CN116300398A - Nuclear turbine first-out alarm judging device and method - Google Patents

Abstract

The invention discloses a device and a method for judging the first-out alarm of a nuclear turbine. The first-out alarm judging device of the nuclear turbine comprises: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; each fault detection circuit comprises a forward fault detection circuit and a reverse fault detection circuit, and the forward fault detection circuit and the reverse fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; the AND gate output end is used for sending out a first alarm signal when different direction fault detection loops are in fault, only one forward direction fault detection loop is in fault, and only one reverse direction fault detection loop is in fault. The device can realize the first alarm when faults in different directions occur in the fault detection loop, thereby being beneficial to the timely investigation of accident reasons.

Description

Nuclear turbine first-out alarm judging device and method

Technical Field

The invention relates to the technical field of nuclear power alarm, in particular to a device and a method for judging the first-out alarm of a nuclear power turbine.

Background

The first-out alarm of the steam turbine can record an alarm which causes the steam turbine to trip and triggers the trip for the first time, and the alarm is helpful for accurately identifying the reason causing the steam turbine to trip. When the detection loop detects a fault signal in the same direction (such as a high discharge pressure high signal), a corresponding first-out alarm can be triggered through an independent first-out (high discharge pressure high signal) alarm loop. However, when the detection loop detects faults in different directions (for example, one loop fault signal is high, and the other loop fault signal is low), the protection loop can ensure that the protection loop works normally according to the high-discharge pressure abnormal combined loop, but the first-out alarm has no corresponding judging mechanism, and under the condition, the first-out alarm cannot be triggered, so that interference is brought to the searching of accident reasons.

Disclosure of Invention

The invention provides a device and a method for judging the first-out alarm of a nuclear turbine, which can send out the first-out alarm when faults in different directions occur in a fault detection loop of the nuclear turbine, and are beneficial to timely checking of accident reasons.

According to an aspect of the present invention, there is provided a nuclear turbine first-out alarm judgment device, including: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; wherein each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the positive direction fault detection circuit and the negative direction fault detection circuit of the same fault detection circuit cannot simultaneously generate faults;

Each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first or gate output end and the second or gate output end are connected with the and gate input end;

the AND gate output end is used for sending out a first alarm signal when faults occur in different direction fault detection loops, only one forward direction fault detection loop breaks down, and only one reverse direction fault detection loop breaks down.

Optionally, the first-out alarm judging device of the nuclear turbine further comprises: a first NOT gate and a second NOT gate; the first NOT gate input end is connected with the output end of the first selection module, and the first NOT gate output end is connected with the AND gate input end; the second NOT gate input end is connected with the output end of the second selection module, and the second NOT gate output end is connected with the AND gate input end;

the AND gate output end is also used for sending out a first alarm signal when any fault condition except the fault condition that the number of faults of the fault detection loops in different directions is equal to 2 occurs.

Optionally, the voting mechanisms of the first selection module and the second selection module are set to be the same.

Optionally, the voting mechanism settings of the first selection module and the second selection module include one of two-three and two-four.

Optionally, the forward direction fault detection circuit and the reverse direction fault detection circuit are in opposite directions.

Optionally, the forward direction fault detection loop is a high-high signal fault detection loop, and the reverse direction fault detection loop is a low-low signal fault detection loop; alternatively, the forward direction fault detection loop is a low signal fault detection loop and the reverse direction fault detection loop is a high signal fault detection loop.

Optionally, the fault type detected by the fault detection circuit at least comprises a pressure fault and a temperature fault of the nuclear turbine.

Alternatively, the types of faults detected simultaneously by the respective fault detection loops of the redundancy arrangement are the same.

According to another aspect of the present invention, there is provided a nuclear turbine first-out alarm judging method, which is applicable to a nuclear turbine first-out alarm judging device, the nuclear turbine first-out alarm judging device including: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; wherein each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the positive direction fault detection circuit and the negative direction fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first or gate output end and the second or gate output end are connected with the and gate input end;

The method comprises the following steps:

and when the fault detection circuits in different directions are in fault, only one of the positive fault detection circuits is in fault and at the same time only one of the negative fault detection circuits is in fault, a first-output alarm signal is sent out.

Optionally, the first-out alarm judging device of the nuclear turbine further comprises: a first NOT gate and a second NOT gate; the first NOT gate input end is connected with the output end of the first selection module, and the first NOT gate output end is connected with the AND gate input end; the second NOT gate input end is connected with the output end of the second selection module, and the second NOT gate output end is connected with the AND gate input end;

the method further comprises the steps of:

and sending out a first alarm signal when any fault condition except the fault condition that the number of faults of the fault detection circuits in different directions is equal to 2 occurs.

