I'm no expert on nuclear power plants. You'd be best advised to go straight to NRC.
But I do know that backup generators are required in most countries with nuclear plants. They are required in Germany, for example.
They probably are required in Japan too. It's not just batteries. The Peachbottom plant hasn't received rave reviews. Just having them there isn't enough. You have to constantly test and drill!
In any case, after 9/11 there were additional measures.
The modelling employed is somewhat complex. They are looking at not just loss of power but the idea that other operations modes could cause changes in operational parameters and trying to model those. Here is a 2010 report on a new model called MELCOR (lovely, eh). Not surprisingly Peachbottom has a starring role:
http://www.nrc.gov/reading-rm/doc-collections/nuregs/staff/sr1953/sr1953.pdfIt is really easy to misunderstand these things. For example, on page 24 of the above report:
A number of simulations were run for station blackout sequences to investigate the effects of
RCP seal failures, SRV operation, and TD-AFW availability and operation on the time available
to recover ac power and re-establish core cooling. Along with the above variations in system
conditions and responses, some other factors that affect the time to core damage are the time
to battery depletion (loss of direct current (dc) power), the time to depletion of the emergency
CST tank (for cases with TD-AFW available), the system pressure, and the occurrence of
natural circulation (Case 4). Cases 4 and 6 assume infinite dc power, which mimics successful
“blind feeding” of the SGs using TD-AFW following the loss of dc (see for more
information on this topic). Meanwhile, Cases 9 and 10 assume the loss of TD-AFW at 4 hours
(which equals the station blackout coping time for Surry from NUREG-1776, “Regulatory
Effectiveness of the Station Blackout Rule,” issued August 2003) .
In the emergency operating procedures, the operators would first enter E-0, “Reactor Trip or
Safety Injection,” which would direct them to ECA-0.0, “Loss of All AC Power.” If ac power is
recovered, the operators will transition to ECA-0.1, “Loss of All AC Power Recovery without SI
Required” and/or ECA-0.2, “Loss of All AC Power Recovery with SI Required.” If ac power is
not recovered and the core-exit thermocouples rise past 1,200 degrees F (649 degrees C), the
operators will transition to SACRG-1, “Severe Accident Control Room Guideline Initial
Response.”
The Surry SPAR model does not credit operation of auxiliary feedwater following battery
depletion. Further, the SPAR model assumes core damage at the time of battery depletion
(i.e., no further opportunity for recovering ac power and averting core damage). This
assumption exists because dc power is an integral part of ac power recovery, in that it provides
the control power to operate electrical distribution system breakers in order to bring electrical
power into the power block following a station blackout. Alternate sources of dc control power
are required once batteries are depleted in a station blackout sequence, but this issue is not
further explored here.
If you see the bolded language, what that means is yes, the plants are required to have alternate sources of power, but for the purposes of this exercise they are going to pretend they don't exist.
This is very necessary. Having the backup power should work, but in the event that it doesn't, this sort of simulation allows regulators to foresee necessary mitigation steps. Failure of backup systems is an integral part of disaster and recovery planning.