Reducing digital risks and improving reliability in nuclear power integrated energy systems
Not Available
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Engineering topics
Le Blanc, Katya
Publications and source records attributed to Le Blanc, Katya.
Assessment of Electric Grid Transmission System Simulator for Human Factors Research
Over the past decades, various technologies have been developed for electric grid operations to support clean energy, meet rising electricity demands, and address infrastructure concerns. However, the human factors aspect is often overlooked during rapid integration. Questions persist about how these technologies impact human performance. Simulators play a critical role in supporting investigation of human factors design concepts and conducting comprehensive usability testing to evaluate human performance and assess human reliability. This paper aims to address human factors research simulator requirements and conduct a comparative study of six different simulators. A detailed evaluation reveals that the evaluated simulators lack the ability to customize user interfaces. Additionally, their user interface designs do not fulfill the basic human factors design principles, potentially leading to increased response variability and reduced statistical power when conducting controlled experimental research. In the future, it is essential to develop scripting tools to integrate customizable user interfaces and simulation models, ensuring meeting research requirements.
Li, Ruixuan↗
Advanced Reactor Safeguards & Security 2024 Program Roadmap
The Advanced Reactor Safeguards and Security (ARSS) program was established to provide research support addressing near term challenges that advanced nuclear reactor vendors face in meeting domestic Material Control and Accounting (MC&A), Physical Protection System (PPS), and Cybersecurity requirements for U.S. construction. The technical work in the program is meant to (1) support nuclear reactor vendors with advanced MC&A, PPS, and Cybersecurity designs for next generation reactors, (2) provide technical bases for the regulator, and (3) promote the integration of Safeguards and Security by Design early in the design process. Existing domestic regulations for safeguards and security, as outlined in the Code of Federal Regulations, were written for large light water reactors, and rule-making efforts are underway to develop regulations more suited to different reactor designs. The ARSS program seeks to remove roadblocks in the deployment of new and advanced reactors by solving regulatory challenges, reducing safeguards and security costs, and utilizing the latest technologies and approaches for robust plant monitoring and protection. This roadmap discusses the goals of the ARSS program, current research, and program plan for the next five years.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Cyber-Informed Engineering Implementation Guide: Version 1.0 [Slides]
This Implementation Guide describes the principles of Cyber-Informed Engineering (CIE) and outlines questions that engineering teams should consider during each phase of a system's lifecycle to effectively employ these principles. It describes what it means to engineer systems in a cyber-informed way, rather than offering a comprehensive, step-by-step process or procedure for CIE implementation. This guide complements - but does not replace - the application of cybersecurity standards or practices currently in place within an organization. Engineers and technicians that design critical energy infrastructure installations can use this Implementation Guide to integrate the 12 principles of CIE into each phase of the engineering lifecycle, from concept to retirement. The guide is aimed at system or design engineers, rather than software engineers or operational cybersecurity practitioners. The engineers who design, build, operate, and maintain the physical infrastructure are best positioned to leverage a system's engineering design to diminish the severity of cyber attacks or digital technology failures. CIE expands cybersecurity decisions into the engineering space, not by asking engineers to become cyber experts, but by calling on engineers to apply engineering tools and make engineering decisions that improve cybersecurity outcomes. CIE examines the engineering consequences that a sophisticated cyber attacker could achieve and drives engineering changes that may provide deterministic mitigations to limit or eliminate those consequences.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Design Philosophy for Accelerator Control Rooms
This report describes the foundational human factors principles needed to design user interfaces for accelerator control rooms. These principles are presented as recommendations for accelerator control system interface design and are illustrated with examples drawn from accelerator operations at Fermi National Accelerator Laboratory (Fermilab). These high-level principles are intended to serve as design objectives that apply generally across all control system interfaces developed for the accelerator complex. These principles will be mapped to more specific design guidance that will be provided in a style guide for accelerator operations.
