CN102929598A - Man-machine interface design method for improving safety of nuclear power station - Google Patents

Abstract

The invention provides a man-machine interface design method for improving the safety of a nuclear power station. Whether a misoperation probability PSFHSI meets a requirement or not is judged, if not, whether a display picture factor PSFD, a warming factor PSFA and a computerized normalization factor PSFP meet a requirement or not is judged, and if not, the man-machine interface design is scientifically adjusted according to the PSFD, the PSFA and the PSFP, so that the operation safety of the nuclear power station is improved, the misoperation possibility is reduced, and the safety factor is increased.

Description

A kind of man-machine interface design method that improves nuclear plant safety

Technical field

The present invention is a kind of man-machine interface design method that improves nuclear plant safety, belongs to the technical fields such as nuclear plant safety, man-machine interaction.

Background technology

Along with the development of the technology such as computing machine, robotization and the raising of reliability, the modern digitizing I﹠amp of nuclear power plant; The application of C system and man-machine interface becomes possibility so that reduce availability and the security in power station transient state, unexpected shutdown and pressure shutdown, raising power station, simultaneously also so that raising operation and maintenance efficiency, reduction operating cost become possibility.At present, all adopt digitizing I﹠amp building the overwhelming majority of nuclear power plant in the world; C technology, the classical control system of a lot of built nuclear power plants and main control room have been carried out or have been planned to carry out digital improvement.Digitizing I﹠amp; The main flow that is designed to development of the application of C technology and digitizing man-machine interface.For example, " the digitizing I﹠amp of nuclear power plant; C system core Status of Research and development strategy " mentioned in (" Nuclear Power Engineering " S1 phase in 2002) in contents such as realization digitizing I﹠C systems of nuclear power plant.

The control room design of digitizing man-machine interface requires the angle from Human Engineering, optimizes Human Machine Interface, to improve operator's behavior performance, reduces people's mistake and occurs, and makes the power station be in the security monitoring state.

Correlative study document by analyzing domestic and international digitizing man-machine interface and to the investigation of domestic digitizing man-machine interface, sum up the digitizing man-machine interface and mostly have following characteristics:

Computerize operator workstation compact Layout, and have a plurality of display screens;

Function with perfect necessary for monitoring plant information, and according to functional requirement, design different types of comprehensive picture, support operator's situation awareness and decision-making;

Soft control, the control action in many power stations can carry out in computer screen;

The display mode variation comprises tabulation, icon, picture, acousto-optic etc.;

Have giant-screen and dynamically show, for all members in the main control room provide a unified situation awareness platform;

Advanced warning system can be organized, optimize and process alerting signal;

Computerized procedures, operator can guide according to rules and intervene power plant operation, and the process that operator is executed the task changes;

The intelligence booster action improves, and comprises the aspects such as processing, power plant's monitoring, rules tracking of reporting to the police;

The raising of automatization level has increased the effect of operator's system monitoring, has weakened the effect of its system's operation.

Compare with the main control room man-machine interface of conventional simulation Pan Tai, the digitizing man-machine interface has many apparent advantages, for example much information can be shown in a different manner or integrate, for the operator provides crucial information.This computerized information display mode has reduced operator's work and cognitive load, so that the operator can hold the integrality in power station fast.

Simultaneously, the digitizing man-machine interface is also served unfavorable factor to personnel's performance band, for example:

The restriction of window or picture disply quantity so that operating personnel can not be with the mode of quick eye scanning and fixing pattern-recognition acquired information, but need to could obtain needed demonstration through repeatedly selecting or opening a plurality of windows;

Interface operation has increased operator's cognitive load (as open, locate and adjust window), and the main task of administration interface and operator's processing is irrelevant, but notice that can scatter operation person;

The keyhole effect, the operator too pays close attention to a small amount of information, and has ignored " whole picture ";

Although adopt advanced warning system, the warning quantity that occurs during the power plant transient state is still more, may affect operator for the grasp of important warning;

The rules window that Computerized procedures provides is narrower, is unfavorable for that operator is to the overall understanding of rules;

Computerized system has also increased the overall complexity of control task.The operator sometimes can not understand, grasp the ongoing processing of computer system fully;

Robotization brings stress reducing of operator, so that the ability that they note abnormalities reduces.

