GB/T 5204-1994 Periodic testing and monitoring of safety systems in nuclear power plants
Some standard content:
.039.58-7.001.4
National Standard of the People's Republic of China
GB5204—94
Periodic tests and monitoring of thesafety system of nuclear power plantPromulgated on December 7, 1994
State Administration of Technical Supervision
Implementation on May 1, 1995
National Standard of the People's Republic of China
Periodic tests and monitoring of thesafety system of nuclear power plantGB5204—94
Replaces GB5204—85
This standard is an explanation and supplement to the periodic tests in GB/T13629 "Criteria for Safety Systems of Nuclear Power Plants" and GB12788 "Criteria for Safety-Grade Power Systems of Nuclear Power Plants".
1 Subject matter and scope of application
This standard specifies the design criteria and test requirements for the implementation of periodic testing and monitoring of safety systems in nuclear power plants. This standard applies to the design of periodic testing and monitoring of safety systems in nuclear power plants. This standard does not apply to maintenance.
2 Reference standards
GB9232 Application of digital computers in nuclear reactor instrumentation and control GB12788 Safety-grade power system criteria for nuclear power plants GB/T13629 Safety system criteria for nuclear power plants
HAF0405 Quality assurance during commissioning and operation of nuclear power plants 3 Terms
3.1 Safety systemsafetysystem
A system that is important to safety and is used to ensure safe shutdown of the reactor, remove heat from the core, or limit the consequences of expected operating events and accident conditions under any operating conditions. The safety system includes protection systems, safety drive systems, and safety system auxiliary facilities. 3.2 Safety functionsafetyfunction
The specified purpose of a safety system or other items important to safety, such as shutdown or residual heat removal. Each assumed initiating event may require the completion of one or more safety functions. 3.3 Safety group safetygroup
When a specific assumed initiating event occurs, all equipment that completes the required action to ensure that the specified limit of the event in the design basis will not be exceeded.
3.4 Periodic test periodicest
Tests performed at planned intervals to detect faults and check operability. 3.5 Overlaptest
In order to check the function of the entire channel, sequence or load group, tests are carried out in sections on different parts or subsystems of the channel, sequence or load group. The tests of different parts or subsystems must double cover adjacent components. 3.6 Loadgroup loadgroup
A combination of busbars, transformers, distribution devices and loads fed by a public power supply within a sequence. 3.7 Functional test functiontest
Approved by the State Administration of Technical Supervision on December 7, 1994 and implemented on May 1, 1995
A test to determine whether a component or system performs its intended function. 3.8 Monitoring monitoring
GB5204-94
A means used to continuously indicate the state or condition of a system (or subsystem). 3.9 Test duration testduration
The time interval from the start of the test to the end of the test. 3.10 Test interval testintervalThe time between the start of two tests of the same type on the same equipment or system. 3.11 Test bypass testbypass
A test mode in which, during the power operation of the power plant, the safety group being tested is set to allow any channel or load group to be tested, calibrated or maintained without initiating the protection action of the safety group. 3.12 Channel Check
Qualitative performance evaluation performed at specified intervals to determine whether all components of a channel are within their specified limits. 3.13 Channel Calibration
Adjust the output of a channel so that it has acceptable accuracy and range for the parameters and performance measured by the channel. 3.14 Limiting Condition for Operation (LCO) The minimum functional capability or performance level of the equipment required for safe operation of the power plant. 4 General
4.1 Periodic testing and monitoring of safety systems is to achieve the expected system availability. Attention should be paid to whether the operating status of the detection equipment is within the specified limits. The specified limits are the minimum performance requirements, such as response time, set value accuracy, and other performance requirements specified in the design basis.
4.2 Safety systems must be designed to be testable during power plant operation and during power plant outages. This testability must allow the testing of each redundant channel and load group individually while maintaining the system's ability to respond to real signals, or to trigger the output of the tested channel when necessary, or to bypass a device according to safety requirements and operating restrictions. 5. Design requirements
5.1 The periodic test of the safety system should simulate its required safety functions as realistically as possible and prove that the tested items have the ability to perform their functions under normal environmental conditions. The design quality appraisal has proved that the selected equipment meets the requirements for operation under abnormal environmental conditions (such as earthquakes, extreme temperatures, pressures and humidity, etc.). Therefore, the testing of the equipment in extreme environments is not within the scope of periodic testing. 5.2 The test device and its interface shall not cause the loss of independence between the redundant channels and the redundant load groups. When determining the availability of the system, the equipment set up in the safety system for testing purposes must be considered. 5.3 In the design of the safety system, the impact of the test on the availability, maintainability, operation, operating mode and operating restrictions of the power plant should be considered. For this purpose, logically compatible redundant equipment can be provided where necessary. 5.4 Testability must be considered when selecting all components of the safety system. Sensitive components should be accessible. If feasible, they should be installed where they can be calibrated on site. When selecting drive devices, their status indication capabilities must be considered. 5.5 The design must enable the safety system to be capable of functional testing. Functional testing is best performed by testing from sensitive components to driven equipment at the same time. Where the above method cannot be achieved, a segmented delivery test method can be used. 5.6 Triggering protection actions is part of the regular test procedure. Where triggering protection actions is not allowed, the system design must be handled as follows.
