JP2015203649A - Operation switching device, operation switching method, and plant control system for emergency time - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an operation switching device capable of switching between the emergency operation function and operation training function of a plant.SOLUTION: According to one embodiment, the operation switching device includes a processing unit for executing a process needed for the operation of a plant. The operation switching device further includes a first and a second signal transfer unit for receiving a first signal indicating whether an operation training device for the operation training of the plant is in an operating state, a second signal indicating whether an operation for permitting the operation training of the plant is inputted, and a third signal indicating whether the plant is in an accident state. Further, the first signal transfer unit transfers a signal from the processing unit to the operation training device or an apparatus inside the plant in accordance with at least one of the first to third signals. Further, the second signal transfer unit transfers a signal from the operation training device or the apparatus inside the plant to the processing unit in accordance with at least one of the first to third signals.

Description

  Embodiments described herein relate generally to an operation switching device, an operation switching method, and an emergency plant control system.

  Nuclear power plant operation training is required to be performed so as not to impede plant operation. Therefore, in the nuclear power plant, a building dedicated to training is provided separately from the building in which the central control room for normal plant operation is installed, and equipment having the same functions as the equipment installed in the central control room is installed in this building. . And the operation training of the nuclear power plant is carried out by using this equipment.

  There has also been proposed a plant operation training system in which an actual plant control panel for plant operation and its simulator are connected online, and a state change according to operation information of the actual plant control panel is simulated in the simulator.

JP-A-6-231109

  The new regulatory standards for nuclear power plants (major accident countermeasures) require the establishment of a control room that can be operated in an emergency as a facility for dealing with specific serious accidents as a countermeasure against severe accidents and countermeasures against terrorism. FIG. 7 shows a general nuclear power plant control mechanism taking this new regulatory standard into consideration.

  FIG. 7 is a schematic diagram illustrating an example of a general nuclear power plant control mechanism.

  The control mechanism shown in FIG. 7 is a mechanism for controlling the reactor containment vessel 100 and the like in the nuclear power plant, and a plant control system 111 installed in the central control room 110 and an emergency installed in the emergency control room 120. An hour plant control system 121. The plant control system 111 is connected to a field device 112 and a detection device 113 for normal operation of the plant. On the other hand, the emergency plant control system 121 is connected to an on-site device 122 and a detection device 123 for plant emergency.

  During normal operation, the plant control system 111 in the central control room 110 monitors the plant state detected by the detection device 113 for normal operation, and operates the on-site device 112 for normal operation to operate the plant. .

  On the other hand, assuming that the functions of the plant control system 111, the field device 112 for normal operation, and the detection device 113 for normal operation are lost due to an emergency situation, independently of the facilities for normal operation, An emergency plant control system 121 that can be operated in an emergency, a field device 122 for emergency, and a detection device 123 for emergency are installed.

  In an emergency, the emergency plant control system 121 in the emergency control room 120 monitors the plant state detected by the emergency detection device 123 and operates the emergency field device 122 to continue the operation of the plant. carry out.

  Since the emergency plant control system 121 is operated only in an emergency and there are few operational opportunities, it is necessary to familiarize the responder with normal training. In addition, since responders are required to make accurate decision-making and response operations under tight circumstances, it is necessary to actually train the equipment in the emergency control room 120 in a state close to an emergency. .

  In addition, since the emergency plant control system 121 is not used during normal operation, it is reasonable to use it for training. However, when operating the emergency plant control system 121 for training, operating the emergency field device 122 may affect the actual plant operation, and it is necessary to avoid this.

  Accordingly, an object of the present invention is to provide an operation switching device, an operation switching method, and an emergency plant control system capable of switching between an emergency operation function and an operation training function of a plant.

  According to one embodiment, the operation switching device includes a processing unit that performs processing for operating the plant. Further, the operation switching device includes a first signal indicating whether or not the operation training device for operation training of the plant is in an operating state, and a second signal indicating whether or not a permission operation for operation training of the plant is input. And a first signal transfer unit that receives a third signal indicating whether or not the plant is in an accident state. Furthermore, the first signal transfer unit transfers a signal from the processing unit to the operation training apparatus or the equipment in the plant according to at least one of the first to third signals. Furthermore, the second signal transfer unit transfers a signal from the operation training device or the equipment in the plant to the processing unit in accordance with at least one of the first to third signals.

  According to another embodiment, the operation switching method includes a first signal indicating whether or not an operation training apparatus for plant operation training is in an operating state, and whether or not an operation for permitting operation training of the plant is input. Receiving a second signal indicating whether or not the plant is in an accident state. Furthermore, the method transfers a signal from a processing unit that performs processing for operating the plant to the operation training apparatus or the equipment in the plant according to at least one of the first to third signals. Including that. Further, the method includes transferring a signal from the operation training apparatus or the equipment in the plant to the processing unit in response to at least one of the first to third signals.

