JPH0540501A - Plant operating device - Google Patents

Abstract

PURPOSE:To prevent an operator other than the one permitted beforehand from operating a plant equipment. CONSTITUTION:A personal data input means 15 inputs the plant machine 8 which every operator is permitted beforehand to operate by a data input part 18 as personal data. A personal data registration processing part 17 registers the personal data as a personal equipment operation information data base, and retrieves and takes out personal equipment operation information corresponding to the operator identified by a person identifying and specifying means 16. An equipment operation information processing output means 14 decides whether the operator is the permitted one or not on the basis of the personal equipment operation information and the operation request of the operator, and at the time of the permitted operator, in outputs an operating instruction to the plant equipment 8.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a plant operating device for operating plant equipment using a display input device such as a CRT.

[0002]

2. Description of the Related Art In recent years, in large-scale and advanced plants such as nuclear power plants, many intelligent display input devices such as CRTs have been introduced to monitor the plants and operate the equipment.

This display input device generally switches display screens in sequence according to the operating state of the plant and the timing of equipment operation, and operates the plant equipment according to the display screen. As the plant operation device of this type, a device in which the display device and the operation device are integrated and a device in which the display device and the operation device are separately linked are widely used.

FIG. 13 shows an example of a conventional plant operating device.

Here, a plant operating device will be described in which monitoring and operation can be performed on the same screen of the display device, the operation of the plant is easy, and space can be saved.

The plant operation unit 1 is composed of a process input means 2, an operation information display means 3, an operation input means 4, an operation information processing means 5 and an operation output means 6.

The plant input unit 2 of the plant operation unit 1 is connected to the plant equipment 8 and the control device 9 via the process input unit 7, while the operation output unit 6 is controlled via the process output unit 10. It is connected to the device 9.

The operation information display means 3 has a display device 1
1 is connected, and the operation input means 4 is connected to the input device 12.

With the above configuration, the process input means 2 inputs the plant information of the control device 9 and the plant equipment 8 via the process input section 7. The plant information input by the process input unit 2 is displayed and processed by the operation information display unit 3, and the processed plant information is displayed on the display device 11.

The input device 12 detects the position touched by the operator on the screen of the display device 11 by using, for example, a touch input device. The position detected by the input device 12 is output to the operation input means 4. Operation information processing means 5
Processes the operation request information based on the position touched by the operator from the operation input means 4. Operation output means 6
Inputs the operation request information processed by the operation information processing unit 5, and outputs an operation command to the control device 9 via the process output unit 10.

The control device 9 inputs an operation command, performs control processing, and outputs a control signal to the plant equipment 8.

In such a plant operating device, the operator monitors the plant equipment 8 on the display screen of the display device 11, selects the equipment to be operated of the plant equipment 8 using the input device 12, and executes the operation. .. In this case, for the display device 11, for example, an appropriate screen is automatically or manually selected from among several tens to several hundreds of screens prepared in advance. The operator can operate many devices easily because he / she operates the device to be operated based on the selected display screen.

As described above, the recent plant operating device is
The monitoring information and operation information are integrated to make the operation panel compact and facilitate plant operation.

[0014]

However, the above-mentioned plant operating device has the following problems.

For example, in the above-described plant operation device, although the operation is simple, one display device 11 and one input device 12 have various functions. For this reason, there is a possibility that a visually similar operation may be performed by selecting a completely different plant device 8. In addition, there are some operations that can be performed by only a specific expert, and some operations that can be performed by only a specific person to operate the specific equipment of the plant equipment 8.

Even in such a case, the plant operating device described above was capable of operating all plant equipment 8 by any operator. In addition, it was not recorded who performed what kind of operation. For this reason, regarding the operation of the plant equipment 8, there has been a demand to prevent operations by operators other than those who are allowed to operate in advance. further,
It was necessary to record the content of the operator's operations and manage the responsibility and operation history.

For example, during maintenance work on the plant equipment 8 (for example, disassembling / inspecting valves / pumps, etc.), during testing, or at the time of starting or stopping, operations other than the operator who is permitted in advance are prohibited. It Further, it is necessary to limit the equipment to be operated according to the degree of skill of the operator to prevent accidents.

In order to solve this, conventionally, an operation prohibition tag or the like has been attached to the switch so as not to be operated.
Inadvertent operation was sometimes performed due to carelessness.

