Abstract
Plant autocontrol systems are subject to failure; those occurring in autocontrolled nuclear reactors may necessitate a trip, with attendant economic penalties.
Such failures may be avoided by designing autocontrollers which comprise a number of identical subsystems.
The practical significance is discussed of some of the requirements for achieving high autocontrol reliability, and it is shown how these requirements have been translated into detailed design of hardware for a research reactor in which autocontrol of neutron flux and period is required.
The underlying theme is that autocontrol of the plant can continue in spite of subsystem failure, but that careful vigilance must be exercised over the duration of the failure.
Various devices are discussed which help to increase the efficiency of a redundant autocontrol system. Daily proof tests and passive monitoring devices can ensure that no relaxation of vigilance is allowed.
Get full access to this article
View all access options for this article.