ML20202F894
| ML20202F894 | |
| Person / Time | |
|---|---|
| Issue date: | 12/04/1997 |
| From: | Craig C NRC (Affiliation Not Assigned) |
| To: | Essig T NRC (Affiliation Not Assigned) |
| References | |
| NUDOCS 9712090257 | |
| Download: ML20202F894 (22) | |
Text
-
pa atgk UNITED STATES g
4 s
j NUCLEAR REGULATORY COMMISSION t &
WASHINGTON, D.C. sose6-40M
,,\\,,,,,*
December 4, 1997 MEMORANDUM TO: Thomas H. Essig, Acting Chief Generic lasues and Environmental Projects Branch Division of Reactor Program Management Office of Nuclear Reactor Regulation FROM:
Claudia M. Craig, Senior Project Manager lOAlb
@{
Generic issues and Environmental Projects Branch Division of Reactor Program Management Office of Nuclear Reactor Regulation
SUBJECT:
SUMMARY
OF MEETING WITH WESTINGHOUSE TO DISCUSS THE OVATION DISTRIBUTED CONTROL AND INFORMATION SYSTEM The subject meeting was held at the Nuclear Regulatory Commission (NRC) offices in Rockville, Maryland on September 30,1997, between representatives of Westinghouse and the NRC staff to discuss the development.of the Ovation distributed control and information system. is a list of meeting participants. By letter dated November 10,1997, Wectinghouse provided both proprietary and non-proprietary verslens of the material presented at the meeting. Attachment 2 is a copy of the non proprietary version of the presentation material.
This meeting was a follow-up to a meeting held in June 1997, Wertinghouse provided more details of the Ovat on safety system architecture, the use of data highways, discussed the documerits that will be developed to support the project, the licensing approach, and the schedule for submittals and NRC staff reviews.
074L The Ovation system is a general purpose, oistributed control, and industrial commercial system.
Westir.ghouse provided details of the system architecture for three possible applications: an Ovation upgrade to an existing system, installation of Ovation in a new plant, and m attemative to the upgrade architecture. Due to the system architecture, the staff noted that a 'ommon-mode failure could disable all reactor trip and ESF functions. The staff stated that a diverse coinprehensive back-up system will have to be explored and will be looked at carefully by the staff dering its review. Westinghou.e indicated that the diversity issue will be adnowledged in the topical report submittal, but the review of a back-up system will probably take place at a plant-specific level.
pF03 9712090257 971204 PDR TOPRP EPtVWEST C
pop gQL " %*
~
l T 'l pmr
~r i
$dM Lh.Ckw,_gh_ h O.
_m, i
a D)tT/'
December 4, 1997 T. Essig Westinghouse will request a cost estimate from the staff over the next few weeks. The staff will estimate the level of review effort, including possible audits of information at Westinghouse offices This will allow Westinghouse to determine which of the possible applications will be submitted to the staff for review and approval. The schedule proposed by Westinghouse provides for a topical report submittal in *he first quarter of 1998, the last submittal taking place in late 1998, and possible staff SER being issued late in 1999..
The staff stated that the new section 7 of the Standard Review Plan (SRP) and branch technical positior s will be followed during the review.
Attachments: As stated cc w/atts: See next page
I e
T. Essig December 4. 1997 Westinghouse will request a cost estimate from the staff over the next few weeks. This will allow Westinghouse to determine which of the possible applications will be submitted to the staff for review and approval. The schedule proposed by Westinghouse provides for a topical report submittal in the first quarter of 1998, the last submittal takin0 place in late 1998, and possible staff SER being issued late in 1999. The staff will estimate the level of review effort, incluo'ng possible audits of information at Westinghouse offices.
The staff stated that the new section 7 of the Standard Review Plan (SRP) and branch technical i
positions will be followed during the review.
Attachments: As stated cc w/atts: See next page DISTRIBUTION:
l See attached page DOCUMENT NAME: 9_30_97. MIN To receive a copy of this document, indicate in the box: "C" = Copy without attachment / enclosure "E" = Copy with attachment / enclosure
- N" = No copy OFFICE PGEB[\\n A /\\, HICB:BC /
PGEB:SC NAME CCralMik 4_.JWermlel %
MCase4U DATE it Ic)f/97
'I/h /97
/v / V /97 OFFICIAL RECORD COPY L
N
,, ;; _ __. 7.. _;, _. _ _ - - -.. -. _.. _..,.
6 i
t
-ks DISTRIBUTION.w/ attachments: Summary of September 30,1997, Mtg. with l
Westinghouse datedJ2L4/97 Hard Copy.
CentrolFile PUBLIC PGEB R/F MCase CCraig E Mail SCollins/FMiraglia RZimmerman JRoe RLSpessard JWermiel JMauck JStewart PLocser TJackson, RES HLi MChiramal 4-
,,y_
m,-
7._;-.,.-_.-.---..-.
h WESTINGHOUSE / NRC MEETING OVATION DISTRIBUTED CONTROL AND INFORMATION SYSTEM SEPTEMBER 30,19g7 MEETING PARTICIPANTS NAME ORGANIZATJON Claudia Craig NRC/NRR/PGEB Larry Erin Westinghouse /ICI Jerry Mauck NRC/NRR/HICB Paul Looser NRC/NRR/HICB Hulbert Li NRC/NRR/HICB Terry Jackson NRC/RES/CIHFB William Ghrist Westinghouse /PCD Matt Ch! ramal NRC/NRR/HICE 4
ATTACHMENT 1
.. ~.
l i
i l
OVATION SAFETY SYSTEM i
September 30,1997 l
3 j
Westinghouse Proprietary Class 3 I
{
4 M
AGEXDA i
i j
i 1.0 Introduction 2.0 Purpose of the Meeting t
j 3.0 OVATION Safety System Controller l
Architecture 4.0 OVATION Schedule l
i 5.0 Meeting Summary i
l l'
Westinghouse Proprietary Class 3 i
i
PERPOSE OF THIc MEETING
+ Present an update of the Westinghouse l
development program and proposed licensing approach for the qualification of the OVATION Safety System to the NRC staff Westinghouse Proprietary Class 3
C x~
4 3
ssa lC y
ra te irporP e
esu l
o h
u gn i
t d
se W
e hc S
tcu dorP
- lllll l
l l
I
-o g
4
- ~
Licensing Approach Two Phase NRC Review:
1.
