JP2015026279A - Plant monitoring control device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve reliability to systematic failures.SOLUTION: A plant monitoring control device includes: a controller 10 that creates a plurality of virtual controllers by a virtual operating system; a plurality of input/output units 12a, 12b, and 12c which are provided so as to correspond to the virtual controllers respectively and output first plant control signals generated by the virtual controllers; and a signal selection unit 13 that generates a second plant control signal on the basis of the first plant control signal output from the plurality of input/output unit and transmits the second plant control signal to a plant control apparatus. Each of the virtual controller performs control operation using a state signal of a plant apparatus and generates a first plant control signal. On each of the virtual controller, a mutually different operating system operates.

Description

  Embodiments described herein relate generally to a plant monitoring control device and a program.

  A monitoring control device that monitors and controls turbine equipment in a power plant has multiplexed controllers, and each controller performs computations for controlling turbine processes such as steam control valves and auxiliary equipment. Then, the signal selection device takes an intermediate value or a majority decision of the calculation results of each controller and outputs a control signal to control the turbine process.

  Such a conventional monitoring and control apparatus has high reliability against random failure such as hardware failure because the controllers are multiplexed (redundant). However, the reliability of systematic failers such as nonconformities inherent in the software could not be improved.

JP 2009-180188 A

  The problem to be solved by the present invention is to provide a plant supervisory control device and a program that improve the reliability of a systematic failer.

  According to the present embodiment, the plant monitoring and control apparatus includes a controller that creates a plurality of virtualization controllers using a virtualization operating system, and a first plant that is provided corresponding to each virtualization controller and is generated by the virtualization controller. A plurality of input / output units that output control signals, a second plant control signal is generated based on the first plant control signals output from the plurality of input / output units, and the second plant control signals are converted into plant control devices. And a signal selection unit for transmission to. Each virtualization controller performs a control calculation using the state signal of the plant equipment, and generates the first plant control signal. Each virtualization controller operates different operating systems.

It is a schematic block diagram of the plant monitoring control system concerning this embodiment. It is a hardware block diagram of the plant monitoring control apparatus which concerns on this embodiment. It is a logic block diagram of the turbine process control part which concerns on this embodiment. It is a logic block diagram of the turbine process control part by a modification. It is a logic block diagram of the turbine process control part by a modification. It is a logic block diagram of the turbine process control part by a modification.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 shows a schematic configuration of a plant monitoring control system according to the present embodiment. As shown in FIG. 1, the plant monitoring control system includes a plant monitoring control device 1 and a plant 2. The plant 2 is provided with plant equipment, various sensors that detect the status of the plant equipment and output a status signal, plant control equipment that controls the plant equipment, and the like. The plant control apparatus 1 receives state signals from various sensors of the plant 2 and outputs plant control signals to control plant control equipment.

  For example, when the plant 2 is a power plant, a boiler, a turbine, a generator, etc. are installed as plant equipment. The various sensors detect, for example, the steam pressure supplied to the turbine, the turbine rotation speed, the output of the generator, and the like as the state signal. The plant monitoring control device 1 generates and outputs, for example, a plant control signal that controls the opening of a valve that adjusts the steam flow rate based on the state signal acquired from the sensor. Below, the example which monitors and controls a turbine process is demonstrated.

  FIG. 2 is a hardware configuration diagram of the plant monitoring control apparatus 1. As illustrated in FIG. 2, the plant monitoring control device 1 includes a controller 10, first input / output units 12 a to 12 c, a signal selection unit 13, and a second input / output unit 14. The second input / output unit 14 is connected to an external communication line, and receives state signals detected by various sensors of the plant 2. The second input / output unit 14 outputs a plant control signal to the plant control device of the plant 2. The first input / output units 12a to 12c are provided corresponding to virtualization controllers 110a to 110c described later.

  The controller 10 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory). The CPU loads the program stored in the ROM into the RAM and executes the program, thereby realizing a turbine process control unit.

