JPH0670469A - System stabilizing apparatus - Google Patents

Abstract

PURPOSE:To keep a dual-system operation as possible when faults are created in terminal apparatuses, central apparatuses and/or transmission lines by a method wherein a system unstable state is detected and control for maintaining the stable supply of a power is performed. CONSTITUTION:The output changeover parts 10A and 10B of the central apparatuses of first and second systems of which a dual-system structure is composed receive the normal/fault judgment outputs of the central apparatuses and all the terminal apparatuses from both the automatic monitoring parts 6A and 6B of self system and the other system. Further, control operation results are inputted from both operating parts 4A and 4B. For instance if the first system central apparatus 9A and all the terminal apparatuses are normal and the second system central apparatus has a fault, therefore, the control operation results of the first system central apparatus 9A are supplied to a plurality of the terminal apparatuses of the first system from the first system central apparatus 9A only. With this constitution, a dual-system operation can be kept as possible.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a two-system system stabilizing device that detects a system instability due to a system accident or the like that has occurred in a power system and performs control for maintaining stable power supply.

[0002]

2. Description of the Related Art FIG. 7 shows the configuration of a system stabilizing device having a two-system configuration. Each of the system stabilizing devices 1A and 1B is composed of a central device 2A and 2B and a plurality of terminal devices 3A and 3B installed in a distant place. Central unit 2A, 2B
Executes the control calculation necessary for system stabilization using the system information sent from these terminal devices 3A, 3B via the transmission line, that is, the circuit breaker open / close state, voltage, current, and device failure state. To do. Further, the central units 2A and 2B perform output switching in order to output either one of the control calculation results, depending on the state of the central units. When the terminal device 3A, 3B follows the control operation result sent from the central device 2A, 2B via the transmission line, that is, the power supply or load is shut off and the closing command is issued, the terminal device pulls the corresponding breaker. Remove and throw in.

FIG. 8 is a diagram showing the configuration of the central units 2A and 2B. The arithmetic units 4A and 4B input system information from a plurality of terminal devices via the input units 5A and 5B, and respectively perform system stabilization control calculations. Note that this control calculation is always executed at a constant cycle. In addition, the system information is the automatic monitoring unit 6
It is also input to A and 6B, and the automatic monitoring units 6A and 6B determine whether the central device is normal and whether all the terminal devices are normal based on the detection result of the device failure information from the terminal device and the diagnosis result of the central device. Output the judgment. Then, in both systems, the output switching units 7A and 7B which respectively input the determination result of the automatic monitoring unit and the control calculation result of the calculation unit output either one of the control calculation results according to a predetermined logic. This figure shows the logic of the output switching section when the A system is the regular system and the B system is the standby system. That is, when both the central device of the A system and all the terminal devices are normal, the control calculation result of the arithmetic unit 4A of the A system is output to the terminal device 3A via the output unit 8A. At this time, the B-system output switching unit 7B is the B-system arithmetic unit 4
The output of B is locked, and the control operation result of A system is output to the terminal device 3B via the output unit 8B under the normal condition of both the central device and all end devices of B system. On the other hand, if either the A-system central device or all terminal devices are defective, A
The output of the arithmetic unit 4A of the system is blocked. At this time, the output switching unit 7B of the B system outputs the control calculation result of the calculation unit 4B of the B system to B
Both the central device of the system and all the terminal devices output to the terminal device 3B under normal conditions. Further, in both systems, when either the central device or all the terminal devices are defective, neither control calculation result (shutdown command) is output.

The reason why the output switching section outputs one of the calculation results is that the calculation section 4 of the A system and the B system is used.
This is to prevent excessive control even when the calculation results differ due to the calculation errors of A and 4B. FIG. 2 shows a table summarizing the output in each case as described above.
In the column of the conventional method of. Next, output lock at the time of transmission failure between the central device and the terminal device, which is one of the device defects, will be described.

