KR101591300B1 - Apparatus and method for verification human factors of nuclear energy instrument - Google Patents

Abstract

The present invention relates to an apparatus for evaluating human factor conformity of various instruments used in nuclear power stations and a method thereof. The method includes the steps of: verifying whether a target instrument is a subject of the human factor conformity evaluation; detecting, from the job analysis results previously stored relating to the target instrument, a job of the target instrument and job requirements that are necessary for executing the job; detecting, using the information previously stored relating to the target instrument and a database that stores interfaces that correspond to the jobs of various multiple instruments, the interface that corresponds to the job and the job requirements of the target instrument; detecting whether the interfaces that correspond to the job and the job requirements of the target instrument comply with the conditions according to preestablished guidelines; and evaluating the human factor conformity of the target instrument based on the simulation results obtained by operating the target instrument according to a preestablished scenario.

Description

[0001] APPARATUS AND METHOD FOR VERIFICATION HUMAN FACTORS OF NUCLEAR ENERGY INSTRUMENT [0002]

The present invention relates to an apparatus and method for evaluating ergonomic suitability of various devices used in a nuclear power plant.

Nuclear equipment such as indicators, recorders, and control terminals are information display devices and control interfaces that are important for safety in the control room operator's control room. Therefore, these nuclear devices can only be guaranteed to be safe if they are used with ergonomically proven instruments.

The evaluation of the ergonomic suitability of the domestic nuclear power system depends on the verification and verification of the ergonomic nuclear power plant regulatory guidelines published by the Korea Institute of Nuclear Safety (KINS). However, the Korea Institute of Nuclear Safety Technology (KINS) regulatory guidelines are guidelines for regulators. Designers, operators, manufacturers, and third-party independent organizations, which are the subjects of the ergonomic conformity assessment, establish and implement specific evaluation methodologies Therefore, the standards and methods for evaluating the ergonomic fitness are different from each other.

In addition, the part that has been controversial in the ergonomic conformity assessment process is the extent to which it can be confirmed. Conformity assessment for new designs and conformance evaluations for design changes should apply different ranges of interfaces to be identified. However, how to set the range differently, and the method is not yet clear in domestic about what the standard is. However, it is possible to apply the relevant regulatory guidelines of the US Nuclear Regulatory Commission (NRC) by reference, but it has not yet been clarified how appropriate it is in the domestic reality.
As a background of the present invention, '2006 Ergonomics Conference of the Ergonomics Society of Korea, 2006.10. (Nuclear Power Regulatory Commission) (NUREG-0700), which is a regulatory guide of the US Nuclear Regulatory Commission (NRC) (PSR).
As a background of the present invention, Korean Patent Registration No. 10-1033974 discloses classification and generation of factors affecting human reliability. However, in the existing ergonomic conformity assessment related technical standards and guidelines, I do not consider it.
Therefore, it is possible to maintain standard conformity with the existing technical standards and guidelines related to the ergonomic conformity assessment, and the necessity of the standardized ergonomic conformity evaluation means and the procedure for the domestic industry is on the rise.

delete

It is an object of the present invention to solve the above-mentioned conventional problems and to provide a device for evaluating the ergonomic fitness of a device to be evaluated while maintaining conformity with the verification related laws and technical standards disclosed by the Korea Atomic Energy Agency And a method thereof.

Another object of the present invention is to provide an ergonomic conformity assessment apparatus and a method thereof that maintain conformity with various verification related laws and technical standards internationally announced such as the United States Nuclear Regulatory Commission as well as laws and technical standards related to domestic verification .

Another object of the present invention is to provide an ergonomic conformity evaluating apparatus and method for detecting a cause that fails to satisfy the ergonomic suitability from an evaluation target apparatus and deriving a design improvement item for solving the cause .

According to an aspect of the present invention, there is provided an ergonomic conformity assessment method comprising the steps of: confirming whether a target device is an apparatus to be subjected to the ergonomic conformity assessment; Detecting from the analysis result the job requirements of the target device and the job requirements that are necessary for performing the job; storing the pre-stored information about the target device and the interface corresponding to the job of the plurality of various devices The method comprising the steps of: detecting an interface corresponding to job and job requirements of the target device using a database; determining whether interfaces corresponding to job and job requirements of the target device satisfy conditions according to a predetermined guideline And a step of operating the target device in accordance with a preset scenario And evaluating the ergonomic suitability of the target device based on the simulation result.

In one embodiment, the step of determining whether the target device is an evaluation target further includes a step of determining whether the target device is a device that has been reviewed through predetermined ergonomic analysis procedures, Wherein the step of determining whether the target device has been reviewed through the set ergonomic analysis procedures is a step of detecting whether or not there is any information related to the preset ergonomic analysis procedures.

In one embodiment, the ergonomic analysis procedures may include an Operating Experience Review (OER), a Functional Requirements Analysis and Function Allocation (FRA / FA), a Task Analysis (S & Q), Human Reliability Analysis (HRA), and the like.

In one embodiment, the step of detecting the job and job requirements may include the steps of: determining whether the target device is a new device; and determining whether the target device is a new device, Detecting all the job and job requirements included in the job analysis result or detecting only the existing device and the changed job and job requirements in the job of the target device and determining whether the target device is a new device Wherein the determining step is a step of determining whether information on job and job requirements of the device corresponding to the target device is stored in advance.

In one embodiment, detecting the job and job requirements comprises:

Further comprising a result of determining whether a risk assessment procedure for the changed job and job requirements has been performed if the target device is not a new device, And determining whether information related to the execution of the predetermined procedure is stored.

In one embodiment, the step of detecting an interface corresponding to the job and job requirements further comprises the steps of: extracting interfaces available from the target device from pre-stored information about the target device; Comparing each of the available interfaces with the job and job requirements of the target device, and if the comparison results in all of the interfaces corresponding to the job and job requirements of the target device, And judging whether or not the job requirement meets predetermined conditions.

In one embodiment, the comparing step comprises the steps of: extracting interfaces corresponding to the job and job requirements of the target device from the database; and extracting interfaces that are available from the target device, And comparing the interfaces corresponding to the job and job requirements with each other.

In one embodiment, the step of evaluating the ergonomic fitness of the subject device comprises the steps of: evaluating a simulation result of the subject device from at least one of a participant participating in the simulation or an observer observing the simulation, And evaluating the ergonomic suitability of the target device based on a simulation result evaluated from at least one of the observers.

In one embodiment, the step of evaluating the ergonomic suitability of the target device may include the step of evaluating the ergonomic suitability of the target device, the human engineering discrepancy (HED) in which the target device is inconsistent with the ergonomic conformity assessment standard And extracting and managing the data.

In one embodiment, the step of extracting and managing the inconsistency may include extracting and managing the inconsistency based on an interface that does not satisfy the condition according to the predetermined guideline among the interfaces corresponding to the job and job requirements of the target device, The method comprising the steps of: extracting an interface that is judged to be unsuitable from at least one of the host and the observer; classifying the inconsistency according to a predetermined criterion; classifying the classified inconsistencies according to a predetermined priority setting criterion And managing the discrepancies differently according to the determined priority.

The apparatus for evaluating an ergonomic conformity according to an embodiment of the present invention may further include a database including a job analysis result for the target device, information related to the target device, and interfaces corresponding to jobs of the plurality of various devices, A storage unit including data for the ergonomic conformity assessment of the target device; and a verification unit for verifying an interface corresponding to the job and job requirements of the target device based on a simulation according to a predetermined guideline and a predetermined scenario And detects the job and job requirements of the target device from the job analysis result and detects interfaces corresponding to the job and job requirements of the target device using the pre-stored information about the target device and the database For each of the detected interfaces, Based on the increased negative validation result is characterized in that a control unit for evaluating the ergonomic suitability of the subject device.

In one embodiment, the information related to the target device includes information on the manual, the design, and the cubic shape of the target device, the result of analyzing the job and the function of the target device, Information relating to ergonomic analysis procedures necessary for evaluation, and information related to a predetermined risk assessment procedure for at least part of the job of the target device.

In one embodiment, the simulation is performed using a virtual reality using an HMD (Head Mounted Display).

Therefore, the present invention provides an ergonomic conformity assessment standard suitable for various verification laws and technical standards publicized in domestic and international, thereby providing a standard for domestic standardization of an ergonomic conformity assessment method for individual devices have.

The present invention also has the effect of making it easier and more accurate to determine whether the device under test meets ergonomic conformity requirements by providing a uniformized criterion for judging whether or not it is ergonomic conformance.

