United States Nuclear Regulatory Commission - Protecting People and the Environment

Review Guidelines for Field-Programmable Gate Arrays in Nuclear Power Plant Safety Systems (NUREG/CR-7006, ORNL/TM-2009/20)

On this page:

Download complete document

Publication Information

Manuscript Completed: October 2009
Date Published: February 2010

Prepared by:
M. Bobrek1, D. Bouldin2, D.E. Holcomb1, S.M. Killough1
S.F. Smith1, C. Ward1, and R.T. Wood1

1Oak Ridge National Laboratory
P.O. Box 2008
Oak Ridge, TN 37831-6010

2University of Tennessee
419 Ferris Hall, 1508 Middle Drive
Knoxville, TN 37996-5483

M.E. Waterman, NRC Project Manager

NRC Job Code N6351

Office of Nuclear Regulatory Research
U.S. Nuclear Regulatory Commission
Washington DC 20555-0001

Availability Notice

Abstract

This report is a compilation of safe field-programmable gate array (FPGA) design practices that can be used by NRC staff as guidance for reviewing FPGA-based safety systems in nuclear power plants. It can also serve as a basis for development of specific activities that will support the licensing process such as FPGA-specific review procedures and acceptance criteria. The report follows on the investigation of existing regulatory documents and standards related to design and review of safety-related FPGA systems. Since the existing regulatory documents are not specific about FPGA design practices, this report also serves as the complement to the standards that cover general issues related to digital and software safety systems in nuclear power plants.

FPGA design practices are classified into three major groups—FPGA hardware design practices, FPGA design entry methods, and FPGA design methodologies. Within these major groups, design practices are further classified according to four top-level attributes—reliability, robustness, traceability, and maintainability according to the framework used in NUREG/CR-6463.

The report focuses on listing and describing FPGA design practices that are potentially unsafe as well as on suggesting which ones are acceptable for safety-critical designs. Additionally, the report outlines a design life cycle that could be used by the designers and the reviewers for FPGA-based safety systems.

Page Last Reviewed/Updated Tuesday, October 22, 2013