When an accident occurs in the electric power system,
The power system stabilizer, which detects the occurrence of a system accident from the power flow and voltage values of main points in the power system that are constantly monitored and predicts that the generator will be out of step and controls it, The machine phase angle δ is monitored, and if the value exceeds a predetermined value, relay output is performed and the power source is shut off, and a step out determination of the generator is performed. In this case, in order to obtain the generator phase angle δ, it is necessary to measure the angular velocity ω of the generator or the output power P, and further to calculate using the measured value. Therefore, a terminal device is installed in the generator, the angular velocity ω or the output voltage P of the generator is measured by the terminal device, and the data is transmitted to the central device via the transmission system. The central unit receives the angular velocity ω or the output power P of the generator sent from the terminal device via the transmission system, activates the calculation after detecting the occurrence of the system fault, and integrates the generator angular velocity ω at time t. To obtain the generator phase angle δ during a system fault, or first to obtain the generator angular velocity ω by integrating the generator output power P at time t, and then to integrate the generator angular velocity ω at time t. Thus, the generator phase angle δ during the system fault is obtained. Less than,
With reference to the drawings, the configuration and processing of the related art will be described according to the drawings.

FIG. 9 is a functional block diagram for explaining the configuration of the conventional technique. First, the system information including the generator output power P and the generator angular velocity ω obtained via the transmission line 15 is a relay calculation unit (for start-up) 16, a relay calculation unit 17 using integration, and a transmission failure detection unit 18. Is input to. The relay calculation unit (for start-up) 16 determines from the input system information whether or not a fault has occurred in the power system, and outputs a start-up signal to the relay calculation unit 17 using integration when a system fault occurs. The relay calculation unit 17 is started by a start signal from the relay calculation unit (for start-up) 16 and performs integral calculation on the input generator output power P and generator angular velocity ω to calculate a generator phase angle δ. , If the result exceeds a certain value, relay output.

Here, a case where a defect occurs in the transmission system will be described with reference to FIG. This figure is a time chart for explaining the relay output lock effect when a transmission failure occurs in the prior art. Input / output values for integration calculation in the relay calculation unit 17 using integration with time t as the horizontal axis. And each signal is shown in a time chart. At time t0, a start signal is output and the relay calculator 17 starts the integral calculation. Here, it is assumed that a transmission failure is detected by the transmission failure detection unit 18 at time t1 after the relay operation unit 17 is activated, and that state continues for a predetermined time or longer. Assuming that the relay calculation unit 17 using integration has a previous value holding function of holding a sound input value immediately before that when a transmission failure is detected, the input value to the integration calculation is as shown in FIG. Since an integral calculation is performed using this value as an input value, the error included in the calculation result increases as the time for detecting a transmission failure increases.
Therefore, in the relay output determination process of whether or not the generator phase angle δ obtained as the result of this integration calculation exceeds a certain value, it is easy to make an erroneous determination.

From the above, when a transmission failure occurs, if the relay output determination processing is erroneously determined due to an integral calculation error generated in the relay calculation unit 17 using integration, the relay of the relay calculation unit 17 is used. The output needs to be locked. Therefore, in the conventional one, the transmission failure detection unit
An on-delay timer 19 provided after 18 outputs a relay output lock signal after transmission failure continues for a certain time T, and a relay output lock unit 20 receives the relay output lock signal and locks the relay output of the relay calculation unit 17. Was.

[0009]

As shown in the output section of the conventional central device in FIG. 2, in the conventional system stabilizing device, the output switching section is provided with a condition that all terminal devices are normal. Even if only one terminal device is defective, it is judged to be defective in the relevant series, and immediately from 2-series operation to 1-series operation, redundancy (2)
The effectiveness of serialization will be compromised.

Further, in the conventional configuration, the condition that the central unit is normal is provided in the output switching unit. However, among the defects (faults) of the central unit, malfunction or malfunction of the device may occur depending on the type of defect. Even if it was a minor defect that was not reached, it was judged as a defect of the relevant series and immediately went from 2 series operation to 1 series operation.

Further, in the conventional output lock at the time of transmission failure, the relay output lock when the transmission failure continues for a fixed time is possible because of the configuration of FIG. 12, but the transmission failure intermittently occurs. If problems arise. FIG. 11 is a time chart at the time of occurrence of intermittent transmission failure for explaining the problems in the conventional technique. In the figure, at time t0, the relay calculation unit 17 using integration is activated and integration calculation is started. After the relay calculation unit 17 using the integration is activated, time t
In the case of intermittent transmission defects such as 1 to t2, t3 to t4, t5 to t6, t7 to t8 whose duration is shorter than the operating time T of the on-delay timer 19, the integration result, that is, the generator phase angle δ. Although a large error occurs in the relay output, the relay output cannot be locked, an erroneous determination is likely to occur in the relay output determination, and in the worst case, the device may malfunction.