FIG. 1 is a block diagram showing a configuration of an apparatus for judging suitability of a target device for ergonomics according to an embodiment of the present invention. Referring to FIG.
FIG. 2 is a flowchart illustrating an operation of determining whether a target device is ergonomically compatible with an apparatus according to an exemplary embodiment of the present invention. Referring to FIG.
FIG. 3 is a flowchart illustrating an operation process of deriving a job and / or a job requirement required from the target device from the job analysis result of the pre-stored target device during the operation process of FIG.
4 is a conceptual diagram for explaining a risk analysis according to a risk information-based method according to a predetermined criterion in an apparatus according to an embodiment of the present invention.
FIG. 5 is a flowchart illustrating an operation procedure for determining ergonomic fitness according to predetermined guidelines and scenarios in the operation process of FIG. 2 in greater detail.
FIG. 6 is an exemplary diagram illustrating an example of classifying the inconsistency according to a predetermined criterion when an ergonomic inconsistency is detected in a target device in an apparatus according to an embodiment of the present invention. FIG.

It is noted that the technical terms used herein are used only to describe specific embodiments and are not intended to limit the invention. Also, the singular forms "as used herein include plural referents unless the context clearly dictates otherwise. In this specification, "comprises" Or "include." Should not be construed to encompass the various components or stages described in the specification, and some or all of the components or steps may not be included, or the additional components or steps And the like.

Further, in the description of the technology disclosed in this specification, a detailed description of related arts will be omitted if it is determined that the gist of the technology disclosed in this specification may be obscured.

Hereinafter, embodiments disclosed in this specification will be described in detail with reference to the accompanying drawings.

First, the term 'job' used in the present specification refers to a case where, in the target device to be judged as ergonomic conformity in the present invention, the target device It may mean all the work that can be done. That is, when the target device is a device for controlling a specific control facility, all the functions of the specific control facility that can be controlled by the target device can be the tasks of the target device. In addition, the functions inherent to the target device may also be 'tasks'. And the 'job list' may mean that all the jobs of the target device are listed information.

In order to facilitate a complete understanding of the present invention, the basic principle of the present invention will be described. In the present invention, it is determined whether or not a device to be evaluated (hereinafter referred to as a target device) has undergone sufficient ergonomic analysis activities. And derives the tasks of the target device when the target device is a device that has undergone sufficient ergonomic analysis activities according to predetermined criteria. And judges whether the interface of the target device corresponding to the derived tasks is suitable for ergonomic suitability according to predetermined criteria (for example, predetermined regulatory guidelines).

The ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention determines whether or not the ergonomic suitability is judged based on predetermined regulatory guidelines related to the ergonomic suitability, May be to determine whether the interface of the target device is satisfied.

To this end, the storage unit of the ergonomic fitness judging apparatus according to the embodiment of the present invention may store various information on the regulatory guidelines. According to the ergonomic suitability determination result of the target device, it is possible to determine whether the target device satisfies the regulatory guidelines stored in the storage unit. In this case, the ergonomic suitability determining apparatus according to the embodiment of the present invention may be configured to database each of the regulatory guidelines, and check items corresponding to the respective guidelines stored in accordance with the ergonomic fitness determination result (for example, It is possible to determine whether or not the target device conforms to the regulatory guidance by checking whether the target device has approved the safety requirements required by the regulatory guidance.

1 shows a block diagram of an ergonomic conformity assessment apparatus 100 according to an embodiment of the present invention.

1, an ergonomic conformity assessment apparatus 100 according to an embodiment of the present invention includes a control unit 110 for controlling each connected component, a storage unit 120 connected to the control unit 110, And a verification unit 130. [0033] In addition, the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention may further include an input unit 140 and a display unit 150. Here, the components shown in FIG. 1 are not essential for implementing the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention, so that they have more or fewer components than the components listed above Of course it is possible.

The storage unit 120 may include a plurality of application programs or applications driven by the ergonomic conformity assessment apparatus 100, an ergonomic conformity assessment apparatus 100, Data, and commands for the operation of the computer. At least some of these applications may be downloaded from an external server via wireless communication. At least some of these application programs may also be present on the ergonomic conformity assessment device 100 since the outset for the basic functioning of the ergonomic conformity assessment device 100. Meanwhile, the application program is stored in the storage unit 120 and installed on the ergonomic conformity assessment apparatus 100, and the operation (or function) of the ergonomic conformity assessment apparatus 100 is performed by the control unit 110 Lt; / RTI >

Also, the storage unit 120 may store various information for evaluating the evaluation target device in the ergonomic conformity assessment apparatus 100. [ For example, the storage unit 120 may store various information related to the evaluation target device. That is, in the storage unit 120, a manual describing a result of various ergonomic analysis including the job analysis result of the target device or the functions of the target device in a preset manner or a design of the target device, Information relating to the three-dimensional shape may be stored. Hereinafter, the storage area of the storage unit 120, which stores various information related to the evaluation target device, will be referred to as the evaluation target device information storage unit 120. [

Meanwhile, the storage unit 120 may store information on the job of each of the various nuclear power devices. For example, various functions that can be provided by various nuclear power devices can be stored in the storage unit 120 as a database for each kind of device and / or function. Hereinafter, a storage area of the storage unit 120 in which information on various jobs related to the nuclear power devices are stored in a database is referred to as a job list database 122.

Meanwhile, the ergonomic conformity assessment apparatus 100 according to an embodiment of the present invention may further include a job interface storage unit 120 for storing information on various interfaces for various jobs stored in the job list database 122 .

For example, in the case of a control device that can control a specific control facility among the nuclear power plants, the job list database 122 stores various functions of the specific control facility, which can be controlled by the control device, And information on a user interface for controlling the control equipment may be stored in the job interface storage unit 120 in accordance with each job that can be performed by the control unit in the job interface storage unit 120 . That is, when the control device is a device that turns on or off the control facility, the job list database 122 may store a function of turning on or off the control facility as the job of the control device, The job interface storage unit 120 may store information related to an interface for turning on or off the control equipment in the control device, that is, input of a specific button or touch input of a specific graphic object.

Meanwhile, the storage unit 120 may store various verification information for determining the ergonomic suitability of the evaluation target device according to the embodiment of the present invention. For example, the ergonomic conformity assessment apparatus 100 according to an embodiment of the present invention can determine whether the evaluation target apparatus is ergonomically conformable according to a predetermined guideline or a predetermined simulation scenario. In this way, the verification data necessary for determining whether the target device is ergonomically compatible, for example, information about the predetermined guideline or the simulation scenario can be stored in the storage unit 120, and the information is stored The storage area of the storage unit 120 will be referred to as a verification information storage unit 120.

Further, as described above, the apparatus 100 according to the embodiment of the present invention may be configured to set predetermined regulatory guidelines related to ergonomic fitness, that is, for example, the regulations prescribed in the guidelines issued by the Korean Institute of Nuclear Safety, It may be determined whether or not the interface of the target device is satisfied. Hereinafter, the storage unit 120 may store various information related to the regulation instruction. Hereinafter, the storage area of the storage unit 120 storing the information on the regulation instruction is referred to as a guide information storage unit 120 .

The storage unit 120 may include a storage medium of a flash memory type, a hard disk type, a card type memory (e.g., SD or XD memory), and the like. In addition, the ergonomic conformity assessment apparatus 100 may operate in association with a web storage that performs a storage function of the storage unit 130 on the Internet.

Meanwhile, the controller 110 controls the overall operation of the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention.

The control unit 110 may determine whether the evaluation target device has undergone predetermined ergonomic analysis activities. Here, the ergonomic analysis activity may include various analysis activities such as a driving experience review, a functional requirement analysis, and a job analysis. For example, when the information about the predetermined ergonomic analysis activities is stored from the evaluation subject device information storage unit 120, the control unit 110 determines that the target device has been reviewed through various predetermined analysis activities It is needless to say that the analysis activities may be determined differently depending on the type and function of the evaluation target device or whether it is a new device.

If the target device is a device that has undergone sufficient ergonomic analysis activities in accordance with a predetermined criterion, the control unit 110 uses the pre-stored information related to the device to be evaluated, Can be derived. The evaluation subject device can extract a different job list based on whether it is a new device or a change of an existing device.

For example, if the evaluation target device is a new device, the control unit 110 may extract all jobs included in the pre-stored job analysis result with respect to the target device. However, if the evaluation target device is not a new device, it is possible to detect only the existing job and the changed job in the target device, and extract only the detected job. In this case, the control unit 110 may further analyze the risk according to whether the extracted job has undergone the risk selection process.

