CN108828984B

CN108828984B - Control device

Info

Publication number: CN108828984B
Application number: CN201810599511.8A
Authority: CN
Inventors: 轩辕昊; 谢红军; 陆建莺; 丁楠; 张小勇
Original assignee: State Nuclear Electric Power Planning Design and Research Institute Co Ltd
Current assignee: State Nuclear Electric Power Planning Design and Research Institute Co Ltd
Priority date: 2018-06-12
Filing date: 2018-06-12
Publication date: 2020-03-03
Anticipated expiration: 2038-06-12
Also published as: CN108828984A

Abstract

The invention discloses a control device, and belongs to the technical field of automatic control. The device comprises: the device comprises a device selection module, a first state determination module, a second state determination module, a start-stop fault detection module, a fault summary module and a device start-stop module; the first state determining module is connected with an operation and stop state detecting interface of the first power distribution device, the second state determining module is connected with an operation and stop state detecting interface of the second power distribution device, the first state determining module and the second state determining module are respectively connected with the device selecting module, and the device selecting module is connected with the device starting and stopping module so as to control the first power distribution device and the second power distribution device to start or stop through the device starting and stopping module. Therefore, a plurality of modules are arranged in one control device, two power distribution devices can be controlled through one control device, and the problem of control logic dispersion is avoided.

Description

Control device

Technical Field

The invention relates to the technical field of automatic control, in particular to a control device.

Background

With the continuous emphasis of China on nuclear energy technology, the pace of nuclear power construction is accelerated. The high temperature gas cooled reactor nuclear power plant demonstration project is a nuclear power plant with a fourth generation nuclear power level, which is already put into construction in China and is expected to be put into operation soon. The demonstration project of the high-temperature gas cooled reactor nuclear power station adopts a working mode that two reactors drive a turbine to operate and generate power, three water feeding pumps are arranged, two reactors are respectively provided with one water feeding pump, and the other reactors are used as standby water feeding pumps of the water feeding pumps arranged on the two reactors. As a backup feed pump for two feed pumps, power needs to be distributed to the backup feed pump to ensure that the backup feed pump can operate normally.

For convenience of description, the feed pumps respectively provided in the two reactors are referred to as a first feed pump and a second feed pump. At present, the first water-feeding pump and the second water-feeding pump are respectively controlled by different power distribution devices, and power supplies of the different power distribution devices are taken from different power buses, namely, the power supplies of the first water-feeding pump and the second water-feeding pump are different. For ease of description, the electrical distribution device that provides power to the first feed pump will be referred to as the first electrical distribution device, and the electrical distribution device that provides power to the second feed pump will be referred to as the second electrical distribution device. Since the backup water feed pump needs to be used as a backup for both the first water feed pump and the second water feed pump, the backup water feed pump needs to be controlled by two power distribution devices, and power supplies of the two power distribution devices are respectively taken from different power buses. Thus, when the backup feed pump is in backup of the first feed pump, power is provided to the backup feed pump through the first power distribution device. When the standby water-feeding pump is used as a standby of the second water-feeding pump, the standby water-feeding pump is supplied with power through the second power distribution device.

Because reserve water-feeding pump is controlled by two distribution device, consequently, in order to realize through the same reserve water-feeding pump of different distribution device control, often need set up two controlling means, control these two distribution device respectively through two controlling means to the realization is to provide the power for reserve water-feeding pump through first distribution device or second distribution device, but will produce the problem of control logic dispersion like this.

Disclosure of Invention

In order to solve the problems of the prior art, an embodiment of the present invention provides a control device. The technical scheme is as follows:

on one hand, the control device comprises a device selection module, a first state determination module, a second state determination module, a start-stop fault detection module, a fault summary module and a device start-stop module;

the input end of the first state determining module is connected with an operation state detecting interface and a stop state detecting interface of a first power distribution device respectively, the input end of the second state determining module is connected with an operation state detecting interface and a stop state detecting interface of a second power distribution device respectively, the first output end of the first state determining module and the first output end of the second state determining module are connected with the input end of the device selecting module respectively, the input end of the device selecting module is further connected with a first power supply setting button and a second power supply setting button respectively so as to select a power distribution device which provides power for a standby water feeding pump from the first power distribution device and the second power distribution device, and the first power distribution device and the second power distribution device provide power for water feeding pumps configured for two reactors respectively;

the output end of the device selection module, the first output end and the second output end of the first state determination module, and the first output end and the second output end of the second state determination module are respectively connected with the input end of the device start-stop module, the input end of the device start-stop module is also respectively connected with the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, a hang-up button, a hang-off button, a manual control button, an automatic control button, a manual start button, an automatic start interface, a start protection interface, a stop protection interface, a start permission button, a stop permission interface, a manual stop button, and an automatic stop interface, the output end of the device start-stop module, the second output end of the first state determination module, and the second output end of the second state determination module are respectively connected with the input end of the start-stop fault detection module, the input end of the start-stop fault detection module is further connected with a reset button, the output end of the start-stop fault detection module is connected with the input end of the fault collection module, the output end of the fault collection module is connected with the fault feedback end of the device start-stop module, and the output end of the device start-stop module is further connected with the start-stop interface of the first power distribution device and the start-stop interface of the second power distribution device so as to control the start or stop of the first power distribution device and the second power distribution device.

Optionally, the control device further comprises a double fault detection module of the first power distribution device and a double fault detection module of the second power distribution device;

the input of first distribution device's two fault detection module with first distribution device's running state detection interface first distribution device's stop state detection interface with the third output of the module is confirmed to first state is connected respectively, second distribution device's two fault detection module's input with second distribution device's running state detection interface second distribution device's stop state detection interface with the third output of the module is confirmed to the second state is connected respectively, first distribution device's two fault detection module's output with the output of second distribution device's two fault detection module respectively with the input of the module is gathered in the trouble is connected.

Optionally, the device selection module includes a first and gate, a second and gate, a first flip-flop, and a first not gate;

a first input end of the first AND gate is connected with the first power supply setting button, a second input end of the first AND gate is connected with a first output end of the second state determining module, and an output end of the first AND gate is connected with a setting end of the first trigger;

a first input end of the second AND gate is connected with the second power supply setting button, a second input end of the second AND gate is connected with a first output end of the first state determining module, and an output end of the second AND gate is connected with a reset end of the first trigger;

the output end of the first trigger is connected with the input end of the first NOT gate and the input end of the device start-stop module respectively, and the output end of the first NOT gate is connected with the input end of the device start-stop module.

Optionally, the device start-stop module includes a device start module and a device stop module;

the input of the device starting module is connected with the output of the device selecting module, the second output of the first state determining module and the second output of the second state determining module respectively, the input of the device starting module is further connected with the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, the hang button, the hang release button, the manual control button, the automatic control button, the manual starting button, the automatic starting interface, the starting protection interface, the stopping protection interface and the starting permission button are connected respectively, the fault feedback end of the device starting module is connected with the output of the fault summarizing module, the input of the device starting module is further connected with the feedback output of the device stopping module, the instruction output of the device starting module is connected with the starting interface of the first power distribution device and the second power distribution device The starting interfaces are respectively connected to control the first power distribution device and the second power distribution device to start;

the feedback output end of the device starting module is connected with the input end of the device stopping module, the input end of the device stopping module is also connected with the output end of the device selecting module, the first output end of the first state determining module, the first output end of the second state determining module, the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, the starting protection interface, the stopping permission interface, the manual stopping button and the automatic stopping interface respectively, the device stops the fault feedback end of the module with the output end of the fault summary module is connected, the instruction output end of the device stops the module with the stop interface of the first power distribution device and the stop interface of the second power distribution device are respectively connected, so that the first power distribution device and the second power distribution device are controlled to stop.

Optionally, the device start module includes a first pulse generator, a second flip-flop, a third flip-flop, a fourth flip-flop, a second not gate, a third not gate, a fourth not gate, a fifth not gate, a third and gate, a fourth and gate, a fifth and gate, a sixth and gate, a seventh and gate, an eighth and gate, a ninth and gate, a first or gate, a second or gate, and a third or gate;

the input end of the first pulse generator is connected with the automatic starting interface, the output end of the first pulse generator is connected with the first input end of the third AND gate, the position end of the second trigger is connected with the manual control button, the reset end of the second trigger is connected with the automatic control button, the output end of the second trigger is connected with the input end of the second NOT gate, the output end of the second NOT gate is respectively connected with the second input end of the third AND gate and the input end of the device stopping module, and the output end of the third AND gate is connected with the first input end of the first OR gate;

the second input end of the first or gate is connected with the manual start button, the output end of the first or gate is connected with the first input end of the fourth and gate, the input end of the third not gate is connected with the stop protection interface, the output end of the third not gate is connected with the second input end of the fourth and gate, the third input end of the fourth and gate is connected with the start permission button, and the output end of the fourth and gate is connected with the first input end of the fifth and gate;

the position end of the third trigger is connected with the hang-up button, the reset end of the third trigger is connected with the hang-down button, the output end of the third trigger is connected with the input end of the fourth not gate, and the output end of the fourth not gate is respectively connected with the second input end of the fifth and gate, the first input end of the sixth and gate and the input end of the device stop module;

the output end of the fifth and-gate is connected with the first input end of the second or-gate, the second input end of the sixth and-gate is connected with the start protection interface, the output end of the sixth and-gate is respectively connected with the second input end of the second or-gate and the input end of the fifth not-gate, and the output end of the second or-gate is respectively connected with the position end of the fourth trigger and the input end of the device stopping module;

the output end of the fifth not gate is connected with the first input end of the seventh and gate, the second input end of the seventh and gate is connected with the output end of the fault summary module, and the output end of the seventh and gate is connected with the first input end of the third or gate;

a second input end of the third or gate is connected with a second output end of the first state determining module, a third input end of the third or gate is connected with a second output end of the second state determining module, a fourth input end of the third or gate is connected with a feedback output end of the device stopping module, and an output end of the third or gate is connected with a reset end of the fourth trigger;

the output end of the fourth trigger is connected with the first input end of the eighth AND gate and the first input end of the ninth AND gate respectively, the second input end of the eighth AND gate is connected with the remote control permission interface of the first power distribution device, the second input end of the ninth AND gate is connected with the remote control permission interface of the second power distribution device, the third input end of the eighth AND gate and the third input end of the ninth AND gate are connected with the output end of the device selection module respectively, the output end of the eighth AND gate is connected with the starting interface of the first power distribution device, the output end of the ninth AND gate is connected with the starting interface of the second power distribution device, and the output end of the eighth AND gate and the output end of the ninth AND gate are further connected with the input end of the start-stop fault detection module respectively.

