HUCLEAn SCIENCE AhiD EhfGfiHEER2NG: 110, 425—444 ( 1992 )

Considerotions in the Design and Implementation of Control Lows for the Digital Operation

of Research Reactors

John A. Barnard and David D. fanning

M achusetts I ns titute o,f Technolo gy , Wualear Reactor Laborato rr

Received October 8, 1990 Accepted Auguci 29, J99I

kb ctrn ei Factors refevsiif to the design and implementation of digital controllers for research reac- tors are disinwed with emp hasis on the rationale for incorporating a system model in roe control J‹tw. For this purpo se , proportional-integral-derivative ord period-generated control are compared. The let- ter is a model-b sfzf technique that achieves excellent trajectory tracki n g of nonlinear purer It does this by combining feedback: and feed l o r ' rd control ection in a manner that cancelc the effec:ts of the system's dynamics on the controller's performance. Model - t uis ed control is also mi p erior in thot iI per- mits replication of some of the functions thai hum a z r s perform whey exercising control. In particu- lar, models tan be used to predict expected plant response ond thereby facilitate diagnosis. The importance o/ validated signots, supervisory algorithms, property designed man-machine inlerfacec, and automated diagnostics are d i sci t s re d in relation to control low implementation. In addition, a sum- mary is provided of reactor dynamics es refered to control, and argumentc are presented in support of using the rate of chonge of reactivity as the actuator signal. Experimental results obtained from Mials of digital confrollers ozi both the 5-MW{thermal ) M ‹z sr chusetts Instinite of Technology Research Re- actor and the Annular More Research Reactor ther is operated by Sgndia N'ationot Laboratoriec are included.

1. INTRODUCTION

Research reactors are multipurpose facilities that provide sources of neutron and, in some cases, gamma radiation for use in the basic and applied sciences, ed- ucation, materials research, medicine, earth and plan- etary studies, neutron activation analysis, engineering, and many other disciplines. For example, major re- search projects currently in progress at the 5-MW ( ther- mal ) Massachusetts Institute of Technology Research Reactor ( MITR-II ) include the evaluation of the radio- isotope " 5 Dy for the nonsurgical treatment of rheu- matoid arthritis, the study of coolant chemistries with the objective of reducing radiation exposure from ac- tivated corrosion products, the use of neutron activa- tion analysis to identify sources of airborne pollutants ( acid deposition ) , the poaible identification of earth- quake-prone geologic formations by using track-etch

techniques to assess microcracks, the development of neutron capture therapies for the treatment of deep- seated brain tumors such as glioblastoma multiforme, and the radiation-hardness testing of electronic devices for use in space travel.'* 3 This wide range of activities necessitates frequent adjustments of a research reac- tor's power. Given this need for flexible operation and the present availability of sophisticated yet low-cost, real-time computing equipment, the operators of re- search reactors are increasingly considerin g conversion of their facilities to digital control.

Digital systems are very different from the anal og controllers with which most research reactors were equipped when they were built some 15 to 35 yr ago.. To fully appreciate this difference, it is necessary to have some understanding of how humans achieve con- trol. Four tasks are involved. These are planning, pre- diction, implementation, and assessment. •* Planning

BERNARD and LANDING

entails first noting the operational objectives, then de- termining the current plant state, and finally identify- ing the most efficient means for achieving the objectives given the confines of approved procedures. A specific sequence of control actions is then chosen based on the operator's experience and understanding of the plant. For example, a skilled operator would know whether or not withdrawal of a control device by a certain distance would result in an acceptable rate of rise of power. Adjustments to the chosen control signal are made only if it appears that the response of the plant. will not be as projected. Thus, an operator's ability to anticipate or predict plant behavior is of the utmost importance. Implementation of the selected control ac- tion may require the simultaneous application of sig- nals to several plant subsystems. This process is already often entirely automated via electromechanicai means. The last of the four taska is assessment, and it is the most com plex. Operator must ascertain that the re- quired control action is being implemented. If all pro- ceeds as anticipated, there is no difficulty. But if that is not the case, the operator must determine why. 1s his or/her understanding of the plant's behavior deficient? Or has some component failed, and, if so, which one? Assessment is generally only done well by experienced personnel.

Analog devices are basically an extension of a hu- man‘s capability to implement a control action. Such equipment may provide either steady-state or transient control. But, in each case, a licensed reactor operator is performing the planning, prediction, and assessment functions. For example, an operator might use an an- alog controller to conduct a transient by programming a decade box to move the reactor’s control devices. The responsibility of decision remains with the operator. The decade box is merely a tool, Digital technology differs in that the software can be designed to provide the equivalent of most of the control fimctions tiiat are normally performed by a human. For example, numer- ical models could be used for prediction and techniques such as signal validati on for assessment. The decision to utilize digital technology for process control there- fore brings with it a number of questions. Is it possi- ble to design a digital controller that will replicate each of the functions now performed by a human? If not, which iasks should be assigned to the machine, arid how can one be certain that licensed operators will un- derstand and recognize the machine's limitations? These and related questions are now being debated within the nuclear, chemical, and aerospace commu- nities. This paper addresses one part of this debate by enumerating issues concerning the design and imple- mentation of closed-loop laws for the trajectory con- trol of power in research reactors.

The specific objectives of this paper are to ( a ) re-

change of reactivity, ( c ) describe and assess both proportional-integral-derivative ( PID ) and period- generated co n trol laws, ( d} delineate the benefits that can be achieved by i ncorporating a system model in a control law, and ( e ) enumerate factors relevant to the implementation of a closed-loop control law including signal validation, supervisory control, automated diag- nosis, and the man-machine interface.

II. REACTOR DYNAMICS

Figure I illustrates the aspects of the fission pro- cess that bear on reactor control. Of significance is that there are three parallel but separate mechanisms for the production of neutrons. Prompt neutrons appear di- rectly following the fission event and have lifetimes that are quite shon, typically 100 ps. Delayed neutrons are produced following the decay by beta-particle emis- sion of fission products that are referred to as “pre- cursors.” The delay in the appearance of a delayed neutron relative to the fission event is the result of the precursor half-life. There are six recognized groups of p_recursors with half-lives ranging from 0.23 to 55 s. The average value is 12.2 s. The third mechanism for neutron production is the interaction of fission prod- uct gamma rays with certain moderating materials, most notably heavy water and beryllium. Called photo- neutrons, their appearance is delayed relative to the fis- sion event because of the time required for the fission products to undergo radioactive decay and emit the needed gamma rays. In the ensuing discussion, the term “delayed” includes both those from precursors and photoneutrons.

The process shown in Fig. 1 is described in quan-

titative terms by the space-independent kinetics equa- tions. Those equations constitute a suitable model for research reactors because the small, compact cores that power those reactors do not exhibit spatial depen- dencies under conditions of normal operation. The spaoe-independent kinetics equations can be combined through differentiation and substitution to obtain the dynamic period equation, which gives the instantaneous reactor period as a function of the rate of change of re- activity, the reactivity, and the rate of redistribution of the delayed neutron precursors.‘ This relation is par- ticularly useful in the design of tracking controllers for nuclear reactors because it explicitly represents each of the parameters that can affect the rate at which a re- actor's neutronic power will increase or decrease.