Above-mentioned defective of the prior art is that nuclear safety work has brought certain hidden danger.The digitizing man-machine interface is in the application of nuclear power plant, behavior to operator may produce active influence, still, also might produce potential risks, therefore, estimate the digitizing man-machine interface in the design phase particularly important on the impact of the reliability generation of human behavior.Estimating one of effective method of this impact is exactly that the human reliability analyzes (HRA).

HRA is as the important component part of nuclear power plant's probabilistic safety analysis (PSA), can be used for the contribution of the misdeed of qualitative analysis when being in different running status with the qualitative assessment operator in nuclear power plant to power plant's risk.In digitizing nuclear power plant, HRA plays a role in the overall process of Human Machine Interface and application as an ingredient of human factor engineering design, for example verification and validation (the V﹠amp of HRA analysis and pulpit task analysis, human factor engineering design; V) complement one another, by display frame in operator's workstation, alarm design, Computerized procedures quality, staff training level etc. are carried out qualitative analysis or qualitative assessment, the digitizing man-machine interface is reflected in the contribution to the power station risk the impact of human behavior, thereby strengthens reliability and the security of nuclear power station operation.

Publish up to the present from nineteen eighty-three THERP handbook [5], multiple HRA method [6] occurred in the world, such as THERP, ASEP, HCR, SLIM, HEART, ATHEANA, CREAM, SPAR-H, HDT etc.Certain methods is used widely in many personnel of nuclear power plant fail-safe analysis because of its advantage at aspects such as availability, degree of ripeness, acceptabilities.At present, analyze the traditional HRA method of main employing based on the human reliability of digitizing man-machine interface in the world and guard assessment, such as THERP, ASEP, HCR, SPAR-H etc.The data source of these HRA methods is not considered characteristics and the impact thereof of digitizing man-machine interface, do not take into full account scientific and reasonable Human Machine Interface to the impact of nuclear power station handling safety yet, more can't clearly embody the digitizing man-machine interface to reliability and the security of nuclear power station operation.

Summary of the invention

For solving defective of the prior art, technical scheme of the present invention is as follows: a kind of man-machine interface design method that improves nuclear plant safety may further comprise the steps:

Step 1: judge the behavioral implications factor PSF that the digitizing man-machine interface is relevant _HSIWhether meet the requirements described PSF _HSI=PSF _D* PSF _A* PSF _P, PSF wherein _DBe the display frame factor, PSF _ABe the warning factor, PSF _PBe the Computerized procedures factor; Described satisfactory condition is PSF _HSI＜threshold value TH _HSIIf: undesirable, then carry out step 2;

Step 2: judge respectively PSF _D, PSF _A, PSF _PWhether meet the requirements described PSF _DSatisfactory condition is PSF _D＜threshold value TH _D, described PSF _ASatisfactory condition is: PSF _A＜threshold value TH _A, described PSF _PSatisfactory condition is: PSF _P＜threshold value TH _PIf undesirable, then carry out step 3;

Step 3: according to PSF _D, and/or PSF _A, and/or PSF _PDesign is adjusted.

In the described step 3, according to PSF _DThe step that design is adjusted further comprises:

Step 3-1-1 adjusts the link level, so that the click of straight target approach picture is no more than 3 times from any current picture.

PSF after if described step 3-1-1 adjusts _DStill undesirable, then carry out step:

Step 3-1-2 adjusts picture color, literal, icon, so that picture tone is between 75～85, saturation degree is between 90～120, and brightness is between 190～205.

PSF after if described step 3-1-2 adjusts _DStill undesirable, then carry out step:

Step 3-1-3 adjusts the image content accounting, is no more than 50% so that image content accounts for the ratio of picture;

Step 3-1-4 reduces the picture number of times that the user need to call.

In the described step 3, according to PSF _AThe step that design is adjusted further comprises:

Step 3-2-1 adjusts the tabulation of reporting to the police, and the tabulation of reporting to the police is classified, for warning messages different in each class arranges different grades.

PSF after if described step 3-2-1 adjusts _AStill undesirable, then carry out step:

Step 3-2-2 adjusts the complexity of reporting to the police and tabulating, and will independently report to the police to be combined into group alarm to reduce the alarming determining time.

