Sizewell B Integrated Control and Instnunentation System:

A Vision Becomes Reality

G. W.Remley, B.M. Cook & P.A. Loftus
Westinghouse Electric Corporation
200 Beta Drive
Pittsburgh, Pennsylvania 15238

CONTROL
AND INSTFNMFNTATION
SYSTEM
For almost two decades, Westinghousehas actively developed
The control and instrumentation system is comprised of four
and implemented micropmessor based instrumentation and control systems for both operatingand new nuclear plant applications. primary areas control room, data processing and display generaThe Westinghouse suppliedcontrol and instrumentationsystemfor tion, control and protection, and plant process. The protection
the Sizewell B station in the United Kingdom represents the h t functions are made up of a PrimaryProtection System (PPS) and a
implementation of this state-of-the-art digital technology in an Secondary Protection System (SPS). The PPS is Westinghouses
proven micropmessor based Eagle Series equipment. The SPS is
integrated plant-wide protection, control, and computer system.
being supplied by CegeledGEC Power Instrumentation. The Primary Protection System is based on four redundant channels of
SmwBREQUIREMENTS
Nuclear Electrics Sizewell B station is an 1188 MW PWR measured input, signal processing, trip demands and Engineered
located in Suffolk,UK. Based on an aggressive63 monthconstruc- Safety Features actuations. Actuation is initiated based on two of
tion schedule, SizewellB operation is scheduled for 1994.Nuclear the four channels exceeding the setpoint. The system allows for
Electrics design philosophy involves a balance between state-of- bypass of one of the four channels for maintenance and testing.
Figure 1 provides a schematic of the PPS architecture.
the-art systems and proven technology.
The Westinghouse Integrated System for Centralized OperaSizewell B features Westinghouse steam supply technology
including Westinghouse supplied reactor protection and instru- tion (W-ISCO) is the heart of Sizewell Bs integrated control and
mentation systems. The control system was originally to be sup- instrumentation system. W-ISCO provides the principle plant
plied by the French and was similarin design to the advanced P20 control, data processing and display, and monitoring functions for
system scheduled to be installed in the Chooz B nuclear station in the Main Control Room (MCR), the Auxiliary Shutdown Room
France. The Chooz B program was approximatelytwo years ahead (ASR), and the Technical Support Center (TSC). The ASR proof the Sizewell schedule. In December of 1990, Electricite de vides control for safe shutdown while the TSC permits remote
display processing and analysis of control and monitoring data.
France decided to discontinue development of the P20 system.
The W-ISCO system is comprised of the High Integrity
In June of 1991, Nuclear Electric announced the decision to
replace the French control system with one supplied by Westing- Control System(HICS), the Process Control System(PCS),and the
house. Factorsinvolved in the selection of Westinghouse included: Distributed Computer System (DCS).Figure 2 provides a sche1) capability to satisfy schedule requirements with the existing matic of the W-ISCO architecture.
The Primary Protection System and the W-ISCO system are
product range, 2) prior project involvement, 3) supplier of steam
supply technology, and 4) equipment which could satisfy safety, based upon Westinghouse-standard digital I&C product families,
functional, and operational requirements within the existing plant The Primary Protection System and W-ISCOs HICS are implemented with Westinghouse-standardEagle Series equipment. The
layout.
At this point in plant construction,much of the plant layout and W-ISCO PCS and DCS are implemented with Westinghousecabling had already been completed. The functionally decentral- standard WDPF 11equipment.Communicationswithin each of the
ized architecture proposed by Westinghouse utilized multiple three W-ISCO subsystems and between the Primary Protection
independent microprocessor based protection and control sub- System and W-ISCO is accomplished via data highways and/or
systems comprised of Eagle Series and Westinghouse Distributed serial data links which conform to the protocols of the WestingProcessingFamily (WDPF) equipmentlinked by data communica- house-standard product family on which the subsystem is based.
tion highways while preserving the plant interface requirements. This allows for the use of high performancedata highway commuNuclear Electric determined that the scheduleto install the control nications where necessary within the W-ISCO subsystems, as well
and instrumentation systems must be preserved in order to achieve as the ability to provide dedicated, isolated serial datalinks to meet
the aggressive plant construction schedule. The Westinghouse special data transfer requirements across physical or logical sepaapproachallowedplant construction and the controlandinstrumen- ration boundaries. These communications mechanisms, implemented with a fiber optic transmissionmedia, also allow for a clean
tation system design and manufacturing to proceed in parallel,
separation of functions between Safety Category 1 and Safety
Category 2 equipment.
0-7803-0883-2/93/$3.0(a1993IEEE

