reactor protection system - rolls-royce · reactor protection system customer benefits •...

2
www.rolls-royce.com NUCLEAR INNOVATION & TECHNOLOGY CAPABILITY SHEET INSTRUMENTATION AND CONTROL Reactor Protection System Customer benefits Unparalleled experience in Digital Protection Systems Spinline™ Reactor Protection System architecture can be adapted to all reactor types: PWR, VVER, BWR, PHWR Architecture features several unit levels (acquisition, processing and voting logic) linked via special NERVIA safety networks Deterministic behaviour, fail-safe and fault tolerant features, signal diversity, physical and functional separation are the main features of Spinline™ in compliance with international nuclear standards When it comes to safety, the Reactor Protection System (RPS) is the most important Instrumentation and Control (I&C) system for our customers. Underpinned by our patented and world-leading Spinline™ technology, the Rolls-Royce Spinline™ RPS gathers the functionalities of the Reactor Trip system as well as the Engineering Safety Features Actuation System (ESFAS). It monitors vital reactor operation parameters and in case of emergency, automatically shuts down the reactor and determines the corrective actions to be taken. All the circuits involved in correcting abnormal situations are activated by the Spinline™ RPS including: Emergency shutdown of the reactor core (which interrupts the nuclear fission reaction by lowering rods into the reactor core); Safety injection; Start-up of the emergency feed water; Steam line and feed water line isolation; Containment spraying and isolation. Features Because safety is crucial in a nuclear environment, the Rolls-Royce Reactor Protection System follows the criteria outlined in international standards and recommendations, including: Single failure criterion: Protection channel redundancy: a single failure should under no circumstances trigger any protective actions Independent protection and monitoring channels; Test during full power operation: periodic testing of each protection channel during operation; Protection against common cause failure: detection and identification of every event using two different parameters (functional diversity criterion); Continuous monitoring to prevent safety actions from being bypassed and hence prohibited actions from being triggered; Keeping the system safe in the event of a failure; Execution of all protection actions at the right time; Possibility of triggering emergency shutdown and safety functions manually from the control room.

Upload: voduong

Post on 19-Jul-2018

231 views

Category:

Documents


0 download

TRANSCRIPT

www.rolls-royce.com NUCLEAR INNOVATION & TECHNOLOGY

CAPABILITY SHEET

INSTRUMENTATION AND CONTROL

Reactor Protection System

Customer benefits

• UnparalleledexperienceinDigitalProtectionSystems

• Spinline™ReactorProtectionSystemarchitecturecanbeadaptedtoallreactortypes:PWR,VVER,BWR,PHWR

• Architecturefeaturesseveralunitlevels(acquisition,processingandvotinglogic)linkedviaspecialNERVIAsafetynetworks

• Deterministicbehaviour,fail-safeandfaulttolerantfeatures,signaldiversity,physicalandfunctionalseparationarethemainfeaturesofSpinline™incompliancewithinternationalnuclearstandards

Whenitcomestosafety,theReactorProtectionSystem(RPS)isthemostimportantInstrumentationandControl(I&C)systemforourcustomers.

Underpinnedbyourpatentedandworld-leadingSpinline™technology,theRolls-RoyceSpinline™RPSgathersthefunctionalitiesoftheReactorTripsystemaswellastheEngineeringSafetyFeaturesActuationSystem(ESFAS).Itmonitorsvitalreactoroperationparametersandincaseofemergency,automaticallyshutsdownthereactoranddeterminesthecorrectiveactionstobetaken.

AllthecircuitsinvolvedincorrectingabnormalsituationsareactivatedbytheSpinline™RPSincluding:

• Emergencyshutdownofthereactorcore(whichinterruptsthenuclearfissionreactionbyloweringrodsintothereactorcore);

• Safetyinjection;

• Start-upoftheemergencyfeedwater;

• Steamlineandfeedwaterlineisolation;

• Containmentsprayingandisolation.

Features

Becausesafetyiscrucialinanuclearenvironment,theRolls-RoyceReactorProtectionSystemfollowsthecriteriaoutlinedininternationalstandardsandrecommendations,including:

• Singlefailurecriterion:

– Protectionchannelredundancy:asinglefailureshouldundernocircumstancestriggeranyprotectiveactions

– Independentprotectionandmonitoringchannels;

• Testduringfullpoweroperation:periodictestingofeachprotectionchannelduringoperation;

• Protectionagainstcommoncausefailure:detectionandidentificationofeveryeventusingtwodifferentparameters(functionaldiversitycriterion);

• Continuousmonitoringtopreventsafetyactionsfrombeingbypassedandhenceprohibitedactionsfrombeingtriggered;

• Keepingthesystemsafeintheeventofafailure;

• Executionofallprotectionactionsattherighttime;

• Possibilityoftriggeringemergencyshutdownandsafetyfunctionsmanuallyfromthecontrolroom.

Rolls-Royce23CheminduVieuxChêne38246Meylan–Cedex,FranceTel:+33(0)476611500Fax:+33(0)476611707Email:[email protected]

www.rolls-royce.com

©2011Rolls-Royceplc

Whilstthisinformationisgiveningoodfaith,nowarrantyorrepresentationisgivenconcerningsuchinformation,whichmustnotbetakenasestablishinganycontractualorothercommitmentbindinguponRolls-Royceplcoranyofitssubsidiarycompanies.

Reactor Protection System

Main technical characteristics

• Monitoringsystemsdesignedusingprotectionalgorithms;

• Redundancyfactor2,3or4forsensors,instrumentationandsignalprocessing;

• 2outof3,or2outof4logicprocessing;

• On-linemaintenancecapabilitywithoutcompromisingsafety;

• Automatedtests.

Functions

Protectionfunctionsdependonthefindingsofsafetystudiescarriedoutonthereactor.

Spinline™ReactorProtectionSystemhasthefollowingmainfunctions:

• Emergencyshutdowntriggering;

• Safetyinjectiontriggering;

• Auxiliaryfeedwaterstart-up;

• Isolationofsteamlines;

• Mainfeedwaterisolation;

• Two-stagecontainmentisolation.

Inaddition,Spinline™ReactorProtectionSystem:

• Hasapermanentself-monitoring/testingsystem;

• Modifiesitsvotinglogicinrelationtofaultsobservedsothatsystemavailabilityisoptimizedwithoutcompromisingsafetyobjectives;

• Transmitsallthedatanecessaryforcontrolandmonitoringtothecontrolroomandnonsafetyclasssystems(triggeringstatus,measurementvalues,measurementresults;)

• Includestroubleshootingassistancefunctionsforeasylocationofdefectivemodules.

Standards

Spinline™technologydesignedtocomplywithsafetyrequirementsinherentinnuclearI&C.

SoftwareisdevelopedinstrictcompliancewithInternationalandUSstandards.

HardwarehasbeenqualifiedforElectromagneticCompatibility(EMC),environmental,andseismicconditions.

Spinline™complieswithinternationalnuclearstandards,including:

• AIEAsafetyguides–Safetyandsafetyrelatedsystems;

• IEC61226–CatA&Bfunctionsandassociatedsystemsandequipment;

• IEEE308/IEEE603andIEEE7-4.3.2–Class1Esystems;

• IEC61513–Class1systems;

• RCC-E.

References

• France:20unitsof1300MWreactors,4unitsof1450MWreactors–N4series,2unitsofresearchreactors

• CzechRepublic:4units(Dukovany)

• Lithuania:1unit(Ignalina)

• Armenia:1unit(Metzamor)

ExampleofSpinline™ReactorProtectionSystem

architecture

7676/CS.08/Feb11