Rapid Prototyping of Safety System for Nuclear Risks of the ITER Tokamak

The ITER tokamak (Latin for "the way") is the next step toward the realization of electricity-producing fusion power plants, since it has been designed to reach the plasma burning condition. The Central Safety System for Nuclear Risk (CSS) is the control system in charge to assure nuclear safety for the ITER plant, the personnel, and the environment. Since the CSS is a critical safety system, its validation and commissioning play an important role, and the required level of reliability must be demonstrated. In such a scenario, it is strongly recommended to use modeling and simulation tools since the early design phase. Indeed, mathematical models will help in the definition of the control system requirements. These models can be used for the rapid prototyping of the safety system, and hardware-in-the-loop (HIL) simulations can be performed to assess the performance of the control hardware against a plant simulator. This paper introduces the methodology and the software/hardware architecture used to develop both a CSS prototype and a ITER plant model suitable for the test and validation of this prototype.