The study of fuel behaviour under accidental conditions is a major concern in the safety analysis of the Pressurised Water Reactors. The consequences of Design Basis Accidents, such as Loss of Coolant Accident and Reactivity Initiated Accident, have to be quantified in comparison to the safety criteria. Those criteria have been established in the 1970s on the basis of experiments performed with fresh or low irradiated fuel. Starting in the 1990s, the increased industrial competition and constraints led utilities to use fuel in more and more aggressive conditions (higher discharge burnup, higher power, load follow, etc.) and create incentive conditions for the development of advanced fuel designs with improved performance (new fuel types with additives, cladding material with better resistance to corrosion, etc.). These long anticipated developments involved the need for new investigations of irradiated fuel behaviour in order to check the adequacy of the current criteria, evaluate the safety margins, provide new technical bases for modelling and allow an evolution of these criteria. Such an evolution is presently under discussion in France and several other countries, in view of a revision in the next coming years. For this purpose, a R&D strategy has been defined at IRSN.
The economic context is increasingly demanding for the utilities who, in order to keep competitive, have to produce the cheapest possible KWh while retaining sufficient flexibility to adjust the energy produced to the demand. The response of nuclear reactor operators is to increase reactor power, the cycle length (and thus discharge burnup), and the fuel enrichment. Applying flexible operating modes involve power variations imposing high stresses on the fuel which must be taken into account when considering changes in Safety Assessment.
Fuel rods are therefore subjected to increasing mechanical, thermal and chemical stresses in the new fuel management procedures, while having to satisfy the following contradictory requirements:
reliability, to avoid degrading the operating conditions (e.g., few manufacturing defects, low deformation of assemblies, etc.),
robustness, to withstand the contingencies of the operating conditions (e.g., low corrosion),
high performance, to provide margins that can be used in operation (sufficiently high PCI limit; proper behaviour in accident conditions: RIA, LOCA, etc.).
Furthermore, fuel elements are complex objects, the design of which requires an in-depth knowledge of coupled phenomena (neutronics, thermohydraulic, thermomechanical, chemical) that are very difficult to separate out. To ensure the reliability and robustness of a new fuel element, to predict its performance (in particular, from a safety point of view, its behaviour in accidental conditions), it is therefore necessary to make use of simulation duly validated by experiment, including integral tests which may reveal previously unknown phenomena.
In addition, the number of fuel rods under operation in the world is very high and the probability to have defect rods or unknown phenomena is nonnegligible. For example, in France, the utility EDF manages more than 10,000 irradiated assemblies, representing about 2.7 million fuel rods, which are loaded in NPP reactor cores, exposed to a harsh environment (high temperature: 300°C for the coolant, high flow velocity, aggressive chemistry: borated, lithiated fluid) over periods of up to six years.
In the current increasingly competitive context, the utilities clearly indicate that, for PWR presently under operation, there is a constant need to improve fuel performance and develop innovative products for a more efficient use of fuel at a time when the uranium market will be under pressure, so as to minimize the quantity of waste, to increase unit power and cycle length, and so forth.
It is planned to reinforce R&D on fuel for a continued improvement of the present products and optimization of their management and, in the long term, to design new fuel elements that represent a real break with today’s current concepts. Substantial evolution of present technologies has been developed for an increase in robustness and performance, for example, a constant upgrading of the fuel matrices (UO2, MOX, etc.), a general use of consumable poisons, the introduction of doped pellets, and also continuous cladding evolution, with the introduction of M5, optimized ZIRLO, MDA, etc. New generation of products for the PWRs is under preparation.
Moreover, all operators are going to both diversify their fuel supply by calling upon manufacturers that are developing different technologies and benefit from progress made in fuel element design.
Thus, the diversity in fuel supply and in the operation of the various units means that a very large number of initial states and responses to various stresses in incident and accident conditions have to be taken into account in accident studies, the evolution of acceptance criteria, and available methodologies for safety demonstration.
