JP2001325157A - Plant supervisory and control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To suppress increase in the cost of a plant supervisory and control system due to redundant structure while holding reliability of plant supervisory and control of the system. SOLUTION: Remote communication equipment 1, a plant supervisory and controlling device 2 and data communication equipment 3 are connected by providing a host network with hubs 6A, 6B and the data communication equipment 3 is connected with bay supervisory controllers 4 by providing an intermediate-order network with hubs 7A, 7B. Furthermore, the bay supervisory controlling device 4 to be installed for every bay and to perform supervisory and control for every bay and a switch gear 5 to be composed of plant equipment such as a breaker and a disconnector are connected with a low-order network. And different kinds of data are dispersedly communicated through each network in a normal condition and data communication is performed through a normal network in the case of abnormality.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a plant monitoring and control system with improved reliability of monitoring and control in a plant such as a substation.

[0002]

2. Description of the Related Art Conventionally, there is a plant monitoring control system as shown in FIG. The plant monitoring and control system is configured by upper, middle and lower networks. Hereinafter, such a plant will be described using a substation as an example.

[0003] The upper network has a hub 106A and a hub 106B.
6B, data communication between a remote communication device 101 that communicates with a control station located at a remote place, a plant monitoring control device 102 that performs plant monitoring and control, and a data communication between the plant monitoring control device 102 and a bay monitoring control device 104 installed for each bay. Is connected.

[0004] The medium-level network is a hub 107.
A and a hub 107B, and a bay monitoring and control device 10 installed for each bay in the hub 107A and the hub 107B.
4. A data communication device 103 that relays data communication between the plant monitoring control device 102 and the bay monitoring control device 104 installed for each bay is connected.

[0005] Further, to the lower network, a bay monitor control unit 104 is connected to a switchgear 105 composed of plant equipment such as sensors, circuit breakers and disconnectors.

In such a system, the hubs 106A and 106B and the hub 10 are used to secure communication reliability.
7A and 107B, the data communication device 103, the bay monitoring and control device 104, and the like form a two-system system to perform redundancy.

In the following description, the network of the hub 106A and the hub 107A is described as "A system", and the network of the hub 106B and the hub 107B is described as "B system".

In such a redundant configuration,
The same type of data is simultaneously transmitted to the A system and the B system, and the reliability is maintained by securing communication through a network in which no failure has occurred in either the A system or the B system when a failure occurs. ing.

Further, even when a failure occurs in the bay monitoring and control device 104, the reliability of communication is achieved by continuing monitoring and control of the switchgear 105 and the like by the normal bay monitoring and control device 104.

[0010]

However, in the method of maintaining the reliability of the system by simultaneously communicating the same type of data through both networks, the number of devices constituting the network increases as a matter of course. In addition, the cost of the network I / F increases, and each device must support a redundant configuration.
And the need to increase the data processing speed
U has to be strengthened, etc., and there is a problem that the cost of the component itself increases due to an increase in hardware and software.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a plant monitoring and control system that suppresses a cost increase due to a redundant configuration while maintaining the reliability of the plant monitoring and control.

[0012]

In order to solve the above-mentioned problems, the invention according to claim 1 is directed to a plant monitoring and control device for monitoring and controlling a plant, and a switch including plant equipment such as a sensor, a circuit breaker, and a disconnector. A gear, a bay monitoring and control device installed for each bay to monitor the bay, and a data communication device for relaying data communication between the plant monitoring and control device and the bay monitoring and control device. The control device and the data communication device are connected by an upper network, the data communication device and the bay monitoring device are connected by a middle network, and the bay monitoring device and the switchgear are connected by a lower network, at least A plant monitoring and control system in which one of the upper network and the middle network is redundantly doubled. In normal times, different types of data are distributed and communicated via a redundant network, and when one of the redundant networks is abnormal, data is communicated via a normal network to enable plant communication. The feature is that cost increase is suppressed while maintaining the reliability of monitoring control.