Optionally, the device stopping module includes a second pulse generator, a fifth trigger, a sixth not gate, a seventh not gate, a tenth and gate, an eleventh and gate, a twelfth and gate, a thirteenth and gate, a fourteenth and gate, a fifteenth and gate, a sixteenth and gate, a seventeenth and gate, a fourth or gate, a fifth or gate, and a sixth or gate;

the input end of the second pulse generator is connected with the automatic stop interface, the output end of the second pulse generator is connected with the first input end of the tenth AND gate, the second input end of the tenth AND gate is connected with the feedback output end of the device starting module, and the output end of the tenth AND gate is connected with the first input end of the fourth OR gate;

the second input end of the fourth or gate is connected with the manual stop button, the output end of the fourth or gate is connected with the first input end of the eleventh and gate, the input end of the sixth not gate is connected with the start protection interface, the output end of the sixth not gate is connected with the second input end of the eleventh and gate, the third input end of the eleventh and gate is connected with the stop permission interface, and the output end of the eleventh and gate is connected with the first input end of the twelfth and gate;

a second input end of the twelfth AND gate and a first input end of the thirteenth AND gate are respectively connected with a feedback output end of the device starting module, an output end of the twelfth AND gate is connected with a first input end of the fifth OR gate, a second input end of the thirteenth AND gate is connected with the stop protection interface, and an output end of the thirteenth AND gate is respectively connected with a second input end of the fifth OR gate and an input end of the seventh NOT gate;

the output end of the fifth or gate is respectively connected with the set end of the fifth trigger and the input end of the device starting module, the output end of the seventh not gate is connected with the first input end of the fourteenth and gate, the second input end of the fourteenth and gate is connected with the output end of the fault summary module, the output end of the fourteenth AND gate is connected with the first input end of the sixth OR gate, the second input end of the sixth OR gate is connected with the feedback output end of the device starting module, a first input terminal of the fifteenth and gate is connected to a first output terminal of the first state determination module, a second input terminal of the fifteenth and gate is connected to the first output terminal of the second state determination module, the output end of the fifteenth and gate is connected with the third input end of the sixth or gate, and the output end of the sixth or gate is connected with the reset end of the fifth flip-flop;

the output end of the fifth trigger is connected with the first input end of the sixteenth and the first input end of the seventeenth and the second input end of the sixteenth and the seventeenth and the second input end of the sixteenth and the seventeenth and the second input end of the device selection module are connected with the output end of the device selection module respectively, the output end of the sixteenth and the output end of the seventeenth and the second input end of the second power distribution device are connected with the input end of the start-stop fault detection module respectively.

Optionally, the first state determining module includes an eighth not gate, a ninth not gate, an eighteenth and gate, and a nineteenth and gate;

the input end of the eighth not gate is connected with the running state detection interface of the first power distribution device, and the output end of the eighth not gate is respectively connected with the input end of the double fault detection module of the first power distribution device and the first input end of the nineteenth and gate;

the input end of the ninth not gate is connected with the stop state detection interface of the first power distribution device, and the output end of the ninth not gate is respectively connected with the input end of the double fault detection module of the first power distribution device and the first input end of the eighteenth and gate;

a second input end of the eighteenth AND gate is connected with the running state detection interface of the first power distribution device, and an output end of the eighteenth AND gate is respectively connected with an input end of the device start-stop module and an input end of the start-stop fault detection module;

the second input end of the nineteenth AND gate is connected with the stop state detection interface of the first power distribution device, and the output end of the nineteenth AND gate is connected with the input end of the device start-stop module and the input end of the start-stop fault detection module respectively.

Optionally, the second state determination module includes a tenth not gate, an eleventh not gate, a twentieth and gate, and a twenty-first and gate;

the input end of the tenth NOT gate is connected with the running state detection interface of the second power distribution device, and the output end of the tenth NOT gate is respectively connected with the input end of the double fault detection module of the second power distribution device and the first input end of the twenty-first AND gate;

the input end of the eleventh NOT gate is connected with the stop state detection interface of the second power distribution device, and the output end of the eleventh NOT gate is respectively connected with the input end of the double-fault detection module of the second power distribution device and the first input end of the twentieth AND gate;

a second input end of the twentieth AND gate is connected with the running state detection interface of the second power distribution device, and an output end of the twentieth AND gate is respectively connected with an input end of the device start-stop module and an input end of the start-stop fault detection module;

the second input end of the twenty-first AND gate is connected with the stop state detection interface of the second power distribution device, and the output end of the twenty-first AND gate is connected with the input end of the device start-stop module and the input end of the start-stop fault detection module respectively.

Optionally, the start-stop fault detection module includes a first delay timer, a second delay timer, a seventh or gate, an eighth or gate, a ninth or gate, a tenth or gate, a sixth trigger, and a seventh trigger;

a first input end and a second input end of the seventh or gate, and a first input end and a second input end of the eighth or gate are respectively connected with an output end of the device start-stop module, an output end of the seventh or gate is connected with an input end of the first delayer, and an output end of the eighth or gate is connected with an input end of the second delayer;

the output end of the first delayer is connected with the set end of the sixth trigger, the first input end of the ninth or gate is connected with the reset button, the second input end of the ninth or gate is connected with the second output end of the first state determination module, the third input end of the ninth or gate is connected with the second output end of the second state determination module, the output end of the ninth or gate is connected with the reset end of the sixth trigger, and the output end of the sixth trigger is connected with the input end of the fault summary module;

the output end of the second delayer is connected with the set end of the seventh trigger, the first input end of the tenth or gate is connected with the reset button, the second input end of the tenth or gate is connected with the output end of the device start-stop module, the output end of the tenth or gate is connected with the reset end of the seventh trigger, and the output end of the seventh trigger is connected with the input end of the fault summary module.

Optionally, the double fault detection module of the first power distribution apparatus includes a twenty-second and gate, a twenty-third and gate, a third delay and a fourth delay;

a first input end of the twenty-second AND gate is connected with the running state detection interface of the first power distribution device, a second input end of the twenty-second AND gate is connected with the stop state detection interface of the first power distribution device, and an output end of the twenty-second AND gate is connected with an input end of the third delayer;

a first input end and a second input end of the twenty-third and gate are respectively connected with a third output end of the first state determination module, and an output end of the twenty-third and gate is connected with an input end of the fourth delayer;

and the output end of the third delayer and the output end of the fourth delayer are respectively connected with the input end of the fault summary module.

Optionally, the double fault detection module of the second power distribution apparatus includes a twenty-fourth and gate, a twenty-fifth and gate, a fifth delay and a sixth delay;

a first input end of the twenty-fourth and gate is connected with the running state detection interface of the second power distribution device, a second input end of the twenty-fourth and gate is connected with the stop state detection interface of the second power distribution device, and an output end of the twenty-fourth and gate is connected with an input end of the fifth delayer;

a first input end and a second input end of the twenty-fifth AND gate are respectively connected with a third output end of the second state determination module, and an output end of the twenty-fifth AND gate is connected with an input end of the sixth delayer;

and the output end of the fifth delayer and the output end of the sixth delayer are respectively connected with the input end of the fault summary module.

Optionally, the input end of the fault summary module is further connected to the electrical fault interface of the first power distribution apparatus and the electrical fault interface of the second power distribution apparatus, respectively.

The technical scheme provided by the embodiment of the invention has the following beneficial effects:

in the embodiment of the invention, a first state determination module is connected with an operation and stop state detection interface of a first power distribution device, and a second state determination module is connected with an operation and stop state detection interface of a second power distribution device, so that the operation and stop states of the two power distribution devices are respectively detected by the two state determination modules; the first state determining module and the second state determining module are respectively connected with the device selecting module so as to select a power distribution device which provides power for the standby water feeding pump from the first power distribution device and the second power distribution device through the device selecting module; and the device selection module is connected with the device start-stop module so as to control the start or stop of the first power distribution device and the second power distribution device through the device start-stop module. Therefore, a plurality of modules are arranged in one control device, two power distribution devices can be controlled through one control device, and the problem of control logic dispersion is avoided.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 11 is a schematic structural diagram of a control device according to an embodiment of the present invention;

FIG. 12 is a schematic structural diagram of a control device according to an embodiment of the present invention;

fig. 13 is a schematic structural diagram of a control device according to an embodiment of the present invention.

Reference numerals:

module marking:

1: device selection module, 2: first state determination module, 3: second state determination module, 4: open and stop fault detection module, 5: fault summary module, 6: device start-stop module, 7: double fault detection module of the first power distribution device, 8: a double fault detection module of a second power distribution device;

61: device start-up module, 62: the device stops the module.

Control input interface marking:

a1: first power setting button, a 2: second power setting button, a 3: suspend button, a 4: off-hook button, a 5: manual control button, a 6: automatic control button, a 7: manual start button, A8: manual stop button, a 9: reset button, a 10: auto-launch interface, a 11: auto stop interface, a 12: start protection interface, a 13: stop protection interface, a 14: start-up enabled interface, a 15: the allow interface is stopped.

State feedback input interface flag:

b1: operation state detection interface of first power distribution device, B2: stop state detection interface of first power distribution apparatus, B3: electrical fault interface of first power distribution device, B4: remote control permission interface of the first power distribution device, B5: remote control permission interface of the second power distribution device, B6: operation state detection interface of second power distribution device, B7: stop state detection interface of second power distribution apparatus, B8: an electrical fault interface of the second electrical distribution device.

Control command output interface marking:

b9: start-stop interface of first power distribution device, B10: a start-stop interface of the second power distribution device;

b9 a: start interface of first power distribution device, B9B: stop interface of first power distribution device, B10 a: start interface of second power distribution device, B10B: a stop interface of the second power distribution device.

Displaying an interface mark:

c1: first power distribution display interface, C2: second power distribution display interface, C3: start fault display interface, C4: stop fault display interface, C5: dual 1 fault display interface of first power distribution device, C6: dual 0 fault display interface of first power distribution device, C7: the standby feed pump is operated when the first power distribution device supplies power, and the operation display interface is C8: the standby feed pump has stopped displaying the interface when the first power distribution device supplies power, C9: appliance fault display interface of first power distribution device, C10: remote control of the first power distribution device allows display interface, C11: remote control of the second power distribution device allows display interface, C12: dual 1 fault display interface of second power distribution device, C13: dual 0 fault display interface of second power distribution device, C14: the standby water feeding pump is operated when the second power distribution device supplies power, and the operation display interface is C15: the standby feed pump has stopped displaying the interface when the second power distribution device supplies power, C16: an appliance fault display interface of the second power distribution device.