  FIG. 3 shows a logical configuration of the turbine process control unit realized by the CPU executing the program. By executing the program, a virtualized operating system (hereinafter referred to as “virtualized OS”) 100 operates on the controller 10, and virtualized controllers 110 a to 110 c are created on the virtualized OS 100.

  The virtualization controller 110a acquires a status signal via the virtualization OS 100 and the first input / output unit 12a. The virtualization controller 110a includes an operating system (hereinafter referred to as “OS”) 112a and a turbine process control middleware 114a, and the turbine process control middleware 114a executes turbine process control application software (application program) 116a on the OS 112a.

  By executing the turbine process control application software 116a, an operation for controlling the turbine process is performed based on the state signal, and a turbine process control signal is generated. For example, the turbine speed indicated by the state signal is compared with the target value of the turbine speed, and a turbine process control signal for adjusting the steam flow rate is generated based on the comparison result. The virtualization controller 110a outputs the generated turbine process control signal to the signal selection unit 13 via the virtualization OS 100 and the first input / output unit 12a.

  The virtualization controller 110b acquires a status signal via the virtualization OS 100 and the first input / output unit 12b. The virtualization controller 110b implements the OS 112b and the turbine process control middleware 114b, and the turbine process control middleware 114b executes the turbine process control application software 116b on the OS 112b.

  By executing the turbine process control application software 116b, calculation for controlling the turbine process is performed based on the state signal, and a turbine process control signal is generated. The virtualization controller 110b outputs the generated turbine process control signal to the signal selection unit 13 via the virtualization OS 100 and the first input / output unit 12b.

  The virtualization controller 110c acquires a status signal via the virtualization OS 100 and the first input / output unit 12c. The virtualization controller 110c implements the OS 112c and the turbine process control middleware 114c, and the turbine process control middleware 114c executes the turbine process control application software 116c on the OS 112c.

  By executing the turbine process control application software 116c, an operation for controlling the turbine process is performed based on the state signal, and a turbine process control signal is generated. The virtualization controller 110c outputs the generated turbine process control signal to the signal selection unit 13 via the virtualization OS 100 and the first input / output unit 12c.

  The OSs 112a to 112c implemented by the virtualization controllers 110a to 110c are different from each other. For example, different ones such as Windows CE (registered trademark), VxWorks (registered trademark), and μITRON are used for the OSs 112a to 112c.

  Similarly, the turbine process control middleware 114a to 114c implemented by the virtualization controllers 110a to 110c are also different from each other.

  Further, the turbine process control application software 116a to 116c are also constructed in different languages in order to execute the same control logic with different middleware.

  Since the same status signal is input to the virtualization controllers 110a to 110c and the same control logic is executed, when the OS 112a to 112c, the turbine process control middleware 114a to 114c, and the turbine process control application software 116a to 116c are normal, Generate and output the same turbine process control signal.

  The signal selection unit 13 acquires three turbine process control signals (first plant control signals) created by the virtualization controllers 110a to 110c via the first input / output units 12a to 12c. And the signal selection part 13 takes the intermediate value or majority vote of three turbine process control signals, produces | generates a turbine process control signal (2nd plant control signal), and the plant of the plant 2 via the 2nd input / output part 14 Output to the control device.

  In the present embodiment, a plurality of virtualization controllers 110a to 110c each having a different OS, middleware, and application software are created. In other words, software is multiplexed (redundant). Therefore, for example, even if there is a nonconformity (for example, a bug such as a mistake in the C language compiler) in the OS, middleware, and application software on the virtualization controller 110a, the other virtualization controllers 110b and 110c A normal turbine process control signal is output. The signal selection unit 13 can output a normal plant control signal to the plant control device based on these turbine process control signals.

  When there is a virtualization controller that outputs an abnormal plant control signal, the signal selection unit 13 notifies the operator that there is a nonconformity with the OS, middleware, and application software of the virtualization controller. May be.

  As described above, in the present embodiment, a plurality of virtualization controllers 110a to 110c are realized on the virtualization OS 100 of one controller, and the OS, middleware, and application software of each virtualization controller 110a to 110c are made different. The software can be made redundant, and the reliability of the systematic failure such as nonconformity inherent in the software can be improved.

