RU2451377C1 - Emergency protection system - Google Patents

Abstract

FIELD: electricity.

SUBSTANCE: system comprises a sensor of monitored device status, a processor, an input and output system, an executive protection device. The input-output system is arranged in the form of a universal intelligent input and output module that implements a function of control of at least one parameter of a monitored device status and comprising a microcontroller, at least one module of signal input from the sensor of monitored device status to the microcontroller, and at least one module of signal output from the microcontroller to the appropriate execution protection device. Additionally the system is equipped with at least one sensor of monitored device status, at least one duplicating universal intelligent input and output module, the output of the duplicating universal intelligent input and output module is connected to the execution protection device, the output of the additional sensor of monitored device status is connected to the input of the universal intelligent input and output module, interface outputs of which by means of duplicated communication channels are connected to the processor.

EFFECT: higher functional safety and reliability of operation.

4 cl, 3 dwg

Description

The invention relates to the field of electronics and automation, in particular to equipment for emergency protection and automation, and is intended for use in automation hardware for building security systems for industrial facilities.

A well-known Siemens emergency protection system, including sensors that monitor the technological parameters of the monitoring object, is associated with a programmable logic controller PLC (programmable logic controller), which provides security functions and consists of: input modules that ensure the coordination and conversion of electrical signals from sensors to digital interface code corresponding to the sensor signal; processors (primary and backup) that perform logical and mathematical processing of the interface code of the input modules according to the logical and mathematical conditions of the security functions, sequentially for each function, generate a digital interface code transmitted to the output modules; output modules, providing the conversion of the interface code into an electrical signal to control the actuators of protection; executive protection mechanisms that translate the process into a safe or secure state. (http://www.ste.ru/siemens/pdf/rus/09_S7-Safety_r.pdf).

The disadvantages of the known system are:

1. The sequential performance of all security functions in one processor, in a common memory area.

2. The presence in one multichannel module of input or output signals corresponding to different security functions.

3. Hardware dependence of the security function on each other.

4. The inability to verify the safety function for a false alarm.

A well-known emergency protection system comprising state sensors of a monitored object and actuators connected to multi-channel input modules and output modules via a two-wire connection, input modules serving sensors according to the input function, and output modules, actuators according to the information output function that carry out input and normalization input signals and diagnostics of the state of sensors and communication lines with them due to the presence of a microprocessor in the module, which carries out internal diagnostics module and generates diagnostic messages for the central processor of the programmable logic controller PLC, as well as processor modules, input / output interfaces of the programmable logic controller PLC, signaling devices for protection status, which inform about the start of an emergency and the time to exit it. (Landrini G. Integrated safety levels in accordance with IEC 61508 and 61511 standards and analysis of their relationship with maintenance. Modern automation technologies 1/2009. M .: STA PRESS. 2009).

A disadvantage of the known system is the fact that the system is intended for the collective use of security functions and not a single security function in the system can be implemented locally, but only together with other security functions in the general program area of the central PLC processor. Failure of one module leads to the failure of the entire emergency protection system (PAZ). There are also unused I / O channels. All this reduces the reliability of the system in operation.

In addition, for any changes in one of the safety functions, it is necessary to re-confirm compliance and re-verify all data and results. Input modules and output modules are also constructed according to the multi-channel principle, therefore, when used in a small PAZ system, where, for example, one analog output is used, the user is forced to use a 16-channel module. Thus, multiple redundancy is created, which increases the likelihood of non-dangerous failures, false positives and reduces the overall reliability of the system.

The technical problem to which the proposed invention is directed is to increase the functional safety and reliability of the PAZ system by creating an emergency protection system (PAZ) with independent safety functions.

The stated technical problem is solved in that in an emergency protection system comprising a state sensor of a monitored object connected to an input / output system connected to a processor and an actuating protection device connected to an input / output system, according to the invention, the input / output system is designed as universal intelligent input-output module that implements the control function of at least one state parameter of the monitored object and includes a microcontroller, m at least one signal input module from the state sensor of the monitored object to the microcontroller and at least one signal output module from the microcontroller to the corresponding protection actuator, the emergency protection system is additionally equipped with at least one state sensor of the controlled object, at least at least one redundant universal intelligent input-output module that implements the control function of at least one state parameter of the monitored object, the output is a reducing universal intelligent input / output module is connected to the protection actuator, the output of an additional state sensor of the monitored object is connected to the input of a universal intelligent input / output module, the interface outputs of which are connected to the processor via duplicated communication channels.