  According to another embodiment, an emergency plant control system includes a control device that controls a plant, an operation display device that functions as a terminal for the control device, and an operation training device for operation training of the plant. Is provided. Furthermore, the control device or the operation display device includes a processing unit that performs processing for operating the plant, a first signal that indicates whether the operation training device is in an operating state, and permission for operation training of the plant. First and second signal transfer units that receive a second signal indicating whether or not an operation has been input and a third signal indicating whether or not the plant is in an accident state. Furthermore, the first signal transfer unit transfers a signal from the processing unit to the operation training apparatus or the equipment in the plant according to at least one of the first to third signals. Furthermore, the second signal transfer unit transfers a signal from the operation training device or the equipment in the plant to the processing unit in accordance with at least one of the first to third signals.

  According to the present invention, it is possible to provide an operation switching device, an operation switching method, and an emergency plant control system capable of switching between an emergency operation function and an operation training function of a plant.

It is a figure which shows the structure of the emergency plant control system of 1st Embodiment. It is a figure which shows the structure of the emergency plant control system of 2nd Embodiment. It is a figure which shows the structure of the emergency plant control system of 3rd Embodiment. It is a figure which shows the structure of the emergency plant control system of 4th Embodiment. It is a figure which shows the structure of the emergency plant control system of 5th Embodiment. It is a figure which shows the structure of the emergency plant control system of 6th Embodiment. It is the schematic which shows the example of the control mechanism of a general nuclear power plant.

  Embodiments of the present invention will be described below with reference to the drawings. 1 to 6, the same reference numerals are given to the same or similar components as those in FIG. 7, and descriptions that overlap with those in FIG. 7 are omitted.

(First embodiment)
FIG. 1 is a diagram illustrating a configuration of an emergency plant control system 121 according to the first embodiment. The emergency plant control system 121 of the present embodiment includes an operation display device 1, a control device 2, an operation training device 3, and a control network 5.

  The operation display device 1 functions as a terminal for the control device 2. The operation display device 1 includes a display device for presenting plant information to an operator, and an operation device for the operator to operate a keyboard, a mouse, a switch, and the like. In this embodiment, the operator can perform operation training using the operation display device 1 during plant operation training, and can perform emergency operation using the operation display device 1 during plant emergency.

  The control device 2 is a device that controls a plant, and is connected to an emergency field device 122 and a detection device 123. The control device 2 outputs a command signal for controlling the field device 122 including a pump and a valve based on the operation command from the operation display device 1 and the plant state information from the detection device 123. The control device 2 of the present embodiment performs switching between plant operation training and emergency operation in accordance with at least one of three types of signals S1, S2, and S3 described later. The control device 2 of the present embodiment is an example of an operation switching device. The field device 122 and the detection device 123 are examples of devices in the plant.

  The operation training apparatus 3 is an apparatus for plant operation training, and has a function of simulating the operation of the plant.

  The control network 5 is a communication network in the emergency plant control system 121, and is connected to the operation display device 1, the control device 2, and the operation training device 3. The control network 5 is used, for example, for transmission of an operation command signal from the operation display device 1 to the control device 2 and transmission of a plant state signal from the control device 2 to the operation display device 1.

  Next, the configuration of the operation display device 1, the control device 2, and the driving training device 3 will be described in detail.

[Operation display device 1]
The operation display device 1 includes an operation display unit 11, an operation display logic unit 12, a first buffer 13, and a second buffer 14.

  The operation display unit 11 is a block including the display device and the operation device described above. The operation display logic unit 12 is a block that performs various types of information processing. For example, the operation display logic unit 12 generates a command signal based on an operation on the operation display unit 11 and generates a display signal of the operation display unit 11 based on plant state information. The operation display logic unit 12 of the present embodiment performs various display processes and operation processes for operation training and emergency operation during plant operation training and emergency.

  The first buffer 13 is used for storing a command signal and the like transmitted from the operation display logic unit 12 to the control device 2. The second buffer 14 is used for storing the plant state signal received from the control device 2 and providing it to the operation display logic unit 12.

[Control device 2]
The control device 2 includes a control logic unit 21, a first buffer 22, a second buffer 23, a third buffer 24, a fourth buffer 25, a first signal transfer unit 26, and a second signal transfer unit. 27.

