I&C Status in France & Recommendations to IAEA

Size: px

Start display at page:

Download "I&C Status in France & Recommendations to IAEA"

Coleen Kennedy
6 years ago
Views:

1 I&C Status in France & Recommendations to IAEA IAEA TWG-NPPIC Meeting May 2011 Vienna Patrick Salaün EDF

2 Nuclear Power Plants in France PWR 900 MW series : 34 units 6 CP0, 18 CP1, 10 CP2 units Connection to the grid: rd ten-yearly outage: th ten-yearly outage : PWR 1300 MW series : 20 Units 6 P4 / 14 P 4 units Connection to the grid: nd ten-yearly outage: rd ten-yearly outage: PWR 1450 MW series : 4 units Connection to the grid: nd ten-yearly outage: PWR EPR series : Paluel Flamanville Chinon Civaux Le Blayais Golfech Penly Gravelines Chooz Cattenom Nogent Fessemheim Dampierre St-Laurent Belleville Bugey St-Alban Cruas Tricastin The first unit currently being built Life time extension : up to 60 years, for most units A second unit is planned (some uncertainty) 2 - IAEA TWG-NPPIC May 2011

3 I&C Technologies in the NPPs in France N4 EPR Turbine Control Electronic components (REC 70) REC 70 Digital eq. (MicroRec) Digital equipment. (MicroRec) Digital equipment (P320) Analog Automation Analogue electronic components (8720 & 9020 series) 9020 series COTS DCS (Micro Z) DCS (Contronic E) Specific PLC (SCAP) DCS (T2000) Logic Automation Electromagnetic relays COTS PLC (Controbloc) DCS (Contronic E) Specific 1E PLC (CS3) DCS (T2000) Reactor Protection Electromagn. Relays Analogue electronic components Specific 1E digital system (SPIN) Specific 1E digital system (SPIN-N4) Specific F1A digital system (TXS) Control Room Systems Conventional panel Computerized aids Conventional panel Computerized aids Computerized CR Conventional panels (Remote & back-up) Computerized CR Conventional panels (Back-up. ) Global initial strategy regarding critical I&C systems: Spare part of components Long term agreement with the suppliers : competencies and tools 3 - IAEA TWG-NPPIC May 2011

4 I&C modernization projects in operating French NPPs : The 900 MWe Series (1) The 3rd ten-yearly outage in progress, from 2008 (Head unit) up to The I&C ageing observation phase results (2003) : Good long-term agreement with suppliers. No major modernization projects. Partial modernization of the Rod Control system (IPS-NC) : No modification of the instrumentation (1E) and of the power modules (gripper coil current generator). The new system is based on PLCs (computation), networks and FPGA-Based modules (slave cycler. Time constraint : 1 ms). Renovation of the In-Core Instrumentation system. New system based on PLCs (same as for RCS) and a supervisor shared with the Rod Control system. Some modules of the Process Instrumentation System (Bailey 8720 on CP0 : discrete analog technology) were replaced (redesign with new components but same technology) The relay-based systems (logic automation) were not replaced: the I&C ageing observation phase has considered that they could last up to the next ten-yearly outage (40 yrs), at least. 4 - IAEA TWG-NPPIC May 2011

5 I&C modernization projects in operating French NPPs : The 900 MWe Series (2) Renovation of the Rod Control System Renovation of the In-core Instrumentation system 5 - IAEA TWG-NPPIC May 2011

6 I&C modernization projects in operating French NPPs : The 900 MWe Series (3) During the 3rd ten-yearly outage. Modernization of the Turbine Control system (on CP0, only) Same architecture : Card-by-card replacement. Redesign with new analog components. Renovation of Diesel Alarm System : replacement of the relay-based system by a PLC Preparation of the 4 th Ten-Yearly Outage ( ) Objective : extension of the lifetime up to 60 yrs Constraints : all the important modernization projects must be done during this outage, not during the 5 th ten-yearly outage (ROI) Ageing & Obsolescence observation phase started (end: mid-2012) Benchmarking of old NPPs with relay-based systems still on duty outside EDF, started. Project in progress: renovation of the Primary Pump Speed Control (1E). Analog discrete system replaced by a PLD-based system. 1E Qualification in progress (IEC 62566) 6 - IAEA TWG-NPPIC May 2011

I&C modernization projects in operating French NPPs : The 1300 MWe Series (1) The 3rd ten-yearly outage in preparation. Head of series in 2015.

