KR102640045B1 - Apparatus for detecting common cause failure in nuclear power plant and method for operating thereof - Google Patents

Abstract

The common cause failure detection device for a nuclear power plant according to an embodiment of the present disclosure receives an I&C (PLC) platform health check status value, a safety system I&C logic status value, and a power plant status value through a communication unit and the I&C (PLC) unit. ) It may include a processor that determines whether a common cause failure has occurred based on the platform health check status value, the safety system I&C logic status value, and the power plant status value.

Description

Common cause failure detection device for nuclear power plant and its operating method {APPARATUS FOR DETECTING COMMON CAUSE FAILURE IN NUCLEAR POWER PLANT AND METHOD FOR OPERATING THEREOF}

This disclosure relates to a common cause failure detection device for a nuclear power plant and a method of operating the same.

A common cause failure (CCF) in a nuclear power plant is a failure of two or more devices that make up the power plant protection system due to a common cause. When a common cause failure occurs, the process operation value measured by the sensor changes. Problems such as not being delivered properly may occur.

Recently, as digital I&C has been applied to all safety and non-safety systems in nuclear power plants, design that takes common cause failures into consideration is required in accordance with regulatory guidelines.

In relation to this, in the prior art document (Patent Document 1), common cause failure is determined based on process values measured in the safety system and non-safety system to confirm common cause failure of the safety system, but this is due to common cause failure. There was a limitation that accurate judgment could only be made if the premise that unaffected non-safety systems were sound was established. In other words, if the non-safety system was not sound, there was a problem that the judgment results for common cause failures could not be trusted.

Korean Patent Publication No. 10-2015-0145000 (December 29, 2015)

The purpose of the present disclosure to solve the above-described problems is to provide a common cause failure detection device and a method of operating the same that are reliable in all cases in a common cause failure detection system of a nuclear power plant.

The present disclosure is to provide a device and a method of operating the same that can determine a common cause failure in advance before an accident occurs in a common cause failure detection system for a nuclear power plant.

In addition, it presents a detection device and its operation method to notify common cause failures when performing various operations such as performing procedures at a nuclear power plant.

However, the problem to be solved by the present invention is not limited to this, and may be expanded in various ways without departing from the spirit and scope of the present invention.

The common cause failure detection device for a nuclear power plant according to an embodiment of the present disclosure receives an I&C (PLC) platform health check status value, a safety system I&C logic status value, and a power plant status value through a communication unit and the I&C (PLC) unit. ) It may include a processor that determines whether a common cause failure has occurred based on the platform health check status value, the safety system I&C logic status value, and the power plant status value.

The I&C (PLC) platform health check status value may include health check status values of the CPU card, network card, and input/output card of the I&C platform.

The processor may determine that the common cause failure has occurred when the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false.

The processor determines that the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false, but the safety system I&C logic state value indicates that the trip variables of the I&C platform are bypassed. If this occurs, it can be determined that the above common cause failure has not occurred.

The processor may determine at a predetermined period whether the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false.

The processor may determine that the common cause failure has occurred when the power plant status value exceeds the pre-trip setting value for each trip variable but indicates that an alarm has not occurred.

When the processor determines that the common cause failure has occurred, the processor may transmit a common cause failure detection signal to at least one of an alarm system, a computerized procedure system, and a control system.

A method of operating a common cause failure detection device for a nuclear power plant according to an embodiment of the present disclosure includes receiving an I&C (PLC) platform health check status value, a safety system I&C logic status value, and a power plant status value, and the I&C (PLC) platform. It may include determining whether a common cause failure has occurred based on the health check status value, the safety system I&C logic status value, and the power plant status value.

The I&C (PLC) platform health check status value may include health check status values of the CPU card, network card, and input/output card of the I&C platform.

The step of determining whether the common cause failure has occurred may be a step of determining that the common cause failure has occurred when the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false.

In the method, the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false, but the safety system I&C logic state value is such that the trip variables of the I&C platform are bypassed. If indicated, a step of determining that the common cause failure has not occurred may be further included.

If the health check status values of the CPU card, network card, and input/output card of the I&C platform are all false, the step of determining that the common cause failure has occurred may be performed at a predetermined cycle.

The step of determining whether the common cause failure occurs is when the power plant status value exceeds the pre trip setting value for each trip variable, but an alarm is not generated, the common cause failure is determined. This may be the stage where it is determined that a failure has occurred.

When it is determined that the common cause failure has occurred, the method may further include transmitting a common cause failure detection signal to at least one of an alarm system, a computerized procedure system, and a control system.

