Systems-Theoretic Hazard Analysis of Digital Human-System Interface Relevant to Reactor Trip
Slides for 2021 ANS-NPIC-HMIT conference
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
SEARCH · Engineering Papers
Results for “human-systems interface”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Human-System Interface Design Review Guidelines
The U.S. Nuclear Regulatory Commission (NRC) staff reviews the human factors engineering (HFE) aspects of nuclear power plants in accordance with the Standard Review Plan (NUREG-0800, Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants: LWR Edition). The Human Factors Engineering Program Review Model (NUREG-0711, Revision 3, issued November 2012) contains detailed design review procedures. As part of the review process, the interfaces between plant personnel and the plant's systems and components are evaluated for conformance with HFE guidelines. This document, Human-System Interface Design Review Guidelines (NUREG-0700, Revision 3), provides the guidelines necessary to perform this evaluation. The review guidelines address the physical and functional characteristics of human-system interfaces (HSIs). Because these guidelines only address the HFE aspects of design and not other related considerations, such as instrumentation and control and structural design, they are referred to as HFE guidelines. In addition to the review of actual HSIs, the NRC staff can use the NUREG-0700 guidelines to evaluate a design-specific HFE guidelines document or style guide. The HFE guidelines are organized into four basic parts, which are divided into sections. Part I contains guidelines for the basic HSI elements: information displays, user-interface interaction and management, and analog displays and controls. These elements are used as building blocks to develop HSI systems to serve specific functions. Part II contains the guidelines for reviewing the following HSI systems: alarm system, safety parameter display system, group-view display system, soft control system, computer-based procedure system, automation system, and communication system. Part III provides guidelines for the review of workstations and workplaces. Part IV provides guidelines for the review of HSI support (i.e., maintainability of digital systems and degraded HSI and instrumentation and control conditions).
42 ENGINEERING↗
Advanced Human-System Interface Risk Analysis Based on Redundancy-guided Systems-theoretic Hazard Analysis and Human Reliability Analysis
Human-system interfaces (HSIs) play an important role in enabling operators to communicate with the nuclear power plant (NPP) side. Getting the information required to understand a NPP’s current status or perform necessary actions for responding to a given operational context are representative operator tasks performed using HSIs. To date, HSIs have been mainly evaluated in the context of human reliability analysis (HRA). However, the current HSI evaluation that occurs during HRA may be challengeable on two fronts: (1) reflecting the unique characteristics of HSI systems and (2) considering situations in which HSIs are poorly operated due to software/hardware malfunctions. Accordingly, this study proposes an approach for specifically evaluating HSIs for digital instrumentation and controls (DI&C) systems, using Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) and HRA. RESHA is a method for analyzing DI&C systems with redundancy features. In this study, we investigate how HSIs are evaluated in existing HRA methods, and what challenges exist in the current approaches. To better evaluate HSIs for DI&C systems, this study modifies the existing HSI evaluation process by additionally modeling the HSI back- and front- ends. In this paper, a HSI fault tree for the APR1400 DI&C system is introduced through a piping and instrumentation diagram. It then touches upon what aspects of the suggested method must be further researched.
99 GENERAL AND MISCELLANEOUS↗
Human-System Interface Style Guide for ACORN Digital Control System
The purpose of this style guide is to assist developers in designing effective and consistent-looking user interfaces for accelerator control rooms. A similar purpose is to help developers avoid the creation of user interfaces that needlessly stray from the accepted standard set forth in this document. This way, all interfaces combined will look congruous. This is especially beneficial for development that spans multiple years by many different contributors. This document is intended as a ready reference source for all user interface design for the Fermilab accelerator complex.
