MBEEE NEMgg$.3RR.B.E.R.$ k,wqT,M, $ m;y

NEMgg$.3RR.B.E.R.$MBEEE

k,wqT,M, $m;ykyg%q$g

g$g$||s$$$$,1gqg

[h$gh4$$Q$$27

$e!$ng. g a $ n ,yL

uggg y3,y g# y,,g gg %,'g u m

p ggg4 "ppy -w, _ .

y y %j _g ' a(g ggg,g%gy jp@;g&ggggps%$3r.gg %4 4,;g,g eg%g 4y{{g,: a 1

e nge n ga3p g g nhq Cpg 34me

g g fpggg g g jggp gy;P

y y7 p,

m. g., x. . yn'_'3e,.

- '| y|.|4 j p; -

a.y ,I # ,. g , ..; * g gg4 '.g , .y.

f" .~ 3 gw .

fM.,

. ${} |' j,4'. ,j

, f h e fe x "| wh c h'

y.. % y.. t

~-

g@s ,- , , , , .'y, - $ 4'h. N*

,$#4 z..

- e ,

~ -m-. .. ~ '

%' ' .5 :, w'

,.

3 - ,, gj g' '* '

-' 'y !!g g .

.

%.-

- --, f ,J "K- i' 4 ) :p$ 4, _94 5V

7

x ?.hg .

n .I s' .

Q G -c gg | ' *<a

b $' t!S_ {l$ ;. i^ '

j; q ,, .,~.

,

.~1 &, ; ~, .'c

x ? tt C > - #'

y.- a e ":ggh &, -

; >..'

._

i'

g - en - g .

o m aa r m s , p"aw ,4 3 3-as e as p ;- $g.i TDQt y m3 9 4 .g, a . ! , gj

.2>

,, * .L , . w =g y .

'^

. . x. .n x;,

h5kkd h i k#

w[ ww w p p agf,.whsA3 ge

b gW [email protected] (sup _mw my-

y ma wagf JM@sugyj q % - d!Md2%gpdEtD$( j

e was;

hu s _ . e s w%. W. ,R$pummang.MARAN$a$m@gj

e

W Wi m%d j_

. _ _ ._. _

WESTINGHOUSE CLASS 3

WCAP-13392

.

WESTINGHOUSE PROPRIETARY CLASS 2VERSION EXISTS AS WCAP-13383

,

.

AP600 INSTRUMENTATION AND CONTROLPARDWARE AND SOFTWARE DESIGN,VERIFICATION, AND VALIDATION PROCESS

REPORT

. E)(C) WESTINGHOUSE ELECTRIC CORPORATION 19RA leense is reserved to the is.S. Govemment under contract DE4003 90SFtB495.

O WESTINGHOUSE PROPRIETARY CLASS 2--

TNs document contains informaton propnetary to Wesbnghouse Electne Corporanon; it is submitted in confidence and is to be used solely for thepurpose for which it is fumished and retumed upon request. This document and such informabon is not to be reproduced, transmitted, disclosed or

_ used othermse in whole or in part ethout authonzabon of Washnghouse Electre Corporabon, Energy Systems Busmess Unit, subject to the legenos,

contained hereof.

GOVERNMENT LIMITED RIGHTS:(A) These data are submitted with limited nghts under Govemment Contract No. DE ACO3 90SFt&495. These data may be reproduced and used

by the Govemmen' wth the express istmtabon that they wiR not, ethout wntten permissen of the ContraF.or, be used for purposes ofmanufacturer nor dsclosed outside the Govemment; except that the Govemment may dsclose those data outside the Govemment for thefolloung purposes, if any, provided that the Govemment makes such dsclosure subject to proNbiton against torther use and dsdosure:

(1) This 'propnetary data' may be dtsdesed for evaluabon purposes under the restneDons above.

(11) The 'propnetary data' may be dsclosed to the Electne Power Research Insutute (EPRI), electnc utikty representatives and their drectconsultants, excludng drect commercial compettors, and the DOE Nabonal Laboratones under the prohibinons and restnebens above.