PSF after if described step 3-2-2 adjusts _AStill undesirable, then carry out step:

Step 3-2-3, adjust to report to the police with rules between be linked as direct the link.

In the described step 3, according to PSF _PThe step that design is adjusted further comprises:

Step 3-3-1 adjusts the number of clicks that accurately enters Computerized procedures, is no more than 3 times so that directly enter the number of clicks of Computerized procedures from arbitrary current picture.PSF after if described step 3-3-1 adjusts _PStill undesirable, then carry out step:

Step 3-3-2 embeds real-time processing data in the rules picture.

PSF after if described step 3-3-2 adjusts _PStill undesirable, then carry out step:

Step 3-3-3 adjusts the automaticity that the rules step arranges;

Step 3-3-4, the operation steps of adjusting in the Computerized procedures makes it be easy to follow the tracks of, in order to effectively avoid operator to omit operation steps.

Beneficial effect of the present invention is as follows: by the behavioral implications factor PSF that judges that the digitizing man-machine interface is relevant _HSI=PSF _D* PSF _A* PSF _PWhether meet the requirements, if undesirable then according to PSF _D, and/or PSF _A, and/or PSF _PThe science adjustment is carried out in design, improved the security of nuclear power station operation, reduced the probability of maloperation, strengthened safety coefficient.

Embodiment

Below will describe preferred embodiment of the present inventionly, those skilled in the art should be understood that these embodiments and nonrestrictive.

In the first embodiment of the present invention, the THERP+HCR pattern of revising is adopted in personnel's fail-safe analysis after the origination event.People's mistake probability divides three parts to analyze, i.e. the diagnostic error probability P ₁, diagnose not response probability P ₂, the misoperation probability P ₃For the mistake of the people under the digitizing man-machine interface probability assessment, wherein P ₁Do not perform an analysis, but according to conventional way, guard valuation; P ₂Estimate with the HCR method; P ₃Estimate with the THERP method of revising.

People's Cognitive Reliability model (HCR:Human Cognitive Reliability) is the method for calculating people's not response probability under free constraint condition.HCR method supposition is after an accident occurs and first clear and definite warning occurs, and runtime value teams and groups in time do not make the probability of response to this warning, and is relevant with the ratio of intermediate value response time of the pot life that allows its response and teams and groups.The intermediate value response time represents that the pulpit operator of half under certain man-machine interface condition, is subject to the time that can finish compulsory exercise after certain alerting signal spread effect.This time can be judged by the analog machine test or by field investigation or scientific statistics.It plays a crucial role for computing staff's not response probability.

People's cognitive behavior can be divided into three types: technical ability type (skill-based behavior), regular pattern composite (rule-based behavior), knowledge type (knowledge-based behavior).For very skilled, need not with reference to rules is that executable behavior is the technical ability type; Behavior unskilled or that need can carry out with reference to rules is regular pattern composite; The knowledge type behavior then is that those need operator with the understanding of oneself and judge the behavior of carrying out without clear in rules.People's trip of technical ability, regular pattern composite, knowledge type can be estimated by the method for testing of science for classification, and it is not to be marrow of the present invention place, is not therefore described in detail.

The HCR method has been set up personnel's not response probability and the semiempirical formula of assignment of mission between the time according to test figure, it meets lognormal distribution approx:

$P\left(t\right)=1-\mathrm{\φ}\left[\frac{ln(t/T_{1/2})}{\mathrm{\σ}}\right]$

T: teams and groups' available response time;

T _1/2: through the intermediate value response time of finishing certain required by task after revising.

In preferred embodiment, the selection of parameter σ in other the embodiment, also can be selected the AM General data according to the human behavior type referring to table 1.For the behavior of technical ability type, select σ=0.4 to calculate; σ=0.6 is selected in the regular pattern composite behavior; σ=0.8 is selected in the knowledge type behavior.Under the extreme case, if there are not directly available guiding rules, get σ=1.0 this moment.

