Sei sulla pagina 1di 42

NATIONAL COMMISSION FOR

NUCLEAR ACTIVITIES CONTROL


Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU)
Analyses, 10-14 March 2008, Budapest, Hungary
CENTER OF TECHNOLOGY AND
ENGINEERING FOR NUCLEAR PROJECTS
ROMANIA
1
Safety Analyses Performed for Nuclear Power Plants
in Romania
Elena DINCA, National Commission for Nuclear Activities Control
Daniel BOGDAN - (CNCAN), Bucharest, Romania

Virgil IONESCU Center of Engineering and Technology for Nuclear
Projects (CITON), Bucharest-Magurele, Romania
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
2
Content
1. Introduction
2. Conservative and Best Estimate Safety Analysis
Methods for CANDU-6 Design NPPs
3. CNCAN policy for NPPs licensing
4. Nuclear safety analyses performed for Cernavoda
NPPs
5. Specific safety issues to CANDU NPPs
6. Conclusions
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
3
Romania interested in CANDU 6 project (700 MWe)
CANDU CANadian Deuterium Uranium
Cernavoda NPPs:
Unit 1 in operation (since 1996)
Cernavoda NPP Unit 2 at 100%FP (September 2007)
Cernavoda NPP Units 3, 4, 5 under preservation (feasibility study)
Nuclear Safety Analyses, performed for:
NPPs licensing
NPPs ageing assessment
Support for a continuous nuclear safety improvement, by:
Plant modifications
New design
Support for plant lifetime extension, etc.
Analysis methodology models and input data
Are in a continuous improving process. The conservative approach is
going to be replaced by a more realistic best estimate plus
uncertainty analysis.
1. Introduction
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
4
Deterministic safety analyses may be performed:
at the limit of operating envelope (LOE) or
a best estimate and uncertainty (BEAU) methodology may be used.
As a rule, uncertainties are not included in the LOE analysis
CANDU reactors were licensed using deterministic conservative
safety analysis, which evaluates consequences from postulated
initiating events and sequences of events (LOE method).
The essential elements of the LOE analysis are as follows:
Analysis input parameters: key and nonkey operating/design parameters
Modeling parameters
Plant operating state
Deterministic assumptions
Computer models
2. Conservative and Best Estimate Safety Analysis
Methods for CANDU-6 Design NPPs
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
5
The CANDU design features historically have influenced formation of
the Canadian regulatory philosophy, as well as of the safety analysis
methods and acceptance criteria.
According to RD-310 Canadian regulatory document: The safety
analysis shall build in a degree of conservatism to off-set any
uncertainties associated with both NPP initial and boundary conditions
and modeling of nuclear power plant performance in the analyzed
event. This conservatism shall depend on event class, and shall be
commensurate with the analysis objectives.
Historically, the reasons for excluding random modeling uncertainties
were as follows:
large originally predicted margins
belief that conservatism achieved by assuming the limiting values of
operational parameters and imposing of certain deterministic assumptions
more than adequately covers modeling uncertainties
lack of well defined modeling uncertainties
The impact of modeling uncertainties is usually investigated by
performing sensitivity studies.
CANDU-6 Safety Philosophy
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
Deterministic Nuclear Safety Analysis
SIMPLIFIED DIAGRAM
Deterministic
Safety Analysis
Support Analysis Design Analysis Licensing Analysis Performance Analysis Uncertainty Analysis
Normal
Operation
Abnormal
Operation
Accident
Condition
Radiological
Analysis
Containment
Analysis
Thermal-Hydraulic
Analysis
Fuel and Fuel
Channel Analysis
Neutron
Analysis
Structural Analysis
Common Cause Event Analysis
Nuclear Safety
Assessment
LOCA events NON-LOCA events
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
7
From a safety analysis perspective, the CANDU reactor has some
distinctive features and characteristics:
The natural uranium fuel resides in a matrix of individual horizontal
fuel channels within short fuel bundles and is irradiated to relatively
low burnup
The primary circuit is relatively complicated, with heavy water at
high pressure and high temperature (100 bar, 312C)
The moderator system is separated from the coolant, contains a
significant amount of heavy water (~260 Mg) at low pressure and
low temperature (1.02 bar, 65 C) with a cooling capacity of about
5% FP
Re-fuelling is performed at power
The reactor has a positive core void
reactivity coefficient.
CANDU 6 - Main Characteristics
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
8
CANDU-6 NPP scheme
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
9
The operating power reactors in Canada have been licensed according
to requirements as those presented in the C-6 regulatory guide
Requirements for the Safety Analysis of CANDU Nuclear Power Plants
(C-6, 1980, issued by AECB).
According to C-6 and RD-310 regulatory documents of CNSC, the
events in CANDU NPPs could be classified as:
Anticipated Operational Occurrences (AOOs) include all events with
frequencies of occurrence equal to or greater than 10-2 per reactor year;
Design Basis Accidents (DBAs) include events with frequencies of
occurrence equal to or greater than 10-5 per reactor year but less than 10-2
per reactor year; and
Beyond Design Basis Accidents (BDBAs) include events with frequencies of
occurrence less than 10-5 per reactor year.
Accidents are also categorized into 5 classes which reflect the frequency
of the accident. For example:
Class 1 category: highest frequency; high number of occurrences per
reactor year (1 per 100 years < 1/ f < 1 per year)
Class 5 category: lowest frequency; low number of occurrences per reactor
year (1 per 100000 years > 1/f)
CANDU 6 Events Classification (1)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
10
The evaluation methodology and acceptance criteria are
different for different event categories. Briefly, the evaluation
methods are as follow:
Category A events are deterministically analyzed. Conservative
assumptions are used for initial plant conditions and mitigating
systems availability, which impose the most stringent conditions on
safety system design. The category A events are called Design
Basis Events; their analysis is the subject of Chapter 15 of a NPP
Preliminary/Final Safety Report.
Category B events are analyzed probabilistically. Realistic
assumptions are used to provide information to operators on the
most probable plant response in case of the analyzed event.
Category C and D events are qualitatively assessed. Category C
comprises external hazard events and Category D comprises
events with a very small occurrence frequency (e. g. steam
generator support or shell failure).