In addition, sensors are used as state sensors to calculate and control one state parameter of the monitored object.

In addition, the microcontroller of the universal intelligent input-output module is equipped with software configured to implement the monitoring function of one state parameter of the monitored object by reading the values of the sensors or the values of the group of sensors of the state of the monitored object that implement the monitoring function of one state parameter of the monitored object that determines the input variables for the safety function, linearization and scaling of read values values, calculating the value of the monitored safety parameter, comparing the calculated parameter with the permissible and / or maximum permissible value of the monitored safety parameter, in case of coincidence or exceeding the corresponding parameter of the formation of the warning signal and / or control signal.

In addition, the system further includes a redundant processor, connected via communication channels with at least one universal intelligent input-output module.

The technical result, the achievement of which is ensured by the implementation of the claimed combination of essential features, is:

- decrease in failure rate;

- saving the execution time of each safety function regardless of the number of safety functions in the PAZ system;

- the possibility of individual verification of the safety function;

- the ability to adjust the security function with guaranteed invariability of other security functions;

- improvement of metrological characteristics of the PAZ system;

- lack of hardware and software redundancy in the construction of low-channel PAZ systems.

The essence of the invention is illustrated by drawings, where

figure 1 presents a block diagram of the inventive emergency protection system;

figure 2 shows an example of a hardware implementation of a universal intelligent input-output module;

figure 3 shows an example of a functional diagram of an intelligent module.

The drawings show the following positions:

1 - the state sensor of the controlled object that implements the control function of one state parameter of the controlled object;

2 - universal intelligent input-output module (UIMVV); realizing the control function of one state parameter of the controlled object;

3 - microcontroller;

4 - signal input modules;

5 - signal output module;

6 - protection device of the first security function that implements the protection function according to one state parameter of the controlled object;

7 - processor communications protection;

8 - backup protection communications processor;

9 - duplicate universal intelligent input-output module (UIMVV) of the nth security function;

10 - an additional state sensor of the monitored object of the first security function;

11 - state sensor of the controlled object of the nth security function;

12 - additional universal intelligent input-output module (UIMVV) of the nth security function;

13 - additional actuator protection n-th security function;

14 - an additional state sensor of the controlled object of the nth security function;

15 - additional redundant universal intelligent input-output module (UIMVV) of the nth security function.

The emergency protection system (Fig. 1) is a multi-channel device and includes such a number of sensors of the state of the monitored object and associated corresponding universal intelligent input-output modules (UIMVV) (primary and backup) connected to the corresponding actuating protection device, which is determined by the number system-controlled parameters of the state of the object.

All sensors can be divided into functional groups, each group serves only its own security function. The number of pairs (primary + backup UIMVV) is determined by the number of safety functions of a particular emergency protection system.

The emergency protection system (Fig. 1) contains at least one sensor 1 of the state of the monitored object connected to the redundant input-output system connected to the redundant protection communication processors 7 and 8, and connected to the redundant input-output system at least one executive the protection device 6, and further includes at least one additional sensor 10 of the state of the monitored object, at least one additional duplicated I / O system, made in the form two universal intelligent input-output modules 12, 15 that implements one safety function, sensors 11, 14 of the state of the monitored parameter, and at least one additional actuating protection device 13. The outputs of the additional sensors 10, 14 of the state of the monitored object are connected to the inputs as main and backup 12, 15 UIMVV, which through communication channels are connected to the communication processors protection 7, 8.

As sensors 1, 10, 11, 14 of the state parameter of the monitored object can be used sensors of pressure, temperature, flow, vibration, displacement, speed, etc.). As actuating devices 6, 13 can be used, for example, a valve, valve, motor, etc.