Table 1: parameter σ value

The HCR implementation process is as follows:

1) determines people's type of cognition (knowledge type, regular pattern composite or technical ability type), thereby determine parameter σ value;

2) from run case historical record, analog machine, expert judgments, obtain intermediate value response time T _{1/2, origin}

3) according to operator's experience (K ₁), pressure (psychology or physical stress K ₂), man-machine interface (K ₃) the three class performance shape factors adjustment intermediate value response time:

T _1/2=T _1/2，origin×(1+K ₁)×(1+K ₂)×(1+K ₃)

Statistics shows, preferred K ₁, K ₂, K ₃Choose and see Table 2.

Table 2: the adjusted coefficient K of performance shape factor

For digitizing man-machine interface, K ₃Selection will be according to PSF _HSIAnalysis result.

Human error's probabilistic forecasting technology (THERP:Technique for Human Error Rate Prediction) is to use maximum human reliability's analytical approachs in the nuclear power station probabilistic risk analysis.

THERP adopts cause delay personnel's action in the part of the mode analyst of HRA event tree, in chronological order the various combination of all personnel's task performance of relating to is analyzed.THERP is a kind of more perfect human reliability's analytical model of setting up at the task analysis foundation, and the mechanism of analyst's mistake not only is provided, and numerical value and the method for quantification also is provided.THERP is decomposed into some elemental motions with people's operation, can be obtained people's mistake probability of complex operations by the probability of failure of these elemental motions.Task analysis among the THERP need to be described the task that operator, maintenance personal or teams and groups need to carry out, and the impact of analyzing the correlativity between the personnel of teams and groups and recovering the factor.The THERP method also provides man-machine interface, tension-causing factor, staff training and level of skill etc. to affect the PSF of human behavior to correction formula and the data of human error's probability in addition.

Probability of failure P for a certain key personnel's action _3.i(i=1,2 ..., n; Behave the cause delay key personnel of part of n moves total number), for example, can consider people's factors such as the accident sight of part, available power station information, man-machine interface of causing delay, the conventional data of choose reasonable THERP handbook the 20th chapter form (the typical data table is as shown in the table) obtains intermediate value NHEP and the EF of EOO and EOC.Then obtain corresponding average according to formula (1):

$\mathrm{HEP}=\mathrm{NHEP}\×\exp \left(\frac{{\left(\frac{\ln \mathrm{EP}}{1.645}\right)}^2}{2}\right)---\left(1\right)$

The average sum of EOO and EOC is as people's mistake mathematical expectation of probability P of this step key personnel's action _{3, i.BHEP}

THERP table 20-7 is when using written rules, and the probability of an instruction is fallen in carelessness ^1.

Annotate:

1. suppose when estimating that the degree of correlation is zero between every (or unit) and other (or unit), when this degree of correlation is non-vanishing, need to use correlation model to revise.

2. this hurdle is be used to the project that indicates this table, rather than the instruction items in the rules.

3. when the user needs input digit, suppose the correct list of the check that used.

4. Table A-2 has been listed incorrect use list of the check or has not been used the probability of available written rules.

If 5. very skilled to task, then use the lower limit on uncertain border, i.e. 001(EF=5).

The probability that THERP table 20-10 slips up when reading from alarm free shows and recording quantitative information

Annotate:

1. in the high-pressure situation, if the place of serious violation people's routine custom is arranged in the design, then the HEF when reading quantitative values need multiply by 10.For example, the analogue instrument that increases from right to left of the numerical value of a horizontal positioned.

2. here " letter " refers to not pass on the part of meaning.And the monogram as MOV is to express exact meaning, and the record probability of failure can be ignored.

THERP table 20-12 manually controls ^1.The time EOC probability of failure ()

1. the HEP here only refers to carry out error, does not comprise that the decision of selecting which controller slips up.

2. if controller or the line-breaker that has carried out mark recovered, press the HEP in Table A-11 reconciliation statement.

3. the HEP with rotary knob controller (the 5th to seven) uses identical EF divided by 5().

4. this inefficacy is subject to the impact of indicator post indication readability, and controller's design and the difference of their position display are very large, and for some specific power plant, also can get EP is 3.

Preferably, can according to THERP handbook table 20-16, choose the PSF value;

THERP table 20-16 tensity and experience level are to the correction of HEP

Annotate:

1. these HEP are from " the data in THERP handbook the 3rd part and the 20th chapter.Table A-16 has been listed error factor (EF).