Further, conventionally, there is a device for preventing an inadvertent operation by using a release button (Japanese Patent Laid-Open No. 1-152525).
01). However, this also does not prevent the erroneous operation by dividing the operator who permits the operation and the person who prohibits the operation for each plant equipment, and cannot meet the above-mentioned request.

Therefore, an object of the present invention is to provide a plant operating device having a management function capable of preventing an operation by an operator other than an operation-targeted device which is permitted in advance.

[0021]

The present invention inputs plant information from plant equipment and a control device, displays this plant information on a display device, and based on the plant information displayed on this display device. In the plant operation device that inputs the operation request information requested by the operator from the input device and outputs the operation command to the plant equipment through the control device according to the operation request information, the operator who inputs the operation request information is identified. Personal identification specifying means for inputting information for operating the personal equipment, personal data input means for previously inputting personal data of the operator for the plant equipment permitted to be operated for each operator, and the personal data input means for inputting the personal data. The personal data is registered as a personal device operation information database, and the personal identification specifying means is used. Personal data registration processing means for retrieving personal equipment operation information corresponding to the identified information from the personal equipment operation information database, the personal equipment operation information retrieved by the personal data registration processing means, and the operator's request Equipment operation information output means for determining whether or not the operator of the plant equipment is permitted to operate based on the operation request information, and outputting the operation command to the plant equipment if the operator is the authorized operator. Is provided.

[0022]

With the above-mentioned configuration, the personal equipment operation information database is data for each operator, which distinguishes the plant equipment operation authorized person from those who are not authorized. When the operator requests the operation of the plant equipment from the input device, the operator is identified, the personal equipment operation information database regarding the specified operator is searched, and the personal equipment operation information is retrieved. Based on the personal device operation information and the operation request information requested by the operator, it is determined whether or not the operation is permitted. As a result, when it is determined that the operation is permitted, the operation command is output to the plant equipment. If it is determined that the person is not the operation permitter, the operation instruction output to the plant equipment is blocked. Therefore, the operation of an operator other than the authorized person is blocked, so that the plant equipment can be operated safely and reliably.

[0023]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram of a plant operating device showing a first embodiment of the present invention. 13 that are the same as those in FIG. 13 indicate the same or corresponding portions. 13 is different from FIG. 13 in that instead of the operation information processing means 5 and the operation output means 6 of the plant operation unit 1, the equipment operation information processing output means 14
On the other hand, the personal data input means 15, the personal identification specifying means 16, and the personal data registration processing means 17 are additionally provided.

Further, the personal data input means 15 is connected to the data input section 18, while the personal identification specifying means 16 is connected.
13 is different from FIG. 13 in that a personal identification specifying unit 20 for identifying an individual is connected via the personal identification device 19.

The equipment operation information processing output means 14 determines whether or not the plant equipment 8 can be operated based on the personal equipment operation information from the personal data registration processing means 17 and the operation request information from the operation input means 4. ..

The personal data input means 15 registers the device operation information on the individual input from the data input section 18 in the personal data registration processing means 17 as a personal device operation information database.

The personal identification specifying means 16 is the personal identification device 1
The individual identification information from 9 is input via the individual identification specifying unit 20 to identify and specify the individual.

The personal data registration processing means 17 registers the personal equipment operation information as a personal equipment operation information database.

The data input section 18 causes the personal data input means 15 to input device operation information relating to an individual.

The personal identification device 19 outputs unique identification information for identifying an individual.

The personal identification specifying section 20 processes the identification information of the personal identification device 19 and outputs this information to the personal identification specifying means 16.

In the above structure, the operator has the personal identification device 19, and the identification information of the operator of the personal identification device 19 is input to the plant operation unit 1 via the personal identification specifying unit 20. The input identification information is input to the personal data registration processing means 17 by the personal identification specifying means 16.

On the other hand, in the personal data registration processing means 17,
The personal device operation information database is registered in advance by the data input unit 18. This personal equipment operation information database is registered separately for each operator and for each plant equipment 8 and those that are not qualified to operate. Further, the personal device operation information database has, for example, ID No.
It is possible to search for a device that is permitted to operate the plant device 8 with the key such as.

