JP3306602B2 - Digital protection control method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a digital protection control method and, more particularly, to a digital protection control method suitable for performing control for protecting a power system using settling data stored in a nonvolatile memory.

[0002]

2. Description of the Related Art Conventionally, when controlling a power system using settling data, as described in a power plan B400 or a joint research on electric machines, Vol. 28, No. 1,
A method of monitoring settling data is employed.

The following methods are available for monitoring the settling data.

(1) A set value comparison method for checking whether or not the set data in the duplicated memories match each other. (2) A setting value absolute value monitoring method for checking whether the setting data is within a range that can be taken as the setting item. (3) A setting value relative value monitoring method for checking whether or not the mutual relationship between the setting values is theoretically correct.

In monitoring settling data, any of the above methods or a combination of the above methods is used to increase the reliability of the settling data.
When an abnormality is detected in the settling data, a method of outputting an alarm to the outside or locking the control device is adopted.

[0006]

In the above-mentioned prior art, when an abnormality is detected in the settling data, an alarm is output to the outside or the control device is locked. Is not going to control. When controlling the power system using the digital protection control device, the digital protection control device is often operated in an unmanned substation, and also controls and protects the power system. Locking would reduce the operational reliability of the device. It should be noted that JP-A-61-169940, JP-A-63-2282
As described in Japanese Patent Publication No. 48, it is conceivable to correct the data, but simply correcting the data cannot quickly cope with the processing at the time of abnormality.

An object of the present invention is to provide a digital protective control method capable of controlling a controlled object by using the correct settling data when an abnormality occurs in settling data.

[0008]

In order to achieve the above object, the present invention provides a method of multiplexing a memory storing settling data and storing the settling data in at least one of the multiplexed memory groups. Store the redundant data corresponding to, select the settling data of any memory in the multiplexed memory group, and determine whether the selected setting data matches the setting data of other memories. the election when when obtaining the agreement of the determination result to control the controlled object in accordance with settling data selected to give a mismatch decision result
The selected setting data is corrected according to the redundant data, and
This adopts a digital protection control method for controlling a control target in accordance with corrected set data.

The digital protection control method can be applied to a multiplexed storage area of a memory. Further, the present invention can be applied to a triple memory or a triple memory storage area. When tripled data is used, it is desirable to select correct set data in accordance with a majority decision.

When the digital protection control method is applied, if an abnormality occurs in the settling data, the abnormal setting data is corrected according to the setting data selected as the correct setting data, or the corrected settling data is stored in the original data. It is desirable to store in a storage area different from the area. Further, it is desirable that each memory is composed of different types.

In adopting the digital protection control method, instead of judging whether the set data set from the memory coincides with other set data, the set data selected from the memory is compared with the redundant data to determine the set data. Correctness can be determined. Furthermore, auxiliary setting data within the allowable range allowed as setting data is stored in a storage area different from the setting data, and instead of selecting correct setting data when an abnormality occurs in the setting data, the auxiliary setting data is used. It is also possible to control the control target.

Further, a memory for storing the settling data is multiplexed, and a memory for storing the program is multiplexed.
When an abnormality occurs in some programs, it is desirable to execute processing according to a normal memory program and correct the abnormal program according to the normal program.

It is desirable to add redundant data to the storage area of the memory for each settling data, and to judge correctness of each settling data using the redundant data. Further, when the same settling data as the settling data stored in the multiplexed memory is stored in an external memory belonging to a different system from the multiplexed memory, and an error occurs in the settling data of the multiplexed memory, Takes in the setting data from the external memory,
It is desirable to select this settling data as correct setting data.

It is desirable to use a nonvolatile memory as a memory for storing the settling data and the program.

[0015]

According to the above-mentioned means, when the control target is controlled using the set data of an arbitrary memory of the multiplexed memory group, whether the selected set data matches the set data of another memory. It is determined whether or not they are the same, and if they match, the control target is controlled according to the selected settling data.
On the other hand, when the determination result that the settling data does not match is obtained
Correct the selected settling data according to the redundant data
Then, the control target is controlled according to the corrected settling data. Therefore, even when an abnormality occurs in the settling data, the control target can be controlled in a normal state. For this reason, the operation reliability of the apparatus can be improved.

[0016]

An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 shows the configuration of an embodiment when the present invention is applied to a digital protection controller of a single CPU system. In FIG. 1, the digital protection controller includes current transformers 11a to 11n, transformers 12a to 12n, filters 13a to 13n, 13A to 13N, sample and hold circuits 14a to 14n, 14A to 14N, and a multiplexer 1.
5, A / D converter 16, communication interface 17, bus 18, CPU 19, digital input circuit 20, digital output circuit 21, ROM 22, RAM 2
3, a man-machine interface 24, and nonvolatile memories A and B.