The invention according to claim 2 is characterized in that the plant monitoring and control device, the switchgear, the bay monitoring and control device, and the data communication device have a failure detection function for detecting a failure in a redundant network. And

The invention according to claim 3 is characterized in that the network has a hub, and the hub has a failure detecting function for detecting a failure in the network.

According to a fourth aspect of the present invention, the network includes a hub having a priority control function, and when one of the redundant networks is abnormal, data communication is performed via the normal network. In addition, communication of urgent data among the data is preferentially performed.

According to a fifth aspect of the present invention, the network includes a hub having a priority control function, and when one of the redundant networks is abnormal, performs data communication via the normal network; In addition, communication of low urgency data among the data is stopped or communication volume is reduced, and communication of high urgency data is prioritized.

According to a sixth aspect of the present invention, the bay monitoring and control device includes a process execution unit for executing a monitoring and control process, a data matching unit for matching data between the multiplexed bay monitoring and control devices, A process switching means for switching the execution process of the bay monitoring control device when a failure occurs, and classifying the process into an important process that continues to execute the monitoring control process even when a failure occurs and a stoppable process that may be stopped when a failure occurs It is characterized by having been done.

According to a seventh aspect of the present invention, the data matching means copies the operation result of the important process which is executed in a distributed manner to all the bay monitoring control devices, and when a failure occurs, the bay monitoring control which caused the failure The important process which has been executed by the device is immediately and continuously executed by another normal bay monitoring and control device.

The invention according to claim 8 is that, among the important processes, those which need to compare the operation results at normal times are regarded as the most important processes, and the most important processes are executed by a plurality of bay monitoring control devices at normal times. And comparing the operation results by data matching means.

According to a ninth aspect of the present invention, the process switching means of the bay monitoring and control device includes a process list to be executed in normal times and a process list to be executed when a fault occurs according to the failed bay monitoring and control device. The monitoring control process is executed according to the process list.

According to a tenth aspect of the present invention, the process switching means of the bay supervisory control device monitors important processes executed by other bay supervisory control devices, and when a failure occurs, the process monitoring means of the bay supervisory control device causing the failure. The important process is executed by another bay monitoring control device.

[0022]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a configuration diagram of a plant monitoring and control system according to a first embodiment of the present invention. In this specification, a substation is specified and described as such a plant, but it is added that the present invention is not limited to the substation monitoring and control system.

The substation monitoring and control system comprises a hub 6A
And a higher-level network configured by the hub 6B, a middle-level network configured by the hubs 7A and 7B, and a lower-level network.

The upper network includes a remote communication device 1
The plant monitoring and control device 2 is connected to the data communication device 3 via the hub 6A and the hub 6B.

The data communication device 3 is connected to the bay supervisory control device 4 via the hubs 7A and 7B in the middle network.

Further, the lower network is connected to a bay monitoring and control device 4 installed for each bay and performing monitoring and control for each bay, and a switch gear 5 composed of plant equipment such as sensors, circuit breakers and disconnectors. Have been.

Communication with a remote control station is performed by a remote communication device 1, and monitoring and control of the plant is performed by a plant monitoring and control device 2. The data communication device 3 relays data communication between the plant monitoring control device 2 and the bay monitoring control device 4.

Here, the upper and middle networks are:
Duplexing is performed by the hubs 6A and 6B and the hubs 7A and 7B. Therefore, in the following description, the network configured by the hub 6A and the hub 7A is described as an A system, and the network configured by the hub 6B and the hub 7B is described as a B system.

Each network has a communication capacity capable of independently performing data communication required by the substation monitoring and control system.

Thus, in normal times, for example, communication of control data can be performed in the A system, and communication of protection data can be performed in the B system, so that load distribution of the network can be realized. As compared with the conventional configuration in which both control data and protection data are communicated in parallel in each of the systems, the amount of data to be communicated on each network can be reduced, and the data processing in each device connected thereto can be reduced. It becomes possible.