Safety demonstrations for pressurised water reactors are deterministic, supplemented by a probabilistic approach. The deterministic method is based on analysing postulated initiating events, which can be grouped to define a limited number of operating transients and design-basis incidents and accidents, which constitute the design-basis operating conditions. The studies of design-basis operating conditions must demonstrate compliance with safety requirements involving the first safety barrier that is the fuel cladding. As part of the safety demonstration, the safety requirements are developed into decoupling criteria (improperly referred to as safety acceptance criteria).
The objective is to guarantee a proper behaviour of the first barrier, in all conditions, including extended periods of operation, incidental situations, low-probability extreme accident conditions such as loss-of-coolant accidents (LOCAs) or reactivity-initiated accidents (RIAs). For such conditions the utility has to demonstrate the possibility of keeping the nuclear reaction under control, ensuring the short-term and long-term core cooling and a limited extend of cladding degradation, this last one being the first safety barrier.
In this respect, a safety baseline is used which defines the fuel operating conditions, the phenomena to be taken into account in normal operation or in incident or accident conditions, the computing methodologies and tools to be used for safety demonstration, and of course the acceptance criteria to be met. IRSN must make sure that this safety baseline is relevant (if necessary pressing for changes) and that the criteria are met, and must also assess the operating margins during reactor operation.
Expert assessment of fuel is an excessively difficult field, first because of the complexity of the physics (multidisciplinary), the mechanisms of which are difficult to separate out and subjected to very varied boundary conditions (large number of external stresses). The difficulties are also technological, because of a large variety of technologies (constantly evolving field), a growing diversity and change in the operating conditions (leading to diversity of changes in the fuel while it is in the reactor), and the diversity of incident and accident conditions to be taken into account over the whole downstream fuel cycle.
Furthermore, the utility, in its concern for economic profitability and therefore always getting the most out of the fuel, is led to use ever-more-sophisticated methods and arguments in order to demonstrate compliance with the safety baselines.
Thus Safety Assessment should be based on a well-thought-out simulation/experimentation R&D strategy, including in-pile integral testing. The IRSN has to conduct such a major R&D programme, so as to be in a position to validate products, assessment methodologies, and operating conditions. One reason is that Technical Support Organisation (TSO), such as IRSN, should be leader in the investigation of accidental situations. They must also develop generic knowledge and computing tools because of the diversity of situations that will have to be assessed (technologies, operation, etc.), have their own computing tools and methodologies in order to ensure the independence of their judgement, and provide high-level skills training for expert assessment.
In this paper we focus on the R&D needs towards a revision of acceptance criteria and the evolution of methodologies used for the safety assessment for LOCA and RIA.
The LOCA results from a break in the primary circuit that leads to the depressurisation of the primary system with power decrease to its residual level and water reflooding. As a consequence, the core fuel rods undergo the following evolution: clad temperature increase and dry-out, transfer of the stored energy from the fuel to the clad, clad ballooning with possible contact with the neighbouring rods, burst failure around 800°C and fuel relocation inside the ballooned zone; beyond this phase, oxidation of the cladding will occur at high temperature leading to a significant clad embrittlement before quenching due to reflooding water.
The LOCA is a Design-basis accident (DBA) used for the design of the safety emergency cooling systems and the limitation of the power at the hottest point in the core during normal operation. The safety principle is that the coolability of the core has to be preserved. The associated safety requirements are to ensure the resistance of the fuel rods upon quench and postquench loads and to maintain a coolable geometry in the core. These requirements are formalised in safety criteria, associated with limit values, mainly expressed through a maximum cladding temperature (PCT) and an equivalent cladding reacted ratio (ECR) (ECR is the ratio of the cladding thickness equivalently transformed into ZrO2 by oxidation over the initial clad thickness, taking into account possible thinning during clad ballooning) with the aim of ensuring a residual ductility of the cladding for maintaining core coolability capability on short- and long-term duration. In France as in the U.S., the current limits are 1204°C on PCT and 17% on ECR. These LOCA acceptance criteria are issued from a long process in the United States (Ergen Task force in 1967, Interim Acceptance Criteria for ECCS in 1971, then ECCS Rule-making Hearing in 1972-1973). Since they were established, the evolution of fuel operating conditions and fuel technologies leads the international community to review the technical basis to reassess these criteria and their limit values.
