JPH04203999A - Diagonosis of safety protection system and device thereof - Google Patents

Diagonosis of safety protection system and device thereof

Info

Publication number
JPH04203999A
JPH04203999A JP2328985A JP32898590A JPH04203999A JP H04203999 A JPH04203999 A JP H04203999A JP 2328985 A JP2328985 A JP 2328985A JP 32898590 A JP32898590 A JP 32898590A JP H04203999 A JPH04203999 A JP H04203999A
Authority
JP
Japan
Prior art keywords
signal
diagnosis
output
signal processing
diagnostic
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
JP2328985A
Other languages
Japanese (ja)
Inventor
Akira Nishida
晃 西田
Setsuo Arita
節男 有田
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hitachi Ltd
Original Assignee
Hitachi Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hitachi Ltd filed Critical Hitachi Ltd
Priority to JP2328985A priority Critical patent/JPH04203999A/en
Publication of JPH04203999A publication Critical patent/JPH04203999A/en
Pending legal-status Critical Current

Links

Classifications

    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02E—REDUCTION OF GREENHOUSE GAS [GHG] EMISSIONS, RELATED TO ENERGY GENERATION, TRANSMISSION OR DISTRIBUTION
    • Y02E30/00—Energy generation of nuclear origin
    • Y02E30/30—Nuclear fission reactors

Abstract

PURPOSE:To enable prompt output of control signal against abnormal signal of a plant by enabling output of control signal from a signal processing circuit to an object to be controlled by canceling diagnosis work even through the signal processing circuit is engaged in the diagonosis work. CONSTITUTION:In cast that, while a signal processing circuit RL1 is engaged in diagonosis work, control signal (logic '0') is output from the signal processing circuits RL2, RL3 and RL4, relays RY2, RY3 and RY4 of a judging measures 20 of diagonosis interruption lose magnetic excitation, and contact points thereof become OFF. By this process, a relay RY5 also loses magnetic excitation, the contact point thereof becomes ON, judging signal of diagonosis interruption is output to a diagonosis circuit 10, diagonosis work is interrupted in the same manner as mentioned previously and finally the control signal (logic '0') is output from signal processing circuit RL1 to an object to be controlled, via an output logic measures 30.

Description

【発明の詳細な説明】 〔産業上の利用分野〕 本発明は原子カプラント等の各種プラントにおける、診
断回路を有する安全保護系に係わり、特に４重化構成と
した安全保護系の診断解除方法とその装置に関する。[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to safety protection systems having diagnostic circuits in various plants such as nuclear couplants, and particularly relates to a method for canceling the diagnosis of a safety protection system having a quadruple configuration. Regarding the device.

〔従来の技術〕[Conventional technology]

原子カプラントにおいては、原子炉の安全性を確保する
ために、異常な過渡状態等が発生する可能性のある場合
に、これを防止するために安全保護装置を設けである。In order to ensure the safety of the nuclear reactor, a nuclear coupler is equipped with a safety protection device to prevent abnormal transient conditions from occurring.

さらに、この安全保護装置の信頼性をより一層高めるた
めに、プラント運転中においても、この安全保護装置の
機能を診断する診断回路が設けられている。Furthermore, in order to further increase the reliability of this safety protection device, a diagnostic circuit is provided that diagnoses the function of this safety protection device even during plant operation.

例えば、特開昭６３−２８１０９３には、原子カプラン
トの安全保護装置の一装置である緊急停止装置を対象と
した診断装置が示されている。その構成は、第２図のよ
うになっており、４台の信号処理回路ＲＬ工〜ＲＬ４を
１台の診断回路１０によって診断しているが、各信号処
理回路のＲＬ□〜ＲＬ４を順次診断する構成としている
。For example, Japanese Unexamined Patent Publication No. 63-281093 discloses a diagnostic device for an emergency stop device, which is one of the safety protection devices for an atomic couplant. Its configuration is as shown in Fig. 2. Four signal processing circuits RL~RL4 are diagnosed by one diagnostic circuit 10, and RL□~RL4 of each signal processing circuit is diagnosed sequentially. It is configured to do this.

〔発明が解決しようとする課題〕[Problem to be solved by the invention]

上記従来技術は、例えば信号処理回路ＲＬ、が診断を受
けている場合、診断回路１０からテスト信号が入力され
、信号切換手段ＳＷ１により信号処理回路ＲＬ□からの
出力信号である制御信号は制御対象へ出力されないよう
になっている。In the above conventional technology, for example, when the signal processing circuit RL is being diagnosed, a test signal is input from the diagnostic circuit 10, and the control signal, which is the output signal from the signal processing circuit RL□, is controlled by the signal switching means SW1. It is configured so that it is not output to.

このような場合に制御対象を制御すべき事象が検出器Ｄ
Ｅｊ・□（ｊ２１〜４）により検出されたとしても診断
中の信号処理回路ＲＬ□からは制御対象を制御するため
の信号が出力されない。In such a case, the event that should control the control object is detected by detector D.
Even if detected by Ej·□ (j21-4), the signal processing circuit RL□ under diagnosis does not output a signal for controlling the controlled object.

このように、従来技術は診断中に制御対象を制御すべき
事象がおこった場合について配慮されておらず、診断中
の信号処理回路ＲＬよは安全保護装置としての機能を果
たすことができないという問題があった。As described above, the conventional technology does not consider the case where an event that requires control of the controlled object occurs during diagnosis, and the problem is that the signal processing circuit RL under diagnosis cannot function as a safety protection device. was there.

本発明は、診断中の信号処理回路においても安全保護装
置の機能を果たすことができるようにして安全保護系の
信頼性をより一層高めることを目的とする。SUMMARY OF THE INVENTION An object of the present invention is to further enhance the reliability of a safety protection system by enabling a signal processing circuit under diagnosis to function as a safety protection device.

〔課題を解決するための手段〕[Means to solve the problem]

上記目的を達成すために、各信号処理回路の内の１台が
診断開始あるいは診断中に各系統の信号処理回路ごとに
全系統の信号比較回路の出力信号を常時監視し、該回路
の出力信号に応じ診断を解除するか否かの判定を行う診
断解除判定手段を設けたものである。In order to achieve the above purpose, one of the signal processing circuits constantly monitors the output signals of the signal comparison circuits of all systems for each signal processing circuit of each system at the start of diagnosis or during diagnosis, and A diagnosis cancellation determination means is provided for determining whether or not to cancel the diagnosis in response to the signal.

〔作用〕[Effect]

信号比較回路、信号処理回路及び診断回路からなる安全
保護系において、各信号処理回路の入力信号あるいは出
力信号の値に応じて、ある１つの信号処理回路が診断中
であっても、その診断を解除して該信号処理回路からの
制御信号を制御対象に出力することができる。In a safety protection system consisting of a signal comparison circuit, a signal processing circuit, and a diagnostic circuit, even if one signal processing circuit is being diagnosed, the diagnosis can be performed depending on the value of the input signal or output signal of each signal processing circuit. By releasing the control signal, the control signal from the signal processing circuit can be output to the controlled object.

〔実施例〕〔Example〕

第１図は本発明の基本的な実施例を示したものである。 FIG. 1 shows a basic embodiment of the invention.

本システムは信号比較ＤＥ１〜ＤＥい信号処理回路ＲＬ
□〜ＲＬ４及び診断回路１０により構成される。This system consists of signal comparison DE1 to DE signal processing circuit RL.
It is composed of □ to RL4 and the diagnostic circuit 10.