On the other hand, the process input means 2 outputs the plant information of the plant equipment 8 to the operation information display means 3 via the process input section 7. The operation information display means 3 displays the input plant information on the display device 11. The operator selects an operation target device based on the plant information displayed on the display device 11 and requests an operation. The operation input means 4 outputs the operation request information detected by the input device 12 to the device operation information processing output means 14. The device operation information processing output unit 14 extracts the personal device information of the operator who possesses the personal identification device 19 from the personal device operation information database, and permits the operation based on this information and the operation request information input by the operation input unit 4. It is determined whether the person is a person. As a result, when it is determined that the user is an operation-permitted person, an operation command is output to the process output unit 10. On the other hand, when it is determined that the person is not the operation permitter, the operation instruction is prevented from being output to the process output unit 10.

Next, this embodiment will be described in more detail with reference to FIG.

The same symbols as those in FIG. 1 indicate the same or corresponding portions. In this embodiment, the display device 11 and the input device 12
As the CRT 11a, the touch sensor 13a, and the touch input unit 12a, respectively, while the data input unit 1
8, a personal identification device 19, a personal identification specifying unit 20, a data input CRT keyboard 18a, an IC card 19
a, a non-contact type personal identification unit 20a. The device operation information processing output unit 14a includes a device operation information determination unit 21, an operation command creation unit 22, an operation command output unit 23, and an operation prohibition command unit 24.

Here, the device operation information determination means 21 determines whether or not the operation is prohibited based on the personal device operation information as the personal data and the operation request information input by the operation input means 4.

The operation command creating section 22 creates an operation command when the device operation information judging means 21 judges that the operation is possible.

The operation command output means 23 outputs the command from the operation command creating section 22 to the process output section 10.

When the device operation information determination means 21 determines that the operation is prohibited, the operation prohibition command section 24 creates an operation prohibition command and outputs this command to the operation information display means 3.

In the above configuration, first, the operator inputs personal equipment operation information as personal data and equipment-related data to the plant operation unit 1 in advance by using the data input CRT keyboard 18a as shown in FIG.

Specifically, first, a CRT for data input
The display screen of the attached keyboard 18a is a personal device operation information setting screen 31 as shown in FIG. On this display screen, the processing type is selected from the data input CRT keyboard 18a. In this case, "1" is input as a new input.
As a result, in the case of new input, the ID No. Is displayed as a number. At this time, until now, the ID No. If up to 10 are entered, the ID No. "11" is displayed,
When entering a completely new ID No. It is displayed as 1.

Then, in Roman letters, for example, "Har
Enter the name "a". Next, under the systematic name, “1” is sequentially input when the operation can be performed, and “0” is sequentially input when the operation cannot be performed.

In case of correction and deletion, almost the same operation is performed. In this example, the ID No. 32, NAME "Har
a ”, system RHR“ 1 ”, RCIC“ 0 ”, SGTS
"0" ... Is entered.

As a result, by the processing of the personal data registration processing means 17, the personal equipment operation information database 32 is created as shown in FIG. In this example, the ID No. Each name is composed of Name (for example, Aoki) and system name (for example, RHR) that can be operated, and is “1” when it can be operated and “0” when it cannot be operated.

A keyboard 1 with a CRT for data input
Device data as information about the device is input by 8a. As a result, the device database 3 constructed as shown in FIG. 6 by the processing of the personal data registration processing means 17.
3 is stored in the device operation information determination means 21. In this example, the system number and the operable device are stored for each system name. For example, in the strain name RHR, strain number E1
1. Equipment that can be operated F001A, ..., F013
B is stored.

Next, a case where the operator operates the plant equipment will be described with reference to FIG.

Here, the plant information of the plant equipment 8 is input to the operation information display means 3 by the process input means 2 via the process input section 7. The operator
The selection display screen 34 is selected as the operation target device as shown in FIG. 8 from the display screen prepared in advance. For example,
The operation information display means 3 displays a high pressure core spray system diagram of the nuclear reactor on the display screen of the CRT 11a.

First, the operator operates the touch input device 12
The operation request information is touch-input from a through the operation input means 4 (101). Although the operation request information by the touch input includes the selection of the device to be operated and the touch of the operation command, it is assumed here that the device to be operated as shown in FIG. 8 is selected.

Subsequently, it is determined whether or not the touch content is device selection, and it is determined whether or not there is personal data registered because the device selection is made (102) (10).
3).

The operator is a personal identification device, eg, FIG.
Carry an IC card 19a as shown in FIG. In this embodiment, as an example of the personal identification device and the personal identification specifying unit,
The non-contact type personal identification device 20a and the IC card 19a are used. When the operator makes an operation request from the touch sensor 13a, the operator who has requested the operation is identified, "OK" is displayed on the non-contact type personal identification section 20a, and the personal identification specifying means 16 causes the ID No. Is input to the personal data registration processing means 17.