On the other hand, when a failure occurs in the network, the control data and the protection data are communicated together via either the A-system or the B-system healthy network. This makes it possible to guarantee data communication at the time of the occurrence of a failure without affecting the data amount and the load of data processing on each device as compared with before the occurrence of the failure.

Accordingly, the communication volume in each network during normal times is reduced, the hardware and software of each device can be simplified, and the cost can be reduced. The cost can be reduced.

In the above, the control data and the protection data are described as examples of different types of data. However, the present invention is not limited to this. It may be divided into those that require gender and those that do not.

Next, a second embodiment of the present invention will be described with reference to the drawings. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate. FIG.
1 shows a configuration diagram of a substation monitoring and control system applied to the description of the present embodiment.

In the first embodiment described above, the devices are connected by the hubs 6A and 6B and the hubs 7A and 7B. In normal times, the control data and the protection data communicate in a distributed manner for each stream, and when abnormal, these data are communicated via a sound network.

However, the protection data includes high urgent data and low urgent data, and it is not always appropriate to communicate these data equally in the event of an abnormality in the situation of an abnormality.

That is, in the event of an abnormality, priority is given to measures such as maintenance and recovery of the system, so that ensuring reliability is the most important issue.

In such a situation, if all data is communicated via a sound network, the above measures may be delayed.

Therefore, in this embodiment, in such a case, communication of maintenance data of high urgency is given priority over maintenance data of low urgency.

For this reason, in the present embodiment, the hubs 6A and 6B and the hubs 7A and 7B are connected to the priority control hubs 8A and 8B and the priority control hubs 9A and 9 having the communication priority function and conforming to the IEEE802.12 standard.
B.

Thus, in normal times, for example, communication of control data is performed in the A system, and communication of protection data is performed in the B system, thereby realizing load distribution of the network. The data amount and the data processing load on each device can be reduced as compared with the case where both control data and protection data are communicated in both the B systems.

On the other hand, when a failure occurs in the network, communication of both control data and protection data is performed via either the A-system or the B-system sound network.

At this time, by prioritizing the communication of protection data with high urgency as described above, the amount of data and the data processing load on each device do not fluctuate greatly compared to before the occurrence of the failure. Data communication at the time of occurrence can be guaranteed.

Further, by giving priority to the communication of the protection data, the communication delay of the protection data can be suppressed, so that the reliability of the system in the event of a failure can be ensured.

Therefore, the total amount of data communication in normal times can be reduced, so that the cost can be reduced by simplifying the hardware and software of each device, and the total cost of the entire system can be reduced. It becomes possible.

Next, a third embodiment of the present invention will be described. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate.

In the above-described embodiment, it has been described that data communicated via the network includes highly urgent data and less urgent data. In the second embodiment, highly urgent data is preferentially communicated.

On the other hand, in the present embodiment, low-urgent data communication such as system maintenance data is stopped in an emergency.

Thus, in normal times, for example, communication of control data is performed in the A system, and communication of protection data is performed in the B system, thereby realizing load distribution of the network. The data amount and the data processing load on each device can be reduced as compared with the case where both control data and protection data are communicated in both the B systems.

On the other hand, when a failure occurs in the network, control data and protection data are communicated via a sound network of either the A system or the B system, and communication of system maintenance data and the like which does not require urgency is performed. To stop.

As a result, it is possible to give priority to the communication of protection data with high urgency, and it is possible to suppress the communication delay of protection data, thereby ensuring the reliability of the system in the event of a failure. It becomes possible.

Therefore, the total amount of data communication in normal times can be reduced, so that the cost can be reduced by simplifying the hardware and software of each device, and the total cost of the entire system can be reduced. It becomes possible.

Next, a fourth embodiment of the present invention will be described. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate.

In the above-described embodiment, the reliability of the system at the time of a failure is ensured by lowering or stopping the communication priority of data of low urgency when a failure occurs.