And (3) marking a device:

11: first and gate, 12: second and gate, 13: first flip-flop, 14: a first not gate;

21: eighth not gate, 22: ninth not gate, 23: eighteenth and gate, 24: a nineteenth AND gate;

31: tenth not gate, 32: eleventh not gate, 33: twentieth and gate, 34: a twenty-first AND gate;

41: first delayer, 42: second delayer, 43: seventh or gate, 44: eighth or gate, 45: ninth or gate, 46: tenth or gate, 47: sixth flip-flop, 48: a seventh flip-flop; 51: an eleventh OR gate;

611: first pulse generator, 612: second flip-flop, 613: third flip-flop, 614: fourth flip-flop, 615: second not gate, 616: third not gate, 617: fourth not gate, 618: fifth not gate, 619: third and gate, 6110: fourth and gate, 6111: fifth and gate, 6112: sixth and gate, 6113: seventh and gate, 6114: eighth and gate, 6115: ninth and gate, 6116: first or gate, 6117: second or gate, 6118: a third OR gate;

621: second pulse generator, 622: fifth flip-flop, 623: sixth not gate, 624: seventh not gate, 625: tenth and gate, 626: eleventh and gate, 627: twelfth and gate, 628: thirteenth and gate, 629: fourteenth and gate, 6210: fifteenth and gate, 6211: sixteenth and gate, 6212: seventeenth and gate, 6213: fourth or gate, 6214: fifth or gate, 6215: a sixth OR gate;

71: twenty-second and gate, 72: twenty-third and gate, 73: third delayer, 74: a fourth time delay;

81: twenty-fourth and gate, 82: twenty-fifth and gate, 83: fifth delayer, 84: and a sixth delayer.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Fig. 1 is a schematic structural diagram illustrating a control apparatus according to an exemplary embodiment. As shown in fig. 1, the control device includes: the device selection module 1, the first state determination module 2, the second state determination module 3, the start-stop fault detection module 4, the fault summary module 5 and the device start-stop module 6;

the input 2a of the first state determination module 2 is connected to the operating state detection interface B1 and the stop state detection interface B2 of the first power distribution apparatus, respectively, the input 3a of the second state determination module 3 is connected to the operating state detection interface B6 and the stop state detection interface B7 of the second power distribution apparatus, respectively, the first output 2B of the first state determination module 2 and the first output 3B of the second state determination module 3 are connected to the input 1a of the apparatus selection module 1, respectively, the input terminal 1a of the device selection module 1 is also connected to a first power setting button a1 and a second power setting button a2, to select a power distribution unit from the first power distribution unit and the second power distribution unit to supply power to the backup feed water pump, the first power distribution device and the second power distribution device respectively provide power for the water feeding pumps configured for the two reactors;

the output 1B of the device selection module 1, the first output 2B and the second output 2c of the first state determination module 2, and the first output 3B and the second output 3c of the second state determination module 3 are respectively connected to the input 6a of the device start-stop module 6, the input 6a of the device start-stop module 6 is further connected to the remote control permission interface B4 of the first power distribution device, the remote control permission interface B5 of the second power distribution device, the suspend button A3, the suspend button a4, the manual control button a5, the automatic control button A6, the manual start button a7, the manual stop button A8, the automatic start interface a10, the automatic stop interface a11, the start protection interface a12, the stop protection interface a13, the start permission interface a14, and the stop permission interface a15, the output 6B of the device selection module 6, the second output 2c of the first state determination module 2, and a second output end 3c of the second state determination module 3 is connected with an input end 4a of the start-stop fault detection module 4, the input end 4a of the start-stop fault detection module 4 is further connected with a reset button A9, an output end 4B of the start-stop fault detection module 4 is connected with an input end 5a of the fault summary module 5, an output end 5B of the fault summary module 5 is connected with a fault feedback end 6c of the device start-stop module 6, and an output end 6B of the device start-stop module 6 is further connected with a start-stop interface B9 of the first power distribution device and a start-stop interface B10 of the second power distribution device, so as to control the first power distribution device and the second power distribution device to start or stop.

The states of a first power distribution device and a second power distribution device are determined by a first state determination module 2 and a second state determination module 3 respectively, and the first state determination module 2 and the second state determination module 3 are connected with a device selection module 1 respectively, so that after the states of the two power distribution devices are determined, the power distribution device for supplying power to a standby feed pump is selected from the first power distribution device and the second power distribution device by the device selection module 1, and the first power distribution device and the second power distribution device respectively supply power to the feed pumps of the two reactor configurations.

Specifically, the first state determination module 2 is connected to the operation state detection interface B1 and the stop state detection interface B2 of the first power distribution apparatus, respectively, to determine the state of the first power distribution apparatus through the first state determination module 2, the second state determination module 3 is connected to the operation state detection interface B6 and the stop state detection interface B7 of the second power distribution apparatus, respectively, to determine the state of the second power distribution apparatus through the second state determination module 2, and then the first state determination module 2, the second state determination module 3, the first power setting button a1, and the second power setting button a2 are connected to the apparatus selection module 1, respectively, to determine the power distribution apparatus that supplies power to the backup feed water pump through the state of the first power distribution apparatus, the state of the second power distribution apparatus, the first power setting button a1, and the second power setting button a 2.

After the power distribution apparatus that supplies power to the backup feed water pump is determined by the apparatus selection module 1, the determined power distribution apparatus may be controlled to be turned on or off by the apparatus start/stop module 6, and some faults may occur while controlling the power distribution apparatus to be turned on or off, and thus, the power distribution apparatus may be fault-detected by the start/stop fault detection module 4 to be turned on or off. After the fault is detected, it may be fed back to the fault summary module 5. In this way, faults summarized by the fault summary module can be used as a reference to control whether the determined power distribution device is started or stopped.

Specifically, the device start-stop module 6 is connected with various interfaces and buttons, and an operator can send various instructions to the device start-stop module 6 through the various interfaces and buttons to control the specific working process of the power distribution device. The device start-stop module 6 is connected with the start-stop fault detection module 4, when the device start-stop module 6 controls the power distribution device to start or stop, the faults which may occur can be detected through the start-stop fault detection module 4, then the start-stop fault detection module 4 is connected with the fault collection module 5, and the faults detected by the start-stop fault detection module 4 are collected through the fault collection module 5.

The multiple interfaces and buttons comprise a remote control permission interface B4 of the first power distribution device, a remote control permission interface B5 of the second power distribution device, a hang button A3, an unlink button A4, a manual control button A5, an automatic control button A6, a manual start button A7, a manual stop button A8, an automatic start interface A10, an automatic stop interface A11, a start protection interface A12, a stop protection interface A13, a start permission interface A14 and a stop permission interface A15.

It should be noted that the suspend is a danger flag in the isolation function, and when the suspend button a3 is triggered, all commands can be isolated, and the control device needs to be able to control in the off state.

In addition, when the manual control button A5 is triggered, the automatic start command and the automatic stop command are shielded, and at this time, an operator can control the control device by triggering the manual start button A7 and the manual stop button A8, but at this time, the start protection interface A12 and the stop protection interface A13 still function to ensure that the control device can be automatically started or stopped when a signal damaging the control device is generated, so that the priority of the command input through the protection interface is highest in the off-hook state.

When the automatic control button A6 is triggered, the control device can be controlled according to the automatic start signal corresponding to the automatic start interface A10 and the automatic stop signal corresponding to the automatic stop interface A11, and meanwhile, the control device is still effectively controlled through the manual start button A7 and the manual stop button A8.

Since the input commands or signals may be limited by some permission conditions during the control of the control device, the start permission interface a14 and the stop permission interface a15 are respectively connected to the device start/stop module 6 in the control device so as to input the permission conditions through the permission buttons. When the input of the start permission interface A14 is 0 and the input of the stop permission interface A15 is 0, namely no permission condition is input, the instruction input through other interfaces is not limited by the permission condition; when the input of the start permission interface A14 is 1 and the input of the stop permission interface A15 is 1, that is, when there is a permission condition input, the instruction input through other interfaces is limited by the permission condition. It should be noted that, since the priority of the instruction input through the protection interface is highest, the instruction input through the protection interface is not limited by the permission condition.

It should be noted that the start-stop fault detection module 4 is further connected to the reset button a9, so that when the start-stop fault detection module 4 determines that a start fault or a stop fault occurs, an operator may trigger the reset button a9 to reset after troubleshooting.

In the embodiment of the present invention, the first state determination module 2 is connected to the operation and stop state detection interface of the first power distribution apparatus, and the second state determination module 3 is connected to the operation and stop state detection interface of the second power distribution apparatus, so as to detect the operation and stop states of the two power distribution apparatuses respectively through the two state determination modules; the first state determining module 2 and the second state determining module 3 are respectively connected with the device selecting module 1, so that a power distribution device which supplies power to the standby water feeding pump is selected from the first power distribution device and the second power distribution device through the device selecting module 1; and the device selection module 1 is connected with the device start-stop module 6 to control the first power distribution device and the second power distribution device to start or stop through the device start-stop module 6. Therefore, a plurality of modules are arranged in one control device, two power distribution devices can be controlled through one control device, and the problem of control logic dispersion is avoided.

As shown in fig. 2, the control apparatus further includes a double fault detection module 7 of the first power distribution apparatus and a double fault detection module 8 of the second power distribution apparatus;

an input end 7a of the double fault detection module 7 of the first power distribution device is connected with an operation state detection interface B1 of the first power distribution device, a stop state detection interface B2 of the first power distribution device and a third output end 2d of the first state determination module 2 respectively, an input end 8a of the double fault detection module 8 of the second power distribution device is connected with an operation state detection interface B6 of the second power distribution device, a stop state detection interface B7 of the second power distribution device and a third output end 3d of the second state determination module 3 respectively, and an output end 7B of the double fault detection module 7 of the first power distribution device and an output end 8B of the double fault detection module 8 of the second power distribution device are connected with an input end 5a of the fault summary module 5 respectively.

In the process of controlling the control device, the power distribution device is possibly in an operating state and a stop state, namely, the power distribution device has double faults, therefore, the control device further comprises a double-fault detection module 7 of the first power distribution device and a double-fault detection module 8 of the second power distribution device, whether the first power distribution device has double faults is detected through the double-fault detection module 7 of the first power distribution device, and whether the second power distribution device has double faults is detected through the double-fault detection module 8 of the second power distribution device. After the double fault is detected by the double fault detection module 7 of the first power distribution device and the double fault detection module 8 of the second power distribution device, the double faults may be summarized by the fault summary module 5.

Specifically, the double fault detection module 7 of the first power distribution apparatus is connected with the operation state detection interface B1 of the first power distribution apparatus and the stop state detection interface B2 of the first power distribution apparatus, respectively, to detect whether a double fault occurs in the first power distribution apparatus through the double fault detection module 7 of the first power distribution apparatus; the double fault detection module 8 of the second power distribution apparatus is connected to the operation state detection interface B6 of the second power distribution apparatus and the stop state detection interface B7 of the second power distribution apparatus, respectively, to detect whether a double fault occurs in the second power distribution apparatus through the double fault detection module 7 of the second power distribution apparatus. And then the double-fault detection module 7 of the first power distribution device and the double-fault detection module 8 of the second power distribution device are respectively connected with the fault collecting module 5, so that the double faults respectively detected by the double-fault detection module 7 of the first power distribution device and the double-fault detection module 8 of the second power distribution device are collected through the fault collecting module 5.

The connection relationship of the internal components of the device selection module 1 is specifically described below, and as shown in fig. 3, the device selection module 1 includes a first and gate 11, a second and gate 12, a first flip-flop 13, and a first not gate 14;

a first input end 11a of the first and gate 11 is connected with the first power setting button a1, a second input end 11b of the first and gate 11 is connected with the first output end 3b of the second state determining module 3, and an output end 11c of the first and gate 11 is connected with the position end S of the first trigger 13;

a first input end 12a of the second and gate 12 is connected with the second power setting button a2, a second input end 12b of the second and gate 12 is connected with the first output end 2b of the first state determining module 2, and an output end 12c of the second and gate 12 is connected with the reset end R of the first flip-flop 13;

an output end 13a of the first trigger 13 is connected to an input end 14a of the first not gate 14 and an input end 6a of the device start-stop module 6, respectively, and an output end 14b of the first not gate 14 is connected to the input end 6a of the device start-stop module 6.

The set terminal S of the first trigger 13 is connected to the first and gate 11, the first and gate 11 is respectively connected to the first power setting button a1 and the first output terminal 3b of the second state determining module 3, and the first output terminal 3b of the second state determining module 3 is used for determining whether the second power distribution device is currently out of operation, so that when the first power setting button a1 is triggered and the second power distribution device is out of operation, the input of the set terminal S of the first trigger 13 is 1, which indicates that the first power distribution device is selected to supply power to the control device.

