JP2766549B2 - Plant monitoring equipment - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial application field] The present invention relates to a plant monitoring device for confirming the operation of emergency equipment provided in various plants, and in particular,
The present invention relates to a plant monitoring device suitable for automating inspection and a plant including the same.

[Conventional technology]

For example, a nuclear power plant is provided with a safety (emergency) device such as a valve or a pump that is operated to secure the plant when an abnormality occurs in the plant. Since these safety devices are not operated during the normal operation of the plant, they need to be inspected periodically. Conventionally, in a regular test of the safety-related equipment, a plant operator manually operated each safety-related equipment to check the state thereof. Also,
As described in "Hitachi Review," May 1988, vol. 70, "Computer Control System for Nuclear Power Plants," the operating procedure of a regular test is displayed on a CRT, and the operator sees this display while viewing each display. Operate safety devices.

As described above, in the configuration in which the operator checks the operation of each of the safety devices by manual operation, the burden on the operator is large, and there is a risk of erroneous operation. Therefore, as described in Japanese Patent Application Laid-Open No. 61-16306, a computer has been made to automatically perform a manual confirmation operation of a safety-related device conventionally performed by an operator.

[Problems to be solved by the invention]

As described above, technologies have been developed to automatically make computers perform regular tests for confirming the operation of safety-related equipment, but in plants where safety is extremely important, such as nuclear power plants, It is also a problem to leave the calculation to the computer. However, interposing the manual operation by the operator during the automatic operation procedure raises the problem of the manual operation again and does not solve any problem.

An object of the present invention is to provide a plant monitoring device capable of avoiding the risk of erroneous operation in automatic inspection of a safety device by a computer, and a plant provided with the same.

[Means for solving the problem]

According to the present invention, a safety device that does not operate during normal operation and operates at the time of inspection and emits a status signal, and at the time of inspection, controls each safety device based on an input test signal, and Automatic generation means capable of automatically generating a test signal of a safety-related device at an inspection instruction of an operator and outputting the test signal to the safety-related control device in a plant having a safety-related control device for determining a state signal generated from the related-system device; During operation, the automatic generation means and the safety-related control device are shut off while being connected, while at the time of inspection, the automatic generation means and the safety-related control device are connected so that transmission can be performed by the operator's inspection instruction. Means for outputting a test signal from the automatic generation means to the safety system control device, and for inputting the state signal taken into the safety system control device to the automatic generation means, Determine whether, and means for sending a test signal to the safety system equipment only in the normal, thereby can achieve the above object.

(Operation)

In the conventional automatic inspection by a computer, the computer itself (which corresponds to the safety-related control device in the above configuration) automatically generates an inspection operation signal and sends it to the safety-related equipment directly. In the present invention, the safety control device does not generate the inspection operation signal, but merely serves as a relay point of the inspection operation signal from the signal generator. A signal determination means is provided as a countermeasure when an error is also found in the inspection operation signal, which is a further safety measure.

〔Example〕

 Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is an overall configuration diagram of a safety system regular test automation device and a safety system control device according to an embodiment of the present invention. The safety-related equipment 4 (actually, there are many, but only one is shown for convenience) is operated and monitored by the operation monitoring panel 1, and is controlled by the safety-related control device 2. The safety control device 2 receives the operation command 8 of the operation monitoring panel 1 and outputs a control signal 9 after performing a control logic determination. Control signal 9
Is transmitted to each safety device 4 via the transmission device 3. Each safety system device 4 operates according to the control signal 9, and the status signal 10 is sent to the safety system control device 2 via the transmission device 3. The safety-related control device 2 uses this status signal 10 to determine the control logic, and displays the status of each device 4 on the operation monitoring panel 1 as necessary.

In a conventional regular test, the operation monitoring panel 1 described above was configured to manually operate and monitor the same as in a normal operation. However, in the embodiment of the present invention, in addition to the configuration of the safety system control device 2 described above, the components 5, 6, and 7 for a regular test described below are added to enable the automation of the regular test.