According to the technical scheme, the first-out alarm judging device and method for the nuclear turbine are provided, and comprise the following steps: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the forward fault detection circuit and the reverse fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first OR gate output end and the second OR gate output end are connected with the AND gate input end; the AND gate output end is used for sending out a first alarm signal when different direction fault detection loops are in fault, only one forward direction fault detection loop is in fault, and only one reverse direction fault detection loop is in fault. Therefore, the device can realize the first-out alarm of the nuclear turbine under the condition of the same-direction abnormality, and can also realize the first-out alarm when the fault detection loops of the device have faults in different directions, namely, the first-out alarm signal is sent when only one positive fault detection loop has faults and only one negative fault detection loop has faults, so that the device is beneficial to timely troubleshooting of accident reasons.

It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the invention or to delineate the scope of the invention. Other features of the present invention will become apparent from the description that follows.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

FIG. 1 is a schematic diagram of the prior art exhaust pressure protection logic for a high pressure cylinder of a steam turbine, for example, with a protective cabinet;

FIG. 2 is a schematic diagram of a prior art first-out alarm logic;

FIG. 3 is a schematic diagram of another prior art first-out alarm logic;

FIG. 4 is a schematic diagram of another prior art first-out alarm logic;

FIG. 5 is a schematic structural diagram of a first-out alarm judging device of a nuclear turbine according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of a first-out alarm judgment device of a nuclear turbine, which is provided in an embodiment of the invention and takes a four-out two voting mechanism as an example;

FIG. 7 is a schematic structural diagram of another first-out alarm judging device of a nuclear turbine according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of another embodiment of the present invention of a first-out alarm determination device for a nuclear turbine, which is an example of a two-out-of-four voting method.

Detailed Description

In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.

It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

The inventor researches and discovers that the protection system consisting of a plurality of sensors, a plurality of signal processing units and a plurality of actuators usually adopts software and hardware loops such as three-out-of-two, four-out-of-two and the like to complete the protection function, so that misoperation of the protection system caused by single fault can be prevented, and the reliability of the protection system is improved. The detection loop (hereinafter referred to as detection loop) formed by the sensor and the signal processing unit is usually designed according to the requirements of a process system. For example, the detection circuit detects a high (or low) pressure "four-out-of-two" circuit, and the protection system operates when 2 or more detection circuits detect a high (or low) pressure signal. The detection circuit detects the high (or low) signal of the pressure, which can be the result of the normal operation detection of the detection circuit or the detection circuit fault trigger.

For example, the high-low trip steam turbine of the high-pressure cylinder of a certain type of nuclear steam turbine adopts four-out-of-two logic, 4 high-pressure transmitters on site are respectively sent to 4 steam turbine protection cabinets and then become high-low switching value signals after signal processing, the two signals (or relation) are uniformly called high-pressure abnormal shutdown, and besides the four-out-of-two logic judgment of the high-pressure abnormal shutdown sent by other 3 protection cabinets, the two signals are sent to other 3 protection cabinets to form respective high-pressure shutdown signals through four-out-of-two logic judgment. 4, outputting high-discharge-pressure abnormal shutdown signals to shutdown solenoid valves by the protection cabinets to finish tripping of the steam turbine. The first-out alarm of the steam turbine can record an alarm which causes the steam turbine to trip and triggers the trip for the first time, and the alarm is helpful for accurately identifying the reason causing the steam turbine to trip. The first-out alarm can accurately report the high or low signals of the high-pressure discharge and is helpful for identifying the reason, and therefore, an independent first-out high-low alarm loop and an independent first-out low-high alarm loop are designed.

Fig. 1 is a schematic diagram of exhaust pressure protection logic of a high-pressure cylinder of a steam turbine, taking a protection cabinet as an example in the prior art, fig. 2 is a schematic diagram of first-out alarm logic in the prior art, fig. 3 is a schematic diagram of another first-out alarm logic in the prior art, and fig. 4 is a schematic diagram of another first-out alarm logic in the prior art. The symbols in fig. 1 to 4 mean: trip Demand: turbine trip command, HPT: steam turbine high pressure cylinder exhaust pressure, HH: high alarm, LL: low alarm, -number: loop identification, first Out: and (5) alarming for the first time. Referring to fig. 1 to 4, the first-out alarm method in the prior art refers to fig. 1, the high-row pressure transmitter 1 forms a high-row pressure high-1 (HPT pre.hh-1) after thresholding, the high-row pressure low-high-low-1 (HPT pre.ll-1), two signals "or" logic forms a high-row pressure abnormal tripping signal-1 (HPT pre.abnormal Trip-1) of a 1 loop, the other 3 loops are formed into HPT Abnormal Trip-1 after four-taking, and the HPT pre.hh-1 or HPT pre.ll-1 in fig. 1 and the four-taking signals are respectively sent to fig. 3 through an and logic forming signal HPT HH-1 or HPT LL-1. HPT Abnormal Trip-1 in FIG. 2 is combined with other protection loops, and after passing through a delay module T2, a Trip Demand-1 signal is formed and sent to FIG. 3.