  In the first embodiment, an example has been described in which three virtualization controllers 110a to 110c that implement different OSs, middleware, and application software on the virtualization OS 100 are created. However, even two virtualization controllers may be used. It may be four or more. As the number of virtual controllers increases, the reliability of the systematic failer can be improved.

  When two virtualization controllers are created, and there is a nonconformity in one of the application software, and the two turbine process control signals received by the signal selector 13 indicate different controls, the signal selector 13 Of the turbine process control signals, it is preferable to select and output a turbine process control signal that leads to safe operation of the turbine.

  For example, when one of the two turbine process control signals indicates control to increase the steam flow rate by increasing the valve opening, and the other indicates control to decrease the steam flow rate by decreasing the valve opening, the signal selection unit 13 Selects and outputs a turbine process control signal indicating control for reducing the steam flow rate by reducing the opening of the valve. This is because, when there are two virtualization controllers, it is not possible to take a majority decision, and it is impossible to determine which virtualization controller has a normal turbine process control signal.

  In the above embodiment, the virtualization OS 100 operates on one controller 10, and a plurality of virtualization controllers 110a to 110c are created on the virtualization OS. However, a plurality of such controllers 10 may be provided. . FIG. 4 shows an example in which two controllers 10 are provided and a first input / output unit corresponding to each virtualization controller is provided. In the configuration illustrated in FIG. 4, the signal selection unit is arranged in two stages of signal selection units 13_1 and 13-2 and a signal selection unit 13_3.

  The signal selection unit 13_1 acquires three turbine process control signals (first plant control signals) output from the virtualization controllers 110a to 110c of one controller 10, and obtains an intermediate value of the acquired three turbine process control signals. Output to the signal selector 13_3. In addition, the signal selection unit 13_2 acquires three turbine process control signals (third plant control signals) output from the virtualization controllers 110a to 110c of the other controller 10, and is intermediate between the acquired three turbine process control signals. The value or majority decision is taken and output to the signal selector 13_3.

  The signal selection unit 13_3 takes an intermediate value of the values received from the signal selection units 13_1 and 13_2, or selects a value that leads to safe operation of the turbine to generate a turbine process control signal (second plant control signal), It outputs to the plant control equipment of the plant 2 through the second input / output unit 14 (not shown). By providing a plurality of controllers 10 in this way, it is possible to improve the reliability against random failure such as hardware failure.

  In the above embodiment, the signal selection unit 13 configured by hardware takes an intermediate value or majority vote of the turbine process control signals output from the virtualization controllers 110a to 110c, and transmits the turbine process control signal to the plant control device. However, as shown in FIG. 5, a virtualization controller 110 d may be further created, the virtualization controller 110 d may perform processing of the signal selection unit 13, and the signal selection unit 13 may be omitted. In this case, since the turbine process control signal created by the virtualization controllers 110a to 110c is not output to the outside of the controller 10, one first input / output unit (first input / output unit 12d) may be provided.

  The virtualization controller 110d implements the OS 112d and middleware 114d, and the middleware 114d executes the signal selection application software 116d on the OS 112d.

  By executing the signal selection application software 116d, the turbine process control signal (first plant control signal) created by the virtualization controllers 110a to 110c is acquired, and the intermediate value or majority decision is taken, and the turbine process control signal ( A second plant control signal) is generated. The virtualization controller 110d outputs the generated turbine process control signal to the second input / output unit 14 via the first input / output unit 12d, and the second input / output unit 14 outputs the turbine process control signal to the plant 2 plant 2. Output to the control device.

  A plurality of controllers 10 in which the virtualization controllers 110a to 110d are created may be provided. FIG. 6 shows an example in which three controllers 10 are provided. In the configuration shown in FIG. 6, three first input / output units 12 d are provided corresponding to the number of controllers 10, and the turbine process control signal generated by the virtualization controller 110 d of each controller 10 corresponds. It is output via the first input / output unit 12d. In addition, a signal selection unit 13 is provided, and the signal selection unit 13 acquires three turbine process control signals generated by the virtualization controller 110d of the three controllers 10, and takes an intermediate value or majority vote of these to obtain a turbine process. A control signal is generated and output to the plant control device of the plant 2 via the second input / output unit 14 (not shown).