The disclosed technology can have the following effects. However, since it does not mean that a specific embodiment must include all of the following effects or only the following effects, the scope of rights of the disclosed technology should not be understood as being limited thereby.

The common cause failure detection device and operation method of the power plant protection system of a nuclear power plant according to an embodiment of the present disclosure can secure the I&C soundness before an accident occurs by monitoring common mode failures of the I&C system in normal times, thereby ensuring the safety of the nuclear power plant. There is an advantage in ensuring safety.

1 is a control block diagram showing the configuration of a common cause failure detection device according to an embodiment of the present disclosure.
FIG. 2 is a control block diagram illustrating a measurement and control system for a nuclear power plant including a common cause failure detection device according to an embodiment of the present disclosure.
FIG. 3 is a control block diagram illustrating a measurement and control system for a nuclear power plant including a common cause failure detection device according to another embodiment of the present disclosure.
Figure 4 is a diagram illustrating a screen displayed in an alarm system according to an embodiment of the present disclosure.
Figure 5 is a diagram illustrating a screen displayed in the computerized procedure management system according to an embodiment of the present disclosure.

Since the present invention can make various changes and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail.

However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention.

Terms such as first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, a first component may be named a second component without departing from the scope of the present invention, and similarly, the second component may also be named a first component.

When a component is said to be “connected” or “connected” to another component, it should be understood that it may be directly connected or connected to the other component, but that other components may exist in between. something to do. On the other hand, when it is mentioned that a component is “directly connected” or “directly connected” to another component, it should be understood that there are no other components in between.

The terms used in this application are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, terms such as “comprise” or “have” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification, but are not intended to indicate the presence of one or more other features. It should be understood that this does not exclude in advance the possibility of the existence or addition of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as generally understood by a person of ordinary skill in the technical field to which the present invention pertains. Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as having an ideal or excessively formal meaning unless clearly defined in the present application. .

Hereinafter, with reference to the accompanying drawings, preferred embodiments of the present invention will be described clearly and in detail so that a person skilled in the art can easily practice the present invention.

1 is a control block diagram showing the configuration of a common cause failure detection device according to an embodiment of the present disclosure.

The common cause failure detection device 100 according to an embodiment of the present disclosure may include at least part or all of a user input interface 110, a memory 120, a communication unit 130, a processor 140, and a display 150. You can. Additionally, the common cause failure detection device 100 may further include other components in addition to the components shown in FIG. 1 .

The user input interface 110 may transmit a command signal input by the user to the processor 140 or a control signal from the processor 140 to the user. The user input interface 110 may transmit control signals input from local keys such as the power key and the settings key to the processor 140.

The memory 120 may store data for detecting common cause failures of nuclear power plants.

The communication unit 130 can communicate with external devices using various wired and wireless communication technologies. Additionally, the communication unit 130 can communicate with an alarm system, a computerized procedure system, a control system, etc. within the power plant.

The processor 140 may perform overall control of the common cause failure detection device 100 according to a user command input through the user input interface 110 or a command by an internal program.

The processor 140 can receive the I&C (PLC) platform health check status value, safety system I&C logic status value, and power plant status value through the communication unit, and the I&C (PLC) platform health check status value and safety system I&C logic status value. And based on the power plant status value, it can be determined whether a common cause failure has occurred.

If it is determined that a common cause failure has occurred, the processor 140 may transmit a common cause failure detection signal to at least one of an alarm system, a computerized procedure system, and a control system.

In addition, detailed control operations of the processor 140 related to the present disclosure will be described later.

The display 150 may display the operating status of the common cause failure detection device 100. The display 150 may be configured in various forms, and may be configured as a touch display to function as the user input interface 110.

In FIG. 1, the common cause failure detection device 100 of the present disclosure is shown as a single device, but this is only an example, and it is natural that it can be configured as a module within the device.

FIG. 2 is a control block diagram showing a measurement and control system for a nuclear power plant including a common cause failure detection device according to an embodiment of the present disclosure, and FIG. 3 is a control block diagram showing a common cause failure detection device according to another embodiment of the present disclosure. This is a control block diagram showing the measurement and control system of a nuclear power plant.

The measurement and control system of a nuclear power plant may include all or part of a common cause failure detection device 100, an alarm system 200, a computerized procedure system 300, and a control system 400.

The common cause failure detection device 100 of the present disclosure can receive the I&C Platform health check status value (110a), the safety system I&C logic status value (110b), and the power plant status value (110c). The common cause failure detection device 100 detects the I&C Platform health check status value (110a), safety system I&C logic status value (110b), and power plant status value (110c) from the safety system I&C platform, power plant protection system, and information processing system, respectively. It can be received through the network 400.

