ML17258A741

SEP Review of NRC Safety Topic VII-1.A Associated W/ Electrical,Instrumentation & Control Portions of Isolation of Reactor Protection Sys from Nonsafety Sys for Ginna Nuclear Power Plant.

ML17258A741
Person / Time
Site:	Ginna
Issue date:	08/31/1980
From:	Broderick N, Laudenbach D, Radosevic J EG&G, INC.
To:
Shared Package
ML17258A740	List: ML17258A741
References
TASK-07-01.A, TASK-7-1.A, TASK-RR EGG-1183-4155, NUDOCS 8101300262
Download: ML17258A741 (22)

Text

.,v I

O. 1183-4155 AUGUST1980 I

II i K&z&

Energy Meaeurements Group SYSTEMATIC EVALUATIONPROOF,AN MVIHV OF MRC SAFETY TQPllC Vll-lA .

ASSQCIATEQ WITH THE ELECTRICAL,!NSTRU~KNTATIQN AH@ CQNVRQL PQIRVIONS OP THE ISQLATIIQN QF THE BMCTQIR PROTECTION SYSTEM FRQ~ NQN-SALTY SVSYKMS FQR THE GINIMA NUCLEAIR PQMKR PLANT

la Qd&zf3 anorOS MsssuromonI ~ croup Ssn hsmon OpsroIlons SYSTEMATIC EVALUATIONPROGRAM REVIEW OF NRC SAFETY TOPIC VII-).A ASSOCIATED WITH THE ELECTRICAL, INSTRUMENTATION.

AND CONTROL PORTIONS OF THE ISOLATION OF THE REACTOR PROTECTION SYSTEM FROM NON-SAFETY SYSTEMS FOR THE GINNA NUCLEAR POWER PLANT by Donald H. Laudenbach Approved for Publication Jo n R. Radosevic Department Manager This document is UNCLASSIFIED Derivative Ciassifier:

Department Nanatler Work Performed for Lawrence t ivermore National Laboratory under U.S. Department of Energy Contract No. DE-ACO8-76 NYO 1183.

SAN RAMON OPERATIONS 2601 OLO CROW CANYON ROAO SAN RAMON, CALIFORNIA BaI5B3

ABSTRACT This report documents the technical evaluation and review of NRC safety topic VII-I.A, associated with the electrical, instrumentation, and control portions of the isolation of the reactor protection system (RPS) from non-safety systems for the Ginna Nuclear Power Plant, using current licensing criteria.

FOREWORD This report is supplied as part of the Systematic Evaluation Program being conducted for the U.S. Nuclear Regulatory Commission by Lawrence Livermore National Laboratory. The work was performed by EC4G, Energy Measurements Group, San Ramon Operations for Lawrence Livermore National Laboratory under U.S. Department of Energy contract number DE-AC08-76NV01183.

TABLE OF CONTENTS

~Pa e

1. INTRODUCTION

2. CURRENT LICENSING CRITERIA.

3. REVIEW GUIDELINES.

4. SYSTEM DESCRIPTION 7 4.1 General 7 4.2 Pressurizer Pressure 7 4.2.1 Channel I 7 4.2.2 Channel II . 8 4.2.3 Channel III. 8 4.2.4 Channel IV . 9 4.3 Pressurizer Level 9 4.3.1 Channel I 9 4.3.2 Channel II . 9 4.3.3 Channel III. ~ ~ 10 4.4 Coolant Temperature ( avg~ 10 4.4,.1 Loop Al ~ 10 ll

~

4.4.2 Loop A2 .

4.4.3 Loop Bl 11 4.4.4 Loop B2 . 11 4.5 Nuclear Flux. 12 4.5.1 Loop Al . 12 4.5.2 Loop A2 12 4.5.3 Loop Bl . 13 4.5.4 Loop B2 . ~ ~ 13

5. EVALUATION AND CONCLUSIONS............. 15 vii

TABLE'F CONTENTS (Continued)

Page 6 o SUOARY o ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 17 REFERENCES . . . . . . . . . . . . . . . . . . 19 APPENDIX A NRC SAFETY TOPICS RELATED TO THIS REPORT.... A-1

SYSTEMATIC EVALUATION PROGRAM REVIEW OF NRC SAFETY TOPIC VII-I.A ASSOCIATED WITH THE ELECTRICAL, INSTRUMENTATION, AND CONTROL PORTIONS OF THE ISOLATION OF THE REACTOR PROTECTION SYSTEM FROM NON-SAFETY SYSTEMS FOR THE GINNA NUCLEAR POWER PLANT 0 . H. Laudenbach EG8G, Inc.

