BS EN 61226-2010 Nuclear power plants - Instrumentation and control important to safety - Classification of instrumentation and control functions《核电厂 仪表和控制的重要安全性 仪表和控制功能分类》.pdf

1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationNuclear power plants Instrumentation and controlimportant to safety Classification of instrumentationand control functionsBS EN 61226:2010Licensed Copy: Wang Bin, ISO/EXCHANGE CH

2、INA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSINational forewordThis British Standard is the UK implementation of EN 61226:2010. It is identical sedes BS IEC 61226:2009 which is withdrawn. The UK participation in its preparation was entrusted to Technical CommitteeNCE/8, Reactor instrume

3、ntation.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions of acontract. Users are responsible for its correct application. BSI 2010 ISBN 978 0 580 70133 7 ICS 27.120.20Compliance

4、with a British Standard cannot confer immunity from legal obligations.This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 September 2009BRITISH STANDARDBS EN 61226:2010to IEC 61226:2009. It superAmendments issued since publicationDate Text aff

5、ected/ c o r r i g e n d aThis corrigendum renumbers BS IEC 61226:2009 as BS EN 61226:2010.30 June 2010Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSIEUROPEAN STANDARD EN 61226 NORME EUROPENNE EUROPISCHE NORM March 2010 CENELEC European Committee f

6、or Electrotechnical Standardization Comit Europen de Normalisation Electrotechnique Europisches Komitee fr Elektrotechnische Normung Central Secretariat: Avenue Marnix 17, B - 1000 Brussels 2010 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.

7、 Ref. No. EN 61226:2010 E ICS 27.120.20 English version Nuclear power plants - Instrumentation and control important to safety - Classification of instrumentation and control functions (IEC 61226:2009) Centrales nuclaires de puissance - Instrumentation et contrle-commande importants pour la sret - C

8、lassification des fonctions dinstrumentation et de contrle-commande (CEI 61226:2009) Kernkraftwerke - Leittechnische Systeme mit sicherheitstechnischer Bedeutung - Kategorisierung leittechnischer Funktionen (IEC 61226:2009) This European Standard was approved by CENELEC on 2010-03-01. CENELEC member

9、s are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application

10、 to the Central Secretariat or to any CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the Central Secretariat has

11、 the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the

12、Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and the United Kingdom. Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSIForeword The text of the International Standard IEC 61226:2009, prepared by SC 45A

13、, Instrumentation and control of nuclear facilities, of IEC TC 45, Nuclear instrumentation, was submitted to the CENELEC formal vote for acceptance as a European Standard and was approved by CENELEC as EN 61226 on 2010-03-01. Attention is drawn to the possibility that some of the elements of this do

14、cument may be the subject of patent rights. CEN and CENELEC shall not be held responsible for identifying any or all such patent rights. The following dates are proposed: latest date by which the EN has to be implemented at national level by publication of an identical national standard or by endors

15、ement (dop) 2011-03-01 latest date by which the national standards conflicting with the EN have to be withdrawn (dow) 2013-03-01 Annex ZA has been added by CENELEC. As stated in the nuclear safety Directive 2009/71/EURATOM, Chapter 1, Article 2, item 2, Member States are not prevented from taking mo

16、re stringent safety measures in the subject-matter covered by the Directive, in compliance with Community law. In a similar manner, this European Standard does not prevent Member States from taking more stringent nuclear safety measures in the subject-matter covered by this European Standard. _ Endo

17、rsement notice The text of the International Standard IEC 61226:2009 was approved by CENELEC as a European Standard without any modification. BS EN 61226:2010EN 61226:2010 (E) 2 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSICONTENTS INTRODUCTION.

18、1 Scope. 2 Normative references . 3 Terms and definitions . 4 Abbreviations .12 5 Classification scheme.12 5.1 General .12 5.2 Background .13 5.3 Description of categories.13 5.3.1 General .13 5.3.2 Category A 14 5.3.3 Category B 14 5.3.4 Category C 14 5.4 Assignment criteria15 5.4.1 General .15 5.4

19、.2 Category A 15 5.4.3 Category B 15 5.4.4 Category C 16 6 Classification procedure .16 6.1 General .16 6.2 Identification of design basis .17 6.3 Identification and classification of functions.17 7 Assignment of technical requirements to categories .20 7.1 General requirements20 7.2 Requirements re

20、lated to functions .20 7.2.1 Basic requirements20 7.2.2 Specific requirements 21 7.3 Requirements related to I assign specification and design requirements to I b) the consequences of failure to perform the function; c) the probability that it (the I d) the time following a PIE at which, or the peri

21、od throughout which it (the I b) those structures, systems and components that prevent anticipated operational occurrences from leading to accident conditions; c) those features which are provided to mitigate the consequences of malfunction or failure of structures, systems or components. IAEA Safet

22、y Glossary: 2007 NOTE Items important to safety considered in this standard are mainly I the time for which alternative actions can be taken; the timeliness by which hidden faults can be detected and remedied. This standard extends the classification strategy presented in IAEA Safety Guide NS-G-1.3,

23、 and establishes the criteria and methods to be used to assign the I b) functions, the failure or spurious actuation of which would lead to unacceptable consequences, and for which no other category A function exists that prevents the unacceptable consequences; c) functions required to provide infor

24、mation and control capabilities that allow specified manual actions necessary to reach the non-hazardous stable state. 5.4.3 Category B An I b) functions required to provide information or control capabilities that allow specified manual actions necessary after the non-hazardous stable state has bee

25、n reached to prevent a DBE from leading to unacceptable consequences, or mitigate the consequences; c) functions, the failure of which during normal operation, would require the operation of a category A function to prevent an accident whose study is required; d) functions to reduce considerably the

