KR100520423B1 - Multiplexing control system and multiplexing method therefor - Google Patents

Abstract

A multiplexing control system equipped with a common process input / output device for distributing process signals detected by a plurality of sensors detecting the same state quantity of the process to a plurality of digital control devices, and a process input / output for inputting / outputting process signals between a plant and a plant A device is provided for each process signal, and the process input / output device of the process signal having the importance of "large" is tripled, and a process controller having an operation processing function is installed for each of the triplexed process input / output devices. The process I / O device of the in-process signal is doubled and installed, and the process I / O device of the process signal of "small" is installed in a single state, and the process I / O device of the duplicated process and the process I / O of the single process are respectively duplicated. The master of the process controller The control by the controller.

Description

Multiplexing control system and its multiplexing method {MULTIPLEXING CONTROL SYSTEM AND MULTIPLEXING METHOD THEREFOR}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a multiplexing control system and a multiplexing method for controlling processes of various plants such as a power generation plant and a chemical plant by a plurality of microcontrollers, such as a plurality of microcomputers, via a process input / output device.

It is socially desired to operate stably for recycling pump control of nuclear power plants, control of gas turbines and steam turbines of thermal power plants, or chemical plants, and the reliability and safety of plant control In order to increase the protection function, which is particularly important, is composed of a hard wire circuit. In recent years, hard wire circuits have been designed to be software due to cost reduction. However, in order to maintain reliability and safety, the hard wire circuit has a triple relay.

In the conventional triple system control system, a process input / output device is independently connected to each of three microcomputers having redundant configurations, and an output signal is selected from the outside. In order to simplify the external circuit, for example, as described in Japanese Patent Laid-Open No. 5-241606, a method of making the output signal the sum of three signals is also proposed.

In the multiplexed control system, the input / output and monitoring of the process amount are provided separately for the monitoring microcomputer and the input / output hardware interface device, and the input and output are monitored. In this case, by inputting and outputting to the input / output hardware interface device dedicated to the input / output and monitoring separately from the control microcomputer, the information is transmitted to all the control microcomputers so as to unify the information.

In addition, as described in Japanese Patent Application Laid-Open No. 08-106301, a process input / output device includes a circuit which connects a processing device and a process input / output device with a tripled line, and which one is connected to determine which line data is adopted. By assembling inside, it is possible to put a common process input / output device separately from the triplexed process input / output device, and to reduce cost.

1 is a configuration diagram showing an embodiment of a first invention;

2 is a detailed configuration diagram of an example of a main part of an embodiment of a first invention;

3 is an operation explanatory diagram of the first invention;

4 is an operation explanatory diagram of the first invention;

5 is an operation explanatory diagram of the first invention;

6 is an operation explanatory diagram of the first invention;

7 is an operation explanatory diagram of the first invention;

8 is a flowchart for explaining the operation of the first invention;

9 is a flowchart for explaining the operation of the first invention;

10 is a flowchart for explaining the operation of the first invention;

11 is a configuration diagram of a plant control system according to an embodiment of the second invention;

12 is a configuration diagram of a plant control system according to another embodiment of the second invention;

13 is a configuration diagram of a plant control system according to still another embodiment of the second invention;

14 is an explanatory diagram of a data merging method of output data between triple process controllers;

FIG. 15 is a diagram showing details of a connection configuration between a redundant PI / O unit and a redundant CPU unit;

16 is an explanatory diagram of a data input method and a mutual monitoring method;

17 is a diagram showing an input / output table (table) of PI / O;

18 is a flowchart showing a PI / O initial processing procedure at system startup;

19 is a flowchart showing the processing procedure of the PI / O input / output method.

In the prior art, which is a structure in which a process input / output device is independently connected to each of three computing devices, which are redundant configurations, a signal amplifier or the like is input to input to three process input devices even though there is only one input sensor in the input signal. In addition, the output signals outputted from the three process output devices require a circuit for selecting one output signal from the outside to the plant, which is problematic in terms of cost and miniaturization. When all signals inputted to and outputted from the processor control device are connected to the process input / output device in this manner, these circuits become enormous, which leads to an increase in the failure rate and an increase in the number of parts, which is undesirable from the maintenance phase. In addition, in the apparatus described in Japanese Patent Laid-Open No. 5-241606, the amount of hardware can be reduced, but it is a precision problem and the practical effect is very small.

In addition, in the above-described prior art in which the microcomputer and the I / O hardware interface device dedicated to monitoring are separately provided for the input / output and monitoring of the process amount in the multiplexed control system, the transmission time is required, so the response time is large and the control time is required. There is a problem that.

In addition, in the technique described in Japanese Patent Application Laid-Open No. 08-106301, since the connection between the computing device and the process input / output device is tripled and at the same time, a circuit for switching connections is provided in the individual process input / output device. Compared to a process input / output device, a circuit is complicated, and there is a problem that a significant cost increase is inevitable in order to maintain the reliability when a hard wired circuit is used.

SUMMARY OF THE INVENTION The present invention has been made in view of the above point, and an object of the first invention is to provide a multiplexing control system with fast response characteristics and high reliability.