43 PARTICLE ACCELERATORS↗
Employing a User-Centered Design Process for Cybersecurity Awareness in the Power Grid
In this paper, we discuss the process we are using in the design and implementation of a tool to improve the situation awareness of cyberattacks in the power grid. We provide details on the steps we have taken to date and describe the steps that still need to be accomplished. The focus of this work is to provide situation awareness (SA) (Endsley, 1995) of the power grid to staff from different, non-overlapping roles in an electrical transmission organization in order to facilitate an understanding of a possible occurrence of a cyberattack. Our approach follows a user-centered design process and includes determining the types of information to display, the format of the displays, and the personnel to whom the display should be shown. Additionally there is the issue of how much help the tool can provide in the way of assessing the probability of a cyberattack given the current status of various portions of the power grid. Regardless, the ability to provide a common operating picture should enable the various groups to collaborate on a response.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Executive Summary: Prototype Design, Analysis, and Results for a Liquid Radiological Waste Control Room
Under the United States Department of Energy Light Water Sustainability Program (LWRS), Idaho National Laboratory (INL) is collaborating with Palo Verde Generating Station (PVGS) to support human factors engineering efforts in the modernization of PVNGS’ radiological waste system (LRS) control room. The studies proposed and/or conducted by INL are designed to address the inconsistency between different human factors standards, guidance, and conventions. Guidance such as NUREG-0700 leave much of the information open to interpretation. INL will identify whether maintaining a design that is consistent with population stereotypes actually enhances performance, or whether there are alternative designs that yield performance that is better than the designs that maintain those stereotypes. The overall design concept for the LRS workstation includes system overview displays for the Evaporator system and the Boric Acid Concentrator system. A third display contains overview information for the rest of the LRS. The forth display contains alarm information. Each display will be presented on one of four monitors in the control room. The system overview displays contain embedded controls for valves and pumps, mini-trends, and micro-trends. The mini-trends present data for the controllers and contain alarm set point information as well as trending. All other relevant system parameters are shown on micro-trends. The semi-dull screen approach utilized present dynamic data in green, active components are white (gray when closed or off). The product stream flow paths are indicated by different colors. Alarm states are presented in saturated red and selected components are indicated by bright blue. In addition to the micro task study described below, the INL researchers also conducted an evaluation of the semi-dull screen approach as well as an ergonomic evaluation of the suggested upgrades in the local control room. A detailed report of all INL’s activities related to the modernization of the LRS conducted between October 2016 and September 2017 are found in these two reports; • INL-EXT-17-43226, Prototype Design, Analysis, and Results for a Liquid Radiological Waste Control Room, and • INL-EXT-17-43250, Evaluation of Control Room Interface Designs to Support Modernization in Nuclear Power Plants.
12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
Characterizing cyber tools for monitoring power grid systems: what information is available and who needs it?
Abstract—The power grid is a complex, interconnected system that requires the coordination of multiple entities ensure the reliability of the system. System operators must be aware of the impacts of various natural and man-made contingencies through telemetry from their control systems, and they must also be aware of the integrity and availability of the cyber assets on their systems. A team of researchers from PNNL and INL have conducted a series of observations and interviews at power utilities to identify what information needs to be available for both control room dispatchers and cyber security analysts to maintain situation awareness of cyber security to effectively monitor the cyber assets on utility control systems. The researchers interviewed and observed control room dispatchers and spoke with regional control system engineers and cyber security analysts to define the context in which such information would be used. The results of this work will inform the design of a tool that will enhance cyber situation awareness and help facilitate effective communication between the various roles and organizations with utility and other regional authorities during contingencies. Index Terms—
24 POWER TRANSMISSION AND DISTRIBUTION↗
Prototype Design, Analysis, and Results for a Liquid Radiological Waste Control Room