CANDU 6 Events Classification (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
11
According to C-6 Canadian consultative document, the analysis
for AOOs and DBAs shall demonstrate that:
Radiological doses to members of the public do not exceed the
established limits (acceptance criteria level 0); and
The derived acceptance criteria, established for accidents are met
Safety analysis for AOOs and DBAs shall demonstrate the
correct application of safety principles.
Analysis for BDBAs shall be performed as part of the safety
assessment to demonstrate that:
The nuclear power plant as designed can meet the established
objectives of safe operating envelope; and
The accident management program and design provisions put in
place to handle the accident management needs, are effective.
CANDU 6 Safety Analysis Methodology
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
12
According to C-6 consultative document:
Mathematical models and calculational methods (including input
data) recommended for CANDU NPPs represent a conservative
prediction for each of the safety analysis requirements;
Allow for bias in calculational methods at high confidence limits (95
percent). In higher event classes, assess sensitivity analysis,
degraded mitigating system functional capability, a second diverse
mitigating system actuation parameter, and worse plant states as
surrogates for calculational tolerances of higher confidence.
All physical phenomena should be accounted for, and simplifications
should be appropriate.
When choosing conservative assumptions and error tolerances,
identify and account for the presence of each effect separate
(thresholds, timing, competing effects, different failure mechanism,
different reactions, different transport processes, structural integrity).
CANDU 6 Safety Analysis Methodology (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
13
CANDU 6 Conservative Assumptions for
Deterministic Safety Analysis
The deterministic approach uses several generic assumptions
which are applied in assessing the consequences resulting from
the postulated accidents. These include the following:
Reactor trip occurs at the second trip signal on the less effective
shutdown system;
Intervention by the operator is not credited during the first 15
minutes following the the clear and unambiguous indication that
an initiating event has occurred and that operator action is
required initiating event;
Mitigating action by process system response is not credited;
Each special safety system is assumed to be in its minimum
allowable performances configuration.
Computer codes and models are in a continuous improving
process and allow a better simulation of CANDU specific
phenomena
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
14
- local moderator
behaviour
Containment
PRESCON2
GOTHIC
Thermal hydraulics
CATHENA
Reactor Physics
RFSP
Fuel Channel
CATHENA
Fuel
ELESTRES
ELOCA
Atmospheric
Dispersion
ADDAM
- header boundary
conditions
- power transients
- power transient

