _ - . - . .. - - .. .- . . .

4 4

1 l

I I l i

i i

i ATTACHMENT 3 4

1 4

PLANT DESIGNERS OPERATIONAL SUPPORT 1 INFORMATION PLAN 2

FOR THE ABB SYSTEM 80+

1 a i 4

I.

i

?

1 4

l f

4 i

1

{

I

, .< -..n- a n n ,- , , - - - - - ..n . - ,. , . . -, - .--,. ,