Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
IEC TR 61364:1999 provides guidance on the design, selection, and qualification of radiation monitoring instrumentation used in nuclear power plants for safety purposes. As a technical report (TR), it offers recommended practices rather than mandatory requirements, serving as a bridge between the general safety principles of IEC 61513 and the specific instrumentation requirements of the plant radiation monitoring system (PRMS).
The standard establishes a classification framework that relates the safety importance of each radiation monitoring function to its design and qualification requirements:
| Class | Safety Significance | Design Requirements | Qualification |
|---|---|---|---|
| Category A | Plant protection — automatic actuation of safety systems | Full redundancy (2oo3 or 2oo4), diversity, seismic qualification, EMI/RFI hardening | Type test + accelerated ageing + seismic test |
| Category B | Safety support — operator information for accident management | Single redundancy (1oo2), seismic withstand, environmental qualification | Type test + seismic test |
| Category C | Normal operation monitoring — effluent discharge, area monitoring | Industrial grade with enhanced reliability | Type test only |
This classification aligns closely with the IE (Important to Safety) classification system used in IAEA safety standards and is consistent with the safety categories of IEC 61226. The underlying philosophy is that the rigour of design, testing, and qualification should be proportional to the radiological consequences that the instrument’s failure could permit.
The report identifies six essential radiation monitoring channels that must be provided in a nuclear power plant, each with distinct measurement objectives, detector technologies, and performance criteria:
Continuous measurement of radioactivity in primary coolant, steam generator blowdown, and auxiliary system fluids. Typical detector choices include:
Monitoring of gaseous and liquid discharges to the environment, typically with the following detection limits:
| Monitor Type | Medium | Detection Limit | Response Time (t90) | Typical Detector |
|---|---|---|---|---|
| Gaseous effluent monitor | Stack/vents | 10 Bq/m³ for noble gases | < 20 s | Plastic scintillator + beta shield |
| Particulate monitor | Stack/vents | 0.1 Bq/m³ for I-131 | Continuous (filter tape) | HPGe or Nal(Tl) with filter |
| Liquid effluent monitor | Discharge line | 1 Bq/L for Cs-137 | < 60 s | Submersible Nal(Tl) |
| Coolant leak monitor | Floor drains/condensate | 0.1 Bq/L | < 5 min | Flow-through plastic scintillator |
A critical engineering consideration is the management of response time versus sensitivity. Effluent monitors must be fast enough to trigger isolation valves before a significant release occurs, but sensitive enough to avoid spurious actuation from background fluctuations. The standard recommends a t90 (time to reach 90% of final reading) of less than 20 seconds for gaseous effluent monitors and less than 60 seconds for liquid monitors, with alarm setpoints established at 3 standard deviations above background.
The report articulates several fundamental design principles that have shaped modern nuclear radiation monitoring systems:
Defence in Depth: Multiple independent means of detecting a given radioactive release, using diverse measurement principles and physical locations. For example, a steam generator tube rupture in a PWR is detected by (a) main steam line radiation monitors, (b) condenser off-gas monitors, (c) containment atmosphere monitors, and (d) liquid effluent monitors downstream of the condenser. No single instrument failure should prevent detection.
Single Failure Criterion: Any single active component failure (detector, HV supply, signal processing module, display unit) must not prevent the radiation monitoring system from performing its safety function. This is typically achieved through 2-out-of-3 (2oo3) voting logic for Category A functions and 1-out-of-2 (1oo2) for Category B functions.
Diversity: Where two redundant channels are provided, they should, where practical, use different detector technologies or measurement principles. For example, a gaseous effluent monitor might pair one Nal(Tl) channel with one ionisation chamber channel, ensuring that a common-mode failure (e.g., photomultiplier tube degradation from radiation damage) does not disable both channels simultaneously.
Fail-Safe Design: Upon loss of power, detector failure, or signal transmission failure, the system should default to the alarm or isolation state. This is particularly important for effluent monitors where failure to detect a release can have significant radiological consequences. The standard recommends that the failure mode of each channel be documented in the safety analysis report.
Section 7 of the report addresses the qualification of radiation monitoring instrumentation for its intended service life, typically 40-60 years for a nuclear power plant. The qualification process includes:
As a Technical Report, IEC TR 61364 is not a mandatory standard in itself. However, its recommendations are typically incorporated by reference in national nuclear regulatory frameworks. Many regulatory bodies (US NRC, French ASN, Chinese NNSA) expect licensees to justify departures from the practices described in the report, making it effectively binding in practice.
IEC 61513 (published in 2001 and revised in 2011) provides the overarching framework for nuclear I&C systems important to safety. IEC TR 61364, published in 1999, anticipates many of the concepts later codified in IEC 61513, particularly the classification of I&C functions by safety category. The two documents are complementary — IEC 61513 provides the general methodology, while IEC TR 61364 provides domain-specific guidance for radiation monitoring.
For post-accident conditions (high temperature, high humidity, high radiation), ionisation chambers and GM tubes with remote preamplifiers are preferred over scintillation detectors because photomultiplier tubes are susceptible to radiation damage and leakage currents at high temperatures. Many modern plants use pressurised ionisation chambers with separate signal conditioning modules located outside the containment.
The 1999 edition predates widespread digital I&C deployment in nuclear applications and does not explicitly address digital platform qualification. However, the functional requirements (response time, reliability, channel independence) are technology-neutral. For digital implementation, IEC 60880 (software for safety systems) and IEC 61513 provide the necessary supplement.