The input-output system is made in the form of a universal intelligent input-output module 2 (UIMVV) that implements one safety function, for example: protection against exceeding the maximum pressure in the tank; protection against spontaneous explosion of the processed product upon reaching pressure, temperature and concentration of critical values; protection of rotation mechanisms from catastrophic destruction when vibration parameters and axial displacements are exceeded; etc.

The system further includes one redundant universal intelligent input / output module 9.

The sensor 1 of the state of the monitored object is connected in parallel to the main and backup universal intelligent input-output modules (UIMVV) 2 and 9, respectively, which are connected to the actuating device 6 for protecting the object.

The main universal intelligent input / output module 2 and the redundant universal intelligent input / output module 9 are connected via a serial duplicated interface to the primary and backup processors 7 and 8 of the communication protection.

The use of a serial duplicated communication interface in an emergency protection system (PAZ) is more preferable, because increases the reliability of communication, reduces the cost of the interface and allows you to build decentralized PAZ systems.

Processors 7 and 8 perform the function of a communication protection processor and do not affect the performance of the security function.

The universal intelligent input-output module 2 (UIMVV) is designed to receive signals from the sensor 1 to control the monitored state parameter of the protection object (for example, pressure, temperature, position, etc.) and transmit control signals to the actuator 6 of the protection (for example, a valve , valve, engine, etc.).

Universal Intelligent I / O Module 2 (UIMVV) includes a microcontroller 3, at least one module 4 (UNIT1) for inputting a signal from a sensor 1 of the state of a monitored object to a microcontroller 3 and at least one module 5 (UNIT2) for outputting a signal with microcontroller 3 to the actuator 6 protection.

Each of the modules (UNIT1, 2 ... n) is installed in the universal connector in the UIMVV module. Each module is a complete structural and circuit implementation of the input or output channel (Fig.2, 3).

The input module 4 performs the function of inputting a signal with information about one monitoring parameter, for example, from a temperature sensor, or from a pressure sensor, or from a position sensor, etc. The output module 5 performs the function of outputting a signal to an actuating protection device, for example, a valve, or a valve, or a motor, etc.

The microcontroller 3 of the universal intelligent input / output module is equipped with software configured to implement the monitoring function of one state parameter of the monitored object by reading the value of the sensor reading or the values of the readings of the group of state sensors of the monitored object that implement the monitoring function of one state parameter of the monitored object, which determine the input variables for safety functions, linearization and scaling of read values, def dividing the monitored security parameter, comparing the calculated parameter with a valid and / or a maximum permissible value of the monitored security parameter, a match or exceed the corresponding parameter generating a warning signal and / or the manipulated variable signal.

The microcontroller 3 implements one security function by continuously cycling this function. Localization of the security function in one UIMVV allows for individual testing, verification and modification of the security function, without restrictions on the use of other security functions.

The software that implements the security function is created in a specialized application development environment (Unimod-Pro) in one of the ways according to IEC 61-131, compiled into the final tic code and installed via the serial interface of the protection communications processor into the memory of microcontroller 3 of the universal intelligent module input-output

After downloading, the software is launched for execution and the universal intelligent input-output module 2 (UIMVV) performs a continuous, cyclical execution of the security function.

The presence of a programmable microcontroller 3 in each universal I / O module 2 of the PAZ system ensures the implementation of the intelligent I / O function. A universal intelligent input-output module (UIMVV) under the control of a programmable microcontroller 3 makes a decision on the need to perform protective actions according to the algorithm of its security function, without the participation of a communications processor and regardless of the state or performance of other UIMVV.

In the prototype, the input or output modules perform only the function of collecting information and transmitting it to the central processor of the PAZ system, and after the decision by the PAZ processor to issue a control signal, the output module receives information about the supply of the control signal to the actuator. Those. one input module receives information from sensors belonging to different security functions. The PAZ processor performs sequentially, in turn, the algorithms of all the security functions of this PAZ. The output module controls, at the command of the processor, the actuators of various security functions.

