REPORTANALYSIS GUIDENUCLEAR CRITICALITY RISKS AND THEIRPREVENTION IN PLANTS AND LABORATORIESDSU/SEC/T/2010-334 - Index A

PLANTS, LABORATORIES, TRANSPORTS
AND WASTE SAFETY DIVISION
Criticality Assessment Study and Research Department

INSTITUT

PLANTS, LABORATORIES, TRANSPORTS
AND WASTE SAFETY DIVISION

DE RADlOPROTECTiONET DE SVRETÉ N U C L ~ A I R E

Cnticality Assessment Study and Research Department
BP 17, 92262 FONTENAY-AUX-ROSESCEDEX, France - Phone: (33) 01.58.35.91.65 - Fax: (33) 01.46.57.29.98

1 Requested by
Request reference
Action Sheet Number

AF10.29

Report reference

1 DSU/SEC/T/2010-334 - Index A
ANALYSIS GUIDE

CRlTlCALlTY RISKS AND THEIR PREVENTION IN PLANTS AND LABORATORIESThis report is intended to provide support for the implementation orassessment of a criticality risks analysis. After a brief description of theserisks and the principles of prevention in plants and laboratories, and areminder of the French Basic Safety Rule (BSR) No. l.3.c, it presents indiagrammatic form (i) the methodology recommended by this BSR, and (ii),for the reference fissile medium and for each criticality control mode, theparameters to be considered i n the analysis, the failures to be investigated,
and the typical scenarios associated with these failures without claiming to
be exhaustive.

This report is the translation of the French version of the nuclear criticality
guide referenced IRSNIDSUISECITIZO10- 105 - lndex A.

II

SEEN BY R.Q.S.
me:

20ti 103(

15

Naine:

Qe. L

~

Visa:

G

R e s e ~ e dfor the unit

Author(s)NainesISSUE:-~eviewer'

C. GALET

S. EVO

1. LE BARSFreeInternai[4)-

Authorisation for Issue

Laboratory or
Section

S. EVO

Unit Manager

E. LETANGIRSN director

GeneralDelegate

P. COUSINOU

Limited-IRSN 31, av. de la Division Leclerc 92260 Fontenay-aux-Roses - France Standard +33 (0)1.58.35.88.88- RCS Nanterre B 440 546 018

DSUISECITIZOIO-334 - Index A

Description or comments

KEYWORDS
Nuclear criticality, prevention, guide, analysis, basic safety rule

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

4 / 16TABLE OF CONTENT
0. FOREWORD ................................................................................................ 6
1. NUCLEAR CRITICALITY RISKS ........................................................................... 7
2. PARAMETERS AFFECTING THE NEUTRON BALANCE ................................................ 8
2.1 Neutron balance .................................................................................... 8
2.2 Production of fission neutrons .................................................................... 10
2.3 Neutron leakage .................................................................................... 11
2.4 Neutron absorption ................................................................................. 11
3. THE PREVENTION OF NUCLEAR CRITICALITY RISKS (CRITICALITY CONTROL MODES AND
REFERENCE FISSILE MEDIA) ............................................................................ 12
4. NUCLEAR CRITICALITY SAFETY ANALYSIS ............................................................ 13
5. SAFETY MARGINS AND DESIGN CRITERIA ............................................................. 14
6. LIMITING THE CONSEQUENCES OF A CRITICALITY ACCIDENT ..................................... 14
7. CRITICALITY ACCIDENT ALARM SYSTEM .............................................................. 15
8. EVACUATION............................................................................................... 15
9. RESPONDING TO A CRITICALITY ACCIDENT........................................................... 15
10. CONCLUSION: RIGOUR, COMPLIANCE WITH SAFETY PRINCIPLES, AND VIGILANCE .......... 16

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

5 / 16REFERENCES[1]

Précis de neutronique – Paul Reuss – Collection Génie Atomique – INSTN - 2003

[2]

Que sais-je ? La neutronique – Paul Reuss – Puf - 1998

[3]

LA-13638 – A Review of Criticality Accidents (2000 Revision) – Los Alamos

REFERENCE: DSU/SEC/T/2010-334

0.

INDEX: A

PAGE:

6 / 16FOREWORD

This report first describes the nuclear criticality risks and the prevention principles adopted inplants and laboratories, and reminds the French Basic Safety Rule (BSR) No. I.3.c. Diagrams
are then used to introduce (i) the methodology recommended by this BSR, and (ii), for thereference fissile medium and each criticality control mode, the parameters to be considered"conventionally" in a analysis, the "typical" failures to be investigated, and the "standard"
scenarios associated with these failures.
These diagrams, developed by IRSN and subject to change as feedback is received fromexperience in operating facilities or in implementation analyses and assessments, constitute a
guide to the analysis of nuclear criticality risks, whether this is for compiling safety
documents or for assessing them.
As regards the possibility of modifying this guide, a sheet to be used for suggesting changes,
intended for users of the guide, is provided on the last page of this report.
Lastly, this guide is nothing more than the compilation of the "conventional" and"essential" precautions for preventing nuclear criticality risks. Although these precautions
must always be kept in mind, the reader should never forget that each configuration is a
special case and that there may be scenarios that apply only to this particular case. It istherefore appropriate to remind here that all criticality accidents are the result of failures
and incident scenarios that have not been considered in the analysis.
This guide is therefore a tool which is not intended to be exhaustive, and does not replace
the necessary analysis to adapt to every situation.

REFERENCE: DSU/SEC/T/2010-334

1.