  The control logic unit 21 is a block that performs various types of information processing, and has a signal transmission / reception function via the control network 5 and an arithmetic function for plant control. The control logic unit 21 of this embodiment is an example of a processing unit that performs processing for operating a plant. The control logic unit 21 of the present embodiment outputs a command signal to be output to the field device 122 or the operation training device 3 in response to an operation command from the operation display device 1 during plant operation training and in an emergency. The plant state signal or the plant simulation state signal is output to the operation display device 1 according to the plant state signal from the detection device 123 or the plant simulation state signal from the operation training device 3.

  The first buffer 22 is used for storing a command signal and the like transmitted from the control logic unit 21 to the field device 122. The second buffer 23 is used for storing the plant state signal received from the detection device 123 and providing it to the control logic unit 21. The third buffer 24 is used to store a command signal or the like transmitted from the control logic unit 21 to the driving training device 3. The fourth buffer 25 is used to provide the control logic unit 21 with a plant simulation state signal received from the operation training apparatus 3.

  The first and second signal transfer units 26 and 27 include a function activation signal S1 that is an example of the first signal, an operator permission signal S2 that is an example of the second signal, and a plant accident that is an example of the third signal. The signal S3 is received. The first signal transfer unit 26 transfers various signals from the control logic unit 21 to the first and third buffers 22 and 24, and the second signal transfer unit 27 includes the second and fourth buffers. Various signals are transferred from 23 and 25 to the control logic unit 21. Details of the operations of the first and second signal transfer units 26 and 27 will be described later.

[Driving training device 3]
The driving training device 3 includes an interface unit 31, a plant model unit 32, and a functional life / death detector 33.

  The interface unit 31 performs signal transmission / reception with the control network 5. The plant model unit 32 simulates the operation of the plant. Specifically, the plant model unit 32 simulates the operations of the field device 122 and the detection device 123. The function alive detector 33 detects the function alive of the driving training device 3, and outputs to the outside a function activating signal S1 that is established when the driving training device 3 is in a normal function state.

  Next, the function activation signal S1, the operator permission signal S2, and the plant accident signal S3 will be described in detail.

[Functional kill signal S1]
The function kill signal S1 is a signal indicating whether or not the driving training device 3 is in an operating state. The functional activation signal S1 of the present embodiment is output from the functional activation detector 33 and input to the first and second signal transfer units 26 and 27 via the control network 5. For example, the function activation signal S1 is set to high when the driving training device 3 is in an operating state (starting up), and is kept low when the driving training device 3 is in a non-operating state (stopping).

  Note that the function activation signal S <b> 1 may be output from a mechanism other than the driving training device 3, or may be exchanged via a communication mechanism other than the control network 5.

[Operator permission signal S2]
The operator permission signal S2 is a signal indicating whether or not a permission operation for plant operation training has been input. The operator permission signal S <b> 2 of the present embodiment is output from the operation display device 1 and is input to the first and second signal transfer units 26 and 27 via the control network 5. The operation display device 1 of the present embodiment is provided with hardware-type start and end switches for use when an operator starts and ends driving training. The operator permission signal S2 is switched to high when the start switch is used, for example, and is switched to low when the end switch is used. Note that the start and end switches may be realized by software by displaying the screen of the operation display device 1.

  The operator permission signal S <b> 2 may be output from a mechanism other than the operation display device 1, or may be transmitted / received via a communication mechanism other than the control network 5. The operator permission signal S2 may be output from the plant control system 111 in the central control room 110, for example.

[Plant accident signal S3]
The plant accident signal S3 is a signal indicating whether or not the plant is in an accident state. The plant accident signal S3 of the present embodiment is output from the plant control system 111 in the central control room 110, and is input to the first and second signal transfer units 26 and 27 via the control network 5. In the present embodiment, the plant is in an accident state when at least one of the nuclear reactor emergency stop signal, the engineering safety equipment activation signal, and the in-house power loss signal that is sent from the central control room 110 is established. It is recognized. The plant accident signal S3 is, for example, set high when the plant is in an accident state, and kept low when the plant is in a non-accident state.

  The plant accident signal S3 may be output from a mechanism other than the plant control system 111 in the central control room 110, or may be transmitted / received via a communication mechanism other than the control network 5.

  Hereinafter, when the function activation signal S1 indicates that the driving training device 3 is in the operating state, it is expressed that the function activation signal S1 is established, and the function activation signal S1 indicates that the driving training device 3 is not in the operation state. In this case, it is expressed that the function kill signal S1 is not established.

  Similarly, when the operator permission signal S2 indicates that the permission operation has been input, it is expressed that the driver permission signal S2 is established, and the operator permission signal S2 indicates that the permission operation has not been input. In this case, it is expressed that the operator permission signal S2 is not established. The operator permission signal S2 of the present embodiment is established when the start switch is used, and is not established when the end switch is used.

