ML17262A741

LER 91-010-00:on 911230,during Operator Review of Plant Process Computer Logs,Util Discovered That Invalid Data Had Been Used for Calculation.Caused by Invalid Input from Lefm.Lefm HP-85B Computer Was reinitialized.W/920129 Ltr

ML17262A741
Person / Time
Site:	Ginna
Issue date:	01/29/1992
From:	BACKUS W H, MECREDY R C ROCHESTER GAS & ELECTRIC CORP.
To:	NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
LER-91-010, LER-91-10, NUDOCS 9202060130
Download: ML17262A741 (20)

Text

ACCELERATEDDTIUBUTIONDEMONSTIONSYSTEMk~"REGULATORYINFORMATIONDISTRIBUTIONSYSTEM(RIDS)'CCESSIONNBR:9202060130DOC.DATE:92/01/29NOTARIZED:NOFACIL:50-244RobertEmmetGinnaNuclearPlant,Unit1,RochesterGAUTH.NAMEAUTHORAFFILIATIONBACKUS,W.H.RochesterGas6ElectricCorp.MECREDY,R.C.RochesterGas6ElectricCorp.RECIP.NAMERECIPIENTAFFILIATIONDOCKET05000244R

SUBJECT:

LER91-010-00:on911230,duringoperatorreviewofplant,processcomputerlogs,utildiscoveredthatinvaliddatahadbeenusedforcalculation.CausedbyinvalidinputfromLEFM.LEFMHP-85BComputerwasreinitialized.W/920129ltr.DISTRIBUTIONCODE:IE22TCOPIESRECEIVED:LTRENCLSIZE:.TITLE:50.73/50.9Licensee"EventReport(LER),IncidentRpt,etc.NOTES:LicenseExpdateinaccordancewithloCFR2,2.109(9/19/72).DS05000244ADRECIPIENTIDCODE/NAMEPD1-3LAJOHNSON,AINTERNAL:ACNWAEOD/DSP/TPABNRR/DET/ECMB9HNRR/DLPQ/LHFB10NRR/DOEA/OEABNRR/DST/SELBSDNRR/D~SJSLB.SDlRE-'CE2RGNIL01EXTERNALEGGGBRYCEgJ~HNRCPDRNSICPOORE,W.COPIESLTTRENCL11.11221=;111111111111111331"111,RECIPIENTIDCODE/NAMEPD1-3PDAEOD/DOAAEOD/ROAB/DSPNRR/DET/EMEB7ENRR/DLPQ/LPEB10NRR/DREP/PRPB11NRR/DST/SICBSH3NRR/DST/SRXBSERES/DSIR/EIBLSTLOBBYWARDNSICMURPHY,G.ANUDOCSFULLTXTCOPIESLTTRENCL111122111122111111111111DQ~~opgys7>//~7DNOTETOALL"RIDS"RECIPIENTS:PLEASEHELPUSTOREDUCEiVASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMP1-37(EXT.20079)TOELIMINATEYOURNAMEFROMDISTRIBUTIONLISTSFORDOCUMENTSYOUDON'TNEED!DDSFULLTEXTCONVERSION'REQUIREDTOTALNUMBEROFCOPIESREQUIRED:LTTR31ENCL31

"JncC'OCHESTERGASANDELECTRICCORPORATION0I~II~I~44rTOOK11KTC~89EASTAVENUE,ROCHESTERN.K14649-0001ROBERTC.MECREDYVicePresidentCinnaNuclearProductionTELEPttONEAAEACODE7165462700January29,1992U.S.NuclearRegulatoryCommissionDocumentControlDeskWashington,DC20555

Subject:

