1. > AREVA NP GmbH NRPP-G, 2009-05-27 1 AREVA NP All rights are reserved, see liability notice.

2. > AREVA NP GmbH NRPP-G, 2009-05-27 2 AREVA NP All rights are reserved, see liability notice. BELENE NPP SAFETY I&C SYSTEMS BASED ON TELEPERM XS BULGARIAN NUCLEAR ENERGY – NATIONAL, REGIONAL AND WORLD ENERGY SAFETY Varna 27-29.05.09 Speaker: Ognyan Trichkov (MSC) – AREVA NP GmbH Co-Author:Dipl.-Ing. Hartwig Blessing – AREVA NP GmbH

3. > AREVA NP GmbH NRPP-G, 2009-05-27 3 AREVA NP All rights are reserved, see liability notice. Guideline for the Presentation 1. Requirements by Customer and IAEA 2. Identification of I&C Systems 3. Plant Control Philosophy 4. Overview System Platform Teleperm XS 5. Teleperm XS References

4. > AREVA NP GmbH NRPP-G, 2009-05-27 4 AREVA NP All rights are reserved, see liability notice. 1.Requirements by NEK and IAEA Correlation between Classification Concepts NEK requires a Safety function classification based on IAEA and International Electro technical Commission (IEC) Nuclear Standard The correlation between > Safety classes of fluid-retaining components > Classes of I&C systems according to IAEA NS-G-1.3 > Classes of I&C systems according to IEC 61513 > Categories of I&C FSE according to IEC 61226 is provided in this table.

5. > AREVA NP GmbH NRPP-G, 2009-05-27 5 AREVA NP All rights are reserved, see liability notice. 1. Requirements by NEK and IAEA Safety Philosophy Safety Philosophy > Concept of Defense in Depth > Distribution of I&C Functions > Availability  Reliability  Maintainability > Credibility  Integrity - Security  Redundancy and Single Failure Criterion,  Prevention of Common-Cause Failures > Diversity of I&C Systems > Independence and Separation

6. > AREVA NP GmbH NRPP-G, 2009-05-27 6 AREVA NP All rights are reserved, see liability notice. 2. Identification of I&C Systems The I&C functions are grouped as follows: > Process information and control functions > Reactor limitation functions > Reactor power control functions > Protection functions > Automatic backup functions > Post accident monitoring functions On the basis of the identification of functions that are required I&C systems are established to perform these functions. The main systems are: > Process Information and Control System (PICS) > Safety Information and Control System (SICS) > Process Automation System (PAS) > Safety Automation System (SAS) > Reactor Limitation and Control System (RLCS) > Protection System (PS) > Passive Heat Removal System (PHRA) > Post Accident Monitoring System (part of SICS) These I&C systems make up the architecture of the Instrumentation and Control System.

7. > AREVA NP GmbH NRPP-G, 2009-05-27 7 AREVA NP All rights are reserved, see liability notice. 3. Plant Control Philosophy

8. > AREVA NP GmbH NRPP-G, 2009-05-27 8 AREVA NP All rights are reserved, see liability notice. 3.1 Protection System > Redundancy: fourfold > Functional Diversity > Automatically initiates the reactivity control system (Reactor Trip) > ESFAS (Engineered Safety Features Actuation System)  initiate and control safety systems that remove heat or otherwise assists in maintaining the integrity of the three physical barriers to radioactive release (cladding, reactor coolant pressure boundary and containment). > The Protection System design is carried out redundantly and diversely according to single failure criterion and with consideration of the common course failure.

9. > AREVA NP GmbH NRPP-G, 2009-05-27 9 AREVA NP All rights are reserved, see liability notice. 3.2 Passive Heat Removal Activation System (PHRA) > Redundancy fourfold > Hardware diversity > Open air gates in case of Protection System failure (Power Supply is available) > Programmable logic control system with a different hardware (TXS PLD) This picture is taken from the presentation “Experimental Calculation basis parameter for Passive Heat Removal System”, Authors L. Egorova and A. Plakseev of Atomenergoprom, Bulatom Conference 2008

10. > AREVA NP GmbH NRPP-G, 2009-05-27 10 AREVA NP All rights are reserved, see liability notice. 3.3 Reactor Limitation and Control System > Redundancy fourfold > Limitation functions for reactor power and other important process parameters > Support functions in case of actuation of Protection System > Reactor control functions (twofold redundancy) > The design is carried out redundantly according to single failure criterion.

11. > AREVA NP GmbH NRPP-G, 2009-05-27 11 AREVA NP All rights are reserved, see liability notice. 3.4 Priority Actuation Control System (PACS) Solution by AV42 (special type of function modules dealing with all actuator control tasks, especially for priority control, and monitoring for each single actuator) Organization of priority commands (from high to low) > Protection System > Reactor Limitation and Control System > Safety Automation System > Process Automation System > Manual control signals from SICS

12. > AREVA NP GmbH NRPP-G, 2009-05-27 12 AREVA NP All rights are reserved, see liability notice. 3.5 Supervision and Control Level > As human machine interface serves the Process Information and Control system (PICS), it is used for process monitoring and operating in all plant situations. > Safety Information and Control System (SICS) contains 4 safety panels for operating and monitoring of ESFAS functions and the Reactor Protection Panel (RPP) with all indications for messages from the Protection System and the most important messages from RLCS.

13. > AREVA NP GmbH NRPP-G, 2009-05-27 13 AREVA NP All rights are reserved, see liability notice. 4.Overview System Platform Teleperm XS Tools for Engineering and Maintenance TXS System Software TXS System Hardware TXS System Documentation Gateways and Interface Solutions

14. > AREVA NP GmbH NRPP-G, 2009-05-27 14 AREVA NP All rights are reserved, see liability notice. TELEPERM XS Qualification and Licensing Project-Specific Qualification of Application has to be performed in each project Generic System Qualification performed once and maintained for the TELEPERM XS system platform Sequence of Qualification Steps Concept Review of System Development Site Tests Factory Acceptance Test Manufacturing Tests HardwareSoftware Verification of Specification Integration and System Test Hardware Component Type Tests Software

15. > AREVA NP GmbH NRPP-G, 2009-05-27 15 AREVA NP All rights are reserved, see liability notice. 5.References TELEPERM XS, SPPA-T2000 and SIMATIC S5/S7 * Chinese Designs have been merged Plant Units Plants Countries Reactor Supplier* Implementations and orders 72 45 17 11

16. > AREVA NP GmbH NRPP-G, 2009-05-27 16 AREVA NP All rights are reserved, see liability notice. THANK YOU FOR YOUR ATTENTION