Another object of the second invention is to provide a small multiplexing control system with high reliability at low cost and a multiplexing method thereof.

In order to achieve the object of the first aspect of the present invention, a common process input / output device for distributing a plurality of process signals detected by a plurality of sensors of multiplexed numbers for detecting the same state quantity of a process to a plurality of digital controllers, respectively, is provided. Install it.

Specifically, regardless of the number of microcomputers, by using the same number of interface boards as the microcomputer for one input / output hardware interface device, the input / output hardware interface device is shared, and the control time is performed by performing input / output in parallel without using transmission. Significantly shorten

With this arrangement, since it does not require time for transmitting process signals to a plurality of digital controllers, it is possible to perform multiplexing control with fast response characteristics and high reliability.

In order to achieve the object of the second aspect of the present invention, the redundancy structure of the process input / output device for inputting and outputting the process signal is changed according to the type of process signal, and the signal of the input / output device having a small redundancy is increased. It is configured to input and output via the input / output device.

In addition, a process input / output device for inputting and outputting a process signal to and from the plant is installed for each process signal, and the process input / output device of a process signal of "large" importance is tripled and installed. A process controller with arithmetic processing function is installed, and the process input / output device of process signal of importance is doubled and installed, and the process input / output device of process signal of importance is doubled and installed. The output signal of each of the dualized input and output devices and the single input and output device is processed by any one of the above process controllers.

One of the triplexed process controllers is a device having a master right, and the device having the master right is configured to perform output control of the doubled input / output device and the single input / output device.

A process input / output device for inputting / outputting a process signal to / from the plant is installed for each process signal, and redundant redundancy of the input / output device for inputting / outputting the process signal is tripled, doubled, and singled according to the importance of the process signal. It is achieved by either.

In other words, the plant control device is not tripled in the constituent devices, but is tripled only in the case where the importance of the process signal is high, and the other devices are doubled or singled, so that the amount of hardware can be reduced. It is possible to reduce the size and cost of the device without damaging the cost.

In addition, it is possible to further reduce the cost by adopting a configuration in which all devices are supported by a process controller having a master right.

EMBODIMENT OF THE INVENTION Hereinafter, embodiment which concerns on 1st invention is described.

1 and 2 show the configuration of a multiplexing control system (microcomputer triple) according to an embodiment of the present invention.

The multiplexing control system shown in FIG. 1 is composed of three microcomputers 1A to 1C and input / output hardware interfaces 2 provided in common with these three microcomputers, and the input / output hardware interface 2 includes three sensors ( The process signals from 4A to 4C are input, and the process signals are distributed to the microcomputers 1A to 1C via the interface boards 3A to 3C.

Fig. 2 shows a detailed configuration of the multiplexing control system shown in Fig. 1, where 1A, 1B and 1C are microcomputers, 5A, 5B and 5C are determination units, 6A, 6B and 6C are memories, and 7A, 7B and 7C are signal conversions. 101 denotes an input processing unit, 102 an output processing unit, and performs the following operations.

1) Data output

As shown in Figs. 3 and 4, the microcomputer 1A (master) outputs a master signal to the determination unit 5A in order to set the connected interface board to the master interface board (output permission command to the interface board). do. The judging section 5A outputs the data output permission signal of the signal converting section 7A upon recognizing that it is the master.

The microcomputer 1A (master) writes in the output processing unit 102 via the signal conversion unit 7A, and the output processing unit 102 outputs data to the outside. On the other hand, the microcomputers 1B and 1C (slaves) output slave signals to the determination units 5B and 5C in order to set the connected interface boards to the slave interface boards (output prohibition command to the interface boards). When the determination units 5B and 5C recognize the slave, the determination units 5B and 5C output the data output prohibition signals of the signal conversion units 7B and 7C.

The microcomputers 1B and 1C (slave) write to the signal converters 7B and 7C, but the signal converters 7B and 7C do not output because the output is prohibited and the microcomputers 1B and 1C (slave) do not output. Respond only to).

Processing of data output is performed in steps S1 to S3 in FIG.

That is, output data is input to each signal conversion unit from the computing units of the microcomputers 1A to 1C, and master-slave signals from other microcomputers are input to the determination unit (S1). Next, each of the microcomputers 1A to 1C recognizes whether or not it is a master (S2). If it is a master, the microcomputers 1A to 1C input the output data to the output processing unit from the signal conversion unit and output the output data from the output processing unit to the outside (S3).

2) input data

As shown in FIG. 5, FIG. 6, the input processing part 101 inputs data into each interface board 3A, 3B, 3C. Therefore, the microcomputer 1A (master) outputs the master signal to the judging section 5A in order to set the connected interface board to the master interface board (command for inputting to the interface board).

The judging section 5A outputs the data input permission signal of the signal converting section 7A upon recognizing that it is the master. Therefore, the microcomputer 1A (master) inputs from the input device 12 via the signal converter 7A.

