GB2448894A - Computer-aided fault tracking for industrial plant providing instructions and countdown - Google Patents

Computer-aided fault tracking for industrial plant providing instructions and countdown Download PDF

Info

Publication number
GB2448894A
GB2448894A GB0708442A GB0708442A GB2448894A GB 2448894 A GB2448894 A GB 2448894A GB 0708442 A GB0708442 A GB 0708442A GB 0708442 A GB0708442 A GB 0708442A GB 2448894 A GB2448894 A GB 2448894A
Authority
GB
United Kingdom
Prior art keywords
fault condition
plant
fault
rectify
screen
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
GB0708442A
Other versions
GB0708442D0 (en
Inventor
William Bryan Salter
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to GB0708442A priority Critical patent/GB2448894A/en
Publication of GB0708442D0 publication Critical patent/GB0708442D0/en
Publication of GB2448894A publication Critical patent/GB2448894A/en
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00—Testing or monitoring of control systems or parts thereof
    • G05B23/02—Electric testing or monitoring
    • G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0259—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the response to fault detection
    • G05B23/0267—Fault communication, e.g. human machine interface [HMI]
    • G05B23/0272—Presentation of monitored results, e.g. selection of status reports to be displayed; Filtering information to the user
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
    • G08B21/18—Status alarms
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
    • G08B21/18—Status alarms
    • G08B21/24—Reminder alarms, e.g. anti-loss alarms
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B29/00—Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
    • G08B29/18—Prevention or correction of operating errors
    • G—PHYSICS
    • G21—NUCLEAR PHYSICS; NUCLEAR ENGINEERING
    • G21D—NUCLEAR POWER PLANT
    • G21D3/00—Control of nuclear power plant
    • G21D3/04—Safety arrangements
    • G21D3/06—Safety arrangements responsive to faults within the plant
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02E—REDUCTION OF GREENHOUSE GAS [GHG] EMISSIONS, RELATED TO ENERGY GENERATION, TRANSMISSION OR DISTRIBUTION
    • Y02E30/00—Energy generation of nuclear origin

Abstract

A computerised system for the monitoring and tracking of faults in an industrial plant such as a nuclear power station, oil or gas rig or refinery, sewage works, water or gas pumping station, etc. providing means of ensuring that plant faults are rectified in a time commensurate with their risk to plant safety. A fault condition is entered into the system, for example, manually by an operator or automatically from plant parameters and the system displays a description of the fault condition, actions for rectifying the fault condition, the time allowed to rectify the fault condition, a countdown of the time remaining to rectify the fault condition and instructions on actions to take if the time to rectify the fault condition is exceeded. A coloured display is used. Audible and visual alarms are provided when the time limit for rectifying the fault is approaching and when it has been exceeded and means are provided to allow an operator to accept an audible alarm. Means to allow an authorised operator to cancel the fault condition are also provided, for example via a swipe card.