On the other hand, in the present embodiment, when a failure occurs, the traffic of trend data and the like that does not require urgency is reduced.

That is, in normal times, for example, communication of control data and trend data is performed by the A system, and communication of protection data is performed by the B system, thereby realizing load distribution of the network. The amount of data and the load of data processing on each device are reduced as compared with the case where all communication of control data, protection data, trend data, and the like are performed in both the system and the B system.

On the other hand, when a failure occurs, communication of control data and protection data is performed via either the A-system or the B-system sound network to reduce the amount of communication such as trend data that does not require urgency. Prioritize communication of urgent protection data.

As a result, it is possible to guarantee data communication at the time of occurrence of a failure without affecting the amount of data and the load of data processing on each device as compared with before the occurrence of the failure.

Further, by giving priority to the communication of the protection data, the communication delay of the protection data can be suppressed, so that the reliability of the system in the event of a failure can be ensured.

Therefore, the total amount of data communication in normal times can be reduced, so that the cost can be reduced by simplifying the hardware and software of each device, and the total cost of the entire system can be reduced. It becomes possible.

Next, a fifth embodiment of the present invention will be described with reference to the drawings. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate.

FIG. 3 is a configuration diagram of a substation monitoring and control system applied to the description of the present embodiment. Basically, the configuration is very similar to that shown in FIG. 1, but the hubs 6A and 6 and the hubs 7A and 7B shown in FIG.
16B and failure detection hubs 17A and 17B.

The failure detection hubs 16A and 16B and the failure detection hubs 17A and 17B are connected to the failure detection communication path 1
Connected by 0.

Thus, when a failure occurs, a failure in the network is detected by the failure detection hubs 16A and 16B and the failure detection hubs 17A and 17B.

That is, in normal times, for example, communication of control data is performed by the A system and communication of protection data is performed by the B system, thereby realizing load distribution of the network. In this case, the data amount and the data processing load on each device are reduced as compared with the case where both control data and protection data are communicated.

On the other hand, when a failure occurs, the failure detection hub 16
A, 16B and the failure detection hubs 17A, 17B detect a network failure, and communicate both control data and protection data via the A-system or B-system, whichever is the more sound. Compared with the previous case, the data communication in the event of a failure is guaranteed without affecting the data amount and the load of data processing of each device.

Therefore, the total amount of data communication during normal times can be reduced, so that the cost can be reduced by simplifying the hardware and software of each device, and the total cost of the entire system can be reduced. It becomes possible.

Next, a sixth embodiment of the present invention will be described with reference to the drawings. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be appropriately omitted.

FIG. 4 is a configuration diagram of a substation monitoring and control system applied to the description of the present embodiment. Basically, the configuration is very similar to that shown in FIG. 1, but the failure detection communication path 10 is connected to the hubs 6A and 6 and the hubs 7A and 7B shown in FIG.
Are connected by.

Thus, in normal times, for example, communication of control data is performed in the A system, and communication of protection data is performed in the B system, thereby realizing load distribution of the network. The data amount and the data processing load on each device are reduced as compared with the case where both control data and protection data are communicated in both systems.

On the other hand, when a failure occurs in the network, a device having a failure detection function (failure detection remote communication device 11, failure detection plant monitoring and control device 12, failure detection data communication device 13, and failure detection bay monitoring and control device 14) is used. , And both control data and protection data are communicated via a sound field network of either the A system or the B system, so that the data amount and each device are compared with those before the failure occurred. It is possible to guarantee data communication when a failure occurs without affecting the data processing load.

Accordingly, the total amount of data communication during normal times can be reduced, so that the cost can be reduced by simplifying the hardware and software of each device, and the total cost of the entire system can be reduced. It becomes possible.

Next, a seventh embodiment of the present invention will be described. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate. FIG. 5 is a diagram showing in detail the configuration of the bay view control device applied to the description of the present embodiment.