In the personal data registration processing means 17, the ID No. The information is searched using the key. That is, the personal equipment operation information of the specified operator is sent to the equipment operation information determination means 21. According to the example of FIG. When set to 1, the operator is identified as "Aoki". And
The personal device operation information of the operator RHR “0” RCIC “1” SGTS “0” is retrieved and sent to the device operation information determination means 21.

Next, the device database is searched (1
04).

First, the display content of the device is identified from the touched operation request information, and the device number is identified from the display position. For example, the system number of the device is “E11”, and the device number. Is "F
If it is "001A", the equipment database as shown in FIG. 6 is searched using the operation request information "E11" and "F001A" as keys. Then, as a result, the touched device identifies a system called “RHR” (10
5). Next, information matching is performed based on the system information of this device and the personal device operation information from the personal data registration processing means 17 (106). Then, this result is output as "0" or "1".

For example, when the system name "RHR" shown in FIG. If 1 is "Aoki", "0" is output in the example shown in FIG. In addition, ID No. 3 "Ogawa
If it is "a", "1" is output. Then, it is determined whether the input is "0" or "1" by the following procedure (107).

As a result, when it is judged as "1", CR
At T11a, the operation command screen 35 is displayed in which "operation command", "off", and "on" are displayed as operation switches as shown in FIG. Then, when the operator touches the operation command with the touch sensor 13a, the operation command is input to the device operation information processing output means 14a via the operation input means 4 (10
1). Here, although the content of the touch is determined, since the operation command is touched, the operation command data is created based on the operation target and the operation content touched in the operation command creating unit 22 (109).

As a result, the operation command data is output to the process output section 10 via the operation command output means 23 (110).

On the other hand, when the device operation information determining means 21 determines "0" in step 107 or when it is determined in step 103 that there is no registered personal data, the operation is prohibited, that is, the operation is blocked ( 111). At this time, the operation prohibition command section 24 outputs an operation prohibition command to the operation information display means 3.

Then, the operation prohibition screen 36 as shown in FIG. 11 of the CRT 11a is displayed, the operation command switch is not displayed, and the message "operation is prohibited" is displayed. After that, it is in a state of waiting for a touch input from the next touch sensor 13a.

As described above, in this embodiment, the qualified person and the unqualified person who operate the plant equipment are separately registered for each operator as personal data. When the operator makes an operation request from the touch sensor, the operator is identified via the IC card possessed by the operator, and the individual ID
No. The key is used as a key to search the personal device operation information, and the device operation information that can be operated by the operator is output.
On the other hand, the device database is searched from the operation request information touched by the operator. As a result, the system of the touched device is specified. The device operation information processing means receives the personal device operation information and is touch-input by the touch sensor, and matches the system of the specified device. As a result, when the operation permission is determined, the operation command is output and the plant equipment is operated.

On the other hand, when the operation prohibition is determined, the operation prohibition command is output to prevent the operation of the plant equipment. Therefore, the operator does not operate a device other than the permitted plant device, and a safe and reliable operation of the plant device can be realized because an erroneous operation of the plant device is prevented. In particular, safety can be ensured during plant test runs and equipment tests.

Next, FIG. 12 shows the third embodiment of the present invention.
Will be described.

The difference from FIG. 1 is that the personal data input means 1
5, personal identification specifying means 16, personal data registration processing means 1
7, a data input unit 18, a personal identification device 19, and a personal identification specifying unit 20 instead of the storage medium 25 and the information reading unit 26.
It is a point equipped with and. In the first and second embodiments, the personal device operation information is registered in advance in the personal data registration processing means 17 as a database, but in the present embodiment, the personal device operation information is registered in the storage medium 25 in advance. The storage medium 25 uses, for example, an IC card, and the personal device operation information of the IC card is read by, for example, a card reader as the information reading unit 26. Device operation information processing means 14
Is input by this personal device operation information and input device,
Match the system of the specified device. As a result, when the operation permission is determined, the operation command is output and the plant equipment 8 is operated.

As described above, even if the operator's personal equipment operation information is registered in the IC card or the like, it is possible to prevent the operation of the plant equipment other than the operator who is permitted in advance.

The present invention is not limited to the above embodiment, but can be carried out as follows.