If the interface corresponding to the task of the extracted target device extracts the tasks of the target device from the information previously stored in the target device, the control unit 110 determines whether an interface capable of performing the task can be performed in the target device Can be determined. In this case, the control unit 110 determines whether or not the target device corresponds to the job stored in the target device, based on information previously stored on the target device, for example, a job analysis result of the target device, and information or manual related to the design or cubic shape of the target device It is possible to detect whether there is an interface.

That is, when the target device is a control device that turns on or off a specific control facility as in the above example, the control section 110 can extract a job to turn on or off the control facility as the job of the target device , A component for an interface for turning on or off the control facility from the job analysis result of the target device, the functional analysis result, or the information related to the design plan, the manual, and the three-dimensional shape can be detected. Such a component may be a button, a configuration in which a graphic object is displayed on a display unit and a touch input is sensed by the user, or various types of switches such as a valve or a rotary type. The detecting operation may include an operation of detecting whether there is a specific component from the job analysis result of the target device, the function analysis result, the manual, the design or the information related to the cubic shape.

Meanwhile, the interfaces required by the job extracted from the target device may be stored in the job interface storage unit 120. In this case, the control unit 110 reads out information on interfaces corresponding to the jobs extracted from the target device from the job interface storage unit 120, and transmits a component corresponding to the read interface to the target device Can be detected. In this case, the controller 110 may receive a result of directly detecting whether or not the interface required by the job of the target device is present in the target device. In this case, Based on the detection result, it is possible to determine whether or not the target device has an interface required by the extracted job.

On the other hand, the extracted tasks may include requirements necessary for the job, such as information necessary for performing the job, that is, job requirements. In this case, the control unit 110 can detect not only the job but also whether an interface satisfying all of the job requirements exists in the target device. That is, in the above example, that is, the evaluation target device is a control device for controlling on / off of a specific control facility, and has a job requirement to display information about the measurement value related to on / off control of the control facility The control unit 110 can detect not only the interface for controlling on / off of the control facility, but also whether or not the target device has an interface for displaying the information about the measurement value. For example, the control unit 110 can detect whether or not a display unit such as a display unit, an LED, or the like is provided in the target device.

The controller 110 may use various methods for detecting such an interface. For example, the control unit 110 may match the interfaces judged to be necessary for the target device by the tasks extracted from the target device and the job requirements and the interface of the target device, It can be determined whether or not the judged interfaces exist in the target device.

Here, the interface of the target device can be read out from information previously stored in the target device. That is, the evaluation target device information storage unit 120 may store information on an interface with respect to the target device. The control unit 110 compares the information stored in the evaluation target device information storage unit 120 with the interfaces required from the job and / or job requirements extracted from the target device, It is possible to judge whether or not all of them exist. In addition, when a result of checking whether or not an interface required by the target device is present is input from the user, the control unit 110 may determine whether there is any interface required for the target device based on the result of the examination.

On the other hand, if there is any interface required by the job and / or job requirements of the target device, the control unit 110 determines whether the interface is suitable for ergonomic suitability according to predetermined criteria (for example, predetermined regulatory guidelines) Can be determined. For example, the controller 110 may determine whether the interfaces meet the ergonomic conformance requirements according to a predetermined guide line, and determine whether the interfaces meet the requirements according to predetermined regulatory guidelines . In addition, when the interfaces satisfy predetermined guidelines or regulatory guidelines, simulation according to a predetermined scenario may be performed to collect the ergonomic fitness judgment result for the interface.

That is, for example, the control unit 110 may perform a simulation using the target device in a virtual space according to a predetermined scenario. In this case, the control unit 110 may determine whether the target device satisfies the ergonomic fitness requirement using scores evaluated for the target device from the participants participating in the simulation. Here, the participant participating in the simulation may be a user who actually operates a virtual object corresponding to the target device in a virtual space through an HMD (Head Mounted Display) or the like, or a user who operates the virtual object corresponding to the target device Or may be a third party involved in the operation of the user.

The control unit 110 may determine that the target device meets the ergonomic fitness requirement when the evaluation score is equal to or higher than a predetermined level. On the other hand, if the evaluation score is less than a predetermined level, it can be determined that the target device does not satisfy the ergonomic fitness requirement. If it is determined that the target device does not satisfy the ergonomic fitness requirement, the controller 110 may collect feedback on the improvement of the target device from the participants participating in the simulation. The converged opinion can be stored in a predetermined area of the storage unit 120 as a design improvement item for the target device. In this case, the design improvements may be classified and stored according to a specific interface (for example, a specific component such as a display unit) of the target device. The design improvements may be displayed, output, or transmitted to the display unit 150 at the user's option.

If the subject device is again an evaluation target device for evaluating the ergonomic suitability in the ergonomic conformity assessment device 100 according to the embodiment of the present invention, the control part 110 reflects design improvement items to the target device Or not. For example, the control unit 110 can determine whether there is an existing interface and a changed part for a specific component indicated as a design improvement item. This change can be judged from the information stored in association with the target device (for example, the result of the function analysis, the information related to the three-dimensional shape of the manual, the design or the target device, etc.) . The control unit 110 may re-determine the ergonomic fitness requirement for the target device when the target device has undergone the design improvement.

Meanwhile, the verification unit 130 may include various components for determining an ergonomic fitness requirement of the control unit 110 for the target device. For example, the verification unit 130 may include an interface verification unit 132 for verifying whether each interface provided in the target device conforms to a predetermined guideline or a regulatory guide, And a simulation unit 134. [0034] FIG. According to the verification result of the verification unit 130, the control unit 110 determines whether the interfaces of the target device are in accordance with predetermined guidelines or regulatory guidelines, and whether the interfaces of the target device satisfy the ergonomic conformity requirements Can be determined.

Meanwhile, the input unit 140 may receive various inputs from the user. In addition, the input unit 140 may store various information input from the user into the storage unit 120. [ For example, the control unit 110 receives various information related to the evaluation target device and verification data (e.g., guidelines, regulatory guidelines, etc.) for the ergonomic conformity assessment through the input unit 140, 120).

Meanwhile, the display unit 150 may display various information. For example, the display unit 150 may include a display such as an LCD (Liquid Crystal Display) or the like and may display various information related to the evaluation target device. For example, the display unit 150 may display information on the results of the ergonomic conformity assessment for the evaluation target device and the design improvements according to the evaluation results. Or a simulation process for the ergonomic conformity assessment, or displays information on the three-dimensional shape, design, manual, function or job analysis result of the evaluation subject device from the pre-stored information of the evaluation subject device May be displayed. In addition, the display unit 150 may display the information in the form of acoustic information as well as image information, and may further include various components (for example, a speaker) for the display. In addition, the display unit 150 may further include an output unit capable of outputting various information related to the evaluation target device in a document format.

Hereinafter, embodiments related to the control method that can be implemented in the ergonomic fitness discriminator 100 constructed as above will be described with reference to the accompanying drawings. It will be apparent to those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof.

FIG. 2 is a flowchart illustrating an operation of determining whether the target device is ergonomically conformable in the ergonomic conformity evaluating apparatus according to the embodiment of the present invention.

2, the controller 110 of the ergonomic conformity assessment apparatus 100 according to an embodiment of the present invention firstly uses the pre-stored information about the evaluation target apparatus to determine whether the evaluation target apparatus is an ergonomic fitness It can be determined whether the device is suitable for the evaluation (S200).

In step S200, the controller 110 may determine whether the target device is suitable based on various criteria. For example, the control unit 110 can check whether the type and / or the function of the target device is designated in advance to the device to be subjected to the ergonomic conformity assessment. Or the control unit 110 can confirm whether or not the evaluation of the ergonomic conformity of the evaluation target device is required. For example, the ergonomic conformity assessment request may be made by a pre-designated expert or specialized agency or a specific licensing authority. In this case, the evaluation request may be input as information related to the evaluation target device as information of the designated type, and in this case, the control unit 110 may determine that the evaluation target device is an apparatus that should perform the ergonomic conformity assessment .

On the other hand, in step S200, the controller 110 can determine whether all necessary information about the evaluation target device is stored. Here, the above-mentioned necessary information may be information related to the procedures necessary for the evaluation subject device to perform the ergonomic conformity assessment. These procedures may be, for example, predetermined ergonomic analysis procedures. These ergonomic analysis procedures include operating experience review (OER), functional requirement analysis and functional allocation (FRA / FA), task analysis (TA) And Staffing and Qualifications (S & Q), and Human Reliability Analysis (HRA). The following explains the procedure of sufficient ergonomic analysis for the evaluation of the ergonomic device.

a. Review of Driver Experience Review (OER).