The Trip Demand-1 signal sent from fig. 2 goes to fig. 3, after the nor logic, on the one hand, the Trip Demand-1 signal goes to the S end of the RS flip-flop after the and logic, and on the other hand, the Trip Demand-1 signal goes to the R end of the RS flip-flop after the and logic, and the output end Q of the RS flip-flop outputs the signal HPT HH (First out) -1 and HPT LL (First out) -1 for triggering the First-out alarm signal HPT HH (First out) -1 or HPT LL (First out) -1, and the output signal goes to fig. 4, which logic ensures that only the high-discharge high-low First-out alarm is sent out without being interfered by other alarms. The signal after the NOT logic is sent to the R end of the RS trigger after being pulsed, and when the Trip Demand-1 signal disappears, the first alarm signal can be reset. The HPT HH (First out) -1 and HPT LL (First out) -1 signals in fig. 3 are sent to fig. 4, and the HPT HH (First out) -1 or HPT LL (First out) -1 signals in fig. 4 are output to the HPT HH-Trip First out or HPT LL-Trip First out after being selected from four times with other 3 signals, and the two alarm signals are the final First alarm signals for improving the operation operator and accident analysis.

Through the logic judgment, the detection loop can well judge that the high discharge pressure is high, low and first-out alarming is carried out, but if faults of the detection loops in different directions occur, the protection loop can well execute a protection function, but the faults of the detection loops in different directions cannot send out any first-out alarming, and therefore difficulty is brought to accident analysis. That is, when the detection loop detects a fault signal in the same direction (such as a high discharge pressure high signal), a corresponding first-out alarm can be triggered through an independent first-out (high discharge pressure high signal) alarm loop. However, when the detection loop detects faults in different directions (for example, one loop fault signal is high, and the other loop fault signal is low), the protection loop can ensure that the protection loop works normally according to the high-discharge pressure abnormal combined loop, but the first-out alarm has no corresponding judging mechanism, and under the condition, the fourth-out and second-out alarm cannot be triggered. And when two or more paths of detection loops fail, the existing first-output alarm loop can generate two paths of alarms and cannot play the effect of first-output alarm, so that the first-output alarm of the nuclear turbine is required to be designed.

Therefore, the embodiment of the invention provides a device and a method for judging the first-output alarm of a nuclear turbine, which are used for sending out the first-output alarm when faults in different directions occur in a fault detection loop of the nuclear turbine, and are beneficial to timely checking of accident reasons.

Fig. 5 is a schematic structural diagram of a first-out alarm judging device of a nuclear turbine according to an embodiment of the present invention. Referring to fig. 5, the first-out alarm judging device of the nuclear turbine comprises: at least three fault detection loops, a first selection module 10, a second selection module 20, an and gate 30, a first or gate 40 and a second or gate 50 which are redundantly arranged; each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the forward fault detection circuit and the reverse fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module 10 and the input end of the first or gate 40; each reverse fault detection loop is connected to the input of the second selection module 20 and the input of the second or gate 50; the output end of the first or gate 40 and the output end of the second or gate 50 are both connected with the input end of the and gate 30; the output end of the and gate 30 is used for sending out a first alarm signal when the fault detection circuits in different directions are out of order, only one positive fault detection circuit is out of order, and only one negative fault detection circuit is out of order.

Illustratively, taking the example of providing three fault detection circuits redundantly, referring to fig. 5, a first fault detection circuit 100, a second fault detection circuit 200, and a third fault detection circuit 300 are respectively provided. The first, second and third fault detection circuits 100, 200 and 300 are each connected to a nuclear turbine (not shown).

Each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; and the forward direction fault detection circuit and the reverse direction fault detection circuit of the same fault detection circuit cannot simultaneously generate faults. For example, the first failure detection circuit 100 includes the forward failure detection circuit 101 of the first failure detection circuit and the reverse failure detection circuit 102 of the first failure detection circuit, and the forward failure detection circuit 101 of the first failure detection circuit and the reverse failure detection circuit 102 of the first failure detection circuit do not fail at the same time. The second fault detection circuit 200 includes a forward fault detection circuit 201 of the second fault detection circuit and a reverse fault detection circuit 202 of the second fault detection circuit, and the forward fault detection circuit 201 of the second fault detection circuit and the reverse fault detection circuit 202 of the second fault detection circuit do not fail at the same time. The third failure detection circuit 300 includes a forward failure detection circuit 301 of the third failure detection circuit and a reverse failure detection circuit 302 of the third failure detection circuit, and the forward failure detection circuit 301 of the third failure detection circuit and the reverse failure detection circuit 302 of the third failure detection circuit do not fail at the same time.