INDEX: A

PAGE:

7 / 16NUCLEAR CRITICALITY RISKS

Some nuclides, such as the uranium-235 isotope or the plutonium-239 and -241 isotopes, havethe property of being fissionable, i.e., they can split into two fragments, called fission
products. This nuclear reaction may be "spontaneous", or "induced" by a particle (for example
a neutron) interacting with the atom.
A fission reaction leads to a release of energy, the production of gamma radiations and theemission of neutrons (two or three neutrons on average) which may in turn induce new
fissions (see Figure 1). Materials composed of these elements may thus be the site of fission
chain reactions.
Figure 1: The fission reaction of 235U

Fission product 1

FISSION
NeutronRadiation: α β γ
NeutronFission product 2

Uranium 235

NeutronWhen each fission leads to an average of more than one other fission, the number of fissions,and thus the ionizing radiations, increase exponentially: we then speak of a divergent chain
reaction. If such a phenomenon occurs accidentally in a nuclear facility (a plant or alaboratory) or during the transport of fissile materials, it can expose persons in the vicinity of
the involved equipment to severe or even lethal radiations. Thus, we speak of a criticality
accident, which moreover leads to the production of fission products, including fission
products in gaseous form. These fission products may lead to a radioactive release into theenvironment which is generally of limited extent.
So, it is therefore imperative to avoid reaching conditions that could lead to a divergent
fission chain reaction (i.e., a supercritical configuration). The area of nuclear facility safety
associated with the prevention of criticality risks is commonly referred to as "nuclear
criticality safety".
The nuclear criticality risks must be considered at every stage of the fuel cycle involving
plutonium, uranium, and/or certain minor actinides (like for instance curium, americium,etc.). This includes uranium enrichment and conversion plants, plants for plutonium- and/or
uranium-based fuels manufacture, spent fuel reprocessing plants, research laboratories
involving fissile materials, effluent-treatment and waste-packaging facilities and storage andtransport of fissile materials (fuels, radioactive wastes, etc.).
It is not necessary to have a complex process or large quantities of fissile materials to initiate
a divergent fission chain reaction. About 0.5 kg of plutonium 239 or 48 kg of uranium like theones used to manufacture the fuel for PWR or BWR power plants may be enough, in a

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

8 / 16spherical geometrical configuration with the presence of water. By way of comparison, a
17 x 17 PWR fuel assembly contains more than 400 kg of uranium in a specially-designed
geometrical configuration. On the other hand, it is possible to handle relatively large
quantities of fissile materials as long as there is strict compliance with a set of parameters
ensuring that the criticality conditions will not be met.
The goal of nuclear criticality risks analysis is to define the necessary and sufficient provisions(design and operational) to avoid the triggering of a divergent fission chain reaction whenfissile materials are present.
Simply expressed, the nuclear criticality risks analysis consists of connecting (i) the possible
configurations of the fissile materials, in light of the actions that might be taken during
operations and the changes that might be caused by possible failures (error, failures of acomponent, etc.) or by accidental situations (fire, earthquake, etc.), and (ii) the margins
between these configurations and potentially critical ones. Nuclear Criticality Safety depends
on the strict control of these actions.
So, the nuclear criticality risks are mastered by preventive provisions implemented to control
the configurations in which the fissile materials are placed. These provisions are expressed inpractice by operational constraints which, for example, consist of limiting the quantities ofhandled materials, the dimensions of the equipment containing fissile materials, and/or theconcentrations of fissile materials in liquid media or by employing special materials known as
neutron absorbers (or poisons).
In addition, depending on the particular nature of facilities, criticality detection and alarmsystems may be installed to enable the prompt evacuation of personnel. However, thesesystems are triggered only after the initiation of a chain reaction and do not prevent theemission of the radiation associated with the first moments of the accident (which may lead
to lethal doses for nearby operators). On the other hand, the consequences for theenvironment of such an accident are limited in range. The releases of radioactive fission
products comprise only a few rare gases and very small amounts of iodine. Furthermore, theradiations are attenuated by walls and other radiation protection shields, and decrease when
distance increases.
The following paragraphs of this guide describe the principal features of an analysis of thenuclear criticality risks prevention.
Users of this guide may obtain more information by consulting the documents listed inreferences [1] to [3], or other sources.
2.

PARAMETERS AFFECTING THE NEUTRON BALANCE

2.1 Neutron balance
One of the most important steps in the nuclear criticality risks analysis is the definition of theworst-case configuration for the fissile material in light of the configurations to be
encountered and the actions and operations likely to occur. The identification and precise
definition of this configuration is of course dependent on an understanding of the basic
phenomena of neutronics.
The fission of the nuclide (uranium 235, plutonium 239, plutonium 241, etc.), caused by aneutron, liberates several neutrons, two or three on average. Neutronic phenomena(associated with the interactions of neutrons with matter) concern a very large number of
nuclides and involve notions of probability (or of cross-section, that is the probability ofinteraction of the neutron for a given reaction). Neutrons emitted in this way, after diffusion
into the material, have three possible fates (see Figure 2):

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

9 / 16

to be absorbed by fissile nuclides and cause new fissions (can be qualified as fissile
capture);to be absorbed by nuclides and "stay" in the nuclide, which then changes its atomic
number. In some cases, this reaction may lead to the production of a fissile nuclide, as
in the case of uranium 238, which - following several nuclear reactions - is transformed
into plutonium 239 (this is qualified as fertile capture). In most cases, the reaction
leads to the production of a non-fissile nuclide: for example, boron 10 (20% of naturalboron) which is transformed into boron 11 (this is described as sterile capture);
to escape from the concerned system (neutron leakage), for example from the tankcontaining the fissile solution.
Figure 2: Neutron balance