In contrast, the microcomputers 1B and 1C (slaves) output slave signals to the determination units 5B and 5C in order to set the connected interface boards to the slave interface boards (inhibition of input to the interface boards). When the determination units 5B and 5C recognize that they are slaves, the data is recorded in the memories 6B and 6C to output the data input prohibition signals to the signal conversion units 7B and 7C, and the microcomputers 1B and 1C ( The slave performs input from the memories 6B and 6C. Therefore, the microcomputers 1B and 1C (slave) can input the same data as the microcomputer 1A (master).

The data input processing is performed in steps S5 to S8 of FIG.

That is, each of the microcomputers 1A to 1C inputs input data to the input processing unit, outputs the signal to the signal conversion unit again, and inputs a master / slave signal from another microcomputer to the determination unit (S). Next, each of the microcomputers 1A to 1C recognizes whether or not it is a master, and if it is a master, inputs input data from the signal converting unit to the computing unit of the microcomputer (S7). If not, the input data is input from the signal converter to the memory of the input / output hardware interface and input from the memory to the computing unit of the microcomputer (S8).

3) Master / Slave Conversion

The microcomputers 1A, 1B and 1C of the multiplexing control device have a priority selection function of the interface board. The priority selection of the interface board is set in advance as shown in Fig. 7A, and the master / slave is switched. The interface board constantly monitors the status (normal / abnormal and master / slave) of its microcomputer and other interface boards.

In case of master failure, the microcomputer with the highest priority is converted to the master among other normal systems, and master switching is not performed during slave failure and recovery. It also stops functioning if its microcomputer fails. For example, as shown in Fig. 7, the control is performed by a triple system. When the system A fails, the master is replaced with the system B. Even after the system A is restored, the master does not switch over. If the B system fails again, the A system with the highest priority is selected among the other normal systems. Thus, if A system fails, the only normal C system is chosen for the master. I / O control is performed by using this master / slave switching selection function.

The master / slave switching process is performed in steps S10 to S19 of FIG. That is, the magnetic system microcomputer inputs / outputs a master / slave signal with another microcomputer (S10). Next, it is determined whether the magnetic system microcomputer is normal (S11).

If not normal, the signal conversion unit of the magnetic system is stopped (S13).

If normal, it is determined whether the magnetic system is the master (S14), and if it is the master, the determination unit of the microcomputer inputs the data input / output permission signal to the signal conversion unit (S15). If it is not the master, it is determined whether a signal is received from the master (S16). If the signal is present, the microcomputer's determination unit inputs an input / output prohibition signal of data to the signal conversion unit (S17). If no signal is present, the magnetic system determines whether the priority is the highest among normal microcomputers (S18), and if it is the highest, selects the magnetic system to the master (S19). If it is not the highest, the input / output prohibition signal of the data is input from the determination unit of the microcomputer to the signal conversion unit (S17).

4) Response in case of failure

Even if the microcomputer and the interface board fail, only the failed system can be removed so that the device can be recovered without stopping the device.

Next, an embodiment according to the second invention will be described.

11 is a system configuration diagram of a plant control device according to the embodiment. In this embodiment, the digital control devices 11, 21, and 31 (CPU) each having three arithmetic processing capacities constituting each of the tripled process input / output devices (PI / O) 13, 23, 33 and the triple system are provided. Each of the process input / output devices of the dual system (51, 61) and the single system (41) is integrated as a CPU unit, and each of the three process controllers (11) And a configuration connected with each of 21 and 31). On the other hand, each of the tripled CPUs 11, 21, and 31 is connected to the network 1 by a network connection board (NCP) 12, 22, and 32.

Each of the three process controllers 11, 21, and 31 is connected to various sensors and operating stages installed in the plant devices 71 to 76, and the plant has important operation information such as turbine rotation speed and gas turbine exhaust temperature. Introduce the measured value signal of. These signals are very important signals for plant operation, and therefore, the plant equipment is tripled into 71, 73, 75, and 72, 74, 76.

In addition, the CPU 11 and the PI / O 13 and the process devices 71 and 72 are connected in a one-to-one manner, and the CPU 21, the PI / O 23 and the process devices 73 and 74 are connected to one unit. 1 is connected, and the CPU 31, the PI / O 33, and the process equipment 75, 76 are connected one to one.

The input signal from the plant is independently introduced to the process controller via each PI / O, and the output signal is similarly output independently via each PI / O. This improves the reliability of the signal.

Plant devices 77 and 78 handle monitoring signals and output signals to the lamp instruction system. The PI / O 41 connected to these devices 77 and 78 is a PI / O of a single system, and the IF boards 15 and 25 are provided on the CPU unit side with the tripled process controllers 11, 21 and 31. , 35 and the UIF boards 42, 43, 44 provided on the PI / O unit side are connected by cables 81, 82, 83.

The input signal from the plant equipment 77 is introduced into each of the process controllers 11, 21, and 31 via the process input / output unit (PI / O) 41 of the single system, and output to the plant equipment 78. As a signal, output data of a process controller having a master right among triple systems (A system, B system, and C system) is output first. Details will be described with reference to FIG. 15.