Each positive direction fault detection loop is connected with the input end of the first selection module 10 and the input end of the first or gate 40; each reverse fault detection loop is connected to the input of the second selection module 20 and the input of the second or gate 50; the output of the first or gate 40 and the output of the second or gate 50 are both connected to the input of the and gate 30. For example, the forward fault detection circuit 101 of the first fault detection circuit, the forward fault detection circuit 201 of the second fault detection circuit, and the forward fault detection circuit 301 of the third fault detection circuit are connected to the input of the first selector module 10 and the input of the first or gate 40. The reverse fault detection circuit 102 of the first fault detection circuit, the reverse fault detection circuit 202 of the second fault detection circuit, and the reverse fault detection circuit 302 of the third fault detection circuit are all connected to the input of the second selection module 20 and the input of the second or gate 50.

The first selection module 10 and the second selection module 20 may adopt a two-out-of-three, two-out-of-four, and two-in-half voting mechanism. Wherein the number of fault detection loop redundancy settings is related to the number of voting mechanisms. For example, when the selection module adopts a three-out-two voting mechanism, three fault detection loops are correspondingly arranged in a redundancy manner; when the selection module adopts a four-out-of-two voting mechanism, four fault detection loops are correspondingly arranged in a redundancy mode.

In the technical scheme of the embodiment, the first-output alarm judging device for the nuclear turbine provided by the embodiment of the invention can realize the first-output alarm when only one same-direction fault detection loop breaks down under normal conditions, and can realize the first-output alarm when different-direction fault detection loops break down under abnormal conditions, only one forward-direction fault detection loop breaks down, and only one reverse-direction fault detection loop breaks down at the same time. Wherein, the first alarm under normal condition means: for example, when at least one of the forward fault detection circuits fails and none of the reverse fault detection circuits fails, according to the two-out-of-three voting mechanism, when two or more of the forward fault detection circuits fail, a first alarm signal may be sent out by the first selection module 10. For example, if the failure is 1, the failure is not 0, the failure conditions of the forward failure detection circuit 101 of the first failure detection circuit, the forward failure detection circuit 201 of the second failure detection circuit, and the forward failure detection circuit 301 of the third failure detection circuit are 1, 0, and 1, and the failure conditions of the reverse failure detection circuit 102 of the first failure detection circuit, the reverse failure detection circuit 202 of the second failure detection circuit, and the reverse failure detection circuit 302 of the third failure detection circuit are 0, and 0, the first selection module 10 outputs 1 to give a first alarm, and the second selection module 20 and the and gate 30 outputs 0 to prevent the first alarm. Otherwise, when at least one reverse direction fault detection circuit fails and none of the forward direction fault detection circuits fails, the principle is the same, and no description is repeated here.

It should be noted that, under normal conditions, only the first alarm that the same-direction fault detection loop breaks down is the normal fault alarm of the nuclear turbine process system. And when the fault detection circuits in different directions are faulty, and only one forward fault detection circuit is faulty and only one reverse fault detection circuit is faulty, the first alarm refers to the condition that the detection circuits are faulty.

The first alarm under abnormal conditions is as follows: when the different-direction fault detection circuits fail, and only one forward-direction fault detection circuit fails and only one reverse-direction fault detection circuit fails at the same time. For example, taking a two-out-of-three voting mechanism as an example, a failure is set to 1, and a failure is not set to 0. When only one of the forward fault detection circuits 101, 201 and 301 of the first, second and third fault detection circuits fails (e.g. 1, 0), and only one of the reverse fault detection circuits 102, 202 and 302 of the first, second and third fault detection circuits fails (e.g. 0, 1, 0), and the forward and reverse fault detection circuits of the same fault detection circuit will not fail at the same time, according to the two-out-of-three voting mechanism, the outputs of the first and second selection modules 10 and 20 will not give an alarm, the outputs of the first and second or gates 40 and 50 will be 1, the outputs of the and gate 30 will be 1, and the output of the and gate 30 will give an alarm signal for the first time.

The technical scheme of this embodiment is through providing a nuclear turbine first-out alarm judgment device, this nuclear turbine first-out alarm judgment device includes: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the forward fault detection circuit and the reverse fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first OR gate output end and the second OR gate output end are connected with the AND gate input end; the AND gate output end is used for sending out a first alarm signal when different direction fault detection loops are in fault, only one forward direction fault detection loop is in fault, and only one reverse direction fault detection loop is in fault. Therefore, the device can realize the first-out alarm of the nuclear turbine under the condition of the same-direction abnormality, and can also realize the first-out alarm when the fault detection loops of the device have faults in different directions, namely, the first-out alarm signal is sent when only one positive fault detection loop has faults and only one negative fault detection loop has faults at the same time, thereby being beneficial to the timely investigation of accident reasons and avoiding influencing the normal operation of a nuclear power system.