  Similarly, when the plant accident signal S3 indicates that the plant is in an accident state, the plant accident signal S3 is expressed as being established, and when the plant accident signal S3 indicates that the plant is not in an accident state, the plant accident signal is displayed. It expresses that S3 is not materialized.

(1) Operation of First Signal Transfer Unit 26 Next, the operation of the first signal transfer unit 26 will be described in detail.

  The first signal transfer unit 26 sends a command signal from the control logic unit 21 to the operation training device 3 or the field device 122 according to at least one of the function activation signal S1, the operator permission signal S2, and the plant accident signal S3. Forward to.

  Specifically, the first signal transfer unit 26 determines that the function activation signal S1 is established, the operator permission signal S2 is established, and the plant accident signal S3 is not established. Is transferred to the driving training apparatus 3 via the third buffer 24. As a result, the command signal from the control logic unit 21 is transferred to the plant model unit 32 via the interface unit 31, and operation training can be performed. In this case, the first signal transfer unit 26 further stops the update of the first buffer 22 so that the command signal is not output from the first buffer 22 to the field device 122. The plant model unit 32 simulates the operation of the plant according to the command signal, and transfers a plant simulation state signal similar to the plant state signal to the control device 2 via the interface unit 31. The plant simulation state signal is stored in the fourth buffer 25.

  On the other hand, when the function activation signal S1 is not established, the operator permission signal S2 is not established, or the plant accident signal S3 is established, the first signal transfer unit 26 receives the command signal from the control logic unit 21 in the first buffer. 22 to the field device 122. As a result, the operation command from the operation display device 1 is actually reflected in the plant operation. This corresponds to a change in the state of the emergency plant control system 121 from a driving training state to a non-driving training state such as an emergency driving state.

(2) Operation of Second Signal Transfer Unit 27 Next, the operation of the second signal transfer unit 27 will be described in detail.

  The second signal transfer unit 27 generates a plant simulation state signal from the operation training device 3 or a plant from the detection device 123 according to at least one of the function activation signal S1, the operator permission signal S2, and the plant accident signal S3. The status signal is transferred to the control logic unit 21.

  Specifically, the second signal transfer unit 27 determines that the function training signal S1 is established, the operator permission signal S2 is established, and the plant accident signal S3 is not established. The plant simulation state signal is transferred from the fourth buffer 25 to the control logic unit 21. As a result, a simulation result by the plant model unit 32 is provided from the control device 2 to the operation display device 1, and operation training can be performed. In this case, the second signal transfer unit 27 further stops updating the second buffer 23 so that the plant state signal from the detection device 123 is not transferred to the control logic unit 21. Further, the operation display logic unit 12 displays the simulation result by the plant model unit 32 on the operation display unit 11 based on the plant simulation state signal, and provides operation training information to the operator.

  On the other hand, when the function kill signal S1 is not established, the operator permission signal S2 is not established, or the plant accident signal S3 is established, the second signal transfer unit 27 receives the plant state signal from the detection device 123 in the second buffer. 23 to the control logic unit 21. As a result, actual plant state information is provided to the operation display device 1. This corresponds to a change in the state of the emergency plant control system 121 from a driving training state to a non-driving training state such as an emergency driving state.

  As described above, the control device 2 according to the present embodiment includes the first signal transfer unit 26 that transfers the signal from the control logic unit 21 to the driving training device 3 or the field device 122, and the driving training device 3 or the detection device 123. And a second signal transfer unit 27 for transferring the signal from the control logic unit 21 to the control logic unit 21. Therefore, according to this embodiment, it becomes possible to switch between the emergency operation function and the operation training function of the plant by the emergency plant control system 121.

  Moreover, since the driving training of this embodiment is performed using the driving training apparatus 3 instead of the field device 122 and the detection device 123, the driving training can be performed while avoiding the influence on the actual plant operation. .

  In addition, the first and second signal transfer units 26 and 27 of the present embodiment, when the AND condition of establishment of the function activation signal S1, establishment of the operator permission signal S2, and establishment of the plant accident signal S3 is established. Works for driving training. In addition, the first and second signal transfer units 26 and 27 of the present embodiment, when the OR condition that the function activation signal S1 is not established, the operator permission signal S2 is not established, or the plant accident signal S3 is established is established. Works for emergency use. Therefore, the emergency plant control system 121 according to the present embodiment shifts from the operation training state to the emergency operation state by switching only one of the three signals S1, S2, and S3. It is possible to shift from the driving training state to the emergency driving state.

  Note that the emergency plant control system 121 of the present embodiment may include a plurality of operation display devices 1 and a plurality of control devices 2. In this case, the number of the operation training apparatuses 3 of this emergency plant control system 121 does not need to be plural, and may be one.