The reset terminal R of the first trigger 13 is connected to the second and gate 12, the second and gate 12 is respectively connected to the second power setting button a2 and the first output terminal 2b of the first status determination module 2, and the first output terminal 2b of the first status determination module 2 is used for determining whether the first power distribution device is currently out of operation, so that when the second power setting button a2 is triggered and the first power distribution device is out of operation, the input of the reset terminal R of the first trigger is 1, which indicates that the second power distribution device is selected to supply power to the control device.

It should be noted that the flip-flop includes two input ends, namely a set end and a reset end, and an output end, and when the input of the set end is 1 and the input of the reset end is 0, the output is 1; when the input of the position end is 1 and the input of the reset end is 1, the output is 0; when the input of the position end is 0 and the input of the reset end is 1, the output is 0; when the input at the set terminal is 0.

Therefore, when the input of the set terminal S of the first flip-flop 13 is 1 and the input of the reset terminal R is 0, the output is 1, which indicates that the first power distribution device is selected to supply power to the backup water feed pump. When the input of the set terminal S of the first flip-flop 13 is 0 and the input of the reset terminal R is 1, the output is 0, and the first flip-flop 13 is further connected to the first not gate 14, so that the first not gate 14 outputs 1 at this time, which indicates that the second power distribution device is selected to supply power to the standby water supply pump.

Since the output of the first trigger 13 and the output of the first not gate 14 indicate whether the first or second power distribution device is selected to supply the backup feed water pump, respectively, the first trigger 13 and the first not gate 14 are connected to the device start-stop module 6, respectively, to input the selected power distribution device signal to the device start-stop module 6.

Further describing the internal connection relationship of the device start-stop module 6, as shown in fig. 4, the device start-stop module 6 includes a device start module 61 and a device stop module 62;

the input 61a of the device start module 61 is connected to the output 1B of the device selection module 1, the second output 2c of the first state determination module 2, and the second output 3c of the second state determination module 3, respectively, the input 61a of the device start module 61 is further connected to the remote control permission interface B4 of the first power distribution device, the remote control permission interface B5 of the second power distribution device, the suspend button A3, the suspend button a4, the manual control button a5, the automatic control button a6, the manual start button a7, the automatic start interface a10, the start protection interface a12, the stop protection interface a13, and the start permission interface a14, respectively, the fault feedback terminal 61B of the device start module 61 is connected to the output 5B of the fault summary module 5, the input 61a of the device start module 61 is further connected to the feedback output 62a of the device stop module 62, and the command output 61c of the device start module 61 is connected to the start interface B9a of the first power distribution device selection module 1 and the second output 3 of the second power distribution device The ports B10a are respectively connected to control the starting of the first power distribution device or the second power distribution device;

the feedback output 61d of the device start module 61 is connected to the input 62B of the device stop module 62, the input 62B of the device stop module 62 is further connected to the output 1B of the device selection module 1, the first output 2B of the first state determination module 2, the first output 3B of the second state determination module 3, the remote control permission interface B4 of the first power distribution device, the remote control permission interface B5 of the second power distribution device, the start protection interface a12, the stop protection interface a13, the stop permission interface a15, the manual stop button A8 and the automatic stop interface a11 are respectively connected, the fault feedback terminal 62c of the device stop module 62 is connected with the output terminal 5B of the fault summary module 5, and the command output terminal 62d of the device stop module 62 is respectively connected with the stop interface B9B of the first power distribution device and the stop interface B10B of the second power distribution device to control the first power distribution device or the second power distribution device to stop.

After the power distribution device is selected by the device selection module 1, the start of the power distribution device may be controlled by the device start module 61, and a fault may occur when the power distribution device is controlled to start, so that the fault feedback terminal 61b of the device start module 61 may be connected to the fault summary module 5 to summarize the generated faults by the fault summary module 5.

The device start module 61 is connected to the start interface B9a of the first power distribution device and the start interface B10a of the second power distribution device, respectively, and can control the start of the first power distribution device or the second power distribution device.

Similarly, after the power distribution device is selected by the device selection module 1, the device stop module 62 may control the stop of the power distribution device, and a fault may occur when the power distribution device is controlled to stop, so the fault feedback terminal 62b of the device stop module 62 may be connected to the fault summary module 5 to summarize the faults that occur by the fault summary module 5.

The device stop module 62 is connected to the stop interface B9B of the first power distribution device and the stop interface B10B of the second power distribution device, respectively, and can control the first power distribution device or the second power distribution device to stop.

It should be noted that the input 61a of the device activation module 61 is connected to the feedback output 62a of the device deactivation module 62, and the input 62b of the device deactivation module 62 is connected to the feedback output 61d of the device activation module 61, so as to transmit signals between the device activation module 61 and the device deactivation module 62.

Specifically, as shown in fig. 5, the device start module 61 includes a first pulse generator 611, a second flip-flop 612, a third flip-flop 613, a fourth flip-flop 614, a second not gate 615, a third not gate 616, a fourth not gate 617, a fifth not gate 618, a third and gate 619, a fourth and gate 6110, a fifth and gate 6111, a sixth and gate 6112, a seventh and gate 6113, an eighth and gate 6114, a ninth and gate 6115, a first or gate 6116, a second or gate 6117, and a third or gate 6118;

an input end 611a of the first pulse generator 611 is connected with an automatic start interface A10, an output end 611b of the first pulse generator 611 is connected with a first input end 619a of a third AND gate 619, a set end S of the second flip-flop 612 is connected with a manual control button A5, a reset end R of the second flip-flop 612 is connected with an automatic control button A6, an output end 612a of the second flip-flop 612 is connected with an input end 615a of a second NOT gate 615, an output end 615b of the second NOT gate 615 is connected with a second input end 619b of the third AND gate 619 and an input end 62b of the device stop module 62 respectively, and an output end 619c of the third AND gate 619 is connected with a first input end 6116a of the first OR gate 6116;

a second input end 6116b of the first or gate 6116 is connected with a manual start button a7, an output end 6116c of the first or gate 6116 is connected with a first input end 6110a of the fourth and gate 6110, an input end 616a of the third not gate 616 is connected with a stop protection interface a13, an output end 616b of the third not gate 616 is connected with a second input end 6110b of the fourth and gate 6110, a third input end 6110c of the fourth and gate 6110 is connected with a start permission button a14, and an output end 6110d of the fourth and gate 6110 is connected with a first input end 6111a of the fifth and gate 6111;

a set terminal S of the third flip-flop 613 is connected to the suspend button A3, a reset terminal R of the third flip-flop 613 is connected to the suspend button a4, an output terminal 613a of the third flip-flop 613 is connected to an input terminal 617a of the fourth not gate 617, an output terminal 617b of the fourth not gate 617 is connected to a second input terminal 6111b of the fifth and gate 6111, a first input terminal 6112a of the sixth and gate 6112, and an input terminal 62b of the device stop module 62, respectively;

an output end 6111c of the fifth and gate 6111 is connected to a first input end 6117a of the second or gate 6117, a second input end 6112b of the sixth and gate 6112 is connected to the start protection interface a12, an output end 6112c of the sixth and gate 6112 is connected to a second input end 6117b of the second or gate 6117 and an input end 618a of the fifth not gate 618, and an output end 6117c of the second or gate 6117 is connected to a set end S of the fourth flip-flop 614 and an input end 62b of the device stop module 62;

an output end 618b of the fifth not-gate 618 is connected to a first input end 6113a of the seventh and-gate 6113, a second input end 6113b of the seventh and-gate 6113 is connected to an output end 5b of the fault summary module 5, and an output end 6113c of the seventh and-gate 6113 is connected to a first input end 6118a of the third or-gate 6118;

a second input end 6118b of the third or-gate 6118 is connected to the second output end 2c of the first state determining module 2, a third input end 6118c of the third or-gate 6118 is connected to the second output end 3c of the second state determining module 3, a fourth input end 6118d of the third or-gate 6118 is connected to the feedback output end 62a of the device stopping module 62, and an output end 6118e of the third or-gate 6118 is connected to the reset end R of the fourth flip-flop 614;

the output 614a of the fourth flip-flop 614 is connected to the first input 6114a of the eighth and-gate 6114 and the first input 6115a of the ninth and-gate 6115, the second input 6114B of the eighth and-gate 6114 is connected to the remote control enable interface B4 of the first power distribution apparatus, the second input 6115B of the ninth and-gate 6115 is connected to the remote control enable interface B5 of the second power distribution apparatus, the third input 6114c of the eighth and-gate 6114 and the third input 6115c of the ninth and-gate 6115 are connected to the output 1B of the apparatus selection module 1, the output 6114d of the eighth and-gate 6114 is connected to the start interface B9a of the first power distribution apparatus, the output 6115d of the ninth and-gate 6115 is connected to the start interface B10a of the second power distribution apparatus, and the output 6114d of the eighth and-gate 6114 and the output 6115d of the ninth and-gate 6115 are connected to the input 4a of the start-stop fault detection module 4.

The working principle of the device activation module 61 is described below:

first, the operation principle of the set terminal S of the fourth flip-flop 614 is described:

the input of the set terminal S of the fourth flip-flop 614 is the output of the second or gate 6117, and the input of the second or gate 6117 is the or between the output of the fifth and gate 6111 and the output of the sixth and gate 6112, that is, as long as at least one of the outputs of the fifth and gate 6111 and the sixth and gate 6112 is 1, the output of the second or gate 6117 is 1, and the input of the set terminal S of the fourth flip-flop 614 is 1.

The following describes a case where the output of the fifth and gate 6111 is 1:

the fifth and gate 6111 is respectively connected to the fourth not gate 617 and the fourth and gate 6110, and when the outputs of the fourth not gate 617 and the fourth and gate 6110 are both 1, the output of the fifth and gate 6111 is 1. Specifically, one input end of the fifth and gate 6111 is connected to the fourth and gate 6110, and the fourth and gate 6110 is respectively connected to the first or gate 6116, the third not gate 616 and the start enable interface a14, so that when the outputs of the first or gate 6116 and the third not gate 616 are both 1 and the input of the start enable interface a14 is 1, the output of the fourth and gate 6110 is 1. The other input terminal of the fifth and gate 6111 is connected to the fourth not gate 617, and the fourth not gate 617 is connected to the suspend button A3 and the suspend button a4 through the third flip-flop 613, so that when the suspend button is toggled, the output of the third flip-flop 613 is 0 and the output of the fourth not gate 617 is 1.

The specific situation that the output of the fourth and gate 6110 is 1 is as follows:

the first or gate 6116 is connected to the manual start button a7 and the third and gate 619, respectively, and when the manual start button a7 is triggered or the output of the third and gate 619 is 1, the output of the first or gate 6116 is 1. Specifically, the third and gate 619 is respectively connected with a first pulse generator 611 and a second not gate 615, the first pulse generator 611 is connected with an automatic start interface a10, and the second not gate 615 is respectively connected with a manual control button a5 and an automatic control button a6 through a second trigger 612. Thus, when the automatic control button a6 is triggered, the second trigger 612 output is 0 and the second not gate 615 output is 1; on the other hand, when the input of the automatic start interface a10 is 1, the output of the first pulse generator 611 is 1, so when the automatic control button a6 is triggered and the input of the automatic start interface a10 is 1, that is, when the outputs of the second not gate 615 and the first pulse generator 611 are both 1, the output of the third and gate 619 is 1, which indicates that the control device receives the automatic start command in the automatic state.