第１図及び以降の図には、１系統の信号比゛較回路ＤＥ
よ、信号処理回路ＲＬ工のみを記載し、他の系統は、１
系統と同し内容なので省略している。In FIG. 1 and the subsequent figures, one system of signal comparison circuit DE is shown.
Only the signal processing circuit RL construction is described, and the other systems are 1.
It is omitted because it has the same content as the system.

まず、通常（非診断時）の安全保護系の処理内容につい
て説明する。First, the processing contents of the safety protection system during normal (non-diagnosis) will be explained.

信号比較回路ＤＥＩはトリップモジュールＴＭ、・。The signal comparison circuit DEI is a trip module TM, .

〜ＴＭ□・。より構成され、センサーＳ、〜ｓｎの信号
を規定値と比較し、規定値を越えていた場合信号処理回
路ＲＬ１〜ＲＬ４ｎ　トリップ指令信号を出力する。~TM□・. The signal processing circuits RL1 to RL4n output a trip command signal when the signals from the sensors S and -sn are compared with a specified value, and if the signal exceeds the specified value.

信号処理回路ＲＬ工は２ｏｕｔＯｆ４多数決論理手段Ｌ
１＋ｘ〜Ｌｘ＋ｎ、　１ｏｕｔ　ｏｆ　Ｎ多数決論理手
段Ｍ。The signal processing circuit RL is 2 out of 4 majority logic means L
1+x~Lx+n, 1out of N majority logic means M.

信号切換手段Ｓ１・、〜Ｓ、、４．ＳＷ□より構成され
る。信号切換手段Ｓ工・□〜Ｓ　ｎ　Ｈ４は、信号比較
回路ＤＥ１からの信号を診断用のテスト信号に切換える
ものであり、信号切換手段ＳＷ□は診断用のテスト信号
により信号処理回路ＲＬ工の多数決論理手段が動作した
場合に、制御対象へ制御信号が出力されないように、テ
スト時には、１／Ｎ多数決論理手段Ｍ１の出力信号側か
ら、固定信号側（正常値論理“１″）に切換えるための
ものである。Signal switching means S1., ~S,, 4. It is composed of SW□. The signal switching means SW□~S n H4 switches the signal from the signal comparison circuit DE1 to a test signal for diagnosis, and the signal switching means SW□ switches the signal from the signal processing circuit RL by the test signal for diagnosis. In order to prevent the control signal from being output to the controlled object when the majority logic means operates, the output signal side of the 1/N majority logic means M1 is switched to the fixed signal side (normal value logic "1") during testing. belongs to.

信号切換手段８１．１〜Ｓ１．イとＳｗ□の入力信号の
切換は診断回路からのテスト状態切換信号により制御さ
れる。信号処理回路ＲＬＩは信号比較回路ＤＥＩ〜ＤＥ
４からの信号を入力し、信号切換手段Ｓ　＞　＋　１〜
Ｓ　ｚ　＊　４　を介し、２ｏｕｔ　ｏｆ　４多数決論
理手段Ｌ１．１〜Ｉ’　ｈ　Ｈｈ　ｎにて、信号比較回
路ＤＥ□〜ＤＥ４から２つ以上のトリップ指令信号が出
力された場合に制御指令信号を出力し、１／Ｎ多数決論
理手段Ｍ１及び、信号切換手段ＳＷ１．出力論理手段３
０を介し制御対象へ制御信号を出力する。Signal switching means 81.1 to S1. Switching of the input signals of A and Sw□ is controlled by a test state switching signal from the diagnostic circuit. The signal processing circuit RLI is the signal comparison circuit DEI to DE
4, and the signal switching means S>+1~
If two or more trip command signals are outputted from the signal comparison circuits DE□ to DE4, the control command signal is output via S z * 4 by the 2 out of 4 majority logic means L1.1 to I' h Hh n. 1/N majority logic means M1 and signal switching means SW1. Output logic means 3
Outputs a control signal to the controlled object via 0.

次に診断時における診断回路１０と信号処理回路ＲＬ工
の処理内容について説明する。Next, the processing contents of the diagnostic circuit 10 and the signal processing circuit RL during diagnosis will be explained.

診断回路１０は、診断開始５Ｗ−Ｆｌ、診断解除５Ｗ−
Ｇｌを備えている。The diagnostic circuit 10 starts diagnosis 5W-Fl and cancels diagnosis 5W-
It is equipped with GL.

診断処理は、診断開始ＳＷのＦｌが押されたことにより
診断を開始し、テスト状態切換信号と、テスト信号を信
号処理回路ＲＬＩに出力する。信号処理回路ＲＬＩの信
号切換手段８１．１〜Ｓ□、ｎは、テスト状態切換信号
により、入力を信号比較回路ＤＥＩ〜ＤＥ４の出力信号
側から、テスト信号側に切換え、又信号切換手段ＳＷＩ
は、入力を１／Ｎ論理手段Ｍ１の出力信号側から、固定
信号（論理ＩＩ　Ｉ　Ｉ＋　）側に切換えられる。この
状態で信号処理回路ＲＬＩの２ｏｕｔ　ｏｆ４論理手段
Ｌ□し１〜Ｌ□、、は、診断回路からのテスト信号を入
力し、その結果を１／Ｎ論理手段Ｍ１を介し、診断回路
１０に応答信号を出力する。診断回路１０では、テスト
信号に対する、信号処理回路ＲＬ１の応答信号の結果に
より、信号処理回路ＲＬ１の診断を行う。Diagnosis processing starts when Fl of the diagnosis start SW is pressed, and a test state switching signal and a test signal are output to the signal processing circuit RLI. The signal switching means 81.1 to S□, n of the signal processing circuit RLI switch the input from the output signal side of the signal comparison circuits DEI to DE4 to the test signal side in response to the test state switching signal, and also switch the input to the test signal side.
is switched from the output signal side of the 1/N logic means M1 to the fixed signal (logic II I I+) side. In this state, the 2 out of 4 logic means L□ and 1 to L□ of the signal processing circuit RLI input the test signal from the diagnostic circuit, and transmit the result to the diagnostic circuit 10 via the 1/N logic means M1. Output a signal. The diagnostic circuit 10 diagnoses the signal processing circuit RL1 based on the result of the response signal of the signal processing circuit RL1 in response to the test signal.

診断回路１０に備えている診断解除スイッチＧ１は診断
を途中で中止したいときのために設けられており診断解
除スイッチＧ工を押すことにより診断は解除される。A diagnostic canceling switch G1 provided in the diagnostic circuit 10 is provided for when it is desired to cancel the diagnosis midway through, and the diagnosis is canceled by pressing the diagnostic canceling switch G1.

また、診断は、安全保護系の機能を失わないように、４
系統のうち必ず１系統のみ実施さＪル、２系統以上同時
に診断されることはない。In addition, the diagnosis should be carried out in four ways to ensure that the safety protection system does not lose its function.
Only one of the systems is tested, and two or more systems are never diagnosed at the same time.

次に本発明による診断解除判定手段、２０の動作につい
て説明する。Next, the operation of the diagnostic cancellation determination means 20 according to the present invention will be explained.

診断解除判定手段２０の構成を第３図に示す。The configuration of the diagnostic cancellation determination means 20 is shown in FIG.