In addition, the common cause failure detection device 100 of the present disclosure is shown as receiving the I&C Platform health check status value 110a, the safety system I&C logic status value 110b, and the power plant status value 110c from the outside. You can also directly determine each state value by transmitting and receiving control signals.

The common cause failure detection device 100 of the present disclosure can detect a common cause failure through the received values, and when it is determined that a common cause failure has been detected, the alarm system 200, the computerized procedure system 300, and the control A common cause failure detection signal indicating that a common cause failure has been detected may be transmitted to the system 400.

Next, with reference to Table 1 below and FIGS. 2 and 3, a method of the common cause failure detection device 100 of the present disclosure to detect a common cause failure of a nuclear power plant will be described.

[Table 1]

First, the common cause failure detection device 100 of the present disclosure may receive an I&C (PLC) platform health check status value 110a. The common cause failure detection device 100 may receive the I&C (PLC) platform health check status value 110a from the I&C (PLC) platform through the communication unit 130, and the processor 140 may receive the I&C (PLC) platform health check status value 110a. It is also possible to transmit a health check signal and determine the health of the platform directly through the returned signal. The I&C (PLC) platform health check status value 110a may be a value that checks the health of the I&C platform at a predetermined period. According to one embodiment, the health of the I&C platform can be checked with a True/False value (or 1 or 0). Additionally, the health of the I&C platform can be judged using a Watchdog timer. Additionally, the I&C (PLC) platform health check status value 110a may include the health check status value of the CPU card of the I&C platform, the health check status value of the network card, and the health check status value of the input/output card.

The common cause failure detection device 100 of the present disclosure may receive the safety system I&C logic state value 110b. The safety system I&C logic state value 110b may be a value indicating whether the corresponding channel is bypassed. The common cause failure detection device 100 can receive the safety system I&C logic status value 110b through the communication unit 130, the processor 140 transmits a bypass check signal to the power plant protection system, and the returned signal You can also directly determine whether to bypass the channel.

The common cause failure detection device 100 of the present disclosure may receive the power plant status value 110c. The power plant status value (C) can indicate whether the PPS and ESFAS operation set values (pre trip set values) are exceeded. The common cause failure detection device 100 can receive the power plant status value 110c through the communication unit 130, transmit a power plant status check signal to the information processing system, and directly determine the status of the power plant through the returned signal. It may be possible.

The common cause failure detection device 100 of the present disclosure determines whether a common cause failure occurs based on the I&C (PLC) platform health check status value 110a, the safety system I&C logic status value 110b, and the power plant status value 110c. can be judged. In addition, the common cause failure detection device 100 of the present disclosure detects common cause failure based on the I&C (PLC) platform health check status value 110a, the safety system I&C logic status value 110b, and the power plant status value 110c. Determination of occurrence can be performed repeatedly at predetermined intervals.

The common cause failure detection device 100 of the present disclosure determines that the health check status value 110a received from one or more channels included in the I&C (PLC) platform is False (or 0) in all of the CPU card, network card, and input/output card. In this case, it can be determined that a common cause failure has occurred.

When the common cause failure detection device 100 of the present disclosure indicates that the power plant status value 110c exceeds the pre trip setting value for each trip variable, but no alarm is generated, the common cause failure detection device 100 It can be determined that a cause malfunction has occurred.

The common cause failure detection device 100 of the present disclosure determines that the health check status value 110a received from one or more channels included in the I&C (PLC) platform is False (or 0) in all of the CPU card, network card, and input/output card. If the power plant status value 110c exceeds the pre-trip setting value for each trip variable but indicates that an alarm has not occurred, it may be determined that a common cause failure has occurred.

The common cause failure detection device 100 of the present disclosure determines that the health check status value 110a received from one or more channels included in the I&C (PLC) platform is False (or 0) in all of the CPU card, network card, and input/output card. However, if the trip variables of the corresponding channel are bypassed, it can be determined that a common cause failure has not occurred. In other words, the common cause failure detection device 100 receives the I&C (PLC) platform health check status value 110a is False (or 0) for all CPU cards, network cards, and input/output cards, but the safety system I&C logic status value If (110b) indicates that the trip variables of the corresponding channel are bypassed, it can be determined that a common cause failure has not occurred.

When it is determined that a common cause failure has occurred, the common cause failure detection device 100 of the present disclosure can transmit a common cause failure detection signal to at least one of the alarm system 200, the computerized procedure system 300, and the control system 400. there is.

Next, FIG. 4 is a diagram illustrating a screen displayed in an alarm system according to an embodiment of the present disclosure, and FIG. 5 is a diagram illustrating a screen displayed in a computerized procedure management system according to an embodiment of the present disclosure.