- thermal hydraulic boundary
conditions
- fuel/sheath temperatures
- metal/water reaction
- fission product inventory
distribution
- fuel failure
- fission product release
- pressure tube strain
- post-contact pressure tube/
calandria tube behaviour
- high building pressure trip
- ECC conditioning signal
- activity release
- weather scenario
- release height/location
- power transient
Public
Dose PEAR
Moderator
MODTURC_CLAS
- coolant characteristics
Deterministic safety analysis process used in
present for CANDU-6 NPPs
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
15
CATHENA Computer Code Characteristics (1)
CATHENA - The main computer code used in present for
deterministic thermalhydraulic safety analysis
CATHENA - Canadian Algorithm for THErmalhydraulic Network
Analysis
One-dimensional, two-fluid system thermalhydraulics code
Developed by AECL primarily for analysis of postulated LOCA
events in CANDU reactors and then developed
Non-equilibrium model (2-velocities, 2-temperatures, 2-pressures
plus noncondensables)
CATHENA interfaces to other codes:

Fuel Behaviour: CATHENA / ELOCA
Reactor Physics: CATHENA / RFSP
Containment Thermalhydraulic Behavior:
CATHENA/PRESCON2
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
16
CATHENAs heat transfer model:
Multiple surfaces per
thermalhydraulic node
Radial and circumferential
conduction modeled
Models heat transfer within
bundles subjected to stratified
flow
Radiation heat transfer calculated
Built-in temperature dependent
material property tables
Models deformed geometry and
pressure/ calandria tube contact
CATHENA Computer Code Characteristics (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
17
CATHENA Validation
CATHENA has been validated, in a formal process, for safety and
licensing analysis of CANDU Reactors, including by the experimental
loop simulation RD-14
Validation has proceeded on a phenomenon-by-phenomenon basis
Standardized and documented models of facilities used where they exist
Default code settings used throughout unless otherwise specified and
justified
Data selected in validation process includes numerical tests, separate
effects, component and integral tests, as well as transients in CANDU
plants
Sensitivity analysis conducted to identify impact on simulations of
experimental errors used as boundary conditions (e.g., power) and
nodalization
Uncertainty analysis conducted to identify impact on code results (e.g.,
uncertainty in heat transfer correlations)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
18
Development of Best Estimate Analysis Methods for
CANDU Project (1)
It has been recognized, by both the industry and the Canadian
regulator, that BE+UA methods have reached sufficient maturity
to allow more accurate and realistic modeling of accident
transients, thus presenting an opportunity to better quantify
safety margins.
It is expected that in many cases a BE+UA analysis will be able
to show larger margins than it was possible to demonstrate using
the conservative approach.
If a BEAU-type of analysis methodology is used, the acceptance
criteria should be met at a certain level of probability and
confidence limit commensurate with the risk posed by the
postulated event.
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
19
The industry has started several projects aimed at the
development and application of BE+UA methods
Results of the BE+UA analysis are expected to play an
important role in decisions related to:
avoid of economic penalties,
relaxation of overly restrictive operational practices,
dealing with plant ageing effects,
resolution of outstanding safety analysis issues
The industry has requested the Canadian regulatory body to
evaluate the admissibility of such methods for licensing
purposes
There is confidence that the best estimate methods will find wide
use in the licensing process in Canada in the next future and in
the other countries which operate CANDU NPPs, including
Romania.
Development of Best Estimate Analysis Methods for
CANDU Project (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
20
3. CNCAN Policy for NPPs Licensing
General licensing conditions of a Romanian NPP are provided in Law
No. 111/1996 on Safe Deployment of Nuclear Activities with
subsequent modifications and completions
Specific requirements for Romanian NPPs licensing related to safety
analyses are provided in CNCAN Norms. CNCAN elaborated specific
regulations for special safety systems, Periodic Safety Review, and
Probabilistic Safety Assessment reports content.
CNCAN uses the following international standards in the process of
nuclear regulation in Romania:
IAEA Safety Standards and Guides;
AECL (Atomic Energy Canada Limited) Standards and
Guides
Regulatory documents developed by Canadian Nuclear
Safety Commission (CNSC) and US NRC;
Applicable Standards and Codes (CSA, ANSI, ASME, IEC,
IEEE, etc.);
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
21
Documents containing requirements used by
CNCAN in the licensing process

Law

Regulations, Standards and
Codes



Regulatory letters
+
licensees documents previously approved by CNCAN
(such as Safety Analysis Reports, Management Manuals,
etc.)

(

CNCAN dispositions and actions stated in the inspection reports
+
licensees procedures previously approved by CNCAN (such as reference
documents, station instructions, etc.)