7 I&C modernization projects in operating French NPPs : The 1300 MWe Series (1) The 3rd ten-yearly outage in preparation. Head of series in The I&C Ageing Observation phase and Preliminary studies ( ) gave their results: Some I&C modernization projects are decided On going projects. : Modernization of the Main Control Room. Same design, hardwired panels are kept but some improvement of the Information System are decided : new tools and HIS for helping the operators (real-time control) New supervisor with more screens and with new or improved mimic diagrams, video Improvement of the alarm management, together with the renovation of part of the Controbloc (automation system) New systems with functionalities added for monitoring the reactor behavior (connected to the power up rate) : Core 3D_monitoring Replacement of the paper recorders by digital recorders (cat. B) 7 - IAEA TWG-NPPIC May 2011

I&C modernization projects in operating French NPPs : The 1300 Mwe Series (2) Modernization of the RPS, RCS, NIS with SPINLine4 (RRCN) technology RPS: Partial modernization at computation level.

keep the I/0 racks and cabling Common Maintenance tool for the 3 systems Logic Automation system (Controbloc) : No problem (aging, obsolescence ) for the next ten years New functionalities/alarms may

8 I&C modernization projects in operating French NPPs : The 1300 Mwe Series (2) Modernization of the RPS, RCS, NIS with SPINLine4 (RRCN) technology RPS: Partial modernization at computation level. Keep the global architecture, the I/0 racks and the cabling RCS: Total modernization NIS: Partial modernization at computation level. keep the I/0 racks and cabling Common Maintenance tool for the 3 systems Logic Automation system (Controbloc) : No problem (aging, obsolescence ) for the next ten years New functionalities/alarms may be added, but not enough margin Some improvement at the system level to be considered: interface with a PLC Some modernization projects : Development of a bridge between the existing (proprietary) Controbloc and a PLC (first installation : Flamanville) Re-design of a module URN (FPGA-based solution, in cat.b): improving the link with the plant computer (TCI) and (re)capitalize the knowledge on the original design. Renovation of the part of the system (UGA/B) in charge of collecting and dispatching alarms to the control room. New system based on Alstom P320 : same architecture with 2 trains (next slide). 8 - IAEA TWG-NPPIC May 2011

9 I&C modernization projects in operating French NPPs : The 1300 Mwe Series (3) Architecture du système 8 Gestionnaires d écran Serveurs de données temps réel redondants Type CIS Safety Gestionnaire d écran de rechange Serveurs de données temps réel redondants Type CIS Safety 2 Gestionnaires d écran Réseau S8000 Safety - fibre optique Réseau S8000 Safety - fibre optique X8 max 9 - IAEA TWG-NPPIC May 2011 Passerelles type CE3000S Câblage E/S existant 60 Châssis Controbloc N20 X8 max Voie A Liaison série optique safety La passerelle 19 " redondante CE3000S Comporte 2 Cartes UT156 et 10 slots: 5-7 cartes GLM 1-4 cartes I/O 1 carte liaison serie Voie B Passerelle type CE3000S Câblage E/S existant 20 Châssis Controbloc N20

Based on N4 (F) and KONVOI (D) experience : Fully digitalized I&C system and

10 I&C systems being installed in EPR Flamanville (NPP under construction) (1) EPR : Generation III+ PWR Design. Based on N4 (F) and KONVOI (D) experience : Fully digitalized I&C system and 4 divisions. In operation in 2014 I&C Architecture : T2000/S5, TXS & P320 (Turbine) 10 - IAEA TWG-NPPIC May 2011

11 I&C systems being installed in EPR Flamanville (NPP under construction) (2) Main Control Room Implementation in different rooms 11 - IAEA TWG-NPPIC May 2011

12 I&C research and development projects; new I&C technologies (1) Projects concerning the next NPPs (EPR) Independent Confidence Building : Formal verification (software, FPGA) Test : functional test coverage, statistical tests Verification of the sizing of the I&C architecture : allocation of the functions, time performance, Safety Cyber Security (I&C systems and connected tools) Basic Design: Proposal for a basic/generic architecture (Industrially reasonable, Acceptable in all the countries) Contribution of FPGA-based solutions (safety systems, diversity ) Integration of operation needs (Integration of information but also separation of safety classes ) Harmonics Project (China-Europe): Harmonized Assessment of the Reliability of MOdern Nuclear I&C Software Objective : to ensure that the nuclear industry has well founded and up-to-date methods and data for assessing software of computer-based safety systems of Gen-II and Gen-III NPPs. the project should foster an international consensus based on a sound scientific and technical approach, and hopefully provide a good basis for harmonization.» Next generation of HIS: new functionalities for operation, Human Factor, classified products (requirements & development) 12 - IAEA TWG-NPPIC May 2011