The instantaneous reactor period r ( r ) is defined as

i ( f ) = hut ( / ) , where

T t ) ui ( t ) T l t ) ( 1 )

view reactor dynamics with emphasis on factors that and F ( f ) denotes the amplitude function, which is a affect system control,Jb \ summarize the rationale for weighted integral of all neutrons present in the reâctor. formulating reactor control laws in terms of the rate of In the discussions on controller design that fol ) ow, ihe

NUCLEAR SCIENCE AND ENGINEERIN G VOL. l IO APR. 1992

COislTROL FOR RESEARCH REACTORS

427

DELAYED NEUTRONS

DAUGHTER

fitLI L DES

NEUTRONSLOST BY ABSORPTION AND LEAKAGE

BETA DECAY

NEUTRONS LOST

TO LEAKAGE

THERMAL NEUTRON

PHOTONEUTRONS

NEUTRONS THERMALIZED BY COLLISIONS WITH MODERATOR

DELAYED RAOIATION

PROMPT NEUTRONS

TWO FISSION PRODUCTS

PROMPT RAOlATtON

UNSTABLE COMPOUND NUCLEUS

-2g0-MeV ENERGY

Fig. 1. Fission process showing prompt, delayed, and photoneutron production.

amplitude function is approximated as the reactor neu-

tronic power a ( I ) . Thus,

The dynamic period equation may be written in either a standard or alternate form. The two are mathemat- ically equivalent, but the alternate is the easier to pro- gram. It is as follows:

( 3 )

where the alternate, effective, multigroup decay pa-

rameter is donned as

@ ( f ) - X 2 C; ( I j/ L; C, ( t ) for i = I, N , ( 4 )

and where

= effective delayed neutron fraction p ( r ) = net reactivity

f’ = prompt neutron lifetime

iii ( r ) = rate of change of the inverse of the dy- namic reactor period

ui ( r ) = inverse of the dynamic reactor period

( / ) = rate of change of the net reactivity

i = effective fractional yield of the i'th group of delayed neutrons

X; = decay constant for the i'th precursor group

C, ( t ) = concentration of the i'th precursor group normalized to the initial power

N = numb#r of groups of delayed neutrons, including photoneutrons.

Adjustments of power in research reactors are achieved by withdrawing a control device so as to in- sert positive reactivity and thereby place the reactor on a period, with period defined as the power level divided by the rate of change of power. Having established a period, the power is allowed to rise. Once the power level approaches the desired value, the control device is gradually returned to its original position to reduce the reactivity to zero and to level the power without ov#rshoot. The crucial aspect of the control process is that the lengthening of the reactor period must be ini- tiated before attaining the specified power level. Such anticipatory actions are necessary because the rate at which reactivity can be removed is finite, particularly

I NUCLEAR SCIENCE AND EN GI NEER ING VOL. 1 IO APR. 1992

42s BBRNARD and LASHING

when rods are used at normal speeds. Hence, if changes in the reactor power are to be achieved both efficiently and without c hal l engetothesafe t y system, some method must be available by which the proper time for initia- tion of the reactivity removal process can be reliably predicted. Licensed operators are sufficiently experi- enced so that they can make the appropriate judgments. The implementation pf digital technology requires that the equivalent capability be developed in software. Doing so is not easy because of the nonlinear, time- delayed nature of reactor dynamics. In particular, al- lowaitce must be made for the following:

1. The instantaneous reactor period is a function of the rate of changg of reactivity, the reactivity, and the rate of redistribution of the delayed neutron pre- cursors. This means that the period observed at any given moment in a reactor will depend on both the dis- tance that a control device has been moved beyond the critical position and the rate at which that dcviv is be- ing moved.

2. The dynamic response of a reactor is determined by that of its prompt and delayed neuron populations. Prompt neutrons appear simultaneously with the fis- sion event and are therefore a function of the current power level. Delayed neutrons appear some time after the fission event and are therefore a function of the power history. This dependence on the power history means that delayed neutrons will not be in equilibrium

with the observed power during a transient. Hence, upon attaining a desired power level, the delayed neu- trons will continue to rise, and an ovefshoot will occur imless the controller is capable of reducing the prompt neutron population at a rate sufficient to offsei the still rising delayed neutron population.

3. The relation between power and reactivity is nonlinear. Also, nonlinear reactivity feedback effects reautt from the changes in the fuel and moderator tem- perature that occur during power adjustments.

4. The differentia ) reactivity worth of the control devices is a strong function of the axial flux profile. Hence, the rate at which a controller can insert and re- move reactivity varies nonlinearly with the position of the device. In general, this rate will be a maximum at the core midplane and be quite low in the upper por- tion of the core.

Figures 2 and 3 illustrate the difficulties that can arise if the foregoing factors are ignored. Shown are results from demonstrations conducted on the MITR- 11 in 1983 and 1984. The control law consisted of a di- rective to withdraw a control rod at constant speed until a desired power level was attained. In addition, 8 JTtinimum allowed period was specified. The period limit was selected so that the controller functioned quite well under normal operating conditions. In par- ticular, it would raise the reactor's neutronic power to

4.0

POWER

10

40

m 2.5

30

- 2.0

20

10

0 20 40 60 80 100

200

300

0

EXPERIMENTAL DATA

MITR-II MARCH 12, 1984

REACTIVITY

REACTIVITY ( mbeta )

TIME ts )

Fig. 2. Failure of controller to recognize need to limit rtact›vity insertion results in power overshoot.

NUCLEAR SCIENCE AND ENGINEERING MOL. 110 APR. 1992

CONTROL FOR RESEARCH REA CTORS

UPPER TOLERANCE

429

DESIRED

" POWER LEVEL

4.0 -

BOUND

18

3.S -

3.0 -

m 2.5-

RODAT OUT-UMlT

ROD HEIGHT

- 16

ROD HEIGHT ( in.}

- 14

t2

POWER

1.5

- 8

EXPERIMENTAL DATA MITR-II

APRIL 4, 1983

0 50 100 150 200

250 3o0 350 400 450

TtMEp}

Fig. 3. Failure of controller to restrict rod withdrawal in region of low differential worth results in power overshoot.

the desired value and hold it at that value. However, this controller did not track a specified power profile. Rather, the resulting trajectory was a function of the initial position and the predetermined speed of the con- trol device. Tests also showed that this controller was incapable of performing properly under off-normal conditions. Figure 2 shows a power increase in which a period shorter than the one for which the controller had been designed was allowed. The controller inserted the necessary reactivity but, upon attaining the speci- fied power level, could not remove reactivity with sufficient speed to preclude an overshoot. Delayed neu- trons were rising at a rate faster than the prompt ones could be decreased. This experiment demonstrated the

inflexibility that results from the failure to incorporate

something like this did occur at Chernobyl. Model- based control can preclude such difficulties.^

III. SELECTION OF THE RATE OF CHANGE OF REACTIVITY AS THE ACTUATOR SIGNAL

The control laws described in the following mate- rial are formulated in terms of the rate of change of re- activity. This means that the signal sent to the actuator is the speed at which the control device should be moved. This choice contrasts with the traditional ap- proach to the design of controllers for nuclear reactors, which is to specify a control action in terms of the magnitude of the reactivity. Use of this latter practice

means that the signal sent to the actuator is the desired

knowledge of the system d n«m›c•. In this case, the

position of the control device. There are a number of

controller was “tuned” to a ip‹cinc set of conditions and gave unsatisfactory results when those conditions were altered. Figure 3 shows a power increase for which the normal period was required, but the control device

reasons for selecting the rate of change of reactivity as the actuator signal. First, specification of the appro- priate rate of reactivity change means that both the

was initially positioned where its differential reactivity

worth was low. The controller fully withdrew the rod in order to insert enough reactivity and then could not halt the transient because the rod was so far withdrawn as to have no strength. An overshoot resulted. Such a scenario could occur during a xenon transient, and

‘The foregoing experiments were carefully controlled tests. Limits on power and period for the MITR-II were never exce#ded. Only those established for the individual tests were violated, and these were set below those associ- ated with the reactor.

NUCLEAR SCIENCE Af4D ENGINEERING VOL. 110 APR. 1992

430 BERNARD and LANNING

directiOll dlld speed of the control device are uniquely determined. In contrast, if only the reactivity were specified, then the desired final Fosition of the control device would be known, but the speed at which the de- vice should be moved to attain that position would be undetermined. Second, as is evident from the dynamic period equation, the response of a reactor depends on both the magnitude and the rate of change of the re- activity. Failure to allow for the latter means that sud- den variations will occur in the rate at which power is being raised whenever rod motion is started or stopped. Third, a major requirement in the design of controllers for safety-constrained processes such as nuclear reac- tors is that it be possible to alter the control signal on demand and thereby have an immediate effect on the process in question. Reactivity does not fulfill this re- quirement because it is a function of the distance that

cise review of the MIT program is given in Ref. 7, and detailed results are given in Refs. 8 through 11. The di8cussion here focuses on the design of PID and period-generated laws for the trajectory control of re- search reactor power. The emphasis is on the treatment of nonlinear behavior. These two laws were chosen for comparison because they represent opposing philoso- phies concerning the design of closed-loop digital con- trollers. At issue is whether or not a system model should be incorporated in the control law.

