KR20230064818A - Safety-grade computerized procedure system for nuclear power plant - Google Patents

Abstract

An objective of the present invention is to provide a computerized procedure system (CPS) for a safety grade which can improve operating reliability and safety. The computerized procedure system (CPS) for a safety grade of a nuclear power plant comprises a safety-grade CPS server and at least one safety-grade CPS client. The safety-grade CPS server and the at least one safety-grade CPS client are connected to a safety-grade qualified indication and alarm system-non-safety (QIAS-N) network. The safety-grade CPS server includes: a first communication part configured to periodically receive first procedure performing information from a non-safety-grade CPS server through a gateway connecting the safety-grade QIAS-N network and a non-safety-grade distributed control system (DCS) network; and a memory configured to store the first procedure performing information. The at least one safety-grade CPS client includes: a second communication part configured to receive the first procedure performing information from the first communication part through the QIAS-N network; and a display part configured to display the first procedure performing information.

Description

Nuclear power plant safety rating computerized procedure system {SAFETY-GRADE COMPUTERIZED PROCEDURE SYSTEM FOR NUCLEAR POWER PLANT}

The present invention relates to a safety rating computerized procedure document system for a nuclear power plant.

A computerized procedure system (CPS) for operators is applied to the main control room of existing nuclear power plants. This CPS is a non-safety level and provides necessary operation information along with procedure details in connection with the Distributed Control System (DCS). In particular, since the APR1400 nuclear power plant applies a digital-based DCS, it is necessary to prepare for total failure of the DCS. Therefore, when the DCS and CPS fail, the non-safety grade CPS cannot be used, so operators have difficulty in driving using paper procedures.

Of course, procedures are being taken to secure operation reliability through ergonomics confirmation and verification procedures to minimize problems that may occur when paper procedures are used instead of CPS, but operators use CPS to ensure that the functions systematically provided by the system are In the event of a breakdown, not only the contents of the procedure are lost, but also the burden of remembering a lot of information due to the use of paper procedures in the complex environment of a nuclear power plant increases.

In particular, since continuous applied steps (CAS) exist in the emergency operation procedure, operators must memorize the CAS procedure and then carry out the emergency operation procedure. In addition, since paper procedures must be separately managed in preparation for CPS failures, when changing CPS procedures, burdens such as having to change the same paper procedures follow.

Since there was no CPS in nuclear power plants prior to the APR1400 nuclear power plant, operators performed various operations using only paper procedures, but the possibility of human error inevitably increased as the workload increased. Therefore, CPS is applied to all the latest nuclear power plants around the world.

Against this background, it is necessary to secure safety and operational reliability by providing a separate safety grade CPS in case the non-safety grade CPS fails.

Korean Patent Publication No. 10-2012-0088321 (2012.08.08.)

An object of the present invention is to provide a safety grade CPS that can improve driving reliability and safety by allowing operators to perform the same procedure performed in the non-safety grade CPS without relying on memory when a non-safety grade CPS fails. .

However, the problem to be solved by the present invention is not limited thereto, and may be expanded in various ways without departing from the spirit and scope of the present invention.

A safety level computerized procedure system (CPS) for a nuclear power plant according to an embodiment of the present invention includes a safety level CPS server and at least one safety level CPS client, and includes the safety level CPS server and the safety level CPS. The client is connected to the safety level QIAS-N network, and the safety level CPS server connects the safety level QIAS-N (Qualified Indication and Alarm System-Non-safety) network and the non-safety level DCS (Distributed Control System) network. A first communication unit configured to receive first procedure execution information from a non-safety grade CPS server at predetermined intervals through a gateway that performs a gateway, and a memory configured to store the first procedure execution information, each of the at least one of the at least one The safety level CPS client of includes a second communication unit configured to receive the first procedure execution information from the first communication unit through the QIAS-N network, and a display unit configured to display the first procedure execution information. do.

According to one aspect, when the non-safety grade CPS server is in an abnormal state, the first communication unit may be configured to receive a failure signal of the non-safety grade CPS server and the first procedure execution information from a DCS through the gateway. there is.