On the basis of the above embodiment, optionally, the voting mechanisms of the first selection module and the second selection module are set to be the same.

Because each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop, the voting mechanisms of the first selection module and the second selection module are set to be the same.

Optionally, the voting mechanism settings of the first selection module and the second selection module include one of two-three and two-four.

The arrangement of the three-out-of-two and the four-out-of-two is related to the redundancy number of fault detection loops actually arranged by the nuclear turbine. For example, when the selection module adopts a three-out-two voting mechanism, three fault detection loops are correspondingly arranged in a redundancy manner; when the selection module adopts a four-out-of-two voting mechanism, four fault detection loops are correspondingly arranged in a redundancy mode. Accordingly, the voting mechanism of the first selection module and the second selection module may be set according to actual situations, which is not specifically limited herein.

In addition, the voting mechanism can be set as other forms of voting mechanisms, and the voting mechanism can be specifically set according to actual situations, and is not particularly limited herein.

Alternatively, the forward direction fault detection circuit and the reverse direction fault detection circuit are in opposite directions.

Wherein the forward fault detection circuit and the reverse fault detection circuit in the same fault detection circuit do not simultaneously fail.

Optionally, the forward fault detection loop is a high-high signal fault detection loop, and the reverse fault detection loop is a low-low signal fault detection loop; alternatively, the forward fault detection loop is a low signal fault detection loop and the reverse fault detection loop is a high signal fault detection loop.

Note that, regarding whether the forward fault detection circuit is a high signal or the reverse fault detection circuit is a high signal, the setting may be performed according to the actual situation, and is not particularly limited herein.

Optionally, the fault type detected by the fault detection circuit at least comprises a pressure fault and a temperature fault of the nuclear turbine.

Wherein, the faults of the nuclear turbine can occur in pressure faults, temperature faults and the like. Therefore, a fault detection circuit connected to the nuclear turbine may be used to detect pressure faults, temperature faults, etc. Also, the types of faults detected by the fault detection circuit include at least a pressure fault and a temperature fault of the nuclear turbine.

Alternatively, the types of faults detected simultaneously by the respective fault detection loops of the redundancy arrangement are the same.

For example, the first fault detection circuit 100, the second fault detection circuit 200, and the third fault detection circuit 300 in fig. 5 are the same in the types of faults detected at the same time or in the same detection state. For example, the high-exhaust pressure signal of the nuclear turbine is detected, or the temperature signal of the nuclear turbine is detected.

FIG. 6 is a schematic diagram of a nuclear turbine first-out alarm judgment device using a four-out-of-two voting mechanism as an example in an embodiment of the present invention. By way of example, taking the pressure protection of the high-pressure exhaust cylinder of the nuclear turbine as an example and taking a two-out-of-four voting mechanism as an example for explanation, referring to fig. 6, the First selection module and the second selection module both adopt the two-out-of-four voting mechanism, and the high-pressure exhaust cylinder of the nuclear turbine is provided with four pressure fault detection circuits in a pressure protection redundancy manner, and each pressure fault detection circuit comprises a high-direction pressure fault detection circuit and a low-direction pressure fault detection circuit, namely, the left side HPT HH (First out) -1 to HPT HH (First out) -4 in fig. 6, and the right side HPT LL (First out) -1 to HPT LL (First out) -4 in fig. 6 respectively. Wherein, HPT HH (First out) -1 to HPT HH (First out) -4 sequentially represent high signal First-out alarm signals of the detection loops of the exhaust pressure of the high pressure cylinder of the steam turbine, and HPT LL (First out) -1 to HPT LL (First out) -4 sequentially represent low signal First-out alarm signals of the detection loops of the exhaust pressure of the high pressure cylinder of the steam turbine. Specifically, if the failure is 1, the failure is not 0, and if the failure conditions of left HPT HH (First out) -1 to HPT HH (First out) -4 are sequentially 1, 0, and the failure conditions of right HPT LL (First out) -1 to HPT LL (First out) -4 are sequentially 0, 1, and 0, the left four-out and right four-out outputs of fig. 6 are both 0 and the First alarm is not given, and the left or gate and the right or gate outputs are both 1, the and gate outputs are 1, so that the and gate sends the First alarm signal.

The embodiments provided in fig. 5 and 6 enable the first-out alarm effect that only one of the forward direction fault detection circuits is faulty and only one of the reverse direction fault detection circuits is faulty according to the embodiments provided in fig. 5 and 6, but the embodiments provided in fig. 5 and 6 cannot achieve the first-out alarm effect when the fault condition that the number of faults in the different direction fault detection circuits is equal to 2 and any fault condition other than the fault condition that only one of the forward direction fault detection circuits is faulty and only one of the reverse direction fault detection circuits is faulty are occurred.