The presence of a universal intelligent module 2 input-output (UIMVV) UIMVV allows you to:

- ensure the performance of one security function within one module;

- to arrange the layout of input / output channels individually for the specific requirements of the security function, using a set of specialized UNITs installed on the universal connectors of UIMVV;

- ensure the independence of the security function from the state of other security functions, such as repair, maintenance, modernization, inspection. Verification of any security function does not affect the performance of others;

- create technical support for security functions for various hazard levels from SIL1 to SIL3 within the same PAZ system using selective duplication or tripling of UIMVV depending on the SIL level;

- significantly increase the reliability of the PAZ system, since the failure of one UIMVV leads to the failure of only one safety function of the PAZ system.

Each state sensor of the monitored object is connected in parallel to the main and redundant universal intelligent input-output modules (UIMVV), respectively, which are connected to the corresponding (related to the same security function as the sensors) actuator for protecting the object. UIMVV modules are connected via a serial duplicated interface with protection communication processors (primary and backup).

Each universal intelligent input / output module paired with a redundant universal intelligent module (UIMVV) implements one independent security function for the corresponding state parameter of the object. Thus, there are so many universal I / O modules in this system of security functions.

The inventive system of emergency protection works as follows.

The signal from the sensor (or group of sensors) for monitoring the state parameter of the monitored object, for example, a temperature sensor (pressure, gas, etc.), is transmitted through the communication channel to the inputs of specialized modules (UNITs) of the main and duplicate universal intelligent input-input modules, converted to digital format and in digital form is transmitted to the input of the microprocessor, UIMVV. In the microprocessor's memory, a cyclically executed program that implements the safety function analyzes the signals of the sensors and, based on their logical and mathematical processing, takes a control decision on the need to turn on the protection actuator. The protection enable signal is digitally input to a dedicated output module (UNIT) and initiates the protection device. The main and duplicate UIMVV programs are executed asynchronously and independently of each other. The activation of the protection actuator initiates that UIMVV, which first detects the fulfillment of the conditions for the operation of the safety function, the second (this can be either the main or duplicate) UIMVV with a delay of a maximum duration of the cycle of execution of the safety function also gives a signal to the actuator. Actuating protection device connected in parallel to the main and backup UIMVV, is in the active position and puts the process in a safe state.

The security function execution algorithm is compiled individually for each function based on the technical regulations of the facility.

At the end of each execution cycle, the safety functions and the main and backup modules transmit information on the status of sensors and actuators to the communication processors for transmitting this information to the alarm device. The alarm function is not a safety function.

Thus, a new architecture of the PAZ system was created that meets the requirements of safety standards for both small-channel and multi-channel PAZ systems.

Claims (4)

1. An emergency protection system comprising a state sensor of a monitored object connected to an input-output system connected to a processor and an executive protection device connected to an input-output system, characterized in that the input-output system is designed as a universal intelligent input module output that implements the control function of at least one state parameter of the monitored object and includes a microcontroller, at least one signal input module from the control status sensor object to the microcontroller and at least one signal output module from the microcontroller to the corresponding protection actuator, the emergency protection system is additionally equipped with at least one state sensor of the monitored object, at least one redundant universal intelligent input-output module that implements the control function of at least one state parameter of the monitored object, the output of a duplicate universal intelligent input-output module and connected to an actuating device protection, additional sensor controlled object state output connected to an input of a universal intelligent input-output module, interface outputs are duplicated by a communication channel connected with the processor. 2. The system according to claim 1, characterized in that sensors are used as state sensors to calculate and control one state parameter of the monitored object. 3. The system according to claim 1, characterized in that the microcontroller of the universal intelligent input-output module is equipped with software configured to implement the monitoring function of one state parameter of the monitored object by reading the values of the sensors or the values of the readings of the group of sensors of the state of the controlled object that implement the function control of one state parameter of the controlled object, defining input variables for the safety function, linearization and mass stacking the read values, calculating the value of the monitored safety parameter, comparing the calculated parameter with the permissible and / or maximum permissible value of the monitored safety parameter, in case of coincidence or excess of the corresponding parameter of the formation of the warning signal and / or control signal. 4. The system according to claim 1, characterized in that it further includes a backup processor connected via communication channels to at least one universal intelligent input-output module.

Images