According to one aspect, when the non-safety level CPS server is normalized, the first communication unit may be configured to transmit second procedure execution information to the safety level CPS server through the gateway.

According to one aspect, the display unit displays a first window for displaying the status of the safety level CPS server, a second window for displaying all steps in the procedure, a third window for displaying continuing and incomplete steps among all the steps, It may be configured to display a fourth window displaying instructions included in a selected step among all the steps, and a fifth window displaying a button for selecting completion of the selected step.

According to one aspect, the first subset of the at least one safety-class CPS clients is located in the main control room of the nuclear power plant, and the second subset of the at least one safety-class CPS clients is located in the technical support office of the nuclear power plant. can do.

The disclosed technology may have the following effects. However, it does not mean that a specific embodiment must include all of the following effects or only the following effects, so it should not be understood that the scope of rights of the disclosed technology is limited thereby.

According to the safety grade CPS of a nuclear power plant according to the above-described embodiments of the present invention, when a non-safety grade CPS fails, operators can perform the same procedure performed in the non-safety grade CPS, thereby reducing the steps to be continuously performed. It can be performed without human errors such as omissions or uncertain performance without relying on operators' memories, and driving reliability and safety can be improved.

In addition, it not only solves the management problem of paper procedures (the burden of changing and maintaining computerized procedures and paper procedures, respectively, when procedure contents are changed), but also reduces the workload of operators who have to rely on memory when carrying out procedures in emergency situations, saving human resources. Mistakes (missing procedures and uncertain performance errors) can be prevented, and more time can be secured to respond to emergencies.

Operators can simultaneously share the procedures of the SS (Power Plant Manager), so it is possible to clearly operate the equipment and monitor the situation in the safety control panel according to the instructions of the SS, thereby reducing the occurrence of human errors such as communication errors. there is. In addition, by monitoring the integrity of the non-safety grade CPS, the safety grade CPS can be used when the use of the non-safety grade CPS is unavailable, thereby improving driving reliability.

1 shows an example of the structure of a main control room of a nuclear power plant.
2 illustrates a network connection structure of a safety grade CPS according to an embodiment of the present invention.
3 is a block diagram showing the configuration of a safety level CPS according to an embodiment of the present invention.
4 is an operation flowchart of a safety level CPS according to an embodiment of the present invention.
5 schematically illustrates information displayed on a display unit of a safety grade CPS client according to an embodiment of the present invention.

Since the present invention can make various changes and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail.

However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all modifications, equivalents, or substitutes included in the spirit and technical scope of the present invention.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. These terms are only used for the purpose of distinguishing one component from another. For example, a first element may be termed a second element, and similarly, a second element may be termed a first element, without departing from the scope of the present invention.

It should be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, but other elements may exist in the middle. something to do. On the other hand, when a component is referred to as “directly connected” or “directly connected” to another component, it should be understood that no other component exists in the middle.

Terms used in this application are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, the terms "include" or "have" are intended to designate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, but one or more other features It should be understood that the presence or addition of numbers, steps, operations, components, parts, or combinations thereof is not precluded.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related art, and are not interpreted in an ideal or excessively formal meaning unless explicitly defined in this application. .

Hereinafter, with reference to the accompanying drawings, preferred embodiments of the present invention will be described clearly and in detail so that those skilled in the art can easily practice the present invention.

1 shows an example of the structure of a main control room of a nuclear power plant.

1, in the center of the main control room, five operators (RO (Reactor Operator), TO (Turbine Operator), EO (Electrical Operator), SS (Shift Supervisor, Power Generation Manager) ) and STA (Shift Technical Advisor), and each operator uses four DCS-based Information FPDs (Flat Panel Displays) and one office computer. Two QIAS-N (Qualified Indication and Alarm System-Non-safety) FPDs are provided in the safety control panel for RO, TO, and EO, and operator consoles of SS and STA, in case all DCS-based Information FPDs fail. .