IN.A. Pr oportional-Integral-Derivative 'ontrol

The PID mode of control is the most commonly used method for the automation of process systems. It is also the simplest because it considers the system dy-. Ild2RiM tO be a box." No use is made of numer-

a control rod has been moved beyond the critical po-

ical models.

step in designing a PID controller

sition, arid adjustments in a device's position can only is to define an error signal as the difference between

be made over a interval. In contrast, the rate of the demanded and measured outputs of the process.

change of reactivity can be immediately altered by merely initiating movement of a control device. More- over, a wide range of rates of change is achievable through the use of variable-speed stepper motors. Fourth, the rate of change of reactivity corresponds to the effect of a changing prompt neutron population while the reactivity itself reflects other effects includ- ing changing delayed neutron precursor populations and changing distributions of delayed neutron precur- sors within the defined groups. Precursor populations are a function of the power history and therefore can- not be altered on demand. In contrast, the prompt neutron population is essentially a function of only the current power level and is therefore immediately con- trollable. Heñce, if an immediate change is required in a reactor period, an adjustment should be made in the rate of change of reactivity rather- than in the reactiv- ity itself.

In summary, the reason for using the rate of change of reactivity as the signal to the actuator is that it is itself directly controllable and, upon being changed, it will have an immediate effect on the course of the transient. Additional information has been given previously.’‘'°

IV. CONTROL LAW DESIGN

The Massachusetts Institute of Technology ( MIT ) has btcn engaged since the late 1970s in a program to develop and demonstrate advanced concepts for the control of research, spaoe, and power reactors. A dis- tinguishing feature of this program has been its com- mitment to experiment. New control concepts are tested first by simulation and then under conditions of

Multiplication of that efror by a constant ( the system gain ) results in a proportional controller. Thus,

( 5 )

and

( 6 )

where

n q ( I 1 —— demanded ( or reference ) reactor power

level

n ( i ) = measured reactor power level e ( i ) = error signal

u ( i ) = signal to the actuator

kp proportional gain constant.

Figure 4 depicts the process. Unless the gain can be made quite large ( in theory, it would have to be infi- nite ) , proportional controllers will exhibit offsets in that the observed power will not be fully driven to the reference value. This situation can be rectified through the addition of integral action. By doing so, any dif- ference between the demanded and measured outputs will eventually accumulate to the point where it forces the system response to the specified value. Unfortu- nately, integral action can induce oscillations as the system converges about the setpoint. These can be mit- igated by the addition of an anticipatory or derivative term that is a function of the rate of change of the error. The resulting controller is’ of the form

closed-loop didtal control on either the MITR-II or the where k, and k are the gain constants for the integral

Annular Core Research Reactor ( ACRR ) that is oper- and derivative terms.

ated by Sandia National Laboratories ( SNL ) . A con- Proportional-illtegral-derivative control is well

NUCLEA R SCIENCE AND ENGINEERING VOL. 110 APR. 1992

REFERENCE

OUTPUT ( ñ )

CONTRO L FOR RESEARCH REACTORS

_

OUTPUT {n )

t31

ERROR SIGNAL

PROPORTIONAL CONTROLLER

GAIN

CONTROL

SIGNAL

lu )

ACTUATO R PROCESS

MEASURED

INSTRUMENTS

OUTPUT

Fig. 4., Proportional control.

n ( tl

/tEACTOn

suited to maintaining a system parameter at some steady-state value and, as a result, is the control method employed by most analog devices. It can be modified to track a dimanded trajectory by specifying both a de- manded power and a demanded rate of rise of Power. In this case, it becomes

where p, ( i ) is the rate of change of reactivity that will be requéed from the actuator.' Figure 5 illustrates the approach. Control laws based on Eq. ( 8 ) have been ex- tensively evaluated for robot movement, and while the approach is widely used, certain limitations have been noted.' 2 '" These include the following:

1. The technique will cause the system to move to the desired end point, but it will not result in highly ac- curate tracking of a specified trajectory. Accomplish- ment of the latter requires incorporation of a system model in the control law.

2. There are physical limits to the speed at which an actuator can respond. This means that the gains cannot be made arbitrarily large as might be desired to rapidly overcome perturbations.

3. Even if achievable, the use of high gains to off- set poor performance may be unsafe because high gains will amplify modeling errors, inaccuracies in pa- rameter estimates, and noise. Doing so may also lead to instability.

Both PID and proportional-derivative control h,ave beefi evaluated experimeritaEy pn the MITR-II. To the foregoing list, one should add that the values of the controller gains cannot be treated as constants for nonlinear systems. A set of gains chosen to properly execute one type of transient can result in poor perfor-

‘The minus sign in Eg. ( 8 ) is appropriate because the purpose in adding the velocity term is to dampen the speed of response, thereby reducing the likelih oo d of an overshoot.

Fig. 5. Proportional-derivative control for trajectory tracking.

mance for another. Other drawbacks to this mode of control are that the selection of the gains is empirical ( and hence time-consuming ) and that there is no the- oretical basis for determining system stability.

Figure 6 shows the results of a test of proportional- derivative control on the MITR-II. The controller was tuned to raise the reactor's power from 1.0 to 1.5 MW, and except for a small overshoot, it did this properly. However, its performance was less satisfactory when used for other types of maneuvers. This raises two con- cerns. First, proportional-derivative control does per- form quite well when used to conduct the specific t r ansients for which its gains have been calibrated. Might this observation not cause a reactor operator, who has little knowledge of control theory, to place undue reliance on the controller and attempt its use for other types of transients? Second, the performance of proportional-derivative controllers can be enhanced by increasing the speed of the control device that serves as the actuator. Doing so enables the controller to offset both disturbances and nonlinear effects more quickly. Yet, is this practice desirable? Repeated movement of a control device at high speed may induce wear, and if failure were to occur during transient conditions, the consequences could have safety ramifications.

«u cLE R SCIENCE A ND ENGINEERING VOL. 110 APR. 1992

DESIRED POWER LEVEL

EXPERIMENTAL DATA

SEP TEfdl8E h 7, 1990

MITR- II

RSACTIVITY

1600

1500

1200

1100

BERNARD and LANNING

200

REACTIVITY {mb e t a )

150

TOO

50

10 20 30 40

TIME {s )

50 60 70

Fig. 6. Demonstration of proportional-der iv ative control.

IV. B. Period - C i ene r ated Control

Period-generated control is a model-based tech- nique that was developed at'the MIT Nuclear Reactor Laboratory in conjunction with SNL for the purpose of adjusting nuclear reactor power in a very rapid yet safe manner .’" 0 " 4 One possible application is the con- trol of the spacecraft reactors that will be used to pro-

desired trajectory. Hence, the first step in the imple- mentation of period-generated control is to define an error signal in terms of the demanded and observed power levels. The conventional approach would be to take the difference between those two quantities. How- ever, superior performance is achieved if the error sig- nal is expressed as

pel manned expeditions to Mars. The technique has since been extended to nonnuclear systems and is now being studied as a genera ) -purpose method for the tra- jectory control of systems for which a demanded rate

where

e ( i ) = in gi + iai za ii ) ,

( 10 )

is to be observed.' 5 The most well-known examples of period-generated control are the MIT-SNL Period- Generated Minimum Time Control Laws, which have been extensively demonstrated on both the MITR-II and the ACRR. Derivations of these laws were previ- ously given.” The intent here is to demonstrate the utility of the model-based, period-generated approach for the trajectory tracking of nonlinear systems.

It is desired that the reactor neutronic power con- form to a certain trajectory, Accordingly, some mea- sure of the rate of rise of the power is needed. A logical choice is the inverse of the reactor period, which is de- fined as

( 9 )

The objective of the control method is to determine a demanded inverse period, compute the rate of change

np ( / ) = demanded trajectory n ( i ) = observed trajectory

j - positive integer.