In order to prepare acceptance criteria reassessment, IRSN recently conducted an extensive Start-of-the-Art–Review relative to fuel behaviour under LOCA conditions, covering the aspects of clad ballooning and flow blockage, coolability of partially blocked assemblies, clad oxidation, and clad resistance to quench and postquench loads [
the cladding embrittlement, to address the loss of cladding integrity upon quench and postquench loads,
the relocation of fuel in the ballooning parts of the fuel rods,
the flow blockage by ballooning rods and its coolability.
IRSN considers important that these questions be solved to guarantee core coolability in a postulated LOCA transient and has launched an R&D project, named CYLCADES, to investigate them.
The effects of both alloy composition and burnup on cladding embrittlement were extensively studied [
Postquench ductility, a commonly used parameter in the past as the basis of safety criteria, appears as an inappropriate parameter to define an embrittlement threshold, since no practical limit can be derived to ensure ductility retention in the cladding balloon. However, the results from ANL 4-point bending tests [
A strength-based approach addressing the structural response of the whole cladding, instead of a ductility approach, might provide an acceptable alternative. IRSN has proposed a two-step R&D strategy to address those questions.
The first step is to quantify a relevant embrittlement threshold. The first important item is to identify and quantify mechanical loads that should be supported by fuel rods during quench and post-quench phases of LOCA transients. This will be informed through from numerical simulations in bundle geometry. It is a necessary challenge. Afterwards, appropriate structural response tests, taking into account bounding mechanical loads (quench under controlled loading, impact tests, etc.) to determine embrittlement threshold, should be defined. Finally, it is necessary to carry out Finite Element calculations with typical cladding geometry and properties to verify that the experimental domain covered by this type of tests is adequate. This step may require appropriate analytical experimental tests to characterise the evolution of clad properties, in particular at the location of the balloons.
The second step is to select the most appropriate parameter characterising the oxidation and hydriding amount on which to correlate embrittlement, so as to find out an alternative to the ECR. It is based on the previous work from early investigators ([
During normal operation, oxide fuel pellets develop many cracks because of thermal stresses. After clad ballooning and burst, some fragmented fuel particles located above the ballooned region of a fuel rod will thus relocate into the enlarged volume of the balloon under the influence of gravity and pressure differences. This effect was first noticed in 1980 in reactor tests in the United States (PBF/LOC tests, INEL, [
The strategy proposed by the IRSN is to carry out integral tests with different cladding, different types of fuel pellets, and different burn-ups, in particular to actively support the on-going OECD program performed in the Halden reactor (IFA-650 test series) and to consider complementary tests in the Halden reactor or the Cabri reactor (with the use of the hodoscope which allows to analyse precisely the fuel relocation without moving the rods). A consistent and sound interpretation of this large range of older and recent tests has to be performed and will be supported by laboratory studies to understand the basic mechanisms of fuel fragments slumping and accumulation in a cladding balloon and then to model fuel fragmentation as function of fuel types, burn-up, and power load history. Then, in the calculation tools, balloon filling ratio should be given as a function of fuel rod characteristics.
The question of the cumulative effects of irradiation, which homogenize the azimuthal temperature distribution in the fuel rod cladding, and of the bundle size on the main characteristics of the blockage (maximum flow restriction ratio, axial extent) has been under investigation for a long time and several programmes have been devoted to it (see [
However, such a strategy might lead to significant costs; indeed, a short series of in-pile integral bundle tests could close the issue for a given fuel but let it open for another type of fuel; in addition, in-pile experimental facilities for testing with large size bundles are more and more difficult to find (PHEBUS reactor has been recently shutdown!).