Leak
CaptureFissionFission

NeutronFissionFissionCaptureLeak
Leak

Thus, neutrons cause fissions which generate neutrons which in their turn cause other fissions(fissile captures), and so on. This production of neutrons, if it is not offset by a sufficient loss
(by fertile or sterile captures and/or leakage) leads to an exponential increase in the numberof neutrons and to a criticality accident.
The characteristic value of the "neutronic" state of a configuration is the balance between its
abilities on the one hand to produce neutrons by fission, and on the other hand to lose themby fertile and sterile captures and/or by leakage. This balance is expressed by the neutrons'
effective multiplication factor (usually denoted by keff), which indicates the factor by which
the number of fissions is multiplied from one generation of neutrons to the next one.

keff

N'
N

Production
Absorption Leakage

where N is the number of "neutrons fathers" (generation n - 1) having disappeared byabsorption or leakage and giving birth to N’ "neutrons sons"(generation n).
If keff < 1 (Production < Absorption + Leakage), the configuration is sub-critical; this is
the wanted safe state for nuclear facilities (excluding reactors).
If keff = 1 (Production = Absorption + Leakage), the configuration is critical; this is theequilibrium state encountered in a nuclear reactor (controlled reaction), which mustnot be reached in other nuclear facilities.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

10 / 16

If keff > 1 (Production > Absorption + Leakage), the configuration is supercritical; thisstate corresponds to a criticality accident.
This neutron balance depends both on the characteristics of the fissile medium (in particular
the physico-chemical nature and its isotopic composition which determine the fissile andfertile captures) and on the geometry of the medium (which determines the proportion ofneutrons able to escape).
For example, for uranium, the limits depend on the content of isotope 235. Thus, theminimum mass in a spherical shape that could lead to a criticality accident (under conditions
favorable to the reaction) is 0.87 kg for highly-enriched uranium (93.5% 235U), 5.2 kg for anenrichment of 20%, and 48 kg for an enrichment of 4%.
2.2 Production of fission neutrons
The production of fission neutrons depends on the quantity of fissile nuclides present in thegiven fissile medium, which will directly affect the overall probability of the capture ofneutrons by a fissile nuclide. As shown in the previous paragraph, there is a mass below which
a self-sustaining fission reaction is no longer physically possible. The criticality of a medium
may therefore be controlled by limiting the mass of fissile material.
In practice, this criticality control mode is applicable at the scale of an equipment, a glove
box, a cell, or even a whole laboratory employing small quantities of fissile materials. The
mass limits for fissile materials associated with this criticality control mode, considered byitself (i.e., not in combination with a geometry or a moderation limit), are generally
incompatible with facilities of an industrial nature.
Compliance with the mass limits associated with this criticality control mode implies theestablishment of procedures that impose strict operating constraints (fissile material
accounting, controlled transfers of materials, and control of fissile material accumulations)and has the disadvantage of being vulnerable to "human factor".
Since most fissile nuclide have a fission cross-section (equivalent to a probability of fission)that is larger for low-energy incident neutrons, any process that tends to diminish the energyof the neutrons will favour fission reactions. At their moment of "birth" following a fission,
neutrons have an energy of about two million electron volts (2 MeV) and their probability ofcapture by a fissile nuclide to produce a fission is relatively low. As they move through thematerial, the neutrons progressively lose their energy during collisions with nuclides in themedium, which increases their probability of being captured and thereby causing fissions. This
process of neutrons slowing down by diffusion without capture, during successive collisions
with the nuclides of the given medium, is called thermalization or moderation, in thetechnical jargon.
The energy lost by the neutrons during their collisions with the nuclides in the medium isgreater when these nuclides are lighter. One of the "champion" moderators is hydrogen,whose the nucleus consists of a single proton which has the same mass as a neutron. This
explains the special role played by water in the prevention of nuclear criticality risks: its
molecule contains two hydrogen atoms.
By way of illustration, in the presence of water (and therefore of hydrogen), the minimum
mass - under the most favorable conditions for reaction - able to provide a "keff" of 1 is about
0.5 kg for plutonium 239, whereas it is 4.5 kg in the absence of water. For certain fissile
materials, such as uranium enriched to at least 6.6% of isotope 235 in oxide form, simply
keeping the material rigorously free of materials containing hydrogen (or any othermoderating material) is enough to eliminate any danger of nuclear criticality, even in thepresence of large quantities of fissile material.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