A process by which a designer reviews the operation history of the same or similar equipment and confirms whether the design improvement requirements of the user or the user (mainly the operator or the maintenance testing staff) have already been reflected in the equipment design requirements. Here, the 'driving history of the same or similar devices' may include driving experience of the nuclear industry, driving experience of other industries, and driving experience related to similar power plants and systems.

b. Functional Requirements Analysis and Functional Allocation (FRA / FA) review.

This refers to the process by which the designer defines the safety function of the nuclear equipment and confirms whether or not the function allocation has been performed considering human characteristics. In general, a safety function is a function that is necessary for a nuclear power plant to maintain a safe state or to recover from an unsafe state to a safe state. These safety functions should be allocated so as not to be adversely affected by human limitations while taking advantage of human beings. Therefore, the designer defines all the safety functions of the recorder and confirms whether the safety functions are assigned appropriately to the equipment and the operator. Confirmation of the function assignment can be performed by examining whether the assignment of the safety function has been appropriately performed according to the following control mode classification.

- Auto: means a complete automatic control mode without human manual control means.

- Auto and Manual: Manual control and automatic control are all provided. Man is always in control mode but manual control is not authorized to change the automatic control. Manual control means full automatic control multiplexing.

- Auto or Manual: Both manual control and automatic control are provided. The control mode allows the human operator to change the automatic control by having the right to select the control mode, giving the operator a flexible driving strategy Provided.

- Auto / Manual: It is a control mode that provides both manual control and automatic control, and allows the user to adjust the set value of automatic control. Functional overlap exists but does not mean complete multiplicity.

- Manual: means a complete manual control mode with no automatic control means.

c. Review of Job Analysis (TA).

This refers to the process by which the designer has not only recorded the unique functions of the nuclear equipment but also the information and job support requirements necessary for achieving the safety functions through detailed job analysis. In the job analysis, if the device to be evaluated is a new device that does not exist in the past, it can be confirmed whether the job analysis is performed by sampling the representative job to satisfy the following job conditions.

- Representative duties and important duties related to plant operation, maintenance, testing, inspection and diagnosis.

- Start operation, normal operation, abnormal operation, and abnormal operation.

- Responses to sudden situations, low-power situations, and reactor shutdown situations.

- Probabilistic Risk Assessment (PRA), Sensitivity Analysis, and Human Reliability Analysis (HRA).

- Duties related to important activities involving intrinsic / extrinsic initial events through PRA Level 1 and Level 2.

- Jobs that monitor human safety-critical automation functions or that require human backup due to failure of the system.

In the job analysis, if the evaluation target device changes some of the existing devices (for example, digitalization of some interfaces or automation of some functions), the job related to the change of the user's behavior expected according to the device change is derived This may mean a procedure to confirm that detailed job analysis has been performed. In the case of equipment change, it is necessary to check whether the change of the user's behavior is related to safety and whether it is reflected in the design.

d. S & Q review of driver configuration and qualification.

This is a procedure to check whether there is a human engineering discrepancy (HED) related to the equipment by examining the composition of the operation group and the qualification analysis in the ergonomic verification of the integrated system of the nuclear power plant.

e. A Review of Human Reliability Analysis (HRA).

This is a procedure to check whether the designer has analyzed the design avoidance by analyzing the possibility of human error and the mechanism. Such design avoidance exists when it is difficult to minimize human error, human errors are difficult to monitor, and it is analyzed that it is difficult to provide recovery possibility. In this case, the design itself must be changed to provide an alternative design. These avoidance design items may be different depending on the evaluation target device, and when there is such a design avoidance item, it is a check procedure to confirm that the design avoidance is not included in the device design.

In this case, in step S200, the control unit 110 can further check whether the evaluation target device has undergone the above procedures. For example, the control unit 110 can confirm whether or not information related to whether or not the device design requirements derived through the operation experience review are appropriately reflected in the design of the evaluation target device is stored. Alternatively, the control unit 110 can determine whether or not the evaluation target device has appropriately allocated the safety function through the functional requirement analysis and the function allocation review process.

Also, the control unit 110 determines whether or not the criteria for assigning the safety function of the evaluation target device, based on the previously stored information, Analysis, and function assignment. In step S200, the controller 110 can confirm whether the job analysis, the operation group configuration, the qualification analysis, and the human reliability analysis are performed on the evaluation target device.

The control unit 110 can confirm that the target device has undergone the analysis procedure using the information related to the procedures stored in advance in the evaluation target device. If the device under evaluation does not pass the predetermined procedures (if it is not authenticated that the device has been verified through the above-described procedures through the stored information), the device under evaluation may perform the ergonomic conformity assessment according to the embodiment of the present invention. It can be judged that it is in a state unsuitable for the following. In this case, the control unit 110 may display information on a procedure necessary for the evaluation target device through the display unit 150. [

On the other hand, if it is determined in step S200 that the evaluation subject device is suitable for the ergonomic conformity assessment subject according to the embodiment of the present invention in accordance with the above-described procedures and predetermined criteria, (Step S202). [0053] In step S202, For example, in step S202, the control unit 110 may determine whether the evaluation target device is a device that is existing or a new device, based on the function and / or the type of the evaluation target device. For example, the control unit 110 may determine whether the device is a device existing in the existing device or a new device, depending on whether information about the device corresponding to the device under evaluation is stored in the job list database 122 .

In step S202, if the target device is not an existing device, the controller 110 may extract the job requirements corresponding to all jobs or at least one job of the evaluation target device. The information on the job and job requirements of the evaluation subject device may be stored in advance in the evaluation subject device information storage 120 as a result of the job analysis on the evaluation subject device. In this case, the control unit 110 can read the job and job requirements of the target device from the information stored in the evaluation target device information storage unit 120. [

On the other hand, if the evaluation target device is an existing device, the control unit 110 determines whether or not the evaluation target device includes information on the job and job requirements corresponding to the evaluation target device, Information about the job and job requirements of the device can be compared with each other. Accordingly, the control unit 110 can detect the difference between the evaluation subject device and the existing job and / or job requirement of the device. Then, the control unit 110 can determine that the evaluation target device has changed the job and / or job requirement in which the difference is detected.

In this case, the control unit 110 may check whether the changed job and / or job requirements have been verified in the target device. For example, this verification procedure may be information on other devices that are affected by a predetermined risk assessment for the target device or a change in the job and / or job requirements of the device. The control unit 110 can confirm whether or not the job and / or job requirements of the target device have been changed through the pre-stored information about whether or not the verification process has been approved. Based on the confirmation result, And assess the ergonomic suitability requirements for the changed job and / or job requirements. Hereinafter, the operation of step S202 of deriving the job and / or job requirements from the evaluation target device will be described in more detail with reference to FIG.

If the job and / or job requirement of the device under evaluation is derived in step S202, the controller 110 may detect the interface corresponding to the job and / or the job requirement (S204). In step S204, the control unit 110 acquires, from the pre-stored information (for example, job analysis result, manual, design plan, function analysis, stereotyped form, etc.) related to the evaluation target device, An interface corresponding to the job requirement can be detected.

The control unit 110 can detect whether or not an interface corresponding to the job and / or job requirement of the evaluation subject device exists in the evaluation subject device (S206). Here, the control unit 110 may store the information pre-stored in the storage unit 120 (for example, the interface inventory list of the evaluation target device stored in the evaluation target device information storage unit 120) Information) may be used. The pre-stored information may include the following items.

- The unique number or name of the device under evaluation.

- Nuclear and sub-systems related to the device under evaluation.

- The functions and sub-functions of the user (operator) related to the evaluation target device.

- Human System Interface (HSI) Component types: computer-based controllers, hard-wired controllers, computer-based indicators, hard-wired indicators, and so on.

- Indicator characteristics and function: Generation variable or operating variable, unit of measurement, accuracy of variable, accuracy of display, dynamic response method, display format, etc.

- Controller characteristics and functions: Continuous or interval control, type of control mode, accuracy of control, dynamic response characteristics, controller type, etc.

- User interaction and conversation.

- The location of the data management system.

- The physical location of the HSI.

- Photographs, screen samples, etc. for HSI.

For example, when the evaluation target device is a controller for controlling the on / off of a specific control facility, the control unit 110 determines whether or not the evaluation target device includes a previously stored manual, a design chart, a function analysis, A graphical user interface (GUI) such as a button, a switch, or an icon included in the device can be extracted through interfaces that can be provided in the evaluation target device. The control unit 110 may match the extracted interfaces with the job and / or job requirements derived in step S202.

In this case, the control unit 110 can read information on the interfaces of the devices corresponding to on / off control of the specific facility from the interface-related information stored in the job interface storage unit 120. [ Then, based on the information of the read interfaces, it is detected whether or not there is an interface corresponding to the job, that is, the job and / or the job requirement used for turning on / off the specific control facility can do.