信号処理回路ＲＬＩ〜ＲＬ４の出力をリレーＲＹＩ−Ｒ
Ｙ４で受け、その接点ＲＹ１ａ−ＲＹ４　ａとリレーＲ
Ｙ５及びその接点ＲＹ５ｂにより、診断解除手段２０を
構成している。（リレーＲＹＩ　〜ＲＹ４の接点ＲＹ１
ａ＝ＲＹ４ａは無励磁のとき開で、励磁のとき閉となり
、又リレーＲＹ５の接点ＲＹ５ｂは、無励磁のとき閉で
、励磁のとき開となる接点である。） 診断解除判定手段２０は、ＲＹｌａ”ＲＹ４ａにより２
ｏｕｔ　ｏｆ　４　論理手段を構成している。信号処理
回路ＲＬＩは正常時論理ＩＩ　Ｉ　Ｉ＋を出力し異常時
論理Ｉｔ　ＯＩ＋　（制御信号）を出力するので通常は
論理“１”を出力し、リレーＲＹＩ〜ＲＹ４は励磁状態
にある。このとき接点ＲＹ１ａ”−ＲＹ４ａは閉となり
リレーＲＹ５は電源が供給され、励磁となる。そのため
接点ＲＹ５ｂは開となる。この接点ＲＹ５ｂは、診断回
路１０の診断解除５ＷＧ１のＯＲに接続されている。接
点ＲＹ５ｂの開状態は診断解除ＳＷの６１のＯＦＦ状態
と同じであるので（また接点ＲＹ５ｂの閉状態は、診断
解除ＳＷの６１のＯＮ状態と同じである。）通常は診断
が続行される。The output of signal processing circuits RLI to RL4 is connected to relay RYI-R.
Received by Y4, its contacts RY1a-RY4a and relay R
Y5 and its contact RY5b constitute a diagnostic canceling means 20. (Contact RY1 of relays RYI to RY4
a=RY4a is open when not energized and closed when energized, and contact RY5b of relay RY5 is a contact that is closed when not energized and open when energized. ) The diagnosis cancellation determination means 20 uses RYla"RY4a to
out of 4 constitutes logic means. Since the signal processing circuit RLI outputs the normal logic II II I+ and the abnormal logic It OI+ (control signal), it normally outputs the logic "1" and the relays RYI to RY4 are in an excited state. At this time, the contacts RY1a"-RY4a are closed, and the relay RY5 is supplied with power and becomes energized. Therefore, the contact RY5b is opened. This contact RY5b is connected to the OR of the diagnostic release 5WG1 of the diagnostic circuit 10. Since the open state of the contact RY5b is the same as the OFF state of the diagnosis cancellation SW 61 (and the closed state of the contact RY5b is the same as the ON state of the diagnosis cancellation SW 61), the diagnosis is normally continued.

この診断解除判定手段２０の動作内容について詳細に説
明する。The operation of this diagnostic cancellation determination means 20 will be explained in detail.

先に述べた様に診断解除判定手段２０は、接点ＲＹ１ａ
−ＲＹ４ａにより２　ｏｕｔ　ｏｆ　４論手段を構成し
ている。リレーＲＹＩ〜ＲＹ４は通常励磁であるためそ
の接点ＲＹ１ａ−ＲＹ４ａは閉となり、ＲＹ５が励磁さ
れ、接点ＲＹ５ｂは開で、診断回路１０へ非診断解除指
令信号を出力している。As mentioned earlier, the diagnostic cancellation determination means 20 uses the contact RY1a
-RY4a constitutes a 2 out of 4 theory means. Since relays RYI to RY4 are normally energized, their contacts RY1a to RY4a are closed, RY5 is energized, and contact RY5b is open, outputting a non-diagnosis cancellation command signal to the diagnostic circuit 10.

この状態で、診断開始５ＷＦＩが押されて、信号処理回
路ＲＬ１の診断を開始した場合を考える。Consider a case where diagnosis start 5WFI is pressed in this state to start diagnosis of the signal processing circuit RL1.

まず、全系統の信号処理回路ＲＬ１〜ＲＬ４が正常で、
制御対象へ制御信号を出力していない場合（論理″１”
出力）、リレーＲＹＩ〜ＲＹ４は励磁で、その接点ＲＹ
１ａ＝ＲＹ４ａは閉となり、リレーＲＹ５に電源が供給
され、接点ＲＹ５ｂは開のままなので、診断回路１０に
非診断解除指令信号が出力され、診断は続行される。First, the signal processing circuits RL1 to RL4 of all systems are normal.
When the control signal is not output to the controlled object (logic "1"
output), relays RYI to RY4 are energized, and their contacts RY
1a=RY4a is closed, power is supplied to relay RY5, and contact RY5b remains open, so a non-diagnosis cancellation command signal is output to the diagnostic circuit 10, and the diagnosis continues.

次に信号処理回路ＲＬＩの診断中に信号処理回路ＲＬ２
から制御信号（論理ＬＬ　ＯＩＩ　）が出力された場合
、診断解除判定手段２０のリレーＲＹ２が無励磁となり
接点がＯＦＦとなる。しかし、リレーＲＹＩ、ＲＹ３．
ＲＹ４が励磁しているため、リレーＲＹ５は励磁状態で
あり接点ＲＹ５ｂは開で非診断解除指令信号を診断回路
１〇八出力する。Next, during diagnosis of the signal processing circuit RLI, the signal processing circuit RL2
When a control signal (logic LL OII ) is output from the relay RY2 of the diagnostic cancellation determination means 20, the relay RY2 is de-energized and the contact is turned OFF. However, relays RYI, RY3.
Since RY4 is energized, relay RY5 is energized and contact RY5b is open to output a non-diagnosis cancellation command signal to diagnostic circuit 108.

その結果、信号処理回路ＲＬＩの診断は続行される。As a result, diagnosis of the signal processing circuit RLI continues.

さらに信号処理回路ＲＬＩの診断中に信号処理回路のＲ
Ｌ２．ＲＬ３から制御信号（論理ＩＩ　ＯＩＩ　）が出
力された場合、診断解除判定手段２０のリレーＲＹ２．
ＲＹ３が無励磁となり接点ＲＹ２ａ。Furthermore, during diagnosis of the signal processing circuit RLI,
L2. When the control signal (logic II OII) is output from RL3, relay RY2.
RY3 becomes de-energized and contacts RY2a.

ＲＹ３ａがＯＦＦとなる。この２つのリレーＲＹ２、Ｒ
Ｙ３の接点がＯＦＦとなったことにより、リレーＲＹ５
は無励磁となり、接点ＲＹ５ｂが閉され、診断回路１０
へ診断解除指令信号が出力される。RY3a is turned off. These two relays RY2, R
Since the contact of Y3 is turned OFF, relay RY5
is de-energized, contact RY5b is closed, and the diagnostic circuit 10
A diagnosis cancellation command signal is output to.

その結果、信号処理回路ＲＬＩの診断が解除され、テス
ト状態切換指令信号が断となり、信号切換手段Ｓ１０、
〜Ｓ、、。の入力がテスト信号側から信号比較回路ＤＥ
Ｉ〜ＤＥ４の出力信号側に切換えられ、又信号切換手段
ＳＷ１の入力が固定信号（論理ｒｒ　１　ｎ　）側から
、１／Ｎ論理手段Ｍ１の出力信号側に切換えられる。As a result, the diagnosis of the signal processing circuit RLI is canceled, the test state switching command signal is disconnected, and the signal switching means S10,
~S... input from the test signal side to the signal comparison circuit DE
I to DE4 are switched to the output signal side, and the input of the signal switching means SW1 is switched from the fixed signal (logic rr 1 n ) side to the output signal side of the 1/N logic means M1.

