Professional Documents
Culture Documents
A.A. 2013-2014
1950-1960
Since 1960s, in the West, power reactors were located in a leakproof and pressure-resistant vessel Since 1950s, the Advisory Committee on Reactor Safety (ACRS) of Atomic Energy Commission (AEC) fixed, for a non-contained reactor, an exclusion zone with a minimum radius:
Windscale accident
Air-cooled, graphite-moderated plutonium production reactor, without containment While annealing the graphite moderator (slow raise of graphite temperature to release the energy stored in the graphite as fast neutrons knocked carbon atoms out of the lattice;Wigner effect), a fire started in one of the fuel channels and quickly spread to 150 other channels. 4 days necessary to extinguish the fire by flooding the reactor with water. Cooling air was directly released to the atmosphere. Radioactive materials dispersed and deposited over England, Wales and parts of the Northern Europe. Part of the iodine was attached to particular matter (20000-50000 Ci) and the stack filter retained between 800 to 1000 Ci of cesium. It was estimated that 25-43% of the iodine and 17-18% of the cesium must have escaped from the core. Iodine is a particularly dangerous element because it concentrates as it proceeds through the biological chain and finally is stored in the body. It was estimate that, as a result of the accident, the maximum individual thyroid dose to a child was 160 mSv
1960s-1970s (1)
These accidents strongly influenced subsequent thinking on consequences to the public. In the West, power reactors were located in a leak-proof and pressure resistant vessel. The whole refrigeration primary circuit was located completely inside the containment, so that all the escaped fluid would be confined in the containment envelope; Design pressure of the containment for water reactors: complete release of the primary water and part of the secondary water were assumed. In East Europe, these criteria were applied to a lesser degree: only the vessel was located within the containment; not very stringent leak-proof characteristics of the containment. In the West, the opinions on the accident assumptions were divided. The Advisory Committee on Reactor Safety (ACRS) proposed the use of maximum credible accidents.
11
1960s-1970s (2)
A number of severe accidents were postulated (although they were deemed very unlikely). Plant designer developed various approaches to avoid the effects of these postulated severe accidents:
development of engineered safety systems to prevent core melt, provision of a containment vessel to retain the radioactive products if they were released.
Considering the maximum credible accident was extremely useful in limiting or preventing the occurrence of severe accidents. It was realised that the engineered safety devices might not work exactly in accordance with their design, and that failures of such devices could lead to serious consequences. The word credible was added to imply that, while more severe scenarios could be envisaged, they were considered so unlikely as to be deemed incredible.
12
1960s-1970s (3)
A substantial number of maximum credible accidents (Design Basis Accidents - DBAs) have been defined by the Atomic Energy Commission to establish the licensing basis for design requirements for nuclear safety systems. The most severe DBAs is the sudden, double-ended, guillotine break of the largest coolant pipe in the primary system of the reactor ( DBA Loss Of Coolant Accident). The blowdown of the high-pressure reactor primary coolant and the consequent increase in containment pressure are used to establish: the design pressure of the containment structure the requirements upon which the emergency core cooling system (ECCS) and other engineered safety features (such as containment sprays and cooling fans) of the plant were designed. Then double-ended pipe break LOCA became an incident that by definition would not result in melting of the reactor core.
13
1960s-1970s (4)
Conservative assumptions concerning malfunctions in the safety systems, such as a single failure consisting in the failure, simultaneous with the initiating event, of one active component of one of the safety systems devoted to emergency safety functions during the accident (water injection system, reactor shutdown system and so on). On one side more cautious experts supported the need for keeping these conservative assumptions. On the other side more optimistic people (members of manufacturing industries and electric utilities) maintained that the above mentioned accident assumptions entailed a waste of resources. Many phenomena were still unknown: Auto-catalytic reaction of Zircaloy fuel cladding with water The swelling of the Zircaloy cladding before rupturing, preventing the flow of cooling water Only in the 1970s experts demonstrated the possibility that the break of a pipe could damage other nearby pipes or plant components (pipe whip effect).
