CN203444293U - Triplex-level-redundancy emergency shut-down device - Google Patents

Triplex-level-redundancy emergency shut-down device Download PDF

Info

Publication number
CN203444293U
CN203444293U CN201320369492.2U CN201320369492U CN203444293U CN 203444293 U CN203444293 U CN 203444293U CN 201320369492 U CN201320369492 U CN 201320369492U CN 203444293 U CN203444293 U CN 203444293U
Authority
CN
China
Prior art keywords
base plate
relay
processing module
output
module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
CN201320369492.2U
Other languages
Chinese (zh)
Inventor
商勇志
吴小杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
XINHUA CONTROL ENGINEERING Co Ltd
Original Assignee
XINHUA CONTROL ENGINEERING Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by XINHUA CONTROL ENGINEERING Co Ltd filed Critical XINHUA CONTROL ENGINEERING Co Ltd
Priority to CN201320369492.2U priority Critical patent/CN203444293U/en
Application granted granted Critical
Publication of CN203444293U publication Critical patent/CN203444293U/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Abstract

The utility model discloses a triplex-level-redundancy emergency shut-down device which comprises a base plate, and three processing modules which are installed on the base plate. Each processing module independently completes inputting, logic processing, and outputting. The output of each processing module drives a relay on the base plate. Each group, corresponding to each processing module, of relay contacts are connected to form a two-selected-from-three output line, and the output end of the two-selected-from-three output line is connected with an on-site cable. The processing modules are respectively connected to an upper computer through a communication plug. The processing modules receive an instruction of the upper computer, and provide all information related to the device for the upper computer. The device is supplied with power in a redundancy manner. Any one processing module, any one I/O channel and power failures cannot affect the normal operation of the base plate and the other two processing modules. The device provided by the utility model is simple in system structure, is convenient to install and connect, and is simple in online maintenance.