Therefore, the present invention is to solve the above-mentioned problems, and it is possible to operate in two series within a possible range even when there is a defect in the terminal device, a light defect in the central device, or a transmission line defect. It is an object of the present invention to provide a system stabilizing device that makes the best use of sex.

[0013]

A system stabilizing device according to claim 1 of the present invention is a system stabilizing device having a two-series configuration, wherein a system failure of a plurality of terminal devices and a self-operation of a central device are determined by system information. The first series and the second series of diagnostic means for judging the failure of the central apparatus by the diagnostic function and the judgment results of the diagnostic means are communicated between the central apparatus and the central apparatus of both systems and the terminal apparatus. According to the discrimination means for discriminating the device state, and according to the result of the discrimination means, when the central device of the first series and all the terminal devices are normal, at least at least the central device of the second series is normal, When the central processing unit of both series outputs the control calculation result of the central processing unit of both series to the terminal devices of the respective series, and the central processing unit of the first series and all terminal devices are normal, the central processing unit of the second series is defective. If, control of the central unit of the first series And first and second output switching means for outputting the calculated result to the plurality of terminal devices of the first series only from the central unit of the first series.

A system stabilizing device according to a second aspect of the present invention is a system stabilizing device having a two-system configuration, and the device may malfunction due to a failure or diagnosis occurring in the system stabilizing device of its own system. Of the first series and the second series of diagnostic means for discriminating between a serious fault and another minor fault, and the diagnostic results of these diagnostic means are mutually communicated between the two central devices, and the system stabilizers of both systems are According to the determination means for determining the device state and the result of this determination means, when the system stabilizer of the first system of the normal system has a minor failure, the system stabilizer of the second system of the standby system has a serious failure or In the case of a minor failure, the output of the control calculation result of the first series is permitted, and when the system stabilizer of the first series of the normal system has a major failure, the system stabilizer of the second series of the standby system has a minor failure. In the case of 1st and 2nd, the control calculation result of the second series is permitted to output ; And a second output switching means.

The system stabilizing device according to claim 3 of the present invention catches the occurrence of a transmission failure with the total time from the start of the integral calculation, and locks the relay output when the transmission failure occurs intermittently. Description will be given using a functional block diagram.

The counter 21 includes a relay calculation unit (for starting) 16
The transmission failure detected by the transmission failure detection unit 18 is started at the same time as the relay operation unit 17 using integration by the start signal from The total time of occurrence of is counted. In the comparison unit 22, the transmission failure occurrence total time measured by the counter 21 is compared with the set value preset as the threshold value of the transmission failure occurrence total time for relay output lock determination, and the former is larger. For example, the relay output lock signal is output.

[0017]

In the system stabilizing device according to claim 1 of the present invention, when the central device of the first system and all terminal devices are normal,
If the central device is normal even if the terminal device of the series is defective, the control calculation result of the central device of the first series is output to the terminal devices of the respective series from both systems and the two-series configuration is maintained.

In the system stabilizing device according to claim 2 of the present invention, even if both the system stabilizing device of the normal system and the standby system fail, if one of them is a minor fault, the minor fault side (normal system) Output the control calculation result of the system stabilizer (priority) and continue operation.

A system stabilizing device according to claim 3 of the present invention will be described with reference to the time chart of FIG. 5 at the time of occurrence of intermittent transmission failure. The relay calculation is started at time t0, and from time t1
It is assumed that the transmission failure is intermittently detected at the timings of t2, t3 to t4, t5 to t6 and t7 to t8. Therefore, since the counter 21 counts the total time of occurrence of transmission failure during the period in which the integral calculating process using the integral is performed in the relay calculating unit 17, its output becomes like the counter output shown in FIG. The relay output signal is output at the time t _OVER when the value exceeds the set value. With the above configuration, the relay output can be locked even when an intermittent transmission failure occurs, which could not be locked by the conventional technique.