First, the IC for identifying the operator
Although the card is used, the present invention is not limited to this, and any means that can identify and identify the operator may be used. For example, a palm print reading means, a fingerprint reading means, a voiceprint reading means or the like may be used.

Secondly, in the above embodiment, the equipment such as pumps was operated, but the operation is not limited to the plant equipment in particular, and may be, for example, an automatic operation switch or a controller switch. The same can be applied to the same.

Thirdly, in the above-mentioned embodiment, the input / output of the plant equipment and the control device with respect to the plant operating device is the process input / output device. It can be applied exactly as in the embodiment.

Fourthly, the input device may be any device as long as it can identify the devices on the screen of the display device. For example, a pointing device such as a mouse or a light pen can be used in the same manner.

Fifth, the operation contents of the operator can be recorded and managed in the device operation information processing output means as an operation history.

[0072]

As described above, according to the present invention, it is possible to prevent an operation, which is performed by an operator who is permitted to operate in advance, from exceeding the operation target devices or an operation other than the operator. This ensures a reliable operation and enables safer and more reliable plant operation.

[Brief description of drawings]

FIG. 1 is a block configuration diagram of a plant operating device showing a first embodiment of the present invention.

FIG. 2 is a block configuration diagram of a plant operating device showing a second embodiment of the present invention.

FIG. 3 is an explanatory diagram showing a case of inputting data to a keyboard with a CRT for data input of the same apparatus.

FIG. 4 is an explanatory diagram showing a CRT display screen when data is input to a keyboard with a CRT for data input of the same apparatus.

FIG. 5 is an explanatory diagram showing an example of a personal device operation information database of the apparatus.

FIG. 6 is an explanatory diagram showing an example of a device database of the apparatus.

FIG. 7 is a flowchart showing a processing procedure of device operation information determination means of the same device.

FIG. 8 is an explanatory diagram showing an example of a CRT selection display screen of the apparatus.

FIG. 9 is an explanatory diagram showing an example of a personal identification device and a personal identification specifying unit of the same apparatus.

FIG. 10 is an explanatory diagram showing an example of a CRT operation command display screen of the apparatus.

FIG. 11 is an explanatory diagram showing an example of a CRT operation prohibition display screen of the apparatus.

FIG. 12 is a block configuration diagram of a plant operating device showing a third embodiment of the present invention.

FIG. 13 is a block configuration diagram of a plant operating device showing a conventional example.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Plant operation part 2 Process input means 3 Operation information display means 4 Operation input means 7 Process input part 8 Plant equipment 9 Control device 10 Process output part 11 Display device 12 Input device 14 Equipment operation information processing output means 15 Personal data input means 16 Personal identification specifying means 17 Personal data registration processing means 18 Data input section 19 Personal identification device 20 Personal identification specifying section

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Tetsuo Ishikawa 1 Toshiba-cho, Fuchu-shi, Tokyo Toshiba Corporation Fuchu factory inside

Claims (2)

[Claims] 1. Operation request information input by inputting plant information from plant equipment and a control device, displaying this plant information on a display device, and requesting an operator based on the plant information displayed on this display device. In the plant operation device for inputting the operation request information to the plant equipment through the control device according to the operation request information, the information for identifying the operator who inputs the operation request information from the input device. Personal identification specifying means for inputting, personal data input means for previously inputting the plant equipment permitted to be operated by each operator as personal data of the operator, and the personal data input by the personal data input means Registered as a device operation information database, and
Personal data registration processing means for searching the personal equipment operation information database for personal equipment operation information corresponding to the information identified by the personal identification specifying means; and the personal equipment operation searched by the personal data registration processing means. Based on the information and the operation request information requested by the operator, it is determined whether or not the operation of the plant equipment is a permitted operator, and if the operation is the permitted operator, the operation command is given to the plant equipment. A plant operation device comprising: a device operation information output means for outputting. 2. Operation request information input by inputting plant information from a plant device and a control device, displaying this plant information on a display device, and requesting an operator based on the plant information displayed on this display device. In the plant operation device for inputting the operation request information to the plant device via the control device by the operation request information and inputting the operation request information from the input device to the operator's personal device operation information. A storage medium registered in advance, an information reading unit for reading the personal identification operation information registered in the storage medium, the personal identification operation information read by the information reading unit, and the operation request information requested by the operator. It is determined whether the operator of the plant equipment is authorized based on the Plant operating apparatus characterized by comprising a device operation information output means for outputting the operation command to the plant equipment If the operation of the regulator.