For example, referring to fig. 6, assuming that the failure conditions of left HPT HH (First out) -1 to HPT HH (First out) -4 are sequentially 1, 0, and the failure conditions of right HPT LL (First out) -1 to HPT LL (First out) -4 are sequentially 1, 0, 1, and 0, the left four-out output of fig. 6 is 0 and will not give an alarm First, the right four-out output is 1 and will give an alarm First, the left or gate and the right or gate output are both 1, and the and gate outputs are both 1, so that the and gate and the right four-out output will give an alarm First, the meaning of the alarm First is lost, and the fault analysis is interfered.

On the other hand, if 2 or more detection loop faults occur, a high discharge pressure high signal is detected, and according to the logic of fig. 4, the high-four-to-two logic can trigger the HPT HH-Trip First out First; in the logic of FIG. 1, a high discharge pressure high signal trigger HPT Abnormal Trip-1 is detected, and after being transmitted to FIG. 2, a signal Trip Demand-1 is formed; the logic of FIG. 1 also triggers the transfer of HPT HH-1 to FIG. 3, which together with the Trip Demand-1 signal forms the high-head-out high-row logic of the logic of FIG. 3 on the left, triggering HPT HH (First out) -1.HPT HH (First out) -1 sends out HPT HH-Trip First out after four choices of logic on the left side of FIG. 6 with one alarm (e.g. HPT HH (First out) -2) of the same principle. After 2 or more detection loops of the steam turbine are stopped, a steam inlet valve of the steam turbine cuts off a steam source, high-exhaust pressure is reduced, at the moment, a high-high signal which is wrongly sent by a high-exhaust pressure sensor is possible to disappear (a stress element of the sensor possibly recovers or partially recovers after the pressure-bearing side pressure disappears, and corresponding signals disappear), as can be seen from logic in fig. 3, the Trip command-1 disappears, the high-exhaust steam pressure is reduced after the steam turbine is stopped, the high-exhaust pressure low-low signal is triggered, and in the right side of the logic in fig. 3, the Trip command-1 vanishing signal is in non-post-true, and the high-exhaust pressure low-signal triggers HPT LL (First out) -1 after AND logic; through the logic of FIG. 6, the same alarm (e.g., HPT LL (First out) -2) as other detection loops is generated through two-by-four common generation of HPT LL-Trip First out; therefore, the high-discharge-pressure high-First-output alarm HPT HH-Trip First out appears firstly, and then the high-discharge-pressure low-alarm HPT LL-Trip First out appears, and the low-alarm is not supposed to appear, so that the analysis of faults is misled.

For this purpose, the present example can solve this problem by the following scheme on the basis of the above-described embodiments.

Fig. 7 is a schematic structural diagram of another first-out alarm judging device of a nuclear turbine according to an embodiment of the present invention. Referring to fig. 7, the first-out alarm judging device of the nuclear turbine further includes: a first NOT gate 60 and a second NOT gate 70; the input end of the first NOT gate 60 is connected with the output end of the first selection module 10, and the output end of the first NOT gate 60 is connected with the input end of the AND gate 30; the input end of the second NOT gate 70 is connected with the output end of the second selection module 20, and the output end of the second NOT gate 70 is connected with the input end of the AND gate 30; the output end of the and gate 30 is also used for sending out a first alarm signal when any fault condition except the fault conditions that the number of faults of the fault detection circuits in different directions is equal to 2 occurs.

Wherein, any fault condition except the fault condition that the number of faults of the fault detection circuits in different directions is equal to 2 can be, for example: the fault detection loops in different directions are in fault, and the number of faults of the detection loops in different directions is not equal to 2. Illustratively, referring to FIG. 7, a two-out-of-three voting mechanism is taken as an example, and a failed 1 is set, and a non-failed 0 is set. For example, assuming that the failure conditions of the forward failure detection circuit 101 of the first failure detection circuit, the forward failure detection circuit 201 of the second failure detection circuit, and the forward failure detection circuit 301 of the third failure detection circuit are sequentially 1, 0, and 1, and the failure conditions of the reverse failure detection circuit 102 of the first failure detection circuit, the reverse failure detection circuit 202 of the second failure detection circuit, and the reverse failure detection circuit 302 of the third failure detection circuit are sequentially 0, 1, and 0 (the forward failure detection circuit and the reverse failure detection circuit of the same failure detection circuit do not fail at the same time), the first selection module 10 outputs 1 and sends out a first alarm signal, the first or gate 40 outputs 1, and the first selection module 10 outputs 0 to the and gate 30 input terminal after the first not gate 60 outputs 1; the output of the second selection module 20 is 0 and no first-out alarm signal will be sent out, the output of the second or gate 50 is 1, and the output of the second selection module 20 is 0 and then is 1 to the input end of the and gate 30 through the second not gate 70, so that the output of the and gate 30 is 0 and no first-out alarm signal will be sent out, and only the first selection module 10 will send out the first-out alarm signal, thereby realizing that the fault detection loop breaks down in different directions, and the number of faults of the detection loops in any direction is greater than or equal to 2.