[0020]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the system stabilizing device according to claim 1 of the present invention will be described with reference to FIGS. FIG. 1 is a block diagram of the central devices 9A and 9B of this embodiment. In FIG. 1, the same parts as those in FIG. 11 are designated by the same reference numerals, and the description thereof will be omitted. Output switching unit 10 of central units 9A and 9B of A system and B system
A and 10B respectively input the normal and defective determination outputs of the central unit and all terminal units from both the self-monitoring unit and the other-system automatic monitoring units 6A and 6B, and control calculation results from both the calculating units 4A and 4B. Enter.

In the output switching units 10A and 10B, the AND circuits 1401A and 1401B judge that the central unit of the own line and all the terminal units are normal, and become "1" when the condition is satisfied. AND circuit 1402A,
1402B is "1" when the condition is satisfied by determining that the central device of all other systems and all terminal devices are normal. AND circuits 1405A and 1405B are the central devices of their own systems, all terminal devices are normal, that is, AND circuits 1401
Output of A, 1401B = "1" signal and failure of terminal of other system or central device, that is, AND circuits 1402A, 1402B
Output = “0” is inverted by the knot circuits 1403A and 1403B, a “1” signal is input, and the condition is satisfied, and the output = “1”.

The AND circuits 1406A and 1406B are all terminals in both series and D, the central device is normal, that is, the AND circuits 1401A and 14D.
01B output = "1", AND circuit 1402A, 1402B output =
"1" is input, the condition is satisfied, and the output becomes "1".

Next, the AND circuits 1407A and 1407B are all terminals of the other system, the central device is normal, and the AND circuits 1402A and 1402B output = “1”, own central device normal = “1”, one of the terminals of the own system. Device failure = "0" signal is sent to the knot circuits 1404A, 1404
The condition is satisfied by the “1” signal inverted in B, and the output becomes “1”.

As a result, A-system AND circuits 1405A, 1406
The output of A = “1” signal passes through the OR circuit 1408A at the next stage and is input to the AND circuit 1409A. One input is a cutoff command from the arithmetic unit 4A, and the OR circuit 1411A is activated when the condition is satisfied.
Is output to the output unit 8A.

The output of the AND circuit 1407A = "1" signal is input to the AND circuit 1410A of the next stage, and one of the inputs is a cutoff command from the arithmetic unit 4B of the B-system central unit 9B. The output is output to the output unit 8A.

Output of B-system AND circuits 1406B and 1407B =
The "1" signal passes through the OR circuit 1408B of the next stage and the AND circuit.
Input to 1410B. A cutoff command is input from one of the inputs from the arithmetic unit 4A of the A-system central unit 9A, and is output to the output unit 8B via the OR circuit 1411B when the condition is satisfied.

The output of the AND circuit 1405B = "1" signal is input to the AND circuit 1409B of the next stage, and one of the inputs receives the shut-off command from the arithmetic unit 4B of the own system, and when the condition is satisfied, the OR circuit 1411B of the next stage is input. The output is output to the output unit 8B. A table summarizing the output in each case as described above is shown in the column of the new method in FIG.

No. Cases 3 and 11 are all terminals of the A system, the central device is normal, and the central device of the B system is defective. The central device of the A system outputs the A system cutoff command. The B system central device does not output the shutoff command.

No. Cases 12 and 14 are all terminals of system B, the central device is normal, and the central device of system A is defective. The central device of system B outputs the shutoff command for system B. The central unit of system A does not output the shutoff command.

No. In the case of No. 7, all terminals of the A system, the central device is normal, and one of the B system is defective and the central device is normal. The central device of the A system is the A system, and the central device of the B system is the shutoff command of the A system. Output.

No. In the case of 13 cases, the central device is normal due to a defective terminal device of the A system, all terminals of the B system are normal, and the central device is normal. The central device of the A system issues a shutoff command of the B system and the central device of the B system issues a shutoff command of the B system. Output. No. In 15 cases, all terminals of both systems, the central unit is normal, and the A system, the central unit outputs the A system, and the B central unit outputs the A system shutoff command. In other cases, the above conditions do not exist, and both central devices do not output the shutoff command.

