WO2017079950A1 - Nuclear power plant diverse driving system, method and diverse protection system - Google Patents

Abstract

A nuclear power plant diverse driving system, method and diverse protecting system, the nuclear power plant diverse driving system (1) being used to ensure the safety of the nuclear power plant when a reactor protection system (2) fails, comprising: a signal receiving module (11), used to receive a detection signal; a logic processing module (12), used to perform a logic processing on the detection signal so as to determine whether a design basis accident occurs, and generate a drive signal when such an accident is determined to have occurred; a signal output module (13), used to output the drive signal to an execution mechanism (3) so as to drive the execution mechanism (3) to operate, thus realizing automatic detection of the design basis accident and generation of the drive signal correspondingly so as to automatically control the operation of the execution mechanism (3).

Description

 Nuclear power plant diversity driving system and method and diversity protection system

 [0001] The present invention relates to the field of nuclear power technology, and in particular, to a nuclear power plant diversity driving system and method, and a diversity protection system.

 Background technique

 [0002] Digital Instrument Control System (DCS) has been developed and applied in nuclear power plant safety level control system due to its simplified control logic, flexible configuration capability and powerful self-diagnosis function. It is used as nuclear power plant reactor protection system. Digital protection system in the middle. However, digital protection systems are susceptible to common cause failures due to features such as centralized functionality, shared software, and widespread adoption of communication technologies. For reactor protection systems that implement reactor safety functions, in the event of a design basis accident, if the digital protection system fails to perform its critical functions due to a common cause failure, the accident will develop into an overdesign basis accident and further jeopardize the safety of the reactor.

 [0003] In order to avoid the nuclear power plant losing protection function caused by the common protection failure of the digital protection system under the nuclear power plant design basis accident, the prior art provides a nuclear power plant diversity driving system. The nuclear power plant diversity drive system is used as a nuclear power plant diversity backup device for the reactor protection system, and the protection function is realized after the reactor protection system fails.

 [0004] A known technology nuclear power plant diversity drive system primarily implements protection functions through an emergency control panel (ECP), a backup tray (BUP), and an auxiliary relay cabinet (ARC). The operator manually inputs the system-level control signal and the device-level control signal into the auxiliary relay cabinet by manually operating the emergency control panel and the backup disk, so that the auxiliary relay cabinet can protect the system and the field device respectively. In addition, when the digital protection system cannot effectively monitor the nuclear power plant due to common faults, the display and indication of important parameters of the nuclear power station can be obtained through the backup disk.

 [0005] However, the existing nuclear power plant diversity drive system is mainly controlled by manual intervention, which requires high operator requirements. Moreover, a large number of safety-grade instruments and hard hands increase the size of the backup disk.

 technical problem

[0006] The technical problem to be solved by the embodiments of the present invention is to meet the needs of the existing nuclear power plant diversity driving system. The defect of manual intervention by the operator provides a nuclear power plant diversity driving system and method capable of automatically implementing the protection function and a nuclear power plant diversity protection system including the nuclear power plant diversity driving system.

 Problem solution

 Technical solution

 In order to solve the above technical problem, in one aspect, an embodiment of the present invention provides a nuclear power plant diversity driving system for protecting a nuclear power plant from failure in a reactor protection system failure, comprising: a signal receiving module, configured to receive a detection signal a logic processing module, configured to perform logic processing on the detection signal to determine whether a design basis accident occurs, and when the determination is yes, generate a driving signal; and a signal output module, configured to output the driving signal to the actuator To drive the actuator action.

 [0008] Preferably, the diversity driving system further includes a human machine interface module, configured to receive a display signal provided by the logic processing module, thereby providing security function parameter monitoring information, alarm information, and system and device status indication; And configured to receive a user operation signal and send the signal to the signal receiving module.

 [0009] Preferably, the signal receiving module is specifically configured to receive a detection signal shared by the reactor protection system, receive a detection signal from a third-party detection system, and receive the user input from the human-machine interface module. Operation signal.

 [0010] Preferably, the nuclear power plant diversity driving system is further configured to receive a feedback signal of the actuator or perform delay by logic processing to implement automatic locking after the reactor protection system works normally.

 [0011] Preferably, the detection signal shared with the reactor protection system is isolated and input to the signal receiving module.

