ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report November 2006 AREVA NP Inc. Non-Proprietary (c) 2006 AREVA NP Inc. Copyright © 2006 AREVA NP Inc. All Rights Reserved The design, engineering and other information contained in this document have been prepared by or on behalf of AREVA NP Inc., a jointly owned subsidiary of AREVA and Siemens, in connection with its request to the U.S. Nuclear Regulatory Commission for a pre-application review of the U.S. EPR nuclear power plant design. AREVA NP also expects that this technology would be used in future I&C modernization projects at operating nuclear plants. No use of or right to copy any of this information, other than by the NRC and its contractors in support of AREVA NP’s pre-application review, is authorized. The information provided in this document is a subset of a much larger set of know-how, technology and intellectual property pertaining to an evolutionary pressurized water reactor designed by AREVA NP and referred to as the U.S. EPR. Without access and a grant of rights to that larger set of know-how, technology and intellectual property rights, this document is not practically or rightfully usable by others, except by the NRC as set forth in the previous paragraph. For information address: AREVA NP Inc. An AREVA and Siemens Company 3315 Old Forest Road Lynchburg, VA 24506 U.S. Nuclear Regulatory Commission Disclaimer Important Notice Concerning the Contents and Application of This Report Please Read Carefully This report was developed based on research and development funded and conducted by AREVA NP, Inc., and is being submitted by AREVA NP to the U.S. Nuclear Regulatory Commission (NRC) to facilitate future licensing processes that may be pursued by licensees or applicants that are customers of AREVA NP. The information contained in this report may be used by the NRC and, under the terms of applicable agreements with AREVA NP, those customers seeking licenses or license amendments to assist in demonstrating compliance with NRC regulations. The information provided in this report is true and correct to the best of AREVA NP’s knowledge, information, and belief. AREVA NP’s warranties and representations concerning the content of this report are set forth in agreements between AREVA NP and individual customers. Except as otherwise expressly provided in such agreements with its customers, neither AREVA NP nor any person acting on behalf of AREVA NP: • Makes any warranty or representation, expressed or implied, with respect to the accuracy, completeness, or usefulness of the information contained in this report, nor the use of any information, apparatus, method, or process disclosed in this report. • Assumes any liability with respect to the use of or for damages resulting from the use of any information, apparatus, method, or process disclosed in this report. AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page i ABSTRACT This report describes the design features of selected signals from safety-related Class 1E main control room actuators, remote shutdown station actuators, safety-related Class 1E TELEPERM XS system outputs, and non-safety-related control actuations (i.e., signals). This includes the execute features for actuation and driver devices and the checkback signals from safety-related components. The AV42 is a priority and actuation control module that handles these signals and their interfaces. The AV42 prioritizes the various command inputs and executes an output to plant components that reflects the plant licensing basis and operational preferences. In addition, it monitors checkback signals from the actuators and drives and provides these checkbacks to various instrumentation and control (I&C) systems. The AV42 module processes commands from all areas (e.g., inputs received from safety and non-safety-related instrumentation and control systems, the main control room and remote shutdown station). The AV42 module is designed for use in any safety-related or non-safety-related system. The AV42 module complies with the appropriate NRC regulations and industry standards for safety- related systems. This report describes the design of the AV42 module and demonstrates how the AV42 module complies to Class 1E equipment design, qualification, and quality criteria as well as criteria for the prioritization of Engineered Safety Features Actuation System (ESFAS) signals and for the electrical separation and independence of redundant systems. The AV42 module will be used in Class 1E circuits; therefore, it will be subject to periodic testing governed by Technical Specifications. This document describes those tests, including test coverage and overlaps. This document also describes the reliability data that has been used to establish the required testing frequency. AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page ii Nature of Changes Section(s) Item or Page(s) Description and Justification AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page iii Contents Page 1.0 EXECUTIVE SUMMARY...................................................................................1-1 2.0 INTRODUCTION...............................................................................................2-1 3.0 LICENSING BASES..........................................................................................3-1 4.0 AV42 MODULE DESCRIPTION........................................................................4-1 4.1 General...................................................................................................4-1 4.2 Functions................................................................................................4-1 4.3 Operation................................................................................................4-4 4.4 Testing....................................................................................................4-5 4.5 Power Supplies.......................................................................................4-8 4.6 Implementation.......................................................................................4-9 4.7 Cyber Security......................................................................................4-15 4.8 Independence of the AV42 Module.......................................................4-16 4.9 Configuration Management Plan ..........................................................4-19 4.10 Maintenance Procedures......................................................................4-21 