これにより、信号処理回路ＲＬＩは、信号比較回路ＤＥ
Ｉ〜ＤＥ４のトリップ指令信号の入力が可能となり、２
ｏｕｔ　ｏｆ　４論理手段Ｌ　ｚ　＋　ｘ　〜Ｌ　１＋
　ｎ　＋１／Ｎ論理手段Ｍ□が動作し、出方論理手段を
介し制御対象へ制御信号（論理ＩＩ　Ｏ１１）が出力さ
れる。As a result, the signal processing circuit RLI is controlled by the signal comparison circuit DE
It becomes possible to input trip command signals of I to DE4, and 2
out of 4 logic means L z + x ~ L 1+
n+1/N logic means M□ operates, and a control signal (logic II O11) is output to the controlled object via the output logic means.

次に、信号処理回路ＲＬＩの診断中に信号処理回路のＲ
Ｌ２．ＲＬ３．ＲＬ４がら制御信号（論理ＩＩ　ＯＩＩ
　）が出力された場合、診断解除判定手段２０のリレー
ＲＹ２．ＲＹ３．ＲＹ４が無励磁となり接点がＯＦＦと
なる。これによりリレーＲＹ５も無励磁となり、接点が
ＯＮされ、診断回路１０へ診断解除判定信号が出力され
、前記載例と同じように、診断が解除され、信号処理回
路ＲＬＩより制御信号（論理ＩＩ　ＯＩＩ　）が出力論
理手段３０を介し制御対象へ出力される。Next, during diagnosis of the signal processing circuit RLI,
L2. RL3. Control signal from RL4 (Logic II OII
) is output, relay RY2. of the diagnosis cancellation determination means 20 is output. RY3. RY4 is de-energized and the contact is turned OFF. As a result, relay RY5 is also de-energized, the contact is turned ON, and a diagnosis cancellation determination signal is output to the diagnostic circuit 10. As in the above example, the diagnosis is canceled, and the signal processing circuit RLI outputs the control signal (Logic II OII ) is output to the controlled object via the output logic means 30.

以上の例からもわかるように、任意の信号処理回路ＲＬ
ｎの診断中において、他の信号処理回路の制御信号が２
つ以上出力された場合に前記のような診断解除判定手段
の働きにより１診断を解除し１診断中だった信号処理回
路ＲＬｎも、他系に追従し制御信号を出力論理手段３０
を介し制御対象へ出力される。As can be seen from the above examples, any signal processing circuit RL
While diagnosing n, the control signals of other signal processing circuits are
If more than one signal is output, one diagnosis is canceled by the function of the diagnosis cancellation determination means as described above, and the signal processing circuit RLn which was in the middle of one diagnosis also follows the other system and outputs a control signal logic means 30.
is output to the controlled object via.

第４図は、本発明の別の実施例である。前の実施例は、
信号処理回路ＲＬＩ〜ＲＬ４の出力段にリレーを設け、
その接点により診断解除判定手段２０を構成していたが
、この実施例は、信号比較回路ＤＥＩ〜ＤＥ４の出力段
にリレーを設け、その接点により診断解除判定手段２０
を構成している。FIG. 4 is another embodiment of the invention. The previous example is
A relay is provided at the output stage of the signal processing circuits RLI to RL4,
The contact points constituted the diagnostic cancellation determination means 20, but in this embodiment, a relay is provided at the output stage of the signal comparison circuits DEI to DE4, and the contact points constitute the diagnostic cancellation determination means 20.
It consists of

この第４図の実施例の診断解除判定手段２０の構成を第
５図に示す。The configuration of the diagnostic release determining means 20 of the embodiment shown in FIG. 4 is shown in FIG.

診断解除判定手段２０は、基本的に第３図と同じである
が、センサーの数だけリレーが必要となる。この例の任
意の信号処理回路ＲＬｎの診断中における診断解除判定
手段２ｏの動作を説明する。The diagnostic cancellation determination means 20 is basically the same as that shown in FIG. 3, but requires as many relays as the number of sensors. The operation of the diagnosis cancellation determination means 2o during diagnosis of an arbitrary signal processing circuit RLn in this example will be explained.

信号比較回路ＤＥＩ〜ＤＥ４がＩ・リップ指令信号を出
力していない場合、（論理ＩＩ　Ｉ　ＩＩを出力してい
る場合）、診断解除判定手段２ｏのＲＹＩＩ〜ＲＹ４　
ｎは励磁状態であり、各リレーの接点は閉となるため、
リレーＲＹ１５〜ＲＹ４５は励磁で接点ＲＹ　１５　ｂ
−ＲＹ４５　ｂは開で、診断回路１０に診断解除指令信
号は出方されないので、診断は続行される。If the signal comparison circuits DEI to DE4 are not outputting the I/rip command signal (if they are outputting logic II II II), RYII to RY4 of the diagnostic cancellation determination means 2o
Since n is in the excited state and the contacts of each relay are closed,
Relays RY15 to RY45 are energized and contact RY15 b
-RY45b is open and no diagnosis cancellation command signal is output to the diagnostic circuit 10, so the diagnosis continues.

次に任意の信号処理回路ＲＬｎの診断中、■系統の信号
比較回路ＤＥＬから１−リップ指令信号（論理ＩＩ　Ｏ
ＩＩ　）が出力された場合の診断解除判定手段の処理に
ついて説明する。信号比較回路ＤＥＬからトリップ指令
信号が出方されたことによりリレーＲＹＩＩ〜ＲＹ１ｎ
が無励磁となり、その接点ＲＹ１１ａ〜ＲＹ１ｎａが開
となるが、その他のリレーＲＹ２１〜ＲＹ４ｎが励磁し
ているので、リレーＲＹ１５〜ＲＹ４５は励磁のままで
、その接点は開のため、診断回路１０に診断解除指令信
号は出力されないので、信号処理回路ＲＬｎの診断は続
行される。Next, while diagnosing any signal processing circuit RLn, a 1-rip command signal (logic II O
The processing of the diagnostic cancellation determination means when II) is output will be explained. When the trip command signal is output from the signal comparison circuit DEL, relays RYII to RY1n
is de-energized and its contacts RY11a to RY1na are opened, but since the other relays RY21 to RY4n are energized, relays RY15 to RY45 remain energized and their contacts are open, so the diagnostic circuit 10 Since the diagnosis cancellation command signal is not output, the diagnosis of the signal processing circuit RLn continues.

次に２系統の信号比較回路ＤＥＬ、ＤＥ２からトリップ
指令信号が出力された場合について説明する。Next, a case where trip command signals are output from two signal comparison circuits DEL and DE2 will be described.

信号比較回路ＤＥＬ、ＤＥ２からトリップ指令信号が出
力されたことにより、リレーＲＹＩＩ〜ＲＹ２ｎが無励
磁となり、その接点ＲＹ１１ａへＲＹ２ｎａが開となる
ため、リレーＲＹ□５〜ＲＹ４゜が無励磁となり、その
接点ＲＹ１ｓＧ−ＲＹ４５Ｇが開となるので、診断回路
１０に診断解除指令信号が出力されることにより、信号
処理回路ＲＬｎの診断は解除される。As the trip command signal is output from the signal comparison circuits DEL and DE2, relays RYII to RY2n become de-energized, and RY2na to its contact RY11a becomes open, so relays RY□5 to RY4° become de-energized and their Since the contacts RY1sG to RY45G are opened, a diagnosis cancellation command signal is output to the diagnostic circuit 10, thereby canceling the diagnosis of the signal processing circuit RLn.