Human factors researchers at Idaho National Laboratory are collaborating with a utility partner to address human factors in the modernization of their radiological waste control room. The collaborating utility, Palo Verde, plans to remove all control boards associated with the liquid radiological waste system, which include controls, indicators, and alarm systems, and replace them with modernized digital instrumentation and controls and displays. To be sure the new system either supports current operational performance or enhances it, researchers have carried out three planning and analysis activities: expert operator review, function allocation analysis, and human factor principles and design applications. Researchers utilized access to expert operators to gain information about the system. Operators were asked to detail a procedure exemplifying typical interactions with the liquid radiological waste system and provide it to Idaho National Laboratory with a list of functionalities to incorporate (Section 4.1). Later, operators were asked to provide additional feedback to inform a prototype with adequate realism to support sound analysis of the system design (Section 4.2). Other operators not associated with the utility partner were also involved in experiment design and prototype evaluation (Section 4.2). Due to the extent of the upgrade, care was given to measure the change in the operator’s role (Section 7). As part of the modernization, some plant systems are expected to be equipped with automation or sensors that send information directly to the control where previously operators were required to enter controlled areas to find the information. Such updates made slight changes to operator role requirements, but the impact was negligible. The way the system is operated will remain largely the same, but operator convenience and safety is expected to increase. Additionally, to map operator tasks during the selected procedure, an Operational Sequence Diagram was created (Section 7.1). The diagram helped to account for every interaction and piece of equipment needed to create the prototype design. Alternatively, the diagram can be created following the final design to identify any function reallocations due to redesign. Human factors principles were also applied to the design. An ergonomic assessment was performed on the workspace resulting in various recommendations for placing and designing the new workstation (Section 6). A 3 D mockup of the control room was created to depict the options available with in-depth descriptions of each. Furthermore the prototype design incorporates well known human factors principles. However, to be sure the principles are sound in the control room context, the researches have designed an experiment to measure the impact design decision has on operator performance. The experiment is described in detail in Section 5. Lastly, a tool emerged as this effort began called the NUREG 0711 Crosswalk (Section 8). The tool has multiple uses, but it was primarily intended to communicate how the researcher’s action directly mapped to specific results suggested in the Nuclear Regulatory Commission review guideline. The tool also maps how current results impact future decisions in the modernization process.
47 OTHER INSTRUMENTATION↗
Evaluation of Control Room Interface Designs to Support Modernization in Nuclear Power Plants
Control room modernization in the commercial nuclear power industry often takes the form of phased system-by-system upgrades that result in hybrid control rooms with digital and analog equipment. Ensuring that these upgrades results in enhanced human performance and more intuitive interfaces, researchers at INL have been supporting the design of upgraded systems in coordination with a large scale modernization effort at a partner utility. This report describes the experimental evaluation of a liquid radiological waste control room concept which investigated the use of color in system overview screens. The results indicated that maintaining existing color conventions to indicate component status yielded no benefit and in some cases caused a detriment to performance. The researchers recommended using a minimal muted color in overview screens, but advocated using color to enhance understanding of different flow paths and using saturated color to highlight abnormal operating states.
99 GENERAL AND MISCELLANEOUS↗
A human automation interaction concept for a small modular reactor control room - 101
Many advanced nuclear power plant (NPP) designs incorporate higher degrees of automation than the existing fleet of NPPs. Automation is being introduced or proposed in NPPs through a wide variety of systems and technologies, such as advanced displays, computer-based procedures, advanced alarm systems, and computerized operator support systems. Research consistently finds that there is a fundamental tradeoff between system performance with increased automation and reduced human performance. Idaho National Laboratory (INL) researchers and NuScale Power human factors and operations staff are working on a collaborative project to address the human performance challenges of increased automation and to determine the principles that lead to optimal performance in highly automated systems. This paper will describe this concept in detail and will describe an experimental test of the concept. The benefits and challenges of the approach will be discussed. (authors)
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Supporting the industry by developing a design guidance for computer-based procedures for field workers - 274