Energy Measurements Group San Ramon Operations

1. INTRODUCTION Non-safety systems generally receive control signals from the reactor protection system (RPS),sensor current loops. The non-safety sensor circuits are required to have isolation devices to insure electrical independence of the RPS channels. Operating experience has shown that some of the earlier isolation devices or arrangements at operating plants may not meet current criteria. The safety objective is to verify that operat-ing reactors have RPS designs which provide effective and qualified isola-tion of non-safety systems from safety systems to insure that the safety systems will function as required.

This report reviews the RPS EI8C design features at Ginna Nuclear Power Plant to insure that the non-safety systems electrically connected to the RPS are properly isolated from the RPS, and that the isolation devices or techniques meet the current licensing criteria detailed in Section 2 of this report.- The qualification of safety-related equipment is not within the scope of this report and is discussed in 0RC Safety Topic III-12 [Ref.

1] and NUREG-0458 [Ref. 2]. 7

2. CURRENT LICENSING CRITERIA h

GDC 24 f.Ref. 33, entitled "Separation of Protection and Control Systems," states that:

The protection system shall be separated from control systems to the extent that failure of any single con-.

trol system component or channel, or failure or removal from service of any single protection system component or channel which is common to the control and protec-

. tion system leave intact a system satisfying all reli-ability, redundancy, and independence requirements of the protection system. Interconnection of the protec-tion and control systems shall be limited so as to assure that safety is not significantly impaired.

IEEE Std-279-1971 '(Ref. 43, entitled "Criteria for Protection Systems for Nuclear Power Generating Stations," states in Section 4.7.2 that:

The transmi ssion of signal s from protection system equipment for control system use shall be through iso-lation devices which shall be classified as part of the protection system and shall meet all the requirements of this document. No credible failure at the output of an isolation device shall prevent the associated pro-tection system channel from meeting the minimum per-formance requirements specified in the design bases.

Examples of credible failures include short circuits, open circui ts, grounds, and the appl i cati on o f credible ac or dc potential. A failure in an the'aximum isolation device is evaluated in the same manner as a failure of other equipment in the protection system.

3 0

3. REVIEW GUIDELINES The following NRC guidelines were used for this review:

(1) Verify that the signals used for RPS safety functions are isolated from control or non-safety systems.

Identify and describe the type of isolation devices employed. '(GDC 24, IEEE Std-279-1971 Section 4.7;2).

(2) Identify the related NRC safety topics in an appendix to the report.

4. SYSTEM DESCRIPTION 4.1 GENERAL The FSAR for Ginna Nuclear Power Plant [Ref. 5] states in Section 7.2.3 that the design basis for protection (safety system) and control (non-safety system) permits the use of a sensor for both protection and control functions. All equipment common to both the protection and control circuits is classified as part of the protection system. Isolation ampli-fiers prevent a control system failure from affecting the protection system.

4.2 PRESSURIZER PRESSURE Four pressurizer pressure channels are used for high-and low-pressure protection, and for overpower-overtemperature protection. Iso-lated output signals from these channels are used for pressure control; compensating signals are used for control rod motion.

4.2.1 Channel I Pressurizer pressure channel I (designated RED) originates at pressure transmitter PT-429 and provides isolated output to the control system via Foxboro isolation device Model M/66BR-OH, circuit symbol PM-429A

[Ref. 6, drawing BD-10]. The control system provides signals to the pres-surizer heaters, spray valves, and power relief valves. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/66BR-OH, circuit symbol PM-429C (Ref..6, drawing BD-13]. Pressure transmitter PT-429 provides an uniso-lated signal to the loop A1, bT-T avg protection system where it is combined

with reactor coolant system (RCS) temperature and nuclear instrumentation system (NIS) protection signals to generate the signal hT SPl. The signal hT SP1 is isolated from the pen recorder, control board indicator, and computer by Foxboro isolation device Model M/66BR-OH, circuit symbol TM-405D [Ref. 6, drawings BD-2 and BD-15].

4.2.2 Channel II Pressurizer pressure channel II (designated WHITE) originates at pressure transmitter PT-430 and provides isolated output to the control system via Foxboro isolation device Model M/66BR-OH, circuit symbol PM-430A fRef. 6, drawing BD-10]. The control system provides signals to the pres-surizer heaters, spray valves, power relief valves, and to the computer

!Ref. 6, drawing BD-13]. Pressure transmitter PT-430 provides an uniso-lated signal to the loop A2, dT-T avg protection system where it is combined with RCS temperature and NIS protection signals to generate the signal 4T SP1. The signal hT SPl is isolated from the pen recorder, control board indicator, and computer by Foxboro Isolation device Model M/66BR-OH, cir-cuit symbol TM-406D [Ref. 6, drawings BD-3 and BD-15].