A Taylor series expansion of this logarithmic expres- sion reveals the rationale for selecting this particular arithmetic form for the error signal:

e ( I ) 1n[ny ( I + yA/ ) ] In Qty ( ) ]

+ In ( np ( f ) } —In[n ( i ) ]

d

di

of reactivity ( the actuator signal ) needed to generate that inverse period, and then apply the calculated rate of reactivity change to the actual system. Dping so should cause the reactor's power to rise or fall on the

d In I ^d ! Ill + In ( n u t ) /o ( i ) )

dt

NUCLEAR SCIENCE AND ENG I NEER l NG VOL. 110 APR. 1992

CONTROL FOR RBSEARCH REACTORS 433

where ‹r, ( f ) is the inverse period that corresponds to the power trajectory n d I ! - us, the error signal used in period-generated control is the sum of a feedforward action from the inverre period associated with the demanded trajectory, and a proportional action from the quotient of the demanded and observed system outputs. The former defines the system path. The lat- ter provides corrective action against deviations. it has been shown that the value of y should be at least 2 to ensure stability against oscillations. *

The second step in the application of period- generated control is to define a demanded period in terms of the error signal, Thus,

( 12 )

where F, and Pg are the integral and derivative times. Equation ( 12 ) is a conventional PID feedback expres- sion. The quantity oq ( I I is the inverse period that will either maintain the system on the demanded traJectory or, should a deviation exist, restore it to that trajec- tory. That is, «p ( r ) equals «, ( I ) when the observed power i5 o n the demanded trajectory. Otherwise, the two differ with og ( I ) driving the system to the de- manded trajectory.

The third step in the , application of period- generated control to a reactor is to obtain an appropri- ate model and thereby relate the demanded period to the actuator signa ) , which is the required rate of change of reactivity. The needed expression is readily obtained by rearranging terms in the dynamic period equation. Doing so yields the following:

where the symbol p denotes the rate of change of re- activity associated witb temperature-iaa»ccd reedback from the reactor's fuel and coolant. Equation ( l3 ) is a

system model, and the parameters contained therein

where

Ac = time step

6 = number of time steps over wbich it is desired that the system attaip the specified trajectory.

The quantity k should be chosen to be small because the objective of period-generated control is to cause the controlled parameter to begin rising ( or falling ) quicRiy at the demanded rate. For this to occur, the accelera- tion term must rapidly die out. However, as a practi- cal matter, there is a lower limit to the value of k. Should it be made too small, ‹itf ) will be quite large, and an excessive rate of change of reactivity will be needed for transient initiation.

The demanded power trajectory can now be real- ized by applying the quantity p, to the actual system. Thus, the observed inverse period is as follows:

tJ ) = [d p ( ! ) ] '

- t•. ( ) + k›« ) + ›. ( t + Zé: ›,—›:‹»i

- i-‹a ( ) + i•‹' ) i2+ s ( '›•‹'H ) . tu›

The sequence of calculations is as follows. First, the demanded trajectory and the time allowed for its at- tainment are specified. This allows determination of n z ( t ) and k. Next, measurement of the actual power level allows calculation of the error si gnal and estima- tion of the demanded inverse period from Eqs. ( 10 ) and ( 12 ) . The reactivity and the effective multigroup decay parameter are then determined via either mea- surement or calculation or a combination thereof. Sub- stitution of ‹rp ( / ) into Eg. ( 13 ) and then substituting Sq. ( 14 j for ñ ( / ) gives the rate at which the reactivity should be changed during the next time step in order to cause the reactor's power to move to the desired tra- jectory. Once on that trajectory, the acceleration term will in theory become zero. As a practical matter, it will remain finite, acting as a source of feedback to correct for minor deviations in the tracking of the spec- ified path. Repetition of the sequence of calculations fields the rate of change of reactivity needed to move the system output along the desired trajectory. Once n ( r} attains a new desired steady-state value, the quan-

are estimates. This is indicated symbolically through

tity is set to zero, and the rate of change of the

use of the superscript caret.

The next issue is the treatment of the quantity u› ( I}, which represents the system acceleration. For most transients, it is acceptable to make the prompt- jump approximation and set the quantity 1‘, which is the prompt neutron lifetime, to zero. Under such con- ditions, acceleration effects can be neglected. However, if trajectories with periods of a few seconds or l ess are to be tracked, then allowance must be made for system acceleration. This is achieved using the foilowiiig relation:

reactivity needed to halt the transient is generated. The acceleration term will be no n z ero at this time.

Shown in Fig. 7 are the power and reactivity pro- files obtained during a trial of period-generated con- trol on the MITR-II. Also, the strip-chart recording of this traiuient is shown as an inset. The reactors power was increased from I to 2 MW under conditions of closed-loop digital control using a variable-speed step- ped motor to adjust the net reactivity. The specified pe- riod was 100 s. The transient was completed at the expected time of 69 s, and the shape of the power pro- file was exponential. Also of interest is the steep slope

ñ ( / ) = [uy{t ) - u ( t ) ] /yAf ,

( 14 )

of the reactivity profile during both transient initiation

NUCLEAR SCIENCE AND ENGINEERING VOL. I l0

APR. 1992

434

EXPERIMENTAL DATA MfTR-II DECEMBER 30, 1987

-

-

POWER

0

10

20

30

POWER ( MW )

50 70

90

100

2.0

BERt'4ARD and LAHNIlsfCi

REACTIVITY ( mbeta )

1.6

1.4

1.2

1.0

TIME ( s )

Fig. 7. Gosed-loop power increase from 1 to 2 MW usirtg MIT-SNL Period-Generated Minimum Time Control Law on a 100-s period.

and termination. This occurred because the reactor's period was in effect being stepped from infinity ( aeady state ) to 100 s and, upon transient completion, from 100 s back to infinity. Adjustments of the prompt neutron population, which are indicated by the rate of change of reactivity, were being used to drive the transient.

Figure 8 shows the power and reactivity profiles

obtained during a trial of period-generated control on the ACRR. The power was increased by three orders of magnitude, from 0.49 to 490 kW, on a demanded period of 3.0 s with the reactor initially subcritical by 800 mbeta ( 80 e ) .* Again, note the rapid rates of change of reactivity needed for both transient initiation and termination. The tracking performance achieved in both of the foregoing demonstrations was excellent. Of significance is that both the MITR-II and the ACRR tests were performed with essentially the same soft- ware. Yet, the two reactors are very different. The MITR-II uses fully enriched 2 3 U fuel and forocd cir- culation. The ACRR uses 209c enriched BeO-U fuel and operates under adiabatic conditions. Use of the same software to conduct power transients on these

*Reactivity is a fraction and therefore is dimensionless. Nevertheless, several systems of “units” are in use. The one used here is io define a reactivity equal to a reactor's de- layed neutron fraction as I Beta. This unit is further divided into mbeta with 1000 mbeta equaling 1 Beta. Another widely used system o/ reactivity uxits is dollars and’ cents. I Beta equals I $ or 100 t. Hence, 1 0 equals 10 mbeta.

two very different reactors derñonstrates the generic nature of period-generated conWol.

V. RATIONALE FOR MODEL-BASED CONTROL LAWS

What accounts for the superior tracking capability of period-generated control as compared with the di- rect use of proportional-derivative action? The most significant difference between the two methods is that the period-generated approach incorporates a model of the system dynamics. While this does make the tech- nique's implementation more complex, it also results in substantial benefits. In particular, major advantages to period-generated control are that it is applicable to nonlinear systems and that, in the case of rate- constrained systems, the resulting control action ap- proaches time-optimal behavior. The basis of these attributes is discussed here.

V. A, Nonlinear Control

The period-generated approach achieves proper control of nonlinear systems through the use of a model of the process dynamics. Specifically, a feed- back signal ( the demanded inverse period ) is computed from a comparison of the demanded and observed val- ues of the system output. This signal is then input to an inverse dynamics model of the process that is being controlled. The solution is a form of feedforward con- trol in the sense that the output of the inverse dynam- ics calculation is the actuator signal, which, upon

NUCLEAR SCIENCE AND ENGINEERING YOL. 110 APR. 1992

CONTROL FOR RESHARCH REACTORS

POWER LEVELED

AT 490 kW

POWER RtS NG ON SPECIFIED PERIOD OF 3.0 s

TIME ( s )

Fig. 8. Automated power increase of three orders of magnitude using the MIT-SNL Period-Generated Minimum Time Control Law with the reactor initially subcritical.

application to the actual process, will cause the system output to track the demanded trajectory. The merifs of the approach are best illustrated by example.