３系統の信号比較回路ＤＥＩ〜ＤＥ３、及び４系統の信
号比較回路ＤＥＩ〜ＤＥ４より、トリップ指令信号が出
力された場合ｄ、前記のように、診断解除判定手段２０
１〜２０ｎより診断回路１０へ診断解除指令信号が出力
され信号処理回路ＲＬｎの診断は解除される。When the trip command signal is output from the three signal comparison circuits DEI to DE3 and the four signal comparison circuits DEI to DE4, the diagnosis cancellation determination means 20 as described above.
1 to 20n output a diagnosis cancellation command signal to the diagnosis circuit 10, and the diagnosis of the signal processing circuit RLn is canceled.

診断解除判定手段（第３図）の他の実施例を第６図に示
す。Another embodiment of the diagnostic cancellation determination means (FIG. 3) is shown in FIG.

この例は、診断回路１０がマイコンシステム及び入出力
回路より構成される場合の例である。This example is an example in which the diagnostic circuit 10 is composed of a microcomputer system and an input/output circuit.

第３図の診断解除判定手段２０の２ｏｕｔ　ｏｆ　４論
理手段が、リレーにより構成されているのに対し、この
例は、ソフトウェアにより構成されている。While the 2 out of 4 logic means of the diagnostic cancellation determination means 20 in FIG. 3 is constituted by a relay, this example is constituted by software.

次にソフトウェアによる診断解除判定手段２０の処理内
容について説明する。Next, the processing contents of the software-based diagnosis cancellation determination means 20 will be explained.

信号処理回路ＲＬＩが診断中であり、他の信号処理回路
ＲＬ２〜ＲＬ４が通常値（論理Ｉｔ　１．　ｕ　）を出
力している場合リレーＲＹＩ〜ＲＹ４は励磁しているた
め、その接点ＲＹ１ａ−ＲＹ４ａは閉となり、診断回路
１０の入力回路に論理ＩＩ　Ｉ　ＩＩが出力され、ソフ
トウェアによる診断解除判定手段２０　（２ｏｕｔ　ｏ
ｆ　４論理手段）に入力される。２ｏｕｔ　ｏｆ　４論
理手段は、４つの入力信号が論理″１″′のため、論理
ｔＬ　Ｉ　ＩＩを出力し、この信号は、診断解除ｓｗの
入力信号と論理積により、論理ＪＪＩＩＣ非診断解除信
号）を診断ソフトウェアに出力され診断を続行する。When the signal processing circuit RLI is being diagnosed and the other signal processing circuits RL2 to RL4 are outputting normal values (logic It1.u), the relays RYI to RY4 are energized, so their contacts RY1a to RY4a is closed, logic II II II is output to the input circuit of the diagnostic circuit 10, and the software-based diagnostic cancellation determination means 20 (2 out
f 4 logic means). 2 out of 4 The logic means outputs the logic tL I II because the four input signals are logic "1", and this signal is ANDed with the input signal of the diagnosis release sw to become the logic JJIIC non-diagnosis release signal) will be output to the diagnostic software to continue diagnosis.

次に信号処理回路ＲＬＩの診断中に信号処理回路ＲＬ２
より制御信号（論理ＬＬ　ＯＩＩ　）が出力された場合
、リレーＲＹ２が無励磁となり、接点ＲＹ２ａが開とな
り、２　ｏｕｔ　ｏｆ　４論理手段に論理Ｉ′ＯＩＩが
入力されるが、他の３つの入力信号が論理ＩＩ　Ｉ　Ｉ
Ｉのため診断解除判定手段２０　（２ｏｕｔ　ｏｆ４論
理手段）は論理パ１″′を出力するので、前記例と同じ
ように、診断は続行される。Next, during diagnosis of the signal processing circuit RLI, the signal processing circuit RL2
When the control signal (logic LL OII ) is output from the relay RY2, the relay RY2 is de-energized, the contact RY2a is opened, and the logic I'OII is input to the 2 out of 4 logic means, but the other three input signals is logic II I I
Because of I, the diagnosis cancellation determination means 20 (2 out of 4 logic means) outputs a logic value of 1'', so the diagnosis is continued in the same way as in the previous example.

次に信号処理回路ＲＬＩの論断中に、信号処理回路ＲＬ
２．ＲＬ３より制御信号（論理１１０　ＩＩ　）が出力
された場合、リレーＲＹ２．ＲＹ３が無励磁となり、接
点ＲＹ　２　ａ　、　ＲＹ　３　ａが開となり、入出力
回路を介し、診断解除判定手段２０（２ｏｕｔｏｆ　４
論理手段）に論理４１０７１が入力される。４つの入力
信号のうち２つの入力信号が論理″０′″のため２　ｏ
ｕｔ　ｏｆ　４論理手段は、論理ＩＩ　Ｏ７１を出力１
となり、診断解除ＳＷの信号と論理積されることにより
、論理ｔｒｏｌ＋（診断解除指令信号）を診断解除ソフ
トウェアに出力され、信号処理回路ＲＬＩの診断は解除
される。Next, during the logic of the signal processing circuit RLI, the signal processing circuit RL
2. When a control signal (logic 110 II) is output from RL3, relay RY2. RY3 is de-energized, contacts RY2a and RY3a are opened, and the diagnosis cancellation determination means 20 (2outof4
Logic 41071 is input to the logic means). 2 o because 2 of the 4 input signals are logic "0"
ut of 4 logic means outputs logic II O71 1
By performing a logical product with the signal of the diagnosis cancellation SW, a logic trol+ (diagnosis cancellation command signal) is output to the diagnosis cancellation software, and the diagnosis of the signal processing circuit RLI is canceled.

信号処理回路ＲＬＩの診断中、信号処理回路ＲＬ−ＲＬ
４から制御信号（論理ＬＬ　ＯＩＩ　）が出力された場
合についての説明は省酩するが、前記例と同じように、
診断は解除される。During diagnosis of signal processing circuit RLI, signal processing circuit RL-RL
The explanation of the case where the control signal (logic LL OII ) is output from 4 will be omitted, but as in the previous example,
The diagnosis is lifted.

第７回は、本発明の他の実施例を示したものであり、こ
の例の診断解除判定手段２０を第１２図に示す。The seventh example shows another embodiment of the present invention, and the diagnostic cancellation determination means 20 of this example is shown in FIG.

第７図は、信号処理回路ＲＬＩを診断しており診断解除
判定手段は、診断していない信号処理回路ＲＬ２〜４の
出力信号を入力している。つまり、この例では、診断し
ていない信号処理回路ＲＬｎの３台の出力信号の組合せ
となるので、診断解除判定手段２０は４台必要となる。In FIG. 7, the signal processing circuit RLI is diagnosed, and the diagnosis cancellation determination means inputs the output signals of the signal processing circuits RL2 to RL4 that are not being diagnosed. That is, in this example, the output signals of three signal processing circuits RLn that are not diagnosed are combined, so four diagnostic cancellation determination means 20 are required.

各々の診断解除判定手段２０は、３台の信号処理回路Ｒ
Ｌｎの出力信号の２　ｏｕｔ　ｏｆ　３論理回路により
構成される。Each diagnostic cancellation determination means 20 includes three signal processing circuits R.
It is composed of 2 out of 3 logic circuits for output signals of Ln.