A simulation strategy based on the use of a detailed and well assessed code is proposed by IRSN. For this purpose, with the support of EDF, IRSN is developing the DRACCAR code [
IRSN has carried out a state-of-the-art review of the main experimental programmes related to the question of the coolability of blocked regions in a rod bundle after ballooning in a LOCA, such as the FEBA, SEFLEX, THETIS, ACHILLES, CEGB, and FLECHT-SEASET programmes [
It is necessary to perform out-of-pile experiments with a partially blocked full-length bundle, with realistic simulation of fuel relocation in the balloons, in view of updating the upper bound value of maximum blockage remaining coolable. It can be supported by some more analytical tests addressing basic phenomena (droplet impact and fragmentation, heat transfer on balloon walls, flow redistribution, etc.) to reach a better understanding of the leading phenomena and to select the most appropriate form of heat transfer correlations for the DRACCAR code.
The postulated reactivity initiated accident results from the failure of the drive mechanism of a control rod cluster made of absorber rods regulating the nuclear reaction. This failure causes the ejection of the control rod cluster due to pressure difference (around 150b) between reactor cooling system and containment and leads to reactivity insertion. This accident generates a fast power transient (in some tens of milliseconds) with significant energy injection in the fuel rods neighbouring the ejected control rod assembly, and raises the following questions.
Do the fuel rods fail and what are the rod failure conditions for the various fuel types, operating conditions experienced by the fuel rod, and burnup levels?
Does ejection of solid fuel particles into the coolant occur after rod failure?
If fuel is ejected, could the fuel-coolant thermal interaction propagate the accident to the neighbouring rods and jeopardize the core cooling capability?
RIA is a DBA; the safety principle is the preservation of core coolability. The associated safety requirements are defined in order to limit the fuel pellets melting and the number of fuel rods affected by boiling crisis and to avoid fuel dispersion in the primary coolant. The associated current safety criteria for RIA have been formulated in the 1970s on the basis of the available experimental database (from SPERT, PBF, and early NSRR experiments) that was restricted to fresh or slightly irradiated UO2 fuels (up to 30 GWd/tU for UO2 fuel) and with cladding and fuel technologies which are no more currently in operation. However, the clear evidence of specific aspects of highly irradiated fuel that could affect the transient rod behaviour during a RIA and the lack of data on irradiated MOX fuel, created the need to both verify and/or adjust the current safety criteria and to evaluate the corresponding margins. As a result, various organizations in most countries operating reactors [
Indeed, several CABRI REP tests (Na-1 to Na-12) on UO2 and MOX rods with zircaloy-4 cladding were carried out by IRSN between 1993 and 2000 in the sodium loop of the CABRI reactor. The test results revealed rod failures for enthalpy values less than the SPERT failure threshold of 140 cal/g for irradiated fuels. These CABRI tests clearly showed the need to define new criteria for irradiated fuel [
In order to be able to give relevant technical advice on revising the RIA criteria, the IRSN felt it is necessary to develop its own methodology for deriving RIA safety limits. Indeed, developing a methodology call for a thorough understanding of the physical mechanisms involved in each phase of an RIA, supported by interpretation of the experimental database, developing computing codes, identifying the relevant parameters using the above methodology. All those aspects are required for an accurate assessment of the safety criteria and methodologies proposed by the utilities.
Taking into account these considerations, as well as the continuous fuel evolutions, the complex and intimately coupled phenomena under transients, IRSN, develops an R&D strategy which aims at getting physical bases for establishing new safety criteria. The approach consists of
the development of the SCANAIR computational tool dedicated to the description of the global fuel rod behaviour in reactor conditions; it has to be validated on the available tests for valuable prediction capability and for use in supporting expertise studies,
the acquisition of the necessary knowledge and identification of the main phenomena, through in-pile testing programs in which consequences of a fast power transient applied to an industrial irradiated fuel rod (single) can be studied under representative reactor conditions (nuclear heating, coolant temperature, thermo-mechanical loading, etc.) up to rod failure and postfailure events, taking into account the intimately coupled phenomena;
the performance of separate effect tests programs aiming at the back-up of the SCANAIR development and at improvement of the understanding of some parts of the phenomenology; for instance, the Prometra program for mechanical characterisation of the Zr-4 and advanced claddings Zirlo and M5 [
the development of a more detailed modeling with a multiscale approach when possible, allowing confirmation of the necessarily simplified models implemented in the reactor computational tool.