Denote the quantities ( d p ) and [@p -F Z i[h, h{ ( I ) ) J by the symbols fi and r, respectively. A/tine- tional description of period-generated control can be

Wfltt0n dS -

it is used to compute tbe actuator sigoal /roro the de- m an ded invcr se per iod. Equation ( J9} denotes tic ac- tual process. Substitution off ( t ) form ( i ) into st. ( 19 ) results in the feedforward control action. Doing so yields the following:

( 16 )

+ is ( ‹› l —'i i d ( i› •« ) i ek a i •i•ti

( 20 )

and

•‹» = ie ( » i —’ i›‹ + •‹t ) —•i•» . ( ›9j

where for clarity of illustration, the prompt lleutron lifetime has been taken as unity and several terms of

If the quantities fi and r are accurate, then the combi- nation of the inverse dynamics calculation and the feedforward action will result in the canceling of the system dynamics. Thus,

small order have been omitted. The superscript caret It is evident from Eq. ( 21 ) that once the accelera- denotes an estimated quantity. Figure 9 is a block dia- tion term has been driven to zero, the actuai and de- gramillustrating the salient features of period-generated manded inverse periods will be equal. This behavior is control. Equations ( 16 ) and ( 17} define, as previously the strength of the period-generated approach and is discussed, the error si8nai and the d eman ded inverse of special importance for the trajectory control of non- period. Equati on fia ) is the system mode ) . It is re- linear systems. In particular, the result of the canceI- ferred to as an “inverse dynamics calculation” because lation is that Eq. ( 17 ) , which is the standard PID

I4UCLEAR SCIENCE AND ENGIHEERI IG VOL. 110 APR. 1992

BRRNARD and LANDING

OF

REACTOR

MODEL

POWER- DEPEN DENT

FEEDBACK

+

n ( t}

^ lt )

+

n d t t + j At )

- j-

1/kAt

REACTOR

Fig. 9. Period-generated control as applied to trajectory tracking of reactor power.

expression, is the determining factor in the system's re- sponse. Its use here results in accurate tucking because the incorporation of a system model in the period- generated method causes the observed inverse period to equal that which is demanded once acceleration ef- fects have died out. This will occur regardless of whether the process barns controlled is linear or non- linear. In contrast, were that same PID expression to be applied directly to a nonlinear system with no use beitig made of a model, the tracking would not be ac- curate except for the specific trajectory for which the controller had been tuned.

'ime- O

Optimal control is normally achieved by applying techniques such as Bellnian's dynamic programming or Pontryagin's maximum principle. These have the dis- advantage of being computation intensive. For exam- ple, application of the Ppntryagin approach yields a set of partial differential equations with split boundary conditions. 5ucb systems of equations must be solved iteratively. The result is that the time required to calcu- late the control action that corresponds to the optimal trajectory may exceed that available for implementing the associated control signal. Under such circum- stances, the optimal control is calculated off-line and applied in an open-loop manner. ) No use of feedback

constraint. Hence, rather than identify the optimal control by solving the system's describing equations subject to both the constraint and a performance in- dex, it is more direct to define the physical conditions that correspond to system movement along that limit- ing constraint. This can be achieved using period- generated control by taking the d emanded period to be that associated with the limiting constraint. For exam- ple, many nuclear research reactors are operated sub- ject to limits on the power, temperature, coolant flow, and rate of rise of power. Suppose that the limit on the latter quantity fpf the MITR-II were a period of 100 s. In that case, the power and reactivity profiles shown in Fig. 7 are those of the time-optimal trajectory.

The degree to which a period-generated control law approaches a time-optimal response depends on the treatment of the acceleration term. In the ideal case, the trajectory would be instantly switched to and from the limiting path. The presence of the acceleration term makes this scenario physically impossible. However, the impact of the acceleration term can b•. made quite small provided that the forcing function can be rapldly changed. Under such circumstances, period-generated control laws can closely approximate time-optimal re- sponses for rate-constrained systems.

V. C. Replication of Human Control Approach

is possible. Hence, if the system model is inaccurate or The foregoing discussions of nonlinear control and if a perturbation occurs, the resulting response will not time-optimal behavior make clear that o n e reason for be as desired. employing model-based control is superior perfor- A major advantage of the period-generated tech- mance. However, there is another, perhaps even more nique is that it results in closed-form control laws that compelling reason. Model-based control laws offer the can be implemented in real time and that may approach possibility of replicating certain functions that humans a time-optimal response. Specifically, for systems that perform during the course of controlling a process. are subject to a rate constraint, the time-optimal tra- Specifically, as was discussed earlier, one of the four jectory will be the one that moves the system along that aspects of the human approach to process control is

NUCLEAR SCIENCE AND ENGINEERING VOL. 110 APR. 1992

CONTROL FOR RESEARCH REACTORS d37

the prediction of plant response. Humans determine if mation, and the application of digital technology to the a change should be made in a control signal by com- operation of research reactors should not be viewed as paring their estimate of the plant's future state to that requiring all of its components. Research reactors can which is desired. Thus, decisions are nade on the ba- be partially automated, and doing so will botb make sis of future expectations. Model-based control laws their operation more efficient and provide experience can enable a digital controller to replicate part of this that will benefit the entire nuclear community. How- process, albeit in a manner very different from that of ever, partial automation brings with it several impor- a human. Specifically, tant caveats. Namely, the control functions that are to

1. The model can be used to predict the future state of the plant. Given modern computing equip- ment, many models can be solved at rates mucb faster than real time. Hence, it becomes possible to test var ious control options before having to select one for °"

tual implementation on the real plant.

2. Model-based control provides excellent tracking of demanded trajectories. Hence, the anticipated plant response is accurately known. This in turn makes pos- sible the rapid identification of deviations. The cause of the deviation will still be unknown, but there will be no uncertainty as to whether or not something is amiss.

3. System models can be used to provide estimates of all parameters associated with a plant, not merely the output. These analytic estimates can be compared to measurements as part of a signal validation scheme.

4. System parameters that are not subject to direct measurement can be calculated. For example, the mar- gins to various thermal limits could be displayed.

5. Should there be a malfunction, the model can be tised to check possible diagnoses. Candidate initiating events could be simulated, and the output of the model compared to observation. In this way, the actual cause

be performed by a machine should be clearly delin- eated, the machines should be designed to perform those functions correctly under all allowed operating conditions, and licensed reactor operators should be trained to recognize machine limitations. If these ob- jectives are not met, then a serious mismatch between operator expectations and machine capabilities may de- velop with the result that operators may either rely too much on the machine or else ignore it. The former bas implications for safety. The latter would be a waste of scarce economic resources.

Relative to the MITR-II, only three of the features shown in Fig. i0 are considered essential. These are the separate safety system, the signal validation and instru- ment fault detection system, and the supervisory al8o- rithm. Also of importance is the hierarchical structure of the controller in which the actions of the control law chosen by the reconfiguration logic are reviewed by the supervisory algorithm so as to ensure an absence of challenges to the safety system. The rationale for re- quiring these features and that for conducting research on several others is summarized in Secs. VI.A through

VI.E. More detailed information is given in Refs. 8 through 11.

VI.A. Separation of S ei and Control

of the malfunction might be identifed or at least nar- rowed to a few possibilities.

The incorporation of an accurate plant model in a dig- ital controller means that a single piece of software can

The nuclear safety system is separate from the closed-loop controller. The word “separate” is defmed as meaning that the output of an instrument used in the safety system must not be influenced by interaction

be used in conjunction with many types of transients. This relieves the operator of the burden of determin-

with the control

mon to both

Thus, if an instrument is com-

signal must be passed through

ing the conditions under which the digital controller will perform reliably.