この例の診断解除判定手段２０１の動作について第１２
図において、信号処理回路ＲＬ４を診断中としたときの
動作について説明する。Regarding the operation of the diagnosis cancellation determination means 201 in this example, the 12th
In the figure, the operation when the signal processing circuit RL4 is being diagnosed will be described.

信号処理回路ＲＬＩ〜ＲＬ４の出力髪リレーＲＹＩ　〜
ＲＹ４で受け、その接点ＲＹ１ａ〜ＲＹ３ａと、リレー
ＲＹ５及びその接点ＲＹ５６ｎにより診断解除判定手段
２０１を構成している。Signal processing circuit RLI ~ Output hair relay RYI of RL4 ~
Diagnosis cancellation determination means 201 is constituted by the contacts RY1a to RY3a, the relay RY5, and the contact RY56n.

診断解除判定手段２０１は、ＲＹ１ａ＝ＲＹ３ａにより
２　ｏｕｔ　ｏｆ　３論理手段を構成している。The diagnostic cancellation determination means 201 constitutes a 2 out of 3 logic means with RY1a=RY3a.

通常はリレーＲＹＩ〜ＲＹ３は通常励磁であるため接点
ＲＹ１ａ＝ＲＹ３ａは閉となり、ＲＹ５が励磁され接点
ＲＹ５ｂは開で、診断回路１０〜、非診断解除指令信号
を出力し、信号処理回路ＲＬ４の診断を続行する。Normally, relays RYI to RY3 are normally energized, so contacts RY1a = RY3a are closed, RY5 is energized and contact RY5b is open, and the diagnostic circuit 10 to outputs a non-diagnosis cancellation command signal to diagnose the signal processing circuit RL4. Continue.

この状態で、信号処理回路ＲＬＩから制御信号（論理Ｉ
Ｉ　Ｏ＃　）で出力された場合、リレーＲＹＩが無励磁
となり接点ＲＹ□ａが開となるが、接点ＲＹ、ａ、ＲＹ
、ａが閉のため、リレーＲＹ５が励磁で、接点ＲＹ、ｂ
は開で診断は続行される。In this state, the control signal (logic I
IO#), relay RYI is de-energized and contact RY□a is open, but contacts RY, a, RY
, a is closed, so relay RY5 is energized and contacts RY, b
is open and diagnostics continues.

次に、信号処理回路ＲＬＩ、ＲＬ２から制御信号（論理
Ｉｔ　Ｏ１１）が出力された場合、リレーＲＹＩ。Next, when a control signal (logic It O11) is output from the signal processing circuits RLI and RL2, relay RYI.

ＲＹ２が無励磁となり、接点ＲＹ１ａ、ＲＹ、ａが開と
なるので、リレーＲＹ５が無励磁となり、接点ＲＹ５ｂ
が閉となり診断回路１０へ診断解除指令信号を出力し、
診断は解除される。Since RY2 is de-energized and contacts RY1a, RY, and a are open, relay RY5 is de-energized and contact RY5b is opened.
is closed and outputs a diagnostic cancellation command signal to the diagnostic circuit 10,
The diagnosis is lifted.

第８図〜第１１図は、信号比較回路ＤＥｎ、信号処理回
路ＲＬｎを診断した場合の診断回路１０、診断解除判定
手段２０の構成を示す。FIGS. 8 to 11 show the configurations of the diagnostic circuit 10 and the diagnostic cancellation determination means 20 when the signal comparison circuit DEn and the signal processing circuit RLn are diagnosed.

信号比較回路ＤＥｈの診断の方法は、テスト状態切換信
号ｎにより信号切換手段ＳＤ、、１〜ＳＤ１．。The method of diagnosing the signal comparison circuit DEh is that the signal switching means SD, , 1 to SD1 . .

をセンサの信号側からテスト信号側へ、また信号切換手
段ＳＥ□、□〜〜ＳＥ□、ｎは、トリップモジュールＴ
Ｍ１．□〜ＴＭ１．ｎの出力側から論理ＩＩ　Ｉ　Ｉ＋
の固定信号側に切換えトリップモジュールＴＭ１．１〜
ＴＭ□、。の入力にテスト信号を出力し、そのトリップ
モジュールの応答信号により、信号比較回路ＤＥｎの診
断を行う。from the signal side of the sensor to the test signal side, and the signal switching means SE□,□〜〜SE□,n are connected to the trip module T.
M1. □~TM1. Logic II I I+ from the output side of n
Switch trip module TM1.1 to the fixed signal side of
TM□,. A test signal is output to the input of the trip module, and the signal comparison circuit DEn is diagnosed based on the response signal of the trip module.

第８図の、診断解除判定手段２０の構成及び、その動作
は、第１図と同じである。The configuration and operation of the diagnostic cancellation determination means 20 in FIG. 8 are the same as in FIG. 1.

第９図の、診断解除判定手段２０の構成及び、その動作
は、第４図と同じである。The configuration and operation of the diagnostic cancellation determination means 20 in FIG. 9 are the same as in FIG. 4.

第１０図の、診断解除判定手段２０の構成及び、その動
作は、第７図と同じである。The configuration and operation of the diagnostic cancellation determination means 20 in FIG. 10 are the same as in FIG. 7.

第１１図は、第５図の診断解除判定手段２０のＲＹｌａ
”ＲＹ４ａからなる２　ｏｕｔ　ｏｆ　４論理手段をＲ
Ｙ　１　ａ　”ＲＹ　３　ａからなる２　ｏｕｔ　ｏｆ
　４論理手段におきかえたものである。FIG. 11 shows the RYla of the diagnosis cancellation determination means 20 in FIG.
``2 out of 4 logical means consisting of RY4a
2 out of consisting of Y 1 a ”RY 3 a
4 logical means.

〔発明の効果〕〔Effect of the invention〕

本発明によれば、安全保護系において各信号処理回路の
入力信号あるいは出力信号の値に応じて信号処理回路が
診断中であってもその診断を解除して該信号処理回路か
らの制御信号を制御対象へ出力できるようにしたことに
より、常時診断していながら、かつプラントの異常信号
に対し、即座に制御信号を制御対象に出力できるので、
原子炉安全保護系の高信頼化の効果がある。According to the present invention, in a safety protection system, even if a signal processing circuit is being diagnosed in accordance with the value of the input signal or output signal of each signal processing circuit, the diagnosis is canceled and the control signal from the signal processing circuit is released. By making it possible to output to the controlled object, it is possible to constantly diagnose and output control signals to the controlled object immediately in response to abnormal plant signals.
This has the effect of increasing the reliability of the reactor safety protection system.

【図面の簡単な説明】[Brief explanation of the drawing]

第１図は、本発明の実施例を示す図、第２図は従来例の
ブロック図で、第４図、第７図、第８図。 第９図、第１０図、第１１図は本発明の他の実施例を示
す図、第３図、第５図、第６図、第１２図は本発明の診
断解除判定手段の実施例を示す図、第１３図はマイコン
システムの基本構成図、第１４図は１診断回路をマイコ
ンシステムとした場合の診断方法のフローチャー１・で
ある。FIG. 1 is a diagram showing an embodiment of the present invention, and FIG. 2 is a block diagram of a conventional example, and FIGS. 4, 7, and 8. 9, 10, and 11 show other embodiments of the present invention, and FIGS. 3, 5, 6, and 12 show embodiments of the diagnostic cancellation determination means of the present invention. 13 is a basic configuration diagram of a microcomputer system, and FIG. 14 is a flowchart 1 of a diagnostic method when one diagnostic circuit is a microcomputer system.

