JP2014032633A - Plant monitoring apparatus and plant operation method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a plant monitoring apparatus that can permit plant operation depending on a plant operation state while restricting the plant operation for each operator.SOLUTION: A plant monitoring apparatus 1 comprises: a user authentication section 11 for performing user authentication of an operator; a plant operation interactive section 12 that inputs plant operation and operates plant equipment 3; an operation state input section 23 for receiving a plant operation state as operation state data from the plant equipment 3; a condition table 21 in which conditions of the plant operation state of the plant equipment 3 for permitting the plant operation are set beforehand for each plant operation; and an operation permission/prohibition determination section 24 that compares the conditions of the plant operation state indicated by the condition table 21 of the plant operation input by the plant operation interactive section 12 and the plant operation state indicated by the operation state data at the time of the plant operation and permits the plant operation input by the plant operation interactive section 12 when the conditions are satisfied.

Description

  The present invention relates to a plant monitoring apparatus and a plant operation method for monitoring and controlling plant equipment by plant operation.

  Plant monitoring devices installed at nuclear power plants and other power plants monitor plant operating conditions based on process signals received from measuring instruments such as flow meters and thermometers, and also input plant operations and work on-site such as valves and pumps. The plant is controlled by operating the equipment. Further, the plant monitoring apparatus may perform operations such as monitoring exclusion of the input point of the inspection target device, manual setting of the input value, and change of the output point for the inspection of the measuring device and the field device.

  Of the plant operations described above, important interactive operations that affect the plant state, such as monitoring exclusion of input points and manual setting of input values, are required to be restricted so that they cannot be easily operated. Therefore, a technology has been developed in which an authentication system using a user ID and a password is provided, and the operation of the plant equipment is limited and permitted by the user (for example, see Patent Document 1). In addition, a technique has been developed in which personal authentication is performed by an operator's mobile terminal and plant operation is restricted for each operator (see, for example, Patent Document 2).

JP 7-219667 A JP 2006-195621 A

  In the plant monitoring device described in the above-described patent document, an operator who performs a plant operation is limited, and operations other than the operator are prevented. However, when an authorized operator actually performs an operation, it may be necessary to confirm with the person in charge whether the operation is permitted in the plant operating state at the time of operation. In addition, when the person in charge is requested to confirm whether or not the operation is possible, the person in charge needs to read the output contents such as the display of the monitoring system, and determine whether the operation is possible.

  As described above, it is necessary for the person in charge to make the final decision as to whether or not to operate, so even if the number of operators that can be operated is limited, the decision is made to monitor and restore the input values of equipment that was excluded from monitoring because it is under inspection. There is a risk that an operation error such as a false alarm is generated.

  Then, this invention aims at provision of the plant monitoring apparatus which can permit plant operation with a plant operation state while restrict | limiting plant operation for every operator.

  In order to achieve the above object, a plant monitoring apparatus according to the present invention includes a user authentication unit that performs user authentication of an operator, a plant operation dialogue unit that inputs a plant operation and operates the plant device, and a plant operation from the plant device. An operation state input unit that receives the state as operation state data, a condition table in which the conditions of the plant operation state of the plant equipment that permits the plant operation of the operator authenticated by the user authentication unit are predetermined for each plant operation, Compares the plant operation state conditions indicated in the plant operation condition table entered in the plant operation dialogue part with the plant operation state indicated by the operation state data at the time of the plant operation. An operation availability determination unit that permits the input plant operation.

  Furthermore, in order to achieve the above object, the plant operation method of the present invention includes a step of performing user authentication of an operator, a step of inputting a plant operation for operating the plant equipment, and operating a plant operating state from the plant equipment. A process that is received as state data, a condition table in which the conditions of the plant operation state of the plant equipment that permits plant operation are predetermined for each plant operation, the plant operation state indicated by the operation state data at the time of the plant operation, and the plant A step of comparing a predetermined plant operating condition for permitting the operation and permitting the plant operation when the condition is satisfied.

  According to the present invention, in the plant monitoring device, the plant operation can be restricted for each operator and the plant operation can be permitted depending on the plant operation state.