(B) TNs nobee shaR be marked on any reproducton of these data, in shole or in part

@ WESTINGHOUSE CLASS 3 (NON PROPRIETARY)EPRI CONFIDENTIAUOBLIGATION NOTICES:

NOTICE: 12 2O sO4 Os O CATEGORY: A E B. O C OOOeOF CO DOE CONTRACT DELIVERABLES (DELIVERED DATA)Subject to specified exceptons, dsclosure of this data is restreted undi September 30,1995 or Design Certificadon under DOE contract DE ACO3-90SF18495, whichever is later.

Westinghouse Electric CorporationEnergy Systems Business Unit

_ Nuclear And Advanced Technology Division-

P.O. Box 355Pittsburgh, Pennsylvania 15230

,

@ 1992 Westinghouse Electric CorporationAll Rights Reserved

_ _ _ . . . .-

.. _ . . .


AP600 Instrurnentation and Control Hardware and SoftwareDesign, Verification and Validation Process Report

..

Table of Contents:*

11.0 Introduction

62.0 Essential Features of the Design, Venfication and Validation Process62.1 Verification Process Integrated with Design PNw62.2 Modular Design6

2.3 Incremental Verification6

2.4 Design Stresstng6

2.5 Verification and Validation Team62.6 level of Verification and Validation

3.0 Documents defined by the Design, Venfication, and VM t% Process. N 7

7_

8.

*9

11

12.i

12

14

15

GW-J1R 472~

Fansion 0May 31,1992 i

*.

_ . . .. . -- . - _ _ _. .


AP600 Instrumentation and Control Hardware and SoftwareDesign, Verification and Validation Process Report

- ..

~~ '

d,C

.

.

_

4.0 Document Cross-Reference 174.1 Documents Specfic to Hardware 174.2 Documents Speo6e to Software 184.3 System Level Documents 19

5.0 References 20

List of Figures.

Figure 1 Design, Venfication, and Validation Process 3

Figure 2 System Development / Integration (SYSDIP) 4

.

Westin6 ouse AP600 Implementation / Verification Proceu - Sununary 5hFigure 3

.

f

Revision 0 GW-]1R E ,

May 31,1992 g

|:

I .

.

. . - . . - - _ . - - - - - - - - - - _ - - - - - . - - . - - . - - r-

- - - - - - - _ - -


!

I AP600 Instrumentation and Control Hardware and SoftwareDesign, Verification and Validation Process Report

.

1.0 Introduction.

his document describes the design, veriScation and validation (DV&V) process that has beenestablished to confirm that system functional requirements are properly and correctlyimplemented in the Instrumentation and Control Architecture of the AP600. His DV&V Processwill be apphed throughout the Instrumentation and Control Architecture in graduated degreesas requ red by the relationship of the spec 6c system to safety needs.

VeriScation refers to the process of detenninmg whether or not the product of each phase of theInstrumentation and Control Sys.em design process fulSIls the requirements imposed byPrevmus phases.

Validation refers to the process of testing and evaluating the integrated Instrumentation andControl System to conSnn compliance with the functional, pufmmance, and interfacerequirements used to design it

ne term, Instrumentation and Control System, as used in this document, refers to the integrated

hardware and software design and equipment, co*rmy'lant.g to the design that is provided to.

implement a subset of the functional requirements forsp.

ne DV&V Process established by Westinghouse is an engmeermg approach used to aid in thedevelopment of high quality hardware, software, and system designs confomung to customer,-

regulatory, and Westin6 ouse requiremmts. he DV&V Process was established as a means tohdirect the necessary actxvities in the des 16n, implementation, venfication, and validation ofinstrumentation and control systems. The DV&V Procedure thatimplements this process defines - >

the documentation item requirements, standards for the content and format of each document,and the interactwns betwe=n the dewsvyment activities and the ver.ficatico and vahdation _

setivities. An obyect:ve of the DV&V Process is to vedfy that documents are generated that arecorrect, complete, and without ambigmty he document titles, document definitions, ax d teruused are selected for consistency with industry standards, Westinghouse standards, andregulatory /licensmg ymtices

ne DV&V Process stresses a " Design for Venfication" approach throughout the hardwaredesign, svi6. design, and system integration aspects of the proyect. His concept requires

that the system design process is able to readily and imnxxiintely demonstrate-

that the system design completely and correctly incorporates the designreqmrements.

that the module, assembly, and subsystem design methods, including software-

modules, provide features so that the resulting design of the module or assembly- ,

Revisicm O GW-J1R 002.