5.6.1 All driving devices and driven equipment can be tested individually or reasonably divided into several groups for testing. For example, the driving device of the containment spray pump and the driving device of the containment spray valve are tested separately. 5.6.2 When testing the driving device of a certain equipment, stop the equipment from running. For example, when the circuit breaker of the emergency cooling pump motor is turned to the test position 2
GB5204-94
, cut off the power supply to the pump motor during the closing of the test circuit breaker. 5.6.3 Where the operation of the driven equipment requires the (compliance) action of more than one drive device, they shall be tested separately. For example, the compressed air supplied to the isolation valve is controlled by the compliance action of two solenoid valves, which can be tested separately. 5.6.4 The design made in accordance with 5.6.2 or 5.6.3 must be documented to prove that the probability of failure of the untested driven equipment is acceptable during the operation of the power plant, and that the driven equipment can be routinely tested when the power plant is out of service. 5.7 The system design shall consider the relationship between the system, components and human factors at all stages of the test activities. Test points and related test equipment shall be located in a location that facilitates the implementation of regular tests. 5.8 There must be a means of communication between the test personnel and the control room to ensure that the control room operator and the test personnel are aware of the status of the systems under test. In addition, there must be communication tools between the test personnel so that they can communicate fully. 5.9 When selecting the type of test system, automatic test devices should be considered. The test device can be external or set up in the safety system. To monitor the status of the safety system, the relevant variables (speed, pressure, power supply voltage, etc.) can be continuously monitored. If a programmable digital computer is used in the periodic test, whether it is an internal or external automatic test device, it must comply with the provisions of this standard and GB9232.
5.10 The design considerations for the power supply, instrumentation and control parts of the test safety system must be coordinated with the test terms of the connected mechanical and fluid systems.
5.11 To verify the overall tripping action of each protection channel, the use of perturbations of measured or substituted process variables is preferred to the use of simulated signals. If perturbations of measured variables or substituted panels are not possible, other test methods must be documented as appropriate. 5.12 Where possible, test devices (e.g. test panels) may be installed with the safety system to allow periodic testing without adding or removing wires, but these test devices shall not interfere with the operability or safety functions of the component or system. 5.13 The design shall provide for the prevention of bypassing redundant channels or load groups during testing. 5.14 Where redundant components are used within a single channel or load group, the design shall allow each component to be tested individually. 5.15 The system shall be designed to remove fuses or open circuit breakers only to test the logical actuation of a channel or load group. For example, removing the power fuse of a channel may simulate the actuation action of a channel losing power. 5.16 If a part of the safety system is inoperative or bypassed, an indication shall be provided in the control room. 6 Requirements for the test program
6.1 Basic requirements
The scope of periodic testing of safety systems may include functional tests and checks, verification of correct calibration and response time tests. The test program must specify the test types, test conditions, test steps and test intervals. The design and implementation of the program must meet the following requirements. 6.1.1 The operability of each redundant part of the safety system must be verified separately. If such tests cannot be carried out during reactor operation, operability must be tested when the power plant is shut down. 6.1.2 The operability test during reactor operation should include as many channels and load groups as possible, and include sensitive components and drives without endangering the continued normal operation of the power plant. 6.1.3 The test procedure must be able to verify that the tested equipment has been restored to its normal operating mode after the test is completed. 6.1.4 Whenever possible, the test should be completed under real or similar operating conditions, including the operating sequence. For example, the loading sequence of a diesel generator.
6.1.5 The test must be carried out in accordance with a written and approved test procedure. 6.1.6 The test program must be revised periodically to determine its overall effectiveness. 6.1.7 The success of a single retest should not negate the results of a failed test. A successful retest must be preceded by a written evaluation or corrective action (e.g. maintenance, repair or program change). If possible, the root cause of the failure should be determined. 6.1.8 The test program must be compiled in a logical sequence so that all system conditions can be evaluated in a timely manner during the test and individual components that require further testing can be identified.
6.T.9 The test program for each safety system must be designed to minimize interference with the relevant operating channels, systems or components..\GB5204—94
6.1.10 The test program for each safety system must be designed to produce the data required to objectively evaluate the performance and reliability of the system. If possible, trend data should be provided to identify performance degradation and provide indication of fault symptoms. 6.1.11 Administrative and quality assurance requirements must comply with the requirements of HAF0405 or equivalent documents. 6.1.12 Continuity checks may supplement functional tests but cannot replace them. 6.2 Objectives
The periodic test program must include procedures and reports to achieve the following objectives. 6.2.1 Facilitate administration and monitoring.