2. the skilled worker refers to carry out that estimating of task had 6 months or the people of more experiences, and new hand then refers to be less than the people of 6 months experiences, and two class people have required license or proof.

3. step-by-step task is task routine, that rules instruct, as implements written verification rules.Dynamic task needs the man-machine interaction of higher degree, as making a strategic decision, follow the tracks of several functions, controlling the comprehensive of several functions or any above task.These characteristics are between step-by-step task and the dynamic task, the basic distinction to the response of unscheduled event the time.

4. diagnosis may be carried out under different tensities, scope very high from being moderate to (menace is nervous).For in the nervous situation of menace, individual's crash rate gets 025.Usually can involve a plurality of people." table 20-1 and table 20-3 have listed behind the supposition affair alarm in the THERP handbook, and main control room relates to the associating probability of failure of the personnel of the teams and groups diagnosis of unscheduled event diagnosis, the degree of correlation between the personnel that considered to provide in the Table A-1.

In addition, for the digitizing man-machine interface, analyze PSF _HSIValue, people mistake probability is revised.

The suitable recovery factor (RFs:RecoveryFactors) is selected in master-control room operator's supervision after the simultaneously consideration accident, obtains the revised mathematical expectation of probability of should the step personnel botching routines according to formula (2):

P _3，i＝P _3,i.BHEP×PSF×PSF _HSI×RFs （2）

Total personnel probability of botching routines is:

$P_3=\underset{i=1}{\overset{n}{\mathrm{\Σ}}}{P}_{3.i}---\left(3\right)$

More specifically, the invention provides the technical scheme of following optimum.Introduce digitizing man-machine interface performance shape factor PSF on HCR+THERP method basis _HSI

For ensureing the safety of nuclear power station operation, the present invention further proposes the method for designing about operation interface and operating process, for the digitizing man-machine interface, from display frame, warning, the Computerized procedures three aspects: impact on personnel operation safety, introduce respectively different PSF _HSIThe factor is revised, and their numbering is respectively PSF _D, PSF _A, PSF _PDefinite principle of these three PSF factors sees Table 3.Wherein, PSF _HSI=PSF _D* PSF _A* PSF _PWork as PSF _HSIWhen eligible, then think safe design.

Preferably, according to PSF _HSIValue determine K ₃The choosing value of (correction factor relevant with man-machine interface) is worked as PSF _HSI＜1 o'clock, K ₃Value-0.22(is outstanding); Work as PSF _HSI=1 o'clock, K ₃Value 0(is good); Work as PSF _HSI＞1 o'clock, K ₃Value 0.44(is medium).When using the THERP method, directly on duty with PSF to the probability calculation of traditional people's mistake _HSIValue revised.

Table 3:PSF _HSIDefinite principle of modifying factor

Referring to table 3, the present invention in conjunction with the statistics natural law to the response PSF of display frame to personnel operation safety _DEstimate, objective, it is relevant with following factor:

1. the accurate number of clicks of target approach picture.The inventor shows through testing experiment repeatedly, in current picture, click 3 times or still less can be directly accurate target approach picture, can be so that the probability that operating personnel make mistakes reduces more than 90%, number of operations is more complicated, the probability of makeing mistakes is larger.Number of clicks is fewer, PSF _DHigher.

2. color, icon, literal setting.Icon in the picture, literal, color setting can not cause visual fatigue, objective, " tone " of " color " between 75～85, " saturation degree " between 90～120, " brightness " can overcome the visual fatigue of human eye well between 190～205.And being about 1/200 of the screen total area, the area of single icon and wall scroll literal can suppress well people's kopiopia.The color setting is near above-mentioned numerical value, PSF _DHigher.

3. picture is arranged rationality.It is clear that picture is arranged, too the complicated content picture that is full of too many function button, Word message easily causes mixed sense, is unfavorable for that human eye navigates on the object content quickly and accurately.The ratio (for example area ratio) that can use image content to account for picture is determined the rationality that picture is arranged, for example according to the inventor repeatedly objective statistics show, image content is less than 50%, accurate rapid positioning operation target device, and do not disturb normal use.Image content is fewer, PSF _DHigher.