(Second Embodiment)
FIG. 2 is a diagram illustrating a configuration of the emergency plant control system 121 according to the second embodiment. In the present embodiment, the same or similar components as those in the first embodiment are denoted by the same reference numerals, and the description overlapping the description of the first embodiment is omitted. The same applies to third to sixth embodiments described later.

  In the first embodiment, the control device 2 performs switching between the emergency operation function and the operation training function of the plant. On the other hand, in this embodiment, the operation display device 1 performs switching between the emergency operation function and the operation training function of the plant.

  Therefore, the operation display device 1 of the present embodiment includes the third buffer 15, the fourth buffer 16, and the first buffer in addition to the operation display unit 11, the operation display logic unit 12, the first buffer 13, and the second buffer 14. The signal transfer unit 17 and the second signal transfer unit 18 are provided. The operation display device 1 of the present embodiment is an example of an operation switching device, and the operation display logic unit 12 of the present embodiment is an example of a processing unit that performs a process for operating a plant.

  Furthermore, the driving training device 3 of the present embodiment includes a control model unit 34 in addition to the interface unit 31, the plant model unit 32, and the functional life / death detection unit 33. The control model unit 34 simulates the operation of the control logic unit 21 in the control device 2.

  The third buffer 15, the fourth buffer 16, the first signal transfer unit 17, and the second signal transfer unit 18 of the present embodiment are respectively the third buffer 24, the fourth buffer 25, and the first buffer of the first embodiment. The operation is the same as the signal transfer unit 26 and the second signal transfer unit 27. Hereinafter, details of the operation of these blocks of the present embodiment will be described.

  The third buffer 15 is used to store a command signal or the like transmitted from the operation display logic unit 12 to the driving training device 3. The fourth buffer 16 is used to provide the operation display logic unit 12 with the plant simulation state signal received from the operation training apparatus 3.

  The first and second signal transfer units 17 and 18 receive the function activation signal S1, the operator permission signal S2, and the plant accident signal S3. The functional activation signal S1 of the present embodiment is input from the functional activation detection unit 33. The operator permission signal S <b> 2 of the present embodiment is exchanged inside the operation display device 1. The plant accident signal S3 of this embodiment is input from the plant control system 111 in the central control room 110. The first signal transfer unit 17 transfers various signals from the operation display logic unit 12 to the first and third buffers 13 and 15, and the second signal transfer unit 18 includes the second and fourth buffers. Various signals are transferred from the buffers 14 and 16 to the operation display logic unit 12.

(1) Operation of First Signal Transfer Unit 17 Next, the operation of the first signal transfer unit 17 will be described in detail.

  The first signal transfer unit 17 sends a command signal from the operation display logic unit 12 to the operation training device 3 or the control device in accordance with at least one of the function activation signal S1, the operator permission signal S2, and the plant accident signal S3. Forward to 2. In the latter case, the command signal from the operation display logic unit 12 is transferred to the field device 122 via the control device 2.

  Specifically, the first signal transfer unit 17 operates the operation display logic unit 12 when the function activation signal S1 is established, the operator permission signal S2 is established, and the plant accident signal S3 is not established. Is transferred to the driving training apparatus 3 via the third buffer 15. As a result, the command signal from the operation display logic unit 12 is transferred to the plant model unit 32 and the control model unit 34 via the interface unit 31, and operation training can be performed. In this case, the first signal transfer unit 17 further stops the update of the first buffer 13 so that the command signal is not output from the first buffer 13 to the control device 2. Further, the control model unit 34 simulates the operation of the control logic unit 21 according to the command signal, and outputs the command signal to the plant model unit 32. Next, the plant model unit 32 simulates the operation of the plant according to the command signal, and outputs a plant simulation state signal similar to the plant state signal to the control model unit 34. Next, the control model unit 34 transfers the plant simulation state signal to the operation display device 1 via the interface unit 31. The plant simulation state signal is stored in the fourth buffer 16.

  On the other hand, when the function activation signal S1 is not established, the operator permission signal S2 is not established, or the plant accident signal S3 is established, the first signal transfer unit 17 receives the command signal from the operation display logic unit 12 as the first signal. The data is transferred to the control device 2 via the buffer 13. As a result, the operation command from the operation display device 1 is actually reflected in the plant operation. This corresponds to a change in the state of the emergency plant control system 121 from a driving training state to a non-driving training state such as an emergency driving state.

(2) Operation of Second Signal Transfer Unit 18 Next, the operation of the second signal transfer unit 18 will be described in detail.