The schematic block diagram of the plant monitoring apparatus which concerns on the 1st Embodiment of this invention. The table | surface which shows the example of the operation state data of the plant monitoring apparatus which concerns on the 1st Embodiment of this invention. The table | surface which shows the example of the condition table of the plant monitoring apparatus which concerns on the 1st Embodiment of this invention. The schematic block diagram of the plant monitoring apparatus which concerns on the 2nd Embodiment of this invention. The schematic block diagram of the plant monitoring apparatus which concerns on the 3rd Embodiment of this invention. The operation guide creation dialog part of the plant monitoring apparatus which concerns on the 3rd Embodiment of this invention is shown, (a) is an example of an operation guide screen, (b) is an example of an operation guide edit screen. The schematic block diagram of the plant monitoring apparatus which concerns on the 4th Embodiment of this invention.

  Embodiments of the present invention will be described below.

(Constitution)
Hereinafter, a plant monitoring apparatus according to an embodiment of the present invention will be described with reference to FIGS. 1 to 3. FIG. 1 is a schematic configuration diagram of a plant monitoring apparatus according to the first embodiment of the present invention.

  The plant monitoring device 1 includes a display device 2, a user authentication data storage unit 10, a user authentication unit 11, a plant operation dialogue unit 12, a plant operation command unit 13, a plant operation history display unit 14, and an operation history message. Database (DB) 15, plant operation history storage unit 16, plant state display unit 17, plant state acquisition unit 19, operation permission condition DB 20, condition table 21, operation state data 22, operation state input unit 23 and an operation availability determination processing unit 24.

  The plant monitoring device 1 and the plant equipment 3 can be transmitted from the plant operation command section 13 to the plant equipment 3 so that the operation status can be sent from the plant equipment 3 to the operation status input section 23. Connecting. Here, the plant operation command is an operation command including an instruction for operating the plant device 3 and an input point exclusion for the plant device 3 or input of an input value. The operation state is a signal indicating a process amount such as a temperature or a flow rate indicated by the plant equipment 3, a state of the equipment such as opening / closing of a valve or starting of a pump.

  The user authentication unit 11 and the plant operation dialogue unit 12 constitute an operation unit 36 that displays a screen related to the operation on the display device 2 and is operated by an input device such as a touch panel in the display device 2 or a switch connected to the display device 2. An operator's interactive operation can be input.

  The user authentication unit 11 displays a user authentication screen on the display device 2, compares the user ID and password input by the operator with the user authentication data in the user authentication data storage unit 10, and performs the plant operation. Authenticate and identify For user authentication in the user authentication unit 11, a general authentication method using an ID card, a portable terminal, or the like can be applied in addition to the user ID and password.

  The plant operation dialogue unit 12 displays a dialogue operation screen for performing a plant operation on the display device 2, and transmits the input plant operation command to the operation availability determination processing unit 24. The plant operation command is transmitted from the plant operation command unit 13 to the plant equipment 3 after the operation availability determination processing unit 24 determines whether the operation is possible or not.

  The plant operation history storage unit 16 records the interactive operation contents performed by the operator in the operation history message DB 15 as an operation history, and further displays the operation history in the operation history message DB 15 on the display device 2 by the plant operation history display unit 14. can do.

  FIG. 2 is a table showing an example of operation state data of the plant monitoring apparatus according to the first embodiment of the present invention. As shown in FIG. 2, the operation state input unit 23 inputs an operation state from the plant equipment 3, determines an operation state such as a maintenance state and a start-up phase for every predetermined operation time, and creates and outputs operation state data 22. be able to. Furthermore, the operating state data 22 includes the operating state of the device itself received from the plant device 3 and the establishment of a predetermined plant table determined from these as the operating state.

  FIG. 3 is a table showing an example of a condition table of the plant monitoring apparatus according to the first embodiment of the present invention. The condition table 21 is stored in the operation permission condition 20. The condition table 21 is a table in which the conditions of the plant operation state of the plant equipment 3 that permits the plant operation are determined in advance for each plant operation. As shown in FIG. 3, for example, permission conditions can be set for each of the input points 1 to N for the plant operation excluding the input points.