The regular test control device 5 is connected via the signal selection circuit 6
It is connected to the safety system controller 2 and only during the regular test,
The regular test control device 5 and the safety system control device 2 are connected. That is, when the regular test is selected by the regular test selection switch 7, the control signal 5 for the regular test is activated by the selection signal 12, and the signal selection circuit 6 is switched to the connection direction by the selection signal 12, and the control device for the regular test is selected. The test command signal (inspection operation signal) 11 automatically generated in step 5 is sent to each device 4 via the safety control device 2 and the status signal 10 of each device 4 is input to the regular test control device 5 Is done. By connecting / disconnecting the signal selection circuit 6, a test command signal 11 for a regular test unnecessary for normal operation is not input to the safety system control device 2, and the safety system control device 2 and the regular system test device are connected only during the regular test. The connection with the test control device 5 becomes possible.

The regular test control device 5 is connected to the safety system control device 2 by the selection signal 12 via the signal selection circuit 6 and calculates a regular test processing procedure for executing the regular test of the safety system device 4. Then, a predetermined test command 11 is issued.

FIG. 2 is an example of a flowchart showing a processing procedure of the control device 5 for regular test. The regular test control device 5
The processing is started by the selection signal 12 of the regular test, and the test command signals 11 are output one by one to the equipment 4 to be subjected to the regular test in accordance with a predetermined order of the equipment 4 that performs the regular test. In the regular test, the safety-related devices 4 are sequentially tested, and in this embodiment, a plurality of devices 4 do not receive the test command signal 11 at the same time. Test command signal
11 is output to the safety system control device 2 via the signal selection circuit 6. For example, the corresponding devices 4 are sequentially read from the regular test sequence table in accordance with a predetermined regular test sequence of valve A → valve B → pump C →. After the test command signal 11 is output, the completion of the operation of the relevant safety device 4 is confirmed, and the process proceeds to the next device 4 test. This processing flow ends when the test is completed up to the final device 4. If the operation of the relevant safety device 4 is not completed in response to the test command signal 11, the test command signal 11 may be continuously output until the operation is completed.
Further, the configuration may be such that the test command signal 11 is terminated at a certain number of times or at a certain time, and an abnormal display such as an alarm is performed.

The safety-related control device 2 performs a control logic operation of the corresponding safety-related device 4 based on the test command signal 11 and outputs a control signal 9 to the corresponding safety-related device 4. The safety system device 4 operates in accordance with the control signal 9, and the operation result is taken into the safety system control device 2 as a state signal 10 and input to the regular test control device 5 via the signal selection circuit 6. This operation result is used as confirmation of the completion of the operation of the safety-related equipment 4 in response to the test command signal 11 described above. When all of the predetermined test orders are completed, the processing of the regular test control device 5 is completed. When the regular test selection signal 12 is OFF, the processing of the regular test controller 5 is completed.

The signal selection circuit 6 in FIG. 1 connects the regular test control device 5 and the safety system control device 2 only when the regular test selection signal 12 is in the ON state, and the selection signal 12 is turned off.
In the case of, the regular test controller 5 and the safety system controller 2
Is insulated, and the test command signal 11 to the safety system controller 2 is
Are all in the OFF state (or “0”).

FIG. 3 is an internal configuration diagram showing processing functions of the safety system control device 2. Although the input processing unit 14 for processing the test command signal 11 from the regular test control device 5 and the input processing unit 13 for processing other signals are divided, the input processing unit may not be divided.

The input processing unit 13 is a unit that processes an input to the safety system control device 2 other than the test command signal 11 from the regular test control device 5, and performs processes such as signal conversion and upper / lower limit check. The signal 18 that has passed through the input processing unit 13 is subjected to a control logic operation in the safety-related equipment control processing unit 16, and the output processing unit 17
, A control signal 9 is output to each safety-related device 4.
The status signal 10 of the safety device 4 is input to the input processing unit 3 via the transmission device 3 and, if necessary, the output processing unit 17.
Is output to the operation monitoring panel 1 or the signal selection circuit 6 via the.

The input processing unit 14 receives a test command signal from the signal selection circuit 6.
11 to input the test command signal 11 to the command signal determination circuit 15.
Send. The command signal determination circuit 15 determines the validity of the test command signal 11, and for the test command signal 11 determined to be normal,
The test operation command signal 19 is output to the safety-related equipment control processing unit 16. The command signal determination circuit 15 has a function of (1) validity evaluation of the test command signal 11 and (2) blocking of the test command signal in the presence of a safety-related device automatic activation signal (hereinafter, LOCA signal).