Description

Computer Aided Fault Tracking System Limftreik
A. Description
A.1. Introduction
The purpose of this invention, hereinafter called Limitrak, is to provide a system for monitoring and tracking faults in industrial plant to ensure their safe operation. The application is primarily intended for use in nuclear power generation plants where, if a fault condition occurs, a time limit is mandatory in which the fault must be corrected in order to permit plant operation to continue. The fault, or Limiting Condition of Operation, need not necessarily require the plant to cease operation immediately, but a time limit is mandatory which if exceeded requires the plant to be shutdown or power reduced to a lower level.
Limitrak is applicable to other industrial plant in which predetermined corrective actions are necessary to continue safe operation if a fault occurs, for example fossil fired power stations, oil refineries, gas and oil rigs, water and gas pumping stations, sewage treatment plants and fuel storage facilities etc.
A.2. Detailed Description
For the purposes of this patent the following description will apply to a nuclear power reactor. In this case the Limiting Conditions of Operation for the reactor and the auxiliary equipment necessary to ensure its safe operation and shutdown are given in a document called The Technical Specification. This provides the limits and their applicability at all reactor operating modes for the following systems: - * Reactivity Control System * Reactor Power Distribution Limits * Reactor Instrumentation * Reactor Coolant System * Emergency Core Cooling System * Containment Systems * Plant Systems * Electrical Systems it also specifies the Surveillance Requirements and test frequencies necessary to ensure that the performance and operating limits of equipment in reactor systems used during power operation and those systems provided for reactor safeguards duty are within specification.
Each Limiting Condition of Operation (LCO), and Surveillance Requirement are given specific identification numbers for ease of reference. Where necessary the differences in the above limits and tests according to the Reactor Operating Mode are specified, i.e. power operation, start-up, hot-shutdown, intermediate shutdown, cold shutdown and refuelling.
The invention provides the facility for the following: - * Identification of the current Reactor Operating Mode by a graphic display obtained by inputs from reactor power parameters.
* Input by the operator or by plant sensors to identify the reactor system and the particular component in the
system whose LCO is out of specification.
* Display of the Required Actions necessary by the operator and the Completion Time allowed by the LCO to rectify the fault, and in some cases a visual display of the target mode of Reactor Operation if the Required Actions are not completed in time.
* Display of the total time allowed to rectifying the fault and a countdown of the time remainmg to complete it in cases where a change in Reactor Operating Mode is required.
* Display of the Required Actions necessary if the fault cannot be rectified in the time specified by the LCO.
* * Automatic transfer to another Required Action if the fault cannot be rectified in the time allowed in cases where a change m Reactor Operating Mode is required to bring the reactor to a safe mode of operation.
* Audible and visual warnings in advance of the approach of the time limit and audible and visual warnings when the time limit has been exceeded.
* Display of Notes and Additional Instructions, Surveillance Requirements, a list of previous Surveillance Test Results, and a list of Operating Instructions specific to the System and the LCO under consideration are provided.
* Facilities for cancelling the LCO using a swipe card when the fault has been rectified or the reactor power has been reduced to the required faUback mode of reactor operation.
A.3. System Components The following equipment shown in Fig. I provides the above facilities.
A.3.1. A computer, Fig.1, [1], containing a programme of all reactor systems LCOs listed in the Technical Specification, which are accessed from a computer keyboard, Fig. 1, [2], by typing in its LCO reference number. Access to Surveillance Requirements, Fig. 1, [7], and Surveillance Test Results, Fig.l, [8], for all reactor systems, components and parameters are also provided.
A.3.2. The system and system component in which a fault is known to exist is selected by the operator from the lists displayed by the computer monitor by clicking on the appropriate reference number using the keyboard, Fig. 1, [2] & [3], or in certain cases automatically triggered direct from plant parameters, Fig. 1, [4].
A.3.3. An Auxiliary Remote Computer Monitor Display, Fig. 1, 1511, is provided for use in an emergency response control room, or other location.
A.3.4. After a fault has been rectified, or the plant power reduced to * the required faliback level, it is cancelled from the control room using a swipe card device, Fig. 1, [6], held by a suitably authorised supervisor.