OVATION Design and V&V Process 2.
OVATION Implementation Phase I will include all OVATION Planning and Requirements Documents
+
OVATION Safety System Specification Documentation OVATION Software Requirements Specification Documentation
+
+
OVATION Design, Verification and Validation Plan
+
OVATION Safety System Configuration Management Plan Westinghouse Proprietary Class 3
Licensing Approach i
Phase 2 is a Plant Specific Implementation Review
+
OVATION System Application Requirements Documentation
+
OVATION Operation and Maintenance Documentation i
i l
Westinghouse Proprietarv Class 3 I
Westmghouse Non Propnetary Class 3 i
e f
Proposed Architectures for Safety Ovation Three possible architectures for a Safety Ovation system are illustrated. One is identified as
" Typical Safety System Upgrade Architecture", one as "New Plant Safety System Architecture",
and the third as " Alternative Safety System Upgrade Architecture".
Typical Safety System Upgrade Architecture The " Typical Safety System Upgrade Architecture" is modeled upon the architecture of older safety systems that use the Solid State Protection System (SSPS).
At the top of this architecture are four independent Process Protection channels. These contain the system's analog inputs. Along with the Nur: lear Instrumentation System (NIS) channels, they perform process calculations and compute the individual bistable comparator states that are used to generate reactor trip requests and Engineered Safeguards Features (ESF) actuation requests.
Below this are two channels / trains of Reactor Trip and ESF Actuation Logic. These receive the outputs of the four Process Protection channels (shown), the four NIS channels, and control board switch signals (
) They perform two-out-of four voting logic and other system 1: vel logic calculations to generate Reactor Trip and ESF Actuation
- requests, a, C -
e M
U
Westanghouse Non Proprieury Class 3 2
a,(
~
New Plant Safety System Architecture The second architecture illustrated is the "New Plant Safety System Architecture". This architecture more closely follows the IPS/Sizewell architecture.
A.C M
+
Westinghouse Nor V t to. Cla x 3 3
^>C An alternative upgrade architecture The utird and fourth 6 ures show an alternative to the " Typical Safety System Upgrade 3
Architecture". This architecture provides some kdvantages over the traditional SSPS architecture with restrd to the extent to which single failures can affect the sa'ety functions, especially during testkg 4 slso provides greater flexibility in allowing ESF testing to occur without removing an entire tr6* of ESF from service for the duration of the test regimen.
- n. '
O,b w
i
)
f 1
si
.s 4
Westinghouse Non-Proprietary Chss 3 a. c.
l l
L Typical Safety System Upgrade Architecture
I 'A es O
/
I 1
u d-M k
3
. t.
.T
.au 5
C3 s
Wed m
v a
1n 1
=, 3
,s.
a Westinghout: Non-Proprietary Cass 3 6
i
- a. c I
1 Alternative Safety System Upgrade Architecture
9 s', s -
e-
.7 Westingimmse Non-Propnetary Class 3 l
a.c
-l l
i (V
T U
O Q
uv U
V U
- a. c -
n n
n Trip Breakers
^
^
nyp s are kers UV UV act Output Circuits for Alternative Upgrade Architecture Reactor Trip Logic Cor
..y Westinghouse Non-Proprietary Class 3 g
o.(
PCI Bus CPU PCI Bus CPU card card 1
-u UO UO Controller Controller Redundancy Control (PCRL)
(PCRL) e_________.________,
..j...
[
- a. C l
Local UO Buses F
'i!
(up to eight)
V
':4_.
e:
O Westinghouse Non. Proprietary Class 3 Ovation Safety Controller-Redundant Controller Architecture
,. r.-
Westinghouse Non-Proprietary Class 3 9
dLC i
s
=
B E
E g
E J
w
=
=
w I
I e
g I
e m
_ _ _ _ _._ 2
_ _ _u_ _ _ _
=
..__s___
2 Rem. I/O Rem. I/O Controller Controller Redundancy Control a
(PCRR) e.______
(PCRR)
._____2
______a I
I Xceiver Xceiver Up to 8 remote nodes, i
up to 8 I/O branches per node, up to8 modules per branch I
Remote I/O ixi
. n l.: L
~;
... ;;= :..
- . -.:. ~; - -
, ; ~;-
, a..
f.
lI cc:
Mr. Nicholas J. Liparulo Westinghouse Electric Corporation Mail Stop ECE 4-15 P.O. Box 355 -
Pittsburgh, PA 15230-0355 Mr. Henry A. Sepp Westinghouse Electric Corporation Mail Stop ECE 4-07A P.O. Box 355 Pdteburgh, PA 15230-0355 Mr. Andrew Drake, Project Manager
- Westinghouse Owners Group Mail Stop ECE 5-16 P.O. Box 355 Pittsburgh, PA 15230-0355 I
e
(
e 6
-