In each of the embodiments described so far, data of a predetermined type is communicated via the A-system and B-system networks during normal times, and communication is performed via an unfailed network when a failure occurs. Thus, the execution of the data transmitted to the unfailed bay monitoring and control device 4 is performed as usual.

On the other hand, in the present embodiment, priority is given to the contents executed by the switchgear 5 when a failure occurs, so that appropriate failure recovery or the like can be performed.

For this purpose, as shown in FIG. 5, the bay monitoring and control device 4 is provided with a process executing means 41, a process switching means 42 and a data matching means 43.

The monitoring and control process executed by the bay monitoring and control device 4 is an important process such as a protection control process which is always executed even when a failure occurs, and a system maintenance process which can be stopped when a failure occurs. , And are classified in advance into stoppable processes such as processes for trend data.

Thus, in normal times, the important processes a and b and the stoppable processes c and d are distributed to the A-system and B-system bay monitoring and control devices 4 for communication and execution.

Therefore, it is possible to use the bay monitoring and control device 4 having a small arithmetic capacity as compared with the case where all processes are executed by both the A and B system bay monitoring and control devices 4.

On the other hand, for example, when a failure occurs in the bay monitoring and control device 4 of the system B, the important processes a and b are executed by the bay monitoring and control device 4 of the system A, and the stoppable process c is stopped at this time.

Accordingly, the operation processing capacity of the bay monitoring and control device 4 is only required to be able to execute the important processes a and b, and the cost can be reduced by simplifying the hardware and software. The total cost of the entire system can be reduced.

Next, an eighth embodiment of the present invention will be described with reference to the drawings. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate. FIG.
FIG. 1 is a diagram showing in detail a configuration of a bay view control device applied to the description of the present embodiment.

Although the basic configuration of this embodiment is substantially the same as that of the seventh embodiment, the data of the important processes a and b are
The difference is that it is copied to

That is, in normal times, the important processes a, b,
The stoppable processes c and d are executed in a distributed manner in the A-system and B-system bay monitoring and control devices 4, and the data of the important processes a and b are transmitted to the respective bay monitoring and
Is copied to

On the other hand, for example, when a failure occurs in the B-system bay monitoring and control device 4, the important processes a and b are executed by the A-system bay monitoring and control device 4.

At this time, since the copy of the data of the important process b is in the bay monitoring controller 4 of the A system, the process b
Can be executed quickly.

Next, a ninth embodiment of the present invention will be described with reference to the drawings. Note that the same components as those in the above-described embodiment are denoted by the same reference numerals, and description thereof will be omitted as appropriate. FIG.
FIG. 1 is a diagram showing in detail a configuration of a bay view control device applied to the description of the present embodiment.

Although the basic configuration is similar to that of the eighth embodiment, the monitoring control process executed by the bay monitoring control device 4 is always required even when a failure occurs like a control process. Critical processes to be executed, most important processes to be executed by comparing both systems A and B, such as protection processes, etc., and failures, such as system maintenance and trend data processes The difference is that the process is classified in advance into a stoppable process that may be stopped when it occurs.

In normal times, the most important process e is executed in both the A system and the B system, and the important processes a and b and the stoppable processes c and d are distributed by the A system and the B system bay monitoring control devices 4. And run.

As a result, the most important process e can be monitored and controlled with high reliability by comparing the calculation results by the data matching means 43.

On the other hand, for example, when a failure occurs in the B-system bay monitoring and control device 4, the most important process e and the important processes a and b are executed by the A-system bay monitoring and control device 4.

FIG. 8 is a diagram showing a process list of the process switching means 42 in such a bay monitoring and control device 4. FIG. 9 is a diagram showing a process list of the process switching unit 42 in the bay monitoring control device 4 when the double network described above is tripled.

The process switching means 42 registers the processes to be executed by the respective bay monitoring and control devices 4 in normal times, in the case of the system A failure, and in the case of the system B failure. Perform switching.

[0094]

As described above, according to the first aspect of the present invention, different types of data are distributed and communicated via the respective networks during normal times, and data is communicated via the normal network during abnormal times. Because
The cost increase can be suppressed while maintaining the reliability of the plant monitoring control.