  The operation availability determination processing unit 24 receives a plant operation command from the plant operation dialogue unit 12, receives the operation state data at the time of the plant operation and the condition table 21 defined for the plant operation, and indicates the operation state indicated by each. In comparison, when the operation state data satisfies the condition of the condition table 21, the plant operation command is permitted.

  The plant operation in the plant monitoring device 1 described above includes important operations such as excluding the monitoring input point of the equipment that is being activated for the inspection of the plant equipment 3 and changing the parameter value used for the flow rate calculation. . The exclusion of monitoring input points, the exclusion of monitoring input points of equipment, and the change of parameter values used for flow rate calculation may cause the plant monitoring device 1 to erroneously detect a monitoring abnormality and lead to an operator's erroneous operation. It is an operation. It should be noted that the plant operation can also be applied to an operation of directly operating a plant auxiliary machine or the like, such as a CRT operation on a system diagram display or an on-site operation.

(Function)
The operation of the first embodiment of the present invention will be described below. Hereinafter, when the operation state data 22 output from the operation state input unit 23 indicates an operation state called “start-up phase” during the start-up of the plant, in order to check a certain plant device 3, the monitoring input value of this device is set. A case of performing an operation of removing from the monitoring target will be described.

  First, the operator performs user authentication by the user authentication unit 11. The operator who performed user authentication inputs plant operation using the plant operation dialogue unit 12. The input operation content is transmitted to the operation availability determination processing unit 24 as a plant operation command.

  The operation availability determination processing unit 24 receives a plant operation command from the plant operation dialogue unit 12, receives the operation state data 22 at the time of the plant operation, and the condition table 21 defined for the plant operation, and the operation state data 22 is When the condition of the condition table 21 is satisfied, the plant operation command is permitted. The permitted plant operation command is transmitted to the plant operation command unit 13, and the plant operation command unit 13 operates the plant equipment 3.

  When the plant operation is the input point exclusion shown in FIG. 3, the input value to be excluded among the input points 1 to N is input to the plant operation dialogue unit 12. The operation availability determination processing unit 24 refers to the conditions determined for the input values input from the condition table 21 shown in FIG. 3 and further compares the operating state data 22 with each other to determine whether or not the input point exclusion operation is possible. As a result, the operator simply specifies the input value to be excluded from monitoring in the plant operation dialogue unit 12, and the operation availability determination processing unit 24 determines whether or not the input value can be excluded from monitoring using the condition table 21 and the operation state data 22. can do.

  Further, the operation availability determination processing unit 24 can be provided with a function of notifying the display device 2 of the operation prohibition when an unauthorized plant operation is performed. Further, the operator can be notified of the condition in the condition table 21 that has caused the operation prohibition. The conditions that have caused the prohibition of operation are conditions that should be confirmed and cleared in advance when operating the plant. Therefore, by recording and referring to the operation prohibition and the conditions causing the operation prohibition, a post-analysis of the plant operation for each operator can be performed. Furthermore, among the conditions in the condition table 21, only the operation state of the entire plant such as the startup phase and the maintenance state is permitted to be determined by the operation availability determination processing unit 24, and the operation state of the specific plant equipment 3, establishment of the plant table, etc. Only the condition may be displayed on the display device 2 without allowing the operation permission determination processing unit 24 to perform permission determination, and the operator may be determined.

  Furthermore, the conditions determined in the condition table 21 can be set individually for each operator. For example, a veteran operator who is proficient in operation can relax the conditions so that the operation state can be confirmed by himself / herself, and the conditions can be strict for inexperienced operators to limit plant operations on the plant monitoring apparatus 1 side. Thus, permission conditions can be set for each operator. In this case, the operation availability determination processing unit 24 performs comparison with the driving state data 22 using the condition table 21 defined for the operator authenticated by the user authentication unit 11.

(effect)
According to the embodiment of the present invention, the plant operation can be restricted for each operator, and the plant operation can be permitted depending on the plant operation state. As a result, it is possible to prevent operational errors due to work efficiency and judgment errors.