The safety level CPS client 200 of the safety level computerized procedure system (CPS) of a nuclear power plant according to an embodiment of the present invention, which will be described below, is the leftmost side of the operator console of the SS and STA and three operators (RO, TO, EO) can be located in the safety control panel. In this arrangement, 5 operators are normally driving using non-safety grade CPS, but they cannot be used in a situation where the DCS-based computer (Information FPD) in the operator's console is broken. Together with the control panel, it can be used by 5 operators. In particular, when the safety level CPS client 200 is placed on each driver's console and safety control panel, the display unit 240 of the safety level CPS client 200 is placed on the far left so that driving information can be easily found while viewing the procedure contents, You can find the information you need by looking at the QIAS-N screen on the right. In the safety air panel, three operators (RO, TO, EO) perform the procedure while standing, so the safety grade CPS clients 200 can be placed for RO, TO, and EO in order from the left side of the safety control panel. . When performing an emergency operation procedure (EOP), the SS manipulates the procedure, so each operator can perform necessary actions while checking the procedure execution steps.

2 illustrates a network connection structure of a safety grade CPS according to an embodiment of the present invention.

Referring to FIG. 2 , safety level CPS (safety level CPS server 100 and safety level CPS client 200) according to an embodiment of the present invention may be connected to a safety level QIAS-N network. In addition, the QIAS-N FPDs 70a, 70b, and 70c and the protection system 60 may be connected to the safety level QIAS-N network. The safety grade QIAS-N network can be connected to the non-safety grade DCS network through the gateway 50, and the non-safety grade DCS network includes a non-safety grade CPS (non-safety grade CPS server 11 and a non-safety grade CPS client 12). )), Information FPD (20a, 20b, 20c), DCS (30) and alert server (40) can be connected. The non-safety class CPS client 12 and the Information FPDs 20a, 20b, and 20c indicated by dotted lines in FIG. 2 constitute one operator's console, and although only one operator's console is shown in FIG. 2, as described above, multiple There may be an operator's console.

When operators normally perform a procedure using a non-safety level CPS, procedure performance information (eg, type of procedure performed, completion of steps in the procedure, etc.) is periodically provided as a safety level CPS through the gateway 50. The DCS server monitors whether the non-safety grade CPS is out of order, and if a failure occurs, it transmits the failure signal and procedure execution information of the non-safety grade CPS to the safety grade CPS server 100 through the gateway 50.

Therefore, the operator can directly perform the procedure performed in the non-safety level CPS through the directory screen of the safety level CPS. Various procedures can be displayed on the directory screen, and the operator can immediately recognize the procedure being performed through a separate display and display the corresponding procedure on the display unit 240 of the safety level CPS client 200.

When the non-safety level CPS (11, 12) and the DCS-based Information FPD (20a, 20b, 20c) are normalized again, the safety level CPS server 100 transmits the procedure execution information being performed to the non-safety level through the gateway 50. The procedure being transmitted to the grade CPS server 11 can be immediately performed. The safety level CPS client 200a may be located in the main control room for 5 operators, and the safety level CPS client 200b may be located in the technical support office.

3 is a block diagram showing the configuration of a safety level CPS according to an embodiment of the present invention, and FIG. 4 is an operation flowchart of the safety level CPS according to an embodiment of the present invention.

3 and 4, the safety level CPS according to an embodiment of the present invention includes a safety level CPS server 100 and at least one safety level CPS client 200. As shown in FIG. 2 , the safety level CPS server 100 and the safety level CPS client 200 may be connected to a safety level QIAS-N network.

The safety level CPS server 100 receives first procedure execution information from the non-safety level CPS server 11 at predetermined intervals through the gateway 50 connecting the safety level QIAS-N network and the non-safety level DCS network. It may include a first communication unit 120 configured to and a memory 140 configured to store the first procedure performance information (S401). The first procedure performance information is information about the procedure performed in the non-safety level CPS, and may include, for example, the type of procedure performed and whether a step in the procedure has been completed.

Each of the at least one safety level CPS client 200 includes a second communication unit 220 configured to receive the first procedure execution information from the first communication unit 120 through the QIAS-N network and the and a display unit 240 configured to display first procedure performance information (S405).

When the non-safety grade CPS server 11 is in an abnormal state, the first communication unit 120 receives a fault signal from the DCS through the gateway 50 of the non-safety grade CPS server 11 and performs the first procedure. It may be configured to receive information (S403).