VI. CONTROL LAW IMPLEMENTATION

Figure 10 depicts a possible design for a research reactor's digital control system. Major features include a separate safety system, a means for signal validation and instrument fault detection, a supervisory algorithm

an isolation device, such as an optical transformer, to

preclude any possibility of feedback from the control system. The purpose of keeping the two systems sep- arate is to ensure that the capability of the safety sys- tem to perform its intended function will never be compromised.

VI.B. Signal Validation and Instrument Fault Detection

that precludes challenges to the safety system, a set of All sensor information is processed by signal val- selectable control laws, a reconfiguration logic to iden- idation and fault detection routines. There are several tify the most appropriate law given the operational methods for accomplishing this. The simplest is to ver- objectives and the plant's state, a means for the vert- ify that each reading is within the range expected for fication of signal implementation, a module for auto- a given plant condition. A more sophisticated ap- mated reasoning, and a man-machine interface. The proach is to identify the largest consistent subset of sig- controller shown in Fig. 10 represents complete auto- nals and to reject any that is not a member of that set.

WCLEAR SCIENCE AND ENCiINEERJNG VOL. 110 APR. 1992

SAFETY SYSTEM

AUTOMATIC SHUTDOWN

SUPERVISORY ALGORITHM

PREDICTIVE CONTROL LAWS

COMPARISON OF SUPERVISORS

PREDICTIVE DECISIONS

ABSENCE OF CHALLENGE

SAFETY SYSTEM

,YES

CO NTROL

kAW D ECISION IMPLEMENTED

SU PERVISORY OVERRIOE

. DIGITAL TO ANALOG

RECONFIGURATION

LOGIC

OPERAT ONA OBJECTIVES

VERIFICATION

OF S GNAL

PREVIOUS

CONTROL SIGNAL

MANUAL CONTROL

CONTROL MEMANISMS

SIGNAL VALIDATION IMPLEMENT AT IO N AND

INSTRUMENT FAULT

RESEARCH

.REACTOR

ISOLATION OEVICES

DETECTION

AUTOMATED REASONING

STATE IDENTIFICATION

NUMERICAL MODEL

EQUIPM ENT

CAUSAL MODEL

MAN-MACHINE INTERFACE

LICENSEO

OPERATOR

ANALOG

APR.

NUCLEAR

SCIENCE AND

RECONFIGURATION TO D \ G \ TAL

Fig. 10. Structure of digital closed-loop controller.

CONTROL FOR RFsSEARCH RFsACTORS 439

A further refinement is to incorporate a real-time sys- sients that were shown in Figs. 1 and 2 are examples of tern model that generates an analytic value for the mea- the failure to properly address these two issues. In sured parameter. Sensor readings are then checked for Fig. 1, the control law raised the power without proper consistency both with each other and with the caIcu- allowance for the future impact of the delayed neutron lated value. This latter method has been demonstrated contribution. In Fig. 2, it drove the control rod into a on the MITR-II as part of a numerical technique region where its differential worth was so low as to known as the "parity-space approach." In addition to render the rod ineffective. Difficulties such as these can validatin g sensor readings, this methodology performs be averted through the use of supervisory algorithms instrument fault chocks in which the Weighting factor that restrict the system state to those conditions for for eacb sensor is adjusted in proportion to the fre- which control will remain feasible.‘ For a reactor, quency with which its readings are j udged to be valid. these algorithms take the form of constraints that limit Thus, reliance on a failing sensor is gradually reduced, the operating state to those combinations of reactivity thereby ensuring a "bumpless" transition when com- and available rate of reactivity change for which it will plete failure actually occurs. be possible to halt a transient on demand. The math- Figure 11 illustrates the importance of using vali- ematical form for this condition is derived from the dy- dated signals. Shown is a strip-chart recording of the namic period equation, which, assuming the prompt

logarithm of two power signals obtained during a neutron lifetime is small, is as follows:

power increase of three orders of magnitude that was

accomplished on the ACRR using the Standard MIT- SNL Period-Generated Minimum'Time Control Law.

M ) + h ( ) Mz ) + # -Ai ( l

( 22 )

The specified period was 1.0 s. Power was increased from 0.57 to 500 kW in 6.73 s. Initially, the sensor on the right was on scale while that on the left was off- scale low with the reactor power at 570 W. As the power increased, the sensor on the right saturated and

To halt a transient, the period must be made infi- nite. This in turn requires that the denominator of Eq. ( 22 ) be made zero. Hence, the magnitude of the terms @p and , ( h, @ ) must be constrained to be

less than the available rate of change of reactivity, here

failed while that on the left became functional. The software was programmed to recognize this. As a re-

denoted by the sy m , bol | | . Thus,

sult, the power increase was completed properly. Had some means of signal validation not been available, the controller would have withdrawn the ACRR's transient rod bank continuously in a vain effort to raise the power as seen by the saturated sensor.

II. C. Supervicory Algorithm

The selection of an appropriate control law is of- ten perceived as the sole requirement in the design of a process controller. Yet, control laws are merely a mathematical means of translating a demanded system output into an actuator signal. They make no judg- ment as to whether or not the demanded output is appropriate, nor do they verify that the actuator is capable of generating the required signal. The tran-

20

500 kW

EXPERIMENTAL DATA

ACRR DECEMBER 3, 19B7

SATURATES

DETECTOR

T0

570 W

570 W

LOC IPOWER )

Fig. 11. lM 9 orta nce of signal validation.

( '›•‹'› + Za,ix, ›:‹»ii q•.i‹» . ( 23›

Equation ( 23 ) is a reactivity constraint. If a relation of this type is observed during a power increase, then inserting the control device will make the quantity sufficiently negative so that when added to the terms h{q and i ( h; h{ ) , the denominator of Eq. ( 22 ) will go to zero, and the period will go to infinity. When the transients shown in Figs. 2 and 3 were repeated using such a constraint, no overshoots resulted. This is shown in Figs. 12 and 13.

In these cases, the constraint caused reductions in reactivity and control device position, respectively, so that it was possible to level the power smoothly , d

II. D. Automated Diagnostics

Figure 14 shows the reactivity and power profiles from a run in which the ACRR's neutronic power was raised from 3 kW to 3 MW, thr‹›e orders of magnitude, on a period of 1.0 s. Reactivity was estimated using the parity-space approach with inverse kinetics being the default in the event of Indecision. Note that power is shown on a logarithmic scale. The transi#nt was com- pleted in the allotted time of 6.7 s with essentially no

d The constraint used in Figs. 12 and 13 was not Eq. ( 23 ) but one based on the standard dynamic period equation. Also, terms reflecting the redistribution of precursors among the defined groups are never retained in the final form of the constraints.^'

HUCLRAR SCIENCE AND E I q olNE E R I N G VOL. 1 i 0 APR. 1992

BERNARD and LARNING

DESIRED POWER LEVEL

UPPER TOLERANCE BOUND

3.0 -—

REACTIVITY

2.5-

.

POWER

re 2.0 -

- 30 F-

8 -

DYNAMIC EFFECT OF ROD INSERTION OFFSETS PDSITIVE REACTIVITY

- 20

*r

,

EXPERIMENTAL DATA MITR-II

MARCH 12, 1984

0 75

SO 75

100 125 150 175

TIME ( s )

Fig. 12. Reactivity constraint approach limits reactivity thereby precluding a power overshoot.

DESIRED

POWER LAEL

UPPER TOLERANCE BOUND

- 16

ROD HEIGHT min.I

- ]4

ROD HEIGHT

- 12

2.5

2.0

POWER

- 10

- 8

EXPERIMENTAL DATA MITR-II

APRIL 4, 19B3

t0

100 150 200 250

TIME ( s )

350 400 450

Fig. 13. Reactivity constraint approach restricts rod withdrawal in region of low differential wonli thereby precluding a power overshoot.

