Nuclear fission



Download 1 Mb.
Page25/29
Date20.10.2016
Size1 Mb.
#5849
1   ...   21   22   23   24   25   26   27   28   29

11.3Multiple initiatiors


In the multi-unit context, an external hazard can induce initiating events which can impact only one unit (single unit IE) or more than one unit (multi-unit IE). Most of the external hazards may affect more than one unit, but not always a multi-unit IE is induced, due to inherent existing differences between the site units (position, design).
Between the causes that could induce multiple IE, the following should be analysed [58]:

  • Shared Connections - Links that physically connect SSCs of multiple units (spent fuel pool cooling system, circulating water system, reactor component cooling water system, high, medium and low voltage AC distribution systems);

  • Shared vulnerabilities in case of external hazards - shared SSCs, shared instrumentation and controls.

A shared system means multiple initiation points for the sequence of events, but the interactions can affect the entire sequence (not just the initiator). The unavailability of site shared fire protection could occur, along with the ventilations vulnerability in case of external explosion.



  • Proximity Dependencies - A single environment has the potential to affect multiple units (ultimate heat sink, containment, non-safety DC electrical and essential AC distribution system, control room HVAC). This is applicable to common or connected structures (like turbine building, auxiliary building, main control room); for instance, an explosion could impact two units located very close.

  • Human and Organizational Dependencies - Shared control room, operator staffing more than one reactor, same emergency organization staff, decision-maker overseeing more than one reactor or more than one operator.

According to their impact on the multi-unit context, the hazards could be categorized in two large classes:



  • Hazards that will always affect multiple units (direct impact): seismic events; strong wind; tsunami; external floods; external fires; freezing rain; low/high air temperature; humidity; thunderstorm; extreme precipitation (rain, snow), truck crash in switchyard;

  • Hazards that will affect multiple units only under certain conditions: aircraft crash; offsite explosions, biological fooling.

The external fires could have the capacity to affect multiple units when occurring. Aircraft crash and external explosions can affect multiple units under specific conditions, like in the case of proximity dependencies.


Some hazards affect multiple units simultaneously, but we have also cases when an accident that initially impact only one unit can cascade or propagate to others on the site. The analysis need to consider whether the external hazard affects all the units of a site, and in case of a positive answer, if the magnitude of the hazard varies with the units. From the IE grouping point of view, events which affect one unit or multiple units should not be grouped together. Events which may be propagated from other units (including cascading events) (directly or via shared systems - as missile from one unit affecting the other units, fire spreading) should be considered, so given the unit IE, the conditional probability to face a multiple unit IE needs to be estimated.
The existing Level 1 PSAs for multi-unit stations are mostly developed on a single unit basis, where one unit is selected as the representative reference model unit. However, in some cases, the initiating events that can affect the selected model unit include events that originate outside of the selected reference model unit [58], [59].

11.4CrosS connection between different units


For sites with multiple units, their appropriate independence should be ensured. The possibility of one unit supporting another could be considered as far as this is not detrimental for safety [60] [61].
One of the post-Fukushima requirements was related to the use of alternative systems and cross-connections between units [19]. Sharing systems between units is influenced by four factors: safety, operability, costs, and licensing considerations. There are different types of sharing, as follows [62]:

  • a single system supports both units simultaneously (a single station-blackout diesel generator, or a fire protection system shared between units);

  • full capacity, independent systems at each unit that can be cross-connected to support the other unit if necessary; an example of this type of sharing is the standby coolant supply system that provides the capability to cross-tie selected portions of the residual heat removal (RHR) systems between units.

A similar case is when full capacity, independent systems at each unit share standby or spare equipment (an installed spare pump that is shared between units).


Even if the actual issue was to reduce costs, while maintaining the safety, many plants have found that providing additional capabilities to cross-tie and back-up systems can be beneficial, particularly for systems like electric power (capability to cross-tie ac and/or dc power supplies) and cooling systems. For example, crediting the use of a cross-connection between the units’ service water systems (additional protection when the service water cooling was lost at one unit) resulted in a 25% reduction in the CDF for each unit; provision of a cross-tie capability between the 4kV electrical safety buses at two units resulted in a 35% reduction in CDF [62]. In Japan “cross-tie of electric power supplies” among units at the multi-unit sites is taken into account in the internal events PSA because the cross-tie is one of the accident management measures. Based on the above mentioned, cross-connection of EDGs between units could be beneficial and worthy to be examined for a multi-unit site (as an accident management measure).
A system could be shared:

  • via a cross-tie;

  • having a common supply header (service water systems);

  • having shared components.

Within a multi-unit, many systems, functions, and physical facilities are shared, including the control room, fuel handling system, fuel pool cooling and clean-up system, pump houses, radioactive waste treatment systems, fire protection system, potable and sanitary water system and switchyard. In case of systems sharing, there is the potential for inadequate operations when they are shared (the potential to have an inadequate number of available components or inadequate flow rates when are shared) [62].




Download 1 Mb.

Share with your friends:
1   ...   21   22   23   24   25   26   27   28   29




The database is protected by copyright ©ininet.org 2024
send message

    Main page