When the non-safety level CPS server is normalized, the first communication unit 120 may be configured to transmit second procedure execution information to the safety level CPS server 11 through the gateway 50 (S407). . The second procedure performance information is information on the performance of a procedure performed in a safety level CPS, and may include, for example, the type of procedure performed and whether a step in the procedure has been completed.

Meanwhile, the first subset of the at least one safety level CPS client 200 is located in the main control room of the nuclear power plant, and the second subset of the at least one safety level CPS client 200 is the technology of the nuclear power plant. It can be located in the support room.

5 schematically illustrates information displayed on a display unit of a safety grade CPS client according to an embodiment of the present invention.

Referring to FIG. 5, the display unit 240 includes a first window 510 displaying the status of the safety level CPS server, a second window 520 displaying all steps in the procedure, and a continuing step among all the steps. and a third window 530 displaying incomplete steps, a fourth window 540 displaying instructions included in a selected step among all the steps, and a fifth window displaying a button for selecting completion of the selected step. may be configured to display window 550 .

For example, the first window 510 may display the status of the safety level CPS server as “normal” or “abnormal”.

For example, the second window 520 may display all steps, but may display a step currently being performed in a different color from other steps, and may be configured to select a necessary step through a scroll bar.

For example, the third window 530 collects and displays continuously performing steps or incomplete steps, and through this, operators perform steps to be continuously performed without human errors such as omissions or uncertain execution without relying on operators' memories. can do.

For example, the fourth window 540 may display an instruction currently being executed in a different color from other instructions, and may display instructions in a tree form.

For example, the fifth window 550 may display buttons such as “Complete”, “Parallel”, or “Redo” so that the operator can select them.

A comparison of the safety grade CPS according to an embodiment of the present invention and the conventional non-safety grade CPS can be summarized as shown in Table 1.

Although it has been described with reference to the drawings and examples above, it does not mean that the scope of protection of the present invention is limited by the drawings or examples, and those skilled in the art can understand the spirit and spirit of the present invention described in the claims below. It will be understood that the present invention can be variously modified and changed without departing from the scope.

100: safety grade CPS server
120: first communication unit
140: memory
200: safety class CPS client
220: second communication unit
240: display unit

Claims (5)

In the safety rating computerized procedure system (CPS, Computerized Procedure System) of nuclear power plants,
safety grade CPS server; and
contains at least one safety-class CPS client;
The safety level CPS server and the safety level CPS client are connected to a safety level QIAS-N network;
The safety level CPS server
Through a gateway connecting the safety grade QIAS-N (Qualified Indication and Alarm System-Non-safety) network and the non-safety grade DCS (Distributed Control System) network, the first procedure execution information is transmitted from the non-safety grade CPS server to a predetermined A first communication unit configured to receive periodically, and
A memory configured to store the first procedure performance information;
Each of the at least one security level CPS client,
A second communication unit configured to receive the first procedure execution information from the first communication unit through the QIAS-N network; and
Including a display unit configured to display the first procedure performance information,
Safety rating computerized procedure system for nuclear power plants. According to claim 1,
When the non-safety grade CPS server is in an abnormal state, the first communication unit is configured to receive a failure signal of the non-safety grade CPS server and the first procedure execution information from the DCS through the gateway, the safety grade of the nuclear power plant Computerized Procedure Documentation System. According to claim 2,
When the non-safety level CPS server is normalized, the first communication unit is configured to transmit second procedure performance information to the safety level CPS server through the gateway. According to claim 1,
the display part
A first window displaying the status of the safety level CPS server;
a second window displaying all steps in the procedure;
A third window for displaying continuing and incomplete steps among all the above steps;
A fourth window displaying instructions included in a selected step among all the steps, and
A safety rating computerized procedure document system for a nuclear power plant configured to display a fifth window displaying a button for selecting whether or not to complete the selected step. According to claim 1,
a first subset of the at least one safety class CPS client is located in a main control room of the nuclear power plant;
The second subset of the at least one safety level CPS client is located in the technical support office of the nuclear power plant, the safety level computerized procedure document system of the nuclear power plant.

Images