According to the second aspect of the present invention, the plant monitoring and control device, the switchgear, the bay monitoring and control device, and the data communication device are provided with a failure detection function for detecting a failure in a redundant network. With this configuration, it is possible to detect a failure and suppress the cost increase while maintaining the reliability of the plant monitoring control.

According to the third aspect of the present invention, since the hub is provided with the failure detection function of detecting a failure in the redundant network, the failure can be detected with a simple configuration and the reliability of the plant monitoring control can be improved. It is possible to suppress an increase in cost while maintaining the same.

According to the fourth aspect of the present invention, since the network is formed by the hub having the priority control function, different types of data are distributed and communicated via the respective networks in normal times, and the normal network is established in abnormal times. The communication of data that requires urgency among the data can be preferentially performed, and the cost increase can be suppressed while maintaining the reliability of the plant monitoring control.

According to the fifth aspect of the present invention, since the network is formed by a hub having a priority control function, different types of data are distributed and communicated via the respective networks in normal times, and a normal network is transmitted in abnormal times. Data communication via the network and stop or reduce the amount of communication of less urgent data of the data, and prioritize the communication of more urgent data, maintaining the reliability of plant monitoring and control. In this way, it is possible to suppress an increase in cost.

According to the invention of claim 6, a process executing means for executing the monitoring control process by the bay monitoring control device, a data matching means for matching data between the multiplexed bay monitoring control devices, And a process switching means for switching the execution process of the bay monitoring and control device when a failure occurs. An important process that continues to execute the monitoring and control process even when a failure occurs, and a stoppable process that may be stopped when a failure occurs. Since the classification is performed, the burden on the bay monitoring control device can be reduced, and thereby the cost increase can be suppressed while maintaining the reliability of the plant monitoring control.

According to the seventh aspect of the present invention, the data matching means copies the operation results of the important processes which are executed in a distributed manner to all the bay monitoring control devices, and when a failure occurs, the bay monitoring unit which caused the failure The important processes that were being executed by the control unit are immediately and continuously executed by other normal bay monitoring and control units, so that the burden on the bay monitoring and control unit can be reduced, and the reliability of the plant monitoring control can be reduced. While suppressing cost increase.

According to the invention of claim 8, among the important processes, those which need to compare the operation results in normal times are regarded as the most important processes, and the most important processes are usually handled by a plurality of bay monitoring control devices in normal times. By executing and comparing the calculation results by the data matching means, it is possible to suppress the cost increase while maintaining the reliability of the plant monitoring control.

According to the ninth aspect of the present invention, the process switching means of the bay monitoring and control device includes a process list to be normally executed and a process list to be executed according to the failed bay monitoring and control device when a fault occurs. Since the monitoring control process is executed in accordance with the process list, it is possible to suppress the cost increase while maintaining the reliability of the plant monitoring control.

According to the tenth aspect of the present invention, the process switching means of the bay supervisory control device monitors the important processes executed by the other bay supervisory control devices, and when a failure occurs, the bay supervisory control which caused the failure. Since the important process of the device is executed by another bay monitoring control device, it is possible to suppress the cost increase while maintaining the reliability of the plant monitoring control.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a substation monitoring and control system.

FIG. 2 is a configuration diagram of a substation monitoring and control system that performs priority control.

FIG. 3 is a configuration diagram of a substation monitoring and control system having a hub with a failure detection function.

FIG. 4 is a configuration diagram of a substation monitoring and control system having a device with a failure detection function.

FIG. 5 is a configuration diagram of a process switching bay monitoring and control device.

FIG. 6 is a configuration diagram of a process switching bay monitoring control device that performs data copying of an important process.

FIG. 7 is a configuration diagram of a process switching bay monitoring and control device that compares calculation results.

FIG. 8 is a diagram showing a process list of a process switching unit.