  The second signal transfer unit 18 generates a plant simulation state signal from the operation training device 3 or a plant from the control device 2 according to at least one of the function activation signal S1, the operator permission signal S2, and the plant accident signal S3. The status signal is transferred to the operation display logic unit 12. In the latter case, the plant state signal from the control device 2 is transferred from the detection device 123 via the control device 2.

  Specifically, the second signal transfer unit 18 determines that the function training signal S1 is established, the operator permission signal S2 is established, and the plant accident signal S3 is not established. The plant simulation state signal is transferred from the fourth buffer 16 to the operation display logic unit 12. As a result, the simulation results by the plant model unit 32 and the control model unit 34 are provided to the operation display logic unit 12, and operation training can be performed. In this case, the second signal transfer unit 18 further stops updating the second buffer 14 so that the plant state signal from the control device 2 is not transferred to the operation display logic unit 12. The operation display logic unit 12 displays the simulation results of the plant model unit 32 and the control model unit 34 on the operation display unit 11 based on the plant simulation state signal, and provides operation training information to the operator.

  On the other hand, when the function activation signal S1 is not established, the operator permission signal S2 is not established, or the plant accident signal S3 is established, the second signal transfer unit 18 receives the plant state signal from the control device 2 in the second buffer. 14 to the operation display logic unit 12. As a result, actual plant state information is provided to the operation display logic unit 12. This corresponds to a change in the state of the emergency plant control system 121 from a driving training state to a non-driving training state such as an emergency driving state.

  As described above, the operation display device 1 of the present embodiment includes the first signal transfer unit 17 that transfers the signal from the operation display logic unit 12 to the driving training device 3 or the control device 2 (the field device 122), and the driving. A second signal transfer unit 18 that transfers a signal from the training device 3 or the control device 2 (detection device 123) to the operation display logic unit 12 is provided. Therefore, according to this embodiment, it becomes possible to switch between the emergency operation function and the operation training function of the plant by the emergency plant control system 121 as in the first embodiment.

  Moreover, in this embodiment, since driving training can be performed without using the control apparatus 2, it becomes possible to perform the inspection maintenance work of the control apparatus 2 during driving training.

(Third embodiment)
FIG. 3 is a diagram illustrating a configuration of the emergency plant control system 121 according to the third embodiment.

  The emergency plant control system 121 of this embodiment includes a training network 6 in addition to the operation display device 1, the control device 2, the operation training device 3, and the control network 5 having the same configuration as in the first embodiment. The control network 5 and the training network 6 of this embodiment are examples of the first and second networks, respectively.

  The control network 5 of the first embodiment is used for transmission and reception of signals during plant emergency and operation training. On the other hand, the control network 5 of the present embodiment is used for signal transmission / reception only during plant emergency, and the training network 6 of the present embodiment is used for signal transmission / reception only during plant operation training.

  The control network 5 is connected to the operation display device 1 and the control device 2, but is not connected to the driving training device 3. The control network 5 is used for transferring a command signal from the operation display device 1 to the control device 2 and transferring a plant state signal from the control device 2 to the operation display device 1 in an emergency.

  The training network 6 is connected to the operation display device 1, the control device 2, and the driving training device 3. The training network 6 transfers a command signal from the operation display device 1 to the control device 2, transfers a command signal from the control device 2 to the driving training device 3, and transmits the command signal from the driving training device 3 to the control device 2 during driving training. It is used for transferring the plant simulation state signal, transferring the plant simulation state signal from the control device 2 to the operation display device 1, and the like. Further, the training network 6 is also used for sending / receiving the function activation signal S1, the operator permission signal S2, and the plant accident signal S3.

  As described above, the emergency plant control system 121 of this embodiment includes the training network 6 in addition to the control network 5. Therefore, according to the present embodiment, it is possible to ensure independence between the emergency control network 5 and the training network 6 for driving training. Moreover, according to this embodiment, it becomes possible to perform the inspection maintenance work of the control network 5 and its connection apparatus during driving training.

(Fourth embodiment)
FIG. 4 is a diagram illustrating a configuration of the emergency plant control system 121 according to the fourth embodiment.

  The emergency plant control system 121 of this embodiment includes a training network 6 in addition to the operation display device 1, the control device 2, the operation training device 3, and the control network 5 having the same configuration as that of the second embodiment. The control network 5 and the training network 6 of this embodiment are examples of the first and second networks, respectively.

  The control network 5 of the second embodiment is used for signal transmission and reception during plant emergency and operation training. On the other hand, the control network 5 of the present embodiment is used for signal transmission / reception only during plant emergency, and the training network 6 of the present embodiment is used for signal transmission / reception only during plant operation training.

  The control network 5 is connected to the operation display device 1 and the control device 2, but is not connected to the driving training device 3. The control network 5 is used for transferring a command signal from the operation display device 1 to the control device 2 and transferring a plant state signal from the control device 2 to the operation display device 1 in an emergency.