The paper-based procedures currently used for nearly all activities in the commercial nuclear power industry have a long history of ensuring safe operation of the plants. However, there is potential to greatly increase efficiency and safety by improving how the human interacts with the procedures, which can be achieved through the use of computer-based procedures (CBPs). A CBP system offers a vast variety of improvements, such as context driven job aids, integrated human performance tools and dynamic step presentation. As a step toward the goal of improving procedure use performance, the U.S. Department of Energy Light Water Reactor Sustainability Program researchers, together with the nuclear industry, have been investigating the feasibility of replacing current paper-based procedures with CBPs. The main purpose of the CBP research for nuclear field workers conducted at the Idaho National Laboratory was to provide design guidance to the nuclear industry to be used by both utilities and vendors. After studying existing design guidance for CBP systems, the researchers concluded that the majority of the existing guidance is intended for control room CBP systems, and does not necessarily address the challenges of designing CBP systems for instructions carried out in the field. Further, the guidance is often presented on a high level, which leaves the designer to interpret what is meant by the guidance and how to specifically implement it. The authors developed a design guidance to provide guidance specifically tailored to instructions that are carried out in the field based. (authors)
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
A HUMAN AUTOMATION INTERACTION CONCEPT FOR A SMALL MODULAR REACTOR CONTROL ROOM
Many advanced nuclear power plant (NPP) designs incorporate higher degrees of automation than the existing fleet of NPPs. Automation is being introduced or proposed in NPPs through a wide variety of systems and technologies, such as advanced displays, computer-based procedures, advanced alarm systems, and computerized operator support systems. Additionally, many new reactor concepts, both full scale and small modular reactors, are proposing increased automation and reduced staffing as part of their concept of operations. However, research consistently finds that there is a fundamental tradeoff between system performance with increased automation and reduced human performance. There is a need to address the question of how to achieve high performance and efficiency of high levels of automation without degrading human performance. One example of a new NPP concept that will utilize greater degrees of automation is the SMR concept from NuScale Power. The NuScale Power design requires 12 modular units to be operated in one single control room, which leads to a need for higher degrees of automation in the control room. Idaho National Laboratory (INL) researchers and NuScale Power human factors and operations staff are working on a collaborative project to address the human performance challenges of increased automation and to determine the principles that lead to optimal performance in highly automated systems. This paper will describe this concept in detail and will describe an experimental test of the concept. The benefits and challenges of the approach will be discussed.
99 GENERAL AND MISCELLANEOUS↗
Operators Working with Transmission Flexibility: Enhancing Utility Control Rooms with Dynamic Line Rating Technique
This paper reflects generally on the human factors approach of integrating the Dynamic Line Rating (DLR) technique into power utilities control room as well as other monitoring systems, investigates how to accommodate transmission operators’ needs and incorporate the new technology into a control room regarding these needs.
17 WIND ENERGY↗
Design Guidance for Computer-Based Procedures for Field Workers
Nearly all activities that involve human interaction with nuclear power plant systems are guided by procedures, instructions, or checklists. Paper-based procedures (PBPs) currently used by most utilities have a demonstrated history of ensuring safety; however, improving procedure use could yield significant savings in increased efficiency, as well as improved safety through human performance gains. The nuclear industry is constantly trying to find ways to decrease human error rates, especially human error rates associated with procedure use. As a step toward the goal of improving field workers’ procedure use and adherence and hence improve human performance and overall system reliability, the U.S. Department of Energy Light Water Reactor Sustainability (LWRS) Program researchers, together with the nuclear industry, have been investigating the possibility and feasibility of replacing current paper-based procedures with computer-based procedures (CBPs). PBPs have ensured safe operation of plants for decades, but limitations in paper-based systems do not allow them to reach the full potential for procedures to prevent human errors. The environment in a nuclear power plant is constantly changing, depending on current plant status and operating mode. PBPs, which are static by nature, are being applied to a constantly changing context. This constraint often results in PBPs that are written in a manner that is intended to cover many potential operating scenarios. Hence, the procedure layout forces the operator to search through a large amount of irrelevant information to locate the pieces of information relevant for the task and situation at hand, which has potential consequences of taking up valuable time when operators must be responding to the situation, and potentially leading operators down an incorrect response path. Other challenges related to use of PBPs are management of multiple procedures, place-keeping, finding the correct procedure for a task, and relying on other sources of additional information to ensure a functional and accurate understanding of the current plant status (Converse, 1995; Fink, Killian, Hanes, and Naser, 2009; Le Blanc, Oxstrand, and Waicosky, 2012). This report provides design guidance to be used when designing the human-system interaction and the design of the graphical user interface for a CBP system. The guidance is based on human factors research related to the design and usability of CBPs conducted by Idaho National Laboratory, 2012 - 2016.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Investigating the Relationship between Need for Cognition and Skill in Ethical Hackers