'nLER91-010,DuringOperatorReviewofPlantProcessComputerLogs,ItWasDiscoveredThatInvalidDataHadBeenUsedForCalorimetricCalculationR.E.GinnaNuclearPowerPlantDocketNo.50-244ThiseventisbeingvoluntarilyreportedusingtheguidanceofNUREG-1022(LicenseeEventReportSystem),andSupplementNo.1toNUREG-1022.Thisreportisintendedtoalertotherutilitieswhichmayhavesimilarsystems.Thiseventisrelatedto,butdoesnotmeet,thereportingrequirementsof10CFR50.73,item(a)(2)(i)(B).Item(a)(2)(i)(B)requiresreportingof"anyoperationorconditionprohibitedbytheplant'sTechnicalSpecifications".TheattachedLicenseeEventReportLER91-010isherebyvoluntarilysubmitted.Thiseventhasinnowayaffectedthepublic'shealthandsafety.Verytrulyyours,xc4RobertC.MecredyU.S.NuclearRegulatoryCommissionRegionI475AllendaleRoadKingofPrussia,PA19406GinnaUSNRCSeniorResidentInspector~~Pi~Lri30V3c.)9202060130920129PDRADOCK050002448PDRgpg 0

>>ACy>><<SOOIO4$)LICENSEEEVENTREPORT(LERlUWNUCLSA11IOULATOA1COO<<)~ONAtyNOTIOONSNO.$1IO0IOVIXSYASII/SvssyACILITYNAA)aIllR.E.GinnaNuclearPowerPlantOOCXSTNV<<tallQlAo6oo0244>0)08<<II)4DuringOperaorReviewofPlantProcessComputerLogs,ItWasDiscoveredThatInvalidDataHadBenUimetr'TINTOATSISILSNNU<<SINIIIAIAOAToATI1)IOTHI1IACILITIISINYOLVIONlNO>>THOAYTIAIIYIA1)I0VI>>1IAL"'VNJOVHV>>IIA-.I'WaasIAOAYTtA1yAO4TTHAH)AOOCXITNVNSIAISI060001230911010000199206000OAIAATINO<<OOINI~ONI1LavtL09"a+g)~ig@i.'HISAlyOATNSUSINTTIOyVASVANTT)OAO)I~ISO.NN41IIIIISOANNIllllllSO.AOS4IIIII<<)$0AOS41))lr>>l$OAN4)ll)ly)$0.AOOINStoa4II)l~OMNIQI~O.T$4lallt~O.T$4)Q)lalSOI$4)QII<<I~O.T$4)QIIN)~O.T$41llIlylSO.T$4)QlNIIIO.T$4)0II>>XIIAI~O.T$4)QII<<IINI~O.T$4)QIlaI0THtAIOVIAININTSOyISCSAf:ICA>>e>>VW>>A>>ey<<A~lllTL1)4)X'oTHa1ISA>>>>y4~A>>A>>AAOIArAAL>>1CsaESSA)LICINIIICONTACTSONTHNLail0$)NAUIWesleyH.BackusANIACOOSTechnicalAssistanttotherationsManaer315CO<<yLITIONILINIIOAIACHCO<<AONSNTSAILV1lOIICAI~IOINTHN1tyOAT11$)TSLtyHONINVHSIIICAVSISTSTINCOUAONINTUANUI'ACTVNI1IAONTASLlTONy10$Rh'I'.PriIg<qg&I>ggi9%j)'..gpssCAUIISTITSLICO<<yONINTNANUSACTUNI1lyONTASLTONyAOSwjv{IN+Jvwg@4i-..)(;Q>~b)<XI0W12'0Nyg~t)4pge~%A"'o'~<V~~~UyyLII4INTALAITOATIXylCTIO114Ttlory>>,y>>AA>>>>sxyscrsosvsa>>ss)o>>oArslNOASSTAACTILAA>>>>WO>>>>>>,I1,AA>>su>>varyNf>>AA<<V>>~rITA>>>>N>>AAA>>llit)tXAICTIOLVSLVSSIONOATSIIIIVONTHCAYTIA1OnDecember30,1991atapproximately1830EST,withthereactoratapproximately984fullpower,theControlRoomForeman,whileperformingareviewofthehourlyPlantProcessComputerSystem(PPCS)logs,determinedthattheLeadingEdgeFlowMeter(LEFM}datausedbythePPCStocalculatecalorimetrics,wasinvalidfrom1800EST,December20,1991toapproximately1830EST,December.30,1991.Thiseventisbeingvoluntarilyreportedtoalertotherutilitieswhichmayhavesimilarsystems.TheControlRoomoperatorsnotifiedthereactorengineerandreinitializedtheLEFMcomputer.Afterreinitialization,theLEFMprintoutvaluesandPPCSvaluesreturnedtoexpected/normalindications.Correctiveactionsincluderevi'sionstotheaffectedprocedurestorequirecheckingtheoperationoftheLEFMpriortoperformingcalorimetricsandtheadditionofahigh'alarmonPPCSindicatingafailuremayhaveoccurred.TheimmediatecausewasidentifiedasafailureoftheLEFMHP-85Bcomputer.>>1CI>>>>SOSISO$1