May 31,1992 1

-.

'''_

'- - i i -

_ _

_ _ . ___ _ . . _ .- _ - _ _ _ _ - . _ _ . _ .__

WESTINGHOUSE CLAr,S 3

. .


.

is immediately venEable by independent review.,

that the modules, assemblies, and subsystems contain sufficient test features to-

support venfication testing and be able to be readily and immediately tested to jverify that design requirements are met; and that the test results be immediattdyuseable.

that the c:nnplete system contains sufficient test features to support venfication-

testing and be able to be readily and tmmediately tested to verify that systemrequirements are met; and that the test results be immediately useable. 1

This integration of venfication requirements directly into the design process in a top downfashion, assures that the overall Instnamentation and Control System will readily satisfy the finalsystem venfication and validation testing programs by meeting the mitral system designrequ2rements. j

l

The individual steps within the Design, Verification, and Validation Proxis are controDed by |a series of documents that define the indivklual activities, the inputs to the se activities, and the j

outputs from these activities. / _

"'*;- .- |

.

!

l

|

|

|

|.

,,, -;

|

| '

Revision 0 GW-May 31,1992 2 i

||

. ._ __ __ _ _ - . __ . . ..

. _ . .



'-

, _a.c

.

|

-

.

.-

iit ,

_,

Revision 0 GW-J1R-002.

May 31,1992 3

*.

,

WESTINGHOU..

AP600 Instrwnentation and CDesign, Verification and

-

I |

|

..

||

|

-

Revision 0May 31,1992

4

.

d

e% % *

m

__ -

he etAss a-___

. . ~ ~ . . .

entrol. Hardware and Softwarealidation Process Report-

---

-

a,C

.

__

.-

i

|

|i-%

i

!

-c

-

:'' st-

AyerrentCARD

31,m e ~/igier'it;ti'i'.Td

~.

GW-IIR412

..

920 904:7/ ,7/-D L - ,

__-- o

'

. .. .. . .

WESTINGHOUSE PROPRIETARY CLASS 2

. AP600 Instrumentation and Control Hardware and Software-Design, Verification and Validation Process Report

-_

Dec

,

k Im

k - $2.

OIOE'

m0a

h|2o

i

~

_

Revision 0 -GW-J1R-002

May 31, IW2 5

,

f

.. ---...___-_---_-_____-_._.--_____.___a.._.. . _ . . _ . _

.

. . . . . .

WESTINGHOUSE PROPRIETARY CLASS 2i


__

ac

!

.

4,

O.

I dz'

OIO,g-a

m. O

hMce

;

;

.,

-

Revision 0GW-J1R4102

May 31.1W2 5

_ - - _ _ _ _ _ _ _ - --

_ .- -_


- |


2.0 Essential Features of the Design, Verification and Validation Process -

2.1 Verification Process Integrated with Design Prc-2ss

The Design Process and the Verification and Validation Processes are integrated into tie overallDV&V Precess Hardware and software that conform to the DV&V Process have incorporatedinte their design specialized features that enable, enhance, and support the verification process,

2.2 Modular Design~

An implicit feature of the DV&V prtnss is the philosophy of modular desl n for both the6hardware and roftware used to implement the Instrumentation and ContrcJ System desi n.[6

. . ] ^>c

2.3 Incremental Verification

he DV&V Process is inecked on the smallest hardware and software entities for whichfunctional specfications can be defined and established. [semblies, composed of these entities, becomes a test ofpuper interfadng and usage of already

.

)-

a,c

2.4 Design Stressing

Each module and assembly is tested over its pom11e (design) range of use, providing a higher <

level of assurance than is possible at the integrated system 'u vel,

2.5 Verification and Validation Team

ne Verification and Validation process is pufmmed by independent reviewers who meet therequirements and have 6.e responsibilities defined in the published, QA approved, division and

- department procedures documents.

2.6 Level of Veri 6cition and Validation

ne level of Verification and Validation po'mmed on individual modules, assembbes.subsystens, and complete systems is commensurate with the safety classification of the systemg

and intended use in the plant. His level is established for each module, assembly, aresubsystem as part of the system desi n process, base.d on the system design requirements [5results of this Vezification and Validation level identification process are an integral part of the

- ] a,c

Revision 0 GW-J 1 R t"'

May 31,1992 6

*.