It should be noted that, since the output of the first or gate 6116 is 1 when the output of the manual start button a7 or the third and gate 619 is 1, when the manual start button a7 is triggered or the automatic control button a6 is triggered and the input of the automatic start interface a10 is 1, the output of the first or gate 6116 is 1, which indicates that a start command is manually issued or the control device receives an automatic start command.

Further, the third not gate 616 is connected to the stop protection interface a13, and when the input of the stop protection interface a13 is 0, the output of the third not gate 616 is 1. When the outputs of the first or gate 6116 and the third not gate 616 are both 1 and the input of the start permission interface a14 is 1, the output of the fourth and gate 6110 is 1, so when the input of the stop protection interface a13 is 0, the input of the start permission interface a14 is 1, and the manual start button a7 is triggered or the automatic control button a6 is triggered and the input of the automatic start interface a10 is 1, the output of the fourth and gate 6110 is 1, which indicates that the start permission condition of the current power distribution apparatus is 1 and there is no stop protection signal, the control apparatus manually issues a start instruction or receives a start instruction in the automatic control state.

Since the output of the fourth not gate 617 is 1 when the off-hook button is triggered, the output of the fourth not gate 617 is 1 indicating that the current power distribution apparatus is in the off-hook state. Therefore, when the outputs of the fourth not gate 617 and the fourth and gate 6110 are both 1, and the output of the fifth and gate 6111 is 1, which indicates that the current start permission condition of the power distribution apparatus is 1 and there is no stop protection signal in the off-hook state, the control apparatus manually issues a start instruction or receives a start instruction in the automatic control state.

It should be noted that the pulse length of the first pulse generator 611 is adjustable, and is set to be 3s by default, and of course, other lengths may also be used, which is not limited in the embodiment of the present disclosure.

The following describes a case where the output of the sixth and gate 6112 is 1:

the sixth and gate 6112 is connected to the fourth not gate 617 and the start protection interface a12, respectively, and when the output of the fourth not gate 617 is 1 and the output of the start protection interface a12 is 1, the output of the sixth and gate 6112 is 1. Since the output of the fourth not gate 617 is 1, which indicates that the current power distribution device is in the off-hook state, the output of the sixth and gate 6112 is 1, which indicates that the current power distribution device is in the off-hook state, and there is a start protection signal.

Therefore, when the output of the fifth and gate 6111 is 1 or the output of the sixth and gate 6112 is 1, the output of the second or gate 6117 is 1, and the input of the set terminal S of the fourth flip-flop 614 is 1, which indicates that the start permission condition is 1 in the off-hook state, and the control device receives a manual or automatic start instruction in the absence of the stop protection signal, or the start protection signal occurs in the off-hook state.

Secondly, the operation principle of the reset terminal R of the fourth flip-flop 614 is described:

the input of the reset terminal R of the fourth flip-flop 614 is the output of the third or-gate 6118, the third or-gate 6118 is connected to the seventh and-gate 6113, the second output terminal 2c of the first state determination module 2, the second output terminal 3c of the second state determination module 3, and the device stop module 62, respectively, the second output terminal 2c of the first state determination module 2 is used to determine whether the backup water-feeding pump is operated when the first power distribution device supplies power, and the second output terminal 3c of the second state determination module 3 is used to determine whether the backup water-feeding pump is operated when the second power distribution device supplies power. Therefore, when the output of the seventh and gate 6113 is 1, the backup water feed pump is operated when the first power distribution device supplies power, the backup water feed pump is operated when the second power distribution device supplies power, or the output of the device stop module 62 is 1, the output of the third or gate 6118 is 1, and the input of the reset terminal R of the fourth flip-flop 614 is 1.

The following describes the case where the output of the third or gate 6118 is 1:

the seventh and gate 6113 is connected to the fifth not gate 618 and the fault summary module, respectively, and when the outputs of the fifth not gate 618 and the fault summary module are both 1, the output of the seventh and gate 6113 is 1. The fifth not gate 618 is connected to the sixth and gate 6112, and when the output of the sixth and gate 6112 is 0, the output of the fifth not gate 618 is 1, so when the outputs of the fifth not gate 618 and the fault summary module are both 1, the output of the seventh and gate 6113 is 1, which indicates that a fault occurs. The sixth and gate 6112 is further connected to the start protection interface a12 and the fourth not gate 617, respectively, and when the input of the start protection interface a12 is 0 or the output of the fourth not gate 617 is 0, the output of the sixth and gate 6112 is 0. Since the output of the fourth not gate 617 is 0, which indicates that the suspend button is triggered, the output of the sixth and gate 6112 is 0, which indicates that the control device is in the suspend state or there is no start protection signal, and when the control device is in the suspend state, all instructions are isolated, and at this time, the control device can still transmit and receive instructions, so the output of the sixth and gate 6112 is 0, which indicates that there is no start protection signal. And the output of the seventh and gate 6113 is 1, which indicates that there is a fault in the absence of the start protection signal.

Since the output of the seventh and gate 6113 is 1, the backup water feed pump is operated when the first power distribution device supplies power, the backup water feed pump is operated when the second power distribution device supplies power, or the output of the device stop module 62 is 1, the output of the third or gate 6118 is 1, and the input of the reset terminal R of the fourth flip-flop 614 is 1, which indicates that the backup water feed pump is operated, or the power distribution device fails when the start protection signal does not exist, or a stop instruction occurs at this time.

Third, the operation principle of the output 614a of the fourth flip-flop 614 is described:

the output 614a of the fourth flip-flop 614 is connected to an eighth and-gate 6114 and a ninth and-gate 6115, respectively, the eighth and-gate 6114 is further connected to the first flip-flop 13 and the remote control permission interface B4 of the first power distribution device, respectively, when the output of the fourth flip-flop 614 is 1, the output of the first flip-flop 13 is 1, and the first power distribution device permits remote control, the output of the eighth and-gate 6114 is 1, which indicates that the first power distribution device is currently selected to distribute power, in an off-hook state, the start permission condition is 1, the control device receives a manual or automatic start instruction in the absence of a stop protection signal, or in an off-hook state, a start protection signal occurs, and the first power distribution device permits remote control. The output signal of the eighth and gate 6114 is the start command signal output to the first power distribution device.

In addition, the ninth and gate 6115 is further connected to the remote control permission interface B5 of the first not gate 14 and the second power distribution device, respectively, when the output of the fourth flip-flop 614 is 1, the output of the first not gate 14 is 1, and the second power distribution device permits remote control, the output of the ninth and gate 6115 is 1, which indicates that the second power distribution device is currently selected to distribute power, in the off-hook state, the start permission condition is 1, and the control device receives a manual or automatic start instruction in the absence of the stop protection signal, or in the off-hook state, a start protection signal occurs, and the second power distribution device permits remote control. The output signal of the ninth and-gate 6115 is the start command signal output to the second power distribution apparatus.

It should be noted that, since the input of the set terminal S of the fourth flip-flop 614 is 1, which indicates that the start permission condition is 1 in the off-hook state, the control device receives a manual or automatic start instruction in the absence of the stop protection signal, or the start protection signal occurs in the off-hook state. An input of the reset terminal R is 1, which indicates that the standby water feeding pump is operated, or that the power distribution device fails when the starting protection signal does not exist, or that a stop command occurs at the moment. Therefore, when the input of the set terminal S of the fourth flip-flop 614 is 1, the input of the reset terminal R is 0, and the output is 1, it indicates that the standby water feed pump has stopped running in the off-hook state, the start permission condition is 1, and meanwhile, under the condition that there is no fault or stop instruction, the control device receives a manual or automatic start instruction in the absence of a stop protection signal, or a start protection signal occurs in the off-hook state; when the input of the set terminal S of the fourth flip-flop 614 is 1 or 0, the input of the reset terminal R is 1, and the output is 0, it indicates that the power distribution device fails in the absence of the start protection signal, or the backup water feed pump is operated, or a stop command occurs.

Specifically, as shown in fig. 6, the device stopping module 62 includes a second pulse generator 621, a fifth trigger 622, a sixth not gate 623, a seventh not gate 624, a tenth and gate 625, an eleventh and gate 626, a twelfth and gate 627, a thirteenth and gate 628, a fourteenth and gate 629, a fifteenth and gate 6210, a sixteenth and gate 6211, a seventeenth and gate 6212, a fourth or gate 6213, a fifth or gate 6214, and a sixth or gate 6215;

an input end 621a of the second pulse generator 621 is connected to the automatic stop interface a11, an output end 621b of the second pulse generator 621 is connected to a first input end 625a of a tenth and gate 625, a second input end 625b of the tenth and gate 625 is connected to the feedback output end 61d of the device start module 61, and an output end 625c of the tenth and gate 625 is connected to a first input end 6213a of a fourth or gate 6213;

a second input 6213b of the fourth or-gate 6213 is connected to the manual stop button A8, an output 6213c of the fourth or-gate 6213 is connected to a first input 626a of an eleventh and-gate 626, an input 623a of the sixth not-gate 623 is connected to the start protection interface a12, an output 623b of the sixth not-gate 623 is connected to a second input 626b of the eleventh and-gate 626, a third input 626c of the eleventh and-gate 626 is connected to the stop permission interface a15, and an output 626d of the eleventh and-gate 626 is connected to a first input 627a of the twelfth and-gate 627;

a second input 627b of the twelfth and gate 627 and a first input 628a of the thirteenth and gate 628 are respectively connected to the feedback output 61d of the device activation module 61, an output 627c of the twelfth and gate 627 is connected to the first input 6214a of the fifth or gate 6214, a second input 628b of the thirteenth and gate 628 is connected to the fail-safe interface a13, and an output 628c of the thirteenth and gate 628 is connected to the second input 6214b of the fifth or gate 6214 and the input 624a of the seventh not gate 624;

an output 6214c of the fifth or-gate 6214 is connected to the set terminal S of the fifth flip-flop 622 and the input 61a of the device activation module 61, respectively, an output 624b of the seventh not-gate 624 is connected to the first input 629a of the fourteenth and-gate 629, the second input 629b of the fourteenth and-gate 629 is connected to the output 5b of the fault-sum module 5, the output 629c of the fourteenth and-gate 629 is connected to the first input 6215a of the sixth or-gate 6215, the second input 6215b of the sixth or-gate 6215 is connected to the feedback output 61d of the device activation module 61, the first input 6210a of the fifteenth and-gate 6210 is connected to the first output 2b of the first status determination module 2, the second input 6210b of the fifteenth and-gate 6210 is connected to the first output 3b of the second status determination module 3, the output 6210c of the fifteenth and-gate 6210 is connected to the third input 15c of the sixth or-gate 6215, an output 6215d of the sixth or gate 6215 is connected to the reset terminal R of the fifth flip-flop 622;

the output 622a of the fifth flip-flop 622 is connected to the first input 6211a of the sixteenth and gate 6211 and the first input 6212a of the seventeenth and gate 6212 respectively, the second input 6211B of the sixteenth and/or gate 6211 is connected to the remote control permission interface B4 of the first switchgear, the second input 6212B of the seventeenth and/or gate 6212 is connected to the remote control permission interface B5 of the second switchgear, the third input 6211c of the sixteenth and gate 6211 and the third input 6212c of the seventeenth and/or gate 6212 are connected to the output 1B of the device selection module 1, the output 6211d of the sixteenth and gate 6211 is connected to the stop interface B9B of the first switchgear, the output 6212d of the seventeenth and gate 6212 is connected to the stop interface B10B of the second switchgear, and the output 6211d of the sixteenth and gate 6211 and the output 6212d of the seventeenth and gate 6212 are also connected to the input 4a of the start-stop fault detection module 4, respectively.