 [0012] Preferably, the nuclear power plant diversity driving system further includes a first isolation module, and the detection signal shared with the reactor protection system is isolated by the first isolation module and input to the signal receiving module.

[0013] Preferably, the logic processing module includes at least two parallel comparison units and a voting unit connected to the comparison unit; each of the comparison units is configured to compare the detection signal with a set value to determine Whether a design basis accident occurs, and outputs a comparison result to the voting unit; the voting unit is configured to vote on the comparison result, when a comparison result of at least two of the at least two comparison units is generated After the design basis event, the voting unit outputs the driving signal to the signal output module. [0014] Preferably, the number of the logical processing modules is two, respectively a first logical processing module and a second logical processing module; the executing mechanism includes a power control cabinet and a dedicated security facility of the stick control and the rod system The first logic processing module is configured to perform logic processing on the detection signal to determine whether a design basis accident occurs, and generate a first driving signal to drive the stick control and the rod position when the designation is that a design basis accident occurs. The power cabinet of the system operates to cut off the power of the control rod drive mechanism; the second logic processing module is configured to perform logic processing on the detection signal to determine whether a design basis accident occurs, and when the determination is that a design basis has occurred The accident generates a second drive signal to drive the action of the dedicated safety facility

[0015] Preferably, the nuclear power plant diversity driving system further includes a second isolation module, and the second driving signal is isolated by the second isolation module and sent to a preferred unit of the device interface module, and sent by the preferred unit To the special safety facilities action.

[0016] Preferably, the first logic module further includes a delay unit, wherein the delay unit is configured to delay an input signal or an output signal of the first logic module.

[0017] Preferably, the signal receiving module is further configured to receive a feedback signal from the dedicated security facility to block the second driving signal.

 [0018] Preferably, the logic processing module further includes an expected transient non-stop heap protection logic module, configured to respond to the shutdown protection system from being rejected during the shutdown process; the expected transient non-stop heap protection logic module includes Three first comparators, two second comparators, three-two comparators, first AND gates and second AND gates; the three first comparators are respectively used for determining the water supply amount of the three steam generators The three first comparator outputs are respectively connected to the input ends of the three-selection two-voter; the two second comparators are respectively used to determine the stack power of the two groups of reactors, the two second An output of the comparator is respectively connected to an input end of the first AND gate; an output end of the voter and the first AND gate is respectively connected to an input end of the second AND gate, the second The output of the door is connected to the actuator.

 [0019] In another aspect, the present invention also provides a nuclear power plant diversity driving method for protecting a nuclear power plant safety after a reactor protection system fails, comprising the following steps:

 [0020] Sl, receiving a detection signal;

[0021] S2, the detection signal is logically processed to determine whether a design basis accident occurs; if yes, then go to step S3, otherwise continue to step S2; [0022] S3. Generate a driving signal to drive the actuator action.

[0023] Preferably, the diversity driving method further includes the following steps:

 [0024] S4. Output display information to display security function parameter monitoring information, alarm information, and system and device status indications and receive user operation signals.

[0025] Preferably, the step S1 specifically includes: receiving a detection signal shared by the reactor protection system, receiving a detection signal from a third-party detection system, or receiving the user operation signal input from a human-machine interface module.

 [0026] Preferably, the diversity driving method further includes the following steps:

 [0027] S5. Receive a feedback signal of the actuator or perform delay by logic processing to implement automatic blocking after the reactor protection system works normally.

[0028] Preferably, in the step S1, the detection signal is isolated.

[0029] Preferably, before the step S1, the method further includes:

 [0030] S0, performing isolation processing on the detection signal shared by the reactor protection system.

[0031] Preferably, the step S2 further includes:

 [0032] S2 performing at least two parallel comparisons of the detection signal and the set value to determine whether a design basis accident occurs, and correspondingly outputting at least two comparison results;

[0033] S22. Vote on the at least two comparison results. When two of the at least two comparison results are that a design basis accident has occurred, the process proceeds to step S3, otherwise returns to step S21.

[0034] Preferably, the executing mechanism comprises a power cabinet and a special safety device of the bar control and the stick system, and the step S3 further comprises:

 [0035] S31, generating a first driving signal to drive the power control cabinet of the stick control and the rod system, thereby cutting off the power of the control rod driving mechanism;

[0036] S32. Generate a second driving signal to drive an exclusive safety facility action.