Regulatory requirements,
criteria and conditions
Regulations,
Standards and Codes
Law
Regulatory letters+
licensees documents
previously approved by CNCAN
CNCAN dispositions and actions
stated in the inspection reports +
licensees procedures previously approved
by CNCAN
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
22
CNCAN Approach for Safety Analysis Methods (1)
Romanian regulatory system influenced by the Canadian
regulatory philosophy but much more prescriptive.
The current Canadian regulatory regime is based on the principle that
the licensee has primary responsibility for safety and that detailed
regulatory prescription is unnecessary and detrimental to the licensee
carrying out that responsibility.
It is a firmly established principle in the Romanian regulatory practice to
require that adequate safety margins be maintained and demonstrated
by the safety analysis.
The analysis must show that the facility meets all specified criteria with
sufficient margins to cover any uncertainties in the methods of analysis.
In Romania, as in Canada, two types of acceptance criteria are used in
safety analyses:
radiological dose limits
derived acceptance criteria.
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
23
Deterministic safety analyses for Design Basis Accidents are
provided in Chapter 15 of FSAR for NPP licensing
The requirements for the Design Basis Accidents for Cernavoda
NPP Unit 1 &2 were reviewed before the commissioning of the
plant started, and during the commissioning phases. The review
was based on:

the feedback from other projects, updated
the systematic review using PSA level 1 analyses in parallel with
the licensing process
the use of external independent expertise for those topics for
which independent review of the evaluations was needed.
It was reviewed the trip coverage as defined in the FSAR,
which was of concern mainly for partial and low power states.
current status of the research was considered, like the
experiments on molten fuel -moderator interaction, review of the
analyses for flow blockage etc..
CNCAN Approach for Safety Analysis Methods (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
24
Aplication of CANDU Defense in Depth concept
Operating
Limit
Trip Limit
Safety Limit
Operating Margin
Safety Margin
Operating
Domain
Design Center
Normal Operation
Design Basis Accidents
Severe Accidents
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
Accident Analysis Acceptance Criteria
Acceptance criteria level 0 Releases limiting individual doses
REQUIREMENT EVENT CLASS
1 2 3 4 5
(i) Effective dose mSv
(ii) Eye mSv
(iii) Skin (average on 1 cm
2
)

mSv
(iv) Liquid effluent emissions during 30 days
are less than derived annual dose limits for normal operation
0,5
5
20
+
5
50
200
+
30
300
1200
N
100
1000
4000
N
250
1500
5000
N
Legend: + the limiting condition will be satisfied for the worst failure sequence of the
specified class of events
N the limiting condition is not necessary
Acceptance criteria level 1 Criteria derived from associated licensing requirements
Acceptance criteria level 2 Criteria derived from analysis modelling assumptions
EVENT CLASS Probability
1/reactor * year
1
2
3
4
5
>10
-2

10
-2
10
-3

10
-3
10
-4

10
-4
10
-5

10
-5
10
-7

Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
26
Requirements for the licensee
The Licensee has to take actions to develop and maintain the
capability for full independent from the original designer
calculations.

The Licensee will address the issue of the systematical review
of safety within the periodical safety review process, in the
long term research and development program, in cooperation
with COG.

The performance of all the calculations for the FSAR and
support documents, are to be performed based on codes
which are in V&V (verification and validation ) and/or already
validated. The data are checked against the site specific data.

Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
27
4. Nuclear Safety Analyses Performed for Cernavoda NPPs
For Cernavoda NPP Unit 1, the process systems failures analysed in
Chapter 15 of FSAR, include:
loss of reactor regulation;
LOCA events (large LOCA and small LOCA);
pressure tube rupture;
channel flow blockage;
end-fitting failure;
fuelling machine events;
pipe breaks in HT auxiliary systems;
loss of off-site power;
seizure of a primary heat transport system main pump;
pressurisation events - primary side;
depressurisation events - primary side;
feedwater line breaks;
steam main breaks;
steam generator tube
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
Accident Analysis Technology for Cernavoda NPP Unit 1
ACCIDENT ANALYSIS APPROACH:
Conservative approach = Conservative codes + Conservative assumptions
DESIGN BASIS
ACCIDENT
Single Failure
F/H
PHTS
LOCA
-S-LOCA
- L-LOCA
- PT rupture
- EF rupture
- Flow blockage
- Feeder break
- Single SG tub rupture
- Multiple SG tub rupt.
- HTS auxiliary failures
LOF
-Loss of normal power
- Pump seizure
LOR
-Loss of P&IC
- Loss of P&IC compon
- Loss of react. control
S/G + FW
F/W break
-Up. Check valve
-Dw. Check valve
LOF
Loss of normal
power
LOR
-Loss of BPC
- Loss of BLC
LOCA
On reactor
ESCS
LOI
Pipe
breaks
LOF
Loss of
normal
power
LOHS
Loss of
RCW,
RSW
MMS
LOI
Pipe
breaks
LOF
Loss of
normal
power
LOHS
Loss of
RCW,
RSW
LOCA
Off reactor
S/G + MSS
MSLB
Inside R/B
MSLB
Outside R/B
Dual Failure =
Single Failure
+
ECCS impairment
Containment impairment
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
29
Nuclear safety analyses performed for
Cernavoda NPPs (2)
The safety analyses for Cernavoda NPP Unit 2 were based on
the guidelines provided in the document Requirements for the
Safety Analysis of CANDU Nuclear Power Plants (C-6, 1980,
issued by AECB).
For Cernavoda NPP Unit 2, the analyses provided in the
Chapter 15 of the FSAR were grouped in sections dedicated to:

Heat transport system LOCA events
Heat transport system non-LOCA
Steam and feedwater circuit events
Moderator events
Shield cooling events
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
30
Examples of safety analysis requirements introduced by C-6
consultative document that differ from previous practices are
given as follows:
a requirement for a systematic review for the identification of
postulated initiating events;
five event classes, replacing the two concepts of single and dual
failures;
correlation of event classes with probability of occurrence and
allowable release limit;
more explicit consideration of combinations of postulated initiating
events with failures of mitigating systems (not just the dual failures
concept).
Nuclear safety analyses performed for
Cernavoda NPPs (3)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
31
Licensing requirements for Unit 2
Cernavoda NPP embedded in the basic safety design the coverage of
a broad area of BDBA events (Category A of events, analyzed in
Chapter 15 of PSAR/FSAR)
The results of the review lead to a situation when some events in the
category of BDBA should be included in the DBA category for
Cernavoda unit 1. For Unit 1, the modifications are to be addressed in
the Periodical Safety Review process starting from 2008.
These results are applicable for Unit 2. The review of the licensing
requirements for unit 2 led to postulating more events from the BDBA
category, some of them involving the re-qualification (EQ for instance)
by comparison with Unit 1.
There are going on evaluations of the Cernavoda safety, including the
DBA definition.
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
32
Category A Events (1)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
33
Category A Events (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
34
A Safety Analysis Strategic Programme (SASP) was developed by
Cernavoda NPP Unit 1 and approved by CNCAN
The main objective of SASP is to get a better definition of the plant
safe envelope
SASP intended also to create and develop a group that will be
able to perform and re-evaluate the safety analyses results.
SAPS purpose was to update, based on plant specific models and
state of the art computer codes, the entire set of accident analyses
included in the Cernavoda Unit 1 Safety Analyses Report.
In the framework of SASP, Cernavoda NPP started to perform a
new set of analyses for Unit 1, in accordance with the current
regulatory requirements and standards.
Cernavoda NPP is a member of COG (CANDU Owners Group) and
uses the last versions of CANDU specific computer codes and shares
with COG members a common data base, SEREX, containing
operating experience events.
Nuclear safety analyses performed for
Cernavoda NPPs (4)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
35
The generic severe accident analyses and severe accident
management guidelines (SAMGs) developed by the CANDU
Owners Group for CANDU 6 are going to be used by
Cernavoda NPP in the elaboration of plant specific analyses
and SAMGs.

At the moment, specific information reports and procedures are
prepared at the plant for establishing the framework for this
programme, including the allocation of resources and the
necessity of training, the activities that need to be performed
with external support, etc.