The current transformers 11a to 11n detect current as analog information of the power system, the transformers 12a to 12n detect voltage as analog information of the power system, and sample the detection output via filters 13a to 13n. The signals are output to the hold circuits 14a to 14n. The sample hold circuits 14a to 14n sample the input signals, hold the sampled signals, and output the held signals to the multiplexer 15. The signal input to the multiplexer 15 is output to the A / D converter 16, and the A / D converter 16 outputs a digital signal. Then, the digital signal is transferred to the CPU 19 and the like.

The CPU 19 executes a relay operation on the input data according to a predetermined algorithm,
It controls the operation of the system. Various setting information required for the apparatus, for example, set value data is input via the man-machine interface 24.
The status of the device, the status of the protection or the control target can be displayed on a display connected to the device. RA
M23 stores data required by the CPU 19, and the ROM 22 stores programs executed by the CPU 19 and the like. Then, a command according to the operation of the CPU 19, for example, a cutoff command, is sent to the digital output circuit 2.
1 to the outside. The external input information and the like from the contact information and other systems of the external device are inputted from the digital input circuit 20. In the case of performing exchange of other systems and various information, and the like are performed through the communications interface 17.

In the digital protection control device having the above-described configuration, an interrupt is issued to the CPU 19 at substantially constant intervals, and a predetermined process is executed in accordance with the interrupt. Some types of the CPU 19 can generate an interrupt by the built-in timer by themselves. The CPU 19 performs various processes on input data received from the A / D converter 16 or input data received via the communication interface 17 according to a program written in the ROM 22. In this case, if the program written in the ROM 22 has been transferred to the RAM 23 or has been written in the RAM 23 by using other means via the communication interface 17, the RAM 2
Various processes can also be executed in accordance with the program written in Step 3.

Here, in this embodiment, in order to always control the power system in a stable state according to the settling data,
The memory for storing the settling data is duplicated. That is, in this embodiment, the nonvolatile memories A and B are provided as memories for storing various settling data. As the nonvolatile memories A and B, for example, an EEPROM: Electrically Era
sable & Programmable Only
A memory such as a memory, a flash memory, and an NVRAM can be used.

In the nonvolatile memories A and B, as shown in FIG. 2, the storage area is divided into a plurality of storage areas, and the settling data 1 to N are stored in the storage areas d1 to dn. The redundant data of the set data 1 to N is stored in .about.jn. Further, the storage area dcs stores redundant data for the settling data 1 to N , and the storage area jcs stores redundant data for the redundant data 1 to N.

The settling data 1 to N are provided as output determination values in the digital protection controller, and the settling data changes under the influence of noise or the like.
When the device is controlled by the changed data, the device may deviate from the normal operation state, and in some cases, the device may enter an erroneous negative operation state due to erroneous output. In other words, when the output must be output or the device must output due to false negative operation, despite the situation in which the device must not output (system status), for example, when a system accident occurs In some cases, output may not be possible despite abnormal conditions.

Therefore, in this embodiment, the memory for storing the settling data is duplicated like the non-volatile memories A and B, and the state of the settling data in each of the non-volatile memories A and B is constantly monitored. As will be described later, when an abnormality occurs in the settling data, correct setting data is selected according to the redundant data, and erroneous setting data is corrected.

When generating various types of redundant data provided for correcting the settling data 1 to N, for example, HEX data is converted into BC (binary code decimal) or bit inverted. To obtain the two's complement, or further, using a cyclic code. Note that the cyclic code is a type of linear protection. When an arbitrary codeword of a linear code having a code length n is represented by U = (U1, U2,..., Un) (1) For example, a code word U ′ = (Un, U1, U2,..., Un−1) displaced to the right by one is also referred to as a cyclic code.

As the redundant data, the same set data as the original set data can be used. Furthermore, when generating redundant data for a plurality of settling data, for example, a sum value (a value obtained by adding all target data) or parity may be used. Note that it is also possible to transfer the data stored in the nonvolatile memories A and B to the RAM 23 and use the data stored in the RAM 23.

Next, the operation of this embodiment will be described with reference to the flowchart of FIG.

First, when the power is turned on and a reset signal is output, the apparatus is initialized and the processing by the CPU 19 is started according to the program stored in the ROM 32. Then, the CPU 19 executes the non-volatile memory A, B or the RAM in order to confirm the soundness of the set data.
23, the set data 1 to N stored in the nonvolatile memories A and B are sequentially collated,
It is determined whether or not the two contents match (step 3
1, 32). In this case, it is checked whether the relationship between the settling data and the redundant data is in a predetermined state, together with the set value comparison check and the range check relative value check. When the set data is 30 or more, it is possible to determine whether the set data is normal or not by checking the coincidence of the set data.

