Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
IEC 62117:1999 — Nuclear Reactor Instrumentation — PWR — Monitoring Adequate Cooling During Cold Shutdown
Standard Snapshot: IEC 62117 specifies instrumentation requirements for monitoring adequate core cooling in PWR nuclear power plants during cold shutdown conditions. It addresses the unique challenges of reduced coolant inventory, partial core exposure, and low-pressure operation that occur during maintenance and refueling outages.
1. Scope and Background
IEC 62117:1999 was developed by IEC subcommittee 45A (Reactor instrumentation) in response to operational experience showing that standard core cooling monitoring systems (designed for full-power operation) were inadequate during cold shutdown conditions. Several incidents occurred where core cooling was compromised during shutdown — events that existing instrumentation failed to detect or provided misleading indications.
The standard extends the scope of IEC 60911 (which covers general core cooling monitoring for light water reactors) to specifically address cold shutdown conditions, when the reactor coolant system is depressurized, the reactor vessel head may be removed, and water levels are reduced for maintenance access.
| Operating State | Temperature | Pressure | Coolant Inventory |
|---|---|---|---|
| Normal power operation | ~300 °C | ~15.5 MPa | Full (RPV full, loops full) |
| Hot shutdown | > 100 °C | Reduced | Reduced but core covered |
| Cold shutdown (maintenance) | < 100 °C | Near atmospheric | Reduced — RPV level lowered |
| Cold shutdown (refueling) | < 100 °C | Atmospheric | Reduced — cavity flooded |
2. Measurement Methods
2.1 Reactor Pressure Vessel (RPV) Water Level Measurement
The standard specifies two primary methods for measuring water level within the RPV during cold shutdown:
- Differential pressure (DP) measurement: Uses pressure taps at different elevations connected to DP transmitters. Requires reference columns to establish a stable reference pressure. The standard provides detailed guidance on tap locations, reference column design, and the management of temperature effects on the fluid in instrument lines.
- Heated sensor measurement: Uses electrically heated thermocouples arranged vertically within the RPV. The heat transfer coefficient differs between water-immersed and steam-exposed sections, allowing the water level to be inferred from the temperature profile.
Engineering Insight: During cold shutdown with reduced inventory, the thermal-hydraulic conditions are fundamentally different from normal operation. Two-phase flow (steam-water mixtures), reverse flow in loops, and condensation effects can create significant errors in DP-based level measurements. The standard’s detailed requirements for instrument line design (slope, temperature maintenance, venting) directly address these failure modes.
2.2 RPV Outlet Pipe Water Level Monitoring
In addition to direct RPV level measurement, the standard requires monitoring of water level in the RPV outlet pipes (hot legs). During reduced inventory conditions, the water level in the hot legs provides an early indication of core uncovery risk. Ultrasonic liquid level monitoring is specified as the preferred method for this application.
2.3 Core Exit Temperature Sensing
Core exit thermocouples (CETs) provide direct measurement of coolant temperature at the top of the fuel assemblies. During cold shutdown, CETs serve as the primary indicator of core cooling adequacy — a rapid temperature rise indicates loss of cooling. The standard requires sufficient CET coverage to detect local hot channels.
| Measurement Method | Advantages | Limitations |
|---|---|---|
| Differential pressure | Direct level measurement, well understood | Errors from two-phase flow, reference column issues |
| Heated sensor | Works in two-phase conditions | Complex installation, local measurement only |
| Ultrasonic level | Non-intrusive, good for pipe monitoring | Requires acoustic coupling, affected by bubbles |
| Core exit thermocouples | Direct temperature indication, fast response | Local measurement, requires sufficient coverage |
3. Instrumentation Requirements
3.1 Safety Classification and Reliability
All instrumentation used for core cooling monitoring during cold shutdown must be classified according to the plant’s safety classification system. The standard requires redundancy (typically 2-out-of-3 or 1-out-of-2 logic for trip functions), diversity of measurement principles (at least two different methods for level measurement), and single failure criterion compliance.
Accuracy requirements are specified for each measurement method, with response time requirements ensuring that operators receive timely information during abnormal events.
Important Design Requirement: The standard mandates that the instrumentation system must provide reliable information even under abnormal and accident conditions, including loss of off-site power, small-break LOCA during shutdown, and inadvertent draindown. This requires careful consideration of power supply diversity, harsh environment qualification, and human-machine interface design.
2.4 Hydraulic Instrument Line Design
Detailed requirements for hydraulic instrument lines (connecting the RPV to DP transmitters) include: minimum slope to prevent gas accumulation, heat tracing to maintain uniform temperature, provision for venting and flushing, adequate mechanical support against vibration, and material compatibility with reactor coolant chemistry.
The standard emphasizes that temperature stratification and uneven heating of instrument lines can cause significant measurement errors during cold shutdown, when natural circulation rather than forced circulation may be the primary coolant flow mechanism.
5. Engineering Design Insights
- Complementary measurements: No single measurement method is reliable under all cold shutdown conditions. The standard’s requirement for diverse measurement principles (DP + heated sensor + temperature) reflects this reality. Modern implementations often add ultrasonic level measurement as a fourth diverse method.
- Human-machine interface: Clause 6.4.4 addresses HMI considerations, recognizing that operators faced with conflicting indications from different measurement systems need clear information to diagnose the plant state correctly.
- Qualification: Clause 11 requires that instrumentation be qualified for the environmental conditions expected during cold shutdown accidents, including post-LOCA chemical spray environments.
Pro Tip: When designing or upgrading PWR cold shutdown instrumentation, pay particular attention to the hydraulic instrument line requirements (Clause 6.2.4 and 6.2.5). Field experience shows that instrument line issues — particularly gas accumulation, temperature stratification, and plugging — are the most common causes of unreliable level indication during shutdown.
Frequently Asked Questions
Q1: Why is cold shutdown monitoring different from normal operation monitoring?
During cold shutdown, the reactor is depressurized, coolant inventory is reduced, and the flow regime may change from forced to natural circulation. Standard instrumentation designed for full-power conditions may give misleading readings due to two-phase flow effects, reduced differential pressures, and different temperature profiles.
Q2: What incidents prompted the development of this standard?
Several PWR plants experienced events during cold shutdown where core cooling was lost or degraded. Notable examples include the Diablo Canyon (US) reactor vessel level transient and multiple European PWR events where water level dropped below the reactor vessel flange. These events revealed that existing instrumentation was inadequate for shutdown conditions.
Q3: What is the relationship between IEC 62117 and IEC 60911?
IEC 60911 covers general core cooling monitoring for light water reactors during all operational states. IEC 62117 extends and particularizes these requirements for cold shutdown conditions, where the challenges are distinct from full-power operation.
Q4: How does the standard address loss of coolant accidents during shutdown?
The standard requires that instrumentation function correctly under abnormal and accident conditions (Clause 4.4). For cold shutdown LOCA scenarios, specific consideration is given to the ability of level measurement systems to operate with steam-water mixtures and rapid depressurization.
