Tokaimura Criticality Accident (30 Sept 99)

(June 2000)



Safety in the nuclear fuel cycle has always been focused on reactor operations, where a huge amount of energy is released continuously in a small volume of material, and where there are substantial amounts of radioactive materials which would be very hazardous if released to the biosphere. A secondary focus is then the high-level wastes from the reactor, which comprises all these potentially hazardous materials. Other parts of the nuclear fuel cycle have much less potential for widespread harm to people or the environment. They are correspondingly less regulated in some countries, such as Japan.

The Tokaimura plant

The accident was in a very small fuel preparation plant operated by Japan Nuclear Fuel Conversion Co. (JCO), a subsidiary of Sumitomo Metal Mining Co. It was not part of the electricity production fuel cycle, nor was it a routine manufacturing operation where operators might be assumed to know their jobs reasonably well.

The particular JCO plant at Tokai was commissioned in 1988 and processes up to 3 tonnes per year of uranium enriched up to 20% U-235, much more than for ordinary power reactors. The plant supplied various specialised research and experimental reactors. It uses a wet process.

The approved nuclear fuel conversion procedure involved the dissolution of uranium oxide (U3O8) powder in a dissolution tank, then its transfer as pure uranyl nitrate solution to a buffer column for mixing, followed by transfer to a precipitation tank. This tank is surrounded by a water cooling jacket to remove excess heat generated by the exothermic chemical reaction. The prevention of criticality was based upon the general licensing requirements for mass and volume limitation, as well as upon the design of the process. A key part of the design was a column with a criticality-safe geometry as a buffer to control the amount of material transferred to the precipitation tank.

However, the work procedure was modified three years ago, without permission from the regulatory authorities, to allow the dissolution of uranium oxide to be performed in stainless steel buckets. The mixing designed to occur in the buffer column was undertaken by mechanical stirring in the precipitation tank, thus bypassing the criticality controls. The shape of the hundred-litre precipitation tank (450mm diameter and 660mm high) enhanced the likelihood of criticality.

The accident

On 30 September three workers were preparing a small batch of fuel for the JOYO experimental fast breeder reactor, using uranium enriched to 18.8% U-235. It was JCO's first batch of fuel for that reactor in three years, and no proper qualification and training requirements appear to have been established to prepare those workers for the job. At around 10:35, when the volume of solution in the precipitation tank reached about 40 litres, containing about 16 kg U, a critical mass was reached.

At the point of criticality, the nuclear fission chain reaction became self-sustaining and began to emit intense gamma and neutron radiation, triggering alarms. There was no explosion, though fission products were progressively released inside the building. The significance of it being a wet process was that the water in the solution provided neutron moderation, expediting the reaction. (Most fuel preparation plants use dry processes.)

The criticality continued intermittently for about 20 hours. It appears that as the solution boiled vigorously, voids formed and criticality ceased, but as it cooled and voids disappeared, the reaction resumed. The reaction was stopped when cooling water surrounding the precipitation tank was drained away, since this water provided a neutron reflector. Boric acid solution (neutron absorber) was finally was added to the tank to ensure that the contents remained subcritical. These operations exposed 27 workers to some radioactivity. The next task was to install shielding to protect people outside the building from gamma radiation from the fission products in the tank. Neutron radiation had ceased.

The radiation (neutron and gamma) emanated almost entirely from the tank, not from any dispersed materials. Buildings housing nuclear processing facilities such as this are normally maintained at a lower pressure than atmosphere so that air leakage is inward, and any contamination is removed by air filters connected to an exhaust stack. In this case particulate radionuclides generated within the conversion building were collected by the high-efficiency particulate air filters, though noble gases passed through the filters. A smoke test on 5 October confirmed that the negative pressure had been maintained (ie the structural integrity of the building was satisfactory) and that the ventilation system was working. However, owing to the detection of low levels of iodine-131 being released to the environment through the exhaust, it was later decided to stop ventilation and to rely on the passive confinement provided by the building.

Five hours after the start of the criticality, evacuation commenced of some 161 people from 39 households within a 350 metre radius from the conversion building. They were allowed home two days later after sandbags and other shielding ensured no hazard from residual gamma radiation. Twelve hours after the start of the incident residents within 10 km were asked to stay indoors as a precautionary measure, and this restriction was lifted the following afternoon.

 

click to enlarge
Plan of site from STA, data quoted below is from monitoring point A, that from B is slightly lower.

 

 

The effects, and analysis

The accident was classified by the Japanese authorities as Level 4 on the IAEA International Nuclear Event Scale (INES)*, indicating an event without significant off-site risk. It was essentially an 'irradiation' accident, not a 'contamination' accident, as it did not result in any significant release of radioactive materials.

* see table below.

The three workers concerned were hospitalised, two in a critical condition. One died 12 weeks later, another 7 months later. The three had apparently received full-body radiation doses of 10-20,000, 6-10,000 and 1-5000 millisieverts (about 8000 mSv is normally a fatal dose). Doses for a further 436 people were evaluated, 140 based on measurement and 296 on estimated values. None exceeded 50 mSv (the maximum allowable annual dose), though 56 plant workers exposed accidentally ranged up to 23 mSv and a further 21 workers received elevated doses when draining the precipitation tank. Seven workers immediately outside the plant received doses estimated at 6 - 15 mSv (combined neutron and gamma effects).