6.2.2 Identify high failure rates.
6.2.3 Minimize interference with overall plant operation and safety impacts through proper coordination of test activities. 6.2.41
Ensure that the remaining protection channels and load groups are not tested simultaneously. 6.2.5 Provide a schedule that includes a complete basic test cycle and the status of the test being conducted. 6.2.6 Identify the systems, channels and load groups being tested. The test shall simulate normal operating conditions as closely as possible and the system may be required to operate during the test. 6.2.7
6.2.8 Changes in test intervals shall comply with the provisions of Section 6.5 of this standard. 6.2.9 The following factors shall be considered in developing the periodic test program: a.
System failure modes and effects;
Component failure modes;
Applicable reliability and availability analysis;
Failure report analysis and other historical data; Logical structure;
Power plant operation plan;
Equipment qualification documents, such as documents for qualified life. g.
6.3 Test types
6.3.1 Channel inspection
Channels equipped with indicators can be verified for operability by one or more methods. 6.3.1.1 Compare the readings of each channel monitoring the same variable (for example, compare power channel 1 with the allowable power channels 2 and 3) to identify abnormal channels.
6.3.1.2 Compare the readings of each channel monitoring the same variable and having a known relationship with each other (for example, compare the readings of the source section and intermediate section neutron monitoring devices when they are in the measurement range during startup and shutdown). 6.3.1.3 Compare the readings of channels that monitor different variables with known relationships between them (e.g., reactor power and primary coolant outlet temperature or steam pressure). When selecting the channels for comparison, common cause failures must be considered (e.g., level measurement, instruments share a common reference tube). 6.3.2 Functional tests
Functional tests must ensure that the equipment under test can perform its designed functions. 6.3.2.1 Functional tests of equipment (system components) must include one or more of the following tests. 6.3.2.1.1 Manually start the equipment (e.g., motor, pump, compressor, turbine or engine) and observe its operation (e.g., pressure, flow, temperature, voltage or speed). The test duration must be sufficient to achieve its steady state of operation. Where starting pumps or other equipment is not allowed, tests may be carried out in accordance with the provisions of 5.6 and 5.15. 6.3.2.1.2 Manually control electric valves and record their travel time. When full stroke testing of valves is not possible, partial stroke testing is permitted (e.g. main steam stop valves, turbine stop valves or regulating valves) or testing of valve control systems (e.g. control circuits of rapid poison injection valves). Full stroke testing should be carried out routinely during plant outages. 6.3.2.1.3 Inject appropriate test signals to give an appropriate indication (e.g. the value of an "equivalent" trip output) or to trigger a trip output, or both. If possible, the alarm and trip functions must be tested. 4
GB5204-94
6.3.2:2 Verification of system or subsystem functions must include the following tests. 6.3.2.2.1 Trigger the drive devices one by one and observe the operation of the load groups (e.g. operate the bus undervoltage relay, observe bus transients, load shedding, diesel generator starting and sequential loading). 6.3.2.2.2 Verify the safety function of manual start. When this test cannot be performed during plant operation, it may be performed during reactor shutdown (e.g., manual emergency shutdown).
6.3.2.2.3 Test the status and operability of the bypass, the bypass and test indications, and the bypass and test alarm circuits. 6.3.2.2.4 Change the input signal level of one or more parameters to achieve the trip or calculated output change, while the other variable signals remain at the normal expected value. The parameters to be changed must be selected based on the design basis event conditions and the expected operational events. 6.3.3 Verification of channel calibration
Verification of channel calibration shall demonstrate that: with a known accurate input, the channel gives the required analog or switching output. In addition, in the case of analog channels, linearity and hysteresis values can be checked. If the required output is achieved, the test is qualified. If the required output is not achieved (e.g., no bistable reversal occurs at the specified setting or the analog output exceeds the tolerance), or saturation or bending is observed, or adjustment of gain, offset, trip settings, etc. is required, the test is unqualified. (Adjusting the procedure is a maintenance activity and is not within the scope of this standard). Therefore, the test results must be recorded in accordance with HAF0405 or equivalent documents. Non-conformities must be re-verified after repair or appropriate disposal.