From the above, when all the terminals of both series and the central equipment are normal, the shutoff command of the A system is output from the central equipment of both systems,
When the central device is normal due to the failure of any one of the terminals of the 1-series terminal, the central device is normal, and the remaining devices of the central device are normal, the shut-off command for the normal side of the 1-series device is output from both central devices. When all the terminals in one group are operating normally and the central apparatus is normal, and the remaining central apparatus is defective, the shut-off command is output from the central apparatus on the normal side of the first group apparatus to the terminal device.

As described above, according to the present invention, when all terminals of both series, the central apparatus are normal, or all terminals of one series, the central apparatus are normal and the remaining terminals are defective, the central apparatus is normal. Since the same disconnection command is output from the central devices of both series to the terminal device, the corresponding circuit breaker can be reliably interrupted by a plurality of terminal devices installed at a distance.

Next, an embodiment of the system stabilizing device according to claim 2 of the present invention will be described with reference to FIG. FIG. 3 is a block diagram of the central units 11A and 11B of this embodiment, which is applied to the central unit of the system stabilizing device having a two-series configuration as shown in FIG. The central apparatus 11A, 11B has a self-diagnosis function, and according to the type of failure (failure), a serious failure diagnosis unit 12 for diagnosing a serious failure which may lead to malfunction or malfunction of the apparatus.
A and 12B and light failure diagnosis units 13A and 13B for diagnosing the others (things that do not cause malfunction or malfunction) as minor failures are provided. Then, the diagnostic units 12A, 12B, 13A,
The failure diagnosis results F11, F21, F12, F22 of 13B are communicated with each other, and are input to the output switching units 14A, 14B. Output switching unit 14
A and 14B determine the device state according to the failure diagnosis result, and permit or block (lock) the output of the control operation result of the operation units 4A and 4B of its own series according to the logic (table). Several cases of switching the output of the control calculation result will be described.

In both systems, the control command is output from the central system 11A for the regular system and the standby central unit 11B is in the hot standby mode when there is no failure. Regular system (central device 11
When a failure occurs in A), the standby system central unit control output is locked, and the standby system is enabled for control output, on the condition that no failure has occurred in the standby system. Also,
When a failure occurs in both the normal system and the standby system, if both systems have a minor failure, the central control unit of the operational system outputs control, and in the case of a one-sided major failure or one-sided minor failure, the minor failure side Control output from the device. When both systems have a major failure, both system control outputs are locked and the system goes down.

In the above embodiment, the control command is output only from the 1-series side. However, as in the invention of claim 1, the control commands are constantly output from both systems of the 2-series system, and OR The same can be applied to a system with a two-series OR configuration in which the control is performed in (1).

Further, in the above embodiment, the range of fault (defective) diagnosis and detection of the major fault diagnosis unit and the minor fault diagnosis unit is the central unit of its own system, but of course it is regarded as one system of the system stabilizer. The same can be applied to the case where the system is a normal system including the terminal device and the communication means, and the system is a standby system within the scope of the failure diagnosis.

As described above, according to this embodiment, even if a failure occurs in both systems of the two-system stabilizing system, if the content of the failure is a minor failure, stabilization control is possible and the system operation rate is improved. Can be improved. Next, claim 3 of the present invention
An embodiment of the system stabilizing device according to the present invention will be described with reference to FIGS.

The present embodiment is an example of a system stabilizing device that predicts a step-out of a generator when a system fault occurs and controls the power source to prevent the step-out of the generator. Both the central device and the terminal device are multi-CPU digital relay devices configured based on a microcomputer, and microwave transmission is used as a transmission line connecting the central device and the terminal device. Further, the electric power system electric quantities measured by the respective devices are all sampled at the same time in a constant cycle while maintaining synchronization, and are analog / digital converted and processed.