(Second Embodiment)
(Constitution)
Hereinafter, a plant monitoring apparatus according to a second embodiment of the present invention will be described with reference to FIG. The same parts as those of the plant monitoring apparatus according to the first embodiment are denoted by the same reference numerals, and the description of the same configuration is omitted.

  FIG. 4 is a schematic configuration diagram of a plant monitoring apparatus according to the second embodiment of the present invention. The second embodiment is different from the first embodiment in that a condition table update dialogue unit 25 that can be updated online even when the operation state of the plant is in operation is further provided. The condition table update dialogue unit 25 is provided in the operation unit 36 and can be operated using the display device 2 and the input device. It is assumed that the condition table update dialogue unit 25 is operated by the operator or the person in charge who has obtained use permission from the user authentication unit 11 by the display device 2 and the input device.

(Function)
The operation of the second embodiment of the present invention will be described below. The condition table 21 is a table that defines conditions for determining whether or not an operation can be performed when a plant operation is input in the plant operation dialogue unit 12. The condition table 21 may need to be modified when a combination pattern of predetermined conditions is not suitable for an actual operation or when a new condition combination pattern is to be added. The condition table update dialog unit 25 can display the currently stored condition pattern of the condition table 21 on the display device 2, and can further change and update it after editing it online.

(effect)
According to the second embodiment of the present invention, the condition table 21 can be changed and updated by the condition table update dialog unit 2. In particular, in the case where it is difficult to stop the plant monitoring apparatus 1 during plant operation, by providing a restriction that can be changed and updated only for the condition table 21 defined for the plant operation that is not actually performed, The condition table 21 can be changed without affecting the processing during operation.

  Further, since the change can be made on the same display device 2 as the plant operation dialogue unit 12, the condition pattern of the condition table 21 is examined with reference to the actual plant operation status displayed on the plant operation dialogue unit 12. The necessary information can be confirmed efficiently.

(Third embodiment)
(Constitution)
Hereinafter, a plant monitoring apparatus according to a third embodiment of the present invention will be described with reference to FIGS. 5 and 6. The same parts as those of the plant monitoring apparatus according to the first embodiment are denoted by the same reference numerals, and the description of the same configuration is omitted.

  FIG. 5 is a schematic configuration diagram of a plant monitoring apparatus according to the third embodiment of the present invention. The third embodiment is different from the first embodiment in that an operation guide display unit 30, an operation guide creation dialogue unit 32, and an operation history extraction unit 33 are newly provided.

  Further, when creating the operation history message DB 15, the plant operation history storage unit 16 records the conditions indicated by the condition table 21 and the operation state indicated by the operation state data 22 in addition to the operation history in the operation history message DB 15. As a result, operations performed in each operation state can be recorded.

  The operation history extraction unit 33 sets an operation period in advance and extracts, from the operation history message DB 15, an operation performed when switching the operation state within the operation period or an operation frequently performed in each operation state.

  Further, the operation guide creation dialogue unit 32 classifies the operation history extracted from the operation history message DB 15 by the operation history extraction unit 33 for each predetermined operation state, and generates operation guide data 31 that is a recommended operation for each operation state. As the operation state for classification of the operation history, the operation state of the entire plant such as the startup phase and the maintenance state and the operation state of the specific plant device 3 can be applied. Further, operation guide data 31 is displayed on the display device 2 by the operation guide display unit 30.

  FIG. 6 shows an operation guide creation dialogue unit of the plant monitoring apparatus according to the third embodiment of the present invention, where (a) is an example of an operation guide screen and (b) is an example of an operation guide editing screen.

  An operation guide screen 100 illustrated in FIG. 6A includes an operation state selection button 101 for selecting an operation state, and a period selection range 102 in which a period to which the operation state is selected by selecting the operation state with the operation state selection button 101 is displayed. An arbitrary period selection area 103 in which an arbitrary period can be input, an operation guide pattern list 104 for displaying a list of operation guide patterns belonging to the operation state selected by the operation state selection button 101, and the operation guide pattern A new operation guide creation button 105 to be newly created, an operation guide edit button 106 for displaying an operation guide edit screen 110 that is a screen for editing the operation guide displayed in the operation guide pattern list 104, and an operation guide pattern list. The operation guide deletion button for deleting the operation guide displayed in 104. A tongue 107.