6.3.4 Verification of response time
Only the response time test is performed on the safety system or subsystem to verify that the response time is within the limits given by the safety analysis report. 6.3.4.1 The response time test includes the test of the entire system from the sensitive element to the driven equipment. If the test of the entire system cannot be achieved in one test, the response time of each discrete part of the system must be measured and it must be shown that the sum of all response times is within the limits required for the entire system. Response time tests from process to sensitive element and from driven equipment to process; not a requirement of this standard. 6.3.4.2 Within the specified test cycle, the discrete parts of the safety system have been tested and their response times have been verified to be within the specified limits.No further testing is required. In addition, when determining the total response time of a system, it may be appropriate to exclude those components whose response time is one or more orders of magnitude lower than the response time of the system. The tests must provide sufficient overlap to verify the response of the entire system. 6.3.4.3 If it is not possible to include the sensitive component in the individual or system response time test, the sensitive component may be removed from its normal installation position for testing at regular intervals, if possible. The test equipment should simulate the actual installation environment and configuration as much as possible. 6.3.4.4 If the response time of the safety system equipment is verified by functional tests, calibration checks or other tests, that is, in place of the response time test, it is not required to perform a response time test on all safety-related equipment. During routine periodic testing, if a change in performance is detected that is accompanied by a change in response time that exceeds the acceptable limit, no further response time test is required. 6.3.4.5 For channel response time tests that do not include the sensitive component, the test equipment must simulate the output of the sensitive component over its entire required functional range. To determine the overall response time, both the input and output states must be recorded simultaneously. The test inputs shall span the normal trip settings so that the channel fully recovers under non-trip conditions and fully trips under trip conditions. 6.3.4.6 If the protective trip function is triggered by two or more variables (e.g., the trip point is calculated from temperature, pressure, and neutron fluence rate signals), the channel response time shall be verified using the tripping action produced by each variable. During the test, the test signals for the remaining variables shall be set within their expected operating ranges. This test will produce conservative test results. 6.3.4.7 If the response time is not measured during normal reactor operation, it shall be measured during reactor shutdown. 6.3.5 Logic System Functional Tests
Logic system functional tests shall test the entire logic components from the sensing element to the drive device. The logic components consist of relays, contactors, and solid-state logic circuits. The logic system function may be verified by a series of sequential, overlapping, or complete system tests. 6.4 Test Methods
A specific test procedure shall be established for each system to meet the requirements of this standard. 6.4.1 The test or combination of tests must fully test each protection channel or load group (for example, including the sensitive element and the final drive or starting device, up to all connected loads). The interaction between the allowable channels must be detected during the test. 6.4.2 Signs of qualified tests:
GB5204-94
1. a. There is an intuitive and definite indication of the state change, such as the operation of the solid-state or electromechanical device with a corresponding signal (sound alarm, light on or off, change of contact state, instrument indication, motor start, valve or other drive action); b. No abnormal results are observed in the remaining channels. 6.4.3 The input of the channel must be introduced from a location as close to the sensitive element as possible. This can be achieved in different ways, for example: a. disturbing the monitored variable, such as changing the pressure, temperature or power level; b. introducing a substitute input of the same nature as the monitored variable into the sensitive element and changing it appropriately, for example, opening the balancing valve on the flow measurement differential pressure gauge, isolating and emptying the input to the pressure measurement device, injecting hot or cold fluid into the fluid at the measured temperature.
6.4.4 When the overall inspection including the sensitive element is not possible, a channel can be tested locally. For this purpose, an analog or digital input should be introduced appropriately and the amplitude of the test signal should be changed. The range of variation of the test signal amplitude must ensure that the protection action can be generated when the monitored variable reaches the set value.
6.4.5 After understanding the performance characteristics of the tested channel, the nature of the test signal change should be determined. Degradation or failure of equipment performance may affect the response to rise time, amplitude or other waveform characteristics. There are several types of test signals of different nature. 6.4.5.1 Slow-changing signal. If this type of signal requires protective action, and observation or the response of the equipment (its changes have tended to the limits of the tolerance band) shows that the equipment may not produce protective action for slowly changing signals, then this type of signal must be selected.
6.4.5.2 Fast changing signal. If this type of signal requires protective action, and observation or the response of the equipment (its changes have tended to the limits of the tolerance band) shows that the equipment may not produce protective action for fast changing signals, then this type of signal must be selected:
6.4.5.3 Large changing signal. If this type of signal requires protective action, and observation or the response of the equipment (its changes have tended to the limits of the tolerance band) shows that the equipment may not produce protective action for large deviations from the normal value (for example, saturation or bending occurs), then this type of signal must be selected. 6.4.6 In order to verify the qualified performance of the channel under various expected operating conditions, a given channel or equipment can be tested. According to actual needs, one type of signal can be selected, or a combination of several types of signals can be used. The permissible deviation of the action value of each channel protection action from the nominal setting value must be determined according to different types of signals.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current management regulations must be followed. The test procedures or management regulations must provide a method to verify that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test intervals
6.5.1 Initial test intervals
The following factors must be appropriately considered when determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management regulations;
The planned operating cycle of the power plant;
The impact on power plant safety;
Effective use of manpower;
Radiation exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target. bzxz.net
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or both; Changes in power plant design related to the equipment; d.
Detection of significant changes in failure rates.