11 / 16

The nuclear criticality of a material can thus be controlled by limiting the moderation, i.e.,
mainly by limiting the quantity of hydrogen.
It should be noted that other "light" nuclides such as carbon and beryllium can also provide
significant neutron moderation. However, they are less common in the fissile materials
encountered in facilities, and the required quantities are generally greater.
2.3 Neutron leakage
During their move through the material, some neutrons may escape from the fissile medium
which gave them rise. In this case, they no longer take part in sustaining chain reactions. This
neutrons leakage is favoured by:a low density of the fissile medium and the presence of nuclides (in the medium) thatinteract weakly with neutrons (in both cases, the neutrons can move greater distances
without a collision);
low average distances to be crossed by the neutrons to reach the borders of the fissile
medium.
Simply keeping the fissile material in equipment with dimensions that are small enough in atleast one direction may be enough to eliminate any nuclear criticality risk (equipment with asmall diameter, low thickness, etc.).
In this case, the nuclear criticality is controlled by limiting the geometry of the equipment.
This criticality control mode is preferred when the constraints on dimensions are compatible
with the processes. It is not sensitive to the "human factor", but must be adopted at thedesign stage of the equipment (dimensioning for earthquakes, corrosion, accidental
deformations due to increases in pressure and temperature, etc.). Note that provisions must
be taken when modifying or changing equipment, to ensure the correct geometry. Any
connections between safe geometry equipments and unsafe geometry equipments must also
be carefully controlled.
The neutrons that escape from a fissile medium continue their trajectories in the surrounding
materials and, following collisions with the nuclides of these materials, they are captured or
sent back to the fissile source medium: this latter phenomenon is called neutron reflection.
In plants, the rooms walls, the equipments walls and also persons constitute reflectors
capable of limiting neutrons leakage. The nuclear criticality safety analyses must take thisphenomenon into account.
Lastly, when several pieces of equipment containing fissile materials are close to one anothera final factor called interaction is liable to become involved. A fraction of the neutrons
escaping from a piece of equipment may enter an adjacent apparatus that also contains fissile
material, and cause fission there. This neutronic coupling thereby can increase the reactivity(or "keff") of the studied system.
2.4 Neutron absorption
The disappearance of neutrons, following non-fissile captures, leads to a decrease of the"keff", which is favourable to maintain the sub-criticality in a fissile medium. Nuclides thatare frequently encountered in fissile materials may lead to the fertile capture of neutrons andthereby limit the risk of nuclear criticality. The main examples include the uranium-238 andthe plutonium-240 isotopes (in the thermal spectrum). Their content in the fissile material, as
long as it can be guaranteed, can be taken into account in determining the reference fissile
medium (see definition § 3).
In addition, four natural elements are particularly effective for capturing neutrons (sterile
captures). These are boron (isotope 10B), cadmium, hafnium, and gadolinium (isotope 155Gd).

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

12 / 16

They are commonly used in the equipments either in a homogeneous form (dissolved in fissile
solutions) or in a heterogeneous form (as a screen) because of their neutron-absorbing
properties, to ensure that the nuclear criticality risks are averted.
The control of the nuclear criticality is then carried out by "poisoning".
Apart from these four strongly neutron absorbing materials, other nuclides may leadthemselves to sterile captures. It may be useful to consider them when determining theneutron balance. Among the common elements, we note chlorine, nitrogen, iron, etc. and incertain circumstances hydrogen. This is why aqueous solutions containing low concentrationsof fissile materials (and therefore large quantities of hydrogen) are sub-critical, even if they
are present in very large volumes, due to the "poisoning" provided by the hydrogen in thewater.
The control of the nuclear criticality is then obtained by limiting the concentration (of fissile
materials).
Hydrogen has the properties of a moderator (which can increase the reactivity) and also of aneutron absorber (which decreases it). Since the probability of a neutron being captured by anuclide increases with the moderation, the reactivity of a medium varies with the quantity ofhydrogen present and has a maximum value. This maximum is called the optimal moderation.
Lastly, for operations involving "spent" (irradiated) fuels, it is possible to take into accountthe absorption of neutrons by certain fission products, as long as their presence can be
guaranteed. Stable and non-volatile isotopes like samarium-149, samarium-152,
gadolinium-155, cesium-133, neodymium-143, rhodium-103, and molybdenum-95 makesignificant contributions to sterile captures and could be used to provide evidence of the subcriticality of a configuration. However, the validation of the basic data associated with thesefission products and the calculation biases evaluation methods incorporating them are still thesubject of considerable development work.
3.

THE PREVENTION OF NUCLEAR CRITICALITY RISKS (CRITICALITY CONTROL MODES AND
REFERENCE FISSILE MEDIA)

The previous paragraphs present multiple means to prevent the nuclear criticality risks. They
indicate that by simply limiting one or more "operating" parameters it may be possible to keepa system containing fissile materials in a sub-critical state.
These parameters may be the concentration of fissile materials in solutions, thedimensions of the equipments, or the quantities of fissile and moderating materials.
Neutron-absorbing materials (or neutron poisons) may also be used.
In a safety analysis, the first step - depending on the process, the type of fissile materials,
and the maximum flows of considered materials - consists of selecting the parameter(s) thatwill enable sub-criticality to be ensured in a particular working unit (or criticality unit1). This
step ends with the choice of a criticality control mode (geometry, mass, moderation,
concentration, poisoning) and one or more reference fissile media. In general, this choice islargely determined by the employed process, its dimensioning (capacity), but also by the needto limit the operating constraints.
The reference fissile medium is a "bounding" fissile medium which, compared to fissile media
likely to be encountered in the operating facility (in normal or abnormal conditions), leads tothe lower limits, taking into account the adopted criticality control mode. For a given part ofequipment, a reference fissile medium may differ according to the analysed scenarios(especially if these scenarios involve a change in the physicochemical form of the fissile
material).
1

A criticality unit is all or part of a facility for which overall limits are defined, in order to prevent criticality risks (common criticality
control mode)

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

13 / 16

The reference fissile medium and the criticality control mode are defined for a criticality
unit, e.g., a glove box, a set of glove-boxes, a cell, a transport container, etc.
In practice, to determine the imposed limits on the parameters associated with thecriticality control mode and the reference fissile medium, it is necessary (i) to find themost disadvantageous combination of parameters, in light of the selected scenarios
regarding nuclear criticality risks and (ii) to deduce the associated bounding safetyparameters. Parameters that are not chosen with regard to the criticality control mode
may take any credible value.
The determining of a criticality control mode, a reference fissile medium, and a criticality
unit then automatically leads to the implementation of adapted means of control to comply
with the parameter limits associated with the criticality control mode (weighings to check themass, chemical analyses to check the concentration, acidity measurements to avoid any
precipitation, etc.).
4.