4.2.3 Channel III Pressurizer pressure channel III (designated BLUE) originates at pressure transmitter PT-431 and provides isolated output to the control system via Foxboro isolation device Model M/66BR-OH, circuit symbol PM-431A

[Ref. 6, drawing BD-10]. The control system provides signals to the pres-surizer heaters, spray valves, and power relief valves. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/66BR-OH, circuit symbol PM-431C fRef. 6, drawing BD-13]. Pressure transmitter PT-431 provides an uniso-lated signal to the loop Bl, bT-T avg protection system where it is combined with RCS temperature and NIS protection signals to generate the sighal bT SPl. The signal 4T SP1 is isolated from the pen recorder, control board indicator, and computer by Foxboro isolation device Model M/66BR-OH, cir-cuit symbol TM-407D [Ref. 6, drawings 80-4 and BD-151.

8-

4.2.4 Channel IV Pressurizer pressure channel IV (designated YELLOW) origin'ates at pressure transmitter PT-449 and provides isolated output to the control system via Foxboro isolation device Model M/66BR-OH, circuit symbol PM-449A

[Ref. 6, drawing BD-10]. The control system provides signals to the pres-surizer heaters, spray valves, power relief valves, and to the computer

[Ref. 6, drawing BD-13]. Pressure transmitter PT-449 provides an uniso-lated signal to the lo'op 82, bT-T avg protection system where it is combined with RCS temperature and HIS protection signals to generate the signal hT SP1. The signal ~T SPl is isolated from the pen recorder, control board indicator, and computer by Foxboro isolation device Model M/66BR-OH, cir-cuit symbol TM-408D [Ref. 6, drawings BD-5 and 80-15].

4.3 PRESSURIZER LEVEL Three pressurizer level channels are used for high-level reactor trip. Isolated output signals from these channels are used for volume control and for increasing or decreasing water level.

4.3.1 Channel I Pressurizer level channel I (designated RED) originates at level transmitter LT-426 and provides isolated output to the control system via Foxboro isolation device Model M/66BR-OH, circuit symbol LM-426A [Ref. 6, drawing BD-11]. The control system provides signals to the charging pumps and control board indicators. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol LM-4268 [Ref. 6, drawing 80-14].

4.3.2 Channel II Pressurizer level channel II (designated WHITE) originates at level transmitter LT-427 and provides isolated output to the control system

via Foxboro isolation device Model M/66BR-OH, circuit symbol LM-427 [Ref.

6, drawing BD-11]. The control system provides signals to the computer, charging pumps, and control board indicators [Ref. 6, drawing 80-14].

4.3.3 Channel III Pressurizer level channel III (designated BLUE) originates .at level transmitter LT-428 and provides isolated output to the control system via Foxboro isolation device Model M/668R-OH, circuit symbol LM-428A [Ref.

6, drawing BD-11]. The control system provides signals to the charging pumps and control board indicators. In addition, the control system pro-vides input to the computer through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol LM-4288 [Ref. 6, drawing BD-14].,

4.4 COOLANT TEMPERATURE (T )

avg Four T channels are used for overtemperature-overpower protec-tion. Isolated output signals for all four channels are averaged for automatic control rod regulation of power and temperature.

4.4.1 ~Loo Al The loop A1 T avg signal is generated by a dual-current source device, circuit symbol TT-401, as a product of temperature element TE-401A,

. TE-4018, TE-405A and TE-4058 inputs. The T signal is isolated from the avg control system by Foxboro isolation device Model M/66GR-OM circuit symbol TM-401C [Ref. 6, drawing BD-2]. The control system provides signals for control rod regulation and control board indication. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/66BR-OH, cir'cuit symbol TM-401M

[Ref. 6, drawing BD-17]. The control system also provides input to re-corder TR-401 through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol TM-401G [Ref. 6, drawing BD-15].

- lo-

4.4.2 Loop A2 The loop A2 T signal is generated by a dual-current'ource avg device, circuit symbol TT-402, as a product of temperature element TE-402A, TE-4028, TE-406A and TE-4068 inputs. The T avg signal is isolated from the control system by Foxboro isolation device Model M/66GR-OW, circuit symbol TM-402C [Ref. 6, drawing BD-3]. The control system provides signals for control rod regulation and control board indication. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/66BR-OH, circuit symbol TM-402W

[Ref. 6, drawing BD-17]. The control system also provides input to re-corder TR-401 through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol TM-401G [Ref. 6, drawing BD-15].

4.4.3 ~Loo Bl The loop 81 T avg signal is generated by a dual-current'ource device, circuit symbol TT-403, as a product of temperature element TE-403A, TE-4038, TE-407A and TE-4078 inputs. The T avg signal is isolated from the control system by Foxboro isolation device Model M/66GR-OW, circuit symbol TM-403C [Ref. 6, drawing BD-4]. The control system provides signals for control rod regulation and control board indication. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol TM-403W

[Ref. 6, drawing BD-17]. The control system also provides input to re-corder TR-401 through another stage of isolation, Foxboro isolation device Model M/668R-OH, circuit symbol TM-401G [Ref. 6, drawing BD-15].