Test intervals can be changed to adapt to the power plant operation mode, but it must be demonstrated that such changes have a significant impact on the equipment being tested. The expected performance of the equipment shall not be adversely affected. Inoperative or tripped systems or equipment must be tested before being put into operation again. If the test interval is changed, the requirements of 6.5.1 must also be followed. 6.6 Format and documentation of procedures
The format and documentation of procedures must comply with the provisions of Chapter 3 of HAF0405 or equivalent documents. Additional notes:
This standard was proposed by the National Technical Committee for Nuclear Instrument Standardization. This standard was drafted by the China Nuclear Power Research and Design Institute. The main drafters of this standard are Peng Jingwen and Yang Qi.4 If the response time of the safety system equipment is verified by functional tests, calibration checks or other tests, that is, in lieu of response time tests, response time tests are not required for all safety-related equipment. During routine periodic tests, if a change in performance is detected with a change in response time exceeding the acceptable limit, no response time test is required. 6.3.4.5 For response time tests of channels that do not include sensitive components, the test equipment must simulate the output of the sensitive component over its entire required functional range. To determine the entire response time, both input and output states must be recorded. The test input must span the normal trip setting so that the channel fully recovers under non-tripped conditions and fully trips under tripped conditions. 6.3.4.6 If the protection trip function is triggered by two or more variables (for example, the trip point is calculated from temperature, pressure and neutron fluence rate signals), the channel response time must be verified with the tripping action produced by each variable. During the test, the test signals of the remaining variables must be set within their expected operating range. This test will produce conservative test results. 6.3.4.7 If the response time is not measured during normal reactor operation, it should be measured during reactor shutdown. 6.3.5 Logic system functional test
The logic system functional test must test all logic components from the sensitive element to the drive device. The logic components consist of relays, contactors and solid-state logic circuits. The logic system function can be verified by a series of sequential, overlapping or complete system tests. 6.4 Test method
A special test procedure that meets the requirements of this standard must be established for each system. 6.4.1 The test or combination of tests must fully test each protection channel or load group (for example, including the sensitive element and the final drive or starting device, up to all connected loads). The interaction between the redundant channels must be detected during the test. 6.4.2 Sign of qualified test:
GB5204-94
1. , there is an intuitive and definite indication of the state change, such as the operation of a solid-state or electromechanical device with a corresponding signal (sound alarm, light on or off, change of contact state, instrument indication, motor start, valve or other drive action); b. No abnormal results are observed in the remaining channels. 6.4.3 The input of the channel must be introduced as close to the sensitive element as possible. This can be achieved in different ways, such as: a. Disturb the monitored variable, such as changing the pressure, temperature or power level; b. Introduce a substitute input quantity of the same nature as the monitored variable into the sensitive element and change it appropriately, such as opening the balancing valve on the flow measurement differential pressure gauge, isolating and emptying the input to the pressure measurement device, and injecting hot or cold fluid into the fluid at the measured temperature.
6.4.4 When the overall inspection including the sensitive element cannot be achieved, a local test can be carried out on a channel. For this purpose, an analog or digital input should be appropriately introduced and the amplitude of the test signal should be changed. The range of variation of the test signal amplitude must ensure that the protection action can be generated when the monitored variable reaches the set value.
6.4.5 After understanding the performance characteristics of the test channel, the nature of the test signal change should be determined. Degradation or failure of equipment performance may affect the response to rise time, amplitude or other waveform characteristics. There are several types of test signals of different nature. 6.4.5.1 Slow change signal. If this type of signal requires protection action, and through observation or based on the response of the equipment (its change has tended to the limit of the tolerance band), it is shown that the equipment may not produce protection action for the slowly changing signal, then this type of signal must be selected.
6.4.5.2 Fast change signal. If this type of signal requires protection action, and through observation or based on the response of the equipment (its change has tended to the limit of the tolerance band), it is shown that the equipment may not produce protection action for the fast changing signal, then this type of signal must be selected:
6.4.5.3 Large change signal. This type of signal shall be selected if protective action is required and if observation or the response of the equipment (which has changed to the limits of the tolerance band) indicates that the equipment is unlikely to produce protective action for signals with large deviations from the normal value (for example, saturation or bending occurs). 6.4.6 In order to verify the acceptable performance of the channel under various expected conditions, a given channel or equipment may be tested using one type of signal or a combination of several types of signals as required. The permissible deviation of the operating value of each channel protective action from the nominal setting value shall be determined for each type of signal.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current administrative procedures shall be followed. The test procedures or administrative procedures shall provide a means of verifying that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test Intervals
6.5.1 Initial Test Intervals
The following factors must be properly considered in determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management procedures;
The planned operating cycle of the power plant;
The impact on power plant safety;
Efficient use of manpower;
Radioactive exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target.
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or both; Changes in power plant design related to the equipment; d.
Detection of significant changes in failure rates.