14
1960s-1970s (5)
Control bodies stipulated that the inherent safety systems and the resistance of plants to natural phenomena or man-made events had to be improved. These requests of improvement (backfitting) extended the construction times of the plants and increased their costs. The increase in costs as a consequence of the continuous requests for plant improvements, was strongly in contrast with the initial industrial expectations (i.e. cheapness). This continuous process of improvement produced very safe but also very costly and rather complicated plants, which were subject to a series of safety features additions to a substantially unchanged basic design. Up to TMI accident, not all nuclear technical experts believed that the adopted accident assumptions were reasonable ( some of them believed they were excessive).
15
1960s-1970s (6)
Different approaches to siting in the USA and in Western Europe. In the USA the plant siting criteria, as far as demographic aspects were concerned, were substantially decoupled from the design features of the plant. The AEC defined a source term for the DBA-LOCA to help establish criteria for the licensing of plant sites that considered the kinds and magnitudes of public health hazards for the population distribution about those sites. Thus the source terms for DBAs were intentionally defined to be arbitrarily (and unrealistically) large. Although the DBA-LOCA would not result in a core melt, the source terms were defined in terms of quasi-core melt conditions. TID-14844 source term: 15%of the fission product activity was considered to be released to the containment vessel, containing 100% of the noble gases, 50% of the iodine in the gaseous form and 1% of the solids in the fission product inventory. Subsequently, one-half of the released iodine in the containment structure and all of the solid fission products were assumed to fall out, to be adsorbed onto the internal structures of the building, or to adhere to internal reactor components and, therefore, to be unavailable for release to the external environment. Reductions in the airborne iodine in accordance with the projected effectiveness of the containment spray systems could be considered as time passed following accidental releases during the hypothetical accident sequence.
16
1960s-1970s (7)
In the late 1960s, the TID-14844 source term was incorporated in the AEC safety guide 3 and 4, which specify the assumptions to be used in estimating off-site consequences of the maximum credible accident. Other US site criteria were the following: existence of an exclusion zone around the plant (radius 800-1000 m), where no dwellings or productive settlements exist and the access is under complete control of the plant management; existence of a low population zone around the plant (radius of roughly 5 km), which could be quickly evacuated in case of accident in the plant; radioactive product release from the core to the containment conventionally established as a function of the plant power only. In this approach, the decision about the adequacy of a proposed site could be taken only on the basis of the plant power level and, possibly, on the specific characteristics of its fission product removal systems.
17
1960s-1970s (8)
Europe: the site selection criteria usually consider the site-plant complex. If a plant with the usual safety systems could not be located on a specific site because accident doses exceeded the reference limits, it was possible to make the plant acceptable for the same site by the improvement of the systems for fuel integrity protection in case of accidents. The need to take into account the specific plant features for the evaluation of the acceptability of the site arises from the much higher population density. The dose limits varied somewhat between various countries, but they were of the order of 5 mSv (500 mrem, effective dose) to the critical group of the population outside the exclusion zone for every credible accident (Design Basis Accidents). In order to evaluate the consequences of these accidents, no conventional figure for the releases is used, but conservative and more realistic assumption were adopted. Iodine released in the containment assumed equal to the inventory in the fuel-clad interface (i.e. 1-5% of the total core inventory)
18
1970s-1980s (1)
Up to the TMI accident, three other facts influenced nuclear safety technology: defence against non-natural external events (initially accidental fall of an aircraft, then sabotage performed by the use of an aircraft or by explosives of various kind) the preparation of the Rasmussen report (WASH 1400) the introduction of the Quality Assurance (QA) in the design, construction and operation of plants. Plant protection against the various effects of the impact by a fighter aircraft (weighing about 20t) was adopted at least in Germany, Belgium, Switzerland and Italy. No country adopted a protection against the impact of a wide-bodied airliner of the Jumbo Jet type (weighing about 350 t), which would be far more onerous (possibly requiring the underground location of plants). It was calculated that the protection against a fighter aircraft included the protection against the fall of a large airliner too if the impact takes place with less damaging characteristics (lower speed of impact).
19
1970s-1980s (2)
By the 1974, nuclear technology had advanced. Possible to try to make a realistic estimate of the probabilities and consequences of nuclear power plant accidents that might proceed beyond DBA limits to core melt. This was attempted by Rasmussen and his collaborators in the Reactor Safety Study (RSS) (NRC,1975). The RSS study team outlined logical sequences of accidental steps that could lead to the release of radioactive material, usually as result of a core melt. They attempted to assign probabilities to each step of the sequence. When available, historical data were used as bases for the projected probabilities; otherwise, engineering judgement took their place.