For example, when the interface of the other device related to on / off control of the specific facility stored in the job interface storage unit 120 is a touch input for a specific graphic object in a button, switch, or GUI environment, The controller 110 may detect whether there is an interface corresponding to the touch input through the button, the switch, and the graphical object among the interfaces available in the evaluation target device. According to the detection result, the control unit 110 can determine whether or not an interface corresponding to all job and / or job requirements derived from the evaluation subject device can be provided in the evaluation subject device.

Even if the interface corresponding to the interface of the other device stored in the job interface storage unit 120 is not included in the interfaces provided in the evaluation target device in step S206, It may be determined that the evaluation target device can provide an interface corresponding to the derived job and / or job requirement. This may occur when the evaluation subject device controls the specific facility in a new method different from the existing equipment.

In this case, the control unit 110 may detect whether there is an interface corresponding to the job and / or job requirement based on the pre-stored manual, design diagram, function analysis, cubic form, . Or if the result of determining whether or not the interfaces corresponding to all job and / or job requirements derived in the step S202 are available in the evaluation target device is stored in the storage unit 120, It is possible to determine whether or not an interface corresponding to all job and / or job requirements derived from the evaluation subject device can be provided by the evaluation subject device.

Although the interfaces corresponding to all job and / or job requirements derived in step S202 can be provided by the evaluation target device, the control unit 110 determines whether or not the interface supports the job and / Or may be deemed unsuitable for job requirements. For example, the control unit 110 may further consider the following matters.

- If the HSI required for job performance is not valid (eg no controller or indicator is required).

- the design characteristics of the HSI do not meet the job requirements (eg, they are displaying the required operating variables, but are out of range or inaccurate for job performance).

- There is an HSI element that is not mentioned in job analysis and is necessary for job performance.

- Job analysis is performed incorrectly and there is an overestimated HSI element.

- There is simply an HSI element that is tailored to the specific job requirements of an individual.

On the other hand, if it is determined in step S206 that the interfaces corresponding to all job and / or job requirements of the evaluation target device can be provided by the evaluation target device, the control unit 110 determines It is possible to evaluate the suitability of the ergonomic according to predetermined criteria (S208). In step S208, the control unit 110 may determine whether the interfaces of the evaluation target device satisfy predetermined guidelines or regulatory guidelines. Also, the control unit 110 can determine whether the evaluation target device satisfies the ergonomic fitness requirement, using a simulation test according to a predetermined scenario for the evaluation target device.

For example, the control unit 110 can determine each interface of the evaluation target device according to the guidelines and the regulatory guidelines. In this case, for example, the control unit 110 may check the color of the scale to be displayed in a color whose saturation is necessarily equal to or higher than a predetermined level, or check the scale of the interface or the size of the text information.

Also, the control unit 110 may cause the simulation of the evaluation target device to proceed only when the interfaces of the evaluation target device satisfy predetermined guidelines or regulatory guidelines. In this case, the control unit 110 may simulate a task according to a predetermined scenario through the evaluation target device, and determine whether the evaluation target device satisfies the ergonomic fitness requirement according to the result. In addition, the controller 110 may determine whether the ergonomic conformity requirement of the evaluation target device is satisfied based on a result of convergence of evaluation scores of a host who directly goes through the simulation or an observer who observes the simulation. Here, the evaluation score may be calculated separately for each interface of the evaluation target device, and accordingly, the ergonomic conformity assessment score may be calculated differently for each interface.

On the other hand, if the ergonomic suitability of the evaluation subject device is judged according to the guidelines, the regulatory guide, and / or the simulation result, the design improvement items for the evaluation subject device can be derived together. For example, if there is an interface among the interfaces of the evaluation target device that does not conform to the predetermined guideline or the regulatory guidance, such an interface can be the design improvement. Also, as a result of the simulation, an interface whose evaluation score is lower than a certain level may be a design improvement item for the evaluation target device, based on evaluation scores of each interface of the simulator or the observer of the simulation. In this case, the controller 110 collects the converged opinions from the host or the observer of the simulation and stores the gathered opinions as information on the design improvement of the evaluation target device.

On the other hand, such a design improvement may occur even in the case where there is no interface required in accordance with job and / or job requirements in the evaluation target device. That is, if at least one of the interfaces corresponding to all job and / or job requirements of the evaluation target device is not available in the evaluation target device as a result of the checking in step S206, And may be stored as information on the design improvements (S210).

On the other hand, if information on the design improvement items is stored, the control unit 110 can determine whether the evaluation target device improves the design improvement items. For example, when the target device is evaluated for ergonomic suitability in the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention, the control unit 110 determines whether the design improvement is reflected .

In this case, the control unit 110 can determine whether there is an existing interface and a changed part for a specific component pointed out as a design improvement item. This change can be judged from the information stored in association with the target device (for example, the result of the function analysis, the information related to the three-dimensional shape of the manual, the design or the target device, etc.) . If the target device has undergone the design improvement, the controller 110 may re-determine the ergonomic suitability requirement for the target device (S212).

FIG. 3 shows in more detail an operation procedure for deriving a job and / or a job requirement required from the target device from the job analysis result of the pre-stored target device during the operation process of FIG.

If it is determined in step S200 that the evaluation target device has undergone sufficient predetermined ergonomic analysis activities, the control unit 110 may determine whether the evaluation target device is a new device (S300). For example, the control unit 110 may determine whether the information on the device corresponding to the function and / or the type of the evaluation target device is stored in the job listing database 122.

In accordance with the determination result of step S300, the controller 110 may derive the job and / or job requirements of the evaluation target device from different values. For example, if the evaluation subject device is a new device, the control unit 110 can derive all the job and / or job requirements of the evaluation subject device. This is because the evaluation target device is new, and therefore all of the jobs of the evaluation target device and the corresponding job requirements must be derived. In this case, the control unit 110 may create the job list table of the evaluation target device (S302). Here, the task list table may include tasks required to perform a representative task of the evaluation target device. That is, for example, when the representative job of the evaluation subject device is a job related to the operation or maintenance of the power plant, the job list table includes information about the duties for controlling the specific control facility related to the operation or maintenance of the power plant . ≪ / RTI >

On the other hand, these jobs can be created based on the job analysis result of the evaluation target device. Here, the duties may be determined according to the job data collected according to the representative duties. The job data may be collected in different manners depending on the representative job. Examples of these job analysis subjects (representative jobs) and their corresponding job data collection methods are shown in Table 1 below.

In this case, the control unit 110 can verify whether or not the job analysis result of the previously stored evaluation target device is analyzed based on the job data collected according to the job data collection plan previously set according to the job analysis target have. For example, if the job of the evaluation target device is a stochastic risk assessment or a job judged to be capable of influencing the risk of a plant through the HRA, the control unit 110 may perform a stochastic risk assessment, It is possible to detect whether or not job data is included. In the case where the job of the evaluation subject device is analyzed based on the job data collected according to each job analysis subject, the job list table can be created from the job analysis result of the evaluation subject device. The control unit 110 may generate a list of tasks (hereinafter referred to as a job list) of the evaluation target device based on the job data collected according to the created job list table (S304).

On the other hand, the duties may be those requiring additional job requirements. In this case, the above job requirements may be included in the job analysis results and may be determined internationally, such as a predetermined standard, such as the Korea Institute of Nuclear Safety (KINS) or the Nuclear Regulatory Commission It may be determined that it is required for the job in accordance with the published regulatory guidelines. The control unit 110 may derive the job requirements for each job list based on the job list (S306). These job requirements can be classified by the following conditions.

- Whether or not the information requirements (eg, alarms, variable values, feedback information) are necessary for the job performance.

- Whether there are requirements (eg, type of judgment, evaluation, etc.) such as decision-making or evaluation.

- Whether or not the requirements (eg, type of activity, job frequency, job margin) are necessary for job responsiveness.

- Whether the requirements for communication (eg, operator-to-operator communication for information monitoring and control).

- Whether or not the job load requirements (eg, cognitive job load, physical job load, duplication of job requirements).

- Whether or not it is a supporting tool (eg, tool, equipment) necessary to perform the job.

- whether it is a work environment element (eg entrance, working space with physical activity, lighting, temperature).

- Whether or not factors that can affect situational awareness or performance (eg stress, personnel reduction).

- Is it related to safety accidents (eg, potential personal injury or electric shock) that may occur during the performance of a job?

And the job requirements classified accordingly can be as shown in Table 2 below.