Claims (1)

【特許請求の範囲】 １、冗長化したセンサからの出力信号を各々独立した信
号比較回路で取込み、該信号が規定値を越えた場合にト
リップ信号を複数の信号処理回路に出力し、該信号処理
回路でこれらのトリップ信号の多数決論理を組んで、そ
の出力信号と他の複数の信号処理回路の出力信号とを、
さらに多数決論理を組み、その出力信号で制御対象を駆
動させる安全保護系と、信号処理回路の入力段にテスト
信号を入力し、該信号処理回路の出力の応答信号により
該回路の診断を行う診断回路において、信号処理回路の
出力信号を常時監視し、該信号処理回路の出力信号の論
理判定結果に応じ診断を解除するか否かの判定を行う診
断解除判定手段を設けたことを特徴とする安全保護系の
診断装置。 ２、請求項第１項において、診断解除判定手段により、
全系統の信号処理回路の出力信号を常時監視し、該信号
処理回路の出力信号の論理判定結果により、診断を解除
すべきか否かを判定することを特徴とする安全保護系の
診断方法。 ３、請求項第１項の安全保護系及び診断回路において、
全系統の信号比較回路の出力信号を常時監視し、該信号
比較回路の出力信号の論理判定結果に応じ診断を解除す
るか否かの判定を行う診断解除判手段を設けたことを特
徴とする安全保護系の診断装置。 ４、請求項第１項の安全保護系及び診断回路において、
診断解除判定手段により全系統の信号比較回路の出力信
号を常時監視し、該信号比較回路の出力信号の論理判定
結果に応じ診断を解除するか否かの判定することを特徴
とする安全保護系の診断方法。 ５、請求項第１項の安全保護系及び診断回路において、
診断中以外の系統の信号処理回路の出力信号を常時監視
し、該信号処理回路の出力信号の論理判定結果に応じ診
断を解除するか否かの判定を行う診断解除判定手段を設
けたことを特徴とする安全保護系の診断装置。 ６、請求項第１項の安全保護系及び診断回路において、
診断解除判定手段により、診断中以外の系統の信号処理
回路の出力信号を常時監視し、該信号処理回路の出力信
号の論理判定結果に応じ診断を解除するか否かを判定す
ることを特徴とする安全保護系の診断方法。 ７、冗長化したセンサからの出力信号を各々独立した信
号比較回路で取込み、該信号が規定値を越えた場合にト
リップ信号を複数の信号処理回路に出力し、該回路でこ
れらのトリップ信号の多数決論理を組んで、その出力信
号と他の複数の信号処理回路の出力信号とを、さらに多
数決論理を組み、その出力信号で制御対象を駆動させる
安全保護系と信号処理回路及び信号比較回路の入力段に
テスト信号を入力し、各回路の出力の応答信号により診
断を行う診断回路において、診断中以外の系統の信号処
理回路の出力信号を常時監視し、該信号処理回路の出力
信号の論理判定結果に応じ診断を解除するか否かの判定
を行う診断解除判定手段を設けたことを特徴とする安全
保護系の診断装置。 ８、請求項第５項の安全保護系と診断回路において、診
断解除判定手段により診断中以外の系統の信号処理回路
の出力信号を常時監視し、該信号処理回路の出力信号の
論理判定結果に応じて診断を解除するか否かの判定を行
うことを特徴とする安全保護系の診断方法。 ９、請求項第５項の安全保護系と診断回路において、診
断中以外の系統の信号比較回路の出力信号を常時監視し
、該信号比較回路の出力信号の論理判定結果に応じて診
断を解除すべきか否かの判定を行う診断解除判定手段を
設けたことを特徴とする安全保護系の診断装置。 １０、請求項第５項の安全保護系と診断回路において、
診断解除判定手段により診断中以外の系統の信号比較回
路の出力信号を常時監視し、該信号比較回路の出力信号
の論理判定結果に応じて診断を解除すべきか否かの判定
を行うことを特徴とする安全保護系の診断方法。 １１、請求項第５項の安全保護系と診断回路において、
全系統の信号処理回路の出力信号を常時監視し該信号処
理回路の出力信号の論理判定結果に応じて診断を解除す
べきか否かの判定を行う診断解除判定手段を設けたこと
を特徴する安全保護系の診断装置。 １２、請求項第５項の安全保護系と診断回路において、
診断解除判定手段により全系統の信号処理回路の出力信
号を常時監視し該信号処理回路の出力信号の論理判定結
果に応じて診断を解除すべきか否かの判定を行うことを
特徴とする安全保護系の診断方法。 １３、請求項第１項または第１１項の診断解除判定手段
は、全系統の信号処理回路の出力信号が、２つ以上出力
されているか否かを判断することによって診断を解除す
るか否かを判定することを特徴とする安全保護系の診断
方法。 １４、請求項第３項の診断解除判定手段は、全系統の信
号比較回路の出力信号が２つ以上出力されているか否か
を判断することによって診断を解除するか否かを判定す
ることを特徴とする安全保護系診断方法。 １５、請求項第５項の４つの診断解除判定手段は、診断
中以外の系統の信号比較回路の出力信号が２つ以上出力
されているか否かを判断することによって診断を解除す
るか否かを判定することを特徴とする安全保護系の診断
方法。 １６、請求項第７項の診断解除判定手段は診断中でない
系統の信号処理回路の出力信号が２つ以上出力されてい
るか否かを判断することによって、診断を解除するか否
かを判定することを特徴とする安全保護系の診断方法。 １７、請求項第９項の診断解除判定手段は、診断中でな
い系統の信号比較回路の出力信号が２つ以上出力されて
いるか否かを判断することによって診断を解除するか否
かを判定することを特徴とする安全保護系の診断方法。 １８、請求項第１３項から１７項記載の診断解除判定手
段は、診断回路がマイコンシステムにより構成されてい
る場合、信号処理回路あるいは信号比較回路から出力が
２つ以上出力されているか判断するプログラムとを設け
、該プログラムにより診断を解除すべきか否かを判定す
ることを特徴とする安全保護系の診断方法。[Claims] 1. The output signals from the redundant sensors are taken in by independent signal comparison circuits, and when the signals exceed a specified value, a trip signal is output to a plurality of signal processing circuits, and the signals are A processing circuit creates majority logic for these trip signals, and outputs that output signal from the output signals of multiple other signal processing circuits.
Furthermore, there is a safety protection system that uses majority logic to drive the controlled object with its output signal, and a diagnosis system that inputs a test signal to the input stage of a signal processing circuit and diagnoses the circuit using the response signal output from the signal processing circuit. The circuit is characterized by being provided with a diagnosis cancellation determination means that constantly monitors the output signal of the signal processing circuit and determines whether or not to cancel the diagnosis according to the logical determination result of the output signal of the signal processing circuit. Safety protection system diagnostic equipment. 2. In claim 1, the diagnosis cancellation determination means:
A method for diagnosing a safety protection system, characterized in that output signals of signal processing circuits of all systems are constantly monitored, and it is determined whether or not diagnosis should be canceled based on a logical determination result of the output signals of the signal processing circuits. 3. In the safety protection system and diagnostic circuit according to claim 1,
The present invention is characterized in that it is provided with a diagnosis cancellation determination means that constantly monitors the output signals of the signal comparison circuits of all systems and determines whether or not to cancel the diagnosis according to the logical judgment result of the output signals of the signal comparison circuits. Safety protection system diagnostic equipment. 4. In the safety protection system and diagnostic circuit according to claim 1,
A safety protection system characterized in that a diagnosis cancellation determination means constantly monitors the output signals of the signal comparison circuits of all systems, and determines whether or not to cancel the diagnosis according to the logical judgment result of the output signals of the signal comparison circuits. diagnostic method. 5. In the safety protection system and diagnostic circuit according to claim 1,
Diagnosis cancellation determining means is provided which constantly monitors the output signals of signal processing circuits of systems other than those under diagnosis and determines whether or not to cancel the diagnosis based on the logical judgment result of the output signals of the signal processing circuits. A safety protection system diagnostic device with special features. 6. In the safety protection system and diagnostic circuit according to claim 1,
The diagnosis cancellation determination means constantly monitors the output signals of signal processing circuits of systems other than those under diagnosis, and determines whether or not to cancel the diagnosis according to the logical determination result of the output signals of the signal processing circuits. A method for diagnosing safety protection systems. 7. The output signals from the redundant sensors are taken in by independent signal comparison circuits, and when the signals exceed a specified value, a trip signal is output to multiple signal processing circuits, and the circuits process these trip signals. A safety protection system, a signal processing circuit, and a signal comparison circuit are constructed in which a majority logic is constructed, and the output signal of the output signal is combined with the output signals of a plurality of other signal processing circuits. In a diagnostic circuit that inputs a test signal to the input stage and performs diagnosis based on the response signal output from each circuit, the output signal of the signal processing circuit of the system other than the one being diagnosed is constantly monitored, and the logic of the output signal of the signal processing circuit is checked. A safety protection system diagnostic device, characterized in that it is provided with a diagnosis cancellation determination means for determining whether or not to cancel the diagnosis according to the determination result. 8. In the safety protection system and diagnostic circuit according to claim 5, the diagnostic cancellation determination means constantly monitors the output signal of the signal processing circuit of the system other than the system being diagnosed, and the logic determination result of the output signal of the signal processing circuit is A method for diagnosing a safety protection system, characterized in that a determination is made as to whether or not to cancel the diagnosis. 9. In the safety protection system and diagnostic circuit according to claim 5, the output signal of the signal comparison circuit of the system other than the system being diagnosed is constantly monitored, and the diagnosis is canceled according to the logical judgment result of the output signal of the signal comparison circuit. A diagnostic device for a safety protection system, characterized in that it is provided with diagnostic cancellation determination means for determining whether or not to cancel the diagnosis. 10. In the safety protection system and diagnostic circuit according to claim 5,
The diagnosis cancellation determination means constantly monitors the output signal of the signal comparison circuit of the system other than the system being diagnosed, and determines whether or not the diagnosis should be canceled according to the logical judgment result of the output signal of the signal comparison circuit. A method for diagnosing safety protection systems. 11. In the safety protection system and diagnostic circuit according to claim 5,
A safety device characterized by being provided with a diagnosis cancellation determination means that constantly monitors the output signals of the signal processing circuits of the entire system and determines whether or not the diagnosis should be canceled according to the logical judgment result of the output signals of the signal processing circuits. Protection system diagnostic equipment. 12. In the safety protection system and diagnostic circuit according to claim 5,
Safety protection characterized by constantly monitoring the output signals of the signal processing circuits of all systems by the diagnosis cancellation determination means and determining whether or not the diagnosis should be canceled according to the logical judgment result of the output signals of the signal processing circuits. How to diagnose the system. 13. The diagnostic cancellation determining means according to claim 1 or 11 determines whether or not to cancel the diagnosis by determining whether two or more output signals from the signal processing circuits of all systems are output. A method for diagnosing a safety protection system, characterized by determining. 14. The diagnostic cancellation determination means of claim 3 determines whether or not to cancel the diagnosis by determining whether two or more output signals from the signal comparison circuits of all systems are output. Characteristic safety protection system diagnostic method. 15. The four diagnosis cancellation determination means of claim 5 determine whether or not the diagnosis is canceled by determining whether or not two or more output signals of the signal comparison circuit of the system other than the system being diagnosed are output. A method for diagnosing a safety protection system, characterized by determining. 16. The diagnostic cancellation determining means according to claim 7 determines whether or not to cancel the diagnosis by determining whether two or more output signals of the signal processing circuit of the system not being diagnosed are output. A method for diagnosing a safety protection system. 17. The diagnostic cancellation determination means of claim 9 determines whether or not to cancel the diagnosis by determining whether two or more output signals of the signal comparison circuit of the system not being diagnosed are output. A method for diagnosing a safety protection system. 18. The diagnostic cancellation determination means according to claims 13 to 17 is a program that determines whether two or more outputs are output from a signal processing circuit or a signal comparison circuit when the diagnostic circuit is configured by a microcomputer system. 1. A method for diagnosing a safety protection system, characterized in that the program includes the step of determining whether or not the diagnosis should be canceled by the program.
JP2328985A 1990-11-30 1990-11-30 Diagonosis of safety protection system and device thereof Pending JPH04203999A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2328985A JPH04203999A (en) 1990-11-30 1990-11-30 Diagonosis of safety protection system and device thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
JP2328985A JPH04203999A (en) 1990-11-30 1990-11-30 Diagonosis of safety protection system and device thereof