4. the integrated information of user interface.Comprehensive inhomogeneity feature content on the same user interface, perhaps the multistage feature content of similar function can improve monitoring efficiency and accuracy.Experiment shows, for a series of actions that will finish, the picture that the user need to call is fewer, more is conducive to fast, correctly finishes the work.Finish frame numbers that particular task calls more near 1, PSF _DHigher.

About PSF _A, objective, it relates to:

1. warning list category rationality, the list category of reasonably reporting to the police can reduce a plurality of warnings of occurring simultaneously to operator's interference, are convenient to make fast and accurately response; In a better real-time mode, the tabulation of reporting to the police is classified, for warning messages different in each class arranges different grades.List category is more concrete, PSF _AHigher.

2. the complexity of reporting to the police and tabulating.Show by statistics, group alarm is compared with independent the warning, and warning message is clear and definite, can reduce the alarming determining time; The group alarm tabulation is more, then PSF _ALower.

3. report to the police with rules between link easy degree, linking between warning and the rules is simpler, then more is convenient to quick response is made in warning, thereby can promotes better safe class, PSF _AHigher.Preferably, preferably adopt direct link form.

About PSF _P, it relates to following factor:

1. accurately enter the number of clicks of Computerized procedures.In current picture, click 3 times or still less can directly accurately enter Computerized procedures, can be so that the probability that operating personnel make mistakes reduce more than 90%, number of operations is more complicated, and the probability of makeing mistakes is larger.Number of clicks is fewer, PSF _PHigher.

2. whether embed real-time processing data in the rules picture.In the rules picture, embed efficient and the accuracy that real-time processing data can improve agendum; The real-time processing data amount that embeds is more, PSF _PHigher.

3. the automaticity that arranges of rules step.The setting of rules step can be finished automatically by system, the more high generation that more can effectively avoid the personnel operation mistake of automaticity; The quantity of human intervention is fewer, PSF _PHigher.

4. the operation steps in the Computerized procedures is easy to follow the tracks of, and can effectively avoid operator to omit operation steps.The parameter value of modifying factor derives from the quantitative evaluation index that affects for man-machine interface in the research of traditional HRA method in the table, and on this basis through a large amount of HRA qualitative assessments proved as a result, so that these parameter values as far as possible reasonably are applicable to the quantitative test of digitizing man-machine interface HRA.

On the basis of above-mentioned technology, a kind of man-machine interface design method that improves nuclear plant safety is provided in the another embodiment of the invention, may further comprise the steps:

Step 1: judge the behavioral implications factor PSF that the digitizing man-machine interface is relevant _HSIWhether meet the requirements described PSF _HSI=PSF _D* PSF _A* PSF _P, PSF wherein _DBe the display frame factor, PSF _ABe the warning factor, PSF _PBe the Computerized procedures factor; Described satisfactory condition is PSF _HSI＜threshold value TH _HSIIf: undesirable, then carry out step 2;

Step 2: judge respectively PSF _D, PSF _A, PSF _PWhether meet the requirements described PSF _DSatisfactory condition is PSF _D＜threshold value TH _D, described PSF _ASatisfactory condition is: PSF _A＜threshold value TH _A, described PSF _PSatisfactory condition is: PSF _P＜threshold value TH _PIf undesirable, then carry out step 3;

Step 3: according to PSF _D, and/or PSF _A, and/or PSF _PDesign is adjusted.

In the described step 3, according to PSF _DThe step that design is adjusted further comprises:

Step 3-1-1 adjusts the link level, so that the click of straight target approach picture is no more than 3 times from any current picture.

PSF after if described step 3-1-1 adjusts _DStill undesirable, then carry out step:

Step 3-1-2 adjusts picture color, literal, icon, so that picture tone is between 75～85, saturation degree is between 90～120, and brightness is between 190～205.

PSF after if described step 3-1-2 adjusts _DStill undesirable, then carry out step:

Step 3-1-3 adjusts the image content accounting, is no more than 50% so that image content accounts for the ratio of picture;

Step 3-1-4 reduces the picture number of times that the user need to call.

In the described step 3, according to PSF _AThe step that design is adjusted further comprises:

Step 3-2-1 adjusts the tabulation of reporting to the police, and the tabulation of reporting to the police is classified, for warning messages different in each class arranges different grades.