A.4. System Operation A.4.l. The tracking of a fault in a reactor system or component is triggered by the operator clicking on the component Fault Tree list on the left hand half of the screen shown in Fig.2, (In some cases it is triggered automatically by reactor plant parameters that are out of
specification).
A.4.2. If the operator is uncertain where to find the required item, use is made of the search facility, Fig.2, [3], by typing in key-word(s) to search the description of each LCO item and by repeatedly clicking the Find button until the required item is highlighted in the Tree.
A.4.3. The fault is selected on the appropriate fault Condition/ Letter list, that can be scrolled, shown on the right hand half of the screen, Fig.2, [I] & [2]. The chosen fault condition, or conditions, are then highlighted (in black), and the LCO is started by clicking on the Start button, Fig.2, [4], producing a monitoring screen containing all the information necessary to monitor and rectify the fault. A typical monitoring screen for LCO 3.3.2-1 Condition: A, is shown in Fig.3.
A.4.4. The monitor screen shown in Fig.3 contains the following items: Item 111. The system name, its reference number, the equipment at fault, and the fault Condition Letter previously diagnosed in Fig.2, [1].
121. A description of the fault.
* 131. A visual display of the current reactor-operating Mode (set automatically by reactor power parameters), and the Required failback mode if Completion Times are exceeded.
141. The Required Actions, necessary to restore the inoperable equipment or parameter to operable status.
151. The mandatory Completion Times, in which these actions must be completed.
161. Details of the Surveillance Requirements, and the test frequency for each piece of equipment or parameter in the (C system, accessed by a Transfer button to a computer record sub-system storing these data, I1. A digital clock monitor, operated by the computer, displaying the Total time allowed in days/hours/minutes to rectify the fault, and the time Left since fault monitoring started to complete the Required Actions.
181. instructions, depending on the reactor's Mode of operation, fOr the course of action to be taken if the Completion Time to restore the equipment or parameter to operable status is exceeded.
191. Transfer buttons (three off) to transfer to and display the requirements of the new LCO if the Completion Time is exceeded.
1101. For faults arising from unsatisfactory Surveillance Requirements test results of reactor safeguards equipment, a Transfer button is provided for transferring to a computer record sub-system displaying previous Surveillance Test Results for the faulty component or parameter out of
specification.
* 1111. Notes and Additional Instructions, relevant to the LCO are provided in a screen that can be scrolled if insufficient room is available.
[12J. A Cancel button provides the means of cancelling the LCO when the fault has been rectified within the Completion Time, or the reactor power reduced to the required failback Mode of operation, using a swipe-card card held by an authorised operator, (see Fig. 1, [6]).
1131. A Transfer button is provided to access a list of Operating Instructions relevant to the LCO, stored in the control room computer, Fig.l, [1].
A.4.5. Figure 4 shows the complete LCO monitoring screen in outline, and includes on the left hand side the control screen for running LCOs.
This contains the following items: -Item IAI. The Time/Date from the computer clock.
181. Area [B] has five buttons having the following functions: -A button marked LCO to trigger a new LCO from Figure 2.
A button marked File to select the way in which information on the progress of a running LCO is recorded. A drop-down menu of four items is provided. Operators have control over the choice of three options, Print to Screen, Print to Printer, or View Log File. Print to Log File is not under operator control and is always connected to provide a permanent record of LCO progress.
A button marked Window to select the way in which multiple LCOs are shown on the monitor screen. A drop-down menu gives operators the choice of viewing the running LCOs as a Cascade, as Tiles Horizontally, as Tiles Vertically, or as Icons in a minimized form at the bottom of the monitoring screen.
A button marked Help.
id. This area is used to list the identification numbers and the Time Left for LCOs that may be running concurrently. They are arranged with the most urgent at the top, i.e. the one with the minimum Time Left. If the Time Left for the LCO at the top of the list is less than 1 hour its font colour and that in the Completion Time box, changes to orange and an alarm sounds.
If the Completion Time is exceeded, these colours change to red, an alarm sounds, and the LCO is automatically transferred to the monitor screen. This warns operators that the LCO requirements have been violated and urgent action is necessary.
101. Button [DJ is used to accept the audible alarm if the Completion Time of a LCO is exceeded.
tEl. If in the File drop-down menu, Print to Screen has been selected, button [E] clears the record on the progress of a running LCO from the monitor screen. This does not delete the record on the Log File or on the printer.