Description

Triplex level redundancy emergency stop device
Technical field
The utility model relates to control field, is specifically related to triplex level redundancy emergency stop device.
Background technology
In order to prevent that visual plant (controlled device) is as steam turbine etc.; be in operation because of faults such as mechanical, electric, the control of part or utility appliance or work not normal; may cause visual plant that great damage accident occurs, the visual plants such as steam turbine are all furnished with emergency shutdown system or device (ETS/ESD).
The major function of ETS/ESD device is the tach signal that monitors rotating machinery in controlled device, monitors all trip condition switching value input signals of controlled device or system simultaneously.When rotating speed surpasses the operation limits value of its setting, or to have switching value input signal be true time, and ETS/ESD judges that dangerous situation occurs immediately; need to carry out emergency stop; be output switch amount signal, control tripgear or system on the spot, make controlled device emergency trip or shutdown.
In power industry, ETS/ESD emergency shutdown system is mainly used in steam turbine protection ETS and boiler protection FSSS(Boiler Furnace Safeguard Supervisory System at present).ETS and FSSS adopt general PLC(Programmable Logic Controller) and DCS(scattered control system) realize.System generally adopts dual redundant.
During two redundancy, two PLC work simultaneously, and arbitrary PLC action is exportable trip signal all.When arbitrary fault, PLC sends the machine failure alarm signal, and automatically cuts off it and shut down logic output, and other one still can work.The problem that dual redundant brings is, is assurance device security, can only take to prevent the "or" logic output of equipment tripping, thereby, increased the possibility that equipment malfunction is shut down.Malfunction may cause user to produce the economic loss that interruption brings.
In oil and petrochemical industry, chemical industry, ETS/ESD system is for the emergency stop of various devices, equipment or system.The general specific PLC that adopts special-purpose triplex level redundancy.Adopting triplex level redundancy mode, is reasonable manner.Both can prevent from protecting malfunction, also guarantee not tripping of equipment.
But owing to adopting general PLC to realize triplex level redundancy, by system wiring, complete, system wiring is complicated, comprises the intermediate links such as inputting modular unit-communication bus-CPU-communication bus-DO output, has indirectly reduced reliability, has increased expense simultaneously.
The specific PLC of special-purpose triplex level redundancy is expensive, an occasion for particular importance.The other shortcoming that adopts DCS or PLC is that the processing links of ETS/ESD is many, input signal is to links such as chaser output signal processes " inputting modular unit-communication bus-CPU-communication bus-DO output ", link is many, and relative reliability declines, and the speed of processing is also low.
Utility model content
The technical problems to be solved in the utility model is to provide triplex level redundancy emergency stop device (ETS/ESD), processes module fault, any I/O passage, power fail for any one, can not affect base plate and other two normal operations of processing module; And device is done as a whole, user, except on-the-spot I/O wiring, does not need other internal signal to connect, distributes; System architecture is succinct, it is easy to connect to install, on-line maintenance is simple.
For achieving the above object, the technical solution of the utility model is as follows:
Triplex level redundancy emergency stop device, comprising:
One base plate,
One is arranged on base plate three processes modules, and described three to process modules separate, and the every output of processing module is mounted on the relay on base plate,
Three relays of processing the same passage of module form one group, and the output of every group relay contact connects into one three and selects two outlet lines on base plate, and described three select the output terminal of two outlet lines to connect on-site cable.In a preferred embodiment of the present utility model, described processing module also connects a host computer by communication plug, process module and receive host computer instruction, and all information that generator is correlated with is to host computer.
In a preferred embodiment of the present utility model, described base plate is connected to three by input signal and processes modules, and the every switching value output signal of processing module is connected to relay, completes three outputs of selecting two output circuits.
In a preferred embodiment of the present utility model, described processing module and relay all arrange a hot-plug interface, make to process module and relay and can change online on base plate.
By technique scheme, the beneficial effects of the utility model are:
A base plate of the present utility model, processes module and three for three and selects two output circuits jointly to realize the logical process of rotating speed input signal and switching value input signal, and direct output switch amount control signal;
Process module fault, any I/O passage, power fail for any one, can not affect base plate and other two normal operations of processing module;
And device is done as a whole, user, except on-the-spot I/O wiring, does not need other internal signal to connect, distributes.
Processing module can be hot-swappable, change online, and relay can be changed in plug, has the feature safeguarded be convenient to.
Accompanying drawing explanation
In order to be illustrated more clearly in the utility model embodiment or technical scheme of the prior art, to the accompanying drawing of required use in embodiment or description of the Prior Art be briefly described below, apparently, accompanying drawing in the following describes is only embodiment more of the present utility model, for those of ordinary skills, do not paying under the prerequisite of creative work, can also obtain according to these accompanying drawings other accompanying drawing.
Fig. 1 is structured flowchart of the present utility model.
Embodiment
For technological means, creation characteristic that the utility model is realized, reach object and effect is easy to understand, below in conjunction with concrete diagram, further set forth the utility model.
With reference to Fig. 1, triplex level redundancy emergency stop device, comprising:
One base plate 1,
One three of being arranged on base plate 1 process module 2, described three processing modules 2 are separate, process the input of module complete independently, logical process and output function for described three, and the every output of processing module 2 drives the relay 3 on base plate, three relays 3 of processing the same passage of module 2 form one group, every group relay 3 contact outputs connect into one three and select two outlet lines 4 on base plate, and described three select the output terminal 5 of two outlet lines to connect on-site cable.
In a preferred embodiment of the present utility model, described base plate 1 is connected to three by the input signal of host computer and processes modules 2, and the every switching value output signal of processing module 2 is connected to relay 3, completes three outputs of selecting two output circuits 4.
In a preferred embodiment of the present utility model, described processing module 2 and relay 3 all arrange a hot-plug interface, make to process module and relay and can change online on base plate.
Above-mentioned processing module is that MLP50 processes module.
Principle of work of the present utility model:
MLP50 processes module on a block I/O level hardware; the function of integrated conventional PLC " inputting modular unit-communication bus-CPU-communication bus-DO output "; can directly carry out rotating speed input, switching value input; after logical process and judgement; direct output switch amount; carry out stoppage protection, greatly reduced the intermediate link of conventional PLC, improved reliability.
MLP50 module and host computer carry out communication by the communication interface of redundancy, by I/O instantaneous value, I/O record actuation time, module internal information, warning etc. be uploaded to host computer, and can receive the instruction of host computer.Logical process program in module is by this communication interface, by host computer, downloads and remains on module, on module, carries out.
The Main Function of base plate is to provide I/O connection terminal and I/O signal is guided to three sockets of processing module; Provide three of output relay and relay output contact to select two circuit; Being provided to three redundancy communication interface connections of processing module is connected with redundancy DC power supply.
Described triplex level redundancy engine off control device, accesses on-the-spot rotating speed and switching value input signal from input terminal, by printed board (PCBA) cabling of base plate, input signal is introduced to three processing modules that are arranged on socket base plate.Process module by the logical process program of downloading from host computer in advance for these three, respectively independently to these signals and host computer instruction, carry out same treatment judgement, export separately halt switch amount signal.The switching value output of every MLP50 module is mounted on the corresponding relay on base plate by socket base plate end.Three group relay signals, after relay output contact three selects two circuit to select, are connected to contact lead-out terminal, connect on-site cable and control field apparatus break-make, complete stoppage protection.
This device also connects host computer by redundancy communication interface, receives host computer instruction, and all information that generator is correlated with are to host computer.Described host computer completes data monitoring, record and ETS/ESD at thread test.
Described device adopts the DC power supply of redundancy, and triplex level redundancy is processed module configuration.By processing module, directly obtain input signal, completion logic is processed, and the output of gauge tap amount.The switching value output of three modules drives the relay on base plate, and base plate completes three and selects two outputs.Device is done as a whole, and user, except on-the-spot I/O wiring, does not need other internal signal to connect, distributes.
More than show and described ultimate principle of the present utility model and principal character and advantage of the present utility model.The technician of the industry should understand; the utility model is not restricted to the described embodiments; that in above-described embodiment and instructions, describes just illustrates principle of the present utility model; do not departing under the prerequisite of the utility model spirit and scope; the utility model also has various changes and modifications, and these changes and improvements all fall within the scope of claimed the utility model.The claimed scope of the utility model is defined by appending claims and equivalent thereof.

