Target Safety System (TSS) Status TAC9 Linda R. Coney Group Leader – Target Safety and Controls www.europeanspallationsource.se April 2-3, 2014.

Slides:



Advertisements
Similar presentations
Generic Pressurized Water Reactor (PWR): Safety Systems Overview
Advertisements

Preparing for Power Outages Like any other part of the infrastructure, electrical power to the campus can fail, either as an isolated incident (e.g., tripped.
EECE499 Computers and Nuclear Energy Electrical and Computer Eng Howard University Dr. Charles Kim Fall 2013 Webpage:
International Energy Agency Hydrogen Implementing Agreement Proposed Task on Hydrogen Safety.
Oak Ridge SNS Experimental Facilities X /arb 1 SNS MPS Review Target-MPS Review WBS Ron Battle Target Controls, Target Systems Experimental.
MODULE “PROJECT MANAGEMENT AND CONTROL” EMERGENCY PLANNING SAFE DECOMMISSIONING OF NUCLEAR POWER PLANTS Project BG/04/B/F/PP , Programme “Leonardo.
Framatome ANP IP-EUROTRANS Meeting WP 1.5 Progress in safety approach development TEE, March Sophie EHSTER.
May 22nd & 23rd 2007 Stockholm EUROTRANS: WP 1.5 Task Containment Assessment IP-EUROTRANS DOMAIN 1 Design WP 1.5 Safety Assessment of the Transmutation.
AREVA NP EUROTRANS WP1.5 Technical Meeting Task – ETD Safety approach Safety approach for EFIT: Deliverable 1.21 Stockholm, May Sophie.
March 14, 2003 MICE Absorber/Coil Integration MICE LH2 Absorber 1.Assembly 2.Safety 3.Staging 4.Instrumentation.
EMPLOY THE RISK MANAGEMENT PROCESS DURING JOB PLANNING and EXECUTION
Protection Against Occupational Exposure
Patrick Thornton, SNS/FPE June 9, 2008
LSST Workshop Bremerton, WA August, LSST Workshop Bremerton, WA August, 2015 Camera Protection System Martin Nordby Chief Mechanical Engineer LSST.
ACADs (08-006) Covered Keywords Containment Isolation, actuation logic, Description Supporting Material
Utilities 14 October 2008 Martin Nordby, Gordon Bowden.
Job Safety Analysis (JSA)
Hydrogen system R&D. R&D programme – general points Hydrogen absorber system incorporates 2 novel aspects Hydrogen storage using a hydride bed Hydrogen.
MODULE “PREPARING AND MANAGEMENT OF DOCUMENTATION” SAFE DECOMMISSIONING OF NUCLEAR POWER PLANTS Project BG/04/B/F/PP , Programme “Leonardo da Vinci”
Issues in Accelerator Control Bob Dalesio, December 23, 2002.
Application – Identifying, Listing Equipment, and Documentation
1 BROOKHAVEN SCIENCE ASSOCIATES Redundancy Requirements for Critical Devices R. Casey August 8, 2007.
Response to TAC8 and Annual Review Recommendations John Haines Head of Target Division April 2, 2014.
IAEA International Atomic Energy Agency IAEA Safety Standards for Research Reactors W. Kennedy Research Reactor Safety Section Division of Nuclear Installation.
-1- UNRESTRICTED / ILLIMITÉ Demonstrating the Safety of Long-Term Waste Management Facilities Dave Garrick 2015 September.
Risk Analysis P. Cennini AB-ATB on behalf of the n_TOF Team  Procedure  Documents in preparation  Conclusions Second n_TOF External Panel Review, CERN,
Target Controls Introduction Linda R. Coney Group Leader – Target Safety and Controls Jülich Meeting 17 August 2015.
I & C.
Teknologi Pusat Data 12 Data Center Site Infrastructure Tier Standard: Topology Ida Nurhaida, ST., MT. FASILKOM Teknik Informatika.
LHC machine protection close-out 1 Close-out. LHC machine protection close-out 2 Introduction The problem is obvious: –Magnetic field increase only a.
Beam on Target Diagnostics Beam on Target Meeting 2013 March Tom Shea.
ESS Cryomodule Status Meeting – Elements of Safety | | Christine Darve Elements of Safety Applicable to the ESS 2013 January, 9 th Christine.
Status and Plans for the Target Safety System Linda R. Coney Group Leader – Target Safety and Controls April 1-2, 2015.
ESS Target Station Hazards Analysis and Safety Classification Process Linda R. Coney European Spallation Source (ESS) HPTW
Status report on ICS interfaces (Accelerator, Target, NSS, CF) and related activities Miha Reščič Deputy Project Manager, ICS
LHC’s Modular Machine ITER – Machine ProtectionB. ToddJuly 2010 Thanks to : TE/MPE/MI, CERN Machine Protection Panel, et al 1v0 Protection System.
Fault Tree Analysis for Fatality Prevention Dr. Steven A. Lapp President - Design Sciences, Inc.
Personnel Safety Systems Stuart Birch Senior Engineer, Personnel Safety Systems November 6 th, 2014.
ESS Vacuum Standardization
Failure Modes, Effects and Criticality Analysis
Update on the ESS monolith design Rikard Linander Monolith and Handling Group ESS Target Division TAC 10, Lund, Nov 5,
Process Safety Management Soft Skills Programme Nexus Alliance Ltd.
Machine Protection Systems (MPS) Arden Warner, and Jim Steimel Project X Machine Advisory Committee March 18-19, 2013.
1 Interfaces, Engineering and Standards. 2 Interfaces LoKI Interface document description for deliverables Elements: PBS number, Deliverable description,
DTU A VISION OF SUPPORTING NEUTRON CHOPPER ESS PT 1 - BUNKER SYSTEMS Discussion Document.
Hazards Analysis and Safety Classification Process Linda R. Coney Group Leader – Target Safety and Controls April 7, 2016.
Version 1.0, May 2015 SHORT COURSE BASIC PROFESSIONAL TRAINING COURSE Module V Safety classification of structures, systems and components This material.
Slides for TAC meeting Oct/2015 Marcelo juni Ferreira Vacuum section leader October,
LV Safe Powering from UPS to Clients
Sandia National Laboratories
Risk Management and Mitigation
HAZOP Guidewords Base Set
RF Local Protection System
BCM-BIS Interface Szandra Kövecses
ESS Per Nilsson CFD Specialist
PSS verification and validation
Safety Analysis and Safety Functions
TSS System Requirements - TSS CDR1
Preliminary Hazard Analysis of Bunker
RSFs & categorisation 20 May, 2019.
Safety Readiness Review (SRR) Thomas Hansson, ESH
Ola Ingemansson Electrical & Instrumentation Engineer
Operation of Target Safety System (TSS)
Test Beamline System Requirements and Charge to PDR Committee
Mikael Olsson Control Engineer
ESHAC #8 Safety Readiness Review Thomas Hansson, ESH
Target Safety System Interfaces
Overview of the TARGET Monolith Rough Vacuum
Close-out.
Edwards S1, Arklay C1, Crameri S1, May A2, van Driel R1 and Hyatt AD1.
Presentation transcript:

Target Safety System (TSS) Status TAC9 Linda R. Coney Group Leader – Target Safety and Controls April 2-3, 2014

Outline Intro – TSS objectives & functions TSS description & plan for development Risk (Hazard) Analyses – Procedure & Progress ICS/Target Interface – MPS, PPS, and Standard Controls Conclusions 2

TSS – Purpose TSS is a safety critical system designed to protect the public and environment from radioactive release Active control and monitoring system – It is likely that the TSS will need to be able to shut down the proton beam – Actions not necessarily limited to beam shut down Safety-certified system – Essential to the certification process for the ESS – Working closely with the ES&H group on requirements 3

ESS Control Systems – Objectives TSS - Limit transfer of radioactive contamination to the public, workers, and environment PSS - Suppress radiologic hazards by switching off the proton beam – Control access to restricted areas during operations MPS – Protect investment from damage due to beam losses and malfunctioning equipment – Optimize integrated machine performance – Stop beam – Beam Interlock System 4 TSS – Independent safety-qualified system  Not tied into other I&C systems

TSS – Link with ESS Safety Concept 5 3 rd confinement barrier: TS building 1 st confinement barrier: target circuit 2 nd confinement barrier: monolith liner

TSS – Preliminary Top Level Requirements Single failure criterion: – Redundancy, physical separation adapted to different aggressors (zoning) – Independence, electrical isolation Fail-safe principle – Safe state must be clearly identified – Loss of power  actuators default to safe position – Actuator commands ‘de-energize to trip’ Emergency power supply coverage Qualified for extreme operating conditions  seismic classification for a subset of functions No requirement on post-trip machine availability – Contrasts with MPS (Machine Protection System) – non-safety system designed to monitor machine parameters, shut down beam, and allow quick turn-around 6

TSS – Description Applying top level requirements  initial design concepts – Two independent shutdown mechanisms to stop beam Ion source and RFQ – details not yet defined Direct access/priority to shutdown mechanisms – Use safety-rated PLCs – Two separate TSS rooms in Target building – Independent paths to each beam shut-off system – Separate from ICS controls – cable-trays, UPS, shutdown mechanisms – Additional target-specific controls – ex. He cooling system for target wheel, wheel motion, ventilation control – Satisfy requirements & protect public with as-simple-as-possible system 7

Plan for TSS Development Risk Analyses 2013/2014 Description of TSS Logic 2014/2015 – MS: PDR of TSS Logic Definition April 2015 Design of TSS Architecture – Includes documentation & safety analysis of system architecture – MS: CDR of TSS System April 2016 Manufacturing Fall 2016  Fall 2017 – Supplier chosen Nov 2016 – Delivery to site Fall 2017 Installation/Testing/Cold Commissioning  Early

TSS – Risk Analyses Perform risk analyses for Target Station systems for TSS and MPS – Define the system – understand what included in analysis, drawings, schematics, etc. – Identify hazards – radioactivity, stored energy, explosion, impact (load drop), etc. – Identify initiating events and top events – circumstances that would produce a hazardous situation – Describe consequences if no mitigation – Estimate probability and severity  unmitigated risk ranking – Define applicable barriers – confinement & safety barriers and associated triggers – Leads to Target Station system design recommendations & study recommendations Qualitative Risk Analysis  mid-2014  Target Station System Design & Study Recommendations for both TSS and MPS  Inputs and outputs for TSS  Start of TSS logic design Feed information back into Quantitative Risk Analysis – 2014/2015 – PDR Spring 2015 Iterative process to accommodate modifications to design 9

Risk Analyses: Target Station Components 10

Risk Analysis – Risk Ranking Categories for probability & consequences 11 Probability H1 (Normal Operation)Risk reduction recommended Unacceptable H2 (Incidents)Risk reduction recommended Unacceptable H3 (Unexpected events)TolerableRisk reduction recommendedUnacceptable H4 (Design basis Accident) Tolerable Risk reduction recommended Severity Minor DamageModerate damageMajor damage Non- radiation: mild symptoms, no remaining injury Non- radiation: requires medical care, could give remaining injury Non-radiation: possibility of death Radiation: No increased radiation exposure, typically 0- 1 containment barriers impaired Radiation: significant uncertainty regarding outcome, but not expecting increased radiation exposure. Typically 1-2 containment barriers impaired Radiation: increased radiation exposure. Typically 2-3 containment barriers impaired.

Risk Analysis – MPS & TSS Example Cold Moderator Protection/safety BarriersTriggers Design barriers/Recommendati on Recommendations for studies and investigations Comments MPS Automatic shutdown of proton beam. Evacuation of H2 from Monolith atmosphere, Isolation of He purification unit Low pressure (L threshold) in H2, High pressure (H threshold) in Monolith He R: provide mechanical limiters to protect the accumulator bellows from being destroyed; R: Analyze LH2 cold shock on the target vessel to demonstrate that it does not break; R: Analyze LH2 cold shock on the water vessels (therm mod and reflector, shielding) to demonstrate they do not break R: estimate the pressure resulting from LH2 vaporization into Monolith; we assume the circulators can run without LH2, at least for a short time; TSS Automatic shutdown of proton beam. Evaucation of H2 from Monolith atmosphere, Isolation of He purification unit Low pressure (LL threshold) in H2, High pressure (HH threshold) in Monolith He R: safety credited relief valves into expansion volumes shall be considered in the design; R: estimate the pressure resulting from LH2 vaporization into Monolith - check whether H2 is under or above 4% vol.; R: estimate the potential radiological impact coming from the purification system; if H2 is less than 4% in the monolith Helium only, then there is no H2-barrier to consider anymore; 12 System of concern Protection/sa fety system Preliminary Initiating Events (PIE) Top EventUnmitigated ConsequencesProbabilitySeverityRisk Ranking Cold Moderator MPS Mechanical failure. Structural problem of the circuit itself. Mechanical stresses (temperature changes ex. Start- up/shut-down). Irradiation damage to material. Circuit pump failure + External aggressor (dropped mass) M H2 rupture including vacuum lines: leak into He (monolith) cold shock to some equipment; cryogenic conditions not maintained. Could lead to rupture cold moderator vessel nearby the wheel due to lack of coolant in it. Pressure increase in the He Monolith circuit up to XXX. Saturation of He purification system. ExceptionalCatastrophic Cold Moderator TSS Mechanical failure. Structural problem of the circuit itself. Mechanical stresses (temperature changes ex. Start- up/shut-down). Irradiation damage to material. Circuit pump failure + External aggressor (dropped mass) T H2 rupture including vacuum lines: leak into He (monolith) loss of 1 H2-barrier between H2 and air. Cold chock to some equipment; Could lead to rupture in the cold moderator vessel nearby the wheel due to lack of coolant in it. Pressure increase in the He Monolith circuit up to XXX which could lead to monolith rupture. Saturation of He purification system. H4Moderate

Risk Analysis Status Completed qualitative RA for: – Water Moderator, Cold Moderator, Reflector Currently working through Target system RAs – includes Target wheel, drive, He cooling circuit & He purification Next: Proton Beam Window (PBW) Following: – Monolith, Active Gaseous Storage, Ventilation, Remote Handling, Process Cells, All Intermediate Cooling Circuits, Beam Dump Revisit first systems in Quantitative RA starting in May Developing procedure to track & document incorporation of design recommendations and study results 13

Target Controls – ICS Control Systems Machine Protection System (MPS) – Optimize operational efficiency, machine availability, & reliability – Requirements Stop the proton beam in case of failures Prevent damage to elements in the accelerator & target Provide tools for failure-tracing throughout machine – Objectives Protect the machine Protect the beam – avoid unnecessary beam-stops Personnel Safety System (PSS) – Protect personnel against unnecessary exposure to hazards from the machine, including radioactivity and electromagnetic radiation – Support multiple operational modes of facility – Primarily access control & radiation monitoring and alarm systems ICS – other instrumentation and controls 14

Relationship Between TSS – MPS – ICS 15

MPS - Target Beam Interlock System (BIS) – Terminates beam production when failure detected – Establishes a global BEAM PERMIT – Determines permissible operational modes Machine configuration + beam parameters Fast response-time system – 10  sec Sensors – BLMs, BCMs, BPMs – Response for slower time-scale sensors & systems < 70 msec 16 BIS for Target – Time scale of response ~100msec – Ongoing Risk Analyses will provide information on input Ex. Movement of target wheel – position synchronized with proton beam arrival – Preliminary example: Input signals for Target Slave as part of Beam Interlock System Beam Permit given if all conditions met

PSS - Target Preliminary requirements/design discussions under way Controlled access systems for rooms next to target station (red) on all floors – Beam off triggered Remote Handling galleries/Maintenance cell area require access control tied to radiation monitoring – Not tied to accelerator operations or beam interlock 17

TSS – Conclusions The process to derive the set of TSS controls has been developed and is well under way. – Understand TSS purpose within overall ESS safety plan & define TSS requirements – Execute Risk Analyses – derive target station system design requirements, initiate necessary studies, & define TSS logic – Build description of TSS architecture and finalize design Final TSS system design is planned for Frequent coordination continues with ES&H and ICS groups to ensure proper interfaces exist for TSS and Target MPS. 18