13 I&C research and development projects; new I&C technologies (2) Impact (benefit & risk) of the new technologies: Wireless, FPGA What-if simulations Basic design Model Driven Engineering: Validation of design hypothesis Modelling of physical part Acceptance methods & tools I&C and operation tests Modelling of Operation requirements requirements To ensure the continuity of the studies: Throughout the project lifecycle Between functional and equipment From plant design to plant operation To have an updated knowledge database: To understand design choices To pass knowledge across generations Modelling of I&C specifications Validation of specifications Simulation of specifications Choice and qualification of I&C platforms I&C architecture optimization Detailed I&C specifications Architecture design Code verification Non regression tests PLC programming On site validation Platform validation Concept PLM (Product Lifecycle Management) : clarification of justifications in the documentary reference frame. Requirements Traceability. Multi-views diagrams. Instrumentation: Evaluation of uncertainties of measurement, Environment of measurement (EMC, Temperature, irradiation ), Innovating systems of measurement (chemical tracer ) Knowledge management: retrieve, rebuild, and structure useful knowledge to maintain ageing units HIL simulation Training Integration tests 13 - IAEA TWG-NPPIC May 2011

14 Recommendation to the IAEA regarding the content and format of future I&C activities (1) TMI, Chernobyl and now Fukushima : efforts are needed to increase public confidence in nuclear energy; Problems arriving in one unit have a world impact, not only national. Some directions are suggested for piloting activities : 1. Maintaining the existing Nuclear Power Plant with a High Safety level Rising up the Safety Level : The need of increasing the Safety level of old plants is obvious. That doesn t mean necessary to reach the current Safety level but prove that the best accessible level is achieved.. Arrive at an international consensus which leaves few margins of interpretation to each country Define a methodology of re-examination of the level of safety of the units before renovation or periodically: a framework for the audits. Perform audits on current situation and propose risks reduction (process, I&C, Human ) by an independent entity 14 - IAEA TWG-NPPIC May 2011

15 Recommendation to the IAEA regarding the content and format of future I&C activities (2) 1. Maintaining the existing Nuclear Power Plant with a High Safety level Control the Obsolescence and Ageing of I&C equipment (analog equipment, digital equipment, cabling, connectors ) Understanding of ageing mechanisms and factors, in particular for current integrated circuits and electronic boards. Management of spares, long-term storage, verification. Maintenance strategy : e.g. periodic replacement or on failure? Estimation / Extension of remaining lifetime (obsolescence, aging mechanisms ) Evaluation of costs, risks, benefits of different I&C modernization options Integrate the ageing workforce and inadequate existing documentation in a longterm management of I&C expertise Identification and documentation of key knowledge, including I&C design basis Means to retrieve, rebuild, structure and pass the documented knowledge to the new generation Guidance for Maintaining existing I&C Systems (architecture, component and knowledge) 15 - IAEA TWG-NPPIC May 2011

16 Recommendation to the IAEA regarding the content and format of future I&C activities (3) 2. Building Safe and Efficient new NPPs Safety Aspect Define more precisely the Safety Level to reach: Between the high level requirements and the National Regulator requirement/iec Standards. Define a minimal number of unavoidable requirements that all the units must satisfy. For example, the contents of the 2 minimal lines of defense that a system must cover, the characteristics of a standard ATWS, which complementary situations must absolutely be studied... Common requirements: international consensus to be reached (regulatory requirements) Efficiency Aspect Specification & Design of I&C architecture taking lifetime into account. Product Lifecycle Management (PLM) : requirements traceability, Modification Method & tools for the allocation of the functions according to the utility s requirements (architecture, performance, safety ) and I&C platforms characteristics Methods & tools for Plant performance improvement: New technologies for reduction of uncertainties in measurements to increase power output while maintaining safety margins Reduction of likelihood of human errors Reduction of operation & maintenance costs (information systems, on-line monitoring, diagnostic ) 16 - IAEA TWG-NPPIC May 2011

17 Recommendation to the IAEA regarding the content and format of future I&C activities (4) 3. New Technologies - Impact Regulatory uncertainties regarding new technologies ASICs / FPGAs : for component/module replacement, for design of new I&C systems Wireless technologies : May avoid / limit need for new cabling for additional monitoring measurements. Could be used to assist and integrate the work and actions of local teams Data communication networks (including fieldbus) Classified HIS : same interface for the operator (HF aspect) Cyber-security Guidance for a safe use of new technologies Evaluation of COTS I&C equipment and I&C architecture I&C platforms, architecture, smart devices (we are at the limits of the acceptable complexity) Representation of digital systems in probabilistic models Realistic consideration for assessment of software (system + application) : Verification and Validation (tests) as complementary tools. Test coverage. Realistic consideration of software common cause failures What is common to, and can be shared by, all / most countries to reduce the licensing cost? What can be shared with other safety-aware industries? Common assessment criteria to reach a minimum certification level acceptable by all the country: international consensus (as in aeronautics) 17 - IAEA TWG-NPPIC May 2011

18 IAEA TWG-NPPIC May 2011 Thank You 18 - IAEA TWG-NPPIC May 2011

Instrumentation and Control

Program Description Instrumentation and Control Program Overview Instrumentation and control (I&C) and information systems impact nuclear power plant reliability, efficiency, and operations and maintenance