NUCLEAR SCIEIICPs AND ENGINEERING VOL. 110 APR. 1992

CO ITROL FOR RESEARCH REACTORS

COMPENSATION FOR

30 - OROPPEO ROD

POWER PERTURBATION FOLLOWING ROD DROP

20 * TRANSIENT

ROD BANK HEIGHT

EXPERIMENTAL DATA ACRR

JULY 15, 1989

LOGARITHM -¥• 3 kW

OF POWER

POWER RISING ON SPECtFIED PERIOD OF T.0

0

TIME fs )

show trends and predictions satisfy the first of these two criteria because such information will assist oper- ators in anticipating plant response. ›ss ror the second criteria, graphics should be emphasized so that an op- erator need only look at a display to comprehend it. This approach allows experienced operators to con- tinue using their pattern recognition skills. In contrast, if text were to be displayed, an operator would have to switch to a deductive mode of reasoning to make sense of the information.

Figure 15 illustrates an approach developed for the MITR-II. As shown, a maneuver is in progress in which the reactor power is to be raised to 2000 kW.

Pig. 14. Strip-cbart recording of power and rod bank

height: dropped rod experiment.

overshoot. The slope of the power profile is straight, indicating that power was indeed rising on the specified period of 1.0 s. Upon attaining the desired power level, 3 MW, the power was held at that value. Of specia ) sig- nificance is that at 24 s, one of the ACRR's three tran- sient rods was deliberately dropped back into the core. This caused a reactivity insertion of -400 miliibeta. The controller was not "told" of this perturbation. Yet, excepting only a minor downward blip in the power trace, it held the power constant at 3 MW. Specifically, the remaining two rods were withdrawn to provide the necessary compensation. The foregoing action oc- curred during a carefully monitored experiment and was most impressive. However, suppose that the con- troller acted in the same manner for a situation in which the loss of reactivity was only temporary. If that reactivity were to return after the controller had pro- vided compensation, a serious power excursion might occur. Hence, the challenge to the designers of auton- omous controllers for safety-constrained systems is not merely to devise a control law that can compensate for perturbations but also to identify the cause of all such perturbations.

Automated diagnostics is currently the focal point of much research, particularly in the area of expert sys- tems." Currently, the MlTR-II’s digital controller is equipped so that a transfer to manual operation will occur should there be a sudden insertion of negative re- activity. Diagnosis remains the responsibility of the li- censed operators.

Emanating from the current operating point ( 100 s, 1500 kW ) are three power projections. These show the operator what the effect will be of continuously with- drawing the control device ( line A ) , maintaining its po- sition constant ( line B ) , or continuously inserting it ( line C ) . Should the lowermost of the three projections touch the target power line, then the control device should be inserted. Otherwise, there will be a power overshoot. The display is quite simple. Yet, it conveys the information that the operator needs, and it does so in a manner that does not intnide on the operator‘s thought process. In particular, the operator can con- tinue to use his or her pattern recognition skills.

In addition to the features noted in the preceding sections, the MITR-II’s digital controller is equipped with a number of special circuits. These cause transfers to manual control and sound an alarm upon detection of a hardware system failure, upon failure of tbe soft- ware to execute in the expected sequence, upon the ex- istence of too short a reactor period, and in the event of indecision within the signal validation system." The Appendix provides brief descriptions of the MITR-II

WITHDRAW

EMANOED POWER

•‘ HOLD

INSERT

CAPABILITY EXISTS TO LEVEL POWER

CURRENT POWER

2500

2000

>

1500

II. E, Man-Machine Interface

User acceptance of a digital controller may well de- pend on whether or not the man-machine interface is designed to support human cognitive needs. In this re- spect, the display should reinforce both the operator's understanding of the plant and his or her mental ap-

1000

90 100 110 120 ]30 140

TIME ( s )

proach to the analysis of plant behavior. Displays that

Fig, 15. Display for man-machine interface.

h I UCLEA R SCIENCE AND ENGINEERING VOL. 110 APR. 1992

442 BERtsiARD and LANDING

and ACRR facilities and their control systems as well as the experimental protocols observed during the ex- periments reported above.

VII. CONCLUSION

Digital technology can improve the operation of re- search reactors. Moreover, its application to those re- actors will eventually generate a much needed data base for the commercial nuclear industry. The imple- mentation of digital technology on research reactors should be accomplished in a planned, systematic man- ner with the objective of replicating each of the func- tions now perfomied by licensed operators. In this regard, model-based control laws offer mperior perfor- mance because they provide excellent trajectory track- ing, allow the possibility of a time-optimal response, and can be used to predict the subsequent state of the plant. This latter feature facilitates diagnosis. It should also t›e ienogâized that a control law is not in itself suf- ficient for the digital operation of a research reactor. Validated signals, supervisory algorithms, man-machine interfaces that reinforce human cognition, and ulti- mately automated diagnostics are also essential. The development of digital controllers for research reactors is a tremendous challenge, but it is also a necessary one if the U.S. nuclear industry is to remain competitive in international markets and if the United States is to achieve its objectives for the exploration of space.

APPEi tDIX

EXPERIMENTAL FACILITIES ANO PROTOCOL

The experiments reported here were conducted on both the 5-MW ( themial ) MITR-II and the ACRR that is operated by SNL. Descriptions of both facilities are given below. Those interested in the approaches taken by others for the closed-loop digital control of research reactor power are referred to papers by Ball et al.” and Cohn.

Massachuset ts 7 zt s i it zz te of T'echnology Research Reactor

over the range of interest. Measurements were also available of the coolant flow, coolant temperature, and control mechanism position. Four independent mea- surements of primary coolant flow were obtained from the pressure differences across orifices. Primary cool- ant temperatures were measured as follows: two sen- sors for the hot leg, two sensors for the cold leg, and one sensor for the temperature difference between the legs. In effect, three measurements were available for the temperature difference. All sensors were hard wired to a portable LSI-11/23 minicomputer through appro- priate isolators, signal conditioners, and analog-to- digital converters. None of the sensors that form the MITR-II’s safety system were used for this research. The sampling interval for the LSI-11/23 was 1.0 s.

Coarse control of the power in the MITR-II is achieved by positioning a bank of six shim blades. Once critical, the neutron flux is normally maintained constant by adjusting the position of a fine-control reg- ulating rod. Both the regulating rod and one of the shim blades were made available to the experimental program described here. Each is normally moved at a fixed speed of 4.25 in./min. However, for the re- search reported here, each was specially equipped with a variable-speed stepping motor so that the rate of change of reactivity could be made to vary as specified by the control laws. The minimum allowed periods on the MITR-II are 50 s steady and 30 s dynamic. There is a negative coefficient of reactivity associated with the fuel, coolant, and reflector temperatures. Its magni- tude averages —8 x 10*’ bk7k/°C. The MITR-It’s ef- fective delayed neutron fraction and prompt neutron lifetime are 0.00786 bk/k and 100 ps, respectively.

Annular More ftesearch Reactor

The ACRR is a modified TRIGA reactor that uses UOP-BeO fuel elements enriched to 359c 2 ' S U. Its an- nular-shaped core is formed by 236 of these elements arranged in a hexagonal grid around the 23-cm-diam, dry, central irradiation cavity. The reactor operates in tither a steady-state or a pulsed mode. For steady-state operation, the maximum allowed power level is 2 MW ( thermal ) . For pulsed operation, there is no restric- tion on the power. Rather, there is a limit of 500-MJ total energy per pulse and one of l800°C on the fuel

The MITR-II is a 5-MW ( thermal ) , light-water— temperature.

cooled and -moderated, heavy-water—reflected, tank- The ACRR is controlled by two fuel-followed type reactor that uses plate-type, uranium aluminide safety rods, three poison transient rods, and six fuel- fuel. The fuel is enriched to 93¥« 2 " U. Energy is con- followed control rods. The transient rods, which are tinuously removed by foroed circulation of the primary operated as a bank and which are driven by variable- coolant. The maximum permitted operating tempera- speed stepping motors, were used to conduct the exper- ture is 55°C. iments. The negative coefficient of reactivity associated The nuclear instrumentation used for the research with the fuel is, in units of bk/k/°C, given by the en- described here consisted of three neutron flux sensors pression ( —3.85 730/ P ) x 10*’, where Tis the tern- and a gamma-ray sensor that correlated neutron power peraiure of the fuel in degrees kelvin. The ACRR's with the radioactivity ( *N ) of the primary coolant. effective delayed neutron fraction and prompt neutron

All four sensors were directly proportional to the power lifetime are 0.0073 bk/k and 24 ps, respectively.