Publications (1)

Publication Number Publication Date
JPH04203999A true JPH04203999A (en) 1992-07-24

Family

ID=18216316

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2328985A Pending JPH04203999A (en) 1990-11-30 1990-11-30 Diagonosis of safety protection system and device thereof

Country Status (1)

Country Link
JP (1) JPH04203999A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010066033A (en) * 2008-09-09 2010-03-25 Sony Corp Light quantity detecting apparatus and imaging apparatus

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010066033A (en) * 2008-09-09 2010-03-25 Sony Corp Light quantity detecting apparatus and imaging apparatus
JP4650542B2 (en) * 2008-09-09 2011-03-16 ソニー株式会社 Light amount detection device and imaging device
US8279326B2 (en) 2008-09-09 2012-10-02 Sony Corporation Light quantity detecting apparatus and imaging apparatus

Similar Documents

Publication Publication Date Title
US5287264A (en) Multicontroller apparatus, multicontroller system, nuclear reactor protection system, inverter control system and diagnostic device
JPH04203999A (en) Diagonosis of safety protection system and device thereof
WO2011055434A1 (en) Elevator control device
KR950704142A (en) ANTI-LOCK CONTROLLER
JPS6015380A (en) Remote monitor device for elevator
JP2609694B2 (en) Multiplexing control device, reactor safety protection system, inverter control system and diagnostic device
JP3346969B2 (en) Elevator door opening control device
JPH08149682A (en) Digital relay
JPS63140305A (en) Control protecting device
JP2546386B2 (en) Redundant device
JPH01255427A (en) Digital protective relay
JP2554268B2 (en) Computer distributed system
JPH06305650A (en) Failure recovery device for elevator
JPH0674037B2 (en) Break control device for electric vehicles
JP2907930B2 (en) Nuclear power plant safety protection equipment
JPS6326065B2 (en)
JPH06255926A (en) Watch device for elevator balance device
WO2019171423A1 (en) Elevator control device and elevator control method
JPH05158742A (en) Runaway monitoring circuit for plural microcomputers
JPH05158743A (en) Runaway monitoring circuit for plural microcomputers
JPS62274858A (en) Fault detection system
JPH04333963A (en) Fault processing system
JPS62206602A (en) Controller containing multiplexed detector
JPS61184603A (en) Process display device
JPH05257727A (en) Transmission line switching control method