If it is determined in step S300 that the evaluation target device is not a new device, the control unit 110 may derive the changed job using the job list of the evaluation target device and the job analysis result (S310). For example, the control unit 110 compares the previously stored job list (stored in the job list database) of the device corresponding to the evaluation target device with the job analysis result of the evaluation target device to determine the job and / or job requirement Can be detected. In this case, the control unit 110 may extract the job and / or job requirements for which the difference is detected.

In this case, the control unit 110 can determine whether the changed job is a job related to safety. If the changed job is a job related to safety, the control unit 110 can further determine whether the changed job meets a predetermined risk assessment requirement (S312). Here, the above risk assessment requirements may be various according to predetermined regulatory guidelines or guidelines. However, for the convenience of description, the risk assessment is performed according to the Regulatory Guide 1.174 and NUREG-1764 published by the US Nuclear Regulatory Commission (NRG) Will be described as an example.

FIG. 4 is a diagram for explaining a risk analysis according to a risk information-based method according to an embodiment of the present invention.

The NRC risk selection process (RG 1.174) is a stochastic approach based on the core damage frequency (CDF), and the changes related to human actions (HAs) (NUREG-1764) are consistent with RG 1.174 (Risk-Informed Approach). That is, risk-significant human activities are reviewed in more detail, while human activities with lower risk are subject to less detailed review.

This risk information based evaluation method consists of the following two steps. The first step is the process of screening the risks and deploying the changes and related human activities in the risk space. Here, the risk domain means the Acceptability Region referred to in RG 1.174.

The first two steps can be quantitative analysis, and the third step can be qualitative analysis. Through the risk selection process, power plant changes and related human activities are classified into three levels of risk: 'high', 'medium' and 'low'.

The second stage is an ergonomic review process for three levels of dangerous areas: 'high', 'middle', and 'low'. The purpose of this phase is to ensure that changed human activities can be performed reliably through human engineering review. The review level for these changes in human behavior is proportional to the risk analyzed in Phase 1, and is divided into three categories:

- 'Review level I' is applied to assess 'high' risk human activities (ie, human activities corresponding to risk area I). The review criteria for 'Review Level I' are, in principle, to apply ergonomic guidelines such as NUREG-0800, NUREG-0711 Rev.2, NUREG-0700 Rev.2 and IN 97-78. Changes to the 'high' risk behavior are not generally desirable, but changes may be possible if there are justifiable reasons (eg, if the change is temporary or if the frequency of core damage can be reduced). Another important consideration to allow for changes in human behavior that corresponds to this 'high' risk is how well the operator has performed an ergonomic assessment of the changes involved.

- 'moderate' risk personality (risk domain II) is subject to a review of 'level II'. In this review, 'Level I' and the thematic review field are the same, but the scope is narrower than Level I.

- 'Low' Risk Human activity (risk domain III) does not perform an ergonomic review, but it is at a level that confirms the technical background of whether the change human activity corresponds to actual risk domain III (ie, "low" risk) It proceeds. However, some limited ergonomics reviews can be carried out based on qualitative analysis results, the last third step in the risk screening process.

In keeping with RG 1.174, NUREG-1764 does not rule out that operators are required to prove changes in licensing or apply for changes in human behavior through other means. Rather, the review method referred to in NUREG-1764 aims to maintain consistency of regulatory action on applications for change in risk information-based human behavior. RG 1.174 provides guidance on useful review of risk information-based principles, processes and methods for a broader range of related activities, rather than guidelines for specific changes to the plant. Therefore, NUREG-1764 maintains consistency with the regulatory aspects mentioned in RG 1.174.

RG 1.174 suggests that the Probabilistic Risk Assessment (PRA) should be applied to all relevant regulatory issues to the extent supported by the latest methods and data. This application complements the deterministic approach and supports the traditional defense-in-depth concept. NUREG-1764 on human behavior considers these directions and concepts at the same time.

RG 1.174 ensures that regulations on proposed changes are based on integrated results that take into account both traditional engineering and risk information. In other words, regulatory decisions should be based on qualitative factors as well as quantitative analysis and information. Reflecting this view, NUREG-1764 considers qualitative factors in the final decision-making process in the third stage of the risk screening process and in approving changes in human activities.

The NRC also notes that regulatory action should be based on risk information rather than risk-based. Therefore, NUREG-1764 maintains a deterministic aspect: an approach to defense in depth, current regulatory requirements, and ergonomic aspects of human behavior. The review of risk information changes, including changes in human behavior, is an iterative process, and the final review of ergonomics is the basis for Integrated Decisionmaking referred to in 2.2.6 of RG 1.174, (Safety Evaluation Report).

NUREG-1764 is intended to satisfy such objectives as (1) maintaining safety, (2) improving public confidence, (3) increasing regulatory efficiency and effectiveness, and (4) reducing unnecessary regulatory burden. Therefore, it can be expected to have effects such as improved safety decision making through PRA, efficient use of resources required for regulations such as manpower and time, and unnecessary burden of license holders. In conclusion, the NUREG-1764 operator's request for change may include human activities related to safety-related action items, depending on the following plant change cases.

- Power plant improvement

- Change procedure

- machine failure

- justification for continued operations (JCOs)

- Defects identified in the instrument performance or safety analysis

The change application should include an assessment of how the changes in the power plant case described above affect the human behavior (ie, safety-related operator action). Depending on the change of the power plant, there may be the following effects on human activities.

- When a new human activity occurs. - When the operation that was performed automatically should be assigned to the operator.

- If a different type of human activity is required. - If a new driving assignment occurs (eg due to new system facilities, equipment changes, or equipment failures), or if the existing operation mode changes due to the introduction of new controllers and display equipment.

- When task demands change - If the job requirements themselves are not affected, but the job requirements such as the amount of time available or the overall environment for the job change

The ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention can determine whether or not there is information related to such a risk assessment. For example, in the case of high-risk human activities, it can be judged whether there is information related to just cause and approval. Such information may include the safety evaluation report, the change application, and the like, and may be stored in advance as information related to the evaluation target device.

The control unit 110 can check whether the information required for the changed job is stored in the storage unit 120 and determine whether the information included in the information includes all the information to be considered. That is, according to the job analysis result of the evaluation target device, the control unit 110 can classify (for example, high, medium, low risk) according to the type of the changed job, Decisions (eg, high risk: justifiable grounds and information related to approvals). It is possible to judge whether or not the change of the job of the evaluation subject device has been made legitimately.

For example, the control unit 110 may check whether there is information such as a change request corresponding to the changed job, and whether the information required for the change request is included. Alternatively, necessary documents and procedures for the changed job may be displayed in the form of a check list so that the user can input whether the information is present or not, and the user may be informed of the presence or absence of each information. The control unit 110 may determine that all of the risk assessment-related information for the changed job, that is, the risk assessment procedure corresponding to the changed job, has passed.

On the other hand, if it is determined in step S312 that the changed job does not satisfy the risk assessment requirement (for example, if all necessary information is not stored), the control unit 110 transmits an ergonomic conformity assessment Or more. This is because, due to the nature of the nuclear equipment used in nuclear power plants, safety is the top priority, and therefore, only when the risk assessment requirements are satisfied, the job must be changed. Accordingly, in this case, the control unit 110 may display information including that the changed job does not satisfy the risk assessment requirement through the display unit 150, and may further display information related to the currently missing risk assessment requirement .

On the other hand, if it is determined in step S312 that the changed job satisfies the risk assessment requirement, the control unit 110 determines a job list for the changed job for the evaluation target device based on the job analysis result for the changed job (S314). When the job list is created as described above, the controller 110 proceeds to step S306 and can derive the job requirements for the changed jobs based on the job list created in step S314. If the job requirements are derived, the controller 110 may proceed to steps S204 through S212 to perform an ergonomic conformity assessment of the interface corresponding to the changed job and / or job requirements of the evaluation subject device.

The process of evaluating the ergonomic suitability of the evaluation target device in the step S212 may include the steps of determining whether the interface of the evaluation target device is suitable for a predetermined guideline or a regulatory guide, And may include processes for determining whether the ergonomic suitability is appropriate. FIG. 5 shows a process in which the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention evaluates the ergonomic fitness of the evaluation target device.

5, when the interface corresponding to the job and / or the job requirement is available in the evaluation target device as a result of the determination in step S206, the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention, (BUSV: Bottom Up Suitability Verification) (S500) to determine whether the interfaces conform to the predetermined guidelines.