736

PLANT DATA HIGHWAY

Figure 1. Primary Pmtection System

I
f

....................
I

--T T
r

TT

Figure 2. W-ISCO - Heart of the Sizewell B Control and InstrumentationSystem

737

PRODUCT FAMILY APPROACH

For nearly two decades,Westinghouse has been involved in

the development and implementation of micropmessor based
control and instrumentation systems for both nuclear and fossil
stations. The Eagle-Series equipment family features Eagle 21
which was specificallypackaged for operating nuclear power plant
process protection applications and Eagle 2000(integrated process
and logic protection) packaged for new plant applications.
The Eagle 21 equipment was packaged as a form-fit-function
replacement for obsolete analog equipment. This system was
designed to be installed in the analog racks and uses the same field
terminations and cables. The Eagle-Series equipment has been
designed to address the testability, redundancy, maintainability,
seismic, power and grounding, isolation and environmental requirements of SafetyCategory 1hardware. The software is written
and verified according to the requirements for high integrity
software systems. This equipment is currently installed and operationalatTVA (Sequoyah 1and 2), Florida Power andLightW k e y
Point 3 and 4), and Commonwealth Edison (Zion 1).Installation at
TVA (Watts Bar), Commonwealth Edison (Zion 2), and Pacific
Gas and Electric (Diablo Canyon 1 and 2) is scheduled to be
completed before the end of 1994.
The Eagle 2000 equipment provides an integrated solution for
total plant operations.This equipment combines the operatingplant
upgrade technologies with a distributed computer system based on
modular operator workstations. In 1994, Sizewell operation will
mark the startup of the most modem nuclear plant integratedcontrol
and instrumentation system in the world.
The Westinghouse Distributed Processing Family (WDPF 11)
is similar to the Eagle-Series equipment in that it has modular,
c o n f i p b l e , reusable components at both the hardware and software level. The WDPF family provides total process control
management,integrating plant monitoring and display, continuous
control, sequential logic, and bath control systems into one network. It also allows the process management system to be configured exactly as needed. The Westinghouse WDPF family is suitable for use in Category 2 systems. To date, there are in excess of
1000 WDPF installations worldwide. Nuclear applications of
WDPF include the installation of Advanced Digital Feedwater
Control at Pacific Gas and Electric (Diablo Canyon 1 and 2), Duke
Power (Catawba 1 and 2), Northern StatesPower (Prairie Island 1
and 2) and Rochester Gas and Electric (Ginna) and planned
installations at Public Service Electric and Gas (Salem 1 and 2).
WDPFequipmenthas been or is scheduled to be installedin balance
of plant control applications at Alabama Power (Farley 1 & 2).
Consumers Power (Palisades), and Commonwealth Edison (Zion
I and2).

The Eagle-Series and WDPF families combine the power of a

,
independent m i c r o p
decentralized system a r c h i t e c ~multiple
cessors and proven software verification and validation (VSrV)
methodology to provide a reliable, safe, economic control and
instrumentation system.
The microprocessor technology employed in the primary
Protection System and W-ISCO designs offers several advanced
capabilities over conventional analog designs. For example, continuous diagnostic monitoring of equipment is employed in the

systemsoftware.Thisallowsfortheearlydetectionand1ocalization
of faults, thereby minimizing the time required for failure detection
and repair. Also, multiplexing technology can be employed for
plant YO, which reduces the cost associated with cabling of
equipment.
Although not discussed specifically in this paper, Westinghouse is also supplying specialized monitoring and control instrumentation for Sizewell B. Some of these systems are rod control,
flux mapping, reactor vessel level measurement, metal impact
monitors, transit time flow meters, sensor response degradation
monitoring, and rod drop time measurement.
BENEFITS

The benefits to the Westinghouse approach are many; some of

the more significant of which are:
Whererequired,componentbuildingblocks whichmeetthe
requirements of nuclear Category 1 equipment including
seismic, separation, environment, testability and reliability
can be used. In other areas, component building blocks
which meet the requirements for Category 2 equipment can
be used.
The plant layout is simpMied through the application of
standard cubicle sizes and modular system configuration
(both in terms of the number and types of cubicles, the
locations of cubicles, the configuration of the components
(and capacities) within a cubicle) and multiplexed data
highways.
The impact of hardware failures on plant operation and
availability is minimized by providing built-in redundancy,
fault tolerance, and diagnostics.
The functional design is logically separated from the equipment configuration, allowing the two to proceed in parallel
and thereby minimizing the system overall development/
installation time.
The application of Westinghouses proven microprocessor
based technology and state-of-the-art systems design and technology will enable the timely completion of both the Plant Protection
System and W-ISCO system in 1993. The application of this
approach satisfies Nuclear Electrics design goals while ensuring
that the control andinstnunentationrelatedconstruction of Sizewell
B stays on schedule.

738

.................

.-._

--._..._._I

~._.._.._,I

...

......... -.