NUCLEAR CRITICALITY SAFETY ANALYSIS

A nuclear criticality safety analysis considers not only the so-called normal operating
conditions, but also the conceivable malfunctionings. In this regard, the Basic Safety Rule
(BSR) No. I.3.c constitutes the reference methodology in France for the prevention of nuclear
criticality risks, both for the designers and the operators of facilities.
This BSR states as general principle, called “double contingency", that a "criticality accident
should in no case result from a single anomaly: failure of one component or one function, ahuman error (e.g., non-compliance with an instruction), an accident situation (e.g., fire)" ...
and that "if a criticality accident can result from the simultaneous appearance of two
anomalies, it shall then be demonstrated that:the two anomalies are strictly independent of each other,
the probability of occurrence of each of the two anomalies is sufficiently low,each anomaly is identified by appropriate, reliable monitoring systems, within an
acceptable time-frame that allows response ."This BSR further recommends that, for each criticality unit (working unit, etc.), the criticality
control mode, the reference fissile medium, and the provisions concerning each of them be
set out, and be consistent with the failures analysis carried out in accordance with the abovementioned " double contingency" principle.
The text of this BSR is included in Appendix 1.
The block diagrams (based on the principles defined in the BSR ) included in Appendix 2:summarize the analytical approach of BSR No. I.3.c;present, for the reference fissile medium and for each criticality control mode:othe associated parameters,othe types of failure to be analyzed and, according to the current state-of-theart, the corresponding incidental scenarios.

These diagrams constitute a guide to the analysis of nuclear criticality risks, whether this isfor compiling safety documents or for assessing them. They are developed by IRSN and subject
to change as feedback is received from experience in facilities operating or in analyses andassessments of nuclear criticality risks implementation. They are presented as a list of
standard questions that should be raised by the criticality expert, but are not intended to be
exhaustive.

REFERENCE: DSU/SEC/T/2010-334

5.

INDEX: A

PAGE:

14 / 16

SAFETY MARGINS AND DESIGN CRITERIA

Safety margins are essential for ensuring the safety of facilities. In the case of nuclear
criticality risks, the safety analysis must therefore define the upper safety values for eachparameter, the critical state constituting a limit that must never be reached.
It is not possible to make the simplistic assumption that this safety margin can be expressed
only by an "administrative" margin, predefined between the maximum value of the effective
multiplication factor ("keff") of the studied configuration and the value 1 (corresponding to
the critical state). The "keff" associated to some fissile materials can indeed vary very rapidly
as a function of certain parameters. This applies for instance to materials comprising
plutonium or highly-enriched uranium.
For this reason, the BSR does not give any regulatory criterion for a specific numerical safetymargin that must be applied with regard to the "keff" value. The assessment of the safetymargins for a configuration or a situation mainly addresses four criteria:-

an evaluation of the sensitivity of variation of the "keff" to the considered parameters,-

the level of conservatism involved in calculation model (simplifications of the geometry,the composition, the reflector, and the moderating material),-

the more or less probable nature of the scenario corresponding to the bounding situation
adopted for the incidental and accidental (abnormal) situations,-the level of confidence in the employed calculations techniques (here the BSR refers to avalidation based on experiments).

The validation of the used calculation packages must be closely examined when theconfiguration being studied has a relatively high "keff". This is mainly based on comparisons ofcalculations with experiments. The obtained differences are then interpreted to determine
the origin of the observed biases (approximations, calculation options, nuclear data) and thento transpose them to the actual configurations under consideration. For this, it is necessary toassess the representativity of selected experiments from the industrial configuration ofinterest. The determined bias is highly dependent on the representativity of the selected
experiments and on the quality of these experiments, the experimental values always having
an uncertainty associated to them.
The acceptability criteria and the criticality parameters must then be established in light ofthe status of the validation of these calculation packages for the studied configurations. Thiscan potentially incorporate "fixed" margins that the expert considers adequate.
6.

LIMITING THE CONSEQUENCES OF A CRITICALITY ACCIDENT

The provisions to avoid nuclear criticality risks in a facility make an uncontrolled divergencehighly unlikely. Nevertheless, in view of the employed fissile materials, a criticality accident
is still physically possible (if several provisions are no longer effective).
About sixty criticality accidents have occurred worldwide since 1945. About forty of these
accidents took place in research reactors or in laboratories on "critical assemblies". Twentytwo accidents have occurred so far in fuel cycle facilities, in spite of safety margins that are
inherently larger in this type of facility. These accidents have not caused any significant
releases of radioactivity into the environment, but their substantial irradiations quickly led totwenty deaths, ten of them in fuel-cycle facilities.
Another special feature of criticality accidents is their duration, which ranges from sometenths of second to several dozen hours. In some cases, special actions (injection of a neutron
poison, etc.) had to be undertaken to bring the accident to the end.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

15 / 16

Depending on the particular nature of the facility, it is necessary to take additional provisions
aimed at limiting as far as possible the consequences of a possible accident, especially for the
personnel working in the facilities and for persons liable to be in the vicinity (public andresponse staff). These provisions are structured around three main actions: detection of theaccident, organization of a prompt evacuation of the involved personnel, and if necessary,
response to end the accident.
7.

CRITICALITY ACCIDENT ALARM SYSTEM

Because of the kinetics, there is no initiating event of a criticality accident. Detection
systems therefore use the emission of an important flux of neutrons and /or gamma ray at the
beginning of a criticality accident. As a result, these systems do not allow to avoid theconsequences associated with the beginning of the criticality accident which are potentiallylethal for operators located nearby.
In France, the criticality accident alarm systems are based on groups of detectors, or sensors,that measure the total (neutron + gamma) dose rate, and a processing cabinet of thesemeasurements, which operates sound and light alarms specifically associated with a criticality
accident. These alarms are triggered as soon as the total dose and the dose rate reachpredetermined thresholds. The detectors have been designed so as to minimize the risk offalse alarm and are moreover able to provide informations about the criticality accident(development over time, evaluation of doses, etc.) that can be used for the emergency
response.
8.