 [0037] Preferably, the step S31 further comprises: isolating the generated second driving signal, and then sending the information to the preferred unit of the device interface module, and sending, by the preferred unit, the dedicated security device

[0038] Preferably, the step S32 further includes: delaying the first detection signal or the first driving signal. [0039] Preferably, the diversity driving method further includes the following steps:

 [0040] S6. Receive a feedback signal of the dedicated security facility to block the second driving signal.

 [0041] Preferably, the diversity driving method further includes the following steps:

 [0042] S7, performing logic processing by using the expected transient non-stop heap protection logic module to respond to the shutdown protection system from rejecting during the shutdown process; the expected transient non-stop heap protection logic module includes three first comparisons. , two second comparators, three-two-vote, first and second AND gates;

 [0043] the three first comparators are respectively used to determine the water supply amount of the three steam generators, and the three first comparator outputs are respectively connected to the input ends of the three-selection two voter; Two second comparators are respectively used to determine the stack power of the two groups of reactors, and the outputs of the two second comparators are respectively connected to the input ends of the first AND gate; the voter and the first An output of the AND gate is coupled to an input of the second AND gate, and an output of the second AND gate is coupled to the actuator.

 [0044] In still another aspect, the present invention also provides a diversity protection system for protecting the safety of a nuclear power plant, including a reactor protection system, a diversity drive system, and an actuator;

 [0045] the reactor protection system is used to drive the actuator action when a design basis accident occurs at the nuclear power plant

[0046] the diversity drive system is used as a backup device of the reactor protection system, and is used to drive the actuator action when a design basis accident occurs in the nuclear power plant; the diversity drive system includes:

[0047] a signal receiving module, configured to receive a detection signal;

 [0048] a logic processing module, configured to perform logic processing on the detection signal to determine whether a design basis event occurs, and when the determination is yes, generate a driving signal;

[0049] a signal output module, configured to output the driving signal to an actuator to drive the actuator to act

[0050] Preferably, the multi-function drive system further includes a human-machine interface module, configured to receive a display signal provided by the logic processing module, thereby providing security function parameter monitoring information, alarm information, and system and device status indications; And configured to receive a user operation signal and send the signal to the signal receiving module.

[0051] Preferably, the nuclear power plant diversity driving system is further configured to receive a feedback signal of the actuator or perform delay by logic processing, so as to achieve automatic locking after the reactor protection system works normally. Advantageous effects of the invention Beneficial effect

 The embodiments of the present invention have the following beneficial effects: The present invention can automatically detect a design basis accident and generate a driving signal to automatically control the actuator action, thereby avoiding a total of reactor protection systems due to design basis accidents. In the event of a fault, the user is required to manually operate to control the actuator action. Therefore, the present invention can reduce the operational requirements of the user, improve the ability of the nuclear power plant to cope with common faults, and thereby improve the safety of the nuclear power plant. In addition, the present invention provides a special nuclear power plant diversity human-machine interface module, which effectively reduces the size of the backup disk, and makes the human-machine interaction function more expandable, and is no longer limited to the original design of the backup disk.

 Brief description of the drawing

 DRAWINGS

 [0053] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the prior art description will be briefly described below, and obviously, in the following description The drawings are only some of the embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.

1 is a block diagram showing the structure of a nuclear power plant diversity protection system according to a first embodiment of the present invention;

2 is a block diagram showing the structure of a nuclear power plant diversity protection system according to a second embodiment of the present invention;

3 is a block diagram showing the structure of a nuclear power plant diversity protection system according to a third embodiment of the present invention;

4 is a block diagram showing the structure of a nuclear power plant diversity protection system according to a fourth embodiment of the present invention;

5 is a block diagram showing the structure of a first embodiment of the nuclear power plant diversity driving system of FIG. 1;

6 is a block diagram showing the structure of an embodiment of the logic processing module of FIG. 5;

7 is a block diagram showing the structure of another embodiment of the logic processing module of FIG. 5;

8 is a block diagram showing the structure of a second embodiment of the nuclear power plant diversity driving system of FIG. 1;

9 is a block diagram showing the structure of an embodiment of the logic processing module of FIG. 8;

10 is a block diagram showing the structure of another embodiment of the logic processing module of FIG. 8;

11 is a block diagram showing the structure of a third embodiment of the nuclear power plant diversity driving system of FIG. 1;

12 is a block diagram showing the structure of a fourth embodiment of the nuclear power plant diversity driving system of FIG. 1;

13 is a block diagram showing the structure of a nuclear power plant diversity protection system according to a fifth embodiment of the present invention;

14 is a block diagram showing the structure of still another embodiment of the logic processing module of FIG. 5; 15 is a flow chart of a nuclear power plant diversity driving method according to a first embodiment of the present invention.