The plant equipment 79 handles an important monitoring signal in the control operation of a plant or a plant equipment or a control operation output signal which is not allowed to malfunction, in which a continuous input is required even during a fault replacement operation of the process input / output device. The dual-system process input / output devices (PI / O) 51 and 61 are connected to these devices 79. The PI / O 51, 61 of this dual system is provided with the triplexed process controllers 11, 21, 31, IF boards 14, 24, 34 installed on the CPU unit side and PI / O unit side. It is connected by cables 84, 85, 86, 87, 88, 89 which connect between the UIF boards 52, 53, 54, 62, 63, 64.

12 is a configuration diagram of a plant control system according to another embodiment. In the system configuration according to this embodiment, the tripled process input / output devices 13, 23, 33 and the three process controllers 11, 21, 31 constituting the triple system are connected one-to-one, The process input / output devices 51, 61, 41 of 51, 61, and 41, and the three process controllers 11, 21, 31 which comprise a triple system are each connected in series. Since the unit configurations of the triplexed process controller, process input / output device, and other IFs are the same as those in the embodiment shown in FIG. 11, description thereof is omitted.

The PI / O 51 and the triplexed process controllers 13, 23, and 33 of one of the dual systems connected to the plant device 79 include the IF boards 15, 25, and 35 provided on the CPU unit side; It is connected by the cables 81, 82, and 83 connecting between the UIF boards 52, 53, and 54 installed on the PI / O unit side, and the other PI / O 61 is connected to the UIF board 62, 63, 64 are connected to the UIF boards 52, 53, 54 of the PI / O 51 on one side via cables 94, 95, 96. The PI / O 61 is connected to the triplexed CPU unit side via each UIF board of the PI / O 51.

Input signals from the plant equipment 79 are introduced into the respective process controllers 11, 21, 31 via the PI / O 51, 61. As the output signal to the plant device 79, output data of the process controller having the master right in the PI / O 51, 61 is first output (detailed in FIG. 15). At this time, the changeover switch 90 is provided on the outside of the device 79, and the signal of any one of the PI / O 51, 61 is output to the plant device 79.

PI / O 41 is installed in the plant equipments 77 and 78 that have been neutralized, and the UIF boards 42, 43, and 44 pass through the cables 91, 92, and 93, and the UIF of the PI / O 61. It is connected to the boards 62, 63, and 64. That is, the PI / O 41 is connected to the tripled CPU unit side via each UIF board of the PI / O 61 and PI / O 51 interposed in series. The input signal from the plant is introduced to each process controller via the PI / O 41, and the output data is outputted first of the process controller having the master right to be outputted firstly as in the embodiment shown in FIG.

In this embodiment, since each PI / O (41, 51, 61) is connected in series and connected to each process controller of the triple system, one IF board is provided on each of the three CPU units. It is only provided (two IF boards are provided on each CPU unit side in FIG. 11), and there is an advantage that the amount of hardware is small.

13 is a configuration diagram of a plant control system according to still another embodiment. In this embodiment, each CPU unit of the triple system is composed of a CPU [11 (21, 31)], a network connection board NCP [12 (22, 32)], and an IF board [15 (25, 35)]. PI / O is not installed in this CPU unit. The PI / O (100, 110, 120) constituting the process input / output device of the triple system includes three UIF boards (101, 102, 103) (111, 112, 113) (121, 122, 123), respectively. have. Plant devices 71 and 72 are connected to PI / O 100 for system A, and plant devices 73 and 74 are connected to PI / O 110 for system B and plant equipment 75 and 76. Is connected to the PI / O 120 for the C system.

Then, the UIF 121 of the PI / O 120, the UIF 111 of the PI / O 110, the UIF 101 of the PI / O 100, and the IF 15 of the CPU 11 unit. ) Are connected in series with cables 133, 130, and 81, respectively, and the UIF 122 of the PI / O 120, the UIF 112 of the PI / O 110, and the PI / O 100. The UIF 102 and the IF 25 of the CPU 21 unit are connected in series by cables 134, 131, and 82, respectively, and the UIF 123 and the PI / O 110 of the PI / O 120. ), The UIF 103 of the PI / O 100, and the IF 35 of the CPU 31 unit are connected in series by cables 135, 132, and 83, respectively.

The input signals from the plant devices 71 to 76 are introduced into the process controllers 11, 21, and 31 of each system independently via the respective PI / Os, and the output signals are similarly applied to the respective PI / Os. Independent output via This improves the reliability of the signal.

Plant devices 77 and 78 are connected to PI / O 41 of the single system. The plant equipment 79 is connected to the PI / O 51 and 61 of the dual system, and the UIF boards of the PI / O units are connected in series as in the embodiment shown in FIG. Each UIF board 52, 53, 54 of the PI / O 51 is connected to the UIF boards 121, 122, 123 of the PI / O 120 by cables 136, 137, 138.

That is, in the present embodiment, the tripled PI / O (100, 110, 120), the singletized PI / O 41 and the doubled PI / O (51, 61) are all connected in series, and tripled. Are connected to each of the processed process controllers 11, 21, and 31.

