Reviewing Real-Time Performance of Nuclear Reactor Safety Systems
Total Page:16
File Type:pdf, Size:1020Kb
NUREG/CR-6083 UCRL-ID-114565 Reviewing Real-Time Performance of Nuclear Reactor Safety Systems Prepared by G. G. Preckshot Lawrence Livermore National Laboratory Prepared for U.S. Nuclear Regulatory Commission AVAILABIUTY NOTICE Availability of Reference Materials Cited in NRC Publications Most documents cited In NRC publications will be available from one of the following sources: I, The NRC Public Document Room, 2120 L Street, NW, Lower Level. Washington, DC 20555-0001 2. The Superintendent of Documents, U.S. Government Printing Office, Mall Stop SSOP, Washington. DC 20402-9328 3. The National Technical Information Service, Springfield, VA 22161 Although the Hating that follows represents the majority of documents cited in NRC publications, it Is not intended to be exhaustive. Referenced documents available for inspection and copying for a fee from the NRC Public Document Room Include NRC correspondence and Internal NRC memoranda; NRC Office of Inspection and Enforcement bulletins, circulars, Information notices, Inspection and investigation notices: Licensee Event Reports; ven- dor reports and correspondence; Commission papers; and applicant and licensee documents and corre- spondence. The following documents In the NUREG series are available for purchase from the GPO Sales Program: formal NRC staff and contractor reports, NRC-sponsored conference proceedings, and NRC booklets and brochures. Also available are Regulatory Guides. NRC regulations In the Code of Federal Regulations, and Nuclear Regulatory Commission Issuances. Documents available from the National Technical Information Service Include NUREG series reports and technical reports prepared by other federal agencies and reports prepared by the Atomic Energy Commis- sion, forerunner agency to the Nuclear Regulatory Commission. Documents available from public and special technical libraries Include all open literature items, such as books, Journal and periodical articles, and transactions. Federal Register notices, federal and state legisla- tion, and congressional reports can usually be obtained from these libraries. Documents such as theses, dissertations, foreign reports and translations, and non-NRC conference pro- ceedings are available for purchase from the organization sponsoring the publication cited. Single copies of NRC draft reports are available free, to the extent of supply, upon written request to the Office of Information Resources Management, Distribution Section, U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001. Coples of industry codes and standards used in a substantive manner in the NRC regulatory process are maintained at the NRC Ubrary, 7920 Norfolk Avenue. Bethesda, Maryland, and are available there for refer- ence use by the public. Codes and standards are usually copyrighted and may be purchased from the originating organization or, If they are American National Standards, from the American National Standards Institute, 1430 Broadway, New York, NY 10018. DISCLAIMER NOTICE This report was prepared as an account of work sponsored by an agency of the United States Government. Neitherthe United States Government nor any agency thereof, orany of their employees, makes any warranty, expresed or implied, or assumes any legal liability of responsibility for any third party's use, or the results of such use, of any information, apparatus, product or process disclosed in this report, or represents that its use by such third party would not infringe privately owned rights. NUREG/CR-6083 UCRL-ID-114565 Reviewing Real-Time Performance of Nuclear Reactor Safety Systems Manuscript Completed: July 1993 Date Published: August 1993 Prepared by G. G. Preckshot Lawrence Livermore National Laboratory P.O. Box 808 Livermore, CA 94550 Prepared for Division of Reactor Controls and Human Factors Office of Nuclear Reactor Regulation U.S. Nuclear Regulatory Commission Washington, DC 20555-4)001 NRC FIN L1867 Abstract The purpose of this paper is to recommend regulatory guidance for reviewers examining real-time performance of computer-based safety systems used in nuclear power plants. Three areas of guidance are covered in this report. The first area covers how to determine if, when, and what prototypes should be required of developers to make a convincing demonstration that specific problems have been solved or that performance goals have been met. The second area has recommendations for timing analyses that will prove that the real-time system will meet its safety-imposed deadlines. The third area has descriptions of means for assessing expected or actual real-time performance before, during, and after development is completed. To ensure that the delivered real-time software product meets performance goals, the paper recommends certain types of code-execution and communications scheduling. Technical background is provided in the appendix on methods of timing analysis, scheduling real-time computations, prototyping, real-time software development approaches, modeling and measurement, and real-time operating systems. iii Contents 1. Introduction .............................................................................................................................. 1 1.1 Purpose .......................................................................................................................... 1 1.2 Scope ............................................................................................................................. 1 1.3 Recommendations and Guidelines Defined .................................................................. 2 1.4 Structure of This Document ......................................................................................... 2 1.5 M otivation for This Guidance ..................................................................................... 2 1.6 Special Knowledge Required ..................................................................................... 3 2. Guidance ................................................................................................................................... 4 2.1 Prototype Testing ..................................................................................................... 4 2.1.1 Human Factors ....................................................................................................... 4 2.1.2 Non-Deterministic Hardware .......................................................................... 5 2.1.3 Scale of Engineering Prototype .......................................................................... 5 2.1.4 Demonstrating Prototype Correctness ................................................................ 5 2.1.5 Engineering Prototype Performance .................................................................... 5 2.2 Timing Analyses ........................................................................................................... 6 2.2.1 Predictable Software ....................................................................................... 6 2.2.2 Timing Analysis of M odules .............................................................................. 6 2.2.3 Risky Practices ................................................................................................. 6 2.3 Assessing Real-Time Performance .............................................................................. 7 2.3.1 Scheduling and Deadlines ................................................................................ 7 2.3.2 Com m unication Scheduling .............................................................................. 7 2.3.3 Model Validation ............................................................................................. 7 2.3.4 Model and Performance Convergence ................................................................. 8 2.3.5 Scheduling in Non-Safety Systems ................................... 8 2.3.6 Essential Functions in Non-Safety Systems ....................................................... 8 Appendix A .................................................................................................................................. 9 Appendix B ................................................................................................................................. 41 V Contents-Appendix A: Real-Time Performance 1. Introduction ............................................................................................................................. 15 1.1 Goals ............................................................................................................................ 15 1.1.1 Need for Prototype Testing .............................................................................. 15 1.1.2 Timing Analyses ............................................................................................ 15 1.1.3 Assessing Real-Time Performance .................................................................... 16 1.2 Structure of This Paper ............................................................................................. 16 2. Real-Time Systems Defined ................................................................................................. 17 2.1 Com plexity ................................................................................................................... 18 2.2 State-Based Systems ............................................................................................... 18 2.3 Event-Driven Systems ..............................................................................................