For example, in step S500, the controller 110 may determine whether the color of the scale indicating the specific measured value, the size of the text, the position of the interface, and the like meet the predetermined guidelines or regulatory guidelines . That is, the control unit 110 stores the condition of the scale or text for displaying the measurement value in the verification information storage unit 120 or the instruction information storage unit 120 of the storage unit 120, Information, and can determine whether the retrieved condition is satisfied by a corresponding interface of the device under evaluation. Here, the information on the interface of the evaluation target device can be detected from the manual, the design, or the three-dimensional shape among the pre-stored information about the evaluation target device.

This BUSV is a process of closely checking whether the characteristics of the HSI and the environment in which the interface is used are consistent with ergonomic guidelines. The ergonomics guidelines are based on the HSI (Human System Interface) style guide corresponding to the device. Here, the HSI style guide may be stored in the storage unit 120 if the evaluation target device is not new. However, if the evaluation target device is a new device, there may be no corresponding HSI style guide, and in this case, the NUREG-0700 HSI design guidelines may be applied.

BUSV may also be performed through checklist evaluation techniques of certified ergonomics specialists. The checklist is structured to evaluate acceptable (Acceptable), Discrepant, or Not Applicable for each item of the Ergonomic Guidelines as shown in the table below. In this case, the check list may be displayed in the form of image information on the display unit 150, and the check result on the check list may be input through the input unit 140. [ In addition, the controller 110 may determine whether the evaluation target device matches the ergonomic conformity according to the check result of the check list.

The checklist may be composed of details that can confirm ergonomic design principles and guidelines for each constituent item of the HSI style guide. All items in the checklist should be independent of each other, and should not contain more than one review in a review. The composition of the checklist should first include items for information display, interface elements, and controller design as common items, followed by reviews based on the device characteristics. And finally, an item about the working environment in which the evaluation subject device is used and the maintenance aspect thereafter may be further included. And the checklist may include content (evaluation content) to be checked on the interface of the target device based on predetermined guidelines or regulatory guidelines, as shown in Table 3 above. The evaluation content may be a result of searching for a content corresponding to the interface of the evaluation target device in the guide line or the regulatory guidance stored in the storage unit 120. [ Further, when the evaluation subject device is predetermined by a device requiring more detailed expert review, the control section 110 may request the examination of the certified expert.

In step S500, the controller 110 determines whether the evaluation target device satisfies the ergonomic fitness of the user according to whether the check result of the check list and / or the condition based on the guide line or the regulatory guide satisfies the interface of the evaluation target device. (S502). Here, the fact that the device under evaluation conforms to the ergonomic suitability may mean that the interface of the device under evaluation conforms to the ergonomic guidance. Conversely, the incompatibility of the evaluation subject device with the ergonomic conformity may mean that the interface of the evaluation subject device is inconsistent with the ergonomic guidance.

On the other hand, if it is determined in step S502 that the interface of the evaluation target device is inconsistent with the one specified in the guideline or the regulatory guidance, or if the check result of the check list is inconsistent or has no interface , It can be determined that the evaluation target device is inconsistent with the ergonomic fitness. In this case, the control unit 110 may derive information on the ergonomic fitness inconsistency and the interface of the target device, which is determined to be inconsistent with the ergonomic fitness, as a design improvement item (S510). The result of the evaluation object device inconsistent with the ergonomic fitness and the design improvement item may be output through the display unit 150.

However, if there is an exception to the specific interface of the evaluation target device, that is, for example, if the interface does not agree with the predetermined guidelines or the regulatory guidance, but there is a legitimate reason for the discrepancy, (110) may, of course, determine that the interface is consistent with ergonomic suitability.

If it is determined in step S502 that the device under test conforms to the ergonomic suitability according to a predetermined guideline or a regulatory guide, the controller 110 may perform a simulation according to a predetermined scenario in step S504. For example, this simulation can be done as part of a Top Down Suitability Verification (TDSV) process that evaluates the suitability of an ergonomic design for the device in terms of operating concept. The control unit 110 may perform simulation of the operation of the evaluation target device according to a scenario set in step S504. This simulation can be performed through a virtual reality using HMD or the like.

On the other hand, the controller 110 may determine whether the evaluation target device is ergonomic conformity according to the result of the simulation (S506). For example, the controller 110 may determine whether the evaluation target device is operating or not, as a result of evaluating time and accuracy required for performing a task according to a predetermined scenario, And the evaluation score of a third party who visited the facility. Here, the host or the third party can evaluate each interface of the evaluation target device. Further, the control unit 110 may perform different simulations based on the type of the evaluation target device and the job to be performed, or may use different simulation results.

The controller 110 may determine that the evaluation target device matches the ergonomic fitness when the simulation result is equal to or greater than a preset reference. For example, if the time required for performing the task according to the scenario is shorter than a predetermined level or the accuracy is improved by a predetermined level or more when the evaluation target device is operated, It is possible to judge that the evaluation target device is in conformity with the ergonomic fitness when the evaluation score of the third party who has visited or observer is higher than a predetermined level. If it is determined that the evaluation target device matches the ergonomic fitness, the display unit 150 may display or output the result (S508).

On the other hand, if it is determined in step S506 that the evaluation target device does not match the ergonomic fitness, the controller 110 proceeds to step S510 to determine whether the ergonomic fitness inconsistency Human Engineering Discrepancy: HED) and design improvements. For example, the control unit 110 may derive an interface evaluated as inconsistent with the ergonomic fitness from the host who has performed the simulation and the third party who has visited the simulation as the design improvement, and the host and / Comments can be further included in the above design improvements.

In step S510, the controller 110 may detect whether there is information related to the validity of the currently obtained ergonomic fitness inconsistency (HED). That is, if there is information that the approved incompatibilities are approved by the authorized or authorized experts, the control unit 110 may determine that the inconsistencies are consistent with the ergonomic suitability of the evaluation target apparatus have. For example, the discrepancy may be approved based on literature or an example related to ergonomics, or related ergonomic evaluation data, and the information related to the approval may be stored in the storage unit 120 as information related to the evaluation target device There may be something.

However, if there is no information related to the validity of the HED, the control unit 110 may receive information for analyzing and evaluating the HED from the user. Here, when the user analyzes and evaluates the inconsistency (HED), the control unit 110 may provide the following criteria.

A) Whether it affects the plant system: Provides criteria for assessing the potential impact of the HED on the plant's system. The potential impact of the HED here may include the impact on the safety or human performance of the plant.

B) Present HED range criteria.

- HED General: HED that affects human performance in relation to the environment, such as overall composition, lighting or ventilation?

- General characteristics related HED: Is HED the applicability of HSI design guidelines?

- HED for design characteristics: HED for generalization of non-standardized design characteristics?

- Other HED

- Each HSI (Human System Interface) or procedure: Based on HSI components or procedures that may affect the safety of the entire plant in relation to specific components.

- Operator function: Is it a function of the operator that can affect the safety of the entire plant?

Meanwhile, the controller 110 can confirm whether various HEDs are cumulatively accumulated in the safety and human performance of the HED during the HED analysis and evaluation. For example, the control unit 110 may classify and manage the same or similar inconsistencies as the inconsistencies of the evaluation target apparatus by using the analysis and evaluation results input by the user. Or the control unit 110 may manage the information about other devices related to the inconsistency. Accordingly, when a specific inconsistency is selected, the control unit 110 displays information on other incompatibilities related to the specific inconsistency or other incompatibilities related to the job of the evaluation subject apparatus in which the inconsistency is found, In case of analysis, it is possible to trace the relationship with other devices. Accordingly, the user can comprehensively determine whether the specific inconsistencies are improved, whether they affect other devices, and whether the improvements can affect the inconsistencies of other devices.

As described above, the control unit 110 may provide the above-mentioned criteria so that the user can analyze and evaluate the inconsistency (HED), and thereby receive the analysis and evaluation items by the user. In this case, the control unit 110 may determine the priorities of the ergonomic inconsistencies (HED) of the evaluation target device and classify, store and manage the inconsistencies (HED) according to the determined priorities.

FIG. 6 shows an example in which, when an ergonomic inconsistency is detected in the target device, the device 100 according to the embodiment of the present invention classifies the inconsistency according to a predetermined criterion.

The controller 110 of the ergonomic conformity assessment apparatus 100 according to the embodiment of the present invention may classify the inconsistencies of the evaluation target apparatuses according to a predetermined classification criterion. The classification criteria may include, for example, a category of HEDs (e.g., HED general, general characteristics HED, design characteristic HED), an evaluation target device (HSI), a system (e.g., Surveillance system, etc.), job (for example, driving job, control job, etc.).

If the inconsistency item (HED) of the evaluation target device is classified as described above, the control unit 110 can first determine whether or not the disparity is valid. That is, the control unit 110 may check whether the ergonomic fitness inconsistency of the target device is already approved (S600). If there is information on the approval of the inconsistency, the inconsistency may be exceptionally recognized, and the evaluation target device may be sold to a device having an ergonomic conformity.