Referring to FIG. 4, the alarm system 200 that receives the common cause failure detection signal from the common cause failure detection device 100 of the present disclosure displays a CCF alarm list 120 indicating that a common cause failure has been detected on the alarm screen 280. ) can be displayed.

The alarm system 200 may display the CCF alarm list 120 with the common cause failure alarm as the highest priority alarm. Through this, operators can recognize common cause failure alarms as the highest priority alarms.

Referring to FIG. 5, the computerized procedure system 300, which has received a common cause failure detection signal from the common cause failure detection device 100 of the present disclosure, displays a CCF alarm (CCF alarm) indicating that a common cause failure has been detected on the computerized procedure screen 380. 120) can be displayed.

Since the computerized procedure book system 300 includes the main procedures used by operators, they can immediately recognize that a common cause failure has occurred by seeing the CCF alarm 120 displayed when the operator uses the procedure book.

In addition, although not shown in the drawing, the control system 400 that receives the common cause failure detection signal may notify the operator of an I&C common cause failure alarm and indicate that the operator cannot properly control with the corresponding control value.

The present disclosure has the advantage of providing a common cause failure detection device and a method of operating the same that are reliable in all cases in a common cause failure detection system for a nuclear power plant.

The present disclosure has the advantage of providing a device and a method of operating the same that can determine a common cause failure in advance before an accident occurs in a common cause failure detection system for a nuclear power plant.

In addition, there is an advantage of providing a detection device and its operation method to notify common cause failures when performing various operations, such as performing procedures at a nuclear power plant.

The common cause failure detection device and operation method of the power plant protection system of a nuclear power plant according to an embodiment of the present disclosure can secure the I&C soundness before an accident occurs by monitoring common mode failures of the I&C system in normal times, thereby ensuring the safety of the nuclear power plant. There is an advantage in ensuring safety.

Although it has been described above with reference to the drawings and examples, it does not mean that the scope of protection of the present invention is limited by the drawings or examples, and those skilled in the art will understand the spirit and scope of the present invention as set forth in the following claims. It will be understood that various modifications and changes can be made to the present invention without departing from the scope.

100: Common cause failure detection device
110: User input interface
120: memory
130: Department of Communications
140: processor
150: display

Claims (10)

Ministry of Communications; and
Receives the I&C (PLC) platform health check status value, safety system I&C logic status value, and power plant status value through the communication unit, and receives the I&C (PLC) platform health check status value, the safety system I&C logic status value, and the power plant status. It includes a processor that determines whether a common cause failure has occurred based on the value,
The processor,
Although the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform are all false, the safety system I&C logic state value is set to bypass the trip variables of the I&C (PLC) platform. ) A common cause failure detection device for a nuclear power plant that determines that the above common cause failure has not occurred. According to paragraph 1,
The I&C (PLC) platform health check status value includes the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform. A common cause failure detection device for a nuclear power plant. According to paragraph 2,
The processor,
A common cause failure detection device for a nuclear power plant that determines that the common cause failure has occurred when the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform are all false. delete According to paragraph 3,
The processor,
A common cause failure detection device for nuclear power plants that determines at a predetermined period whether the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform are all false. According to paragraph 1,
The processor,
If the power plant status value exceeds the pre-trip setting value for each trip variable, but indicates that an alarm has not occurred, the common cause failure of the nuclear power plant is determined to have occurred. Fault detection device. According to paragraph 1,
The processor is
A common cause failure detection device for a nuclear power plant that transmits a common cause failure detection signal to at least one of an alarm system, a computerized procedure system, and a control system when it is determined that the common cause failure has occurred. Receiving, by the processor, an I&C (PLC) platform health check status value, a safety system I&C logic status value, and a power plant status value; and
A step of determining, by the processor, whether a common cause failure has occurred based on the I&C (PLC) platform health check status value, the safety system I&C logic status value, and the power plant status value,
The step of determining whether the common cause failure occurs is
Although the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform are all false, the safety system I&C logic state value is set to bypass the trip variables of the I&C (PLC) platform. ), a method of operating a common cause failure detection device for a nuclear power plant, including the step of determining that the common cause failure has not occurred. According to clause 8,
The I&C (PLC) platform health check status value includes health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform. A method of operating a common cause failure detection device of a nuclear power plant. According to clause 9,
The step of determining whether the common cause failure occurs,
A method of operating a common cause failure detection device in a nuclear power plant, which is a step of determining that the common cause failure has occurred when the health check status values of the CPU card, network card, and input/output card of the I&C (PLC) platform are all false.

Images