The peak radiation level 90 metres away just outside the nearest site boundary was 0.84 mSv/hr of gamma radiation, but no neutron levels were measured at that stage. The gamma reading then dropped to about half that level after nine hours at which stage 4.5 mSv/hr of neutron radiation was measured there, falling to about 3 mSv/hr after a further two hours, and then both readings falling to zero (or background for gamma) at 20 hours from the start of the criticality.

Neutron dose rates within one kilometre are assumed to be up to ten times the measured gamma rates. Based on activation products in coins from houses near the plant boundary and about 100 m from the reaction, it was estimated that some 100 mSv of neutron radiation would have been received by any occupants over the full period of the criticality. However, the evacuation of everyone within 350 metres of the plant had been ordered 5 hours after the start of the accident. The final report on the accident said that the maximum measured dose to the general public (including local residents) was 16 mSv, and the maximum estimated dose 21 mSv.

While 160 TBq of noble gases and 2 TBq of gaseous iodine were apparently released, little escaped from the building itself. After the criticality had been terminated and shielding was emplaced, radiation levels beyond the JCO site returned to normal.

Only trace levels of radionuclides were detected in the area soon after the accident, and these were short-lived ones. Products from the area would have been as normal, and entirely safe throughout. Radiation levels measured by the IAEA team in residential areas in mid October were at the normal background levels. Measurement of I-131 in soils and vegetation outside the plant showed them to be well under levels of concern for food.

According to the IAEA, the accident "seems to have resulted primarily from human error and serious breaches of safety principles, which together led to a critic-ality event". The company conceded that it violated both normal safety standards and legal requirements, and criminal charges are being laid. The fact that the plant is a boutique operation outside the mainstream nuclear fuel cycle evidently reduces the level of scrutiny it attracts.

Japan's atomic energy insurance pool said would make a payment to JCO in respect to the accident, its first such payment ever. However, this would be limited to one billion yen, with further liability (the total estimated at 13 billion yen - A$ 200 million), being met by JCO or its parent company. The plant's operating licence was revoked early in 2000.

Mainstream fuel fabrication plants in Japan are fully automated, engineered to ensure that criticality does not occur, equipped with neutron monitoring systems and fully prepared for any possible criticality accident. Most plants use a dry process in any case, which is intrinsically safer. No major civil reactor uses uranium enriched beyond 5% U-235.

Previous criticality accidents

While this was Japan's first such accident, similar criticality incidents have occurred, especially in US and Russian military plants and laboratories. All but two of these were prior to the early 1980s. Three (in 1958 and 1964) were very similar to this accident. The last of these was the single previous criticality accident at a commercial fuel plant, in USA, resulting in one death.

Of all the previous accidents, 37 occurred in connection with research reactors or laboratory work for military projects, resulting in ten deaths. Another 22 occurred in fuel cycle facilities, all but one military-related, and resulting in seven deaths. The energy released in each of these accidents ranged from about 0.03 MJ to 3 GJ*. The energy released in the similar US accident was about 3 MJ, though due to the prolonged criticality here, some 80 MJ was released, equivalent to the combustion of just over two litres of petrol/gasoline.

* on basis of IPSN report quoting fissions ranging from 1015 to 1.2 x 1020, and each fission yielding 3 x 10-11 Joules. Petrol @ 34 MJ/litre.

The fuel preparation accidents were all in wet processes, due to putting too much uranium-bearing solution in one tank. Mostly these then erupt rather like a saucepan of milk boiling over, and the fission reaction ceases as the material is ejected and dispersed in the immediate vicinity. None of the previous accidents resulted in significant release of radioactivity outside the plants. Practically all were in Russian or US plants, and in reviewing these accidents recently the need for a high level of staff training was emphasised.


The International Nuclear Event Scale

For prompt communication of safety significance

 

Level, Descriptor

Off-Site Impact

On-Site Impact

Defence-in-Depth Degradation

Examples

7
Major Accident

Major Release:
Widespread health and environmental effects

 

 

Chernobyl, Ukraine, 1986

6
Serious Accident

Significant Release: Full implementation of local emergency plans

 

 

-

5
Accident with Off-Site Risks

Limited Release:
Partial implementation of local emergency plans

Severe core damage

 

Windscale, UK, 1957 (military).
Three Mile Island, USA, 1979.

4
Accident Mainly in Installation

either of:

Minor Release:
Public exposure of the order of prescribed limits

Partial core damage. Acute health effects to workers

 

Saint-Laurent, France, 1980 (fuel rupture in reactor).
Tokai-mura, Japan, Sept 1999.

3
Serious Incident

any of:

Very Small Release:
Public exposure at a fraction of prescribed limits

Major contamination, Overexposure of workers

Near Accident. Loss of Defence-in-Depth provisions

Vandellos, Spain, 1989 (turbine fire, no radioactive contamination)

2
Incident

nil

nil

Incidents with potential safety consequences

 

1
Anomaly

nil

nil

Deviations from authorised functional domains

 

0
Below Scale

nil

nil

No safety significance

 

Source: International Atomic Energy Agency

Sources:
ENS NucNet news # 397-402, 409, 410, 414 & 459/99, 36/00, 169/00 background # 10-12/99.
IAEA Report on the Preliminary fact-finding mission ,
IPSN 1/10/99,
Yomiuri Shimbun 4/11/99
Atoms in Japan, Dec 1999
WNA : www.world-nuclear.org