  The training network 6 is connected to the operation display device 1 and the driving training device 3, but is not connected to the control device 2. The training network 6 is used for transferring a command signal from the operation display device 1 to the operation training device 3 and transferring a plant simulation state signal from the operation training device 3 to the operation display device 1 during operation training. Further, the training network 6 is also used for sending / receiving the function activation signal S1 and the plant accident signal S3.

  As described above, the emergency plant control system 121 of this embodiment includes the training network 6 in addition to the control network 5. Therefore, according to the present embodiment, it is possible to ensure independence between the emergency control network 5 and the training network 6 for driving training. Moreover, according to this embodiment, it becomes possible to perform the inspection maintenance work of the control network 5 and its connection apparatus during driving training.

(Fifth embodiment)
FIG. 5 is a diagram illustrating a configuration of the emergency plant control system 121 according to the fifth embodiment.

  The emergency plant control system 121 of the present embodiment includes a network switching device 4 in addition to the operation display device 1, the control device 2, the operation training device 3, the control network 5, and the training network 6 having the same configuration as in the third embodiment. It has.

  The network switching device 4 is connected to the control network 5 and the training network 6 and controls the activation of the power supply for the control network 5 and the training network 6. The network switching device 4 includes a changeover switch 41, a first switching contact 42, a second switching contact 43, a first power supply device 44, and a second power supply device 45.

  The first power supply device 44 is a device for supplying power to the control network 5. The first switching contact 42 is provided on a power supply line between the first power supply device 44 and the control network 5. In the present embodiment, the opening and closing of the first switching contact 42 can be switched between turning on and off power from the first power supply device 44 to the control network 5.

  The second power supply device 45 is a device for supplying power to the training network 6. The second switching contact 43 is provided on a power supply line between the second power supply device 45 and the training network 6. In the present embodiment, the opening and closing of the second switching contact 43 can be switched between turning on and off the power from the second power supply device 45 to the training network 6.

  The first and second switching contacts 42 and 43 can be opened and closed by operating the switch 41. The network switching device 4 of the present embodiment is configured so that the first and second switching contacts 42 and 43 are not simultaneously closed. The changeover switch 41 of the present embodiment sets the power supply to one of the control network 5 and the training network 6 by setting one of the first and second switching contacts 42 and 43 to a closed state and the other to an open state. The power supply to the other can be switched off.

  When driving training is performed in the present embodiment, the network switching device 4 sets the power supply to the control network 5 to OFF and the power supply to the training network 6 to ON. As a result, the transmission function of the control network 5 is stopped. Therefore, even when a signal is erroneously output from the operation display device 1 or the control device 2 to the control network 5 during driving training, signal transmission by the control network 5 is not performed. Therefore, according to this embodiment, even when a signal is erroneously output to the control network 5 during operation training, it is possible to prevent the erroneously output signal from affecting the actual plant.

  Note that the changeover switch 41 of the present embodiment may be operated using, for example, an operation unit provided in the network switching device 4 or may be operated by remote operation from the operation display device 1 or the like.

(Sixth embodiment)
FIG. 6 is a diagram illustrating a configuration of the emergency plant control system 121 according to the sixth embodiment.

  The emergency plant control system 121 of the present embodiment includes a network switching device 4 in addition to the operation display device 1, the control device 2, the operation training device 3, the control network 5, and the training network 6 having the same configuration as in the fourth embodiment. It has.

  The network switching device 4 of this embodiment has the same configuration as the network switching device 4 of the fifth embodiment. Therefore, the changeover switch 41 of the present embodiment sets the power to one of the control network 5 and the training network 6 by setting one of the first and second switching contacts 42 and 43 to the closed state and the other to the open state. The supply can be switched on and the power supply to the other can be switched off.

  According to the present embodiment, similarly to the fifth embodiment, even when a signal is erroneously output to the control network 5 during operation training, the influence on the actual plant due to the erroneously output signal can be prevented. .

  Although several embodiments have been described above, these embodiments are presented as examples only and are not intended to limit the scope of the invention. The novel apparatus, methods, and systems described herein can be implemented in a variety of other forms. Various omissions, substitutions, and changes can be made to the forms of the apparatus, method, and system described in the present specification without departing from the spirit of the invention. The appended claims and their equivalents are intended to include such forms and modifications as fall within the scope and spirit of the invention.