  The operation guide edit screen 110 shown in FIG. 6B includes an operation guide pattern 111 that displays the operation guide pattern selected in the operation guide pattern list 104 of the operation guide screen 100, and a period selection list of the operation guide screen 100. The operation history recorded in the operation guide selected in the operation guide pattern list 104 of the operation guide screen 100 and the selection period 112 selected in 102 or designated in the arbitrary period selection area 103 is displayed. An operation history list 113 to be displayed in a list, an operation addition button 114 for adding an operation to the operation history list 113, an operation deletion button 115 for deleting an operation history displayed in the operation history list 113, and an operation history Move up the operation position to change the order of the operation history displayed in the list 113 Button 116, operation position downward movement button 117, overwrite save button 118 for overwriting and saving the operation guide edited on the operation guide editing screen 110, save button 119 with another name for saving as another pattern, and cancel editing The cancel button 120 is provided.

(Function)
The operation of the third embodiment of the present invention will be described below. In the operation history message DB 15, an input operation that has been excluded from monitoring, that is, an interactive operation that affects the plant state performed by the plant operation interactive unit 12, for example, an input point operation that excludes a monitoring input point is set as a monitoring target. Operation history such as returning is saved. Since these operations do not directly operate the plant itself, such as opening a valve or pulling out a control rod, operation guidance is generally not provided in conventional plant monitoring systems. This is an important operation for correctly monitoring the plant.

  The operation guide creation dialogue unit 32 extracts the recommended operation for each driving state in which these operations are changed by the operation history extraction unit 33, creates the operation guide data 31, and displays the operation guide data 31 as the operation guide. . As a result, the operation to be performed can be shown according to the driving state.

  The operator selects an operation state of the plant for which an operation guide is to be created from the operation state selection button 101 on the operation guide screen 100, which is an example of an interaction screen of the operation guide creation interaction unit 32, and the plant uses the operation state selection button 101. By selecting a period from the period selection list 102 in which the periods that have been in the selected operating state are displayed, or by specifying an arbitrary period in the arbitrary period selection area 103 and executing the new creation button 105 The operation history can be extracted from the operation history message DB 15 and a new operation guide pattern can be created.

  Since the created operation guide pattern is displayed in the operation guide pattern list 104, the operation guide edit screen 110 is displayed by selecting an operation guide pattern to be referred to from the operation guide selection pattern list 104 and executing the edit button 106. The operation history that is displayed and registered in the operation guide pattern selected in the operation guide selection pattern list 104 can be confirmed in the operation history list 113.

(effect)
According to the third embodiment of the present invention, the operator refers to the operation guide output by the operation guide display unit 30 to determine whether the type and timing of the plant operation input in the operating state is correct. I can do it.

(Fourth embodiment)
(Constitution)
Hereinafter, a plant monitoring apparatus according to a fourth embodiment of the present invention will be described with reference to FIG. The same parts as those of the plant monitoring apparatus according to the first embodiment are denoted by the same reference numerals, and the description of the same configuration is omitted.

  FIG. 7 is a schematic configuration diagram of a plant monitoring apparatus according to the fourth embodiment of the present invention. The fourth embodiment is different from the third embodiment in that an operation guide automatic creation unit 34 and an operation guide editing unit 35 are newly provided. The operation guide automatic creation unit 34 extracts and creates an operation guide at a preset time or plant operation state. As the operating state to be set, in addition to the state of the entire plant such as the startup phase or during operation, a state such as starting or stopping of a specific plant device 3 can be designated. Further, the operation guide editing unit 35 has an editing function for deleting and adding the created operation guide.

(Function)
The operation of the fourth embodiment of the present invention will be described below. For example, when the operation guide automatic creation unit 34 is configured to automatically create an operation guide when the operation state is the start phase, the operation during the start phase from the stop state to the start and the normal operation is performed. Extracted and stored as operation guide data 31.