Test intervals can be changed to adapt to the power plant operation mode, but it must be demonstrated that such changes have a significant impact on the equipment being tested. The expected performance of the equipment shall not be adversely affected. Inoperative or tripped systems or equipment must be tested before being put into operation again. If the test interval is changed, the requirements of 6.5.1 must also be followed. 6.6 Format and documentation of procedures
The format and documentation of procedures must comply with the provisions of Chapter 3 of HAF0405 or equivalent documents. Additional notes:
This standard was proposed by the National Technical Committee for Nuclear Instrument Standardization. This standard was drafted by the China Nuclear Power Research and Design Institute. The main drafters of this standard are Peng Jingwen and Yang Qi.4 If the response time of the safety system equipment is verified by functional tests, calibration checks or other tests, that is, in lieu of response time tests, response time tests are not required for all safety-related equipment. During routine periodic tests, if a change in performance is detected with a change in response time exceeding the acceptable limit, no response time test is required. 6.3.4.5 For response time tests of channels that do not include sensitive components, the test equipment must simulate the output of the sensitive component over its entire required functional range. To determine the entire response time, both input and output states must be recorded. The test input must span the normal trip setting so that the channel fully recovers under non-tripped conditions and fully trips under tripped conditions. 6.3.4.6 If the protection trip function is triggered by two or more variables (for example, the trip point is calculated from temperature, pressure and neutron fluence rate signals), the channel response time must be verified with the tripping action produced by each variable. During the test, the test signals of the remaining variables must be set within their expected operating range. This test will produce conservative test results. 6.3.4.7 If the response time is not measured during normal reactor operation, it should be measured during reactor shutdown. 6.3.5 Logic system functional test
The logic system functional test must test all logic components from the sensitive element to the drive device. The logic components consist of relays, contactors and solid-state logic circuits. The logic system function can be verified by a series of sequential, overlapping or complete system tests. 6.4 Test method
A special test procedure that meets the requirements of this standard must be established for each system. 6.4.1 The test or combination of tests must fully test each protection channel or load group (for example, including the sensitive element and the final drive or starting device, up to all connected loads). The interaction between the redundant channels must be detected during the test. 6.4.2 Sign of qualified test:
GB5204-94
1. , there is an intuitive and definite indication of the state change, such as the operation of a solid-state or electromechanical device with a corresponding signal (sound alarm, light on or off, change of contact state, instrument indication, motor start, valve or other drive action); b. No abnormal results are observed in the remaining channels. 6.4.3 The input of the channel must be introduced as close to the sensitive element as possible. This can be achieved in different ways, such as: a. Disturb the monitored variable, such as changing the pressure, temperature or power level; b. Introduce a substitute input quantity of the same nature as the monitored variable into the sensitive element and change it appropriately, such as opening the balancing valve on the flow measurement differential pressure gauge, isolating and emptying the input to the pressure measurement device, and injecting hot or cold fluid into the fluid at the measured temperature.
6.4.4 When the overall inspection including the sensitive element cannot be achieved, a local test can be carried out on a channel. For this purpose, an analog or digital input should be appropriately introduced and the amplitude of the test signal should be changed. The range of variation of the test signal amplitude must ensure that the protection action can be generated when the monitored variable reaches the set value.
6.4.5 After understanding the performance characteristics of the test channel, the nature of the test signal change should be determined. Degradation or failure of equipment performance may affect the response to rise time, amplitude or other waveform characteristics. There are several types of test signals of different nature. 6.4.5.1 Slow change signal. If this type of signal requires protection action, and through observation or based on the response of the equipment (its change has tended to the limit of the tolerance band), it is shown that the equipment may not produce protection action for the slowly changing signal, then this type of signal must be selected.
6.4.5.2 Fast change signal. If this type of signal requires protection action, and through observation or based on the response of the equipment (its change has tended to the limit of the tolerance band), it is shown that the equipment may not produce protection action for the fast changing signal, then this type of signal must be selected:
6.4.5.3 Large change signal. This type of signal shall be selected if protective action is required and if observation or the response of the equipment (which has changed to the limits of the tolerance band) indicates that the equipment is unlikely to produce protective action for signals with large deviations from the normal value (for example, saturation or bending occurs). 6.4.6 In order to verify the acceptable performance of the channel under various expected conditions, a given channel or equipment may be tested using one type of signal or a combination of several types of signals as required. The permissible deviation of the operating value of each channel protective action from the nominal setting value shall be determined for each type of signal.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current administrative procedures shall be followed. The test procedures or administrative procedures shall provide a means of verifying that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test Intervals
6.5.1 Initial Test Intervals
The following factors must be properly considered in determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management procedures;
The planned operating cycle of the power plant;
The impact on power plant safety;
Efficient use of manpower;
Radioactive exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target.
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or both; Changes in power plant design related to the equipment; d.
Detection of significant changes in failure rates.