IIACleesWAI$4$ILICENSEEEVENTREPORTILER)TEXTCONTINUATIONU$,ISUOLSAAASOULAToAvcoeeMISCIbllSASSAOV$0OM$IlO$1$0%104$SSIA$5~I)I1$SACILITYIIAMCIIIOOCKlTIIUI&SAl1ILlAIIUSSOSIII~ISIOVSIITIAL~IM1VISIOMMe~AO$1$IR.E.NuclearPower,PlantTSITIls~~sIeeweelvee~lVACSese~$IIIllosooo2449.1-010-00020FO8PRE-EVENTPLANTCONDITIONSTheplantwasatapproximately98%steadystatereactorpowerwithnomajoractivitiesinprogress.TheControlRoomForeman(CRF)wasreviewingthehourlyPlantProcessComputerSystem.(PPCS)logs.DESCRIPTIONOF-EVENTA.DATESANDAPPROXIMATETIMESOFMAZOROCCURRENCES:oDecember20,1991,1800EST:Eventdateandapproximatetime.oDecember30,1991,1830EST:Discoverydateandapproximatetime.oDecember30,1991,2055EST:Performedcalori-metricusingBartonD/PcellsoptionandplantthermalpowerwasdeterminedtobeapproximatelythesameasthatcalculatedusingtheLeadingEdgeFlow'eter(LEFM)option.B.EVENT:OnDecember30,1991atapproximately1830EST,withthereactoratapproximately98%fullpower,theCRF,whileperformingareviewofthehourlyPPCSlogs,determinedthattheLEFMdatausedbythePPCStocalculatecalorimetrics,wasinvalidfrom1800EST,December20,1991toapproximately1830'EST,December30,1991.Thisdeterminationwasbasedonthefollowinginformation:oTheLEFMFeedwater(FW)Flowconfidencelevelwas100.0%formostofthetimeperiodinquestion(Ztshouldbelessthan100%andsomevariationisexpected).~IACsOAes$$SAI$4$l

IIAC$ereMI$4$ILICENSEEEVENTREPORTILER)TEXTCONTINUATIONU.$.IIUCLEAAAEOULATOATCOAIAIIION/AftAOVEO0+5hO$I$0&IOAEXP>AE5~I$I$$AACILITYIIAAIEIllCOCKETIIUAWEAIEILEAIIIAACI1I~ISAOVANTIALVOW)<~IUUAAOE1$IR.E.GinnaNuclearPowerPlantTEXTill'~A~.~OtWarWNIIC/ebs~$IIITlosooo2449.1-01000030FOoTheLEFMFeedWaterFlow(FFWH)wasaconstant6399KLB/Hrformostofthetimeperiodinquestion(somevariationisexpected).oLocalobservationoftheremotelylocatedLEFMHP-85BcomputerindicatedthelastprintoutwasonDecember20,1991.oDuringthetimeperiodinquestion,thePPCSstillindicatedvalidvaluesforalldatapointsusedforthecalorimetric.TheControlRoomoperatorsnotifiedthereactorengineerandreinitializedtheLEFMHP-85Bcomputer.Afterreinitialization,theLEFMHP-85BcomputerprintoutvaluesandPPCSvaluesreturnedtoex-pected/normalindications.Subsequently,calorimetricswereperformedusingboththeBartonD/PCellsandtheLEFMforFeedwaterFlowDatainput.Theobserveddifferenceincalculatedthermalpower,betweenthesetwocalorimetricswasapproximately0.154.n1C.INOPERABLESTRUCTURESgCOMPONENTS5ORSYSTEMSTHATCONTRIBUTEDTOTHEEVENT:AconstantfeedwaterflowoutputfromtheLEFMwastheprimecontributortotheevent.D.OTICSYSTEMSORSECONDARYFUNCTIONSAFFECTEDNone.E.METHODOFDISCOVERY:TheeventwasdiscoveredduringthereviewofhourlyPPCSlogsbytheCRF.<ACAOAAI$$$A<$4$l