EVACUATION

Limiting the radiological consequences of a criticality accident depends greatly on the prompt
evacuation of the concerned area. The personnel must therefore have been trained toevacuate the site to assembly points, following routes defined and marked out in advance.
Optimization of the locations of detectors and evacuation routes results from a study ofcriticality accident scenarios specific to each facility.
9.

RESPONDING TO A CRITICALITY ACCIDENT

Experience acquired from various criticality accidents, in particular the most recent, which
occurred in 1999 in Japan, shows that in the absence of a rapid spontaneous shutdown it may
be necessary to respond to stop an accident. This response may consist of "poisoning" themedium by adding a solution or powder containing neutron-absorbing substances, transferring
the involved fissile medium into a geometry that ensures a sub-critical state, eliminating aneutron reflector (by draining the water in the cooling system in the case of the Tokaï Mura
accident), etc.
Responding to feedback from the Tokaï Mura criticality accident, the French safety authorities
have asked the operators of facilities exposed to the nuclear criticality risks to review theresources available to them for detecting an accident, and to state the resources that can beused to stop it.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

PAGE:

16 / 16

10. CONCLUSION: RIGOUR, COMPLIANCE WITH SAFETY PRINCIPLES, AND VIGILANCEManagement of criticality risks in nuclear facilities is obtained by imposing strict limits on
certain clearly-identified control parameters. These limits are defined by the exhaustive
study of criticality conditions in all equipments liable to contain fissile materials in normal
and abnormal (degraded, incidental and accidental) operating conditions, taking into accounttheir specific environments.
The bounding parameters for these safety studies and the configurations examined must be
determined in accordance with the "double contingency" principle set out in Basic Safety Rule
No. I.3.c.
The criticality calculations tools have reached a high degree of precision through the progressachieved in the neutron-processing models and in our understanding of basic nuclear data.
They now enable identification of the optimum safety conditions for the majority ofsituations, without undue approximations. Development and validation work currently inprogress seek to further improve their precision, for example for calculations concerning
spent fuels, to provide a better evaluation of safety margins and, in the case of operators andmanufacturers, to optimize the nuclear criticality safety constraints in technical andeconomic terms.
However, one of the requirements of very detailed calculations models is the need to provide
a more specific justification for the validation of criticality calculation packages. Thisjustification often runs up against a lack of criticality experiments relevant to the applicationin question. Research programs developed by the IRSN are directed towards a better
validation of the available calculations tools.
In any event, the criticality calculations results must be used only as supports for nuclear
criticality assessments, and must always be seen in perspective and carefully applied.
Finally, regardless of the effort put into the design of the facilities, it should not be forgottenthat the nuclear criticality risks prevention is ensured by people !
Failures in the "human chain" observed during criticality accidents around the world show, in
this regard, throughout the importance of training and organization in controlling nuclear
criticality risks, and the importance of vigilance on the part of every actor, i.e., of the goodsafety culture.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 1: 1 / 6

French Basic Safety Rule No. I.3.c2(October 18th, 1984)
Volume I: Overall concept and general principles applicable to the whole of facility;
Chapter 3: Regulations applicable to the prevention of risks due to ionizing radiations;c) Criticality risks.
Area of application: Nuclear facilities other than nuclear reactors.
The criticality-safety depends on the implementation of systematic and rational prevention
techniques organized on the principle of "defense in depth". It’s based specifically on theprinciple that a criticality accident should in no case result from a single anomaly. All theregulatory recommendations of a general nature, applicable to the criticality risks prevention
in laboratories and facilities other than nuclear reactors are subject to the publication of abasic safety rule whose text is reproduced below.
I-

Purpose of the ruleThis rule is intended to set out the provisions taken to avoid the risk of a criticality accident
in nuclear facilities (other than nuclear reactors) in which fissile materials are handled. Fromthese facilities, we can mention uranium-enrichment facilities, fuel fabrication facilities,
spent-fuel reprocessing facilities, fuel storages, etc. Excluded from the provisions of this rule
are facilities or parts of facilities, in which only uranium with no more than one percent ofisotope 235 is used, as long as this uranium is not in the form of a system of rods arranged ingraphite or in ordinary water or in water enriched in heavy water. Also excluded, facilities orparts of facilities in which only fuel elements composed of uranium with an isotope 235
content smaller than one percent are handled, as long as these elements have not been
irradiated in fast-neutron reactors, or do not undergo a chemical treatment liable to change
the proportions of the fissile isotopes present.
Note: The terms used in this basic safety rule are defined in the glossary, attached as
appendix 1.
II - General provisions intended to avoid a risk of criticality
II.1 - Definition of control modes
An appropriate criticality-safety control mode shall be adopted for each of the facility'sfunctional units. This control mode shall be defined by an upper limit imposed on one or moreof the following parameters:
 mass of fissile materials,
 geometrical dimensions of the equipment, concentration of fissile materials in solutions, moderation ratio for dry or semi-dry products,
taking into account the presence of neutron absorbers.
These limits shall be set for a reference fissile medium, taking into account the reflecting
environment and interactions. The reference fissile medium is the one which, among all thosethat might be encountered in the concerned unit, under normal or abnormal operating
conditions, leads to the lowest limits based on its content of fissile materials, its composition,and its density law.