FIG. 6 shows a block diagram of the configuration of the central unit in this embodiment. The reception control unit 23 receives the angular velocity ω, the voltage V, and the current I of the generator sent from the terminal device via the transmission path 15, and at the same time, detects the transmission failure, and outputs the received data and the transmission failure detection signal. . The relay calculation unit (for start-up) 16 detects the occurrence of a system fault by using various data of the generator from the reception control unit 23 and the interconnection point bus voltage level-converted by the input converter 24 and detecting the occurrence of a system fault for a fixed time. (15s) Output start signal. The relay arithmetic unit 17 using integration is activated by an activation signal that is an output of the relay arithmetic unit (for activation) 16 and performs relay arithmetic processing using integration based on the reception data output from the reception control unit 23. And output the generator cutoff command. Here, the processing in the relay calculation unit 17 using integration will be described. Here, a to
c processing is performed. Processing a. (Understanding steady state)

In advance, in a steady state before starting,
The initial phase angle δ0 of the generator is calculated with reference to the voltage phase at a predetermined reference point in the system. The process here is repeated until the activation signal is set. Processing b. (Generator phase angle calculation)

After setting the start signal, a value obtained by integrating the angular velocity ω of the generator and the initial phase angle δ0 of the generator obtained by a
Then, the phase angle δ of the generator is obtained, and the phase angle predicted value after a fixed time is obtained from the phase angle δ by the method of least squares. Process c. (Step-out prediction determination) The phase angle predicted value of the generator obtained in the process b is compared with a predetermined value, and if the phase angle predicted value of the generator exceeds the predetermined value, a generator cutoff command is output.

Here, when a fixed time (15 seconds) has elapsed after the relay computing unit 17 using integration is activated, the activation signal output from the relay computing unit (for activation) 16 is reset,
The processing in the steady state again, that is, the processing a is continued.

However, since the relay calculating unit 17 using the integral performs the integral calculation of the generator angular velocity ω received from the terminal device, the relay calculating process using the integral is being started for the reason described above. In addition, not only when the transmission failure occurs continuously for a certain period of time but also when the transmission failure occurs intermittently, when the error of the generator phase angle calculation exceeds the allowable limit, the relay using integration is used. Arithmetic section 17
It is necessary to lock the generator cutoff command output by. Therefore, in the present embodiment, by configuring as follows in the figure, even when intermittent transmission failure occurs, which is a problem in the prior art, the relay operation using integration is the total transmission failure occurrence time during activation. By paying attention to, the relay output can be locked. Hereinafter, description will be given with reference to the drawings.

When the relay computing unit (for starting) 16 detects a system fault, a starting signal is generated for a fixed time (15 seconds). With this start-up signal, the relay operation unit using integration
At the same time that 17 is activated, the output of the flip-flop 25 is set, and the generator cutoff command, which is the output of the relay calculation unit 17 using integration, is in the output allowable state. At this time, when the reception control unit 23 detects a transmission failure, the counter 21 activated by the activation signal counts the total transmission failure occurrence time during the period when the activation signal is set, and compares the value with the comparison unit. Output to 22. In the comparison unit 22, the transmission failure occurrence total time that is the output of the counter 21 and a predetermined value (predetermined value: the limit value of the transmission failure occurrence total time for determining the relay output lock, are used to calculate the integral caused by the transmission failure. The setting is made in consideration of the allowable limit of the integral calculation error in the relay calculation unit 17) which has been set.) And the output of the flip-flop 26 is set if the former is larger.
It is locked by the output of the output flip-flop 26 of the flip-flop 25 which has been set by the activation signal, and as a result, the generator cutoff signal from the relay calculation unit 17 using the integration is locked.

The activation signal is reset after a lapse of a fixed time (15 seconds) after detecting the occurrence of a system fault. As a result, the counter 21 is initialized and enters a standby state in preparation for the next activation signal. The outputs of the flip-flops 26 and 25 are
It is reset when the generator is cut off or when the start signal is reset, and as a result, the generator cutoff command is locked. By doing so, it is possible to prevent the device from malfunctioning due to the unnecessary output of the relay calculation unit 17 using integration.

Although the power system stabilizing device using the relay arithmetic processing for integrating the generator output voltage P or the generator angular velocity ω is described here, the present invention is applicable to other system electricity quantities. It is also effective in a power system stabilizing device that performs relay calculation processing using integration.

[0048]

As described above, according to the present invention, since the operation rate of the two-series configuration can be increased, it is possible to obtain the system stabilizing device with improved reliability. Further, since intermittent transmission failure can be detected accurately, a highly reliable system stabilizing device can be obtained.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a central device according to an embodiment of claim 1 of the present invention.

FIG. 2 is a logic table according to the first embodiment of the present invention.