For another example, assuming that the failure conditions of the forward failure detection circuit 101 of the first failure detection circuit, the forward failure detection circuit 201 of the second failure detection circuit, and the forward failure detection circuit 301 of the third failure detection circuit are sequentially 0, and 1, and the failure conditions of the reverse failure detection circuit 102 of the first failure detection circuit, the reverse failure detection circuit 202 of the second failure detection circuit, and the reverse failure detection circuit 302 of the third failure detection circuit are sequentially 1, and 0 (the forward failure detection circuit and the reverse failure detection circuit of the same failure detection circuit do not fail at the same time), the first selection module 10 outputs 0 and does not issue a first output alarm signal, the first or gate 40 outputs 1, and the first selection module 10 outputs 0 to the input end of the and gate 30 through the first not gate 60; the output of the second selecting module 20 is 1 and sends out the first-out alarm signal, the output of the second or gate 50 is 1, and the output of the second selecting module 20 is 0 to the input end of the and gate 30 after passing through the second not gate 70, so that the output of the and gate 30 is 0 and the first-out alarm signal cannot be sent out, and only the second selecting module 20 sends out the first-out alarm signal, thereby realizing the first-out alarm effect of the fault detection loop under any fault condition except the fault condition that the number of faults of the fault detection loops in different directions is equal to 2.

FIG. 8 is a schematic diagram of another embodiment of the present invention of a first-out alarm determination device for a nuclear turbine, which is an example of a two-out-of-four voting method. By way of example, taking the pressure protection of the high-pressure exhaust cylinder of the nuclear turbine as an example and taking a two-out-of-four voting mechanism as an example for explanation, referring to fig. 8, the First selection module and the second selection module both adopt the two-out-of-four voting mechanism, and the high-pressure exhaust cylinder of the nuclear turbine is provided with four pressure fault detection circuits in a pressure protection redundancy manner, and each pressure fault detection circuit comprises a high-direction pressure fault detection circuit and a low-direction pressure fault detection circuit, namely, the left side HPT HH (First out) -1 to HPT HH (First out) -4 in fig. 8, and the right side HPT LL (First out) -1 to HPT LL (First out) -4 in fig. 8 respectively. Wherein, HPT HH (First out) -1 to HPT HH (First out) -4 sequentially represent high signal First-out alarm signals of the detection loops of the exhaust pressure of the high pressure cylinder of the steam turbine, and HPT LL (First out) -1 to HPT LL (First out) -4 sequentially represent low signal First-out alarm signals of the detection loops of the exhaust pressure of the high pressure cylinder of the steam turbine. Specifically, let 1 be failed and 0 be not failed. For example, assuming that the left HPT HH (First out) -1 to HPT HH (First out) -4 has a failure condition of 1, 0, 1, 0 in order, and the right HPT LL (First out) -1 to HPT LL (First out) -4 has a failure condition of 0, 1, 0 in order, the left four-out of fig. 8 is 1 and will send out the First alarm signal, the right four-out of 0 and will not send out the alarm, the left four-out of 1 outputs 0 to the and gate through the left non-gate, the right four-out of 0 outputs 1 to the and gate through the right non-gate, and the left or gate and the right or gate outputs 1, the and gate outputs 0, so that the and gate will not send out the First alarm signal, only the left four-out will send out the First alarm signal, thereby realizing the First alarm effect of the fault detection loop when any failure condition except that the number of faults of the fault detection loop in different directions is equal to 2 occurs.

The embodiment of the invention also provides a method for judging the first-out alarm of the nuclear turbine. The nuclear turbine first-out alarm judging method is suitable for a nuclear turbine first-out alarm judging device, and the nuclear turbine first-out alarm judging device comprises: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the forward fault detection circuit and the reverse fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first or gate output end and the second or gate output end are both connected with the and gate input end.

The method comprises the following steps: and when the fault detection circuits in different directions are in fault, only one positive fault detection circuit is in fault and only one negative fault detection circuit is in fault, a first alarm signal is sent.