The specific computer code MAAP4-CANDU will be used for
integrated analysis of severe accident sequences.
Nuclear safety analyses performed for
Cernavoda NPPs (5)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
36
Computer code and plant model validation
Recent experimental data in reactor physics area identified several
shortcomings of the major analysis tools in cell codes such as
POWDERPUFS-V. The most important shortcomings found are:
inaccurate predictions of key parameters for accident conditions,
lack of proper validation data for important phenomena and
range of conditions, and
significant gap between the state of knowledge reflected in the
licensees computer codes and the current state of knowledge in
this area.
5. Specific safety issues to CANDU NPPs
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
37
Compliance with Bundle and Channel Power Limits
The limiting values for bundle and channel powers are specified in
the Operating License for each station.
Licensees ensure compliance with these limits by following operating
procedures, which are based on analyses.
However, current validation of the channel and bundle power
analyses method is such that the errors associated with their
calculations are not well-defined.
If larger allowances for uncertainties were needed, channel or bundle
power may become more limiting than bulk power.
(source: Generic Safety Issues For Nuclear Power Plants With
Pressurized Heavy Water Reactors And Measures For Their
Resolution, IAEA, Vienna, 2007, IAEA-TECDOC-1554 chapter AA2).
Specific safety issues to CANDU NPPs (2)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
38
Operation with a Flux Tilt:
The adequacy of Regional Overpower Protection (ROP) or Neutron
Overpower Protection (NOP) trips for reactor operation with a flux
tilt is demonstrated by analyses, which take into account different
plant states for which continued operation is permitted.
ROP/NOP system design is based on information derived from
simulations of certain reference and perturbed flux shapes in the
reactor core.
Trip setpoints are established from these simulations to prevent any
channel reaching its critical power limit in case of a bulk loss of
regulation.
Specific safety issues to CANDU NPPs (3)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
39
Operation with a Flux Tilt:
In order to demonstrate the adequacy of ROP/NOP trip setpoints,
licensees should:
determine the maximum tilt permitted by the current operating
procedures for prolonged operation with a flux tilt, prior to any
operator action,
generate a steady state flux distribution, corresponding to the
maximum tilt permitted by the current operating procedures, and
design-basis and abnormal perturbation flux shapes,
corresponding to this steady state shape,
assess simulation ratios (ratios of changes in fluxes and
channel powers due to perturbations) for the above flux shapes,
and assess the ROP/NOP trip coverage by determining whether
the ratios are invariant within any postulated error allowance.
Specific safety issues to CANDU NPPs (4)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
40
PHT Pump Operation Under Two-Phase Flow Conditions:
The operation of Primary Heat Transport (PHT) pumps under low
suction pressure and significant void can be detrimental to the
integrity of the PHT system piping due to the generation of large
amplitude pressure pulsations and excessive pump set vibration.
In the past, the PHT piping fatigue analysis was done using a limiting
forcing function (harmonic excitation) obtained from laboratory tests of
full-scale PHT pumps.
Given the underlying assumptions, especially the amplitude and
frequency of excitation, this approach was very sensitive to
interpretation of the test data and their application to the PHT system.
Consequently, the assessment of the piping fatigue life may not have
been conservative.
Specific safety issues to CANDU NPPs (5)
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
41
The safety analyses support provided for the licensing of the two units of
Cernavoda NPP was based mainly on the plant designer and the
analyses of similar CANDU NPPs.
However, over the years the license holder has developed its own
capability of performing accident analyses, using state-of-the-art
computer codes and appropriate methodologies, according to the best
practice of CANDU NPPs .
A Safety Analysis Strategic Programme was developed by Cernavoda
NPP Unit 1 and approved by CNCAN. Up to date a main part of the
analyses from Chapter 15 of FSAR has been performed and a strong
team of Safety Analysis is working at Cernavoda NPP Unit 1.
Best estimate computer codes with conservative assumptions are used
for deterministic safety analyses.
As an active member of COG (CANDU Owners Group), Cernavoda NPP
uses the last versions of CANDU specific computer codes and safety
analysis methodologies and has access to a common data base.
6. Conclusions
Regional Workshop on Application of Best Estimate Plus Uncertainty (BEPU) Analyses,
10-14 March 2008, Budapest, Hungary
ROMANIA
42
References (excerpt)
Law No. 111/1996 on Safe Deployment of Nuclear Activities
Safety Analysis of CANDU NPP- Regulatory Guide, AECB 1999
C-006, Requirements for the Safety Analysis of CANDU NPP Regulatory
Guide, AECB 1980
C-006 (Rev. 1) (E) Safety Analysis of CANDU Nuclear Power Plants, AECB,
1999
Guidance for Accident Analysis of Commercial NPP Safety Report, IAEA
1999
Regulatory Document RD310, Safety Analysis for Nuclear Power Plants,
2008
The Technology of CANDU Loss of Coolant Analysis TTR 276, AECL 1991
CSA N286.7 Quality Assurance of Analytical, Scientific and Design
Computer Programs for NPP, rev. 4, 1998
Manual on Quality Assurance for Computer Software Related to the Safety of
NPP TRS 282, IAEA 1988
Generic Safety Issues For Nuclear Power Plants With Pressurized Heavy
Water Reactors And Measures For Their Resolution, IAEA, Vienna, 2007,
IAEA-TECDOC-1554

Potrebbero piacerti anche