IIAC/earn~($451LICENSEEEVENTREPORT(LER)TEXTCONTINUATIONV.t.WJCltAAAEOVEATOATCOAItllttIOII/AtPAOVEOOVtNO51$0&IOA,t)tP<A55tltl5$EACIEITTIIAMEIllOOCKtTIIV~tIIItlTTAAI.IAIllANEAIII$5QMteaTiAI,MApEvISIO<M~Aot151R.E.NuclearPowerPlantTEXTllTasar~eeWnC~~JVJICAamS~$11111osooo24491-010-00040'8OPERATORACTION:Immediateoperatoractionwastonotifythereactorengineer,reinitializetheLEFMHP-85B.computerandperformadditionalcalorimetricsusingtheBartonD/PCellstoconfirmthatreactorthermalpowerwaswithinlimits.G.SAFETYSYSTEMRESPONSES:None.III.sCAUSEOP~9FPA.IMlKDIATECAUSE:ThesourceofinvaliddatatothePPCScalorimetriccalculationwasinvalidinputfromtheLEFM.INTERMEDIATECAUSES:WhentheLEFMHP-85BcomputerfaileditstoppedupdatingtheDigitalAnalog(D/A)outputcard.Therefore,theanalogoutputtoPPCSremainedun-changed.CROOTCAUSE:TheinvalidLEFMoutputwasduetotheunanticipatedfailuremodeoftheHP-85Bcomputer.ANALYSISOREVENTThiseventisbeingvoluntarilyreportedusingtheguidanceofNUREG-1022(LicenseeEventReportSystem),andSupplement'No.1toNUREG-1022.Thisreportisintendedtoalertotherutilitieswhichmayhavesimilarsystems.Thiseventisrelatedto,butdoesnotmeet,thereportingrequirementsof10CFR50.73,item(a)(2)(i)(B)whichrequiresreportingof"anyoperationorconditionprohibitedbytheplant'sTechnicalSpecifications".VACAOAIItttA>$451