43 PARTICLE ACCELERATORS↗
Human-system Interface Style Guide for ACORN Control System
The purpose of this style guide is to provide a clear, consistent framework for the design and development of human system interfaces (HSIs) used throughout the Fermilab accelerator complex. It establishes a shared visual and interaction foundation to ensure that interfaces remain intuitive, effective, and cohesive, regardless of when or by whom they are developed. By adhering to these guidelines, developers can avoid introducing unnecessary deviations that compromise usability or increase system training burden. This consistency is especially critical in long-term, multi-contributor projects where interface continuity and maintainability are paramount. This document serves as a practical reference for all HSI development activities related to the accelerator control environment. While the guidance provided is comprehensive, it is not exhaustive of every potential design scenario. As such, the style guide is intended to function as a living document, subject to regular review and revision. Updates will be made at least annually to incorporate emerging best practices, operational feedback, and evolving system needs. Areas where detailed guidance is still under development are clearly indicated in gray throughout the document and will be addressed in future revisions according to project priorities.
Hill, Rachael [Idaho Natl. Lab.] (ORCID:0000000263↗
Preliminary Evaluation of Joint Electricity-Hydrogen Concept of Operations
An initial thermal power dispatch (TPD) concept of operations was evaluated that couples a nuclear power plant to a nearby hydrogen production plant. GSE Systems’ generic pressurized water reactor full-scope simulator was modified with a TPD model comprised of a thermal power extraction and delivery system. A prototype human-system interface (HSI) was developed to interact with the TPD model and allow participants to execute the basic operating scenarios for normal operations. Four retired operators performed the evaluation, and due to COVID-19 travel restrictions, the original in-person experimental design was restructured to support a remote participator evaluation using a web meeting platform. Data from operator feedback, observations from the research team, and quantitative survey responses revealed that the initial TPD concept of operations is feasible. The operators were comfortable with the engineered system and HSI and could manage it without adverse impacts to reactor power, plant safety, or equipment. Findings are discussed in terms of both the TPD system design and HSI performance.
human factors↗
Human Factors Design for Particle Accelerator Control Room Interfaces
Fermilab, the birthplace of many scientific discoveries in physics and particle accelerator sciences, is in the midst of a widescale modernization effort. The Accelerator Control Operations Research Network (ACORN project’s goal is to modernize the accelerator control system by replacing end-of-life power supplies and enhance future operations of the Fermilab accelerator complex with megawatt particle beams. Within ACORN, opportunities for process improvement concerning software development, human-system interface design, and task performance are also being considered. Human factors researchers from Idaho National Laboratory in collaboration with usability experts from Fermilab, are currently investigating human-centered design improvements for the accelerator control system. For example, substantial tribal knowledge and memory recall are required to effectively operate the accelerator system. This contributes to high cognitive workload and potential burnout of accelerator operators. Developing guidance for consistent visual and functional design enables a more intuitive interaction and relieves operators of cognitive burden. Additionally, developing more intuitive and integrated interfaces can also lead to improved accelerator efficacy by empowering operators with greater understanding and control of the systems. The challenge in developing such interfaces is in designing for a wide variety of user goals, system specifications, and level of experience in users. The challenges need to be met while e also considering the maintainability of the control system. The purpose of this paper is to detail the human factors process and design within the ACORN project, describe results gathered thus far, and discuss the larger implications for this work.
43 PARTICLE ACCELERATORS↗
A Tool for Performing Link Analysis, Operational Sequence Analysis, and Workload Analysis to Support Nuclear Power Plant Control Room Modernization
Nuclear power continues to have an imperative role for the U.S.’s electricity generation. However, for these nuclear power plants (NPPs) to remain economically viable, new strategies for reducing operations and maintenance costs must be explored. The U.S. Department of Energy Light Water Reactor Sustainability Program is researching how to digitally transform existing analog and hybrid main control rooms into a fully integrated control room that addresses this challenge. The transformation will fundamentally change the conduct of operations for these U.S. NPPs. Human factors engineering has a vital role in this effort, where traditional task analysis methods are important in informing the design of advanced human-system interface displays. This work describes a preliminary tool to support task analysis for the development of these advanced displays. Details on the use of this tool, including the specific task analysis methods offered, are presented in this paper.
99 GENERAL AND MISCELLANEOUS↗
Development of an Assessment Methodology That Enables the Nuclear Industry to Evaluate Adoption of Advanced Automation
Nuclear power has a crucial role in providing safe, reliable, and economical carbon-free electricity for today and the future. For continued operation, many of the existing United States nuclear power plants will begin the subsequent license renewal process for extending their operating license periods. As plants extend their expected operating lifetimes, there is a significant opportunity to modernize. These plants have a much stronger business case with these extended mission periods to modernize and significantly enhance their economic viability in current and future energy markets by implementing digital technologies that support innovation, efficiency gains, and business-model transformation. Ensuring continued safety and reliability is crucial. Transformative digital technologies—including automation—that fundamentally change the concept of operation for the nuclear power plant operating model requires a critical focus on the human and technology integration element. Further, the nuclear industry has historically been reluctant to modernize due to having a risk adverse culture and lack of clarity for a transformative new state vision (Joe & Remer, 2019; Thomas et al., 2020). Common barriers include (1) the perceived value and return on investment (ROI) of digital technology, (2) the perceived risk associated with licensing, regulatory, and cybersecurity, and (3) insufficient guidance for performing digital modifications to power generation systems. This work presents a methodology to address these barriers and support the industry in adopting advanced automation and digital technology through developing a transformative vision and implementation strategy that will address the human and technology integration element. This research leverages previous LWRS Program and industry results. It draws specifically on previous LWRS Program research in the areas of advanced alarm systems, computer-based procedures, model informed decision support, and advanced human-system interface displays (e.g., overviews and task-based). The modernization methodology can be used to guide transformative thinking when integrating a set of vendor-specific capabilities to support a new concept of operations and a utility’s end-state vision. The results of this research are organized into six major sections: - Section 1 introduces the need for supporting large-scale digital modifications that will renew the technology base for extended operating life beyond 60 years - Section 2 describes the challenges that the nuclear industry is enduring with modernizing. - Section 3 summarizes the primary standards and guidance. - Section 4 presents earlier work from the LWRS Program regarding the development of a transformative conceptual design for an advanced control room of a hybrid plants. - Section 5 presents a methodology that is designed at addressing the challenges in the industry today in achieving a transformative new state vision and concept of operations. - Conclusions and next steps of this research are provided in Section 6.
99 GENERAL AND MISCELLANEOUS↗
Dynamic Human-in-the-Loop Simulated Nuclear Power Plant Thermal Dispatch System Demonstration and Evaluation Study
An Idaho National Laboratory research team performed a human-in-the-loop study with two formerly licensed retired operators to evaluate thermal power dispatch operations supported by the modified GSE Systems GPWR plant simulator. Virtual representations of the analog control panels were presented on touch-screen bays configured to mimic the control room layout in the newly renovated Human Systems Simulation Laboratory. The operators performed 15 scenarios covering normal evolutions to transition the plant from full turbine operation to joint turbine and thermal power dispatch operations in addition to transient response scenarios induced with simulated faults to evaluate the impact of thermal power dispatch system on operator and plant responses. A prototype human-system interface (HSI) was developed and displayed in tandem with the virtual analog panels to support the operators executing the procedurally drive evolutions and transient responses. An interdisciplinary team of operations experts, nuclear engineers, and human factors experts observed the operators performing the scenarios to evaluate the operations. Only a preliminary analysis of the results has been performed. The full analysis will be shared in a milestone report scheduled for release at the end of September; however, some high-level conclusions were readily available. Two high level findings for the system design were captured in the study. The manual control supported by the HSI to transition from standard operations to thermal power dispatch operation imposed a considerable amount of workload on the operators due to tedious manual valve manipulations and system monitoring required to verify their intended effect. An additional operator would be required in the control room to support the daily evolution. Automatic control for the transition was deemed a requirement for plant adoption without imposing additional staffing costs. The second finding was the necessity for an automatic thermal power dispatch system trip isolation function linked to a turbine and reactor trip signal. The operators completed scenarios with automatic isolation functionality and manually required actuation of the thermal power dispatch system. The operator response was sufficiently slower in the manual trip condition, such that operators were unable to manually actuate key post trip safety functions an indicate a degraded control capability that should be avoided. With an automatic trip signal little to no impact of the thermal power dispatch system was identified on the primary plant response and therefore the system could be readily and safely adopted. Together these two findings represent the need to support the adoption of thermal power dispatch capability into existing operations by leveraging automation to augment any additional operator tasking required to control and monitor an additional system beyond existing operations.
99 GENERAL AND MISCELLANEOUS↗
Development and Demonstration of a Reduced-Order PWR Power Dispatch Simulator
This report describes the development, modeling, and results of a reduced-order thermal power dispatch pressurized water reactor (RO-TPD-PWR) power plant simulator that incorporates coupled electrical and thermal power dispatch to an industrial process. The simulator is built on models that have been developed in previous work, including a Rancor Microworld model previously developed by INL and the University of Idaho [Ref] and reactor core and secondary system models that have been published previously [Ref]. The simulator also includes a scalable model of a high temperature electrolysis (HTE) system that has been developed at INL. A particular benefit of the Rancor Microworld model is that it is compatible with a human-system interface (HMI) that has already been developed by the Human System Simulation Laboratory (HSSL) at INL that can emulate the control room of a PWR for realistic human-in-the-loop studies with mock nuclear power plant operating procedures. The results of these human-in-the-loop tests will be compared with similar tests using a commercial full-scope generic PWR (GPWR) simulator that has been modified to include thermal power dispatch, referred to as the TPD-GPWR [ , ]. The simplicity of the RO-TPD-PWR helps to better understand and verify the results of the TPD-GPWR, which employs >1,000 variables and has much greater complexity. A second key purpose of the RO-TPD-PWR simulator is that its relative simplicity allows it scale between lab-size equipment (~100 kW) and full-scale nuclear power plants (~1 GW) by adjusting only a few parameters in the models, such as fluid masses and heat exchanger areas. The RO-TPD-PWR simulator will be used to guide the controls of lab tests, so that equipment in those tests, such as the Thermal Energy Distribution System (TEDS) and pilot-scale high temperature electrolysis (HTE) units at scales of 50-250 kW, may operate in a manner that is relevant to full-scale PWR operations.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Bridging the Gap Between Modern UX Design and Particle Accelerator Control Room Interfaces
Accelerator control systems often represent relatively complex and safety-sensitive human-machine interfaces within process control industries. These systems are technically robust and reflect the cumulative integration of solutions built and adapted across decades. One of the regular, unfortunate casualties of provisional accelerator control system updates is their human-system interfaces (HSIs) which often lag behind modern usability and design standards. An additional challenge is that although there is a multitude of established human factors (HF), and user experience (UX) principles for everyday digital applications, there are very few (if any) established principles for complex and safety-critical applications for an accelerator. This paper argues for the importance of established HF and UX principles (herein referred to as human-centered design principles) into the development of accelerator HSIs, emphasizing the need for clarity, consistency, responsiveness, and cognitive accessibility. Drawing from HF/UX best practices and human-centered design, this paper discusses how these approaches can enhance operator performance, reduce human error, and improve accelerator personnel collaboration. Case studies from Accelerator Control Operations Research Network (ACORN) at Fermilab are explored to demonstrate how interfaces built with human-centered design principles can scale with system complexity while remaining intuitive and efficient for diverse user roles including operators, machine experts, and engineers. By bridging the gap between traditional control system design and modern human-centered design methods, this paper provides a roadmap for evolving accelerator HSIs into more usable, maintainable, and effective tools.