1: operation display device, 2: control device, 3: driving training device,
4: network switching device, 5: control network, 6: training network,
11: Operation display unit, 12: Operation display logic unit, 13: First buffer,
14: second buffer, 15: third buffer, 16: fourth buffer,
17: 1st signal transfer part, 18: 2nd signal transfer part,
21: Control logic unit, 22: First buffer,
23: second buffer, 24: third buffer, 25: fourth buffer,
26: first signal transfer unit, 27: second signal transfer unit,
31: Interface part, 32: Plant model part,
33: Functional killing detection unit, 34: Control model unit,
41: changeover switch, 42: first changeover contact, 43: second changeover contact,
44: first power supply device, 45: second power supply device, 100: reactor containment vessel,
110: Central control room, 111: Plant control system,
112: Field equipment for normal operation, 113: Detection equipment for normal operation,
120: Emergency control room, 121: Emergency plant control system,
122: field device for emergency, 123: detection device for emergency

Claims (12)

A processing unit for performing processing for operating the plant;
A first signal indicating whether or not the operation training apparatus for operation training of the plant is in an operating state, a second signal indicating whether or not an operation for permitting operation training of the plant is input, and whether the plant is in an accident state First and second signal transfer units for receiving a third signal indicating whether or not,
The first signal transfer unit transfers a signal from the processing unit to the operation training apparatus or the equipment in the plant according to at least one of the first to third signals,
The second signal transfer unit transfers a signal from the operation training apparatus or the equipment in the plant to the processing unit according to at least one of the first to third signals.
Operation switching device. The first signal transfer unit includes:
When the first, second, and third signals indicate that the driving training device is in an operating state, the permission operation is input, and the plant is not in an accident state, Transfer signals to the driving training device;
When the first, second, or third signal indicates that the operation training apparatus is not in an operating state, the permission operation is not input, or the plant is in an accident state, from the processing unit The signal to the equipment in the plant,
The operation switching device according to claim 1. The second signal transfer unit includes:
When the first, second, and third signals indicate that the operation training apparatus is in an operating state, the permission operation is input, and the plant is not in an accident state, from the operation training apparatus Is transferred to the processing unit,
When the first, second, or third signal indicates that the operation training apparatus is not in an operating state, the permission operation is not input, or the plant is in an accident state, Transfer the signal from the device to the processing unit;
The operation switching device according to claim 1 or 2.   The operation switching device according to any one of claims 1 to 3, wherein the operation switching device is a control device that controls the plant.   The operation switching device according to any one of claims 1 to 3, wherein the operation switching device is an operation display device that functions as a terminal for a control device that controls the plant. A first buffer for storing a signal transferred from the processing unit to the equipment in the plant;
A second buffer for storing a signal transferred from the equipment in the plant to the processing unit;
A third buffer for storing a signal transferred from the processing unit to the driving training device;
A fourth buffer for storing a signal transferred from the driving training device to the processing unit;
The operation switching device according to claim 1, comprising:   The said operation switching apparatus uses the 1st network for transmission / reception of a signal at the time of the said plant emergency, and uses the 2nd network for transmission / reception of a signal at the time of the operation training of the said plant, The any one of Claim 1 to 6 The operation switching device according to item.   In the first and second networks, one of power supply from the first power supply device to the first network and power supply from the second power supply device to the second network is turned on. The operation switching device according to claim 7, wherein a network switching device that switches the other off is provided. A first signal indicating whether or not an operation training apparatus for plant operation training is in an operating state, a second signal indicating whether or not a permission operation for the plant operation training is input, and whether or not the plant is in an accident state And a third signal indicating
In response to at least one of the first to third signals, a signal from a processing unit that performs processing for operating the plant is transferred to the operation training apparatus or the equipment in the plant,
In response to at least one of the first to third signals, a signal from the operation training apparatus or the equipment in the plant is transferred to the processing unit.
Operation switching method. A control device for controlling the plant;
An operation display device functioning as a terminal for the control device;
An operation training device for operation training of the plant,
The control device or the operation display device is
A processing unit for performing processing for operating the plant;
A first signal indicating whether or not the operation training apparatus is in an operating state, a second signal indicating whether or not a permission operation for operation training of the plant is input, and a third signal indicating whether or not the plant is in an accident state And first and second signal transfer units for receiving signals,
The first signal transfer unit transfers a signal from the processing unit to the operation training apparatus or the equipment in the plant according to at least one of the first to third signals,
The second signal transfer unit transfers a signal from the operation training apparatus or the equipment in the plant to the processing unit according to at least one of the first to third signals.
Emergency plant control system. A first network for use in transmitting and receiving signals in an emergency of the plant;
A second network for use in transmitting and receiving signals during operation training of the plant;
An emergency plant control system according to claim 10.   A network switching device that switches on one of power supply from the first power supply device to the first network and power supply from the second power supply device to the second network; The emergency plant control system according to claim 11.

Images