2

Original official French version (RFS n° I.3.c) is available on http://www.asn.fr/

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 1: 2 / 6

II.2 - General principles
The following principles shall be applied both in the design and in the operation of the
facilities:
 a criticality accident should in no case result from a single anomaly: failure of one
component or one function, a human error (e.g., non-compliance with an instruction),an accidental situation (e.g., fire), etc.,
 if a criticality accident can result from the simultaneous appearance of two
anomalies, it shall then be demonstrated that:othe two anomalies are strictly independent of each other,othe probability of occurrence of each of these two anomalies is sufficiently
low,oeach anomaly is identified by appropriate, reliable monitoring systems, within
an acceptable time-frame that allows response.

II.3 - Provisions concerning the various control modes
II.3.a - Control by mass of fissile material
When this control mode is adopted, a safe mass of fissile material is fixed for each working
unit. If it is recongnized that the critical mass can be reached as the result of a single
anomaly, in accordance with the principle given in Paragraph II.2 - , the safe mass of fissile
material in the working unit in question shall be no more than half the minimum critical mass
for the reference fissile medium. This limit may be lowered to take into account possible
neutron interactions with the masses of fissile material in the adjacent working units.
The total mass of fissile material present in the working unit shall be estimated in order toconfirm that this mass is at any time smaller than the established limit.
In order to prevent any excessive accumulation of fissile material, regular inspections of theworking unit shall be performed, followed if necessary by cleaning.
II.3.b - Control by geometry of equipment
This type of control mode is mainly used in facilities or parts of facilities where the fissile
material is in the form of concentrated solutions.
Provisions shall be taken in order to prevent the following situations or to overcome theirconsequences: accidental deformation of equipment: consideration, at the design stage, of the risk ofa rise in pressure or temperature, and of external causes of modification (earthquake,movements of heavy loads nearby, fire, etc.);
 leaks or overflows of fissile materials solutions from equipments: manufacture of theequipments in the appropriate quality class, setting-up, underneath them, of
drip-trays capable - under sub-critical conditions - of containing the largest volume offissile material solution liable to be spilled, and fitted with fluid detectors and withmeans of recovery; transfer of fissile material solutions into unsafe geometry containers, located in
auxiliary circuits (vents, vacuum, reagents, heating, cooling, etc.);
 placing of movable containers against the equipments: safe geometry movable
containers, in limited numbers, if necessary, surrounded by a rigid structure that
ensures sufficient spacing from the fixed equipments.
It may be necessary to establish circuits that allow the transfer of solutions between safe
geometry equipments and others with unsafe geometry. There are two possibilities:

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 1: 3 / 6

 the unsafe geometry equipments are intended, in normal operating conditions, toreceive solutions that have no risk of criticality in an infinite medium: if the devices
for controlling the correct operation of the process are such that the generalprinciples defined in Paragraph II.2 - are satisfied, and that consequently the risk of
inadvertent flow of solutions with a risk of criticality in an infinite medium in theunsafe geometry equipment is negligible, the transfer circuit may be permanent anddirect. In the contrary case, the transfer circuit is closed and the solutions may betransferred only after confirmation - by means of two estimates using different
methods - that the concentration of fissile material in the solution contained in thesafe geometry equipment is satisfactory.
 unsafe geometry equipments are intended to receive solutions resulting fromoperations of an exceptional nature (e.g., decontamination solutions): the transfer
circuit shall be shut off, in normal operating, by appropriate and reliable devices. The
connection establishment and the transfer shall be performed according to a written
procedure which includes two estimates, using different methods, of theconcentration of fissile material in the solution contained in the safe geometry
equipment.
II.3.c - Control by concentration of fissile material in solutions
This type of control mode is mainly used in facilities or parts of facilities in which the fissile
material concentrations in the solutions are safe, taking into account the geometry of theequipment containing them. It can only be applied to homogeneous fissile materials solutions.
Accordingly, appropriate provisions shall be taken to avoid precipitation, polymerization,
crystallization, extraction into another fluid (a solvent, for example), and the rise of fissile
material concentration by evaporation.
II.3.d - Control by moderation
This criticality control mode is generally used, together with mass control mode, in facilities
or parts of facilities for fuel elements fabrication.
It is generally reserved for dry or semi-dry non-hygroscopic products. Two "barriers", whose
integrity shall be monitored, shall be interposed between the fissile material and thehydrogeneous fluids. In some cases, a single "barrier" may be accepted if special provisions
are taken, particularly as regards its quality. The risks of accidental moderation from external
origins (floods, tornadoes, snowfalls, firefighting, etc.) and from internal origins (leaking
pipes, oil spatter, etc.) shall be taken into account.
II.3.e - Neutron poisoning
Neutron poisoning is employed when the process requires the use of large volume equipments
whose geometry cannot be made safe, or when it is necessary to provide neutron isolation
between equipments.
The presence of a sufficient quantity of neutron poison shall be ensured. In the case ofhomogeneous poisoning, it shall be subject to two estimates employing different methods,
and if necessary provisions shall be taken to avoid dilution or precipitation of the poison. In
the case of heterogeneous poisoning, the durability of the neutron-absorbing component and,if there is one, of the accompanying moderating material, shall be guaranteed against the riskof fire.
II.4 - Dimensioning criteria
A study as complete as possible of normal or abnormal operating conditions shall enable acontrol mode to be selected for the various parts of the facility. The calculation assumptions
that are the most pessimistic in terms of criticality risk shall be adopted when designing thefacility.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 1: 4 / 6