4.11 Anticipated Transient Without Scram....................................................4-22 5.0 HARDWARE QUALITY ....................................................................................5-1 5.1 AV42 PLD Logic Quality.........................................................................5-1 5.2 PROFIBUS® Controller...........................................................................5-4 6.0 QUALIFICATION ANALYSIS...........................................................................6-1 6.1 Environmental, Electrical, Seismic, EMC, ESD TESTING and Radiation Analysis..................................................................................................6-1 6.2 Environmental.........................................................................................6-1 6.3 Electrical.................................................................................................6-3 6.4 Seismic...................................................................................................6-5 6.5 EMC/ESD...............................................................................................6-6 6.6 Radiation...............................................................................................6-10 7.0 RELIABILITY....................................................................................................7-1 7.1 Failure Modes and Effects Analysis........................................................7-1 7.2 Failure Rate Analysis..............................................................................7-1 7.3 Operating History....................................................................................7-2 8.0 CONCLUSIONS................................................................................................8-1 9.0 REFERENCES..................................................................................................9-1 AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page iv Tables Page Table 4-1 AV42 Priority Actuation And Control Example...........................................4-12 Figures Figure 4-1 AV42 Interfaces And Communication Links...............................................4-5 Figure 4-2 Overlap Testing..........................................................................................4-6 Figure 4-3 AV42 Module Application.........................................................................4-10 Figure 4-4 Priority Actuation And Control Logic Example..........................................4-14 AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page v Nomenclature Acronym Definition °C Degrees Celsius °F Degrees Fahrenheit AC Alternating Current ANSI American National Standards Institute AP Automation Processor ASIC Application Specific Integrated Circuit ASME American Society of Mechanical Engineers ASP Auxiliary Shutdown Panel ATWS Anticipated Transients Without Scram AV42 AREVA NP’s Priority and Actuation Control Module BTP Branch Technical Position CBSFTOFF AV42 Checkback Output Status-OFF CBSFTON AV42 Checkback Output Status-ON CFR Code of Federal Regulations CM Configuration Management DC Direct Current dB Decibel DIN German Institute for Standards EAS Essential Auxiliary Systems EEPROM Electrical Erasable Programmable Read Only Memory EMC Electromagnetic Compatibility EMI Electromagnetic Interference EPRI Electric Power Research Institute ESD Electro Static Discharge ESF Engineered Safety Feature ESFAS Engineered Safety Features Actuation System FDFLT Feeder Fault Signal FMEA Failure Modes and Effects Analysis GDC General Design Criteria GHz Gigahertz Hz Hertz HICB Human, Instrumentation and Controls Branch (Currently EICA) IEC International Electrotechnical Commission IEEE Institute of Electrical and Electronic Engineers I/O Input/Output I&C Instrumentation and Control KTA German Nuclear Safety Standards Commission kHz Kilohertz kV Kilovolt LED Light Emitting Diode MAX Multiple Array Matrix AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page vi MCC Motor Control Circuit MCR Main Control Room MHz Megahertz MTBF Mean Time Between Failures NRC Nuclear Regulatory Commission OBE Operating Basis Earthquake OLM Optical Link Module OM690 Screen-based TXP Operation and Monitoring System OPDIS Operation Disable PAC Priority Actuation and Control PLD Programmable Logic Device QA Quality Assurance rad Radiation Absorbed Dose RF Radio Frequency RFI Radio Frequency Interference RPS Reactor Protection System RSS Remote Shutdown Station RTS Reactor Trip System SER Safety Evaluation Report SFTIN AV42 Test Input SSE Safe Shutdown Earthquake TR Technical Report TXP TELEPERM XP System TXS TELEPERM XS System TUEV Technischer Ueberwachungs Verein (German Technical Surveillance Association U.S. EPR AREVA NP’s Evolutionary Power Reactor V Volt VDC Volts Direct Current V/m Volts/Meter AREVA NP Inc. ANP-10273NP Revision 0 AV42 Priority Actuation and Control Module Topical Report Page 1-1 1.0 1EXECUTIVE SUMMARY This report describes the design features of the AREVA NP AV42 Priority Actuation and Control (PAC) Module. The AV42 prioritizes the various command input signals from safety- related Class 1E main control room actuators, remote shutdown station actuators, safety-related Class 1E TELEPERM XS (TXS) system outputs, and non-safety-related controls and outputs to plant components. In addition, it monitors checkback signals from the actuators and drivers and provides these checkbacks to various instrumentation and control systems. The AV42 module is designed for use in both safety-related or non-safety-related systems. The AV42 module complies with the appropriate NRC regulations and industry standards for safety-related systems. This report describes the design of the AV42 module and demonstrates AV42 module compliance to Class 1E equipment design, qualification, and quality criteria as well as criteria for the prioritization of safety-related signals and for the electrical separation and independence of redundant systems. AREVA NP requests that the Nuclear Regulatory Commission (NRC) issue a Safety Evaluation Report (SER) that approves the use of the AV42 module as described in the topical report. The AV42 module will be used in the AREVA NP’s Evolutionary Power Reactor (U.S. EPR) design. AREVA NP plans to reference the approved version of the topical report in its Design Control Document for the U.S. EPR. AREVA NP also expects that the AV42 module will be used in future I&C modernization projects at operating nuclear plants.