The operation of the device stop module 62 is described below:

first, the operation principle of the set terminal S of the fifth flip-flop 622 will be described:

the input of the set terminal S of the fifth flip-flop 622 is the output of the fifth or gate 6214, and the input of the fifth or gate 6214 is the or between the output of the twelfth and gate 627 and the output of the thirteenth and gate 628, that is, as long as at least one of the outputs of the twelfth and gate 627 and the thirteenth and gate 628 is 1, the output of the fifth or gate 6214 is 1, and the set terminal S input of the fifth flip-flop 622 is 1.

The following describes the case where the output of the twelfth and gate 627 is 1:

the twelfth and gate 627 is respectively connected to the fourth not gate 617 and the eleventh and gate 626, and when the outputs of the fourth not gate 617 and the eleventh and gate 626 are both 1, the output of the twelfth and gate 627 is 1. Specifically, one input end of the twelfth and gate 627 is connected to the eleventh and gate 626, and the eleventh and gate 626 is respectively connected to the fourth or gate 6213, the sixth not gate 623 and the stop permission interface a15, so that when the outputs of the fourth or gate 6213 and the sixth not gate 623 are both 1 and the input of the stop permission interface a15 is 1, the output of the eleventh and gate 626 is 1. The other input terminal of the twelfth and gate 627 is connected to the fourth not gate 617, and as can be seen from the above description, when the suspend button is triggered, the output of the third flip-flop 613 is 0, and the output of the fourth not gate 617 is 1.

The specific case that the output of the eleventh and gate 626 is 1 is as follows:

the fourth or gate 6213 is connected to a manual stop button A8 and a tenth and gate 625, respectively, and when the manual stop button A8 is triggered or the output of the tenth and gate 625 is 1, the output of the fourth or gate 6213 is 1. And the tenth and gate 625 is respectively connected with the second pulse generator 621 and the second not gate 615, the second pulse generator 621 is connected with the automatic stop interface a11, and the second not gate 615 is respectively connected with the manual control button a5 and the automatic control button a6 through the second trigger 612. Thus, when the automatic control button a6 is triggered, the second trigger 612 output is 0 and the second not gate 615 output is 1; when the input of the automatic stop interface a11 is 1, the output of the second pulse generator 621 is 1, and therefore, when the automatic control button a6 is triggered and the input of the stop interface a11 is 1, that is, when both the output of the second not gate 615 and the output of the second pulse generator 621 are 1, the output of the tenth and gate 625 is 1, which indicates that the control device receives the automatic stop command in the automatic state.

Since the output of the fourth or gate 6213 is 1 when the output of the manual stop button A8 or the tenth and gate 625 is triggered to be 1, the output of the fourth or gate 6213 is 1 when the manual stop button A8 is triggered or the automatic control button a6 is triggered and the input of the automatic stop interface a11 is 1, indicating that a stop command is manually issued or there is an automatic stop command.

Further, the sixth not gate 623 is connected to the start-up protection interface a12, and when the input of the start-up protection interface a12 is 0, the output of the sixth not gate 623 is 1. On the other hand, when the outputs of the fourth or gate 6213 and the sixth not gate 623 are both 1 and the input of the stop permission interface a15 is 1, the output of the eleventh and gate 626 is 1, so that when the input of the start protection interface a12 is 0, the input of the stop permission interface a15 is 1, and the manual stop button A8 is triggered, or when the automatic control button a6 is triggered and the input of the automatic stop interface a11 is 1, the output of the eleventh and gate 626 is 1, which indicates that the stop permission condition of the current power distribution apparatus is 1 and there is no start protection signal, the control apparatus manually issues a stop command or receives a stop command in an automatic state.

Since the output of the fourth not gate 617 is 1 when the off-hook button is triggered, the output of the fourth not gate 617 is 1 indicating that the current power distribution apparatus is in the off-hook state. Therefore, when the outputs of the fourth not gate 617 and the eleventh and gate 626 are both 1, and the output of the twelfth and gate 627 is 1, indicating that in the off-hook state, while the stop permission condition of the current power distribution apparatus is 1 and there is no start protection signal, the control apparatus manually issues a stop instruction or receives a stop instruction in the automatic state.

It should be noted that the pulse length of the second pulse generator 621 is adjustable, and is set to be 3s by default, and of course, other lengths may also be used, which is not limited in the embodiment of the present disclosure.

The following describes the case where the output of the thirteenth and gate 628 is 1:

the thirteenth and gate 628 is respectively connected to the fourth not gate 617 and the stop protection interface a13, and when the output of the fourth not gate 617 is 1 and the input of the stop protection interface a13 is 1, the output of the thirteenth and gate 628 is 1. Since the output of the fourth not gate 617 is 1, which indicates that the current power distribution apparatus is in the off-hook state, the output of the thirteenth and gate 628 is 1, which indicates that the current power distribution apparatus is in the off-hook state, and the protection stop signal is present.

Therefore, when the output of the twelfth and gate 627 is 1 or the output of the thirteenth and gate 628 is 1, the output of the fifth or gate 6214 is 1, the set terminal S input of the fifth flip-flop 622 is 1, which indicates that the stop permission condition is 1 in the off-hook state, and the control device receives a manual or automatic stop instruction in the absence of the start protection signal or the stop protection signal occurs in the off-hook state.

Secondly, the operation principle of the reset terminal R of the fifth flip-flop 622 is described:

the input of the reset terminal R of the fifth flip-flop 622 is the output of a sixth or gate 6215, and the sixth or gate 6215 is connected to the fourteenth and gate 629, the device activation module 61 and the fifteenth and gate 6210. Therefore, when the output of the fourteenth and gate 629 is 1, the output of the device activation module 61 is 1, or the output of the fifteenth and gate 6210 is 1, the output of the sixth or gate 6215 is 1, and the input of the reset terminal R of the fifth flip-flop 622 is 1.

The case where the output of the sixth or gate 6215 is 1 is described in detail below:

the fourteenth and gate 629 is respectively connected to the seventh not gate 624 and the fault summary module, and when the outputs of the seventh not gate 624 and the fault summary module are both 1, the output of the fourteenth and gate 629 is 1. The seventh not gate 624 is connected to the thirteenth and gate 628, and when the output of the thirteenth and gate 628 is 0, the output of the seventh not gate 624 is 1, and therefore, when the outputs of the seventh not gate 624 and the fault summary module are both 1, the output of the fourteenth and gate 629 is 1, indicating that a fault occurs. The thirteenth and gate 628 is further connected to the stop protection interface a13 and the fourth not gate 617, respectively, and when the input of the stop protection interface a13 is 0 or the output of the fourth not gate 617 is 0, the thirteenth and gate 628 outputs 0. Similar to the case where the output of the third or gate 6118 is 1, the thirteenth and gate 628 outputs 0 indicating that there is no stop start signal. Further, the fourteenth and gate 629 output 1 indicates that there is no stop start signal and a fault occurs.

The fifteenth and gate 6210 is respectively connected to the first output terminal 2b of the first status determining module 2 and the first output terminal 3b of the second status determining module 3, and the first output terminal 2b of the first status determining module 2 is used for determining whether the backup water-feeding pump has stopped operating when the first power distribution device supplies power, and the first output terminal 3b of the second status determining module 3 is used for determining whether the backup water-feeding pump has stopped operating when the second power distribution device supplies power, so that when any power distribution device supplies power, the fifteenth and gate 6210 outputs 1.

Since the output of the fourteenth and gate 629 is 1, the output of the device activation module 61 is 1, or the output of the fifteenth and gate 6210 is 1, the output of the sixth or gate 6215 is 1, and the input of the reset terminal R of the fifth flip-flop 622 is 1, which indicates that the backup water-feeding pump has stopped operating, or the power distribution device fails when the stop protection signal does not exist, or the activation instruction occurs at this time.

Third, the operation principle of the output 622a of the fifth flip-flop 622 is described:

the output end 622a of the fifth flip-flop 622 is connected to a sixteenth and a seventeenth and 6211 and 6212, respectively, the sixteenth and 6211 is further connected to the first flip-flop 13 and the remote control permission interface B4 of the first power distribution device, respectively, when the output of the fifth flip-flop 622 is 1, the output of the first flip-flop 13 is 1, and the first power distribution device permits remote control, the sixteenth and 6211 outputs 1, which indicates that the first power distribution device is currently selected, in the off-hook state, the stop permission condition is 1, the control device receives a manual or automatic stop instruction in the absence of a start protection signal, or in the off-hook state, a stop protection signal occurs, and the first power distribution device permits remote control. The output signal of the sixteenth and gate 6211 is the stop command signal output to the first power distribution device.

In addition, the seventeenth and gate 6212 is connected to the remote control permission interface B5 of the first not gate 14 and the second power distribution device, respectively, and when the output of the fifth flip-flop 622 is 1, the output of the first not gate 14 is 1, and the second power distribution device permits remote control, the output of the seventeenth and gate 6212 is 1, which indicates that the second power distribution device is currently selected, and in the off-hook state, the stop permission condition is 1, and in the absence of the start protection signal, the control device receives a manual or automatic stop instruction, or in the off-hook state, a stop protection signal occurs, and the second power distribution device permits remote control. The output signal of the seventeenth and gate 6212 is the stop command signal output to the first power distribution device.

It should be noted that, since the input of the set terminal S of the fifth flip-flop 622 is 1, which indicates that the stop permission condition is 1 in the off-hook state, the control device receives a manual or automatic stop instruction in the absence of the start protection signal, or the stop protection signal occurs in the off-hook state. An input of the reset terminal R is 1, which indicates that the backup feed water pump has stopped operating, or that the power distribution device has failed in the absence of a stop protection signal, or that a start command is present at this time. Therefore, when the input of the set terminal S of the fifth trigger 622 is 1, the input of the reset terminal R is 0, and the output is 1, it indicates that the standby water feed pump is running in the off-hook state, the stop permission condition is 1, and meanwhile, under the condition that no fault or start instruction exists, the control device receives a manual or automatic stop instruction in the absence of a start protection signal, or under the off-hook state, a stop protection signal occurs; when the input of the set terminal S of the fifth flip-flop 622 is 1 or 0, the input of the reset terminal R is 1, and the output is 0, it indicates that the power distribution device fails when the stop protection signal does not exist, or the backup water feed pump stops operating, or a start instruction occurs.