The dimensioning of the equipments, the values for fissile materials masses and forneutron-poison concentrations shall be defined in such a manner that the effective
multiplication factors (keffs) are less than unity, with a sufficient safety margin. This margin
may be adjusted depending on the level of confidence assigned to the calculation techniques,
which depends on the validation of these techniques by comparison with results fromexperiments performed on configurations similar to those studied.
II.5 - Modification procedures
Any modification that is liable to affect the analysis of criticality risk: modification ofequipment, of its location, of its environment (biological shield, for example), of operating
conditions, etc., shall be carried out according to a written procedure specifically providing
for prior consultation with specialists on nuclear criticality safety.
III - Operators training
In view of the importance of the human factor in the prevention of criticality risk, personnel
required to work in facilities having such a risk shall receive relevant training (provided by acriticality engineer).
IV - Additional provisions for the prevention of the consequences of a criticality accident
In view of the possible consequences of a criticality accident for the operators and the
population, it may be necessary to supplement the preventive provisions by installing a
criticality accident detection, alarm and measurement system.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 1: 5 / 6

GLOSSARYI-

Critical concentration

Concentration of fissile material of a given isotopic composition for which a homogeneous
fissile medium of a given geometrical form is just critical.
I.1

Critical limit concentration: concentration of fissile material of a given isotopic
composition for which a homogeneous medium of infinite dimensions is just critical.

I.2

Safe concentration: concentration of fissile material of a given isotopic composition
below which the fissile medium is guaranteed sub-critical, with an appropriate
safety margin.

II - Neutron poisoning
Reduction in the reactivity of a fissile medium by the presence of neutron-absorbing nuclides(neutron poisons). Homogeneous neutron poisoning is ensured by the presence of a neutron
poison dissolved in a fissile material solution; heterogeneous poisoning is ensured by thepresence, in a container receiving solutions of fissile material, of structures composed ofmaterials containing neutron poisons (borosilicate-glass Raschig rings, borated steel plates,etc.).
III - Effective multiplication factor (keff or "reactivity")
Ratio of the total number of neutrons produced in a given fissile medium over an interval oftime to the total number of neutrons lost by absorption and by leakage over the same intervalof time, all other conditions equal (neutrons produced by sources whose intensities do notdepend on the chain-reaction process are not considered in this ratio).
IV - Critical geometrical form
Geometrical form of a fissile medium whose dimensions are such that it is critical for a
specific composition or distribution of fissile material, taking into account the reflecting
environment.
IV.1 Minimum critical geometrical form: geometrical form of a fissile medium of
dimensions below which it is sub-critical, regardless of the mass and moderation of
the fissile material.
IV.2 Safe geometrical form: geometrical form of a fissile medium guaranteed sub-criticalwith an appropriate safety margin, regardless of the mass and moderation of thefissile material.
Note: the word "geometry" is normally used in place of the expression "geometrical form".
V - Density law
Relationship between the concentration of fissile material and the moderation ratio.
VI - Critical mass
Mass of fissile material that may be rendered critical for a specific geometry and compositionof this material, taking into account the reflecting environment.
VI.1 Minimum critical mass: mass of fissile material below which the fissile medium is
sub-critical regardless of its geometry and its moderation.
VI.2 Safe mass: mass of fissile material below which the medium is guaranteed subcritical with an appropriate safety margin, regardless of its geometry andmoderation.

REFERENCE: DSU/SEC/T/2010-334

VII -INDEX: A

APPENDIX 1: 6 / 6

Fissile material

Material composed of chemical elements, some of whose isotopes are fissile, e.g., 233U, 235U,
239
Pu, and 241Pu.
VIII -

Fissile medium

Physico-chemical medium containing fissile material among other elements.
IX - Moderator
Materials whose nuclides (moderating nuclides) reduce the kinetic energy of the neutrons
they encounter. This slowing down of neutrons is obtained by elastic or non-elastic collisions
with these nuclides.
X - Moderation ratio
Ratio of the number of moderating nuclides to the number of fissile nuclides contained in agiven volume of fissile medium.
XI - Nuclear criticality safety
Set of provisions designed to prevent the criticality risk.
XII -Working unit

Part of the facility whose outline is physically defined, within which there is a limited mass offissile material.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 1 / 9

Block diagrams of the nuclear criticality risks analysis
The diagrams included in this appendix summarize (i) the methodology recommended by the
BSR No. I.3.c (first diagram), and (ii), for the reference fissile medium and each criticality
control mode, the parameters to be considered, the failures to be studied and the typicalscenarios associated with these failures.
The objective of these diagrams is to provide the most comprehensive support possible forthe preparation or assessment of a critical risk analysis. They are meant to identify the points
that should be investigated, but do not recommend technical solutions. Such solutions should,
to the extent possible, be adjusted to the situation in hand. Thus, for each scenario
identified, the goal of the analysis is either to rule out this scenario or to show that it would
lead to an acceptable configuration.
Finally, these diagrams may be modified by feedback from experience acquired in the designand operation of nuclear facilities.

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 2 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 3 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 4 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 5 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 6 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 7 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 8 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 2: 9 / 9

REFERENCE: DSU/SEC/T/2010-334

INDEX: A

APPENDIX 3: 1 / 1

ANALYSIS GUIDENUCLEAR CRITICALITY RISKS AND THEIR PREVENTION IN PLANTS AND LABORATORIESEVOLUTION REQUEST FORM
REQUESTER
Name:

Date:

Society:

Phone:

Department:

Fax:

Address:

E-mail:CONCERNED PARTTEXTParagraph number:

DIAGRAM
Title:

Page number:
REQUEST DESCRIPTION

Send to Eric LETANG – Head of IRSN/DSU/SEC
E-mail: eric.letang@irsn.fr
BP 17- 92262 FONTENAY AUX ROSES CEDEX - FRANCE
Fax: +33 (0)1 46 57 29 98

ACKNOWLEDGMENT OF RECEPTRECEPT DATE: