KR0166615B1 - Advanced nuclear plant control complex - Google Patents

Abstract

A display screen having a first screen for displaying an alarm tile image activated when the display signal exceeds a threshold and a second screen for displaying an alarm related message related to the activated tile, The alarm system of the nuclear control room.

The priorities of spatially fixed and activated alarm tiles in the alarm tile array are indicated by the shape coding in the tiles and are represented as the same phenomenon as possible in the control room wherever possible. The status of the alarm tile can be changed automatically or by operator, and the sound and / or flashing indication continues to provide status information to the operator. The priority and alerting active set for a given spatially fixed alert tile varies, in part, with the plant operating mode. The alarms can be recognized not only in the alarm tile arrangement of a given control unit, but also through a touch alarm on a screen display monitoring the system in the same or different control zones. Touching one tile allows you to recognize multiple sources of alerts.

Description

[Title of the Invention]

Nuclear control complex alarm system

BRIEF DESCRIPTION OF THE DRAWINGS Fig.

Figure 1 is an illustration of a nuclear control room complex according to the present invention;

Figure 2a is a schematic diagram of communication between systems, and Figure 2b is an abbreviation commentary.

Figures 3 (a) and 3 (b) are first type diagrams of modules and panels according to one of the features of the present invention,

Figures 3 (c) and 3 (d) also show the second type.

Figure 4 is a main system display page directory diagram useful for CRT screens according to the present invention.

Figures 5 and 6 illustrate exemplary component signals and shape coding for use in CRT and IPSO display devices in accordance with the present invention;

Figure 7 is a typical distributed indicator display in a trending format for pressurizer pressure and level in accordance with the present invention.

FIG. 8 is an indicator display for the system pressure and level menu pages associated with the indicators of FIG. 7; FIG.

Figure 9 is a schematic view of an alarm display according to the invention;

FIG. 10 is a typical display page diagram showing an alarm indication in a first level display page menu selection in accordance with the present invention. FIG.

11 is a schematic view of the work station of the first level indicating switch set category of the complex shown in FIG. 1; FIG.

Figure 12 is an illustration of an exemplary display page directory showing a display page containing alert information;

Figure 13 is an illustration of the type of information provided to the CRT after alarm recognition and subsequent alarm support.

Figure 14 is an illustration of a list of categorized alarms useful to an operator in a CRT.

Figure 15 is also a group of typical warning tiles for reactor coolant systems / enclosure alarm tiles associated with distributed instruction and alarm systems.

16 shows an example of an alarm tile display for an activated reactor coolant pump of a tile.

FIG. 17 shows an example of an alarm indication after recognition of the activated alarm of FIG. 16; FIG.

FIG. 18 is an explanatory diagram of an alarm display which can be used in response to an operator's touch to the alarm status area of the display shown in FIG. 17; FIG.

Figure 19 is an illustration of a CRT display for a main system;

Figure 20 is an illustration of a CRT display for a second level page based on the first level page shown in Figure 19;

21 shows an example of a third level display page obtainable from the second level page shown in FIG. 20; FIG.

Figure 22 is an illustration and illustration of a display page menu selection area in a CRT display.

Figure 23 is an illustration of a typical CRT display page showing an alarm tile display;

Figure 24 is a diagram illustrating the association of a CRT display page layer;

FIG. 25 is an exemplary diagram showing an overview of the integrated processing state; FIG.

FIG. 26 is an explanatory diagram of a code used for conveying trending information in an overview of the integrated processing state; FIG.

Figure 27 is a schematic diagram of a composite information display useful in the present invention.

Figure 28 is a block diagram according to Figure 2 showing the relationship of the main system constituting the control room complex of the present invention;

Figure 29 is a block diagram illustrating the inputs and outputs associated with the distributed indicator and alarm system portion of the present invention.

Figure 30 is a schematic diagram of use of valid sensor data for monitoring and control in accordance with the present invention;

FIG. 31 is a functional diagram of an engineering safety facility system and an element control system with a corresponding interface selectively adjusted according to the invention; FIG.

Figure 32 is an illustration of an exemplary display page directory corresponding to a possible critical function monitoring through a data processing system of the present invention;

Figure 33 is an illustration of a first level threshold function display page corresponding to the hierarchy shown in Figure 32;

Figure 34 is an illustration of a first level threshold function display page after a reactor trip.

Figure 35 is an illustration of a typical second level threshold function display page corresponding to an inventory control system;

Figures 36 (a) and 36 (b) are diagrams of typical prior art operations and diagrams of control design processing, respectively, and useful accelerated design processing diagrams in accordance with the use of modular panels in accordance with the present invention.

DETAILED DESCRIPTION OF THE INVENTION [

The present invention relates to an apparatus and a method for monitoring and controlling the operation of a commercial nuclear power plant. Typically, commercial nuclear power plants have a central control room with facilities for the operator to collect, detect, read, compare, copy, calculate, edit, analyze, verify, control and / or verify much information from multiple indicators or alarms. Typically, the main operating systems are installed in the control room and operate somewhat independently. These systems include monitoring functions to monitor components and various processes in the plant, control functions to deliberately change or adjust the components and processes, protection functions to detect the risks to plant safety and take immediate corrective measures . The results of such conventional control room layout and functionality can sometimes give the operator excessive information or excessive stimulation. That is, the amount of synthesized information, equipment diversity, and complexity that are useful in the basis of judgment for an operator to take action can cause mistakes beyond the operator's perception. The most famous example of operators not being able to recognize and act correctly based on a massive amount of information stimulus in the control room is the 1978 accident that occurred during an exceptional transition, especially in the Dreammeil Nuclear Power Plant. Since that incident, industry has been paying great attention to increasing plant operating performance by improving control room operator 's work. The main aspect of the improvement process is the application of ergonomic design principles. Since 1978, advances in computer technology have allowed nuclear engineers and control room designers to display more information in more ways, but this can be adversely affected by information overload. It has been a challenging engineering challenge to improve user convenience while leaving the amount and type of information at the disposal of the operator.

[Summary of the Invention]

It is an object of the present invention to provide a device and method for control and monitoring of a nuclear power plant having features such as reliable structure and hardware and easily maintainable components, . The above object is achieved as the reliability is improved, the operation is easy, and the cost effectiveness of the control room complex is improved. The solution to the problem is achieved by a number of novel features, each of which is provided by the present invention and which is both novel and integrated into a control complex.

The complex includes six main systems. (1) control center panel, (2) data processing system (DPS), (3) distributed instruction and alarm system (DIAS), (4) engineering safety facility function component control (ESFC) (5) Power Plant Protection System (PPS) and (6) Power Control System (PCS), each of which consists of a power plant It also performs functions automatically and allows for direct manual control of plant components.

The control complex according to the present invention provides a top-down integrated information display and alarming approach that indicates a quick assessment of high-level criticality plant safety and power production functions, and provides an overview of the location of information for further diagnosis of high- Guides the operator and significantly reduces the number of display devices associated with conventional nuclear control complexes. The complex also significantly reduces the amount of data that the operator has to process at some point, dramatically reduces operational impacts on the failure of the display facility, provides a fixed location for critical information, and only when the plant is in an abnormal state Eliminate your display system.

It is known that nuclear steam supply systems can be kept safe and stable by maintaining only limited facilities for critical safety functions.

The present invention extends the concept of a critical plant safety function to include critical plant power production functions, that is, by combining essentially two functions, But also maintains the high-level critical power plant function required for power generation. The information display layer according to the present invention includes a large version of the Integrated Processing Status Overview Screen (IPSO), which is provided at a dedicated location at a vertex for rapid evaluation of critical information indicative of critical plant power generation and stability functions. Further details of data and trends of normal or abnormal parameters are obtained by DIAS. IPSO and DIAS provide direct access to component state information and additional systems included in the CRT display page hierarchy driven by the DPS.

The IPSO continues to spatially display dedicated information to inform the status of the plant's critical stability and power production functions. This information is provided using a small number of codes that can be easily understood by highly processed data. This allows the operator to deviate from each parameter system or component state, and the large amount of correlated alarms, to determine the functional status of the plant. IPSO provides operators with a high level of effectiveness with low level components. The IPSO conveys important information mainly by the direction of parameter trend, higher, lower, alarm symbol color and shape. This is reinforced by the value for the selected parameter. The IPSO provides the synthesized simplified information to the operator in a relatively small amount that is easily recognized and understood.

In addition, the IPSO compensates for the imperfections in recent industry trends that systematically provide CRT with all information by allowing operators to get an overview or impression of plant conditions. Dedicated Display The representation of the plant level overview in large format represents two additional operational concerns. First, the operator task requires detailed diagnosis in a very limited processing area. However, at the same time, it is also necessary to perceive the performance of the power plant unit. Rather than monitoring each instrument on a spatially separated panel in the control room, the IPSO can be seen from anywhere in the control room, providing continuous instructions to the operator over the entire plant operation .

According to a preferred embodiment, the IPSO supports power and stability critical functions by providing critical process parameters indicative of each functional state. For each function, the main continuous pad is selected according to the indicated continuous path condition. The IPSO relates to the physical function of the plant. Critical functions apply to power generation, normal post-trip behavior, and proper function recovery processes.

The second level of the display information layer according to the present invention is a power station alarm indication obtained with DIAS. There is a limited number of fixed distributed tiles, which are used with three levels of alarm priority. The dynamic alarm handling process uses information on plant status (eg, reactor power, reactor trips, refueling, shutdown, etc.) and system and component status to remove unnecessary and over- It helps prevent information from being overloaded. The alarm system provides additional levels that are easily understood by indicating information to the distributed indicator, the CRT, the controller, and so on. The alarms are based on corroborated data, so they tell you about problems in the actual plant process, not machine operation and control system failures. The alarm feature includes providing the operator with the ability to recognize the alert message through the window and to group the alert content. The tile dynamically displays different priorities to the operator. The recognition sequence provides a momentary sound, followed by continuous alarms, and memorized sounds to remind the alarms, thereby reducing the number of points imposed on the operator while at the same time ensuring that all alerts are clearly recognized. The operator may instantaneously stop the alarm flash to avoid visual overload, or may resume the flash to make the alarm well-recognized. Distributed indicators provide a third level in the inventive layer in DIAS. Flat panel display devices compress many signal data into a readout set of critical plant data that is frequently monitored. Signal validation and automatic selection of sensors with the most accurate signal range are used to reduce the number of control panel indicators. The information reading is by a touch-screen in order to enhance the interaction of the operator, and includes numerical parameter values, a bar shape of an analog display, and a dot trend. A wide range of indicators can be used on a single display device with auto-sensing selection and range display. Automatically calculating effective process display parameter values while reading each sensor from the same display device makes it necessary to have a secondary display device or a display device for normal operation in preparation for an accident or an accident. In addition, another desirable feature of the present invention is that the parameter verification process automatically identifies faulty sensors while keeping the operation and minimizing accidents even when the CRT display is not available, to the operator. Furthermore, the normal display information may be correlated to a suitable sensor, for example a sensor used for monitoring post-accident. Dynamic soft controllers at the information display level associated with the control of a particular component are provided with component state and control signal information necessary for the operator to control the components. For ESFC systems, this information includes status lights, switching controllers, modulation controllers, open-close controllers and logic controllers. For PCCS, the information includes verification load, target value, operating range, process value and control signal output. At the fourth level of the information layer, the dynamic CRT display pair is complementary to all levels of spatial dedicated control and information and can be accessed from any of the CRT locations of the control room, the technical assistance center room, and the emergency operation facility. These indications are grouped into three level layers, which include general monitoring (level 1), plant components and system control (level 2), and component / process diagnostics (level 3). The display means is DPS-propelled and verifies all distributed alarms or indicator processing performed in DIAS redundantly.

A more preferred means of the invention is to group indicators, alarms and controller functions into one modular panel for a given main functional system of the plant. Panels can be made with spatially dedicated openings for indicators, alarms, controllers and CRTs, independent of the main plant functional system. This allows for specific logic of the plant, delivery prior to the finalization of the algorithm, preliminary testing of the facility and the panel so that it can later be modified in the power plant construction plan. This modularity is achieved because the space required for the panel is independent of the main plant functional system dedicated to the plant. An alarm or indicator can be easily modulated in software. The number of gauges or alarm tiles that can be displayed to the operator is not significantly limited by the available area of the panel, so that the panel size for the display window and the arrangement of the breakers can be standardized.

Ⅰ. Control Compressor Overview 10

Ⅱ. Panel Overview 11

A. Alarms and Messages 12

B. Indicator 12

C. CRT 13

D. Controller 13

E. Display Format 15

F. Integrated Display 18

Ⅲ. DIAS 20

A. Dispersion Indicator 20

B. Summary of the Validity Algorithm 24

C. Alarm Handling and Display 27

1. Mode and Equipment Dependencies 29

2. Subfunction grouping 30

3. Shape and color coding 31

4. Alarms on the CRT 32

5. Determination of alarm condition 33

6. An alert 33

IV. DPS

A. CRT display 41

B. IPSO 47

Ⅴ. Integrated Control Room

VI. Panel modularity

Appendix (Validity Algorithm)

[Description of Preferred Embodiments]

Ⅰ. Outline of control complex

FIG. 1 shows a control room complex according to a preferred embodiment of the present invention. The central portion of the main control room 10 is a master control stand 12 that allows a person to operate the nuclear steam supply system in a reserve electric power state. The control room facilities and methods described herein may be advantageously used for light water reactors, heavy water reactors, hot gas cooled reactors, light metal reactors, and advanced passive water reactors, but here the description will be based on the assumption that the power plant has pressurized NSSS. For this NSSS, the master control station 12 typically has five panels, a Reactor Coolant System (RCS) 14, a Chemical Volume and Control System (CVCS) (16). A reactor core 18, a FeedWater and Condenser System 20, and a turbine system 22. As will be described in more detail below, the control and monitoring of each of these five power plant systems is done at each panel of the master control station. Immediately behind the core monitoring and control panel 18 is a large screen plate 24 that displays the overall processing status summary (IPSO). In this way, the operator can sit in the center of the master control stand or stand and easily see the five panels and the back IPSO. To the left of the master control stand is a safety-related control 26, which typically includes modules related to safety monitoring, engineering safety features, cooling water and similar functions. To the right of the master control stand is the auxiliary system control stand 28, which includes modules related to the two-cycle, auxiliary power and diesel generator, switch yard and heating and circulation systems. The power plant computer 30 and the mass storage device 32 associated with the control room are placed in an isolated location for fire safety and sabotage protection. The control room complex 10 includes a movement supervisory office 34 for viewing the entire control room, a control room outside the control area and a comprehensive technical support setter 36 (TSC: Techniacl Support Center) Is associated with another office (38). Similarly, a desk, table, etc. (40) is on the floor of the control room so that the operator can conveniently use it. The remote shutdown room (42) (Figure 2) is also available here for Post-Accident Monitoring purposes (PAM). FIG. 2 is a schematic diagram of the power plant components considered for this purpose and the various panels of the sensor and main control room. It is clear from FIG. 2 that the information flows in two directions through the line 46 representing the nuclear steam supply system and the turbogeneration system boundary. The NSSS status and sensor information 48 used in the plant protection system 50 and the PAMS 58 pass directly through the NSSS boundary 46. The control signal 52 from the power control system passes directly through the NSSS boundary. The engineering safety facility functional component control system 56 and the normal process component control system 64 are interfaced via an NSSS boundary via a remote multiplexer. (DPS) 70 and a distributed indicator and alarm system (DIAS) 70, respectively, in the main control room 10, respectively, in the control system, the ESF component control system, the processing component control system, (72). FIG. 2 represents one important aspect of the present invention: it simplifies the task of the operator to determine the proper direction of action by aggregating monitoring control and protection information in normal and accidental conditions. The way to do this will be explained below.

Ⅱ. Panel Overview

Figures 3 (a) and 3 (b) are schematic views of a reactor coolant system panel, for example, sitting and standing in a master control stand 12 according to one example embodying the present invention. Figures 3 (c) and 3 (d) are an example of another embodiment for stand-alone. Indeed, the flat top or wall 74 of the panel is vertical and the flat bottom or desk portion 76 is actually horizontal, with an interface for monitoring and alarming at the top and a control interface at the bottom.

A. Alarms and Messages

The alarm function (see FIG. 9, FIG. 15 - FIG. 18) includes an alarm and information interface (AM) 78 with various tiles 80 each having a special two-letter word or a similar signal associated therewith The alarm condition is indicated by the illumination of the tiles and the accompanying audible signal generation. The operator must press a tile or other interface provided for that purpose to acknowledge the alarm. The number of tiles associated with a special panel depends on the number of different alarm conditions that can occur depending on the monitored system, for example, the reactor coolant system. Typically, there are hundreds of such tiles linked to each panel. Alarms are prioritized with three alarm classes (Priority 1, Priority 2 and Priority 3, Very immediate response, immediate reaction and attention). This RCS panel alarm is a facility state and an independent mode. (Normal RCS, heating / cooling shutdown / refueling and post-tripping) If the high priority alarm is activated simultaneously with the low priority alarm in the same parameter, the low priority alarm is automatically released. If the condition improves, the high priority alarm will blink and sound a "restoration" tone. The operator will know that the high priority alarm has been released. If a low priority alarm is still present, the alarm window or indicator will be turned on after the operator has notified that the high priority alarm has been disassembled.

B. Indicator

The second monitoring interface is a process variable indicator, for example, reactor coolant hot leg temperature and cold leg temperature, pressurizer level and pressure. Distributed indicators (see Figures 7 and 8) provide an improved method of representing RCS panel parameters. The RCS panel parameters require continuous valid indication and trending on the master control station. Category 1 parameters such as the pressurizer level and the RCS low temperature inflow temperature and plant processing procedures fall into this category. Other RCS panel parameters are used less frequently. The distributed indicator provides an indication of the parameters required for operation when the data processing system (CRT information display) is unavailable. These are: 1.97 parameters associated with Category 1 and Category 2 variables, Priority 1 or Priority 2 alarms, and other parameters and data required for operation due to inaccessibility of the local gauge. Contains parameters that should be seen to monitor. These less frequent parameters are available in the distributed indicator with operator-selectable menus. The menu shows alphanumeric listing of useful data points. Consequently, the parameters displayed on the processing controller need not be used for distributed indicators.

C. CRT

In addition, the CRT display device 84 produces images of main pipes, pipes, pumps, valves, etc. related to, for example, the reactor coolant system, and the other display devices 78 and 82 , FIG. 12 - FIG. 14 and FIG. 19 - FIG. 23), parameter values or alarms appear in bars, graphs, trend lines or other forms. In this CRT, the operator has access to all NSSS information. The information appears as a hierarchy of three levels that coincide with the system imaging of the operator. FIG. 4 shows an NSSS main page directory 84 containing all CRT pages related to the functionality of the RCS panel.

D. Controller

The switch pattern 86 dispersed in the control portion 76 of the panel 14 is on the left side (see FIG. 3), and each switch pattern includes a special reactor coolant pump and conventional leg coolant pump (Not shown) or an analog control interface, which may be in the form of a touch screen. The processing controller is provided on the RCS panel to provide the operator the ability to automatically or manually control the processing control loop. The process controller enables control of throttling or variable position devices (e.g., electric-air valves) in a single control panel device. The processing controller is used for closed loop control of the following RCS panel processing variables. Pressure Level Pressurizer Pressure, RCP Seal Injection Flow, and RCP Seal Injection Temperature The process controller is designed for a specific control loop that uses a series of display and control features. In a conventional control room, each processing control loop usually has its own control, called a manual / automatic station. For example, the RCP seal injection subsystem has five process control purses, a seal injection flow control loop for each of the four RCPs, and a seal injection temperature control loop for the entire sub-system. Each of these five control loops has their own manual / automatic station, which takes up a large portion of the control panel and annoys cross-loop comparisons. Although these five processing loops are each independently controlled, the processing change of one controlled parameter affects the other four processing parameters. The conventional manual / automatic station makes it difficult for the operator to simultaneously cooperate with the five manual / automatic stations. For similar processing (related by function or system), the RCS panel processing controller operates from a single control station called a processing controller. This single control station allows room for panel space, provides convenient cross-channel testing, and facilitates control loop interaction for multiple associated controls. The component control features (ie, the operation of the switch controller) provide a primary way for the operator to operate the plant and system on the RCS panel. The RCS panel has 43 components controlled by instantaneous type switches. Each switch includes a red status indicator indicating active or open and a green status indicator indicating inactive or closed. The blue status indicator / switch is used to select or indicate the adjustment via the automatic adjustment or process adjuster. In addition to color coding, the red switch is always located above the green switch to emphasize the color difference. Each switch generates an active control signal when it is weak and no signal when it is released. Each switch is backlit to indicate facility status / location.

E. Display Format

The processing display format uses standard information facilities and facilities for similar processing. Fluid system piping marks are from left to right and from the top to the bottom and from where the bridge can be avoided. Incoming and outgoing flow path connections are located at the boundary. Relevant data are grouped by task and analysis specification for comparison, order of use, function and frequency. The process indication / placement is based on the operator's processing visualization to maximize the efficiency of the operator's data collection tasks. The imaging of the system by the operator is based on the diagrams used with the learning material and the plant design documentation related to the system description. Shape information is given to the display page shape to help the operator quickly understand the process. The geometry information includes bar graphs, flowcharts, trends, and other plots (e.g., temperature versus pressure). The bar graph is mainly used to represent flow, pressure and level. Since the level corresponds to the tank, the bar graph is located in the spatial direction that corresponds to the tank sign. The level bar graph is oriented vertically. The sequence bar graph is oriented horizontally when used. The bar graph also helps to compare quantities. Flowcharts are used when it helps to visualize the operator's processing. Flowcharts help to understand the control system process, such as turbine control systems. Operators learning data for process control systems often come in contact with flowchart formats, which are easy to understand on display pages. The trend is used in the display page format when it appears that information on parameter changes over time should be given. In addition, the operator can set trends at any database point in the plant computer database. In some situations, more than one trend is indicated as important to monitor process comparisons. In other states, such as heating / cooling curves, two parameters can be used for parameters with different units in different axes of the graph. The scale indication can be divided by 1, 2, 5 or 10. The interval between scales can also be divided by 1, 2, 5 or 10. Trend information is typically displayed on the display page in a 30 minute scale. The operator can adjust the scale according to his needs. Log axes using multiples of 10 are also used. If the total range is less than 10, the mid-range cover will be located close to the middle of the scale. Different colors are used for the tendency to occupy the same coordinate. When the double curve uses the normal scale, the scale is gray and the curve is the coded color. When a double ordinate scale is used, this is the code line color corresponding to the curve. The color used for trends does not include alarm color or steady state color to avoid associated processing parameters with normal or alarm conditions. When color is used, it helps the operator in a sudden discrimination between different kinds of information. The coding on the information display (i.e., IPSO, CRT, alarm tile) is limited to seven colors because the benefits of color coding are more marked with fewer colors. Moreover, color coded information has another display characteristic, which helps color deficient observers to determine data and color.

The following colors are used in the information display to display the following types of information: The colors used were carefully chosen to provide satisfactory contrast to the red-green color blind observer.

Color display characteristics

Black background color

Green component off / on, valve closure and operability

Red component on / active, valve open and operational

Yellow alarm status - Caution - Color appears

Other applications not covered by gray text, labels, seperate lines, menu options, piping, inactive and non-instrumental valves, graph grids and other coding rules

Light blue process parameter value

The response of the system to the white operator contact, e.g. menu selection until a suitable system response occurs

The shape coding is used in the information system to help the operator identify the component type, operating state and condition. Component shape coding is based on symbolic marking studies, including shape-coding question tables given to nuclear power plant personnel. Figures 5 and 6 show the shapes used to represent components in the control room. The nature of the empty shape / filled shape reflects the state of the component. Empty shape coding indicates that the component is working, where the filled shape coding is used to represent the non-working component. Examples of shape coding for pumps and valves are as follows.

Pump Empty pump indicates that the pump is operated by operator or automatic control signal. The filled pump indicates that it is released by the operator or automatic control signal.

Valve empty valve indicates that the valve is fully open, and filled valve indicates that the valve is fully closed. Valves that are not fully open or closed have a filled shape / empty shape mixture, left filled shape / right unarmed shape.

Information coding on the valve is provided with this additional property / indication.

Valve open and operable - Red coding

Valve Closure and Operation - Green Coding

Non-gauge valve - green coding (position is operator input)

Valve inoperable - Gray coding with alarm coding (see Section 8)

Indication failure - Gray coding with mixed coding of alarm coding and hollow shape / filled shape

F. Integrated display

Safety related information is incorporated as part of the control room information during normal operation so that the operator may use safety related information. This is a better design from a human perspective than in the past because people tend to use the most familiar information in stressful situations.

In many situations, the safety relationship parameter is only a subset of the parameters that monitor a particular process variable. Operators of the currently designed control room usually use a narrow range of instructions during process control and should use distributed safety instructions when monitoring plant safety concerns. In the present invention, parameters typically used for monitoring and control are accurate for safety-related parameters. If the parameter deviates more than expected from the associated safety-related information, a validity alert is provided to the operator. In response to the alarm condition, the operator reviews the individual channels associated with the parameters on the diagnostic indicator CRT page or the distribution indicator that displays the parameters. At this time, the operator can select the most suitable sensor for the display. The operator may know the information when the validity algorithm validates the data. The composite output of the resulting validation algorithm is used on the high level display page on the CRT display system, including the IPSO, the normal display format of the distribution indicator and parameters. REQUIREMENTS REQUIREMENTS 1.97 Category 1 information is also displayed at a single location on the safety monitoring panel, by a separate indication display.

Critical functions and continuous path (availability and execution) information through the information layer (see also Tables 10, 24, 25, 26, 27, 32-35) can be accessed through the information layer. Alarms provide guidance on non-anticipated deviations in terms of critical functions as well as continuous path unavailability or performance issues. Priority 1 alerts alert the operator if the success path that minimizes the functional requirement does not work or fails to maintain critical functions. Lower priority alerts signal alerts when the system / train and components fail to operate or are inoperable. The IPSO provides the most useful overview information for evaluating the continuous path supporting the critical function in the critical function priority 1 alarm, IPSO critical function matrix combined with the critical function by the operator. Support information related to this alarm condition utilizes the alarm function tile or the critical function section of the CRT display page hierarchy.

The threshold function section of the display page hierarchy contains the following information. Level 1 Display Page - Threshold Function: This page provides a lot of detail on the Threshold Function Matrix in IPSO. This helps to move the level 2 critical function display page that the operator has joined. A second level page exists for each of the twelve critical functions. Each page includes:

- threshold function information provided on the first level display page associated with the threshold function

Information relating to the continuous path availability and the execution of the continuous path capable of maintaining the above critical function

- Current high level information using simulated format with critical function / continuous path related information

- Time slope of most representative critical function parameters

The third level display page in the critical function layer is a dual display page that exists anywhere in the hierarchy. For example, a secure injection display page under inventory control exists within a major section of the display page hierarchy.

Ⅲ. Distributed indicator and alarm system

A. Dispersion Indicator

The variance indicator 82 provides improved security indicative of safety related parameters. REGULATORY REQUIREMENTS 1.97 Key processing parameters, such as category 1, shall be continuous validation indications and trending in the control zone. This variance indicator also provides instructions and alerts according to the parameters required during operation when the data processing system (DPS) is unavailable. This includes regulatory requirements 1.97 category 1.2 and 3 parameters, priority 1 or priority 2 alarm related parameters and other monitoring related parameters. DPS is a reliable and high-capacity computer system, but it may not be available for 24 hours. Less frequently observed parameters can be used by the operator by selecting a menu on the scatter indicator. Each scatter indicator has a capacity indicating the number of parameters related to the component, system or process. The dispersion indicator represents various display formats according to the information needs of the operator. When monitoring or controlling processes such as pressurizer pressures (see Figures 7 and 8), it is desirable for the operator to use process indication values within the most accurate range. For this kind of information, the dispersion indicator 82 shows an analog bar graph of the average of the digital values and sensors in the field 92, as shown in FIGS. 7 and 8. FIG. A preferred validation technique is described in the appendix, and the validation status is indicated in field 92. This validation data is checked for Post-Accident Monitoring Indication (PAMI) when applied. Indicators can be used for post-accident monitoring when consistent with PAMI. This has the advantage of allowing the operator to be very familiar and to use the daily use indicator. If necessary, the operator can touch the sensor to display an individual channel on a separate indicating digital display. The validated parameters are beneficial to the operator by reducing the irritating overhead and workload resulting from the display of multiple sensor channels representing a single parameter. When the parameter is not validated, the separation indicator displays the sensor reading closest to the last validated value. A validity alert is generated for this condition. The scatter indicator continues to display the value of this sensor until the operator selects another value. The field on the scatter indicator changes from the indication of VALID to the indication of FAULT SEL. This indicates that an invalid value has been selected by the computer. In this case, the operator again looks at the sensor used to indicate the process. If the operator selects a sensor (to make the validation signal fail or to match the PAMI due to improper data), the field 96 with the inappropriateness will be replaced with the message OPERATOR SELECT, which is displayed in reverse phase . If the validation algorithm validates the data and all improperly removed, the malformed alarm is cleared and the algorithm is replaced with an effective computed signal instead of an improper selection or operator selection processing indication.

Parameters that are required to monitor the overall performance of the plant process or to comply with priority 1 or 2 alarms are provided on the decentralized indicator. The most representative processing parameters are the values to be displayed. Through the menu option, the operator can monitor another processing related parameter. The indicator of the RCS panel has 10 related scatter indicators. This indicator is as follows.

1. RCP 1A

2. RCP 1B

3. RCP 2A

4. RCP 2B

5. RCP SealBleed

6. RCS

7. T _hot

8. T _cold

9. Pressurizer pressure

10. Presser level

FIG. 7 shows two separation indicators that may appear on the display 82. Pressure appears on the left side of the display 82, and pressure level on the right side. These pressure indications are as follows. Digital with measurement units; An indication (PAMI) 98 of acceptance of post-accident monitoring of the display (98), a bar chart (94) with processed values, 30 minutes trend (104), normal operating range (106) Unit range (1500-2500) and unit of measure (psig) for bar chart.

There are two buttons CRT and MENU on the upper right corner of the pressure display, and indicate the selection when pressing the select button black light. When the operator releases his hand, the actual selection is processed. The CRT (84) button changes the CRT menu on the CRT of the panel on which the button is pressed, such as the scatter indicator. This CRT selection identifies CRT pages that are very closely related to the parameters on the scatter indicator.

The MENU button selects the scatter indicator menu. (Fig. 8) The top selection of the menu page is almost identical to the normal display.

(2254 psig) display with the unit of measure (valid), indication of acceptance of post-accident monitoring of the display (PAMI), CRT and MENU buttons.

The lower portion of the menu page includes selector buttons (102) for all sensor inputs and the calculation signal of this variance indicator. When the selector button 102 is pressed, a selection indicating light is turned on. When the operator releases his finger, the actual processing of the selection occurs. There are 13 buttons: 4 for 0-1600 psig pressure: 6 for P-103, P-104, p-105 and P-106, 1500-2500 psig pressure: P-101A, P101B, P-101C, P101D , P-100X and P-100Y, 0-4000 psig RCS pressure for two: P-190A and P-190B and one for calculated signal pressure: CALC (currently selected) Signal (i.e., the output of the algorithm). The computation signal of the algorithm can be a valid signal. If the algorithm fails and an individual sensor is selected for the computed signal, then the valid message is replaced by an improper selection message. This improper selection message is displayed as a reversed phase on the separation indicator. This message is displayed on the detach indicator when CALC PRESS is selected until the algorithm outputs an invalid signal on behalf of the improper selection sensor. To change the display, the operator presses a button containing the sensor he wants to see. For example, if you press the P-103 button, the digital display will display the output from the 0-1600 psig range sensor (P-103). The message valid under the digital value is replaced with the message P-103. Moreover, the PAMI message is removed because P-103 is not a PAMI sensor. Button ANAL / ALARM OPER SEL selects the signal used for valid indication in SIAS. Select any sensor displayed on the digital display. This signal selection button provides the operator with options for operator selection among the sensors for analog display and alarm handling when the following faults occur:

1. When the validation fails and the valid selection sensor is selected for the processing indication,

2. When the effective output is not correlated with the PAMI sensor,

When the operator wants to select P-103 for process display, select P-103 for menu and display and press the ANAL / ALARM OPER SEL button. The message 96 in the field under the digital display is recorded as P-103 OP SEL in reverse phase. Whenever P-103 is selected for display, the message OP SEL appears in reverse, and the output from P-103 is used for processing display. Selecting the Operator for Process Display After selecting the sensor, the operator hands off the button labeled ANALOG DISPLAY. This returns the bar art 94 of the analog display and the trend display 104 to the display of the reversed phase with message OP SEL. The ANAL / ALARM OPER SEL button is not displayed on the vari- ous indicator menu page when it is normal. This is indicated automatically when operator selection is allowed after a fault. The ANAL / ALARM OPER SEL button is removed from the menu page when all faults have been corrected and operator allow selection has been disabled. Button ANALOG DISPLAY removes the menu page and replaces the bar graph (analog) and trend selected by the sensor or calculation signal as a process indication (usually a valid calculation signal output).

Another effective processing parameter distribution indicator operates in the same manner. The menu driven variance indicator includes all level 1 and 2 indications for the functional group of instructions.

B. Summary of Validity Algorithm

In order to reduce the task of the operator and reduce the overload of the stimulus, a generically valid algorithm is used. This algorithm takes the output of all sensors that measure the same parameter and generates a single output that represents a parameter called so-called process indication. The generic valid approach is used to ensure that the operator understands. This generic algorithm checks all the sensors [(A. B. C. and D) (the sensor quantity can be specified according to the parameters)] and checks all sensors with a deviation from the mean. If the deviation check is satisfied, the average is used as a process indication and output as an effective signal. If a sensor does not satisfy the average deviation check, the sensor with the maximum deviation from the average is excluded and the average is recalculated with the remaining sensors. When all the sensors have satisfied the mean deviation check satisfactorily with respect to the mean, this average is used as a validation indication. This validation indication also checks the deviation for the monitoring system sensor (if any) after the accident. If this second deviation check is satisfied, the process indication is indicated by the message Valid PAMI (post-accident monitoring indication), which is valid for monitoring an emergency since it matches the value determined by the PAMI sensor. As long as there is a match, this indicator will be used for post-accident monitoring rather than dedicated PAMI indicators. This has the advantage of using a very familiar indicator that the operator uses daily for work. As described, the validation process reduces the time it takes the operator to perform tasks related to critical process-related parameters. To ensure information over time, all valid outputs are recalculated at least once every 2 seconds. Moreover, margin and hardware diversity ensure reliability in the computing device.

The following sections describe algorithms and display processing in DIAS and CRT displays.

1. The process indication is always displayed on the .DIAS display and / or on the CRT page if a single process indication is required for multiple sensor values. Each plant processing parameter is individually measured to determine the type and location of the display (DIAS and CRT or CRT only).

2. The treatment indication is always valid except in the following cases:

a. Unsuitable choice

b. Operator selection value

These are described next.

3. Process indication is always used for alarm calculation and trending. This can be valid, improper selection, or operator selection data, depending on the outcome of the algorithm calculations described below.

4. Using the menu on the DIAS or CRT, the operator can observe the values (A, B, C, D or calculated output) without changing the process indication.

5. When the validation algorithm can not generate valid data, invalid selection values are automatically displayed in the process indication.

The improper indication is output from the sensor closest to the last valid signal when it becomes invalid.

In DIAS (if applicable), this information is labeled as improper selection.

On the CRT (S) graphic page, this information is treated as an asterisk ( ^* ) to indicate suspicious data.

The improper selection process indication is automatically returned to the validation indication when the validation algorithm computes valid data.

6. Operator selection The sensor is selected for the process indication only when:

a. Improper confirmation or

b. PAMI breakdown

The operator selection processing indication will take the place of the effective improper selection processing indication.

In DIAS (if applicable) this information will label the operator selection. In the CRT (S), this information is treated as an asterisk ( ^* ) in the graphic display language and labeled operator selection in the database. Operator selection processing indication is automatically replaced with the appropriate signal when both undue confirmation and PAMI failure are removed.

It should be understood that discrete validation is performed using generic algorithms applicable to other parameters. In this way, the operator is assured of an understanding of how the verification readings are determined for each parameter. This algorithm always has an output and allows the operator to select the display when it is not available. This scatter indicator facilitates access to all essential information through a functional or organized menu system and allows operators to access less frequently the information they need. Backups are synthesized at the secondary level of discovery, eliminating the need for separate backup displays. These displays use formats to provide all the required indications, while drastically reducing the amount of indicators installed in the panel.

C. Alarm handling and display

Another feature of monitoring associated with each panel is to reduce the occurrence of alarms to minimize information overload to the operator. The cross-channel signal validity is executed in preference to the alarm occurrence, and the alarm logic and setpoint may occur in the applicable power plant mode. The alarm is visually displayed according to the response priority of the operator. For example, priority 1 commands immediate execution, priority 2 commands rapid execution, priority 3 is an alert, and priority 4 or operator assistance is merely information indicating status. The types of alarm conditions in each category are described below.

[Priority 1]

1. A condition causing a trip within 10 minutes

2. State causing major device damage

3. Personal / radiation risk

4. Critical safety function violation

5. Immediate implementation of required regulatory requirements

6. First output reactor / turbine trip

[Priority 2]

1. The condition causing the trip after 10 minutes

2. Execution of regulatory requirements other than priority 1

3. Possible device damage

[Priority 3]

1. Sensor deviation

2. Device

3. Non-operational device / process variation

Alarms are indicated using techniques that quickly associate operators with the impact on plant safety or performance alarms. These techniques group the display in light of the underlying problem rather than the signs of certain alarm conditions. Another feature is the spatial notion of an alarm display that allows pattern recognition. Another is the power plant level screen overview display above the IPSO board showing the success path and critical function affected by the priority 1 alarm.

In order to ensure that all alarms are recognized by the operator without overwork, all alarms can be recognized individually or in small and functionally related groups. All alarms can be recognized on the control panel. Instantaneous automatic alarms for alarm status changes are interrupted without operation. A periodic instantaneous automatic regenerator is provided for unrecognized cases. When the operator wants to recognize later, he / she activates the integrated alarm stop flash, which is automatically re-adjusted on time.

In addition to alarms, the operator notification, which is an information notification category, is set for information that is helpful for operation but does not show any deviations from the abnormal state. The condition classified by operator assistance is; Access to the interlock, permitting device status changes, and channel bypass status. Some parameters have one or more alarms for the same parameters (i.e., the seal inlet temperatures Hi Hi and Hi). In order to limit the response required to the operator, the lower priority alarm is automatically supported without a reset tone or slow flash when a higher priority alarm is triggered after the activation of the lower priority alarm. Hi Hi The alarm will be recognized by the operator. Therefore, the personnel need not be aware of the lower priority alarms. If the high priority alarm is no longer needed, the reset sound or alarm window will flash slowly. Operators will find that a high priority alarm is supported. If the lower priority alarm condition remains, the alarm tile or indicator will turn on after the operator recognizes that the high priority alarm has been cleared. If the status is improved before the operator acknowledges and high and low priority alarms are cleared, the high priority alarm cleared means that the low priority status has also been cleared.

1. Mode and Equipment Dependencies

Important characteristics of the alarm system are mode dependency and device state dependency logic. This feature greatly reduces the number of alerts received in critical events and limits the number of alerts to indicate a state that is out of normal power plant conditions. All and equipment dependent states are implemented through both alarm logic changes and setpoint changes. Mode-dependent alarms reduce the low-pressure pusher alarm set point to avoid disturbance alarms of normal reactor rings. The equipment dependent logic is used to execute low outflow alarms only when an upflow pump is assumed to operate. We chose four modes corresponding to the important change of alarm logic based on the plant condition.

1. Normal operation

2. Heating / Cooling

3. Cooling operation stop / refueling

4. Post-Trip

The alarm mode is entered manually by the operator except for the post-trip mode. At the reactor trip, the alarm logic automatically changes to the post-trip mode without operator intervention. All equipment dependent alarm characteristics are triggered automatically without operator action.

2. Subfunctional grouping

The RCS panel can cause more than 200 alarms. A number of alarms are formed in the auxiliary function group 108, 110, 112 to reduce the amount of alarm that is imposed on the operator and to improve the alert identification of the operator. (FIG. 15) The auxiliary function group alarm tile is read from the panel alarm message window (or accessing the alarm tile) or the CRT. In the case where the important processing related parameters are alarmed, there is one alarm message in each alarm tile (i.e., RCS low pressure). This single alarm message allows the operator to quickly recognize the problem handling process. Each alert tile can be in one of the following states: As shown in FIG. 16, some alerts are grouped by similar parts rather than processing functions and are increased by a message such as 116. As shown in FIG. 9,

1. Unrecognized alarms - If there is an unacknowledged alarm associated with an alarm tile, the alarm tile flushes at a faster rate (ie, 4 times / second with a 50/50 duty cycle). This state overrides all other alert tiles for group alerts.

2. Stop Alarm / Restore to Normal - If the alarm condition is cleared, the corresponding alarm tile will be set to a slow rate (i.e., 1 time using a 50/50 duty cycle as indicated by the short ray in Figure 9) / Second).

This state overrides group alarms in the remaining two states.

3. If there is an alarm-alarm condition and there is no alarm condition 1 and 2, the alarm tile does not flash (indicated by no light in Figure 9).

4. NO ALARM - If there is no alarm condition associated with the pager tile, the alarm tile will not light (no indication in Fig. 9). In order to indicate that the bulb of the alarm tile is acting, a lamp test characteristic is provided.

3. Shape and color coding

The alarm information is distinguished by a unique tile color, preferably yellow (118). The parameter / component descriptor or concise message 120 in the tile is shown in blue. Gray color coding for the tile color 122 is used to indicate recovery to the steady state. The shape coding is used to identify alarm priorities, i.e. 1, 2 or 3. Use bright primary colors to maximize attention to alert information. The shape code used to identify alarm priorities is represented using representative characteristics.

The alarm priority is shaped according to the priority of the information for returning to the normal state. For the Priority 1 alert, the alert tile, the phonetic element, the symbol, the chime parameter, and the menu option field are displayed in a reversed phase using alert color coding, i. E., A descriptor indicated by the blue character 120, . The descriptors are displayed in blue to provide good contrast for reading. Furthermore, the alarm tile and the menu option field of the CRT use the same display.

For priority 2 alarms, alert tiles, phoneme parameters, components, menu options, and symbols have a thin (1-line) border 126 that uses a blue alert color code around the descriptor. For priority 3 alerts, the alert tiles, phantom parameters, components, menu options, and symbols have brackets 128 around the descriptors. For all alerts, the English descriptor on the CRT's message line is also displayed in the alert display format when in alarm condition.

4. Alarm on CRT

Each CRT page in the data processing system provides the operator with an overview of whether there is an unrecognized alarm condition and where in the plant the unrecognized alarm condition is present. The standard menu with each display page includes all first level display pages as IPSO and menu options. (See also tenth degree menu 130). This menu option field indicates in the portion of the display page hierarchy that an unacknowledged alert is present and provides an alarm status / priority using the alert highlighting feature described above. If the alert tile on the DIAS is in the alert state, the first level display page menu option field 132 in menu 130 shows that the alert status is in the relevant area of the display page hierarchy. The alarm tile among the menu 130 is put into the category of the first level display page set corresponding to the control grouping or by the threshold function as shown in FIG.

In addition to the alarm information shown in the second level display page menu option, the next display page characteristic is also used to indicate the presence of an alarm. A display page menu option 134 that provides access to the level 2 and 3 display pages if the information on the corresponding page is in the alarm state. (I. E., If there is an unacknowledged alert, the display page menu option is highlighted to show the highest priority unrecognized condition). By selecting option 136, the operator can change the level 3 Invokes a level 2 display page directory containing a screen view of the display page. (See FIGS. 12 and 15). If the display page information is in an unacknowledged alert state, each level 2 and 3 display page provides an alert notification. This alert information is most useful for determining where in the region of the display page hierarchy an alert is present. For example, an operator may find that an unacknowledged alarm exists in the auxiliary system due to a gray alarm shape coding (return to normal) and a flashing alarm in the PRI menu selection field. Then the operator is the menu selection DIRECTORY and touches PRI to access the directory / hierarchy to see which page (s) have alarm information. The field (s) (PRI level 138) representing the display page (s) with the twelfth degree alarm state (s) will shine greatly when the important display directory appears. The desired perigee with alarm information can be accessed by touching the flashing field. The descriptors of the components and the processing data of the CRT (FIG. 13) The plant data on the display page are coded and flashing to provide alarms and their recognition status. If the parameter associated with the component is in an alarm state, the descriptor of the component may provide such alert information. The alarm information is provided even if the parameter of the alarm condition does not appear on the display page. For example, the pump lube oil pressure is indicated by the alarm coding of the component symbols. To get the correct information about the alarm, the operator can access the low-level display page or use the alarm system feature described below.

5. Determination of alarm condition and acknowledgment of alarm

According to FIG. 16, each category 1 and 2 alarm signal indicator tile in the DIAS can inform the operator of one or more alarm conditions. A message window 114 is installed in the display area 78 on the panel to quickly determine the actual alarm condition. By depressing the unconfirmed alarm signal indicator tile 138 an English expression 116 of a special alarm condition appears on the message window 114. The alarm tile 138 continues to blink until all alarm conditions associated with the alarm tile are confirmed. The English Descriptor of the additional alert can be accessed by pressing the alert tile 138 again. An alert message line appears in another field at the bottom of the display page 84 on the CRT panel as the message appears on the message window of the DIAS alarm display 78. The alert message includes the following information: Priority, severity (i.e., Hi, Hi-Hi0 descriptor, setpoint, and real-time processing values (coded to show alert priority and alert status). If there are additional unacknowledged alerts associated with the tile, Number is specified within the right circle of the message area (see Figure 13) In addition to these alarm messages, the menu selection / field appears on the display page menu (area 4) to allow direct access to the display page. Is shown in Figure 22. In the DIAS display (78) of a given panel, the alarm tile in the alarm And can be accessed and verified on the CRT by way of accessing and checking the alarms via the alarm display page menu selection, followed by the alarm display page menu selection, i.e. the first level display page set (area 3) An alert tile in the alert is set in area 4 of the display page menu. A tile appears, which becomes a touch target providing access to another tile. The operator can display the CRT alert tile Reviews, obtains information, and supports the display page touch target.

This method of responding to an alarm tile alarm is the most useful method for responding to an alarm at a week station away from the location of the operator. All alarm conditions related to the signal indicator tile of the DIAS display are kept in the buffer state. The following form is displayed, which includes the alarm condition.

1. Unconfirmed

2. .

. .

. Unspecified

N First-in / out return to normal state

N + 1.

N + 2.

. .

. .

.

n Unwind / return to normal state

n + 1 perceived information

n + 2.

. .

. .

Pressing the alarm tile will go to the alarm condition at the top of the buffer.

When an unacknowledged alarm is acknowledged, it transfers these alarm conditions to the bottom of the buffer. Detection of released alarms causes them to come out of the buffer. (N + 1, n + 2 ...) that are already acknowledged can be reviewed if there is an unacknowledged or unacknowledged alarm condition. When reviewing these alerts, move them to the bottom of the buffer.

Priority 3 alert messages and operator assistance occur only by the computer and appear only on the message line 132 of the CRT page (FIG. 13). There is no English descriptor on the message window of DIAS display 78. A signal indicator for all alarms of priority 3 is installed on each signal indicator workstation and a priority 1 alarm tile is installed to assist the operator associated with these workstations. If the alarm state changes its priority, a change also takes place in the alarm handling system. When a high priority alarm is on the same parameter, the previous alarm is automatically removed without a reset tone or a slow flicker. (That is, it does not need to be acknowledged because it needs to check a higher priority state).

When a high priority alarm is reached, the operator needs to confirm that the higher priority alarm has been removed. However, if a lower priority alarm is still present, the light goes on (as soon as the operator confirms a higher priority clearance status) and automatically goes to the acknowledged state. (Ie, the operator does not need to take any action). When the highest priority alarm is removed, the operator sees a new lower priority alarm condition.

The present invention provides listing, categorizing alert, and accessing supported display pages. In this system, an alarm is provided on the alarm listing display pair accessible from the field 138 of the CRAS display 84 and the DIAS display 78 shown in FIGS. 15 and 13, respectively. The alert categories in this listing are: (See also Fig. 14):

A) Primary level display page set (major plant system / function grouping)

B) Control Room Workstation

C) Alarm tile

Workstation alarm tiles during alarm are recorded first. Alarms related to the alarm tile are recorded as they are contained in the alarm buffer of the alarm tile. These alert categories match the information of the operator and provide alarm data necessary for alarm state response. Approaching the alert listing 78 via the categorized display page 84 (FIGS. 4 and 12) allows the operator to easily select within the category the data he wants to find. By using the display page feature indicating the alarm condition following the alarm list menu selection (FIG. 4), the operator can look at the particular alarm condition he is interested in. Three practical examples of accessible alert data in the categorized list in the display page 84 (FIG. 4) are as follows.

1) The operator adopts the ELEC 148 (FIG. 12) menu selection followed by the alarm list 140 (FIG. 4) menu selection. This accesses the categorized alert listing of the type shown in FIG. 14, which begins with an electrical alarm.

2) If the operator wishes to look at a particular alarm, ie an alarm related to the RCPIA, he adopts the following menu selection in figures 4 and 12.

- Alarm tiles (150)

- Primary (PRI) (152)

The menu on the display page changes to an indication of the alarm tile associated with the alarm and the first system (see also Fig. 14). The operator may then request one of two different information type types associated with the displayed alert tile.

A. Categorized alarm list - The operator follows the alarm list and adopts the tile or RCPIA menu selection. The categorized alarm list is accessed with the RCPIA alarm at the top of the page.

B. Alarm messages - Operators can use the alarm tile menu selection in the same way as the control panel alarm tiles. Adoption of the alarm tile menu selection provides a display page in the alarm message and menu that can provide support information for the alarm condition.

The alarm information is also provided on all process display mimic diagrams that have parameters or components in an alarm state. Color and shape coatings as described above are used to indicate alarm conditions. For example, if the pump-probe oil pressure is not recorded on the level 2 display page, the parameter in the alarm associated with the component will light up in the component indicator, causing an alarm to appear on the pump's indicator. If the operator wants to know the precise alarm condition associated with the component, he can access the appropriate lower level display page. In addition, he can touch an alarm tile menu selection and then touch the component's descriptor and use the alarm tile display to respond to the alarm. This behavior allows access to menu selections related to the display page providing more detail about the component. According to the present invention, the following alarm recognition method is provided.

1) Alarm Indication with Signal Indicator Tile The alarm can indicate that it has been acknowledged by pressing the Alarm / Unknown Signal Indicator tile or CRT Signal Indicator tile indication. This will change the signal indicator tile from a blinking to a stationary state when all alarm conditions related to the tile are recognized and silence the audible sounds (described later) related to the alarm condition. An alert message appears on the message window (when using physical tiles) and on the workstation's CRT message line (see Figure 16).

2) Indicate whether an alarm is using the alarm listing page - The alarm can indicate whether or not it is on the categorized listing by touching the alarm tile touch target associated with the alarm tile category. (See Figure 14.) 0 Touching the display of the alarm tile, all alarms pertaining to the tile are acknowledged. Such an alarm-aware device may be most useful for recognizing multiple alarms off the location. Clear the unacknowledged alarm indicator in the format When the alarm condition is cleared, it should be recognized by the operator Signal indicator and associated process The display blinks slowly to recognize this information Similar to the recognition of a new alarm, Or by touching a CRT alarm display / feature, you can recognize and reset the cleared alarm indicator. Clear sound / tone is heard in the control room to signal the next alarm information.

1. Unknown track 1 or 2 alarms.

2. Alarm reminder tone for Priority 1 or 2 tone unidentified or removed status.

3. Priority 1 alarms removed, or Priority 2 alarms removed.

An audible alarm, tone 1 or 3, is present for 1 second and tone 2 is periodically repeated once every minute until all new or removed alarms are acknowledged. In situations where there are multiple unacknowledged alerts, the operator needs to pay attention to the highest priority alert state. In this situation, the alarms of all the tammi alarms, such as the new priority 2, 3, and all the removed alarm conditions, are superimposed, preventing the operator from hearing the most important alarm conditions. There are STOP FLASH and RESUME buttons in MCC, ACC and ASC in the control room. When the STOP FLASH button is pressed, the behavior of the alarm system shows the following characteristics:

- All new / unacknowledged Priority 2, 3, and Operator Assist features change from fast blinking to a slowly bright state, ie, tile and CRT alarm indication.

- The removed alarm condition, ie, blinking slowly, does not exist as alarm information.

- Any new or removed alarm conditions that appear after the STOP FLASH button is activated are normally presented to the operator normally. (I.e., flattening)

However, the operator can again press the ALARM STOP FLASH button to disable this condition. The alarm reminder tone informs the operator of any new and unacknowledged alarm conditions present in the operator. To know the perceptual state, the operator employs a resume button that switches all unacknowledged and removed states to their normal display alarm state. The alarm prohibit button is back-lit after adopting the alarm prohibit feature. Allows the operator to quickly and directly select the CRT display page appropriate for the display and alarm condition of the alarm parameter, whether it is an alarm in a single action of the operator in order to quickly access the support information and quickly respond to the alarm condition.

The present invention provides margin and variability in alert processing so that the operator is assured of alert handling techniques and plant safety and usability are not affected by device failure. Priority 1 and 2 alerts are processed and presented by two independent systems. 2- The system margin is not visible to the operator with continuous cross-checking and integrated operator contact area. 16H-FIG. 18 shows a schematic diagram of an alarm response using a tile according to the present invention. The group of tiles described relates to reactor coolant pump seal monitoring in the reactor cooling system panel shown in FIG. The Priority 2 Seal / Bleed System Trouble Alert flashes to alert the operator and the operator can read a more complex message with a higher control bleed-off pressure in the message window. Such a message is provided in priority 1 and 2 alerts. A more complete form of the same message is presented on the panel CRT. The CRT confirms a menu selection indicating a useful supported display page. Operators also have direct access to all alert listings within a particular group. Thus, an overview of the alert condition is provided in the tile and details are provided in the associated message. The given alarms are both more important and less important at special points depending on the device status and mode of operation of the NESS. The amount of information handled by verifying the parametric signal is reduced and automatically removes lower priority if higher priority alarms are operating in the same state.

IV. Data processing system

A. CRT display

The CRT 84, shown in the center of the panel in the third view, is part of a data processing system that processes and displays all plant operating data. It is therefore connected to all other machines and control systems in the control room. FIGS. 2, 28 and 30 schematically show the relationship between the data processing system and the control system plant protection system and the distributed instruction and alarm system. The data processing system 70 receives the same sensor data used to implement the control logic of the control system from the control system 64. It likewise receives effective sensor data from the distributed indication and alarm system 72 that the distributed indication and alarm system is used to generate distributed alarms and displays. The plant protection system 50 does not internally use valid data for its trip logic and the raw signal is passed through a data processing system 70 that performs its signal validation logic on the plant protection system signal for each channel And passes through valid valid signal and valid signal compare logic. The valid signal from the control system 64, the plant protection system 50, and the distributed indication and alarm system within that operating area are compared and displayed on the crt 84. Both valid signals from the comparison logic and valid signals from the plant protection system are used to display on the CRT.

Thus, the CRT display inside each panel includes signal validity and all CRTs in the plant have access to information available on other CRTs in the plant. Moreover, any given CRTDP will generate an alarm tile image from any other tile panel, and an alarm will be acknowledged. The picture world display window is also accessed. The CRT actually responds at almost two second intervals.

The CRT display page contains all plant information useful to the operator in a structured, hierarchical form. The CRT page is very useful for displaying information because the plant process is graphically represented in a format that matches the operator's time. Furthermore, CRT forms provide trend-categorized data, messages, prompt action and alert operators to abnormal procedures. The basic method by which the operator obtains the information form on the CRT is through the touch screen contact area which operates in a well known manner. The touch screen is based on infrared radiation technology. Horizontal and vertical illumination is present in the bezel installed around the surface of each color monitor. If the beam is disturbed by the user, cross-references with the display page database are used to determine the adopted information. Selecting Messages and Supported Display Pages The touch target can be accessed on the panel CRT by touching other panel features such as scatter indicators and alarm tiles. IPSO is useful as a display page and forms a display page layer. (See FIG. 10, FIG. 22, and FIG. 24). There are three levels under the IPSO, and each level in the hierarchy provides information that matches information that meets a particular operation. The structure of the hierarchical form is based on helping the operator perform his duties and also facilitating access to all the information displayed via the CRT. The display format on the normal level provides information on general monitoring behavior, while the lowest level has useful information to support symptomatic behavior. The Level 1 display page provides useful information for general monitoring actions related to key plant processes. Such a display page informs the operator of the main system transition and main device status and to a lower level display for supporting or symptomatic information. The Level 1 display page looks like this:

1) the first system (see, for example, FIG. 19)

2) the second system

3) Power conversion

4) Electrical system

5) Auxiliary system

6) Critical function

Level 2 display pages provide the most useful information to contribute to plant components and systems. These pages contain all the information necessary to control the processing and functions of the system. The parameters that should be observed while controlling the job appear on the same display even if they are part of another system. The proposed operating process or component control guidelines are used to determine which parameters are displayed. 20 is a sample display for controlling a reactor coolant pump (1A and 1B). Operators typically monitor the first system display page to access the RCS transition. If the operator wants to operate or adjust the RCP 1A or 1B, the operator can access the control display page. All information about the reactor coolant pump con- croll is on the control display to end unnecessary jumping between the display pages. The level 3 display page provides useful information for diagnosing the components and processing of the process displayed on the level 2 display page. The Level 3 display page provides useful data such as directional cross-channel comparisons, detailed information about device diagnostics or system outage, and trending information useful in determining direction of system transition, degradation, or enhancement. Figure 21 shows a diagnostic display of the sealing and cooling zones of RCPLA. The pump section, the support oil system, and the motor section appear on the separate display page due to display page information density limits.

Display page access is achieved through the use of menus located on the bottom of the display page. Each display page has a single touch, a standard menu form that provides direction for access to all relevant display pages within the information layer. The menu has a field (see FIG. 10) in which a display page title is recorded. The specified display page is accessed by adopting the field. The menu selection fields associated with the display page include the following. (See also Fig. 22)

1) a higher level (when applied) immediately within the hierarchy display page or item (C). This feature is more meaningful on the third level display page since the next higher level page is usually a level 2 display page that is not on the menu.

2) The display page (h, i) of the system that is connected or supporting the processing of the currently displayed page.

3) All six first level display pages (b, c, d, e, f, g).

4) IPSO display page (a).

5) The last display page (j) that appeared on the monitor.

In order to access the display page described by the menu selection, the operator adopts the menu selection (a-k) by touching the desired menu selection field on the monitor. The menu selection shines loudly until the display page appears. (Using black letters on a white background), other means are used to quickly access other display pages, since the menu selection allows direct access to a minimal set of display pages within the display page hierarchy. Operators can choose from three options.

(1) Display page access using alarm tiles - This mechanism for accessing display pages is most useful for obtaining display pages related to workstation processing. Pressing the workstation alarm tile changes the area 4 of the display page menu of the workstation CRT to a new menu with selection of the display page associated with the alarm tile's disk rupture. For example, the RCPIA alarm tile provides menu selection related to RCPIA. The desired display page then becomes the direct access menu selection.

(2) Access to CRT information from the distribution indicator - As shown in FIG. 7, each distribution indicator 82 has a CRT access touch target 158. This button allows you to access support information for the processing parameters currently displayed on the scatter indicator. By touching the CRT target on the scatter indicator, area 4 of the workstation's CRT top menu selection changes to a menu selection that includes a display page with supporting and diagnostic information related to the processing parameters.

(3) Access to the display page using the display page directory - Display page Any display page in the hierarchy can be accessed using the currently displayed menu.

For example, if an operator views the water supply system display page and wants to access the CVCS display page, the following sequence occurs. (Refer to FIG. 22 and FIG. 4), the operator touches the PRIMARY menu selection (selection b of the three areas in FIG. 22) following the DIRECTORY menu selection (selection 2 of area 2 in FIG. 22). This accesses the first area of the display page hierarchy from the display page library. (See also Figure 4.) Each display page within the first part of the display page hierarchy is a combat target on this display page and the operator can select the CVCS display page immediately. Any page within the display page hierarchy can be accessed using this feature. Following the DIRECTORY menu selection is the desired hierarchy associated with the desired hierarchy associated with one of the six first level display pages, i.e. menu selection b, c, d, e, f or g, In addition to the above menu selection, there are menu selections for last page, alarm list, alarm tile, other and horizontal paging selection (Keys). The last page (selection in Figure 22) allows direct access to the last page on the monitor. This is very useful for an operator to compare information between two display pages or to restore information already associated with the operator. The alarm list (selection n in FIG. 22) allows quick access to the alarm listing display page. The alarm tile (selection m on the 22nd floor) allows quick access to the alarm tile display of active alarm tiles within the area on the workstation's 4 areas of the CRT menu (see FIG. 23). This allows the operator to quickly access alert information relating to a particular tile on the CRT of a workstation. The other (selection k in FIG. 22) allows easy access to information or display pages that do not fall within the category of information described by the currently displayed menu selection.

B. IPSO

Another part of the data processing system is the integrated processing status overview (IPSO board 24). Although the number of displays and alarms that stimulate the operator at one time can be significantly reduced by using the distributed alarms, distributed displays and CRT displays described above, the number of stimuli is still relatively large, especially during emergency operation, The operator ' s understanding of the state and tendency can be delayed. A single display is needed that provides only the highest level of interest to the operator, and it should be able to guide the operator to more detailed information as needed. Although there have been attempts in the past to provide a large board or display to an operator, such displays today have not been fully integrated in nature by their nature, as described below. IPSO boards provide an overview of high-level concerns, including an overview of plant status, critical safety and power functions, symbols representing key systems and processes, critical plant data and critical information. The IPSO information includes trends, deviations, and numerical values of the most representative critical function parameters, and also includes the presence and location of priority 1 alerts, including the availability and performance of the system supporting the critical function. This is also known as success path monitoring. The IPSO board also identifies the presence of other unacknowledged alarms and their location within the plant. Therefore, the IPSO links the gap between the tendency to the operator's systemic accident and the more desirable assessment of the critical function. This compensates for the reduction of the dedicated display to help the operator maintain the on-site power plant condition. This also helps the operator to get an overview of the plant's operating status while it is involved in detailed diagnostic work. IPSO facilitates understanding among all plant personnel by providing a common mental visualization of plant processes. The state shown in FIG. 25 is a reactor trip. In the example shown, the temperature rise in the reactor is 27 [deg.] And the average temperature rise is greater than desired, the rise being indicated by the arrow and + sign. The pressurizer pressure is higher than desired, but it is falling. Similarly, the level of water in the steam generator is higher than desired but decreasing. FIG. 24 illustrates a CRT display page layer, where IPSO is located at a vertex, and the first level display page set includes general monitor information for the second, previous, primary, secondary power conversion and critical function systems, respectively The second level display page is about system and / or component control, and the third level display page provides details and diagnostic information. The IPSO is a continuous display that can be seen from both the control room workstation, the mobile supervisor's office and the technical support center. The IPSO is also located in the center of the master control unit. The IPSO exists in a display page format that can be accessed from any control room workstation CRT as well as remote facilities such as Emergency Operations Facility. The large IPSO panel format is 4.5 feet high by 6 feet high. Its location is behind the MCC work station and is about 40m away from home (away from home). One of the advantages of IPSO is that it uses IPSO information more than a power plant, especially when there is a problem that has a lot of impact on plant function. IPSO information helps operators respond to safety-related issues as well as plant power generation issues. The IPSO provides information to quickly assess the critical safety functions of the plant, allowing operators to quickly assess overall plant process conditions. The concept of monitoring power plant power and safety functions allows power plant and power plant processes to be categorized into a set of information that is easy to understand and representative of during the power plant process.

Features include:

Important for power critical stability

1. Reactivity control × ×

2. Core heat removal × ×

3. Remove RCS heat × ×

4. RCS inventory control × ×

5. RCS pressure control × ×

6. Steam / feed conversion x

7. Electricity production ×

8. Heat exhaust ×

9. Containment environment control ×

10. Containment Isolation ×

11. Radiation emission control × ×

12. Essential auxiliaries x x

A 3x4 alarm matrix block 160 containing a box 162 for each important function is located in the upper right corner of the IPSO. (See CRT display of IPSO in FIGS. 25 and 10). The matrix provides one position for successive indications of critical functional states. If there is an alarm state of priority 1 associated with the critical function, the corresponding matrix box 162 is illuminated in accordance with the priority 1 alarm procedure technique. The critical function alarms represent one of the following priority 1 states. Failure to meet safety status check (post-trip)

- Success path used to support critical functions / System malfunctions

- an unfavorable Priority 1 control deviation in the power production function (pre-trip) unavailability of the safety system (less than the minimum availability defined in the regulatory requirement 1.47). The 3x4 matrix display is a summary summary of the first level threshold function display page information 32nd view. The operator obtains detailed information related to the critical function and success path alerting in the critical function area of the display page. Each critical function may be maintained by one or more power plant systems. IPSO information typically supports systems that maintain critical functions. For some critical functions all states of the critical function can be evaluated by a representative controlled parameter. For these threshold functions, the relation of the control target value and the processing parameter to the tendency improvement or degradation indication appears to the right of the IPSO parameter descriptor. The arrowhead described in FIG. 26 is used to indicate that the parameter is falling toward or beyond the control target value when the integer part of the parameter value is greater than the acceptable narrow band control value. The arrow head direction is up and down indicates the direction of process parameter change. If this parameter is outside the normal control boundary, a plus or minus signal appears above or below the control target value display. The following rationale was used to select parameters or other instructions used in the IPSO to monitor the overall situation of the critical function.

1. Control of reactivity

The only parameter displayed in the IPSO as a means of monitoring reactivity is reactor power. Using reactor power, the operator can quickly determine if a rod is inserted. Also, reactor power is used to determine the general rate and direction of reactivity change after shutdown. The reactor power is expressed in digital form (166) in the IPSO because the distributed numbers of these parameters are often important to both the operator and the administration. The IPSO also provides an alert representation to the reactor vessel if there is a Priority 1 alarm condition associated with the core operation limit supervision system.

2. Remove Core Heat

The parameters given to the IPSO to determine if the core heat removal is appropriate are the core outlet temperature 168 and the negative cooling margin 170. If the core outlet temperature is within the range, the operator can be assured that the raw material is being maintained without defects. The subcooling margin is used because it gives the operator a temperature limit for bulk boiling. The core outlet temperature is expressed in the IPSO using a dynamic expression (ie, trending form) because there is a distinct upper bound that defines the limit to the core outlet temperature and the target value for the representative characteristic can be easily defined. The subcooling margin is also expressed in the IPSO because it has a lower limit which defines the operating limit for subcooling.

3. Remove RCS heat

T _H , T _C S / G level 172 and T _ave 174 are used in the IPSO to give the operator the ability to quickly determine the effect of the RCS heat removal function. In order to remove heat from the reactor coolant, the S / G level must be maintained sufficiently to allow the necessary heat transfer to the steam plant from the RCS.

Dynamic representations are used to observe whether the operator is at an unusual state or at a glance if the condition improves.

T _H and T _C are used for IPSO because they are required by the operator to determine how much heat is transferred from the reactor coolant to the secondary system. Because a quick comparison of these parameters is desirable to observe the delta T, the digital value of these parameters is used. Moreover, these actual values are often used and may assist operators in locations where it is difficult to see a distributed indicator indicating T _H and T _C. T _ave is provided to the IPSO using motion indicators to allow the operator to quickly assess whether the controlled parameters are within acceptable operating boundaries.

4. RCS Inventory Control

A pressurizer level 176 is provided to the IPSO using the dynamic indication so that the operator can quickly access whether the RCS has an appropriate amount of coolant and observe the level deviation to indicate an improvement or depressed condition.

5. RCS pressure control

Pressurizer pressure 178 and Sub Cooled Margin are indicated to the IPSO to determine the RCS pressure control. The dynamic display allows the operator to recognize that the pressure state changes to RCS step-down or over-pressure. Dynamic display is used for IPSO to indicate saturation margin. The saturation of the RCS can adversely affect the pressure control capability of the pressurizer. Also, if the pressure drops, the indication of the negative cooling margin monitor of the IPSO is reduced from its limit to saturation.

6. Steam / feed conversion

The processing related to the steam / feed conversion is quickly evaluated by providing information on the IPSO described below.

(a) Feed water and condensation system status information (eg, operating status, alarm status)

(b) Steam generator level, dynamic indication

(c) Steam generator safety valve status

(d) Pneumatic pump valve status

(e) main steam isolation valve condition

(f) Turbine bypass system status

7. Electricity generation

The process (process) related to electric power generation can be quickly evaluated by providing the IPSO to the following information.

(a) Power plant net electrical output, digital value

(b) Alarm information on the deviation of critical processes associated with the main turbine and turbine generator

(c) Power allocation for power plant bus and site grid Operation and alarm conditions

8. Heat Rejection

Processes related to zero emissions are evaluated quickly by providing the IPSO with the information described below.

(a) circulation water system state

(b) Alarm information for the critical deviation of the condenser pressure state

9. Containment Environment Control

Containment vessel pressure and containment vessel temperature are parameters used in IPSO to monitor containment environment control. They are provided to the IPSO using dynamic representations to allow evaluation of trends and relative values. Container pressure variables are used in the IPSO to alert operators to harmful overpressure conditions that can lead to the destruction of the reactor cooling system. The containment vessel pressure also helps to indicate the likely destruction of the reactor cooling system. It can also direct combustion in the containment building.

10. Containment lsolation

The containment containment safety function is monitored by the IPSO as a containment vessel isolation safety symbol. This symbol is driven by an algorithm indicating the validity of the containment vessel isolation state, which will be described later, when the associated state is certain for containment vessel isolation.

- containment vessel isolation operation

- Safety injection activation

- Main steam isolation

- Containment Purge lsolation

11. Radiation emission control

Radiation symbols reside in the IPSO and are present in the IPSO to indicate radiation associated with (1) an indication of a high radioactive level, such as containment, and (2) a radioactive emission pathway to the primary environment. These symbols are provided to the IPSO only when there is a high radioactive level. These instructions are provided in an alarm color at the relative position of the sensor when any one of the following conditions occurs.

- high aerial radiation of containment vessel

- high activity associated with any emission pathway

- coolant high activity

12. Vital Auxiliaries

Essential auxiliaries are monitored at the IPSO by providing the following information.

(a) Status of the diesel generator

(b) Power distribution within the plant

(c) instrument air system status

(d) Service water system status

(e) Component coolant system status

Systems listed on the IPSO are systems that support the main heat transfer passage system and the main heat transfer processes associated with power and safety. These systems include systems that require all major success paths to support availability monitoring and plant critical functions in accordance with regulatory requirements 1.47. The system described below has a dynamic indication on the IPSO.

CCW - Component Cooling Water

CD - Condensate

CI - Containment lsolation

CS - Containment Spray

CW - Circulationg Water

EF - Emergency Feedwater

FW - Feedwater

IA - Instrument Air

SDC - Shutdown Cooling

RCS - Reactor Coolant

SI - Safety Injection

SW - Service Water

TB - Turbine Bypass

The system information provided to the IPSO includes system operating status, changes in operating status (eg, from active to inactive or from inactive to active), and the presence of priority 1 of alerts associated with the system. The alert information in the system helps inform the operator about the critical function alerts associated with the success path. The priority 1 alert information is also provided to the IPSO by an alarm that encodes the descriptor of the display characteristic on the IPSO as described above.

Ⅴ. Comprehensive control room

FIG. 27 is a schematic diagram that collectively displays information available to an operator in accordance with the present invention. FIG. The operator can observe the comprehensive process status summary or high priority alarm from the board. If the operator is interested in the trend of the parameter, the operator may look at the distributed indicator. If the operator is interested in the system and component status, the operator may look at the settings of the system control. Therefore, the IPSO information is displayed on the board or panel CRT, and the operator can use the information from the operator panel or other panel on the CRT. From the IPSO overview, the operator can browse the CRT or DIAS display page. Moreover, the operator can directly access all of these types of information from any control panel, and when the system control is adjusted or set, the results are synthesized into other alarms and display generators in different panels. As shown in FIG. 2 and FIGS. 28 through 31, the synthesis of the system in a general overview means that each panel, including the main console, the safety console, and the auxiliary console, is driven by the data processing system 70 And includes the CRT 84. The data processing system uses the power plant main computer and is not as reliable as the DIAS computer (which is supplied as a microprocessor or minicomputer base), although it is powerful. It is also menu-driven and slower because it performs more. This is primarily used to convey the most important information to the operator, so critical alarm tiles are visible on each CRT and are visible on any CRT. Information available in one CRT can be used in all other CRTs. The indication and alarm system 72 for a given panel can be used for control, but the alarm and indication displays 78 and 82 (e.g., quick and accurate) and control of the panel can not be used in any other panel.

Basically, information is categorized into three categories. The category 1 information should always be displayed continuously and this is done in the DIAS 72. The category 2 information need not be used continuously, but it should be used periodically and this is also done in the DIAS 72. Category 3 information does not need to be provided promptly but is for information only and is provided by DPS. If the DPS fails, some essential information is provided by the DIAS. The DPS and .DIAS are connected to the IPSO board by the display generator 180. [ From the IPSO, the operator can get detailed information by going to the relevant panel or by paging through the CRT display. DIAS and DPS do not necessarily receive input from the same parameters, and the sensors for these parameters are the same as they receive information from their common parameters. Moreover, the valid algorithms used for DIAS and DPS are the same. Furthermore, the algorithms for the different alert tiles and the distributed indicator include DIAS and DPS valid value comparisons as part of the display value calculation.

Figure 29 is a block diagram illustrating a separate indicator and alarm system associated with different parts of the control room signal processing. The DIAS system is preferably partitioned so that for example a desired distributed indicator for a given panel N and distributed alert information are processed in only one segment. However, each segment includes a redundant processor. The information processed in DIAS 1 is normally category 1 and 2 information that is not directly displayed in IPSO. The IPSO normally receives input from the DPS. However, when the DPS fails, a certain amount of DIAS information is sent to the IPSO display generator and displayed on the IPSO board.

DIAS and DPS use the sensor output from all the sensors in the plant to measure the given parameters, but the number of sensors in the plant for a given parameter may be parameter dependent. For example, the pressurizer pressure is obtained from twelve sensors, and parameters from other parameters, such as the balance of the plant, are measured by two or three sensors. Some systems, such as plant protection systems, do not employ validation as they must perform their functions as quickly as possible, for example, employing two of four operating logic from four independent channels. If the validation for a given parameter differs from that determined in two or four systems, an alarm or other queue will be provided to the operator via the CRT.

One of the important features of the present invention is that the DPS does not have to be nuclear qualified but can be credited as it obtains the parameter values from the same sensor as the Nuclear Compliant DIAS. They are valid in the same way, and valid DPS parameters can be compared with valid DIAS parameters before the DPS information is displayed on CRTs and IPSOs.

The nuclear qualification of the alarm tile and window and the DIAS dispersed indicator display is accomplished using a VT x 256 voltage emissive display panel, power conversion circuit, and VT text, such as an M3 voltage emissive display module available from Digital Electronics Corporation of Hayward, A graphic drawing controller with terminal emulation, and the like. The control function of each panel is preferably achieved by using a distributed, programmable controller type product of the MODICON 984 trademark available from AEG Modicon, Inc. of Andover, Mass. Therefore, the calculation base of DIAS is either a distributed decentralized programmable microprocessor or a minicomputer, and the computational base of the DPS is a dedicated mainframe computer.

The ESF control system and the processing component control system are schematically illustrated in FIG. 3, where the plant protection system is preferably a system for control of a nuclear power system, as described in U.S. Patent No. 4,330,367, issued May 18, 1982 to Combus Engineering, Process ", which is incorporated herein by reference. Another feature of the aggregation is the capability to display the threshold function and success path of the IPSO as described above.

Since the main safety and power generation signal and status generator are connected to DIAS and DPS, the operator can page through the critical function according to the display page layer shown in Figures 32-35. In FIGURE 33, the operator finds that the emergency injection can not be used in the reactant cooling system. The 34th east-west operator knows that the emergency injection can not be used and that the reactor is in a tripped state. In this state, the operator must determine an alternative to removing heat from the reactor core by page to the second page of the critical function display page, which is shown for inventory control (FIG. 35) and has comparable detail levels for heat removal. Information of this level of detail and synthesis at such a level can be used for all critical functions, not just in the event of an accident, but under almost all operating conditions.

VI. Panel modularity

As described above, the distributed type and message description can significantly reduce the panel area required to perform a particular monitoring function. Similarly, the distributed display portion of the monitor function including hierarchical pages is reduced compared to conventional nuclear control room systems. Control functions on a given panel can be synthesized in a similar manner. Therefore, a feature of the present invention resides in the physical modularity of each panel making up the master control console, more generally each panel of the main control room.

Basically, the space required for the effective interface between the operator and a given panel is independent of the number of alerts, displays or controls that must be accessed by the operator. For example, six positions in each of the CRTs can be assigned for alarm and indicator display, as shown in FIG. Preferably, the top two of each are dedicated to the alarm 78 and the other four of each can be dedicated to the indicator display 82. The same layout is provided in each panel of the control room. This allows considerable flexibility and cost savings in the construction phase of the plant because the hardware can be installed and the terminals can be connected in the early stages of construction even before the functional requirements of all systems are laid down. The software base system is loaded early with the installation of the display software for a preliminary check of the control room operation. Final software installation and functional testing is performed at a more appropriate point in the construction process. This approach can significantly accelerate the plant construction process for installation and control systems. Because the installation and control requirements at a given plant are often not finalized until later in the plant design, the present invention can significantly reduce the costly delays in construction in all cases. This is a clear cost savings in terms of producing uniform and common panels at the design stage required for positioning and layout of alarms and displays, and saving material costs by creating more compact panels. Moreover, this modularity in the power plant can spur operator training and reduce operator error in emergencies because the functionality of each panel is spatially consistent.

Each module control panel therefore has spatially dedicated decentralized indicators and alarms and is preferably interconnected at least spatially with a decentralized controller 88, CRT 84 and at least one other module control panel, Lt; RTI ID = 0.0 > communication. For example, a summary through the DPS may include automatic availability in all panels for the ability to recognize alerts while located in the operator and another panel among others, and information about the system being controlled in one panel do.

Figure 36 (a) shows a conventional flowchart providing installation and control of nuclear power, and Figure 36 (b) shows a flowchart according to the present invention. Conventionally, input and output are defined and the algorithms that are needed later are defined and these measure the human-machine interface. All devices are assembled at this time and all devices are installed in the plant before the system test starts. Conversely, the modularity of the present invention allows immediate assembly of hardware in parallel with the definition of input / output. Similarly, the hardware can be installed and generally tested in parallel with the definitions of man-machine interface definitions and plant-specific algorithms. Hardware and software are integrated before the final test at this time. In a conventional nuclear facility, the apparatus is installed in the fourth year of the entire installation and control operation, but according to the present invention, the apparatus can be installed in the second and third years.

Referring again to FIG. 2, the processing component control system 56 and the designed safety characteristic component control elements use a programmable logic controller similar to the Modicon device described above, including input / output multiplexers and associated wires and cables, All can be loaded into the power plant before the plant specific logic and algorithms are developed. This device will not fail. Data processing system 70 uses a redundant power plant mainframe computer with data links associated with modular software and hardware. These hardware are carried before synthesis and system testing, and modular software specific to the plant is installed. The DIAS 72 also has the advantages described above in a safety feature control system that is process controlled and designed to use an input / output multiplexer with a programmable logic processor and a minicomputer and a fail-safe device.

Claims (42)