Hill, Rachael [Idaho Natl. Lab.]↗
Rancor-HUNTER: Using a Simulator Engine for Realistic Human Performance Modeling of Nuclear Power Operations
The Human Unimodel for Nuclear Technology to Enhance Reliability (HUNTER) is a software system to simulate human performance in support of human reliability analysis (HRA) in nuclear power plants. This paper summarizes recent work to integrate HUNTER with a plant simulator, namely the Rancor Microworld Simulator. Rancor is an offshoot of earlier work at Idaho National Laboratory (INL) to support plant modernization. The graphical software tools used to mimic digital human-system interface upgrades at INL’s Human Systems Simulation Laboratory were linked to the Rancor Microworld Simulator, an INL-developed simplified plant model. HUNTER becomes a “virtual operator” coupled to the Rancor simulator, thereby allowing a tight coupling between a digital human twin and a digital twin of the plant. Rancor-HUNTER may be run through Monte Carlo iterations across a dynamic range of performance shaping factors, thereby producing distributions of human performance in terms of procedure paths, errors instantiations, and task durations. This paper overviews the various unique features of Rancor-HUNTER and presents an example run of Rancor-HUNTER for a startup scenario.
99 - GENERAL AND MISCELLANEOUS↗
Visual Style Elements in Human–System Interface Design for Nuclear Power Operations: Does Style Affect Performance and Preference?
As the world increasingly adopts renewable and sustainable energy systems, transitionary solutions include nuclear power, which currently provides 20% of the United States’ electricity and is the largest single source of carbon-free electricity generation. Advanced reactors are a critical component of a carbon-free mixed energy portfolio that require careful design of first-of-a-kind control rooms. The application of Human Factors Engineering (HFE) is essential for scientific and iterative testing of novel human–system interface (HSI) concepts to ensure effective, efficient, and safe plant operations. Microworlds are simulators that use simplified physics models and control systems to distill nuclear power operations into essential functions. HFE scientists used the Rancor Microworld Simulator to obtain preference and performance metrics for novel and traditional static HSI design styles. Participants comprised advanced reactor company employees and nuclear industry consultants. A mixture of quantitative and qualitative data was captured. There was a preference for the basic graphical style that included high contrast and traditional color scheme elements. No single HSI design outperformed the others, and the participants did not perform better using their preferred HSI style. We report this experiment is the first in a series of HFE testing for HSIs in advanced reactor control room development. Clear user preferences emerged for elements within static displays. The cutting-edge neumorphic style was the least preferred. Future directions include tests of dynamic displays. HFE is used in evaluating and designing HSI devices that will improve the efficiency and safety of advanced nuclear power operations.
99 GENERAL AND MISCELLANEOUS↗
Digitalization Guiding Principles and Method for Nuclear Industry Work Processes
The commercial U.S. light-water reactor fleet has been operating at historical efficiency, reliability, and safety over the last decade. Nuclear power has the highest capacity factor of any other power generation technology while also serving as the largest baseload source for carbon-free energy. Despite this remarkable achievement, continued operations for many plants are threatened due to fierce electricity market competition and rising operations and maintenance costs of which continued maintenance of obsolete analog equipment is a contributor. The digital age and associated technologies are where the future lies in process control, and nuclear has yet to take full advantage of the capabilities offered therein. The Light Water Reactor Sustainability Program (LWRS) at Idaho National Laboratory (INL), sponsored by the Department of Energy, has a mission to help the light-water reactor fleet manage its foundational capabilities to continue providing safe and reliable carbon-free power. LWRS helps support that mission by providing scientific, technology-based solutions for advanced concepts of operations with a more viable business model that will allow the fleet to continue to operate at peak levels through extended plant operation. The LWRS Digitalization Project at INL seeks to leverage digital technologies to synthesize and transform work processes. We provide a state-of-the-art analysis of digitalized work processes in nuclear power and investigate ways in which researchers at INL and the nuclear industry can work together to identify what data to access, how to access it, what to do with the data, and most importantly, how to use the insights for decision-making across all levels within the business. Borne from these considerations, we present four guiding principles for digitalization: develop a coherent digitalization plan, apply human factors engineering, establish data