FIG. 4 shows an example of the processing flow of the command signal determination circuit 15. The command signal determination circuit 15 checks the test command signal 11 at all points (operation command signals to all the safety devices 4),
When all the points are OFF (or “0”), it is determined at that time that the test conditions are not satisfied, including the permission conditions for executing the test, and the test operation command signal 19 is not output. Only one test command signal 11
When ON (or “1”), the presence or absence of the LOCA signal 20 is determined. If yes, the output of the test operation command signal 19 is blocked, and the LOCA signal 20 is output.
Only when no, the test operation command signal 19 is output. If two or more test command signals 11 are ON (or “1”), it is determined that the regular test controller 5 or the signal selection circuit 6 is abnormal,
The output of the test operation command signal 19 is blocked. This processing method
This can be realized because the test command signal 11 from the regular test controller 5 has a logic of sequentially outputting to the single safety device 4. If the regular test controller 5 is normal, Only one test command signal 11 is ON (or "1")
It is doing.

FIG. 5 shows an example of the processing of the safety-related equipment control processing unit 16. The safety-related equipment control processing unit 16 is a part that executes a control logic operation of each safety-related equipment 4, and when there is no regular test,
It is controlled by a signal 18 such as an operation switch of each device. At the time of the regular test, the test operation command signal 19 is input as in the processing described above, and each safety system device 4 is controlled. LOCA
At the time of the safety-related automatic start request when the signal 20 is generated, the safety-related function is prioritized, and the test operation command signal 19 is eliminated by the processing of the command signal determination circuit 15, and the safety-related equipment 4 is controlled by the LOCA signal 20. Is done.

〔The invention's effect〕

According to the present invention, it is possible to automate a regular test of a safety system, and thus there is an effect of reducing a burden on an operator and reducing an operation monitoring panel. In addition, since it is easy to detect an erroneous test command signal due to a failure of the regular test control device, there is no need to multiplex the regular test control device, and it is not necessary to design the same as a safety system control device. , Economical and concise.

[Brief description of the drawings]

FIG. 1 is a block diagram of a main part of a plant monitoring device according to one embodiment of the present invention, FIG. 2 is a flowchart showing a processing procedure of a regular test device, FIG. 3 is an internal configuration diagram of a safety system control device, FIG. FIG. 4 is a flowchart showing a processing procedure of the command signal determination circuit, and FIG. 5 is a configuration diagram of a safety device control processing unit. 1 ... operation monitoring panel, 2 ... safety control device, 3 ... transmission device, 4 ... safety device, 5 ... regular test control device,
6 ... signal selection circuit, 7 ... regular test selection switch, 15
…… Command signal determination circuit, 16… Safety equipment control processing unit.

Claims (2)

(57) [Claims] 1. A safety system device which does not operate during normal operation and operates at the time of inspection and emits a status signal, and at the time of inspection, controls the safety system device based on an input test signal. Automatic generation means for automatically generating a test signal for a safety-related device in response to an operator's inspection instruction and outputting the test signal to the safety-related control device in a plant having a safety-related control device for determining a state signal emitted from the device; While shutting off while the automatic generation means and the safety system control device remain connected, during inspection, the automatic generation means and the safety system control device are connected so as to be able to transmit at the inspection instruction of the operator, Means for outputting the test signal from the automatic generation means to the safety system control device, and for inputting the state signal taken into the safety system control device to the automatic generation means; Determine whether, plant monitoring apparatus characterized by having a means for sending a test signal to the safety system equipment only when the normal. 2. A plurality of safety devices which do not operate during normal operation, operate at the time of inspection and emit a status signal, and control each safety device at the time of inspection based on an input test signal. Automatic generation means capable of automatically generating a test signal for a safety-related device at an operator's inspection instruction and outputting the test signal to the safety-related control device in a plant having a safety-related control device that determines a state signal generated from the safety-related device; and ,
During normal operation, the automatic generation means and the safety-related control device are shut off while being connected, while at the time of inspection, the automatic generation means and the safety-related control device are connected so that they can be transmitted by an operator's inspection instruction. Means for outputting a test signal from the automatic generation means to the safety system control device, and for inputting a state signal taken into the safety system control device to the automatic generation means, and determining whether the test signal from the automatic generation means is correct or not. And means for transmitting a test signal to the safety-related equipment only when normal, wherein the automatic generation means includes a plurality of safety-related equipment,
A plant monitoring apparatus, comprising: means for sequentially transmitting a test signal for safety-related equipment to each safety-related equipment and sequentially transmitting test signals to one safety-related equipment one by one.