An alarm system for alerting a nuclear power plant and an operator of an abnormal operating condition at a nuclear power plant comprising a plurality of process parameter sensors, wherein each sensor generates a status signal for a given process parameter, the alarm system comprising: And a display interface coupled to the digital processor, the interface including an active state including a concise message in the activated tile image, A first screen area for displaying a plurality of steady-state alarm tile images, means for storing an alarm activation threshold for an abnormal condition of the parameters, means for comparing the threshold value with a display status signal and, if the display status signal exceeds a threshold The parameter state Means for activating said one tile summed and a second screen area for displaying a sentence message identifying a source of anomalous state that is more complete and more complete than said concise message and wherein said one of said tile images and said combined concise Wherein the message is related to the parameter. The method of claim 1, wherein the number of abnormal parameter states with each complete message in the first screen region is greater than the number of tile images, and wherein the alarm system is further configured to perform a full Means for storing a message; means for combining at least a portion of the tile image with a tile image to store each abnormal parameter state and its stored complete message to have a plurality of unusual parameter states associated therewith; A touch response means coupled with each tile image to enable the operator to indicate that the tile image has been acknowledged, a complete message for each parameter anomaly condition causing activation of the perceived tile image, Retrieve, and at the same time Warning system comprising a means responsive to the touch sensitive means for displaying on the group display interface. 3. The system of claim 2, wherein the display interface is capable of generating a page of at least two sets of information, wherein the first screen area of the tile image is on a first page and the means for retrieving and displaying the complete message comprises: It is possible to replace the tile image of the first screen area of the page with a second page defining a second screen area containing a display of the complete message for each abnormal state parameter of interest, Features an alarm system. 4. The system of claim 3, wherein the display interface comprises a third page, wherein the system retrieves from the means for combining and displays on the third page of the display interface all complete messages for parameters associated with the perceived tile image And means for detecting an alarm. 4. The alarm system of claim 3, wherein the second display page comprises a tile-only tile image on the first page. 5. The alarm system of claim 4, wherein the third display page comprises a tile-only tile image on the first page. CLAIMS What is claimed is: 1. An alarm system in a control room of an operator of a nuclear power plant, comprising: a first number of alarm tiles distributed in a display area of a control room, Means for storing a second number of distributed messages each corresponding to a possible unstable state of at least one of the alert tiles and combining at least some of the alert tiles with one of the alert tiles to have a plurality of messages associated therewith; Means for monitoring each parameter status and for activating an alarm tile in the event of an abnormal condition, new alarms associated with an abnormal condition and an unrecognized tile, existing alerts relating to an abnormal condition and an indicated tile, And a reset alarm associated with the steady state of the acknowledged alarm. An active alarm tile, means for alarming the operator with a negative tone in which a new alarm is activated in the display area, means for informing the operator of the nature of the abnormal state by providing a simple signal to the operator on the activated alarm tile, Means for displaying a recognition of a new alert by touching the alert tile, and means for displaying each message combined with the existing alert state of the recognized tile in a display area to guide the operator to perform a corrective action, Means for responding to the perceived touch by displaying each message associated with the reset alarm condition in the display area to ascertain whether a correction of the abnormal state has occurred. 8. The system of claim 7, comprising means for selecting a particular tile in the display area and displaying all messages associated with the selected tile. 9. The system of claim 8, wherein the display of all messages comprises a status code adjacent to each message associated with an existing alert tile. CLAIMS 1. An alarm display device for a nuclear power plant, comprising: a first display including a plurality of alarm tile images; a number selecting one of the tile images; and at least one message uniquely combined with only the selected one of the tile images And a second display for displaying an alarm. 11. The alarm display device of claim 10, wherein the first display is in a first area of one display page and the second display is in a second area of the one display page. 11. An alarm display device according to claim 10, wherein the first display is on the first display page and the second display is on the second display page of the display device. An alerting system for a nuclear explosive device that alerts an operator to each abnormal operating condition generated from an abnormal processor component parameter signal that falls within one of a predetermined set of at least two of the priority categories, An alarm display means including a screen region for displaying in an active state including a concise descriptor in an activated tile image of an abnormal operating state arising from an abnormal parameter signal in a steady state and in the occurrence of an abnormal parameter signal, Means for associating a priority category with each abnormal parameter signal that is displayed with the tile image being activated, means for associating a priority category with a predefined and distinct Alarm system comprising the a code image, comprising: means for displaying, together with the descriptors of each active tile on. 14. The system of claim 13, wherein the system has three priority categories, and the shape coding comprises each of three different variations having a common shape contour. 15. The alarm system of claim 14, wherein the common shape contour consists of a border surrounding the concise descriptor, and the shape coding comprises three variations with different border lines. 16. The method according to claim 15, wherein in said three variants, there is no boundary for the highest priority, a solid line for the intermediate priority, and a boundary line for the lowest priority system. 15. The alarm system of claim 14, wherein the shape coding of the activated tile is maintained unchanged while the color of the shape changes to indicate that the abnormal state returned to normal but the active tile was not recognized. 14. A method as claimed in claim 13, wherein the alarm system generates an image representative of a plant component and a process, the monitoring display means being different from the alarm display device, any power plant component and process being abnormal, generating an abnormal parameter signal Means for communicating to the monitoring display device a priority category of parameter signals associated with an abnormal component or process, means for determining whether to activate an alert tile, And means for communicating with the monitoring display device to generate a shape coded image in the descriptor image of the process. 19. The apparatus of claim 18, wherein the monitoring display means comprises a plurality of screens located substantially at the operator ' s eye level when the operator is located on each of the plurality of control panels, and a plurality of screens located behind the screen And an overview display board. 14. The apparatus of claim 13, further comprising means for flashing each descriptor on the unacknowledged activated tile, one color for indicating whether the alarm is in an abnormal state, and another color for indicating whether the alarm is a normal state. And means for providing each descriptor in color. 21. The apparatus of claim 20, further comprising means for generating an audible tone of a first type in the case of activation of a tile indicating an abnormal occurrence and a second type of audible tone indicating that the activated alert is not recognized The alarm system comprising: CLAIMS What is claimed is: 1. A method of controlling the granting of an abnormal state alert in an alarm system used by an operator at a nuclear power plant, the method comprising: providing a plurality of alert tiles on the alert tile array, each activated tile providing an activated descriptor of anomalies in the plant; Activating two or more of the activated tiles and providing, for one of the activated tiles, a shape coded indication that the associated source requires a high priority attention, and for another of the activated tiles, And each tile is associated with a new alert, abnormal state and perceived tile associated with an abnormal state and an unrecognized tile, so that the operator can respond to each activated alert tile, Alarms, steady state and removed alarms associated with unrecognized tiles, And a reset alarm condition associated with the steady state of the alarm, generates a first sound that is instantaneously audible when a new alarm is activated, generates a second sound that is instantaneously audible upon occurrence of the removed alarm, And generating a new audible and audible third note that is periodically repeated during the audible alarm. 23. The method of claim 22, wherein the first and second notes last for about one second every second and for a third period for about one second. 23. The method of claim 22, further comprising: flashing a descriptor of the new alert and removed alert at a first rate; flashing the descriptor of the removed alert to a second rate slower than the first rate; The step of illuminating without flashing, the descriptor of the reset alarm being provided without illumination or flashing. 25. The method of claim 24, further comprising selectively suppressing the flashing of previous activated new alarms and removed alerts, and not suppressing a third periodically repeated audible tone generation for the suppressed alerts ≪ / RTI > 23. The method of claim 22, wherein at least some of the tiles can be activated by one or more abnormal source conditions, the method further comprising: activating a specific tile to indicate a low order alert with low order appearance coding, Automatically replacing the alarm tile with a high-ranking feature code, automatically changing the alarm state from a high-priority order to a low-priority order code, Removing the high priority alarm only, indicating that the high priority alarm is manually removed, and providing the low priority alarm shape coding of the automatically acknowledged state. Means for generating a plurality of pre-established plant operating variables to generate a plurality of gen 1 parameter signals corresponding to at least a portion of said parameters; means for storing set points for each of said parameter signals; An alarm display including an alarm tile of a predetermined parameter set, an alarm logic means for generating an alarm signal when a particular parameter signal exceeds a certain set point, and means for activating a specific tile in response to the alarm signal A nuclear power plant comprising a nuclear steam supply system configured by a plurality of components operable in an adjusted manner to control plant operation variables for each of the modes, And the specific Wherein the value of the variable set point corresponds to one of the power plant operating modes, and wherein the activation of the alarm tile is selected from the group consisting of: Wherein the value of the variable set point depends on the value of the corresponding parameter signal, and the value of the variable set point depends on the power plant operating mode. 28. The system of claim 27, wherein the alert logic means generates a priority code indicating in the alert display whether the alert signal is a relatively high or low ranking, Lt; RTI ID = 0.0 > a < / RTI > partial operational state. 28. The improved nuclear power plant of claim 27, wherein said mode includes normal plant power production and nuclear post-trip. 29. The improved nuclear power plant of claim 28, wherein said mode includes normal plant power production and reactor post-trip. 32. The method of claim 30, wherein the means for storing the set point comprises a set point for maintaining a critical safety function and a set point for maintaining a critical power producing function, Generating a high rank code for at least some of the alarm signals only among the parameters associated with the power generation and only the critical safety function, and if the power plant is in the post trip mode, the alarm logic means, from the parameters associated only with the critical safety function, And generating a priority code for the signal. Means for measuring an operating parameter and generating a corresponding paramater signal; means for comparing the parameter signal with a predetermined setpoint value to determine if the paramater signal exceeds a set point and to generate an alarm signal; Means for activating a combined tile to display an active state when an alarm signal is generated for a particular parameter signal, and means for activating a control room operator And a means for converting the active state of the activated tile into a perceived state in response to the action, comprising a plurality of components operatively interacting to control a plurality of system operating variables , At least some of the tiles may have different alarms Each of said at least some tiles being capable of indicating a simultaneous presence of a plurality of alert signals for a corresponding plurality of parameter signals, Wherein when touching the display of the one activated tile, each of the alert signals coupled to the single tile as well as the tile is converted into a recognized state. 33. The improved nuclear power plant of claim 32, further comprising means for displaying to the operator an explanation of each parameter signal associated with the alert signal of each tile recognized in response to the conversion means. 34. The method of claim 33, wherein said means for displaying a description also displays an image of a recognized tile. Means for measuring an operating parameter to generate a corresponding parameter signal, means for comparing said parameter signal with a predetermined setpoint value to generate an alarm signal if said parameter signal exceeds a set point, Means for activating a combined tile to display an active state when an alarm signal is generated for a particular parameter signal, means for activating the combined tile to display an active state, And a means for converting the active state of the activated tile into a perceived state, comprising a plurality of components operatively interacting to control a plurality of system operating variables, So as to recognize an activated alert tile At least one first display device responsive to a touch of an operator and spatially and functionally dedicated to the control room for displaying alert information including an alert tile, information about the alert signal associated with any active tiles In response to an operator touching any one of a plurality of second display devices and a second display device distributed in the control room that selectively displays monitoring information on operation of the power plant on a dedicated alarm tile display of the first display device And means for converting the active state of the activated tile to a recognized state. 36. The system of claim 35, wherein the first and second display devices are distributed among a plurality of control room panels, each panel having an indicator alarm and control function associated with one of a plurality of major component systems in a power plant, Each of the two display devices successively generates a menu bar having a plurality of distributed sectors corresponding to each of the plurality of main component systems and the display page searching means and to each of the second display devices, Means for displaying a code on a menu bar sector corresponding to a system panel activated by the tile is provided, and in response to a touch of a menu bar of an operator, There is provided means for displaying the image as a touch sensitive image given to an operator in a display device, Value gangeung image is improved nuclear power plant characterized in that the operator constitutes a means for converting a first, active state of the tiles on the display device 2 to the perceived condition. 37. The system of claim 36, wherein the information on the alert signal is accessed by a touch of a coded sector and comprises a plurality of configuration systems of the primary system primary system and a first And wherein the particular subsystem associated with the alert signal is coded and responsive to the touch of the operator and responsive to the touch of the coded subsystem, comprising a system operating parameter value and the touch image, And means for generating a second screen including detailed information about the first screen. 36. The computer system of claim 35, wherein the first computer system generates a first alarm signal for a particular parameter, activates a tile coupled on a first type display screen, and the second computer system activates a second alarm signal And generating a code on a sector of a menu of the second display device, wherein the recognition is made in both computer systems by a single touch of the operator to either the first display device or the second display device Nuclear power plant. A method for controlling the display and recognition of an abnormal condition alarm in an alarm system for use by an operator of a nuclear power plant, the method comprising activating at least two of the plurality of alarm tiles on the alarm tile array, And each tile is associated with a new alert associated with an abnormal state and an unrecognized tile, an existing alert associated with an abnormal state and a recognized tile, A reset alarm associated with the steady state of the perceived alarm, a reset alarm associated with the steady state and an unrecognized tile, a reset alarm associated with the steady state of the perceived alarm, a first tone that is momentarily audible when a new alarm is activated, When a removed alarm occurs, a second tone that can be heard instantly is generated, and a new alarm And a third tone that is audible repeated periodically during the removed alert. 40. The method of claim 39 wherein the first and second tones have a duration of about one second at one second intervals and the third tones are repeated at one minute intervals for a duration of about one second. 40. The method of claim 39, further comprising: flashing a descriptor of the new alert and the removed alert at a first rate; flashing the descriptor of the removed alert to a second rate slower than the first rate; Further comprising the step of illuminating without flashing, providing a descriptor of the reset alert without illumination or flashing. 43. The method of claim 42, further comprising suppressing the occurrence of a periodically repeating audible third tone for the suppressed alert, while selectively suppressing the glitch of the previously activated new alarm and the removed alert Lt; / RTI >