Further, as shown in fig. 7, the first state determining module 2 includes an eighth not gate 21, a ninth not gate 22, an eighteenth and gate 23, and a nineteenth and gate 24;

an input 21a of the eighth not gate 21 is connected to the operation state detection interface B1 of the first power distribution apparatus, and an output 21B of the eighth not gate 21 is connected to an input 7a of the double fault detection module 7 of the first power distribution apparatus and a first input 24a of the nineteenth and gate 24, respectively;

an input end 22a of the ninth not-gate 22 is connected to the stop state detection interface B2 of the first power distribution apparatus, and an output end 22B of the ninth not-gate 22 is connected to an input end 7a of the double fault detection module 7 of the first power distribution apparatus and a first input end 23a of the eighteenth and-gate 23, respectively;

a second input end 23B of the eighteenth and gate 23 is connected with the operation state detection interface B1 of the first power distribution device, and an output end 23c of the eighteenth and gate 23 is connected with an input end 6a of the device start-stop module 6 and an input end 4a of the start-stop fault detection module 4, respectively;

a second input 24B of the nineteenth and gate 24 is connected to the stop state detection interface B2 of the first power distribution device, and an output 24c of the nineteenth and gate 24 is connected to the input 6a of the device start-stop module 6 and the input 4a of the start-stop fault detection module 4, respectively.

The eighteenth and-gate 23 is connected to the operation state detection interface B1 and the ninth not-gate 22 of the first power distribution apparatus, respectively, and the ninth not-gate 22 is connected to the stop state detection interface B2 of the first power distribution apparatus, so that when the first power distribution apparatus is detected to be in the operation state, the output of the eighteenth and-gate 23 is 1, indicating that the first power distribution apparatus is in the operation state.

The nineteenth and gate 24 is connected to the stop state detection interface B2 and the eighth not gate 21 of the first power distribution apparatus, respectively, and the eighth not gate 21 is connected to the operation state detection interface B1 of the first power distribution apparatus, so that when the first power distribution apparatus is detected to be in the stop state, the nineteenth and gate 24 outputs 1, indicating that the first power distribution apparatus is in the stop state.

Further, as shown in fig. 8, the second state determination module 3 includes a tenth not gate 31, an eleventh not gate 32, a twentieth and gate 33, and a twenty-first and gate 34;

an input end 31a of the tenth not gate 31 is connected with the operation state detection interface B6 of the second power distribution apparatus, and an output end 31B of the tenth not gate 31 is connected with an input end 8a of the double fault detection module 8 of the second power distribution apparatus and a first input end 34a of the twenty-first and gate 34, respectively;

an input end 32a of the eleventh not-gate 32 is connected to the stop state detection interface B7 of the second power distribution apparatus, and an output end 32B of the eleventh not-gate 32 is connected to an input end 8a of the double fault detection module 8 of the second power distribution apparatus and a first input end 33a of the twentieth-gate 33, respectively;

a second input end 33B of the twentieth and gate 33 is connected with the operation state detection interface B6 of the second power distribution apparatus, and an output end 33c of the twentieth and gate 33 is connected with an input end 6a of the apparatus start-stop module 6 and an input end 4a of the start-stop fault detection module 4, respectively;

a second input 34B of the twenty-first and gate 34 is connected to the stop state detection interface B7 of the second power distribution device, and an output 34c of the twenty-first and gate 34 is connected to the input 6a of the device start-stop module 6 and the input 4a of the start-stop fault detection module 4, respectively.

The twentieth and-gate 33 is connected to the operation state detection interface B6 and the eleventh not-gate 32 of the second power distribution apparatus, respectively, and the eleventh not-gate 32 is connected to the stop state detection interface B7 of the second power distribution apparatus, so that when the second power distribution apparatus is detected to be in the operation state, the twentieth and-gate 33 outputs 1, indicating that the second power distribution apparatus is in the operation state.

The twenty-first and gate 34 is connected to the stop state detection interface B7 and the tenth not gate 31 of the second power distribution apparatus, respectively, and the tenth not gate 31 is connected to the operation state detection interface B6 of the second power distribution apparatus, so that when the second power distribution apparatus is detected to be in the stop state, the output of the twenty-first and gate 34 is 1, indicating that the second power distribution apparatus is in the stop state.

Further, as shown in fig. 9, the start-stop fault detection module 4 includes a first delayer 41, a second delayer 42, a seventh or gate 43, an eighth or gate 44, a ninth or gate 45, a tenth or gate 46, a sixth flip-flop 47, and a seventh flip-flop 48;

a first input end 43a and a second input end 43b of the seventh or gate 43, and a first input end 44a and a second input end 44b of the eighth or gate 44 are respectively connected with an output end 6b of the device start-stop module 6, an output end 43c of the seventh or gate 43 is connected with an input end 41a of the first delayer 41, and an output end 44c of the eighth or gate 44 is connected with an input end 42a of the second delayer 42;

the output end 41b of the first delay 41 is connected to the set end S of the sixth flip-flop 47, the first input end 45a of the ninth or-gate 45 is connected to the reset button a9, the second input end 45b of the ninth or-gate 45 is connected to the second output end 2c of the first state determining module 2, the third input end 45c of the ninth or-gate 45 is connected to the second output end 3c of the second state determining module 3, the output end 45d of the ninth or-gate 45 is connected to the reset end R of the sixth flip-flop 47, and the output end 47a of the sixth flip-flop 47 is connected to the input end 5a of the fault collecting module 5;

the output 42b of the second delay 42 is connected to the set terminal S of the seventh flip-flop 48, the first input 46a of the tenth or-gate 46 is connected to the reset button a9, the second input 46b of the tenth or-gate 46 is connected to the output 6b of the device start/stop module 6, the output 46c of the tenth or-gate 46 is connected to the reset terminal R of the seventh flip-flop 48, and the output 48a of the seventh flip-flop 48 is connected to the input 5a of the fault summation module 5.

The set terminal S of the sixth flip-flop 47 is connected to the first delay 41, and the first delay 41 is connected to the seventh or gate 43, so that when the output of the seventh or gate 43 is 1 and after the delay, the input of the set terminal S of the sixth flip-flop 47 is 1.

The seventh or gate 43 is connected to the eighth and gate 6114 and the ninth and gate 6115 in the device start module 61, respectively, an output of the eighth and gate 6114 is 1, which indicates that the first power distribution device is selected and a start instruction is issued, and an output of the ninth and gate 6115 is 1, which indicates that the second power distribution device is selected and a start instruction is issued. Therefore, when the output of the eighth and gate 6114 is 1 or the output of the ninth and gate 6115 is 1, the output of the seventh or gate 43 is 1, which indicates that the start instruction is issued.

Since the first delay 41 is connected to the seventh or gate 43 and the set terminal S of the sixth flip-flop 47 is connected to the first delay 41, when the output of the seventh or gate 43 is 1, the output of the first delay 41 is 1, and the input of the set terminal S of the sixth flip-flop 47 is 1, which indicates that the start instruction is issued for a certain time.

In addition, the reset terminal R of the sixth flip-flop 47 is connected to the ninth or gate 45, the ninth or gate 45 is respectively connected to the reset button a9, the second output terminal 2c of the first state determination module 2 and the second output terminal 3c of the second state determination module 3, the second output terminal 2c of the first state determination module 2 is used for determining whether the first power distribution device is operated, and the second output terminal 3c of the second state determination module 3 is used for determining whether the second power distribution device is operated, so that when the first power distribution device is stopped, the second power distribution device is stopped and the reset button a9 is not triggered, the output of the ninth or gate 45 is 0, and the reset terminal R of the sixth flip-flop 47 is 0, which indicates that both power distribution devices are stopped and the reset button a9 is not triggered.

When the input of the set terminal S of the sixth flip-flop 47 is 1 and the input of the reset terminal R is 0, the output is 1, which indicates that after the start instruction is sent for a certain time, the operation signal fed back by any power distribution device is still not received, which is called a start fault. In particular, the operator may manually trigger the reset button A9 to remove the alarm after detecting a start failure.

Further, the set terminal S of the seventh flip-flop 48 is connected to the second delay 42, and the second delay 42 is connected to the eighth or gate 44, so that when the output of the eighth or gate 44 is 1 and after the delay, the input of the set terminal S of the sixth flip-flop 47 is 1.

The eighth or gate 44 is connected to the sixteenth and seventeenth and

gates

6211 and 6212 in the device stopping module 62, respectively, and when the output of the sixteenth and gate 6211 is 1, it indicates that the first power distribution device is selected and a stopping command is issued, and the output of the seventeenth and gate 6212 is 1, it indicates that the second power distribution device is selected and a stopping command is issued. Therefore, when the output of the sixteenth and gate 6211 is 1 or the output of the seventeenth and gate 6212 is 1, the output of the eighth or gate 44 is 1, indicating that the stop instruction is issued.

Since the second delay 42 is connected to the eighth or gate 44 and the set terminal S of the seventh flip-flop 48 is connected to the second delay 42, when the output of the eighth or gate 44 is 1, the output of the second delay 42 is 1 and the input of the set terminal S of the seventh flip-flop 48 is 1, which indicates that the stop instruction is issued for a certain time.

In addition, the reset terminal R of the seventh flip-flop 48 is connected to the tenth or gate 46, the tenth or gate 46 is connected to the reset button a9 and the fifteenth and gate in the device stop module, respectively, and since the output of the fifteenth and gate 6210 is 1, which indicates that the power distribution device has stopped, when the output of the fifteenth and gate 6210 is 0 or the reset button a9 is not triggered, that is, the power distribution device has been operated and the reset button a9 is not triggered, the output of the tenth or gate 46 is 1, and the input of the reset terminal R of the seventh flip-flop 48 is 0, which indicates that there is any power distribution device in operation and the reset button a9 is not triggered.

When the input of the set terminal S of the seventh flip-flop 48 is 1 and the input of the reset terminal R is 0, the output is 1, which indicates that after a stop command is issued for a certain time, there is still any power distribution device operating, which is called a stop fault. In particular, the operator may manually trigger the reset button A9 to remove the alarm after detecting a stop fault.

Further, as shown in fig. 10, the double fault detection module 7 of the first power distribution apparatus includes a twenty-second and gate 71, a twenty-third and gate 72, a third delayer 73, and a fourth delayer 74;

a first input 71a of the twenty-second and gate 71 is connected to the operating state detection interface B1 of the first power distribution device, a second input 71B of the twenty-second and gate 71 is connected to the stop state detection interface B2 of the first power distribution device, and an output 71c of the twenty-second and gate 71 is connected to an input 73a of the third delay 73;

a first input 72a and a second input 72b of the twenty-third and gate 72 are respectively connected to the third output 2d of the first state determining module 2, and an output 72c of the twenty-third and gate 72 is connected to an input 74a of the fourth delayer 74;

the output 73b of the third delay 73 and the output 74b of the fourth delay 74 are each connected to the input 5a of the fault summation module 5.

The twenty-second and gate 71 has an input terminal connected to the operating state detection interface B1 of the first power distribution device and the stop state detection interface B2 of the first power distribution device, respectively, and an output terminal connected to the third delayer 73, so that when the first power distribution device is in both the operating state and the stop state, after passing through the third delayer 73, the output is 1, which indicates that the first power distribution device has a double 1 fault.

The input terminals of the twenty-third and gate 72 are respectively connected to the eighth not gate 21 and the ninth not gate 22 in the first state determining module 2, the eighth not gate 21 is connected to the operation state detection interface B1 of the first power distribution apparatus, the ninth not gate 22 is connected to the stop state detection interface B2 of the first power distribution apparatus, and the output terminal of the twenty-third and gate 72 is connected to the fourth delayer 74, so that when the first power distribution apparatus is neither in the operation state nor in the stop state, the output is 1 after passing through the eighth not gate 21 and the ninth not gate 22, respectively, and passing through the third delayer 73, which indicates that the first power distribution apparatus has a double 0 fault.

