Nuclear Production of Hydrogen, Fourth Information Exchange ...

Nuclear Production of Hydrogen, Fourth Information Exchange ... Nuclear Production of Hydrogen, Fourth Information Exchange ...

02.05.2014 Views

USE OF PSA FOR DESIGN OF EMERGENCY MITIGATION SYSTEMS IN A HYDROGEN PRODUCTION PLANT Table 1: Calculation models Model ID Equation Parameters λ S = Failure rate during standby - Periodically tested standby 1- λs Ts e T PTS Q =1- + λs T S = Time between test R components λs Ts T R = Average reparation time Q = Unavailability Non-repairable continuous − λ operation NCO Q =1- λ0 TM 0 = Failure rate during operation e T M = Mission time Unavailable due f to maintenance MAN Q = mc = Corrective maintenance frequency fmc Tmc T mc = Average corrective maintenance time Human error after maintenance HUM Q = HEP f mc T s f mc = Corrective maintenance frequency HEP = Human error probability Unavailability on demand DEM Q = Q d Q d = Unavailability on demand Table 2: Parameters for unavailability calculation (AICHE, 1989) Equipment Failure mode Model λ s , λ 0 , f mc T s , T m , T mc T R Hr-1 Hrs Hrs Q Moto pump To start PTS 1E-5 1 440 8 7.25E-3 Motorised valve To close PTS 2.6E-6 1 440 8 1.89E-3 Check valves To open PTS 2.0E-7 1 440 8 1.46E-4 Check valves To close PTS 2.0E-6 1 440 8 1.89E-3 Moto pump To keep running NCO 1E-4 2 – 2.00E-4 Moto pump Unavailable by maintenance MAN 6.6E-5 20 – 1.32E-3 Valves – HUM 6.6E-5 1 440 HEP = 0.03 2.85E-3 Table 3: Reported or estimated unavailabilities Equipment Unavailability Pressure switch 4.96E-5 (Bari, 1985) Leak detectors 4.32E-4 (Bari, 1985) Diesel generator 1.76E-2 (Bari, 1985) Main supply of electric energy (estimated) 2.9E-3* *25 hours of electric break a year (estimated). Preliminary design redefinition The system, with information listed in the previous section, was run on the Saphire® 6.0 platform, yielding results and executing a sensitivity analysis. It can be appreciated, from this analysis, that factors which contribute most to the end state are the main electricity supply (FRP), diesel generators (FGD2 and FGD1), valve V51 to close (V51AC), valve V13 to open and unavailability due to maintenance of the emergency tanks (TO2MAN and TO1MAN), as shown in Figure 7. The frequency of the final state, considering the initial system is 5.29 E-09/year, and is largely dominated by the failure of power and vulnerability in the valves of the primary system. At first glance it appears that the addition of a second diesel generator to the safety systems would be of great help in reducing the global risk. The greatest contribution to the overall risk is the ternary set: main electric supply failure, failure of first generator and failure of a second generator, contributing 88.8% of total risk. If we remove the flushing system, although the relative increase in the frequency of the final state would be one order of magnitude greater, the absolute increase would be offset by subsequent changes. The frequency without EFS increases from its initial value of 5.29E-09/year to a new 4.797E-08/year. 404 NUCLEAR PRODUCTION OF HYDROGEN – © OECD/NEA 2010