FIG. 3 is a configuration diagram of a central device according to an embodiment of claim 2 of the present invention.

FIG. 4 is a functional block diagram of a central device according to an embodiment of claim 3 of the present invention.

FIG. 5 is an operation time chart of the embodiment of claim 3 of the present invention.

FIG. 6 is a configuration block diagram of a central unit according to an embodiment of claim 3 of the present invention.

FIG. 7 is a configuration diagram of a system stabilizing device having a two-system configuration.

FIG. 8 is a block diagram of a conventional central device

FIG. 9 is a functional block diagram of a conventional system stabilizing device.

FIG. 10 is an operation time chart of a conventional system stabilizing device.

FIG. 11 is an operation time chart of the conventional system stabilizing device.

[Explanation of Codes] 1A, 1B ... System stabilizer, 2A, 2B, 9A, 9
B, 11A, 11B ... Central device, 3A, 3B ... Terminal device, 4
A, 4B ... Arithmetic unit, 5A, 5B ... Input unit, 6A, 6B ...
Automatic monitoring unit, 7A, 7B, 10A, 10B, 11A, 11B, 14
A, 14B ... Output switching section, 8A, 8B ... Output section, 12A, 12
B ... Serious failure determination section, 13A, 13B ... Light failure determination section, 15 ... Transmission path, 16, 17 ... Relay operation section, 18 ... Transmission failure detection section, 19
… On-delay timer, 20… Relay output lock part, 21…
Counter, 22 ... Comparison section, 23 ... Reception control section, 24 ... Input converter, 25,26 ... Flip-flop.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Satoshi Ishibashi No. 1 Toshiba-cho, Fuchu-shi, Tokyo Toshiba Corporation Fuchu factory inside

Claims (3)

[Claims] 1. A central device for performing a stabilizing control calculation for stable power supply based on system information, and a plurality of terminal devices for controlling a power supply or a load to be shut off when a system fault occurs according to the control calculation result. In a system stabilizing device each having a two-series configuration, a first system and a second system that determine device failure of the plurality of terminal devices based on the system information and device failure of the central device by a self-diagnosis function of the central device. Of the diagnostic means, the discrimination means for communicating the determination results of these diagnostic means to each other between the central devices, and discriminating the device states of the central device and the terminal device of both systems, and the first device according to the result of the discrimination device. When the central device of the series and all the terminal devices are normal, and at least the central device of the second series is normal, the control calculation results of the central device of the first series are output from the central devices of both series respectively. When the central unit of the first group and all the central units are normal and the central unit of the second group is defective, the control calculation result of the central unit of the first group is output to the first group of central units. A system stabilizing device comprising: first and second output switching means for causing only a single central device of the first system to output the plurality of terminal devices of the first system. 2. A central device for performing a control calculation for stabilization for stable power supply based on system information, and a plurality of terminal devices for controlling a power supply or a load to be shut off at the time of a system fault according to the control calculation result. In a system stabilizer having a two-series configuration, a first system for discriminating between a major fault and a minor fault that may cause malfunction of the system due to a failure or diagnosis occurring in the system stabilizer of its own system, and The second series of diagnosis means, the judgment means for mutually communicating the diagnosis results of these diagnosis means between the two central devices, and judging the device state of the system stabilizing device of both systems, and the judgment means, which are commonly used When the system stabilizer of the first system of the system has a minor failure and the system stabilizer of the second system of the standby system has a major failure or a minor failure, the control calculation result of the first system is permitted to be output, First series of common system When the system stabilizer of the second system has a major fault and the system stabilizer of the second system of the standby system has a minor fault, the first and second output switching for permitting the output of the control calculation result of the second system A system stabilizing device comprising: 3. Inputting one or more terminal devices having a transmission means for transmitting system information including a power system electricity amount to a central device, and a power system electricity amount received from the terminal device via a transmission path. As a relay calculation unit that performs relay calculation processing using integration as a relay output, a transmission defect detection unit that outputs a transmission defect detection signal that detects a transmission system defect, and a transmission defect detection signal that is output from the transmission defect detection unit A system stabilizing device comprising a central device having a relay output locking means for counting the total time of occurrence of transmission failure by using, and locking the relay output of the relay operation part when the count value exceeds a predetermined value.