Also in this embodiment, the input signal from the plant equipment 77 is introduced into each process controller via the PI / O 41, and as the output signal to the apparatus 78, the output data of the process controller having the master right is given priority. Is output. In addition, the input signal from the plant equipment 79 is introduced to each process controller via the PI / O 51, 61 and the respective UIF boards of the PI / O, 120, 110, 100, and the apparatus 79. ), The output data of the process controller having the master right from one of the PI / Os 51 and 61 selected by the changeover switch 90 is preferentially output.

FIG. 14 is a view for explaining a data combining method of output data between the triple system process controllers in the above system configuration. The process controllers 11, 21, and 31 of the triple system are connected to the network 1 by means of network connection boards (NCPs) 12, 22, and 32, respectively. In each of the process controllers 11, 21, and 31, a soft logic 201 is assembled. The software logic 201 shown in FIG. 4 has the same contents, for example, in the software logic assembled in the process controller 11 of the A system, the F system, and the C system.

In the software logic 201, the calculation result of the PI calculator 202 (in this example, the opening degree of the valve) is sent to the B system and the C system via the network 1 (indicated by the symbol 203). Similarly, the calculation results of the B system and the C system are also sent via the network 1, and the A system receives them (206, 207). The average value calculating means 204 inputs each opening degree of A system, B system, and C system, calculates the average value, and outputs it as an opening degree instruction 208 to PI / O of the own system control. In this example, the average value is calculated, but the command 208 may be generated by another logic operation, for example, a majority vote logic or a median logic. As a result, an output signal that does not cause malfunction or malfunction can be obtained.

FIG. 15 is a diagram showing the details of the connection configuration between the triplet PI / O 41 unit and the triplex CPU unit shown in FIGS. 11 and 12. The tripled CPU unit has the same configuration, and the process controller 11 (21, 31) is connected to the NCP [12 (22, 32)] and PI / O [13 (23, 23) by the bus 16 (26, 36). 33) and the IF board 15 (25, 35).

The process input / output device 41 shared between the tripled process controllers 11, 21, and 31 is connected to the UIFs 42, 43, and 44 by the bus 45, and is connected to the UIFs 42, 43, and 44. IF boards 15, 25, and 35 are connected by cables 81, 82, and 83.

The buses 16, 26, 36 and the bus 45 have the same specification, and therefore the PI / O 13, 23, 33 and the PI / O 41 have the same specification. The same applies to the dualized PI / O unit. According to the present embodiment, the specification of the PI / O (process input / output device) can be generalized, which can contribute to further cost reduction. In addition, each UIF is also connected to the bus 46. The bus 46 is used for passing information between UIFs.

16 is a diagram for explaining a data input method and a mutual monitoring method. As described in FIG. 15, data input / output processing to PI / O shared by a triplex process controller is applied to each process controller and a unit of a shared process input / output device in order to unify the specifications of each PI / O (process input / output device). The UIF is installed.

Of the tripled process controllers 11, 21, and 31, a controller that outputs data to a shared process input / output device is called a controller having master authority. In the example of FIG. 6, the CPU 11 is a controller having a master right.

The CPU 11 sets master to the UIF 42. At this time, the CPU 11 is told to be the master to the UIFs 43 and 44 via the bus 46 shown in FIG. 15. The controller CPU 11 having the master right introduces data input from the PI / O 41 via the IF 15 and the UIF 42. At this time, data input values are copied from the UIF 42 to the UIFs 43 and 44. The controller CPUs 21 and 31 which do not have a master right read these copied data from the UIFs 43 and 44.

The output data is output only by the controller CPU 11 having the master right. The controller CPU 11 having the master right in addition to the normal data input and output writes the survival code by the order 305 in the predetermined area 310 in the UIF 42 connected thereto.

In addition, the CPU 11 reads the survival code recorded by itself and confirms in step 306 whether it matches with the recording itself. The survival code recorded in step 305 is copied to the areas 311 and 312 on the UIFs 43 and 44 connected to the controller CPUs 21 and 31 that do not have master rights, and the CPUs 21 and 31 Each of these survival codes is read to confirm the health of the CPU 11 and the UIFs 42, 43 or 42, 44 in steps 307 and 308. FIG.

Apart from this, the tracking of data via the network 1 is used between the CPUs 11, 21, and 31, and each controller monitors in step 301 and 302 whether the data tracking is well done. have. This data tracking is also performed in FIG.

17 is a diagram illustrating an example of a PI / O input / output point list (table). Column 501 is the serial number of the input and output points, column 502 is the signal name of the input and output points, column 503 is the redundancy chart of the input and output device according to the importance of each signal, column 504 is the division of the signal, column Reference numerals 505, 506, and 507 denote positions at which PI / Os are provided for inputting and outputting the signals.

The signal of serial number 1 is the input value of the gas turbine speed. Since this signal is an important signal, the input / output device is a triple system, and is set to "3" in the column 503. The installation position of the PI / O is set to the slot 5 of each unit 1 of the triple system controller. In this way, each process controller introduces a gas turbine rotational speed from PI / O provided in the slot 5 of its unit 1.