As technology gets more complex and increasingly connected, there is an increasing concern with cyber security. There is also a growing demand for cyber security professionals. Unfortunately there currently are not enough skilled professionals to meet that demand. In order to prepare the next generation of cyber security professionals to meet this demand, we need to understand what characteristics make skilled cyber security professionals. For this work, we focus on professionals who take an offensive approach to cyber security, so called ethical hackers. These hackers utilize many of the same skills that the adversaries that we defend against would use, with the goal of identifying vulnerabilities and address them before they are exploited by adversaries. A commonly held belief among ethical hackers is that hackers must possess exceptional curiosity and problem solving skills in order to be successful. Curiosity is has been studied extensively in psychology, but there is no consensus on what it is and how to measure it. Further, many existing inventories for assessing curiosity are targeted at measuring curiosity in children. Although there isn’t an accepted standard to assess curiosity in adults, a related construct, called Need for Cognition (may capture what is meant when people speak of curiosity. The Need for Cognition scale also captures the tendency toward preferring complex problems (which correlates with good problem solving skills), which may provide insight into what make skilled hackers. In addition to the Need for Cognition, we used a structured interview to assess hacker skill. Hackers rated their own skill on a scale from one to ten on a predefined list of hacker skills. They were then asked to rate a peer who they felt was most skilled in each of the skills. They were asked to rate two peers for each skill, one that they worked with directly and one person that was the most skilled in the field (these could be known by reputation only). The hypothesis is that hackers have a higher than average (i.e., compared to non-hackers) Need for cognition and that Need for Cognition will be positively correlated with self-reported and peer reported skill. We interviewed 20 cyber security researchers who specialize in offensive approaches. Based on the responses to the hacker skill inventory, we generated a self-reported skill score for each participant. We also developed a peer-rating for each participant based on the number of times each individual that was interviewed was named as the most skilled in a particular area. The results indicate that the sample of ethical hackers has a high Need for Cognition and that Need for cognition was related to both self-reported skill and peer-reported skill. The results are discussed in the context of training and recruitment of cyber security professionals.
99 GENERAL AND MISCELLANEOUS↗
Supporting the future nuclear workforce with computer-based procedures
Here we see that computer-based tools have dramatically increased ease and efficiency of everyday tasks. Gone are the days of paging through a paper catalog, transcribing product numbers, and calculating totals. Today, a consumer can find a product online with a simple search engine, and then purchase it in a matter of a few clicks. Paper catalogs have their place, but it is hard to imagine life without on-line shopping sites. All tasks conducted in a nuclear power plant are guided by procedures, which helps ensure safe and reliable operation of the plants. One prominent goal of the nuclear industry is to minimize the risk of human errors. To achieve this goal one has to ensure tasks are correctly and consistently executed. This is partly achieved by training and by a structured approach to task execution, which is provided by procedures and work instructions. Procedures are used in the nuclear industry to direct workers' actions in a proper sequence. The governing idea is to minimize the reliance on memory and choices made in the field. However, the procedure document may not contain sufficient information to successfully complete the task. Therefore, the worker might have to carry additional documents such as turnover sheets, operation experience, drawings, and other procedures to the work site. The nuclear industry is operated with paper procedures like paper catalogs of the past. A field worker may carry a large stack of documents needed to complete a task to the field. Even though the paper process has helped keep the industry safe for decades, there are limitations to using paper. Paper procedures are static (i.e., the content does not change after the document is printed), difficult to search, and rely heavily on the field worker’s situational awareness and ability to consistently meet the high expectation of human performance excellence. With computer-based procedures (CBPs) that stack of papers may be reduced to the size of a small tablet or even a smart phone. Instead of manually matching equipment identification numbers listed in the procedure with the number on the physical equipment the field worker can simply scan a barcode to ensure the correct valve is opened while simultaneously creating a record. Instead of navigating through a maze of cross-references, CBPs enable intelligent work path navigation which accounts for past decisions and observation, thereby enabling more efficient and safe task completion.
47 OTHER INSTRUMENTATION↗