Embodiments of the invention

 The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. example. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

 [0070] As shown in FIGS. 1-4, the nuclear power plant diversity protection system provided by the present invention includes a reactor protection system 2, a multi-function drive system 1 and an actuator 3. The Reactor Protection System 2 is a safety system for detecting nuclear power plants that deviate from acceptable conditions and issue instructions to maintain safety. It is used to protect the integrity of the three nuclear safety barriers (ie, fuel cladding, primary circuit pressure boundaries, and containment). When the operating parameters reach the threshold that jeopardizes the three barriers, the reactor is shut down urgently and the dedicated safety facilities are activated as necessary. The reactor emergency shutdown system 22 in the reactor protection system 2 typically performs protection logic in software. For example, as shown in Figures 8 and 11, the reactor stack emergency shutdown system 22 includes a reactor shutdown software logic module 222 and a dedicated safety facility driver software logic module 224. Both logic modules operate the shutdown and drive logic in a software-only manner to control the shutdown circuit breaker 31 and the dedicated safety facility 33 to perform protection actions.

 [0071] The diversity drive system 1 is used as a backup system for the reactor protection system 2, and the reactor protection system 2 fails to protect the safety of the nuclear power plant. Unlike the reactor protection system 2, the diversity drive system 1 performs protection logic in pure hardware. The implementation of protection logic in software mode is prone to common cause failures due to the transmission of design basis accidents by nuclear power plants, and the loss of protection of nuclear power plant safety. The implementation of protection logic in pure hardware can effectively avoid common cause failures due to design basis accidents. Therefore, the reactor protection system 2 is effectively complemented by the diversity drive system 1 to ensure the safety of the nuclear power plant.

[0072] The actuator 3 mainly includes a stick control and stick system and a dedicated safety facility. Among them, the rod control and rod system is used to lift, insert, maintain and monitor the position of each control rod in the reactor to achieve reactor reactor start-up, shutdown and stable operation. Special safety facilities mainly include safety injection system, containment, containment spray system, containment isolation system and auxiliary. The safety injection system is used to inject cooling water into the core to prevent the core from melting. The containment is used to house the reactor pressure vessel and part of the safety system (including primary circuit main system and equipment, shutdown cooling system), completely isolated from the external environment to achieve a security screen The function of the barrier. The containment spray system is used to spray a boron-containing water into the containment after a water loss accident or a main steam pipe breaks in the containment of the nuclear power plant, limiting the pressure in the containment to increase sharply and shortening the high pressure to maintain the peak time and reduce the peak pressure. And temperature to prevent overpressure failure of the containment. The auxiliary water supply system is used to supply water to the steam generator to protect the steam generator and prevent the occurrence of core melting accidents.

 As shown in FIGS. 1-4, the diversity drive system 1 includes: a signal receiving module 11, a logic processing module 12, and a signal output module 13. The working principle of the nuclear power plant diversity driving system 1 is as follows: The signal receiving module 11 receives the detection signal 10, and then the logic processing module 12 performs logic processing on the detection signal 10 to determine whether a design basis accident occurs, and if a design basis accident occurs, logic processing Module 12 generates drive signal 20 and transmits it to actuator 3 via signal output module 13 to drive actuator 3 action. Wherein, prior to the present invention, the detection signal 10 is only input to the reactor protection system 2, and the reactor emergency shutdown system 22 in the reactor protection system 2 logically processes the detection signal 10 to determine whether a design basis accident has occurred and correspondingly A drive signal is generated to drive the actuator action to achieve a protection function. The nuclear power plant diversity drive system 1 of the present invention directly receives the detection signal 10 supplied to the reactor protection system 2, and performs the same or improved logic processing as the reactor protection system, thereby generating a drive signal 20 to drive execution in the event of a design basis accident. Mechanism 3 action. In the reactor emergency shutdown system 22, the logic processing is implemented by application software, and in the nuclear power plant diversity drive system 1, the logic processing is implemented by hardware. Therefore, the existing reactor protection system 2 plus the nuclear power plant diversity drive system 1 of the present application enables the nuclear power plant to have the protection function of the nuclear power plant diversity. In a preferred embodiment of the present invention, as shown in FIG. 5, the nuclear power plant diversity driving system 1 further includes a human machine interface module 15 for receiving the display signal 40 provided by the logic processing module 12 and displaying security function parameter monitoring information, Alarm information and system and device status indications. Similarly, the human interface module 15 can also receive the user's operation and send the user operation signal 105 to the signal receiving module 11.