Claims (3)

  1. B. Claims The following claims are made for this invention hereinafter
    called LIMITRAK.
    Bi. The claim is for a computerised system for monitoring and tracking the occurrence and correction of faults in industrial plant where its continued safe operation depends on predetermmed actions to correct faults. This patent is specifically described herewith for a nuclear power plant, but its principles are applicable to many industrial plants.
    The claims for LIMITRAK include: - * A means by which the current plant operating condition is set on a visual coloured display * A means of data processing * A means of entering fault condition data to the processing system * A display, as part of the data processing system, describing the fault condition in words, as a graphic display, and the action required to rectify the fault condition A display, as part of the data processing system, indicating the time allowed in which the fault condition must be rectified * A visual display, as part or the data processing system, indicating the time remaining, since the initiating of a fault condition, in which it must be rectified * Audible and visual warnings to the operator, as part of the data processing system, when the time allowed to rectify the fault condition is nearing its limit and when it has been exceeded * Instructions, as part of the data processing system screen display, to direct the operator on what action is necessary if the time allowed to rectify the fault condition is exceeded * A means, as part of the data processing system, for the operator to accept audible alarms occurring when the time allowed to rectify the fault condition has been exceeded * A means, as part of the data processing system, of cancelling a fault condition when it has been rectified or the plant operating condition has been reduced to the desired level B.
  2. 2. The system as claimed in B. I above: - * In which the data processing is performed by a computer * In which the current plant operating mode is set automaticaiJy, by plant parameters, without operator intervention, and displayed in colour on the screen of the above computer * In which the means of entering fault condition data is by an operator using a keyboard on the above computer, or directly from faults in plant parameters * In which all possible plant fault condition information is stored by and which on demand is displayed to the operator on the screen of the above computer * in which the time allowed to rectify a fault condition is stored in the above computer and is displayed by a digital clock on its monitor screen * In which the time remaining to rectify a fault condition is displayed by a digital clock on the screen of the above computer * In which the audible and visual alarms when the time remaining to rectify a fault condition is approaching or has exceeded its limit, are annunciated and displayed on the screen of the above computer which also has a means for operators to accept the alarm * In which the action or actions necessary by the operator are displayed on the screen of the above computer if the time allowed to rectify a fault condition has been exceeded which can be accessed by transfer to data stored in the computer * A means, consisting of' a cancel button on the above computer screen, by which a fault condition can be cancelled from a supplementary screen and password, or by a swipe card in the charge of an authorised supervisor or using a swipe card device B.
  3. 3. The system as claimed in B. I and B.2 above which incorporates the following improvements over a manual system of monitoring fault conditions: - * The elimination of fault identification by operators in instances where its automatic initiation from plant parameters out of specification is possible, such as low level in various storage tanks * The reduction in the amount of referral by operators to fault condition manuals so reducing their reaction time when a fault occurs * The improvement in the speed of identifying fault conditions by the use of an index search facility * The presentation to operators on a screen of all the actions necessary to rectify the fault condition without the need for reference to fault condition manuals, thereby eliminating or 12..
    reducing the risk of individual interpretation of the required actions * The monitoring and recording of all progress in dealing with a fault condition without the need for operators to keep records * The facility to monitor remotely the progress of rectifying a fault condition * The elimination of the need to hand-over the status of fault condition monitoring at a shift change-over * The elimination of unauthorised cancellation of' fault conditions * The speedy access to surveillance requirements and previous surveillance test results in cases where it is necessary to deal with the fault condition by repeating surveillance tests * The speedy access to operating instruction lists under fault conditions in which a change in plant operating mode becomes necessary * The elimination or reduction of unnecessary changes in plant operating modes, thereby increasing plant life, reducing plant transients, increasing plant availability, and avoiding the operation of back-up generating plant * The elimination of inadvertent reactor trips resulting from incorrect interpretation of LCOs
GB0708442A 2007-05-02 2007-05-02 Computer-aided fault tracking for industrial plant providing instructions and countdown Withdrawn GB2448894A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
GB0708442A GB2448894A (en) 2007-05-02 2007-05-02 Computer-aided fault tracking for industrial plant providing instructions and countdown