PSF after if described step 3-2-1 adjusts _AStill undesirable, then carry out step:

Step 3-2-2 adjusts the complexity of reporting to the police and tabulating, and will independently report to the police to be combined into group alarm to reduce the alarming determining time.

PSF after if described step 3-2-2 adjusts _AStill undesirable, then carry out step:

Step 3-2-3, adjust to report to the police with rules between be linked as direct the link.

In the described step 3, according to PSF _PThe step that design is adjusted further comprises:

Step 3-3-1 adjusts the number of clicks that accurately enters Computerized procedures, is no more than 3 times so that directly enter the number of clicks of Computerized procedures from arbitrary current picture.PSF after if described step 3-3-1 adjusts _PStill undesirable, then carry out step:

Step 3-3-2 embeds real-time processing data in the rules picture.

PSF after if described step 3-3-2 adjusts _PStill undesirable, then carry out step:

Step 3-3-3 adjusts the automaticity that the rules step arranges;

Step 3-3-4, the operation steps of adjusting in the Computerized procedures makes it be easy to follow the tracks of, in order to effectively avoid operator to omit operation steps.

With M310 nuclear power plant under the Power operation operating mode, occur after loop minor break (SLOCA) accident in 60 minutes, operator is in judge accident and to carry out a loop fast cooling reduced pressure operation according to A1.1 rules (a loop minor break malfunction protocol) be example of digitizing man-machine interface.

Operator's response was after accident occured:

1) the A0(peace clicked in the picture of operator is annotated later accident diagnosis rules) alarm button directly enters Computerized procedures A0 rules and diagnoses, enter the A1.1 rules according to the diagnostic result clickthrough, and finish accident diagnosis and confirm in the A1.1 rules.For this diagnostic procedure, the probability P of its diagnostic error ₁Expression; It fails in time to finish the probability P of diagnosis ₂Expression.

2) the GCT navigation link clicked in the rules picture of secondary circuit operator enters the GCT system interface, and the controller of GCT131VV, GCT132VV, GCT133VV is made as " MANU " pattern, and the control valve position, and making a circuit cools speed is 56 ℃/h.Its misoperation probability P ₃Expression.

According to operational experience feedback, operator is very skilled for other behaviour in the A1.1 rules, therefore ignores its misoperation probability.

In people's mistake probability analysis process of present event, except the parameter that traditional HCR+THERP method need to be determined, for the digitizing man-machine interface, also need to introduce PSF _HSIModifying factor.Preferably, the present invention determines following parameter according to test statistics repeatedly, and these parameters are not unique value, can set according to actual conditions in actual applications:

PSF _D=0.5, outstanding

PSF _A=1, good

PSF _P=1, good

PSF _HSI＝0.5×1×1＝0.5

For the parameter value in the HCR model, determine:

σ=0.6, regular pattern composite

K ₁=0.00, the average level of training

K ₂=0.28, potential stress sight

K ₃=-0.22, man-machine interface is outstanding (according to PSF _HSI＜1)

The concrete computation process of this people's mistake probability is as follows:

1) according to hypothesis, P ₁=1E-4;

2) use the HCR method and calculate P ₂,

$P_2=1-\mathrm{\φ}\left[\frac{\ln (t/T_{1/2})}{\mathrm{\σ}}\right]=1-\mathrm{\φ}\left[\frac{\ln (51.92/3.00)}{0.6}\right]=1-1=0$

T wherein _1/2=T _{1/2, origin}* (1+K ₁) * (1+K ₂) * (1+K ₃);

T _{1/2, origin}Be the intermediate value response time of operator's diagnosis, obtaining this time by run case historical record, analog machine, judgement is 3 minutes;

T is for allowing Diagnostic Time, and deducting operator's operation and stand-by period by the thermal-hydraulic time window, to obtain the preferred value of this time be 51.92 minutes.