  Since the operation guide data 31 is an operation guide automatically extracted and created, an unsteady operation may be stored as a guide. Therefore, the operation guide editing unit 35 can delete unnecessary operation guides. Furthermore, even when a necessary operation is leaked, a necessary operation guide can be added by the operation guide editing unit 35.

(effect)
According to the fourth embodiment of the present invention, the operation guide is automatically created by the operation guide automatic creation unit 34, whereby the operation history in the set plant operation state is recorded, and the operation guide is created. Further, since the operation guide editing unit 35 can edit the operation guide, it is possible to create a normal operation guide by adding necessary operations while leaving only necessary information.

DESCRIPTION OF SYMBOLS 1 ... Plant monitoring apparatus 2 ... Display apparatus 3 ... Plant apparatus 10 ... User authentication data storage part 11 ... User authentication part 12 ... Plant operation dialogue part 13 ... Plant operation command Unit 14 ... Plant operation history display unit 15 ... Operation history message DB (database)
DESCRIPTION OF SYMBOLS 16 ... Plant operation log | history storage part 17 ... Plant state display part 18 ... Plant state data 19 ... Plant state acquisition part 20 ... Operation permission condition DB (database)
21 ... Condition table 22 ... Operating state data 23 ... Operating state input unit 24 ... Operation availability determination processing unit 25 ... Condition table update dialogue unit 30 ... Operation guide display unit 31 ... Operation guide data 32 ... Operation guide creation dialogue part 33 ... Operation history extraction part 34 ... Operation guide automatic creation part 35 ... Operation guide edit part 36 ... Operation part

Claims (8)

A user authentication unit for performing user authentication of an operator;
A plant operation dialogue unit that operates the plant equipment by inputting the plant operation of the operator authenticated by the user authentication unit,
An operation state input unit that receives the plant operation state as operation state data from the plant equipment,
A condition table in which the conditions of the plant operating state of the plant equipment that permits plant operation are predetermined for each plant operation;
The plant operation state condition indicated by the plant operation condition table input in the plant operation dialogue unit is compared with the plant operation state indicated by the operation state data at the time of the plant operation. A plant monitoring apparatus comprising: an operation availability determination unit that permits plant operation input to the dialogue unit. The operation availability determination unit notifies the prohibition of the plant operation when the operation state indicated by the operation state data at the time of the plant operation does not satisfy the condition of the operation state indicated by the condition table,
The plant monitoring apparatus according to claim 1, wherein a condition that causes a prohibition in the condition table is notified. The condition table is set for each operator authenticated by the user authentication unit,
The plant according to claim 1 or 2, wherein permission determination is performed for the plant operation of the operator authenticated by the user authentication unit using the condition table set for the operator. Monitoring device.   4. The plant monitoring apparatus according to claim 1, wherein the plant operation is an input point exclusion operation, and a condition is defined for each input point in the condition table. 5.   The plant monitoring apparatus according to any one of claims 1 to 4, further comprising a condition table update dialog function for editing or updating the condition table online. A plant operation history storage unit that stores a plant operation history including permission conditions for interactive operation and a plant operation state in an operation history message database when a plant operation is performed,
From the operation history message database, an operation history extraction unit that extracts operations performed for each predetermined driving state;
It further includes an operation guide creation dialogue unit that creates an operation guide based on the extracted operation,
The plant monitoring device according to any one of claims 1 to 5, wherein the operation guide can be displayed.   The plant monitoring apparatus according to claim 6, further comprising an operation guide automatic creation unit that designates a plant operation state and extracts an operation history in the designated operation state to create an operation guide. A process of performing user authentication of the operator;
Inputting a plant operation for operating the plant equipment;
Receiving a plant operation state as operation state data from the plant equipment;
A condition table in which the conditions of the plant operating state of the plant equipment that permits plant operation are predetermined for each plant operation;
Comparing the plant operation state indicated by the operation state data at the time of the plant operation with the conditions of the plant operation state determined in advance to permit the plant operation, and permitting the plant operation when the condition is satisfied; A plant operating method characterized by comprising:

Images