Test intervals can be changed to adapt to the power plant operation mode, but it must be demonstrated that such changes have a significant impact on the equipment being tested. The expected performance of the equipment shall not be adversely affected. Inoperative or tripped systems or equipment must be tested before being put into operation again. If the test interval is changed, the requirements of 6.5.1 must also be followed. 6.6 Format and documentation of procedures
The format and documentation of procedures must comply with the provisions of Chapter 3 of HAF0405 or equivalent documents. Additional notes:
This standard was proposed by the National Technical Committee for Nuclear Instrument Standardization. This standard was drafted by the China Nuclear Power Research and Design Institute. The main drafters of this standard are Peng Jingwen and Yang Qi.5 Logic system function test
Logic system function test must test all logic components from sensitive elements to drive devices. Logic components consist of relays, contactors and solid-state logic circuits. The logic system function can be verified by a series of sequential, overlapping or whole system tests. 6.4 Test method
A special test procedure that meets the requirements of this standard must be established for each system. 6.4.1 The test or combination of tests must fully test each protection channel or load group (for example, including sensitive elements and the final drive or starting device, up to all connected loads). The interaction between the remaining channels must be detected during the test. 6.4.2 Signs of qualified tests:
GB5204-94
1. a. There is an intuitive and definite indication of the state change, such as the operation of the solid-state or electromechanical device with a corresponding signal (sound alarm, light on or off, change of contact state, instrument indication, motor start, valve or other drive action); b. No abnormal results are observed in the remaining channels. 6.4.3 The input to the channel must be introduced as close to the sensitive element as possible. This can be achieved in different ways, such as: a. Disturb the monitored variable, such as changing the pressure, temperature or power level; b. Introduce a substitute input of the same nature as the monitored variable into the sensitive element and change it appropriately, such as opening the balancing valve on the flow measurement differential pressure gauge, isolating and emptying the input to the pressure measurement device, and injecting hot or cold fluid into the fluid at the measured temperature.
6.4.4 When the overall inspection including the sensitive element is not possible, a channel can be tested locally. For this purpose, an analog or digital input should be introduced appropriately and the amplitude of the test signal should be changed. The range of variation of the test signal amplitude must ensure that the protection action can be generated when the monitored variable reaches the set value.
6.4.5 After understanding the performance characteristics of the tested channel, the nature of the test signal change should be determined. Degradation or failure of equipment performance may affect the response to rise time, amplitude or other waveform characteristics. There are several types of test signals of different nature. 6.4.5.1 Slow-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for the slowly changing signal, then this type of signal must be selected.
6.4.5.2 Fast-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for the fast-changing signal, then this type of signal must be selected:
6.4.5.3 Large-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for a large deviation from the normal value (for example, saturation or bending occurs), then this type of signal must be selected. 6.4.6 In order to verify the qualified performance of the channel under various expected working conditions, a given channel or equipment is tested. According to actual needs, one type of signal can be selected, or a combination of several types of signals can be used. The permissible deviation of the action value of each channel protection action from the nominal setting value must be determined according to different types of signals.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current management regulations must be followed. The test procedures or management regulations must provide a method to verify that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test intervals
6.5.1 Initial test intervals
The following factors must be appropriately considered when determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management regulations;
The planned operating cycle of the power plant;
The impact on power plant safety;
Effective use of manpower;
Radiation exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target.
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or both; Changes in power plant design related to the equipment; d.
Detection of significant changes in failure rates.
Test intervals can be changed to adapt to the power plant operation mode, but it must be demonstrated that such changes have a significant impact on the equipment being tested. The expected performance of the equipment shall not be adversely affected. Inoperative or tripped systems or equipment must be tested before being put into operation again. If the test interval is changed, the requirements of 6.5.1 must also be followed. 6.6 Format and documentation of procedures
The format and documentation of procedures must comply with the provisions of Chapter 3 of HAF0405 or equivalent documents. Additional notes:
This standard was proposed by the National Technical Committee for Nuclear Instrument Standardization. This standard was drafted by the China Nuclear Power Research and Design Institute. The main drafters of this standard are Peng Jingwen and Yang Qi.5 Logic system function test
Logic system function test must test all logic components from sensitive elements to drive devices. Logic components consist of relays, contactors and solid-state logic circuits. The logic system function can be verified by a series of sequential, overlapping or whole system tests. 6.4 Test method
A special test procedure that meets the requirements of this standard must be established for each system. 6.4.1 The test or combination of tests must fully test each protection channel or load group (for example, including sensitive elements and the final drive or starting device, up to all connected loads). The interaction between the remaining channels must be detected during the test. 6.4.2 Signs of qualified tests:
GB5204-94
1. a. There is an intuitive and definite indication of the state change, such as the operation of the solid-state or electromechanical device with a corresponding signal (sound alarm, light on or off, change of contact state, instrument indication, motor start, valve or other drive action); b. No abnormal results are observed in the remaining channels. 6.4.3 The input to the channel must be introduced as close to the sensitive element as possible. This can be achieved in different ways, such as: a. Disturb the monitored variable, such as changing the pressure, temperature or power level; b. Introduce a substitute input of the same nature as the monitored variable into the sensitive element and change it appropriately, such as opening the balancing valve on the flow measurement differential pressure gauge, isolating and emptying the input to the pressure measurement device, and injecting hot or cold fluid into the fluid at the measured temperature.
