To: stockman_scott who wrote (205472 ) 3/13/2011 1:25:32 PM From: Cogito Ergo Sum Read Replies (1) | Respond to of 361355 More here To: E. Charters who wrote (74076) 3/13/2011 1:00:08 PM From: Land Shark of 74101 All CANDU shutdown systems don't rely on the availability of power: What are the CANDU safety systems? [A. CANDU Technology] [B. The Industry] [C. Cost/Benefit] [D. Safety/Liability] [E. Waste] [F. Security/Non-Proliferation] [G. Uranium] [H. Research Reactors] [I. Other R&D] [J. Further Info] The safety philosophy of CANDU reactors [1] is based upon the principle of "Defence-in-Depth", which includes redundancy (using at least two components or systems for a given function), diversity (using two physically or functionally different means for a given function), separation (using barriers and/or distance to separate components or systems for a given function), and protection (seismically and environmentally qualifying all safety systems, equipment, and structures, including tornado protection). This philosophy is applied throughout the plant design, from the Reactor Regulation System and Special Safety Systems, to the process control systems, and the electrical power supply (including independent, separated supplies of backup power supply). The philosophy is also embodied in the Secondary Control Area (SCA) of CANDU plants, which is a backup control room capable of independently shutting down and cooling the reactor, as well as monitoring plant status. The Reactor Regulation System (RRS) is part of a fully computerized control system that is also responsible for boiler pressure and level control, unit power regulation, primary heat-transport pressure and inventory, and turbine run-up. The RRS includes two identical, independent digital computers, each capable of complete station control. The two computers run simultaneously, one acting as instantaneous back-up to the other. The Special Safety Systems, on the other hand, perform no function in the normal operation of the plant, but exist to mitigate the consequences of a serious process failure. The Special Safety Systems are fully automated and take no credit for operator intervention, although they can be initiated manually if required. They consist of: Shutdown System 1 (SDS1), Shutdown System 2 (SDS2), Emergency Core Cooling System (ECCS), and Containment System. In keeping with the Defence-in-Depth philosophy, each system is independent of the others, employing its own sensors, logic, and actuators. Each system uses triplicated logic (three sensor circuits, with two-out-of-three voting), with the ability to be tested on-line. Shutdown System 1 uses solid shutoff rods, dropping by force of gravity into the core, and is capable of shutting down the reactor for the entire spectrum of postulated initiating events. Shutdown System 2 uses high-pressure liquid poison injected into the (low-pressure) moderator, and is also capable of shutting down the reactor for the entire spectrum of postulated initiating events. The Emergency Core Cooling System (ECCS) can maintain or re-establish core cooling by supplying coolant to all reactor headers. It consists of three phases: high-pressure water injection using pressurized nitrogen (used during the early stages of an event), medium pressure water supply from the containment building's dousing tank (used during the intermediate stages), and low-pressure water supply based on recovery from the building's sump. The Containment System forms a continuous, pressure-confining envelope around the reactor core and primary heat-transport system. In the CANDU 6 design it consists of a pre-stressed, post-tensioned concrete structure, an automatically-initiated dousing system, building coolers, and a filtered air discharge system. In Ontario Power Generation's multi-reactor designs (the Ontario utility formerly known as Ontario Hydro), containment includes a vacuum building connected to all reactor vaults in the plant, with its own dousing system for reducing internal pressure. The safety systems of each CANDU plant are designed to meet international standards of reliability, and are tested routinely to ensure compliance with these standards.Message 27232693