The signal of serial number 3 is a signal indicating an abnormality of the memory backup battery of the controller, and the redundancy of the input / output device is set to 1 because the importance is low. Therefore, the column 503 is set to "1". The installation position of the PI / O is set to slot 1 of the unit 2. This signal is driven by a controller having a master right in the order described in FIGS. 18 and 19.

The signal of the serial number 4 is a signal of the exhaust fan's fully closed state, and redundancy of the input / output device is made double. Therefore, the column 503 is set to "2". The installation position of the PI / O is set to the slot 5 of the unit 3 and the slot 5 of the unit 4. When set in this way, normally, it inputs from the slot 5 of the unit 3 led by the controller which has master authority, and from the code of the slot 5 of the unit 4, when there exists an abnormality of this code.

In this way, the redundant configuration of the input / output device can be determined simply and reliably simply by setting the redundant configuration and installation configuration for each signal in the input / output point list.

18 is a flowchart showing a PI / O initial processing procedure at system startup. It is necessary to perform initial processing of each PI / O at system startup. In the present embodiment, since the redundancy of the input / output device differs depending on the importance of each signal, the process controller which performs the initial processing also needs to be changed for each signal, and the initial processing is performed according to the flowchart shown in FIG.

Therefore, first, in step 410, it is determined whether the PI / O is independent. If the PI / O is a PI / O of the triple system (YES), the process proceeds to step 411, where each process controller performs initial processing on the self-dominant PI / O. If the process signal is inputted or outputted as a doubled or singled process input / output device, i.e., if the PI / O is not an independent PI / O, the determination result of this step 410 becomes NO, and the next step 401 Proceed.

The steps below this step 401 are initial processing for the PI / O of the duplication and the singleization, and each PI / O is initialized by a process controller having a master right in the following order.

In this step 401, the process controller of each of the three systems determines whether or not the other system has already taken the master right when it is started. If the other system is taking the master right, the determination result of step 401 is YES, and the startup is completed without taking the master right.

If there is no controller with master authority at the start (NO in step 401), then in step 402 it is determined whether the own system is A system, B system or C system, and if it is A system, step 406 ), The magnetic system is started as a master and initial processing of the PI / O is performed.

In the determination of step 402, if the magnetic system is the B system, the process proceeds to step 403, and if the magnetic system is the C system, the process proceeds to step 404, and the six cycles are waited as it is, and the next step 405 is performed. Proceed to In step 405, it is then checked whether there is another master right. If someone is in Master (YES), they are maneuvered without taking Master.

If no one has taken the master right (NO of the determination result in step 405), the process proceeds to step 406, which starts the own system as a master and performs initial processing of the PI / O. In other words, when the system started first takes the master right, and at the same time the system starts, the master right is given to the A system first to prevent contention or the like.

19 is a flowchart showing the input / output procedure of PI / O. In the input / output processing of PI / O, first, the redundant configuration in the redundant configuration configuration table (input / output point list) of the PI / O described in FIG. 17 is examined, and the redundant configuration of the card PI / O is examined ( Step 430).

If the card is a triple system, the process proceeds to step 432, where I / O processing is performed on the card, and the process ends.

If the card is a dual system according to the determination result in step 430, the process proceeds to the next step 433, and determines whether the own system has a master right. If it does not have a master right (the determination result is N), since there is no access right to the card, nothing is processed and the process proceeds to the input / output processing of the next card.

If it is determined (Y) that the master right is obtained in step 433, the flow advances to the next step 434 to determine whether the card is an input card. When this card is an output card, the determination result is N, and the flow advances to the next step 436, and outputs data to both A / B systems of the dual system PI / O. When the card is an input card, the determination result of step 434 becomes Y, and the flow advances to the next step 435 to check whether the A system PI / O is normal. If the A system PI / O is normal (the determination result of step 435 is Y), the process proceeds to step 437, and input processing is performed from the A system PI / O. If the A system PI / O is abnormal (the determination result in step 435 is N), the flow advances to step 438 to perform input processing from the B system PI / O.

As a result of the determination in step 430, if the card is a single system (double system), it is next judged whether or not the own system has a master right (step 439). If it does not have a master right (the determination result is N), since there is no access right to the card, nothing is processed and the process proceeds to the input / output processing of the next card. If the master right is obtained, the process proceeds from step 439 to step 440, the input / output processing is performed on the card, and the input / output processing of the next card is performed.

As described above, the process controller having the master right performs data input / output of the PI / O of the dual system and the single system.

In each of the above-described embodiments, the process input / output device has a common structure for triple, double, and single, and the process input / output to the process input / output device of the triple system is performed by respective process control. The output to the process input / output device of the system and the single system is performed by one process control having a master right among the process controllers of the triple system, and the input is performed at the input timing of the process controller having the master right, For the other two units, it is possible to reduce the cost by copying and introducing the above input values, that is, a structure that supports all the configurations by one controller.

