JPS60167001A - Wrong control output preventing device - Google Patents

Abstract

PURPOSE:To prevent misoperation by checking a plant operation process by a controller for nuclear power generation when an operator selects operation buttons corresponding to N divided steps of the process. CONSTITUTION:A push button is selected on a console panel 1 to output one of step command signals 20-22 and the controller 2 detects the input of the command signal, e.g. 20 and calculates corresponding lamp condition to generate a corresponding step decision signal 22 when the operator's selection is correct. Thus, the signal 20 and decision signal 23 are generated to generate a step permitting signal 26 and the controller 2 detects it and calculates a corresponding output value and control timing to generate a control output 15. This output 15 is sent to a low-priority controller when the permitting signal 26 is on and process control is carried out.

Description

[Detailed Description of the Invention] [Field of Application of the Invention] This invention provides a device for preventing erroneous control amount l in a control device such as a nuclear power generation control system, which makes it possible to output only a specific control output according to the progress of plant operation. It is related to.

[Background of the invention]

FIG. 1 is a block circuit diagram showing a conventional control device for preventing erroneous control outputs.
5 is an operating terminal that is directly controlled by the control device/device described in +'Iif, 6 is an erroneous control output prevention device, and 7 to 11 are controls. The output is 11-gate.

In the conventional control device erroneous control output prevention device 6 having such a configuration, the control outputs 12 to 16 are transmitted to the lower control device 3,
4. Blocking signal 17 from operation ff1l for each operation end 5 unit
~19, it is possible to prevent this.

However, as mentioned above, since the control output is turned off all at once from the operation panel for each lower-level device, it is not possible to prevent erroneous control output according to the plant operation process, and control safety is not guaranteed. There was a drawback.

In addition, a method has been conventionally used in which the control output is set to a two-behavior method, and the selection of the control output is sensor-backed and inputted to the control device, so that the control signal is output after confirming the selection of the control output point. There is.

However, the above-described method has the disadvantage that it cannot prevent erroneous control outputs due to malfunctions of the control device.

[Purpose of the invention]

An object of the present invention is to provide safe process control by preventing erroneous operations by operators and erroneous control outputs from a control device as the plant operation process progresses.

[Summary of the invention]

In the present invention, the plant operation process is divided into N steps in advance and the operator selects the operation panel push button for each step.
Focusing on the operating method that manages the progress of process control, when both the operator push button selection signal and this judgment signal that uses the plant conditions for each step as the judgment condition for operator operation are established, the corresponding step is Open control output signal gate.

The above object is achieved by blocking all gates of other control output signals.

[Embodiments of the invention]

An embodiment of the present invention will be described below with reference to the drawings.

FIG. 2 is a block diagram showing an embodiment of the present invention, and numerals 1 to 6 are the same as the conventional device shown in FIG. 20 to 22 are step command signals selected by the operator;
23 to 25 are step determination signals of the control device determined based on the respective plant conditions for the command signals 20 to 22; 7 to 9 are AND circuits for the step command signal and the step determination signal; 26 to 28 are 15 to 19 are control output signals; 10 to 14 are AND circuits for the control output and the step permission signal; 29 to 31 are lower control devices 29, 3;
0 is the control output of the operating end 31. A case will be described in which the step command signal 20 is established by the operator's selection by selecting a push button from the operation panel 1 in accordance with the plant state and the operation schedule. The control device 2 inputs and detects that the step command signal 20 is established, calculates the corresponding plant condition, determines whether the operator's selection is correct, and if correct, outputs the corresponding step determination signal 23. It is assumed to be established. Since the operator command signal 20 and the step determination signal 23 are ON, the step permission signal 26, which is the output of the corresponding AND circuit M7, is established. The control device 2 receives and detects that the step permission signal 26 is established, calculates the corresponding control output 1 and control timing, and outputs the control output 15. The control output 15 is output to the lower control device 3 to perform process control when the step permission signal 26 is established in the corresponding AND circuit u10. In this way, the operator's selection is checked by the control device to prevent erroneous operation, and the control output is checked by the operator's selection and the control device's judgment accordingly, making it possible to prevent erroneous output. This has the advantage of improving the safety of the control device.

In the above embodiment, in the nuclear power generation control system, the operation panel 1 is the automation console of the central operation panel, the control device 2 is the process computer, the lower control devices 3 and 4 are the water supply control device,
Turbine electro-hydraulic control device, automatic synchronization device, automatic voltage adjustment device, second main cold stop valve for warming the operating end 5, bypass valve opening jack for controlling pressure reduction during stoppage, etc. It can be applied by using it as the operating end. It can also be applied to thermal power generation control systems and other plant control systems.

〔Effect of the invention〕

According to the present invention, it is possible to output only a specific control output according to the operating process of the plant by using an AND circuit using a combination of the operator's step command signal, the control device's step judgment signal, and the control output signal. Therefore, the safety of the control device can be improved.

[Brief explanation of the drawing]

Fig. 1 is a block circuit diagram showing a device for preventing erroneous control output of a conventional control device, and Fig. 2! 1 is a block circuit diagram showing an embodiment of the present invention. 1...Operation panel, 2...Control device, 3, 4...Lower control device 1 flash

Claims (1)

[Claims] (2) Instruct the control device by an operator command signal from the outside via the operation panel, etc., and control the output of lower control devices, operating terminals, etc. by the control signal from this control device. is divided into N steps, and the Kth (]≦≦N) step command signal is ANDed with the judgment signal from the control device that is judged based on the plant conditions of the first step included in the command signal. A circuit l is provided between the control device and the lower control device, the operating end, etc.,
Furthermore, the control device is characterized in that it is provided with an AND circuit 2 that inputs a step permission signal outputted from the AND circuit 1, starts control, and applies the step permission signal to the control output signal. Erroneous control output prevention device.