MACivvWkl045ILICENSEEEVENTREPORTILER)TEXTCONTINUATIONU5,MUCLTAAA54ULATOAYCOWMI55IOOI/AAAAOYCOOM5W5I54&I045)tt<II55~I)I'55I'ACILITYMAMCIIIOOCIICTMUM45AITILLIIMUMOl1IIIS04UiMT<AI.~IUYIglOMM~A4515IR.E.GinnaNuclearPowerPlantTaXTWVVY~e~.YVAAAMVMIeIIC~~LUIITI.osooo2449.1-0005Qf08TheplantTechnicalSpecificationrelatedtothiseventisspecification4.1.1whichstates,"calibration,testing,andcheckingofanalogchannelandtestingoflogicchannelshallbeperformedasspecifiedinTable4.1-1".Table4.1-1describesthatthenuclearpowerrangesshallbecalibrateddaily(i.e.atleastonceper24hours)usingaHeatBalanceCalculation(i.e.calorimetric).'hePlantOperatingReviewCommitteedeterminedthattheintenttoperformtherequiredTechnicalSpecificationdailycalibrationoftheNuclearPowerRanges,usingtheDailyHeatBalancecalculation,wasmet,buttheHeatBalanceCalculationswereinvalidduetotheinvalidLEFMinputdata.Insummary,it'asdeterminedthatwhilethedailyheatbalancecalculationswerenotvalid,'duetothesteadystatepowermaintainedduringtheperiod,theNuclearPowerRangescontinuedtobewithindesigntolerancesandwerecapableofperformingtheirintendedfunctions.AnassessmentwasperformedconsideringboththesafetyconsequencesandimplicationsofthiseventanditwasconcludedthattherewerenooperationalorsafetyconsequencesorimplicationsattributedtotheinvalidLEFMinputtotheHeatBalanceCalculationbecause:Duringtheperiodinquestion,thehighestrecordedtotalfeedwaterflow(fromtheMainControlBoardFeedflowTransmittersasrecordedontheHeatBalanceCalculationForm)was6497.29KLB/Hr.Usingthisfeedflowresultedinacalculatedreactorthermalpowerofapproximately98.74.PrevioustotheLEFMHP-85B'computerfailure,reactorpowerasindicatedfromplantcalorimetricshadbeenlimitedtoamaximumofapproximately984powerduetodegradationinsecondarysideperformance.Therefore,reactorthermalpowerwasbelow100%forallcalculatedheatbalances.~eACAOAM544Ai54$I

IIACSetto~ITSILICENSEEEVENTREPORTILERITEXTCONTINUATIONVS.MVCLSAIIAIOVL*SOAYCOSSMINIOMASSAOYKOOMSNOIISOW104SISS(AE5SINAI'SSfACII.ICYISASSIIIIOOCIIlYIIVl&lAQlLIAMLAQIAI~IvSAASSOVSMTtALASYOIOHMAUA~AOIISIR.E.NuclearPowerPlant'fQPllY~~4~.~r400onVIIIICAeltl~'SlIIIIosooo2449101000060'8oThelowestcalculatedreactorthermalpowerusingtheinvalidLEFMinputwas97.274.Thehighestthatreactorthermalpowerwasestimatedtobewas98%.Basedontheseindications,theNuclearPowerRangescouldhavebeencalibratedasmuchas.74low.Theaccuracyofthereactorthermalpower'calculationisdeterminedtobe+2.0%.Therefore,theNuclearPowerRangeswerecalibratedtowithintheaccuracyofthereactorthermalpowercalculationandtheNuclearPowerRange"tripswouldhaveactuatedwithintheirdesigntolerance.Basedontheabove,theconclusionwasthatthepublic'shealthandsafetywasassuredatalltimes.AnevaluationwasperformedtodetermineappropriatemeanstodetectaninvalidLEFMinputtotheReactorThermalPowerCalculation.Thefollowingconclusionswerereached:00Reactorpowerwassteadystateduringthetimeinquestion(i.e.approximately10days)andallcontrolboardindicationsremainedapproximatelythesame.WhentheLEFMHP-85Bcomputerfailed,theoutputtoPPCSfailed"asis",'asopposedtoafailurethatwouldregisterinanexpectedobviousextrememode.00This.failuremode.wasnotanticipatedbytheLEFMvendor.Asaresult,verificationfunctionsandassociatedalarmsforthisfailuremode.werenotincludedinthesystemdesign.InadditiontotheLEFMvendor,plantstaffdidnotanticipatethisfailuremode.Asa'result,theawarenesslevelforaproblemofthistypewaslowandtheformalprocessestodetectandrespondtothisconditionwerenotinplace.AlthoughspecificprocedureguidancewasprovidedtoverifyLEFMaccuracy,verifyingoperabilityoftheLEFMHP-85BcomputerpriortoperformingtheReactorThermalPowerCalculationwasnotrequired.MACSOAM~lt4ll