_ _ _ _ _ _ _ _ _ _ . _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ . . - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

_. - -.- . .. . . .

WESTINGHOUSE CLASS 3 -

.


.

3.0 Documents denned by the Design, Veriscation, and Validation Process.,

-_ a,e

.

.

.

~ ~

CL', C.~-

-

Revision 0 N'l " ' '-

May 31,1992 7

*.

_


AP600 Instrumentation and Control Hardware and SoftwareDesign, Venfication and Validation Process Report

_a,c.

-

6

e

!

.

.

i

.

--

1

Revision 0 GW-J' - 'May 31,1992 8

i~

|

____ __-__ - ---____ ___ __ - _ __ --



a,e-

_,

i

.

,

o,

' -

GW-J1R E- Revision 0

May 31,1992 9

.

_ _ _ _ _ _ _ _ _ -.- ___ _ - __ _

_ __ . . . _ - . . __ . . _ _ - - - - - -



a,e( ~

-

i.

.

<

-

..

--.

Revision 0 GW J1R-cMay 31,1992 10

,

|

.

4

.. ._ - _ - -- - - --



acr. ,

_

.

n

!

.

m>

-

..

'

Revision 0 g,p p ,,7

May 31,1992 j)

~.

-- - - - - - - - - - - - - _ - _ _ - _ - - - .

..._. - --.-= .. .-. . .- _ _ _ . - .- - _ ._--... - . . . . ... ._ _ -.-. .- .

WESTINGHOUSE CLASS 3 !>

AP600 Instrumentation and Control Hardware and Software'

Design, Verification and Validation Process Report'

4 , C.>

,

'I

;'

. .

i

?

.

k

,

i

1

.

t

,

s

.

b

i

.,

--

Revisia. 0 M*ll E ''i -

L- my 31,1992 121'

y

'

L.,

.| *

|I

- 1+wer ,- . _ <-v+-+. . - . , - , ,-. y ,, - + - .,_n. ,, ,.4% .-..w~,y.,-,y. - .e -+ ., ,,.,y-,

. . - . - - - .. .- . .- .-.----


AP600 Instrumentation and Control Hardware and Software- Design, Verification and Validation Process Report

,

, a,c,

l~

. ,

:

i

;

i

4

8

i,

.

k

h

,

- - ,

*

,

Revision 0 C'

May 31,1992 13

.

i

e w e,.w .--c - e, ----w.mg- - - . - - -.- wte-t--e+~*,---%=,*-e4--' ~*e,r--P -*-tge- T -a** - +~~'w we-r-+w-rn 47 - y-e t ---Tv



- a,;_ .

|-

3.7 System Ven5 cation & Validation Documents '

3.7.1 System Test Procedures

3.7.11 System Veri 6 cation Procedures

ne system verification test procedures defme the testing program and processfor integrated system veriScation test. These documents defme the tests to beperformed, test methods, and acceptance criteria to addeve system veri 6 cation.The tests are typically overlappin6 static and dynamic tests which progress fromdetailed performance checks of modules and assemblies to more exparxiedperformance checks of the overall Instmmentation and Control System.

3.7.1.2 System Wlidation Procedures

The system validation test procedures define the testing program and process forintegrated system validation test. These documents detail the stages andprogression to functionally the enae Instrumentation and Control System. Thesedocuments defirw the tests cases and' acceptance criteria to achieve system .

functional validation. The test cascs simulate real life plant conditions andtypicaDy indude such tests as static and dynamic calibration and operational tests,

'

functional logic tests, and signal interft:e tests. '

.

3.7.2 Test Results Manual

3.7.2.1 System Verification Test Results

The system veri 6 cation test results are the performance test results compiledduring integrated system veri 6 cation tests. These documents include such itemsas response times, accuracy, power margms, noue levels, and overload andrecovery characteristus.

3.7.2.2 System Validation Test Results;

The system validation test results are the performance test results comp 0ed !during integrated system validation tests. These documents indude such itemsas extemal stimulus / output results, interaction between assemblies, andinformation transport. j

r

.

I Revision 0 C W J1R-0C .

May 31,1992 14

]

.