26、 frequency of a DBE as claimed in the safety analysis; e) plant process control functions operating so that the main process variables are maintained within the limits assumed in the safety analysis, if these control functions are the only means of control of these variables. If different means are

27、provided, clause 5.4.4 a) may apply; f) functions used to prevent or mitigate a radioactive release or fuel degradation outside of the limits and conditions of normal operation as defined in the safety analysis; NOTE 1 This refers to functions that are not already covered by the analysis of DBE lead

28、ing to category A classification. BS EN 61226:2010EN 61226:2010 (E) 15 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSIg) functions that provide continuous or intermittent tests or monitoring of functions in category A to indicate their continued av

29、ailability for operation and alert control room staff to their failures, if no alternative means (e.g. periodic tests) are provided to verify their availability4. NOTE 2 Where the monitoring function is the only means of detecting otherwise unrevealed failures, then assigning the function to categor

30、y B ensures that the equipment providing the function is suitably qualified. 5.4.4 Category C An I NOTE 1 According to national practices a possible acceptable application of clause 5.4.4 a) is the combination of a regulation function and suitable manual actuation based on independent alarms includi

31、ng a justification of the use of manual action. b) functions used to prevent or mitigate a minor radioactive release, or minor degradation of fuel, within the NPP design basis; NOTE 2 A minor release or minor fuel degradation is considered to be that which falls within the normal limits and conditio

32、ns of operation (e.g. discharge limits). c) functions that provide continuous or intermittent tests or monitoring of functions in category A and B to indicate their continued availability for operation and alert control room staff to their failures, and are not classified category B according to 5.4

33、.3 g); d) functions necessary to reach the safety probabilistic goals including those to reduce the expected frequency of a DBE; e) functions to reduce the demands on a category A function, as claimed in the safety analysis; f) functions to monitor and take mitigating action following internal hazar

34、ds within the NPP design basis (e.g. fire, flood); g) functions to warn personnel or to ensure personnel safety during or following events that involve or result in release of radioactivity in the NPP, or risk of radiation exposure; h) functions to monitor and take mitigating action following natura

35、l events (e.g. seismic disturbance, extreme wind); i) functions provided for the benefit of the accident management strategy to reach and maintain a safe state for beyond design accidents; j) functions provided to minimise the consequences of severe accidents; k) functions which provide access contr

36、ol for the NPP. 6 Classification procedure 6.1 General An outline of the procedure is shown in Figure 1. 4 Subclause 4.2.6 of IEC 60671 provides further guidance on the class of equipment used to implement such functions and in particular notes that where: “test features could interfere in an inappr

37、opriate manner with the proper operation of the system or equipment performing the function important to safety, it shall be assigned to the same category” BS EN 61226:2010EN 61226:2010 (E) 16 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSI6.2 Iden

38、tification of design basis A main input to the classification process of functions is the nature of the NPP and the reactor type (e.g. PWR (pressurized water reactor), BWR (boiling water reactor) or other reactor type), the associated PIEs, and the major design criteria on redundancy of mechanical a

39、nd electrical systems and equipment. Another main input is the identification of the major mitigation functions, and their supporting functions, for each PIE. The assessment of the frequency and consequences of PIEs leads to the identification of DBEs representing the design base of the plant. When

40、considering the design features of the plant the specified ranges of operational states and accident conditions and the defined radiological limits have to be reflected. Individual safety principles that together make up an “integrated overall safety approach” ensure the safety of a NPP. These princ

41、iples are used in the design by considering the identified DBEs and successive physical barriers to keep radioactive exposure within permitted limits. The DBEs and the major design criteria (redundancy, separation, etc) of the plant, as well as the identification of the prevention and mitigation fun

42、ctions, and their supporting functions are the main input to the classification process. The importance to safety of each I the role of the function in preventing or mitigating postulated initiating events; the role of the function during all operating modes (e.g. start-up, normal operation, refuell

43、ing, etc); the role of the function following PIEs such as natural events (e.g. seismic disturbance, flood, extreme wind, lightning) and internal hazards (e.g. fire, internal flood, missiles, radioactive release from adjacent unit or chemical releases from other plants or industries); the consequenc

44、es of failure of the I the effects of spurious actuation of the I the probability that it will be required to perform a function important to safety; the time following a DBE at which, or during which it will be required to operate; the maintenance, repair and testing strategy. It will not be possib

45、le to identify in detail all the functions at an early stage in the design process, as the characteristics of the NPP will not then have been defined fully. The process of identification and classification of the functions must therefore continue iteratively throughout the design phase. Where an ini

46、tial assignment of a function to a category is uncertain, then an explanatory note should be added to the categorisation. BS EN 61226:2010EN 61226:2010 (E) 17 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 09/10/2010 04:30, Uncontrolled Copy, (c) BSISince individual functions may be involved

47、 in the implementation of several aspects of the requirements specification, such functions may be assigned to several categories. In that case, the highest category assigned shall be applied. As the redundancy, diversity and other technical requirements of the functions are determined more exactly,

48、 for example after the safety analysis progresses and the operating procedures are developed, the classification list shall be refined and revised, to derive a final list. This list shall be documented and maintained under configuration control since it will be required by plant/I plant operating mo

49、des; list of PIEs and their likely frequency of occurrence; list of preventing and mitigating functions. 2. Initial list of functions including functional requirements 3. Assignment of category A, B, C or non-classified 4. Development of detailed systems requirements 5. Identification of detailed I requirements that apply to the design of I requirements concerning the equipment features for the assurance of seismic and environmental durability and electro-magnetic compatibility; requirements that