6.4.4 When the overall inspection including the sensitive element is not possible, a channel can be tested locally. For this purpose, an analog or digital input should be introduced appropriately and the amplitude of the test signal should be changed. The range of variation of the test signal amplitude must ensure that the protection action can be generated when the monitored variable reaches the set value.
6.4.5 After understanding the performance characteristics of the tested channel, the nature of the test signal change should be determined. Degradation or failure of equipment performance may affect the response to rise time, amplitude or other waveform characteristics. There are several types of test signals of different nature. 6.4.5.1 Slow-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for the slowly changing signal, then this type of signal must be selected.
6.4.5.2 Fast-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for the fast-changing signal, then this type of signal must be selected:
6.4.5.3 Large-changing signal. If this type of signal requires protective action, and it is shown by observation or based on the response of the equipment (its change has tended to the limit of the tolerance band) that the equipment may not produce protective action for a large deviation from the normal value (for example, saturation or bending occurs), then this type of signal must be selected. 6.4.6 In order to verify the qualified performance of the channel under various expected working conditions, a given channel or equipment is tested. According to actual needs, one type of signal can be selected, or a combination of several types of signals can be used. The permissible deviation of the action value of each channel protection action from the nominal setting value must be determined according to different types of signals.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current management regulations must be followed. The test procedures or management regulations must provide a method to verify that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test intervals
6.5.1 Initial test intervals
The following factors must be appropriately considered when determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management regulations;
The planned operating cycle of the power plant;
The impact on power plant safety;
Effective use of manpower;
Radiation exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target.
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or both; Changes in power plant design related to the equipment; d.
Detection of significant changes in failure rates.
Test intervals can be changed to adapt to the power plant operation mode, but it must be demonstrated that such changes have a significant impact on the equipment being tested. The expected performance of the equipment shall not be adversely affected. Inoperative or tripped systems or equipment must be tested before being put into operation again. If the test interval is changed, the requirements of 6.5.1 must also be followed. 6.6 Format and documentation of procedures
The format and documentation of procedures must comply with the provisions of Chapter 3 of HAF0405 or equivalent documents. Additional notes:
This standard was proposed by the National Technical Committee for Nuclear Instrument Standardization. This standard was drafted by the China Nuclear Power Research and Design Institute. The main drafters of this standard are Peng Jingwen and Yang Qi.3 Large change signal. This type of signal shall be selected if it requires protective action and if observation or the response of the equipment (whose change has tended to the limit of the tolerance band) indicates that the equipment may not produce protective action for signals with large deviations from the normal value (for example, saturation or bending occurs). 6.4.6 In order to verify the qualified performance of the channel under various expected conditions, a given channel or equipment may be tested. One type of signal may be selected as required, or a combination of several types of signals may be used. The allowable deviation of the action value of each channel protection action from the nominal setting value shall be determined for different types of signals.
6.4.7 The periodic test procedures of this standard shall not require temporary test connections. When temporary test connections, removal of fuses, disconnection of circuit breakers or other methods of disconnecting circuits are required for testing, the current management regulations shall be followed. The test procedures or management regulations shall provide a method for verifying that the disconnected circuits or temporary connections are restored to normal conditions after the test is completed. 6.5 Test Intervals
6.5.1 Initial Test Intervals
The following factors must be properly considered in determining the initial test intervals. 6.5.1.1 For equipment and systems, the following should be considered: a
Requirements of management procedures;
The planned operating cycle of the power plant;
The impact on power plant safety;
Efficient use of manpower;
Radioactive exposure to power plant personnel;
Degradation of equipment performance caused by testing.
6.5.1.2 For equipment, the following should also be considered:
a. The manufacturer's technical instructions or recommendations; historical experience in the use of similar equipment, such as failure rate data (including quality information obtained from the quality database;
equipment quality identification report and analysis;
, pre-operation test,
GR5204-94
failure data: the mode of important failures, the mechanism of failures, and the probability distribution of failures and repairs. These distributions are determined Test intervals d.
Time is the main consideration, which is characterized by parameters such as: mean time to failure (MTTF), mean time to repair (MTTR), failure probability and variability (which can be obtained from test results), historical data and engineering judgment. 6.5.1.3 The system or subsystem test interval must also include the test interval specified in the design basis, that is, it is linked to the availability target.
6.5.2 Changes in test intervals
In order to determine whether the test intervals used can ensure the effective operation of the equipment, the impact of the test intervals on the performance of the equipment involved must be evaluated regularly. The evaluation must consider: a.
Equipment performance history, actual failure rates and possible significant increases in failure rates; Corrective actions related to failures:
Equipment performance in similar power plants or environments, or bot
Tip: This standard content only shows part of the intercepted content of the complete standard. If you need the complete standard, please go to the top to download the complete standard document for free.