The signal output from the process input / output device of the double or single system is processed between the arithmetic processing units of the triplexed process controller to process the majority calculation logic, the median logic, or the average value of the result of each arithmetic processing unit, By outputting the result, when an abnormality occurs in the process controller having the master right or when a request is made manually from the outside, the output value can be prevented from suddenly changing even if the master right is switched to another process controller. .

In addition, a process controller having a master right for the double or single process input / output device writes the survival code to the process input / output device at regular intervals, reads the survival code again, and compares the recorded survival code with the recorded survival code. It becomes possible to check. The process controller without the master right can confirm the health of the process controller with the master right and the process input / output device by reading the survival code recorded by the process controller having the master right from the process input / output device.

If the process controller with master authority has an abnormality in the monitoring of survival code, if the other system is normal, the master controller is abandoned, and the process controller without master authority copies the process input passed from the process controller with master authority. If there is a problem with the function or the survival code monitoring function, the system can be put into exclusion mode to prevent master authority.

Also, if the process controller of the triple system is requested to take the master right from the process controller that is required to take the master right from the process controller that is required to take the master right when the system continues to have the master right. You can also give them the ability to give up master control of a process controller.

Further, by setting the redundant configuration for each input / output card, it is also possible to mix units having different redundant configurations in the system, or to mix input / output cards having different redundant configurations in the same unit.

According to the embodiment described above, the process signals to input and output are classified into three types according to the importance of process control, and the most important signals are inputted and output from the tripled process input / output device, and the next important signals are inputted from the duplicated process input / output device. Since the input / output and other signals are configured to be input / output from the single-process process input / output device, the size and cost can be reduced compared to the tripleization of all the input / output devices.

In this case, the most important signal is, for example, a monitoring input signal necessary for the protection and safety of a plant or plant equipment such as turbine rotation speed or gas turbine exhaust temperature in a nuclear power plant, recirculation pump rotation speed or flow rate in a nuclear power plant. In addition, the operation or control command output signal which does not allow a malfunction or a misoperation operation may be used. The next important signal is a plant or a plant device that needs to be input continuously even during a fault replacement operation of a process input / output device. It is a monitoring signal that is important for control and operation, a control or operation output signal that is not allowed to malfunction, and the other signal is a monitoring signal that can replace its input with another signal, a recording signal in a journal, or a lamp. Output signal to the indicator, or temporarily enters or exits, for example, when the process input / output device has failed. Even if the break in the middle can be miniaturized and low cost while maintaining high reliability of the plant control system by a signal that does not affect the continued operation of the plant.

When changing the redundant structure according to the importance of the signal, the redundant process input / output device and the single process input / output device, in addition to the tripled process input / output device that independently connect the process input / output device to each of the three computational devices that are redundant configurations, Is connected to all three arithmetic units, the single arithmetic unit can control all the input / output devices, and it is possible to further reduce the cost.

In order to simplify the connection between the process input / output device and the computing device, when the computing device and the process input / output device are connected, the computing device and the plurality of process input / output devices are connected in series, and the redundant construction of the process input / output device is achieved. Further miniaturization can be achieved. In this case, it is also possible to configure a plurality of process input / output devices in series for each processor control device of the same redundancy as one computing device.

Data input and output to the triplexed I / O device is performed by each of the triplexed and asynchronously operated arithmetic units. It is possible to avoid access contention of the calculated computing device.

In order to change the redundancy of the input / output device according to the importance of the signal, it is necessary to distinguish whether the access right is given to the representative computing device or each of the computing devices independently. The circuit for determining the arithmetic unit to access by varying the redundancy of the input / output device according to the importance of the signal is very complicated and causes the failure rate to rise. Therefore, the circuit is designed with standard software operating in the arithmetic unit. As a circuit, it is preferable to use only the circuit which does not perform any incorrect output when it accesses from a some computing device by the above.

The importance of each signal is only known by the person who sets it, and is not automatically recognized by the software. Therefore, the redundancy setting and the positioning of the input / output device are performed by each input / output point table (table). With this configuration, the redundant setting can be easily and accurately performed for each signal, thereby making it possible to prevent missetting.

As described above, miniaturization of the process input / output device and rationalization of signal amplification circuits, selection circuits, etc. from the outside of the process input / output device can be achieved, thereby reducing the quantity of goods. Cost reduction is aimed at.

In addition, it is possible to connect the arithmetic unit and a plurality of process input / output units in series, and among them, the redundant configuration of the process input / output unit can be achieved, thereby simplifying the connection between the process input / output unit and the arithmetic unit, and 1 By connecting a plurality of process input / output devices in series to each processor control device having the same redundancy as a large arithmetic unit, even if a failure occurs in the connection between the process input / output device and the arithmetic unit, other signals of higher redundancy are affected. Madness disappears.

In addition, since the access circuit for determining the access right for the input / output device having different redundancy is used as the software circuit, the hardware circuit can be simplified, and the reliability and the cost can be reduced.