  By adopting such a configuration, it is possible to improve the reliability of the systematic and random failers.

  In the above-described embodiment, an example in which the same state signal is input to the virtualization controllers 110a to 110c has been described. However, the state of the plant equipment is detected by a plurality of sensors, and the state signal detected by each sensor is associated with virtualization. You may give to the controller 110. For example, the turbine rotation speed is detected by the first to third sensors, the state signal output from the first sensor is input to the virtualization controller 110a, and the state signal output from the second sensor is input to the virtualization controller 110b. Then, the state signal output from the third sensor may be input to the virtualization controller 110c. Or each virtualization controller 110a-110c may acquire the state signal output from the 1st-3rd sensor, and may produce | generate a plant control signal based on these average values or intermediate values.

  According to at least one embodiment described above, the reliability with respect to the systematic failer can be improved.

  The program described in the above-described embodiment may be stored in a recording medium such as a flexible disk or a CD-ROM, and read and executed by a computer. The recording medium is not limited to a removable medium such as a magnetic disk or an optical disk, but may be a fixed recording medium such as a hard disk device or a memory. In addition, this program may be distributed via a communication line (including wireless communication) such as the Internet. Further, the program may be distributed in a state where the program is encrypted, modulated or compressed, and stored in a recording medium via a wired line such as the Internet or a wireless line.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 Plant monitoring and control apparatus 2 Plant 10 Controller 11 Memory | storage parts 12a-12c 1st input / output part 13 Signal selection part 14 2nd input / output part 100 Virtualization operating system 110a-110c Virtualization controller 112a-112c Operating system 114a-114c Turbine Process control middleware 116a-116c Turbine process control application software

Claims (6)

A controller that creates a plurality of virtualization controllers with a virtualization operating system;
A plurality of input / output units that are provided corresponding to each virtualization controller and that output a first plant control signal generated by the virtualization controller;
A signal selection unit that generates a second plant control signal based on the first plant control signal output from the plurality of input / output units, and transmits the second plant control signal to a plant control device;
With
Each virtualization controller performs a control calculation using the state signal of the plant equipment, generates the first plant control signal,
A plant monitoring and control apparatus characterized in that different operating systems operate in each virtualization controller. The middleware executes application software on the operating system of each virtualization controller to generate the first plant control signal,
The plant monitoring control apparatus according to claim 1, wherein an operating system, middleware, and application software of each virtualization controller are different from each other.   The said signal selection part takes the intermediate value or majority vote of the said 1st plant control signal produced | generated by each virtualization controller, and produces | generates the said 2nd plant control signal, The Claim 1 or 2 characterized by the above-mentioned. Plant monitoring and control device. A second controller for creating a plurality of second virtualization controllers by the virtualization operating system;
Each second virtualization controller performs a control operation using the state signal, generates a third plant control signal,
4. The plant monitoring control according to claim 1, wherein the signal selection unit generates the second plant control signal based on the first plant control signal and the third plant control signal. 5. apparatus. A controller that creates a plurality of first virtualization controllers and second virtualization controllers by a virtualization operating system;
Each first virtualization controller performs a control calculation using the state signal of the plant equipment, generates a first plant control signal,
The second virtualization controller generates a second plant control signal based on the first plant control signal generated by each first virtualization controller, and transmits the second plant control signal to a plant control device,
A plant monitoring control device, wherein different operating systems operate in each first virtualization controller. Creating a plurality of virtualization controllers that operate different operating systems with a virtualized operating system;
Each virtualization controller receives a plant equipment status signal via a plurality of input / output units provided corresponding to each virtualization controller;
Each virtualization controller performs a control operation using the state signal to generate a first plant control signal;
Outputting the first plant control signal via the plurality of input / output units;
Taking an intermediate value or majority decision of the first plant control signal output from the plurality of input / output units to generate a second plant control signal;
Transmitting the second plant control signal to a plant control device;
A program that causes a computer to execute.

Images