FIG. 9 is a diagram showing a process list of a process switching unit.

FIG. 10 is a configuration diagram of a conventional substation monitoring and control system.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 remote communication device 2 plant monitoring control device 3 data communication device 4 each bay monitoring control device 4 bay monitoring control device 5 switchgear 6A, 6B, 7A, 7B hub 8A, 8B, 9A, 9B priority control hub 10 failure detection communication path 12 Failure detection plant monitoring and control device 13 Failure detection data communication device 16A, 16B, 17A, 17B Failure detection hub 41 Process execution means 42 Process switching means 43 Data matching means

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B083 AA08 BB01 BB03 CC04 CD11 5H209 AA20 BB13 CC03 CC07 CC09 CC13 DD04 DD11 GG04 GG11 HH04 HH13 HH28 HH40 JJ01 SS01 SS04 SS07 SS09

Claims (10)

[Claims] 1. A plant monitoring and control device for monitoring and controlling a plant, a switchgear including plant equipment such as a sensor, a circuit breaker, and a disconnector, and a bay monitoring and control device installed for each bay and monitoring the bay. And a data communication device that relays data communication between the plant monitoring control device and the bay monitoring control device, wherein the plant monitoring control device and the data communication device are connected by a higher-level network, and the data communication device And the bay monitoring device are connected by a middle network, and the bay monitoring device and the switchgear are connected by a lower network, and at least one of the upper network and the middle network is double redundant. In a plant monitoring and control system that has been Data of different classes and distributed communication, redundant when one of the network is abnormal, a plant monitoring control system, characterized by data communication via the normal network. 2. The system according to claim 1, wherein the plant monitoring and control device, the switchgear, the bay monitoring and control device, and the data communication device have a failure detecting function for detecting a failure in a redundant network. The plant monitoring and control system according to the above. 3. The network has a hub,
2. The plant monitoring and control system according to claim 1, wherein the hub has a failure detection function for detecting a failure in the network. 4. The network is configured to include a hub having a priority control function. When one of the redundant networks is abnormal, data communication is performed via a normal network. 4. The plant monitoring and control system according to claim 1, wherein priority is given to communication of data requiring urgency. 5. The network according to claim 1, wherein the network includes a hub having a priority control function. When one of the redundant networks is abnormal, data communication is performed via a normal network. The plant monitoring and control system according to any one of claims 1 to 3, wherein communication of less urgent data is stopped or communication amount is reduced to prioritize communication of more urgent data. 6. A process execution means for executing a monitoring control process, said bay monitoring control device; a data matching means for matching data between the multiplexed bay monitoring control devices; A process switching means for switching an execution process of the bay monitoring control device, wherein the process is classified into an important process which continues to execute the monitoring control process even when a failure occurs and a stoppable process which may be stopped when a failure occurs The plant monitoring and control system according to any one of claims 1 to 3, wherein: 7. The data matching means copies the operation results of important processes that are executed in a distributed manner to all of the bay monitoring control devices, and is executed by the failed bay monitoring control device when a fault occurs. 7. The plant monitoring and control system according to claim 6, wherein the important process has been immediately and continuously executed by another normal bay monitoring and control device. 8. Among the important processes, a process that requires a comparison of the operation results during normal times is defined as the most important process, and during normal times, the most important process is executed by a plurality of bay monitoring control devices to execute the data matching process. 8. The plant monitoring and control system according to claim 6, wherein the calculation results are compared by means. 9. The process switching means of the bay monitoring and control device includes a process list to be executed in normal times and a process list to be executed according to the failed bay monitoring and control device when a fault occurs. 9. The plant monitoring control system according to claim 6, wherein the monitoring control process is executed according to the list. 10. The process switching means of the bay supervisory control device monitors important processes executed by other bay supervisory control devices, and when a failure occurs, the important process of the failed bay supervisory control device is replaced by another process. 9. The plant monitoring and control system according to claim 6, wherein the system is executed by a bay monitoring and control device.