USE OF PSA FOR DESIGN OF EMERGENCY MITIGATION SYSTEMS IN A HYDROGEN PRODUCTION PLANT Figure 7: Importance measures in original system The process of reconfiguring the system was made in five iterations with minor changes at each stage, as shown in Table 4. It should be noted that the number of iterations can be reduced if major changes are made, however, in this way the effects of individual modifications could be hidden. Table 4: Reconfiguration stages Stage Frequency year-1 Original 5.29 E-09 Flushing system is removed 4.79 E-08 A new redundant valve is added to V51 5.48 E-09 Check valve is removed from Tank T01 5.43 E-09 Valve V53 is removed 5.46 E-09 A new diesel generator is placed in the neutralisation system 8.46 E-10 In the first stage, the EFS was eliminated to assess their importance in the overall level of safety (given the disadvantages of its use), and although there was an increase of almost 10 times the critical frequency of the final state, it was appreciated that minor modifications in valves could return the initial value of event frequency. Subsequent amendments were made to provide more certainty in the system, placing a redundant valve to the V51, and removing the redundant valve V53, which was placed to isolate the E-207 reactor. It should be noted that this change produces a significant savings, adding a valve specified at low temperature and removing the other whose specification was high temperature (considerably more expensive). Changes in the neutralisation system consisted of adding a second back-up power generator and removing the suction valve V01, located in the suction tank, by changing the geometry of the system (pump below minimum level of the tank). At the final stage, the mitigation system is composed of an isolation system and a system for neutralisation (both with changes to the originally proposed). The new system provides optimum configuration, saving space and money, in addition to raising the safety level of the original system, even with the elimination of a complete flushing system. For this process, a sensitivity analysis was performed at each stage. It should be noted that although the order of implementation of changes will not alter the final frequency, it affects decision making, therefore it should be done with the greatest caution possible. Conclusions The design of safety systems supported by PSA provides efficient designs at a lower cost than those based solely on engineering criteria, guaranteeing a priori an adequate level of safety with a predetermined risk acceptance. It is also a useful tool for appropriate location of isolation valves. NUCLEAR PRODUCTION OF HYDROGEN – © OECD/NEA 2010 405

USE OF PSA FOR DESIGN OF EMERGENCY MITIGATION SYSTEMS IN A HYDROGEN PRODUCTION PLANT<br />

Figure 7: Importance measures in original system<br />

The process <strong>of</strong> reconfiguring the system was made in five iterations with minor changes at each<br />

stage, as shown in Table 4. It should be noted that the number <strong>of</strong> iterations can be reduced if major<br />

changes are made, however, in this way the effects <strong>of</strong> individual modifications could be hidden.<br />

Table 4: Reconfiguration stages<br />

Stage<br />

Frequency<br />

year-1<br />

Original 5.29 E-09<br />

Flushing system is removed 4.79 E-08<br />

A new redundant valve is added to V51 5.48 E-09<br />

Check valve is removed from Tank T01 5.43 E-09<br />

Valve V53 is removed 5.46 E-09<br />

A new diesel generator is placed in the neutralisation system 8.46 E-10<br />

In the first stage, the EFS was eliminated to assess their importance in the overall level <strong>of</strong> safety<br />

(given the disadvantages <strong>of</strong> its use), and although there was an increase <strong>of</strong> almost 10 times the critical<br />

frequency <strong>of</strong> the final state, it was appreciated that minor modifications in valves could return the<br />

initial value <strong>of</strong> event frequency.<br />

Subsequent amendments were made to provide more certainty in the system, placing a redundant<br />

valve to the V51, and removing the redundant valve V53, which was placed to isolate the E-207 reactor.<br />

It should be noted that this change produces a significant savings, adding a valve specified at low<br />

temperature and removing the other whose specification was high temperature (considerably more<br />

expensive).<br />

Changes in the neutralisation system consisted <strong>of</strong> adding a second back-up power generator and<br />

removing the suction valve V01, located in the suction tank, by changing the geometry <strong>of</strong> the system<br />

(pump below minimum level <strong>of</strong> the tank).<br />

At the final stage, the mitigation system is composed <strong>of</strong> an isolation system and a system for<br />

neutralisation (both with changes to the originally proposed).<br />

The new system provides optimum configuration, saving space and money, in addition to raising<br />

the safety level <strong>of</strong> the original system, even with the elimination <strong>of</strong> a complete flushing system.<br />

For this process, a sensitivity analysis was performed at each stage. It should be noted that<br />

although the order <strong>of</strong> implementation <strong>of</strong> changes will not alter the final frequency, it affects decision<br />

making, therefore it should be done with the greatest caution possible.<br />

Conclusions<br />

The design <strong>of</strong> safety systems supported by PSA provides efficient designs at a lower cost than those<br />

based solely on engineering criteria, guaranteeing a priori an adequate level <strong>of</strong> safety with a<br />

predetermined risk acceptance. It is also a useful tool for appropriate location <strong>of</strong> isolation valves.<br />

NUCLEAR PRODUCTION OF HYDROGEN – © OECD/NEA 2010 405

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!