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
GB0708442A GB2448894A (en) 2007-05-02 2007-05-02 Computer-aided fault tracking for industrial plant providing instructions and countdown

Publications (2)

Publication Number Publication Date
GB0708442D0 GB0708442D0 (en) 2007-06-06
GB2448894A true GB2448894A (en) 2008-11-05

Family

ID=38171027

Family Applications (1)

Application Number Title Priority Date Filing Date
GB0708442A Withdrawn GB2448894A (en) 2007-05-02 2007-05-02 Computer-aided fault tracking for industrial plant providing instructions and countdown

Country Status (1)

Country Link
GB (1) GB2448894A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2653942A1 (en) * 2010-12-15 2013-10-23 Kabushiki Kaisha Toshiba Operation management support device of power plant
CN103700208A (en) * 2013-11-27 2014-04-02 中国核电工程有限公司 Fire-proof space integrated control and display method for nuclear power plant
CN103714870A (en) * 2013-12-13 2014-04-09 中国核电工程有限公司 Design method of nuclear power plant serious accident instrumentation and control system
CN112466496A (en) * 2020-11-17 2021-03-09 中广核工程有限公司 Intelligent technical specification method and system for nuclear power plant

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4421716A (en) * 1980-12-29 1983-12-20 S. Levy, Inc. Safety monitoring and reactor transient interpreter
WO1990013745A1 (en) * 1989-05-03 1990-11-15 Johnson Service Company An electronic control for monitoring status of a compressor
EP0441641A2 (en) * 1990-02-09 1991-08-14 Westinghouse Electric Corporation An automatic plant state diagnosis system including a display selection system for selecting displays responsive to the diagnosis
EP0553571A1 (en) * 1992-01-17 1993-08-04 Westinghouse Electric Corporation Method for generating and executing complex operating procedures
EP0590571A1 (en) * 1992-09-28 1994-04-06 Praxair Technology, Inc. Knowledge based diagnostic advisory system and method
US5309485A (en) * 1992-07-06 1994-05-03 General Electric Company Core automated monitoring system
GB2275560A (en) * 1989-11-02 1994-08-31 Combustion Eng Alarm control
GB2286907A (en) * 1992-04-03 1995-08-30 Combustion Eng Compact work station control room
US6584768B1 (en) * 2000-11-16 2003-07-01 The Majestic Companies, Ltd. Vehicle exhaust filtration system and method
JP2006136152A (en) * 2004-11-08 2006-05-25 Canon Inc Electronic equipment having backup power supply unit

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4421716A (en) * 1980-12-29 1983-12-20 S. Levy, Inc. Safety monitoring and reactor transient interpreter
WO1990013745A1 (en) * 1989-05-03 1990-11-15 Johnson Service Company An electronic control for monitoring status of a compressor
GB2275560A (en) * 1989-11-02 1994-08-31 Combustion Eng Alarm control
GB2275564A (en) * 1989-11-02 1994-08-31 Combustion Eng Alarm system and presentation
EP0441641A2 (en) * 1990-02-09 1991-08-14 Westinghouse Electric Corporation An automatic plant state diagnosis system including a display selection system for selecting displays responsive to the diagnosis
EP0553571A1 (en) * 1992-01-17 1993-08-04 Westinghouse Electric Corporation Method for generating and executing complex operating procedures
GB2286907A (en) * 1992-04-03 1995-08-30 Combustion Eng Compact work station control room
US5309485A (en) * 1992-07-06 1994-05-03 General Electric Company Core automated monitoring system
EP0590571A1 (en) * 1992-09-28 1994-04-06 Praxair Technology, Inc. Knowledge based diagnostic advisory system and method
US6584768B1 (en) * 2000-11-16 2003-07-01 The Majestic Companies, Ltd. Vehicle exhaust filtration system and method
JP2006136152A (en) * 2004-11-08 2006-05-25 Canon Inc Electronic equipment having backup power supply unit