According to the first aspect of the invention, since the transmission and reception between microcomputers uses a bus rather than a transmission, the information matching speed can be improved and the input / output can be compared with the conventional information matching by the transmission. By sharing the hardware interface device, one I / O hardware interface device can input / output and monitor the plant process amount, and the number of wirings and process input / output devices can be reduced, so the system size is reduced and the maintenance range is reduced. It becomes possible to improve water retention.

According to the second invention, since the input / output of the signal necessary for the continuous operation of the plant continues input / output to the redundant process input / output device, the reliability of the continuous operation of the plant does not decrease, and the quantity of the triple system process input / output device It is possible to reduce the size, improve the water retention and reduce the maintenance cost by miniaturizing, reducing the cost and simplifying the process input / output device.

Claims (9)

delete delete A sensor for detecting a state quantity of the process, A plurality of microcomputers, one of which acts as a master for inputting a process signal detected by the sensor and outputting a control signal of the process; A process input / output device which is provided in common to the plurality of microcomputers and distributes the process signals to the plurality of microcomputers, respectively; The process input / output device has an interface board corresponding to each of the plurality of microcomputers, the interface board has a memory, respectively, and the process input / output device has a microcomputer that receives the process signal input to the microcomputer operating as the master. In the multiplexing control system, characterized in that the recording in the memory of the interface board corresponding to the computer, When inputting the plant process state quantity to the microcomputer, the multiplexing control system is provided with a function of inputting the plant process state quantity to the plurality of microcomputers from the master interface board by the master / slave relationship set in advance on the interface board. . A sensor for detecting a state quantity of the process, A plurality of microcomputers, one of which acts as a master for inputting a process signal detected by the sensor and outputting a control signal of the process; A process input / output device which is provided in common to the plurality of microcomputers and distributes the process signals to the plurality of microcomputers, respectively; The process input / output device has an interface board corresponding to each of the plurality of microcomputers, the interface board has a memory, respectively, and the process input / output device has a microcomputer that receives the process signal input to the microcomputer operating as the master. In the multiplexing control system, characterized in that the recording in the memory of the interface board corresponding to the computer, When outputting the plant process state quantity to the process input / output device, the multiplexing control system characterized by adding a function of outputting the plant process state quantity to the process input / output device only by the master interface board according to the master / slave relationship set in advance on the interface board. . delete A sensor for detecting a state quantity of the process, A plurality of microcomputers, one of which acts as a master for inputting a process signal detected by the sensor and outputting a control signal of the process; A process input / output device which is provided in common to the plurality of microcomputers and distributes the process signals to the plurality of microcomputers, respectively; The process input / output device has an interface board corresponding to each of the plurality of microcomputers, the interface board has a memory, respectively, and the process input / output device has a microcomputer that receives the process signal input to the microcomputer operating as the master. In the multiplexing control system, characterized in that the recording in the memory of the interface board corresponding to the computer, A multiplexing control system for providing a process input / output device for inputting / outputting a process signal for each process signal, the redundancy configuration of the process input / output device for inputting / outputting the process signal according to the type of process signal, and for the signal of the input / output device having a small redundancy Multiplexing control system characterized in that the input and output via a large input and output device. A sensor for detecting a state quantity of the process, A plurality of microcomputers, one of which acts as a master for inputting a process signal detected by the sensor and outputting a control signal of the process; A process input / output device which is provided in common to the plurality of microcomputers and distributes the process signals to the plurality of microcomputers, respectively; The process input / output device has an interface board corresponding to each of the plurality of microcomputers, the interface board has a memory, respectively, and the process input / output device has a microcomputer that receives the process signal input to the microcomputer operating as the master. In the multiplexing control system, characterized in that the recording in the memory of the interface board corresponding to the computer, A multiplexing control system that installs a process input / output device for inputting / outputting a process signal for each process signal, which triples and installs the process input / output device of the “significant” process signal and computes the corresponding triplexed process input / output device. A process controller with a processing function is installed, and a process I / O device of a process signal of "medium" is doubled and installed, and a process I / O device of a process signal of "medium" is doubled and installed. A multiplexing control system, characterized in that the output of each process signal of the dualized input / output device and the single input / output device is processed by any one of the process controllers. The method of claim 7, wherein One of the triplexed process controllers is a device having a master right, and the master rights device is configured to perform output control of the doubled process input / output device and the single process input / output device. Multiplexing control system. A sensor for detecting a state quantity of the process, A plurality of microcomputers, one of which acts as a master for inputting a process signal detected by the sensor and outputting a control signal of the process; A process input / output device which is provided in common to the plurality of microcomputers and distributes the process signals to the plurality of microcomputers, respectively; The process input / output device has an interface board corresponding to each of the plurality of microcomputers, the interface board has a memory, respectively, and the process input / output device has a microcomputer that receives the process signal input to the microcomputer operating as the master. In the multiplexing method of a multiplexing control system, characterized in that the recording in the memory of the interface board corresponding to the computer, A multiplexing method of a control system, characterized in that the redundant configuration of an input / output device for inputting / outputting a process signal is any one of a triplet configuration, a dual configuration, and a single configuration, depending on the importance of the process signal.