When it is determined that the set data is normal, it is determined whether or not the set data is to be changed (step 36). When no change is necessary, a process for controlling the system according to the set data is executed. .

On the other hand, when it is determined that the settling data in the nonvolatile memories A and B do not match, and abnormality of the settling data is detected, the redundant data stored in the storage areas j1 to jn or the redundant data stored in the storage areas dcs and jcs. Correct setting data is selected according to the redundant data, and the setting data in which an abnormality is detected is corrected (step 33). When correcting abnormal set data, if the redundant data is set as a complement of the set data, the abnormal set data can be corrected to correct set data by inverting the complement. When the settling data is stored, it is usually stored in the original storage area, but if it is stored in a storage area different from the original storage area, an error occurs in the settling data due to an abnormality in a specific area of the storage element. Recurrence can be prevented. When correcting settling data, correct setting data can be fetched from another device via the communication interface 17 and abnormal setting data can be corrected according to the settling data. When the correct set data is selected, the control of the system is performed in accordance with the correct data. When the correct data is not selected, a warning is output that the recovery is impossible (steps 34 and 35).

When it is determined in step 36 that the setting data needs to be changed, a process of changing the setting data is performed (step 37), and it is determined whether or not the processing according to the setting data is to be terminated. Perform (Step 3
8) When the process is continued, a process for generating the redundant data and storing the generated redundant data is executed (step 39).

As described above, in this embodiment, the contents of the settling data stored in the non-volatile memories A and B are monitored one by one, and when the contents match, the selected settling data is used as it is. The system is controlled, and when it is determined that the two do not match, the correct settling data is selected according to the redundant data, and the system is controlled according to the selected settling data. The system can always be controlled in a normal state.

In the above embodiment, the memory for storing the settling data is duplicated. However, the storage area of the memory for storing the settling data is multiplexed, and the setting data and the redundant data are stored in the multiplexed storage area. A method of storing data and sequentially monitoring the contents of the multiplexed storage area may be adopted.

If the nonvolatile memories A and B are formed of different types, it is possible to prevent both memories from becoming abnormal at the same time due to a memory-specific accident.

In detecting an error and correcting the settling data, redundant data such as a hamming code may be generated from the data in a write cycle of the settling data, and stored together with the data in a memory.

Further, the program may be stored in the ROM 22 and the nonvolatile memory with the error correction function may be provided in a multiplexed state, and the program may be stored in each memory. With such a configuration, even when a program has an abnormality, it is possible to select a correct program and execute the process, and to correct the abnormal program according to the normal program.

FIG. 4 shows the configuration of an embodiment when the present invention is applied to a digital protection control device of a multi-CPU system.

In this embodiment, the CPU 19, ROM 22, R
This is a multiplexed version of the processor including the AM 23 and the non-volatile memories A and B, and the other configuration is the same as that of FIG. 1. Therefore, the same components are denoted by the same reference numerals and description thereof is omitted. .

In this embodiment, an auxiliary transformer TP1 is provided between the transformer 12i and the filter 13I, and an auxiliary transformer CT1 is provided between the current transformer 11i and the filter 13i. Also, a man-machine interface 24 is connected to the display 25,
The digital output circuit 21 is connected to a trip coil 28 of the circuit breaker via a trip circuit 27, and the communication interface 17 is connected to an external system via a communication device 29. Then, the state of the system is monitored based on the settling data.
Are excited, and the circuit breaker 30 is opened.

Also in this embodiment, since the memories for storing the settling data are multiplexed, even if an abnormality occurs in the settling data, it is possible to select the correct setting data and control the state of the system. Even if an abnormality occurs in the data, control of the system can be continued in a stable state.

[0041] In each of the embodiments, a memory for storing the settling data stores redundant data to each nonvolatile memory A, B with multiplexing, nonvolatile memory A, B
Has been described in which the status of the settling data stored in the storage device is sequentially monitored, and when the contents of the two do not match, the correct setting data is selected based on the redundant data. However, as shown in FIG. The non-volatile memories can be multiplexed three or more times like the non-volatile memories Aa...

In this embodiment, it is extremely unlikely that failures occur at the same time, and this is based on the fact that it is rare that two or more devices fail simultaneously. Thus, in this embodiment, the same settling data 1 to N are stored in each of the nonvolatile memories Aa to An, and the storage of redundant data is omitted. Then, when an abnormality occurs in the settling data, correct setting data is selected from the settling data group of each memory according to a majority decision.