NUCLEAR SCIENCE AND ENGINEERING VOL. 110 APR. 1992

CONTROL FOR RRSEARCH REACTORS

The computer used on the ACRR was an LSI- l1Z73 that war operated with a sampling interval of

0.05 s. To perform transients over several decades of operation, overlapping neutron flux sensors were used with a signal validation routine programmed to iden- tify on-scale instruments.

Experimental Protocol

The testing of novel control strategies on the MITR- II is permitted if the following protocol is observed. First, the htat removal and the reactor safety systems are prepared for operation at full power, 5 MW. Sec- ond, the control strategy that is to be tested is permit- ted to r ai se or lower the power over some portion of the normal operating range, usually l to 4 MW. Thifd, the decisions of the novel controller are reviewed by the MITZCharles Stark Draper Laboratory nonlinear dig- ital controller tNLDC ) prior to their being implemented. The NLDC is based on the “reactivity constraint ap- proach” and is programmed to intervene if a decision made by the novel controller could result in the power exceeding some fraction of the maximum allowed power, usually 4.5 MW. This arrangement guarantees that tire novel Controller will not challenge the safety system while permitting it to act as if it had full con- trol. Hence, when examining the experimental results shown earlier, it should be realized that the fact that power oversbot the targeted value in some cases was significant to the experiment, but never to the reactor, which was at all times operated conservatively.

It was necessary to modify this protocol for use on the ACRR. The limiting condition for the ACRR is not a specific pnwer level but rather the total energy pro- duced during the transient. Accordingly, it was origi- nally thought necessary to develop an energy constraint that would ensure that the reactor. would be at or be- low its allowed steady-state operating power prior to the limit on integrated power production being ex- ceeded. Such a constraint was developed and used for the initial experiments performed on the ACRR ( Ref. 9 ) . However, as confidence grew in the technol- ogy and as experience was gained by the experiment- ers on the operation of the ACRR, it was realized that an energy constraint was not necessary. The final pro- tocol adopted for ACRR control experiments con- tained three provjsions. First, limits were imposed through software on the allowed power, net energy production, fuel temperature, startup rate, and step- ped motor drive frequency. Second, hard-wired circuits were employed to preclude conditions such as over- spend of the stepped motors. Third, the ACRR's safety system was maintained as a separate entity.

ACKNOWLEDGMFsNTS

Appreciation is expressed to Allan F. Henry ( MIT ) ,

John ñ. Meyer ( MIT ) . Francis J. Wyant ( SNL ) , and Frank

V. Thorne ( SNL ) for their constructive comments. The con- tributions of Kwdn S. Kwok and Shing Her Lau as well as those of Wyant and Thooie regarding certain experiments are noted as are those of Takashi Washio regarding the sta- bility analysis. Carolyn Hinds, Georgia Woodsworth, and Leonard Andexier assisted with preparation of the msnu- script. Special appreciation is expressed to Ara Sanentz, who prepared the figures and did the proofing.

This research was supported by the U.S. £kPartment of Energy under contract DE-FG07-90ERI23.90 and by SNL.

REFERENCES

1, O. K. HARLING and J. A. BERNARD, Trans. Am. Nucl. Soc,, 60 252 ( 1989 ) .

2. O. K. HARLING, J. A. BERMARD, M. J. DRIS- COLL, G. E. KOHSE, and R. G. BALLINGER, Trans. Am. Nucl, Soc., 59, 23 ( 1989 ) .

3, J. A. BERNARD, O. K. HARLING, and S. J. KEREKES, Trans. Am. Nucl. Soc., 61, 110 ( 1990 ) .

4. C. R. KELLEY, Manual and Automatic Control, John Wiley & Sons, New York ( 1968 ) .

5. 1. A. BERNARD, Nucl. Eng. Des. , 130, 2, 219 ( 1989 ) .

6. J. A. BERNARD, A. F. HENRY, and D. D. LAN- NING, incl. Sri. Eng., 98, 87 ( 1988 ) .

7. J. A. BERNARD, “Progress Toward a Generic Meth- odology for the Closed-Loop Digital Control of Nuclear Reactor Power,” Proc. Conf. Fift y Years with Nutlear Fis- sion, Washington, D. C., April 25-28, 1989, p. 262, J. W. BEHRENS and A. D. CARLSON, Eds., American Nuclear Society ( 1989 ) .

8. J. A. BERNARD and D. D. LANDING, “Fault-Tolerant Systems Approach Toward Closed-Loop Digital Control of Nuclear Power Reactors,” CPE-8317878, National Science Foundation ( 1988 ) .

9. 1. A. BERNARD, “Formulation and Experimental Evaluation of Closed-Form Control Laws for the Rapid Maneuvering of Reactor Neutronic Power,” MITNRL-030, Massachusetts Institute of Technology ( 1989 ) .

10. J. A. BERNARD, “Startup and Control of Nuclear Re- actors Characterized by Space-Independent Kinetics,” MITNRL-039. Massachusetts Institute of Technology ( 1990 ) .

I I . J. A. BERNARD, A. H. HENRY, D. D. LANNING,

and 4. E. MEYER, “Closed-Loop Digital Control of Reac- tors Characterized by Spatial Dynamics,” MITNRL-041, Massachusetts Institute of Technology ( 1990 ) .

12. H. ASADA and 1. J. E. SL OTINE, Robot Analysis and Control, p. 133, John Wiley & SOns, New York ( 1986 ) .

13. C. H. AN, C. G. ATKESON, and 4. M. HOLLER-

BACH, ñfodel-Based Control for a Rabot Manipulator,

MIT Press, Cambridge, Massachusetts ( 1988 ) .

NUCLEAR SCIENCE AND ENGINEERINCi VOL, 110 APR. I992

BERNARD and LANNING

14. J. A. BERNARD, K. S. KWOK, P. T. MENADIER,

F. v. TH O Mn , and F. J. WYANT, “Experimental Evalua- tion of the MIT-SNL Period-Generated Minimum Time Control Laws for the Rapid Adjustment of Reactor Power,"Spoce Nuclear Power Systems 1988, p. 495, M. S. EL-GENK and M. D. HOOVER, Eds., Orbit Book Com- pany, Ma ) abar, Florida ( 1990 ) .

l5. J. A. BERNARD, “Period-Generated Control: A Space-5pinoff Technology,” Pth Symp. Space Nuclear Po we r Sysremr, A ) buquerque, New' Mexico, January 12-16, 1992, p. 583, M. S. EL-GENK and M. D. HOOYER, Eds.,

American Institute of Physics ( 1992 ) .

16. T. WASHIO and J. A. BERNARD, “Stability Consid- erations and Noise Reduction in the Implementation of the MIT-SNL Period-£ienerated Minimuiri Time Control Laws.” Spare?Vuclear Po wer Systems 1P89, M. S. EL-GENK and M. D. HOOVER, Eds., Orbit Book Company, Mala- bar, Florida ( to be published ) .

l7. I. A. BERNARD and T. WASHIO, As pen Systems Applications iPithin the Nuclear Industry, American Nu- clear Society, La Grange Park, Illinois ( 1989 ) .

18. J. A. BERNARD and D. D. LANDING, IEEE Trans. Wucl. Sci., NG-33, /, 992 ( t986 ) .

19, R. M. BALL. J. J. MADRAS, F. R. TROWBRIOGE,

D. G. TALLEY, and E. J. PARMA, “Operational Perfor- mance of the Three Bean Salad Control Algorithm on the ACRR,” Proc. 8th Symp. Space Nuclear Power Systems, Albuquerque, New Mexico, January 6-10, 1991, p. 687,

M. S. EL-GENK and M, D. HOOVER, Eds., American In- stitute of Physics t1991}.

20. C. E. COHH, “Automated Data Analysis and Control for Critical Facilities,”AEC Symp. Ser., Vol. 10, p. 49. Ar- gonne Nationa ) Laboratory ( 1967 ) .

NUCLEAR SCIENCE AND ENGINEERING VOL. 110 APR. 1992