1;

. . - . ... _ . . _ . _ _ _ _ _ . _ _ _ . . _ . _ __ _ _ _ . _

'


<

t

f

AP600 Instrumentation and Control Hardware and SoftwareDesign, Verification and Validation Process Repon '

- .e-_

.

. ,

i

.

$

L

5

I

^

, .

. ,

;

%.-

.

.. Revision 0 GWJ1 RAT 2

'

May 31,1992 - 15

O

s

n,, . w m,vr, ,-_i. ----,ciy, ,---, ,,----ww.vy-,_% ,,.n.. ,.y--,%,,r.,,y,m..g,.-.,, y ..,,.m, ,,.y,, ,_a_,,_. .,___,,y._,,,,, , _ , _ _ . , , , , , , , , _ , ,

. .- __ _ _ _ _ _ _ _ _ _ - _ _ ._ . - _ _ _ . _ _ _ _ _ _. _

WESTINGHOUSE CLASS 3;

i

AP600 Instrumentation and Control Hardware and Software .

Design, Verification and Validation Process Report ;~

a .c ' 'I~ '

.

!

I

.

:

i

-

-

..

.

*

>

!

.

|.

1

I

-..

I

]

CW jlR . 40 .)May 31,1992 16

.

-

*.

..,or,~.C.......y. .. -,...y-,, .$~,.- ~ ,-,..,-w , . , , ~ . . e , , , . , .,,-.-.--e,m._ m.-- :-- ..-w w rs ,--- , r.-~,- ..w-,.,..h.,,.--,.---

. . - -. - . - . .--- . - -..._- - -- . - .. -

:~ m i

; , .

}.

AP600 Instmmentation and Control' Hardware and Software |Design, Verification and Validation Process Report

..

4.0 Documer.2 Cme Refennce,

4.1 Documents Spenfic to HardwareDeC==~

_

.

.

~. .

.

~-*-

a,c

s

Revision 0 GW-]lR 402~

-

May 31,1992 17

-.

y ~,,.u-- - - - __,-,-,,,y , - , ,- ,,.,,.._.,,-.c,..y - . ...-.,.9c,_ ,y.- ..,n--_.,-. # m.w w.,7 ,,,, ,. ,--3-- --.- ,, , . .f_.,,..__.. - w._ ,,,,q.,. . , ,,-

WESTINGHOUSE CLASS 3.

AP600 Instrumentation and Control Hardware and SoftwarcDesign, Verification and Validation Process Report

~

.

4.2 Documents SpedSe to Software.

a,c >

,

-

4

*

-

.

.

.

i

e:

.=

Revision 0 m ,

May 31,1992 33

.

O

~~-- - - - - - - - _ _ _ _ _ _ _ _

.___.. _ _ .. . _ . _ _ _ _ _ _ _ . __ _ .. . _ _ . _ ___. .-_ _ ___ _ ._. _ . _ _. . _ _ _ - . - . _ _

WESTit.lGHOUSC CLASS 3,

AP600 Instrumentation and Control Hardware and SoftwareDesign,. Verification and Validation Process Report

.

4.3 System level Documents,

(indudes combined hardware / software documents)

n,c--- -

--

!

.

.

.e

.

- . .~

Revidon 0 GW 11R4R'

May 31,1992 19

.

6

. . _ , _ <.- ,-, . . . . . . . _ -. ,, -- _ .,r. . . . , . , , _.

-- _ _ _ _ _ _ -_. - - - -- .__ ._ _ _ .._

.


AP600 Instnimentation and Co:: trol Hardware and SoftwareDesign, Verification and Validation Process Report

.

5.0 References,

5.1 WCAP-12601, 'AP600 Simplified Passive Advanced Light Water Reactor PlantProgram - Program Operating Procedures", Rev. [To Br Established Later)

5.2 C&PCSTD001, System Development / Implementation Process (SYSDIPP, Rev.[To Be Established Later)

5.3 WCAP-9153, '414 Inte5 rated Protection System Prototype Verification Program *,August 1997

5.4 WCAP-9739, " Summary of the Westinghe.ne Integrated Protection SystemVeri 6 cation and Validation Program", Sept.1960

.

i.

l

I

|

1

|~

!

!

s-

: Revision 0 GWJ1 RAD ,i

{ May 31,1992 20t

| 1-

..