Further, as shown in fig. 11, the double fault detection module 8 of the second power distribution apparatus includes a twenty-fourth and gate 81, a twenty-fifth and gate 82, a fifth delay 83, and a sixth delay 84;

a first input 81a of the twenty-fourth and gate 81 is connected to the operating state detection interface B6 of the second switchgear, a second input 81B of the twenty-fourth and gate 81 is connected to the stop state detection interface B7 of the second switchgear, and an output 81c of the twenty-fourth and gate 81 is connected to an input 83a of the fifth delay 83;

a first input end 82a and a second input end 82b of the twenty-fifth and gate 82 are respectively connected with the third output end 3d of the second state determination module 3, and an output end 82c of the twenty-fifth and gate 82 is connected with an input end 84a of the sixth delayer 84;

the output 83b of the fifth delay timer 83 and the output 84b of the sixth delay timer 84 are each connected to the input 5a of the fault summation module 5.

Further, the input terminal 5a of the fault summary module 5 is also connected to the electrical fault interface B3 of the first power distribution device and the electrical fault interface B8 of the second power distribution device, respectively.

The twenty-fourth and gate 81 has an input terminal connected to the operating state detection interface B6 of the second power distribution device and the stop state detection interface B7 of the second power distribution device, respectively, and an output terminal connected to the fifth delay unit 83, so that when the second power distribution device is in both the operating state and the stop state, the output is 1 after passing through the fifth delay unit 83, indicating that the second power distribution device has a double 1 fault.

The input ends of the twenty-fifth and-gate 82 are respectively connected with the tenth not gate 31 and the eleventh not gate 32 in the second state determining module 3, the tenth not gate 31 is connected with the operation state detection interface B6 of the second power distribution device, the eleventh not gate 32 is connected with the stop state detection interface B7 of the second power distribution device, and the output end of the twenty-fifth and-gate 82 is connected with the sixth delay timer 84, so that when the second power distribution device is neither in the operation state nor in the stop state, the output is 1 after passing through the tenth not gate 31 and the eleventh not gate 32, and passing through the sixth delay timer 84, which indicates that the second power distribution device has a double 0 fault.

Further, as shown in fig. 12, the fault summing module 5 includes an eleventh or gate 51, a first input 51a and a second input 51B of the eleventh or gate 51 are respectively connected to the output 4B of the start-stop fault detection module 4, a third input 51c of the eleventh or gate block 51 is connected to the electrical fault interface B3 of the first power distribution apparatus, a fourth input 51d of the eleventh or gate 51 is connected to the electrical fault interface B8 of the second power distribution apparatus, a fifth input 51e and a sixth input 51f of the eleventh or gate 51 are respectively connected to the output 8B of the double fault detection module 8 of the second power distribution apparatus, a seventh input 51g and an eighth input 51h of the eleventh or gate 51 are respectively connected to the output 7B of the double fault detection module 7 of the first power distribution apparatus, and an output 51i of the eleventh or gate 51 is connected to the input 6a of the apparatus start-stop module 6.

When any one of the output end 4B of the start-stop fault detection module 4, the electrical fault interface B3 of the first power distribution device, the electrical fault interface B8 of the second power distribution device, the output end 8B of the double-fault detection module 8 of the second power distribution device, and the output end 7B of the double-fault detection module 7 of the first power distribution device outputs 1, that is, any fault occurs, the output of the fault summary module 5 is 1, which indicates that a fault occurs in the control device, and summarizes the occurring faults.

In addition, the control device also comprises a display alarm interface which is used for finishing the function of human-computer interaction, and the display alarm interface comprises a first power supply distribution display interface C1, a second power supply distribution display interface C2, a start fault display interface C3, a stop fault display interface C4, a double-1 fault display interface C5 of the first power distribution device, a double-0 fault display interface C6 of the first power distribution device, a standby water supply pump operated display interface C7 when the first power distribution device supplies power, a standby water supply pump stopped display interface C8 when the first power distribution device supplies power, an electrical appliance fault display interface C9 of the first power distribution device, a remote control permission display interface C10 of the first power distribution device, a remote control permission display interface C11 of the second power distribution device, a double-1 fault display interface C12 of the second power distribution device, a double-0 fault display interface C13 of the second power distribution device, a standby water supply pump operated display interface C14 when the second power distribution device supplies power, When the second power distribution device supplies power, the standby water feeding pump stops displaying the interface C15 and the electrical fault displaying interface C16 of the second power distribution device.

As shown in fig. 13, the first power distribution display interface C1 and the second power distribution display interface C2 are respectively connected to the output terminal 1b of the device selection module 1, the start fault display interface C3 and the stop fault display interface C4 are respectively connected to the output terminal 4b of the start-stop fault detection module 4, the double 1 fault display interface C5 of the first power distribution device and the double 0 fault display interface C6 of the first power distribution device are respectively connected to the output terminal 7b of the double fault detection module 7 of the first power distribution device, the standby feed pump operated display interface C7 is connected to the second output terminal 2C of the first status determination module 2 when the first power distribution device supplies power, the standby feed pump stopped display interface C8 is connected to the first output terminal 2b of the first status determination module 2 when the first power distribution device supplies power, the electrical fault display interface C9 of the first power distribution device and the electrical fault display interface C16 of the second power distribution device are respectively connected to the input terminal 5a of the fault summary module 5, the remote control permission display interface C10 of the first power distribution device and the remote control permission display interface C11 of the second power distribution device are respectively connected with the input end 6a of the device start-stop module 6, the double-1 fault display interface C12 of the second power distribution device and the double-0 fault display interface C13 of the second power distribution device are respectively connected with the output end 8b of the double-fault detection module 8 of the second power distribution device, the standby water feed pump running display interface C14 is connected with the second output end 3C of the second state determination module 3 when the second power distribution device supplies power, and the standby water feed pump stopping display interface C15 is connected with the first output end 3b of the second state determination module 3 when the second power distribution device supplies power.

That is, each display interface in the display alarm interface is respectively connected with the corresponding module, so that the display alarm interface can display whether the first power distribution device or the second power distribution device supplies power for the standby water feeding pump, and the states of the first power distribution device and the second power distribution device and whether the fault occurs or not.

It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program instructing relevant hardware, where the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a magnetic disk or an optical disk, etc.

The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that fall within the spirit and principle of the present invention are intended to be included therein.

Claims

1. A control device is characterized by comprising a device selection module, a first state determination module, a second state determination module, a start-stop fault detection module, a fault summary module, a device start-stop module, a double-fault detection module of a first power distribution device and a double-fault detection module of a second power distribution device;

the output end of the device selection module, the first output end and the second output end of the first state determination module, and the first output end and the second output end of the second state determination module are respectively connected with the input end of the device start-stop module, the input end of the device start-stop module is also respectively connected with the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, the hang-up button, the hang-off button, the manual control button, the automatic control button, the manual start button, the manual stop button, the automatic start interface, the automatic stop interface, the start protection interface, the stop protection interface, the start permission button, and the stop permission interface, the output end of the device start-stop module, the second output end of the first state determination module, and the second output end of the second state determination module are respectively connected with the input end of the start-stop fault detection module, the input end of the start-stop fault detection module is further connected with a reset button, the output end of the start-stop fault detection module is connected with the input end of the fault summary module, the output end of the fault summary module is connected with the fault feedback end of the device start-stop module, and the output end of the device start-stop module is further connected with the start-stop interface of the first power distribution device and the start-stop interface of the second power distribution device so as to control the start or stop of the first power distribution device and the second power distribution device;

the input end of the double-fault detection module of the first power distribution device is respectively connected with the running state detection interface of the first power distribution device, the stop state detection interface of the first power distribution device and the third output end of the first state determination module, the input end of the double-fault detection module of the second power distribution device is respectively connected with the running state detection interface of the second power distribution device, the stop state detection interface of the second power distribution device and the third output end of the second state determination module, and the output end of the double-fault detection module of the first power distribution device and the output end of the double-fault detection module of the second power distribution device are respectively connected with the input end of the fault summary module;

the double-fault detection module of the first power distribution device comprises a twenty-second AND gate, a twenty-third AND gate, a third delayer and a fourth delayer;

2. The control device of claim 1, wherein the device selection module comprises a first and gate, a second and gate, a first flip-flop, and a first not gate;

3. The control device of claim 1, wherein the device start-stop module comprises a device start-up module and a device stop module;

the input of the device starting module is connected with the output of the device selecting module, the second output of the first state determining module and the second output of the second state determining module respectively, the input of the device starting module is further connected with the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, the hang button, the hang release button, the manual control button, the automatic control button, the manual starting button, the automatic starting interface, the starting protection interface, the stopping protection interface and the starting permission button are connected respectively, the fault feedback end of the device starting module is connected with the output of the fault summarizing module, the input of the device starting module is further connected with the feedback output of the device stopping module, the instruction output of the device starting module is connected with the starting interface of the first power distribution device and the second power distribution device The starting interfaces are respectively connected to control the first power distribution device or the second power distribution device to start;

the feedback output end of the device starting module is connected with the input end of the device stopping module, the input end of the device stopping module is also connected with the output end of the device selecting module, the first output end of the first state determining module, the first output end of the second state determining module, the remote control permission interface of the first power distribution device, the remote control permission interface of the second power distribution device, the starting protection interface, the stopping permission interface, the manual stopping button and the automatic stopping interface respectively, the device stops the fault feedback end of the module with the output end of the fault summary module is connected, the instruction output end of the device stops the module and is connected with the stopping interface of the first power distribution device and the stopping interface of the second power distribution device respectively, so that the first power distribution device or the second power distribution device is controlled to stop.

4. The control device of claim 3, wherein the device activation module comprises a first pulse generator, a second flip-flop, a third flip-flop, a fourth flip-flop, a second NOT gate, a third NOT gate, a fourth NOT gate, a fifth NOT gate, a third AND gate, a fourth AND gate, a fifth AND gate, a sixth AND gate, a seventh AND gate, an eighth AND gate, a ninth AND gate, a first OR gate, a second OR gate, and a third OR gate;

5. The control device of claim 3, wherein the device halt module comprises a second pulse generator, a fifth flip-flop, a sixth NOT gate, a seventh NOT gate, a tenth AND gate, an eleventh AND gate, a twelfth AND gate, a thirteenth AND gate, a fourteenth AND gate, a fifteenth AND gate, a sixteenth AND gate, a seventeenth AND gate, a fourth OR gate, a fifth OR gate, and a sixth OR gate;

6. The control apparatus of claim 1, wherein the first state determination module comprises an eighth not gate, a ninth not gate, an eighteenth and nineteenth and gates;

7. The control apparatus of claim 1, wherein the second state determination module comprises a tenth not gate, an eleventh not gate, a twentieth and gate, and a twenty-first and gate;

8. The control apparatus of claim 1, wherein the start-stop fault detection module comprises a first delay timer, a second delay timer, a seventh or gate, an eighth or gate, a ninth or gate, a tenth or gate, a sixth trigger, and a seventh trigger;