3) use the THERP method of revising and calculate P ₃,

P ₃＝（HEP _M1+HEP _M2）×PSF×PSF _HSI×RF ₁×RF ₂

=(0.00375+0.00125) * 2 * 0.5 * 0.15 * 0.05=3.75E-5(average)

HEP wherein _M1The operator who obtains for the THERP method omits the mathematical expectation of probability of operation steps;

HEP _M2The mathematical expectation of probability of the operator's operating mistake that obtains for the THERP method;

PSF is the master-control room operator's that obtains of THERP method pressure load level;

RF is the recovery factor that the THERP method obtains expeditor and An worker.

4) total people's mistake probability HEP=P ₁+ P ₂+ P ₃=1.375E-4, EF=3.

Beneficial effect of the present invention is as follows:

By decision operation probability of failure PSF _HSI=PSF _D* PSF _A* PSF _PWhether meet the requirements, if undesirable then according to PSF _D, and/or PSF _A, and/or PSF _PThe science adjustment is carried out in design, improved the security of nuclear power station operation, reduced the probability of maloperation, strengthened safety coefficient.

Claims (10)

1. man-machine interface design method that improves nuclear plant safety may further comprise the steps:

Step 1: decision operation probability of failure PSF _HSIWhether meet the requirements described PSF _HSI=PSF _D* PSF _A* PSF _P, PSF wherein _DBe the display frame factor, PSF _ABe the warning factor, PSF _PBe the Computerized procedures factor; Described satisfactory condition is PSF _HSI＜threshold value TH _HSIIf: undesirable, then carry out step 2;

Step 2: judge respectively PSF _D, PSF _A, PSF _PWhether meet the requirements described PSF _DSatisfactory condition is PSF _D＜threshold value TH _D, described PSF _ASatisfactory condition is: PSF _A＜threshold value TH _A, described PSF _PSatisfactory condition is: PSF _P＜threshold value TH _PIf undesirable, then carry out step 3;

Step 3: according to PSF _D, and/or PSF _A, and/or PSF _PDesign is adjusted.

2. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 1 is characterized in that: in the described step 3, according to PSF _DThe step that design is adjusted further comprises:

Step 3-1-1 adjusts the link level, so that the click of straight target approach picture is no more than 3 times from any current picture.

3. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 2 is characterized in that: if PSF after described step 3-1-1 adjusts _DStill undesirable, then carry out step:

Step 3-1-2 adjusts picture color, literal, icon, so that picture tone is between 75～85, saturation degree is between 90～120, and brightness is between 190～205.

4. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 3 is characterized in that: if PSF after described step 3-1-2 adjusts _DStill undesirable, then carry out step:

Step 3-1-3 adjusts the image content accounting, is no more than 50% so that image content accounts for the ratio of picture;

Step 3-1-4 reduces the picture number of times that the user need to call.

5. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 1 is characterized in that: in the described step 3, according to PSF _AThe step that design is adjusted further comprises:

Step 3-2-1 adjusts the tabulation of reporting to the police, and the tabulation of reporting to the police is classified, for warning messages different in each class arranges different grades.

6. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 5 is characterized in that: if PSF after described step 3-2-1 adjusts _AStill undesirable, then carry out step:

Step 3-2-2 adjusts the complexity of reporting to the police and tabulating, and will independently report to the police to be combined into group alarm to reduce the alarming determining time.

7. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 6 is characterized in that: if PSF after described step 3-2-2 adjusts _AStill undesirable, then carry out step:

Step 3-2-3, adjust to report to the police with rules between be linked as direct the link.

8. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 1 is characterized in that: in the described step 3, according to PSF _PThe step that design is adjusted further comprises:

Step 3-3-1 adjusts the number of clicks that accurately enters Computerized procedures, is no more than 3 times so that directly enter the number of clicks of Computerized procedures from arbitrary current picture.

9. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 8 is characterized in that: if PSF after described step 3-3-1 adjusts _PStill undesirable, then carry out step:

Step 3-3-2 embeds real-time processing data in the rules picture.

10. the method that designs based on the raising nuclear plant safety of digitizing man-machine interface as claimed in claim 9 is characterized in that: if PSF after described step 3-3-2 adjusts _PStill undesirable, then carry out step:

Step 3-3-3 adjusts the automaticity that the rules step arranges;

Step 3-3-4, the operation steps of adjusting in the Computerized procedures makes it be easy to follow the tracks of, in order to effectively avoid operator to omit operation steps.