If it is determined in step S600 that there is no approval information for the inconsistency, the controller 110 may first determine whether the incompatibility of the target device with the ergonomic conformity affects the stability of the power source (S602) . If it is determined in step S606 that the inconsistency affects the safety of the nuclear power plant, the controller 110 may set the inconsistency to the highest priority (S606). The control unit 110 can determine whether the inconsistency affects the safety of the nuclear power plant based on the result of classifying the inconsistency (for example, when the job or the system directly affects the safety of the nuclear power plant) .

However, if it is determined in step S602 that the inconsistency of the ergonomic conformity of the target device does not affect the safety of the power source, it is determined whether the inconsistency of the target device affects the performance of the source or the attendant (S604). For example, the control unit 110 may determine that the inconsistency affects the performance of the nuclear power plant or the attendant when the evaluation subject apparatus is a driving system or the job of the target apparatus is related to operation of the power plant. If it is determined that the inconsistency affects the performance of the nuclear power plant or the attendant, the controller 110 may set the inconsistency to the second priority (S608).

On the other hand, if it is determined in step S606 that the target device does not affect the performance of the source or the attendant, the control unit 110 may set the discrepancy to the third lowest priority (S610 ). If the priorities of the inconsistencies are determined, the controller 110 can manage the inconsistencies according to the priorities. That is, in the case of the inconsistency whose priority is the first priority, the controller 110 may prompt the user to implement an immediate solution and alternative design.

On the other hand, these discrepancies may be displayed on the display unit 150 and may include various information. For example, the control unit 110 may display image information on the display unit 150, which includes information related to priorities of inconsistencies, a system related to the inconsistencies, and related operator functions and the like. The information related to the inconsistency may be documented in an electronic document or the like, and the control unit 110 may check whether or not information related to the inconsistency is documented.

In such a case, the user can develop an alternative design to improve the inconsistency, and the alternative design can develop an alternative design to maintain consistency with system and operator requirements. At this time, it should include the analysis of conflict effect considering the relation with other HED. When the alternative design is completed by the user, the controller 110 may receive information on the completed alternative design from the user. The control unit 110 can check whether the alternative design has been completed by the user. If the alternative design is completed, the control unit 110 can determine whether the evaluation target device is designed according to the alternative design.

For example, when the same evaluation target device is reset to an ergonomic conformity assessment target, the control unit 110 compares the existing design with a newly stored design to determine whether a difference occurs. If a difference occurs, it can be determined that the design has been changed according to the alternative design. Alternatively, the control unit 110 may detect only the design change of the interface part where the inconsistency occurs, and may determine whether the evaluation target device reflects the design improvement items.

In this case, the controller 110 may perform the ergonomic conformity assessment for the device again. And the alternative design can be evaluated according to the result of re-execution of the ergonomic conformity assessment. The control unit 110 can receive the result of the evaluation of the alternative design from the user, and can check whether the user has evaluated the alternative design. When the evaluation for the design is inputted, the control unit 110 can receive a transition plan for performing the design change according to the alternative design from the user. In addition, when the ergonomic fitness of the evaluation target device can not be improved only by the design solution according to the currently proposed alternative design, information on the ergonomic fitness of the evaluation target device may be input from the user as a basis for the ergonomic fitness inconsistency of the evaluation target device.

The present invention described above can be implemented as computer readable codes on a medium on which a program is recorded. The computer readable medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of the computer readable medium include a hard disk drive (HDD), a solid state disk (SSD), a silicon disk drive (SDD), a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, , And may also be implemented in the form of a carrier wave (e.g., transmission over the Internet). Also, the computer may include a control unit 180 of the terminal. Accordingly, the above description should not be construed in a limiting sense in all respects and should be considered illustrative. The scope of the present invention should be determined by rational interpretation of the appended claims, and all changes within the scope of equivalents of the present invention are included in the scope of the present invention.

100: An ergonomic conformity evaluating apparatus according to an embodiment of the present invention
110:
120:
121: Evaluation object device information storage unit
122: Job List Database
123: job interface storage
124: Verification information storage unit
125: instruction information storage unit
126: design improvement information storage section
130:
132: Interface Verification Unit
134:
140: Input unit
150:

Claims (13)

A method for evaluating an ergonomic fitness of a target device,
Confirming whether the target device is an apparatus to be subjected to the ergonomic conformity assessment;
Detecting a job requirement of the target device and a job requirement as a requirement for performing the job from the job analysis result pre-stored in the target device;
Detecting an interface corresponding to the job and job requirements of the target device using a database storing pre-stored information about the target device and an interface corresponding to a job of the plurality of various devices;
Detecting whether interfaces corresponding to the job and job requirements of the target device satisfy conditions according to a predetermined guideline; And
And evaluating the ergonomic suitability of the target device based on a simulation result of operating the target device according to a preset scenario.
The method according to claim 1,
Wherein the step of determining whether the target device is an evaluation target comprises:
Further comprising the step of determining whether the target device is a device reviewed through predetermined ergonomic analysis procedures,
Wherein the step of determining whether the target device has been reviewed through the preset ergonomic analysis procedures comprises:
And detecting whether there is any information related to the preset ergonomic analysis procedures.
3. The method of claim 2,
Operational Experience Review (OER), Functional Requirements Analysis and Function Allocation (FRA / FA), Task Analysis (TA), Operational Structure and Qualification Analysis (S & Q) Qualifications, and Human Reliability Analysis (HRA).
The method according to claim 1,
Wherein detecting the job and job requirements comprises:
Determining whether the target device is a new device; And
It is possible to detect all job and job requirements included in the job analysis result corresponding to the target device in accordance with the result of the determination whether the new device is present or to detect only the existing device and changed job and job requirements in the job of the target device And detecting,
Wherein the step of determining whether the target device is a new device comprises:
Wherein the step of judging whether or not information on the job and job requirements of the device corresponding to the target device is stored in advance.
5. The method of claim 4,
Wherein detecting the job and job requirements comprises:
Further comprising a result of determining whether a risk evaluation procedure for the changed job and job requirements has been performed if the target device is not a new device,
Whether or not to perform the above-
And judging whether or not information related to performance of a predetermined procedure is stored for the risk assessment.
The method according to claim 1,
Wherein detecting an interface corresponding to the job and job requirements comprises:
Extracting interfaces available from the target device from pre-stored information about the target device;
Comparing the interfaces provided by the target device and the job and job requirements of the target device, respectively; And
And determining whether or not the corresponding interfaces meet conditions preset in the job and job requirements when all the interfaces corresponding to the job and job requirements of the target device are present as a result of the comparison The method comprising the steps of:
7. The method of claim 6,
Extracting interfaces corresponding to the job and job requirements of the target device from the database; And
And comparing the interfaces provided by the target device with the interfaces corresponding to the job and job requirements extracted from the database.
delete The method according to claim 1,
The step of evaluating the ergonomic fitness of the target device comprises:
Further comprising the step of extracting and managing a Human Engineering Discrepancy (HED) that is inconsistent with the ergonomic conformity assessment standard of the target device as a result of the ergonomic conformity assessment of the target device.
10. The method of claim 9,
The step of extracting and managing the inconsistency may include:
Extracting an interface that does not meet the condition according to the predetermined guideline among the interfaces corresponding to the job and job requirements of the target device;
Classifying the inconsistencies according to a predetermined criterion;
Determining priority of the classified inconsistencies according to a predetermined priority setting criterion; And
And managing the discrepancies differently according to the determined priority.
An apparatus for evaluating ergonomic fitness of a target device,
A database including a job analysis result for the target device, information related to the target device, and interfaces corresponding to jobs of a plurality of various devices, and a storage including data for the ergonomic conformity assessment of the target device part;
A verification unit verifying an interface corresponding to the job and job requirements of the target device based on a simulation according to a predetermined guideline and a predetermined scenario; And
Detecting the job and job requirements of the target device from the job analysis result, detecting interfaces corresponding to the job and job requirements of the target device using the pre-stored information about the target device and the database, And a controller for evaluating the ergonomic suitability of the target device based on the verification result of the verification unit with respect to the interfaces.
The information processing apparatus according to claim 11,
Information relating to a manual, a design, a three-dimensional shape of the target device, a result of analysis of the job and function of the target device, information related to ergonomic analysis procedures necessary for evaluating the suitability of the target device for human engineering, And information relating to a predetermined risk assessment procedure for at least part of the job of the target device.
12. The method of claim 11,
And a virtual reality using an HMD (Head Mounted Display) is used.

Images