Also in this embodiment, even if an abnormality occurs in the settling data, the correct setting data can be selected according to the majority decision, so that it is possible to prevent the system control from being interrupted due to the setting data abnormality. .

[0044] In the case of providing a non-volatile memory in each system, as shown in FIG. 6, the redundant bit with non-volatile memory
A ridge 40 can also be provided. This nonvolatile memory 40
The storage areas D1 to Dn store settling data and redundant data corresponding to each settling data. Then, by successively comparing the settling data with the redundant data, it is possible to detect that an abnormality has occurred in the settling data. For this reason, if the memory 40 is multiplexed, the system can be controlled in accordance with the correct settling data even if an abnormality occurs in the settling data.

In controlling the system in accordance with the settling data, auxiliary settling data within an allowable range allowed as setting data is stored in the ROM 22, and when an abnormality occurs in the setting data, instead of selecting correct setting data, ,
The system can also be controlled using the auxiliary settling data stored in the ROM 22.

[0046]

As described above, according to the present invention,
The memory or storage area for storing the settling data
Multiplexing and multiplexed memory groups or storage areas
At least one of the areas corresponds to settling data
Multiplexed memory group or memory
Select any setting data in the storage area and select the setting
If the data is correct, control is performed according to the selected set data.
When the selected set data is incorrect, controlling the control target
In accordance with the redundant data
Corrected, the control target is controlled according to the corrected settling data, so that control can be prevented from being interrupted due to abnormality in the settling data, and the control target can be controlled in a stable state at all times. This can contribute to improvement in the operation reliability of the device.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of a digital protection control device of a single CPU system.

FIG. 2 is a specific configuration diagram of nonvolatile memories A and B.

FIG. 3 is a flowchart for explaining the operation of the device shown in FIG. 1;

FIG. 4 is an overall configuration diagram of a digital protection control device of a multi-CPU system.

FIG. 5 is a configuration diagram of a main part of the digital protection device when the nonvolatile memory is tripled or more.

FIG. 6 is a specific configuration diagram of a nonvolatile memory with redundant bits.

[Explanation of symbols]

11a to 11n Current transformer 12a to 12n Transformer 13a Filter 13A to 13N Filter 14a to 14n, 14A to 14N Sample hold circuit 15 Multiplexer 16 A / D converter 19 CPU 22 ROM 23 RAM A, B Non-volatile memory

──────────────────────────────────────────────────続 き Continuation of front page (56) References JP-A-5-56546 (JP, A) JP-A-57-6520 (JP, A) JP-A-5-212714 (JP, A) JP-A-63- 228248 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) H02H 3/02 H02J 13/00 311

Claims (4)

(57) [Claims] 1. A memory storing settling data is multiplexed, redundant data corresponding to the settling data is stored in at least one memory of the multiplexed memory group, and a memory of the multiplexed memory group is stored. Selects the settling data in any of the memories, determines whether the selected setting data matches the setting data in the other memory, and, if a match is obtained, determines the control target according to the selected setting data. controls, the selection when obtaining the mismatch decision result
The selected setting data is corrected according to the redundant data, and
A digital protection control method for controlling a control target in accordance with corrected set data. 2. A storage area of a memory is multiplexed, settling data is stored in a plurality of storage areas of the memory, and redundant data corresponding to settling data of each storage area is stored in one of the storage areas of the memory. Selecting settling data of an arbitrary storage area in the storage area group of the memory, determining whether the selected settling data matches settling data of another storage area, and determining a match determination result. When it is obtained, the control object is controlled according to the selected settling data.
A digital protection control method that corrects according to redundant data and controls a control target according to the corrected settling data. 3. The method according to claim 1, wherein the memory storing the set data is of different types.
And multiplexed memory groups.
At least one of the memories
Storing the corresponding redundant data , selecting the settling data of an arbitrary memory in the multiplexed memory group, and determining whether the selected setting data matches the setting data of another memory, When a match determination result is obtained, the control target is controlled in accordance with the selected set data. When a mismatch determination result is obtained, the selected set data is replaced with the redundant data.
A digital protection control method that corrects according to the above and controls the control target according to the corrected settling data. 4. A multiplexing a storage area of the memory, the stores the settling data in a plurality of storage areas of the memory
Setting data of each storage area in any storage area of memory
Storing redundant data corresponding to, select the settling data in any storage area in the storage area group of said memory, whether the settling data settling data and another storage region selected matches When the determination result of the match is obtained, the control target is controlled in accordance with the selected set data, and when the determination result of the mismatch is obtained, the selected set data is
Correction according to the redundant data , control of the control target according to the corrected settling data, and
A digital protection control method for storing data in a storage area different from the original storage area .