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2653942A1 (en) * 2010-12-15 2013-10-23 Kabushiki Kaisha Toshiba Operation management support device of power plant
EP2653942A4 (en) * 2010-12-15 2014-05-21 Toshiba Kk Operation management support device of power plant
KR20150038624A (en) * 2010-12-15 2015-04-08 가부시끼가이샤 도시바 Operation management support device of power plant
US9070266B2 (en) 2010-12-15 2015-06-30 Kabushiki Kaisha Toshiba Operation management support apparatus for power plant
KR101577385B1 (en) * 2010-12-15 2015-12-16 가부시끼가이샤 도시바 Operation management support device of power plant
CN103700208A (en) * 2013-11-27 2014-04-02 中国核电工程有限公司 Fire-proof space integrated control and display method for nuclear power plant
CN103700208B (en) * 2013-11-27 2016-01-20 中国核电工程有限公司 The method of a kind of nuclear power plant fire protection space Comprehensive Control and display
CN103714870A (en) * 2013-12-13 2014-04-09 中国核电工程有限公司 Design method of nuclear power plant serious accident instrumentation and control system
CN112466496A (en) * 2020-11-17 2021-03-09 中广核工程有限公司 Intelligent technical specification method and system for nuclear power plant
WO2022033223A1 (en) * 2020-11-17 2022-02-17 中广核工程有限公司 Nuclear power plant intelligent technical specification method and system

Also Published As

Publication number Publication date
GB0708442D0 (en) 2007-06-06

Similar Documents

Publication Publication Date Title
KR950010956B1 (en) On line interactive execution of process operating procedures
Cooper et al. A technique for human error analysis (ATHEANA)
US4632802A (en) Nuclear plant safety evaluation system
GB2448894A (en) Computer-aided fault tracking for industrial plant providing instructions and countdown
Thomas et al. A Computuerized Operator Support System Prototype
Huang et al. Evaluation and comparison of alarm reset modes in advanced control room of nuclear power plants
Chang et al. Development of an advanced human–machine interface for next generation nuclear power plants
JP4607702B2 (en) Plant operation support apparatus and plant operation support method
Ulrich et al. Example user centered design process for a digital control system in a nuclear power plant
Chuang et al. Investigation of potential operation issues of human-system interface in Lungmen Nuclear Power Project
St Germain et al. Prototype System for Detecting Interactions between Current Plant Configuration States and Component Manipulations Directed by In-Use Procedures
Barriere et al. An analysis of operational experience during low power and shutdown and a plan for addressing human reliability assessment issues
Lu et al. Development and assessment of a diversity and defense-in-depth strategy for the terrapower twr-p advanced nuclear power plant
BLanc et al. A Pilot Study Investigating the Effects of Advanced Nuclear Power Plant Control Room Technologies: Methods and Qualitative Results
Sabri et al. Analytical modeling of nuclear power station operator reliability
Boring et al. Human reliability analysis for small modular reactors
JP2646115B2 (en) Test monitoring control apparatus and method
Stubler et al. Maintainability of digital systems: Technical basis and human factors review guidance
Tripputi Artificial Events: Human Factors
Sträter L6 The quantification process for human interventions
Takizawa et al. A post trip operational guidance system for BWR plants
Okrent et al. Safety culture evaluation and ASSET root cause analysis
Hulsmans et al. Probabilistic analysis of accident precursors in the nuclear industry
Mukherjee et al. Regulatory and safety aspects of Control Room design in Indian NPPs-criteria & practices
Hartmann et al. The operator and the seven small modular reactors—An estimate of the number of reactors that a single reactor operator can safely operate

Legal Events

Date Code Title Description
WAP Application withdrawn, taken to be withdrawn or refused ** after publication under section 16(1)