governance, and anticipate unintended consequences. Together, these principles form a method that plants can use to effectively to digitalize nuclear industry work processes. Our guiding principles are informed by multiple knowledge sources. First, we document activities from the Work Digitalization Initiative, which was conceived as a means for nuclear organizations to help define and standardize the industry’s approach to digitalizing work. Second, we detail primary research conducted with industry professionals regarding drivers and barriers to digitalization adoption. We present survey results that demonstrate what the industry hopes to get out of digitalization and the ways that INL can continue to support the industry’s digital transformation. Third, we present a digitalization use case with industry partners NextAxiom Technology and Xcel Energy. The project objective was to transform the current condition report work process from paper to digital, incorporating digitalized principles. We report the development of the application and lessons learned. The accomplishments achieved by this research and development serve to identify critical needs for plant guidance in support of digitalization implementation and contribute to the knowledge and strategies available for utilities considering or undertaking digitalization.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Light Water Reactor Sustainability Program Plant Modernization Technical Program Plan for FY 2021
This report presents the Technical Program Plan for FY 2019 for the Department of Energy Light Water Reactor Sustainability Program – Plant Modernization research pathway. A summary of the vision and strategy is provided to explain how this program addresses key issues and barriers for modernizing instrumentation and control technologies and infrastructure in domestic nuclear power plants. The report describes the pilot projects that have been formulated to develop and validate enabling technologies over the next several years that will result in digital alternatives to the legacy analog II&C systems in place today. This will allow much needed modernization of these systems to address reliability and obsolescence problems, as well as serve as a platform for substantial operational improvement. The report further describes key project resources and cooperative relationships, including the Electric Power Research Institute, the Nuclear Energy Institute )NEI), the Institute of Nuclear Power Operations (INPO), the IFE Halden Reactor Project, the Nuclear Regulatory Commission, and industry suppliers, that are instrumental to the success of the program. The report also lists the schedule for all program products, including the titles and report numbers for all published reports under this program.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Light Water Reactor Sustainability Program Plant Modernization Technical Program Plan for FY 2021
This report presents the Technical Program Plan for FY 2019 for the Department of Energy Light Water Reactor Sustainability Program – Plant Modernization research pathway. A summary of the vision and strategy is provided to explain how this program addresses key issues and barriers for modernizing instrumentation and control technologies and infrastructure in domestic nuclear power plants. The report describes the pilot projects that have been formulated to develop and validate enabling technologies over the next several years that will result in digital alternatives to the legacy analog II&C systems in place today. This will allow much needed modernization of these systems to address reliability and obsolescence problems, as well as serve as a platform for substantial operational improvement. The report further describes key project resources and cooperative relationships, including the Electric Power Research Institute, the Nuclear Energy Institute )NEI), the Institute of Nuclear Power Operations (INPO), the IFE Halden Reactor Project, the Nuclear Regulatory Commission, and industry suppliers, that are instrumental to the success of the program. The report also lists the schedule for all program products, including the titles and report numbers for all published reports under this program.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
INVESTIGATION OF HUMAN RELIABILITY ANALYSIS METHODS FOR ANALYZING PRE-INITIATORS
As a type of human actions defined in human reliability analysis (HRA), pre-initiator refers to the human actions that may lead to the unavailability of systems, typically committed during maintenance, test, or calibration. This paper investigates representative HRA methods used for analyzing pre-initiators. The HRA methods are Technique for Human Error Rate Prediction (THERP), Korean Standard HRA (K-HRA) and Standard Plant Risk HRA (SPAR-H). In this paper, characteristics of each HRA method are compared for qualitative and quantification aspects. Two pre-initiators, i.e., a calibration task and a valve restoration task, are analyzed using the HRA methods to compare human error probabilities. Then, insights from the analysis and additional research requirements are discussed in this paper.
99 GENERAL AND MISCELLANEOUS↗