20
1970s-1980s (3)
Before the RSS, it was widely assumed that only the DBAss could lead to core melt and release of appreciable radioactivity. RSS showed that many more such sequences exist; in total the probabilities of their occurrence exceeded that of the DBA. These sequences include small pipe breaks and various transientinitiated events. Models of the physical processes were developed to assess the magnitude and timing of the release, transport and deposition of the radioactive materials from the core through the primary system and the containment to the environment. Consequence models were also developed to evaluate the dispersal of radioactivity into the atmosphere so as to estimate the risks, thus coupling the probability and the health effect consequences of various accidents. The RSS, published in 1975, was the first study that included all conceivable accidents and also less probable scenarios, such as the catastrophic explosion of a reactor pressure vessel and an estimate of the probability of each scenario. It was a trend-setter in nuclear power safety analysis.
21
1970s-1980s (4)
As a result, RSS has been criticised and extended. Because of the many criticisms of RSS and the uncertainties inherent in Probabilistic Risk Assessment (the probability data concerning the most unlikely phenomena are scarce or even absent, given the impossibility of studying these phenomena experimentally and the scarcity of applicable real-life data), the methodology was not used before 1979 for reactor design, reactor operator training, or for regulation. Nobody could support the validity of the absolute quantitative risk evaluations contained in it. At the same time, the validity of this study is universally acknowledged. Rasmussen report and similar studies are possible judgement instruments in the nuclear safety field, but they cannot be used alone. Sound engineering evaluations, based on operating experience and on research results are the necessary complement to the probabilistic evaluations. After TMI accident, severe accidents (those accidents more serious than those up then considered credible) were included in the design considerations for the nuclear plants.
22
26
Preventative system for the voluntary depressurization of the primary system in PWRs and for the passive injection of water into the primary system for about 10 hours. This core rescue system (CRS) could decrease the core melt probability by a factor of at least 10. The system was proposed as a modification of the design chosen for the Italian Unified Nuclear Design, but it was not considered necessary by the designers at that time. A few years later, the designers applied it, to the passive reactor AP600 and to a German reactor design. The voluntary primary system depressurization has subsequently been adopted by all the more modern PWR designs, such as the European Pressurised Reactor (EPR).
27
Chernobyl Accident
There were two primary causes of the Chernobyl tragedy:
The plant had been designed with excessive optimism as far as safety was concerned. In some operating conditions (low power, low steam content in the pressure tubes) the reactor was very unstable: an increase in power or a loss of coolant caused reactivity insertions
With completely extracted control rods (a situation forbidden by operational procedures), the potential instability was more severe . The operators were working in a condition of frantic hurry for various reasons. The leakproof and pressure resistant containment did not include a significant portion of the reactor itself: the fuel channel heads were in a normal industrial building. A complete uncontained accident, therefore, happened.
28
30
Generation IV
34
Evolutive reactors
EPR (European Pressurized Reactor, or Evolutive Pressurized Reactor)
Same idea ad PWR Improved safety features, with an increased complexity of the plant itself
AP1000
Again, a PWR More in the direction of simplification + passive safety features http://www.ap1000.westinghousenuclear.com/
35
Innovative Reactors
Generation IV International Forum (GIF): is a cooperative international endeavor organized to carry out the research and development (R&D) needed to establish the feasibility and performance capabilities of the next generation nuclear energy systems.
36
Generation IV
The goals adopted by GIF provided the basis for identifying and selecting six nuclear energy systems for further development. The six selected systems employ a variety of reactor, energy conversion and fuel cycle technologies. thermal and fast neutron spectra, closed and open fuel cycles and a wide range of reactor sizes from very small to very large. large Generation IV systems were expected to become available for commercial introduction in the period between 2015 and 2030 or beyond.
38
While we cannot eliminate the concept of risk, we must limit it to the utility owing the plant. The effects of whatever event occurring must be confined into the plant, without involving its barriers, as if the plant were pre-sheltered from its construction.
40
Gen IV Sustainability
Generate energy sustainably, and promote long-term availability of nuclear fuel Minimize nuclear waste and reduce the long term stewardship burden
41
42
Economics
Have a life cycle cost advantage over other energy sources Have a level of financial risk comparable to other energy projects
43
46
47
49
50
51