IIACSVfff~(545IuCENSEEBIENTREPORTILERITEXTCONTINUATIONU.l,IIUCL5*AAl4ULATOAYCOMMISSIOIIIASSAOY5OOvlVO5150&1045>et1A55~I5I55SACILITYNAMSIllOOCKSTIIUS%511ITILlllIIUM454IllS~CIUSffTfALVVAIflV4lOVVVAJA45I51R.E.GinnaNuclearPowerPlantTTI(TIITfffVSMASS~fSSffSSAffvSSSffVfVJVACAfffff~$111710500024491-010-0007o~08CORRECTIVEACTIONAACTIONTAKENTORETURNAFFECTEDSYSTEMSTOPRE-EVENTNORMALSTATUS:oTheLEFMHP-85BComputerwasreinitializedandtheLEFMprintoutandPPCSvaluesreturnedtoexpectednormalindications.oAllsubsequentcalorimetricswereperformedusingtheBartonD/PCellsandtheNuclearPowerRangeswereadjustedasrequired.oAnotewasaddedtothePlanOfTheDay(POD)toinstructtheControlRoomOperators,tousetheBartonD/Pcellsdataforcalorimetrics'untilfurthernotice.BACTIONTAKENORPLANNEDTOPREVENTRECUEGUBTCE:ThefollowingcorrectiveactionshavebeentakentoassurevaliddatafromtheLEFMpriortoitsuseinaPPCSreactorthermalpowercalculation(i.e.calori-metric).oAnindicationoffailureof,theLEFMinputtothePPCSis-thattheLEFMConfidenceLevel(FFWCL)willapproach1004indicatingtheLEFMoutputisnotchanging.AhighalarmonPPCSforFFWCLhasbeenaddedtoindicatethatthisfailurehasoccurred.Ifthisalarmactivates,theLEFMwillnotbeused.OperatingProcedures0-6.3(MaximumUnitPower)and0-6.3.2(MaximumUnitPowerCalculationUsingTheLEFMForFlowMeasurement)havebeenrevisedtoincludethefollowingrequirementspriortousingtheLEFMforacalorimetric:1.VerifyingthattheLEFMHP-85Bcomputerisupdatingandhasbeenoperatingforatleast10minutes.ThisensuresthecurrentvaluefortheLEFMinthePPCSisnotfailed.VACSCAMSSSA1545l

NACTeeM($CSIuCENSEEEVENTREPORT(LER)TEXTCONTINUATIONU,S.NUCLSANNSOULATOAVCOMMISSIONAJfAOVKOOUIVO)ISOAIOISXrlASSIISI%$FACILITYNANSIllOOCKSTNULICCNITIL$1NlA&$1I~IStauevTsALv1V1lONAAOCillR.E.GinnaNuclearPowerPlant:TtxTIN~Nrrr~NrvrNI.wrrrrrewNrcINrr~'elIInosooo24491-010-0008<<082.VerifyingthattheLEFMconfidencelevelisnotinalarm(FFWCL>99;504andFFWCL99.904).ThisensuresthattheLEFMisoperatingproperly.0Anidentificationandevaluationprocessfocusingonotherplantsystemsthatmaybesusceptibletothistypeoffailuremodeisinprogress.ADDITIONALINFORMATIONAFAILEDCOMPONENTS:TheLEFMsystemwassuppliedbyWestinghouseElectricCorporation,ModelgLEFM-824,SerialgU001.ThespecificcomponentthatfailedwastheHP-85BcomputerwithI/OROM,Serialg2619A53804.BPREVIOUSLERsONSIMILAREVENTS:AsimilarLEReventhistoricalsearchwasconductedwiththefollowingresults:NodocumentationofsimilarLEReventswithanundeterminedrootcausecouldbeidentified.C.SPECIALCOMMBFIS:Duetotheunanticipatednatureofthecomputerfailure,theindustrywillbenotifiedviaNuclearNetwork.vrC101ilSCCA<$44l