According to the technical scheme, the nuclear turbine first-out alarm judging method comprises the following steps: and when the fault detection circuits in different directions are in fault, only one positive fault detection circuit is in fault and only one negative fault detection circuit is in fault, a first alarm signal is sent. Therefore, the method can realize the first-out alarm of the nuclear turbine under the condition of the same-direction abnormality, and can also realize the first-out alarm when the fault detection loops of the nuclear turbine have faults in different directions, namely, the first-out alarm signal is sent when only one positive fault detection loop has faults and only one negative fault detection loop has faults at the same time, thereby being beneficial to timely troubleshooting of accident reasons and avoiding influencing the normal operation of a nuclear power system.

Optionally, the first-out alarm judging device of the nuclear turbine further comprises: a first NOT gate and a second NOT gate; the first NOT gate input end is connected with the output end of the first selection module, and the first NOT gate output end is connected with the AND gate input end; the second NOT gate input end is connected with the output end of the second selection module, and the second NOT gate output end is connected with the AND gate input end;

The method further comprises the steps of: and sending out a first alarm signal when any fault condition except the fault condition that the number of faults of the fault detection circuits in different directions is equal to 2 occurs.

It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps described in the present invention may be performed in parallel, sequentially, or in a different order, so long as the desired results of the technical solution of the present invention are achieved, and the present invention is not limited herein.

The above embodiments do not limit the scope of the present invention. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention.

Claims (9)

1. The utility model provides a nuclear turbine first out alarm judgment device which characterized in that includes: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; wherein each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the positive direction fault detection circuit and the negative direction fault detection circuit of the same fault detection circuit cannot simultaneously generate faults;

Each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first or gate output end and the second or gate output end are connected with the and gate input end;

the AND gate output end is used for sending out a first alarm signal when faults occur in different direction fault detection loops, only one forward direction fault detection loop breaks down, and only one reverse direction fault detection loop breaks down.

2. The nuclear turbine head-out alarm judgment device according to claim 1, further comprising: a first NOT gate and a second NOT gate; the first NOT gate input end is connected with the output end of the first selection module, and the first NOT gate output end is connected with the AND gate input end; the second NOT gate input end is connected with the output end of the second selection module, and the second NOT gate output end is connected with the AND gate input end;

the AND gate output end is also used for sending out a first alarm signal when any fault condition except the fault condition that the number of faults of the fault detection loops in different directions is equal to 2 occurs.

3. The nuclear turbine first-out alarm judging device according to claim 1, wherein voting mechanisms of the first selecting module and the second selecting module are set to be the same.

4. The nuclear turbine first-out alarm judgment device according to claim 3, wherein the voting mechanism setting of the first selection module and the second selection module includes one of two-out-of-three and two-out-of-four.

5. The nuclear turbine head-out alarm judgment device according to claim 1, wherein the forward direction fault detection circuit is a high-high signal fault detection circuit, and the reverse direction fault detection circuit is a low-low signal fault detection circuit; alternatively, the forward direction fault detection loop is a low signal fault detection loop and the reverse direction fault detection loop is a high signal fault detection loop.

6. The nuclear turbine head-out alarm judgment device according to claim 1, wherein the fault type detected by the fault detection circuit at least comprises a pressure fault and a temperature fault of the nuclear turbine.

7. The nuclear turbine first-out alarm judging device according to claim 6, wherein the types of faults detected simultaneously by the respective fault detection circuits provided in redundancy are the same.

8. The method is suitable for a nuclear turbine first-out alarm judging device, and the nuclear turbine first-out alarm judging device comprises the following steps: the system comprises at least three fault detection loops, a first selection module, a second selection module, an AND gate, a first OR gate and a second OR gate which are arranged in a redundancy way; wherein each fault detection loop is connected with the nuclear turbine; each fault detection loop comprises a forward fault detection loop and a reverse fault detection loop; the positive direction fault detection circuit and the negative direction fault detection circuit of the same fault detection circuit cannot simultaneously generate faults; each positive direction fault detection loop is connected with the input end of the first selection module and the input end of the first OR gate; each reverse fault detection loop is connected with the input end of the second selection module and the input end of the second OR gate; the first or gate output end and the second or gate output end are connected with the and gate input end;

the method comprises the following steps:

and when the fault detection circuits in different directions are in fault, only one of the positive fault detection circuits is in fault and at the same time only one of the negative fault detection circuits is in fault, a first-output alarm signal is sent out.

9. The nuclear turbine head-out alarm judging method according to claim 8, wherein the nuclear turbine head-out alarm judging device further comprises: a first NOT gate and a second NOT gate; the first NOT gate input end is connected with the output end of the first selection module, and the first NOT gate output end is connected with the AND gate input end; the second NOT gate input end is connected with the output end of the second selection module, and the second NOT gate output end is connected with the AND gate input end;

the method further comprises the steps of:

and sending out a first alarm signal when any fault condition except the fault condition that the number of faults of the fault detection circuits in different directions is equal to 2 occurs.

Images