4.4.4 ~Loo 82 The loop 82 T avg signal is generated by a dual-current source device, circuit symbol TT-404, as a product of temperature element TE-404A, TE-4048, TE-408A and TE-4088 inputs. The T avg signal is isolated from the control system by Foxboro Isolation device Model M/66GR-OW, circuit symbol

TM-404C [Ref. 6, drawing BD-53. The control system provides signals for control rod regulation and control board indication. In addition, the control system provides input to the computer through another stage of isolation, Foxboro isolation device Model M/66BR-OH, circuit symbol'TM-404W

[Ref. 6, drawing BD-173. The control system also provides input to re-corder TR-401 through another stage of isolation, Foxboro isolation device Model M/66BR-OH, circuit symbol TM-401G [Ref. 6, drawing BD-153.

4.5 NUCLEAR FLUX Four nuclear flux channels are provided for overpower protection.

Isolated outputs from all four channels are averaged for automatic control rod regulation of power.

4.5.1 ~Loo Al Loop A1 receives input from the upper and lower ion chambers of the nuclear instrumentation system (NIS). Loop A1 converts these inputs into a flux difference signal (hg) that is combined with T to generate avg the signal dT SP2. The signal ~T SP2 is isolated from the pen recorder, control board indicator, and computer by Foxboro isolation device Model M/66BR-OH, circuit symbol TM-401S [Ref. 6, drawings BD-2 and BD-153.

4.5.2 Loop A2 Loop A2 receives input from the upper and lower ion chambers of the NIS. Loop A2 converts these inputs into a flux difference signal (b,g) that is combined with Tavg to generate the signal hT SP2. The signal AT SP2 is isolated from the pen recorder, control board indicator, and com-puter by Foxboro isolation device Model M/66BR-OH, circuit symbol TM-402S

[Ref. 6, drawings BD-3 and BD-151.

4.5. 3 ~Loo Bl Loop Bl receives input from the upper and lower ion chambers of the NIS. Loop Bl converts these inputs into a flux difference signal (hg) that is combined with T to generate the signal 4T SP2. The signal thT SP2 is isolated from the pen recorder, control board indicator, and com-puter by Foxboro isolation device Model M/668R-OH, circuit symbol TM-403S fRef. 6, drawings BD-4 and BD-153.

4.5. 4 ~Loo B2 Loop 82 receives input from the, upper and lower ion chambers of the NIS. Loop 82 converts these inputs into a flux difference signal (hg) that is combined with T to generate the signal I3T SP2. The signal hT avg SP2 is isolated from the pen recorder, control board indicator, and com-puter by Foxboro isolation device Model M/66BR-OH, circuit symbol TM-404S

[Ref. 6, drawings BD-5 and BD-15].

-13

5. EVALUATION ANO CONCLUSIONS Based on a review of the Foxboro drawings fRef. 6] and the Foxboro Technical Information Bulletins [Refs. 7, 8, 9], we conclude that the reactor protection system is adequately isolated from the non-safety systems and complies to the current licensing criteria listed in Section 2 of this report.

6.

SUMMARY

Based on a review of the documentation listed in the reference section of this report, we conclude that the isolation of the reactor protection system (RPS) from non-sa fety systems sati sf i es the current licensing criteria detailed in Section 2 of this report.

-17

REFERENCES

1. U.S. Nuclear Regulatory Coamission, Safety topic III-12, Environmental Oualifications of Safety Related E uipment.

2. U.S. Nuclear Regulatory Cooeission, Short-term Safety Assessment on the Environmental gualification of Safety-re ate E ectrical E uipment of pera >ng eac ors, - , ay

3. U.S. Nuclear Regulatory Commission, Code of Federal Regulations, Title 10, Part 50, Appendix A (General Design r> en a ,

4. Institute of Electrical 5 Electronics Engineers, IEEE Std-279-1971.

5. Rochester Gas and Electric Corp., Ginna Final Safety Analysis .Re ort (FSAR), dated April 23, 1975.

6. Foxboro drawings, BD-2 through BD-19 for the Ginna Nuclear Power Sta-tion.

7. Foxboro Technical Information Bulletin No. 39-168b, dated March 30, 1965.

8. Foxboro Technical Information Bulletin No.18-240, dated March 1965.

9. Foxboro Technical Information Bulletin No.18-241, dated July 1965.

-19

APPENDIX A NRC SAFETY TOPICS RELATED TO THIS REPORT

1. TOPIC III-1, "Classification of Structures, Systems and Components."

2. TOPIC VI 10 A, ."Testin~ of RTS and ESF including Response Time Testing.'.

TOPIC VII-3, "Systems Required for Safe Shutdown."

4. TOPIC XVI, ."Technical Specifications."

CEB/ijm/g4/g2

Jpp 2l 1987