Claims (4)

1. triplex level redundancy emergency stop device, is characterized in that, comprising:
One base plate,
One is arranged on base plate three processes modules, and described three to process modules separate, and the every output of processing module is mounted on the relay on base plate,
Three relays of processing the same passage of module form one group, and the output of every group relay contact connects into one three and selects two outlet lines on base plate, and described three select the output terminal of two outlet lines to connect on-site cable.
2. triplex level redundancy emergency stop device according to claim 1, is characterized in that: described processing module also connects a host computer by communication plug, process module and receive host computer instruction, and all information that generator is correlated with is to host computer.
3. triplex level redundancy emergency stop device according to claim 1; it is characterized in that: described base plate is connected to three by input signal and processes module; and the every switching value output signal of processing module is connected to relay, complete three outputs of selecting two output circuits.
4. triplex level redundancy emergency stop device according to claim 1, is characterized in that: described processing module and relay all arrange a hot-plug interface, makes to process module and relay and can change online on base plate.
CN201320369492.2U 2013-06-25 2013-06-25 Triplex-level-redundancy emergency shut-down device Expired - Lifetime CN203444293U (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201320369492.2U CN203444293U (en) 2013-06-25 2013-06-25 Triplex-level-redundancy emergency shut-down device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201320369492.2U CN203444293U (en) 2013-06-25 2013-06-25 Triplex-level-redundancy emergency shut-down device

Publications (1)

Publication Number Publication Date
CN203444293U true CN203444293U (en) 2014-02-19

Family

ID=50095326

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201320369492.2U Expired - Lifetime CN203444293U (en) 2013-06-25 2013-06-25 Triplex-level-redundancy emergency shut-down device

Country Status (1)

Country Link
CN (1) CN203444293U (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107408808A (en) * 2014-12-15 2017-11-28 韩国Ypp株式会社 Triple redundance digital protective relay and its operating method
CN110080837A (en) * 2019-06-06 2019-08-02 东方电气自动控制工程有限公司 The control module decided by vote using two from three logic
CN115817247A (en) * 2022-11-21 2023-03-21 浙江万马新能源有限公司 Charging pile disaster-tolerant charging method, system, equipment and medium

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107408808A (en) * 2014-12-15 2017-11-28 韩国Ypp株式会社 Triple redundance digital protective relay and its operating method
US10158220B2 (en) 2014-12-15 2018-12-18 Ypp Co., Ltd. Triple redundant digital protective relay and operating method therefor
CN110080837A (en) * 2019-06-06 2019-08-02 东方电气自动控制工程有限公司 The control module decided by vote using two from three logic
CN110080837B (en) * 2019-06-06 2023-12-08 东方电气自动控制工程有限公司 Control module adopting three-out-of-two logic voting
CN115817247A (en) * 2022-11-21 2023-03-21 浙江万马新能源有限公司 Charging pile disaster-tolerant charging method, system, equipment and medium

Similar Documents

Publication Publication Date Title
CN102096401B (en) Redundant and fault-tolerant safety instrument control system based on fieldbus and ARM (advanced RISC machines)
CN101074614A (en) Digital redundant emergent protecting system of steam turbine
JP2007312573A (en) Io unit in safety controller of building block type
CN203444293U (en) Triplex-level-redundancy emergency shut-down device
CN105629923A (en) Controller and control method thereof
KR20080013153A (en) Digital security system for nuclear power plant
CN110687893B (en) Redundant radiation monitoring upper-layer system
CN201639280U (en) Microcomputer bus protector automatically identifying running ways of bus
CN203799242U (en) Fieldbus technology-based 6kV high-voltage electrical equipment control system
CN101846998B (en) Redundant digital electric-hydraulic control system for turbine
US20180048303A1 (en) Switching device for operating at least one load
CN212020795U (en) Safety control equipment of robot and robot
CN206133294U (en) Controller fault protection system
CN103163402B (en) Relay protection device state monitoring apparatus based on secondary circuit and monitoring method
CN201392993Y (en) DCS control module for nuclear power engineering transformer
CN101252271B (en) Safety system for a machine and method for monitoring a safety system
CN201233527Y (en) Hoister control device
CN106992095A (en) Relay circuit and the method for performing relay circuit self-test
CN202744217U (en) Programmable logic controller (PLC) redundant system for nuclear power station circular crane control system
CN203806604U (en) Submerged chain conveyor chain rupture protection monitoring device and monitoring system
CN209724428U (en) A kind of trip free device for steam turbine
CN203759492U (en) Three-plus-one redundancy control communication bus structure for triplex redundancy control system
CN215834435U (en) Safety interlocking device and gas compressor test bed
CN108414913B (en) Real-time monitoring system and monitoring method for silicon controlled group
CN202564927U (en) High tension switch cabinet trip alarming system

Legal Events

Date Code Title Description
C14 Grant of patent or utility model
GR01 Patent grant
CX01 Expiry of patent term

Granted publication date: 20140219

CX01 Expiry of patent term