The main outcomes of the Cabri REP-Na program, conducted by the IRSN in 1992–2002 with the support of EDF, was the role of hydrides in the risk of rupture, the contribution of fission gases at the grain boundaries, the importance of oxide layer spalling, and above all the need to update the current safety criteria, which are no longer appropriate for present operation conditions. The Cabri International Program conducted by IRSN, launched in 2002, under OECD auspices with a broad international cooperation and partnership of EDF, will be carried out in the renewed facility under typical pressurised water reactor conditions. The main objectives are to address the pending questions relative to the fuel rod behaviour over the whole transient, the occurrence of boiling crisis and its consequences on rod failure with high clad temperature, high coolant and rod internal pressures and fission gas loading, and the postfailure phenomena (fuel ejection, fuel-coolant interaction with finely fragmented solid fuel, thermal to mechanical energy conversion). The capability of the CABRI reactor with typical PWR conditions and its versatility will allow exploring the influence of the pulse width on the phenomena as well as the effect of advanced fuel microstructures for UO2 and MOX.
Today the IRSN is moving towards “analytical” safety criteria [
The objectives of future programmes in Cabri will be to validate the new analytical safety criteria, to test rods with new fuel rod technologies, to explore accident conditions not yet investigated.
Tests at zero initial power must therefore be considered, updating the concept (and the instrumentation) to give a better response to the following current approaches:
more analytical tests, on lengths of moderate size prepared from a given rod stage, scanning physical parameters, for example, different deposited energies; tests on defective rods for more specific study of fuel ejection conditions and consequences might be considered;
tests to explore other types of pulse insofar as late injected energy could have a strong influence on behaviour after departure from nucleate boiling;
RIA tests similar to those of the CIP programme (full length in particular) on new fuel rods (changes in cladding, fuels, etc.); potential needs include changes in fuels (additives, pellet geometries), high burnup (>45 GWd/t) gadolinium-containing rods, VVER fuels, new products to counter PCI (short pellets), and so forth.
In parallel, it is also necessary to explore the cases at intermediate powers which are not covered by the transients at zero power.
The increased industrial competition and constraints result in more aggressive conditions for the fuel (higher burnup, higher power, load follow, etc.) and create incentive conditions for the development of advanced fuel designs with improved performance (new fuel types with additives, cladding material with better resistance to corrosion, etc.). This situation involved the need for new investigations of irradiated fuel behaviour under reference accidents in order to check the adequacy of the current criteria, evaluate the safety margins, provide new technical bases for modelling, and allow an evolution of these criteria. Safety Assessment should be based on a well-thought-out simulation/experimentation R&D strategy, including in-pile integral experiment. Technical Support Organisation (TSO), such as IRSN, should be leader in the investigation of accidental situations. They must also develop generic knowledge and computing tools because of the diversity of situations that will have to be assessed (technologies, operation, etc.). They have to get their own computing tools and methodologies in order to ensure the independence of their judgement and provide high-level skills training for expert assessment.
The IRSN is proposing an R&D programme, in the framework of international collaboration, in particular with TSOs, so as to be in a position to validate products, assessment methodologies, and operating conditions.
In this paper we focused on the R&D program proposed by IRSN in the context of a revision of acceptance criteria and the evolution of methodologies used for the safety assessment for LOCA and RIA.
In supporting evolution of LOCA criteria, IRSN is developing the CYCLADES program which adresses the main following topics.
The analysis of cladding embrittlement with integral experiments taking into account bounding mechanical loads and the analysis of most appropriate parameters to characterise hydriring and oxidation of the cladding.
The axial fuel relocation, in developping experimental programs in Halden and CABRI reactors.
The coolability of flow blockage with a program of out-of-ile coolability experiments and single rod flow blockage experiments in CABRI reactors.
Concerning RIA, the IRSN strategy is based on mechanical tests on claddings, the forthcoming CIP and complementary programs on CABRI adressing postboiling crisis ruptures, fuel coolant interactions, and radiological releases.
All these programs are linked with a simulation strategy for extrapollation to reactor conditions.