[0074] Typically, the detection signal 10 input to the reactor protection system includes: a power range neutron fluence rate signal of the nuclear instrumentation system, a pressure signal of a regulator of the reactor coolant system, a steam generator in the feed water flow control system The water level signal and the pressure signal of the main steam system. However, the diversity drive system 1 provided by the present application can perform logical processing based on these detection signals shared with the reactor protection system 2 to determine whether a design basis accident occurs, and can also perform logic processing based on other signals to determine whether a design basis accident occurs. . For example, as shown in FIG. 13, the diversity drive system 1 can also receive the third The detection signal 104 provided by the square detection system 7 logically processes the detection signal 104 to determine whether a design basis accident has occurred. Of course, the diversity drive system 1 can also generate the drive signal 20 based on the operation signal 105 input by the user.

 [0075] Among them, the third-party detection system mainly includes: a nuclear instrumentation system, a power plant radiation monitoring system, a stick control, and a rod position system. The diversity drive system 1 can directly acquire detection signals from these systems, perform logic processing and generate drive signals accordingly.

 [0076] The above-mentioned nuclear power plant diversity driving system realizes automatic detection of design basis accidents and correspondingly generates driving signals to automatically control the action of the actuator, thereby avoiding a situation in which the reactor protection system causes a common cause failure due to a design basis accident. Manual user action is required to control actuator action. Therefore, the present invention can reduce the operational requirements of the user, improve the ability of the nuclear power plant to cope with common cause failures, and thereby improve the safety of the nuclear power plant. In addition, the present invention provides a special human-machine interface module, which effectively reduces the size of the backup disk, and makes the human-computer interaction function more expandable, and is no longer limited to the original design of the backup disk.

[0077] In addition, as shown in FIGS. 1-4, the detection signals 10 shared with the reactor protection system 2 are branched and isolated and input to the reactor protection system 2 and the nuclear power plant diversity drive system 1, respectively. There are various methods for branching and isolating the detection signal 10. As shown in FIG. 1, the reactor protection system 2 includes a branch and isolation module 21. The branch and isolation module 21 branches the detection signal 10 in the input reactor protection system 2 into two identical signals 102 and 101 and inputs them to the reactor emergency shutdown system 22 and the signal receiving module 11, respectively, and the same two signals The 101 and 102 are isolated so that the signal 101 input to the signal receiving module 11 is not affected by the reactor protection system 2. FIG. 2 shows another branching and isolation mode, and the reactor protection system 2 includes a branching module 21 and an isolating module 23. After the detection signal 10 is split into two identical signals 101 and 102 via the branching module 21, one of the signals 102 is directly input to the reactor emergency shutdown system 22, and the other signal 101 is isolated by the isolation module 23 to form an isolated signal 103. The signal 103 is input to the signal receiving module 11. 3 shows a third branching and isolation mode, the reactor protection system 2 includes a branching module 21, and the nuclear power plant diversity drive system includes an isolation module 14. The detection signal 10 is split into two identical signals 101 and 102 via the branching module 21, one signal 102 being input directly to the reactor emergency shutdown system 22, and the other signal 101 being input to the isolation module 14 forming the isolated signal 103. The signal 103 is sent to the signal receiving module 11. Figure 4 shows a fourth branching and isolation mode. The detection signal 10 is separated into two identical isolations by a branch and isolation module 4 independent of the reactor protection system 2 and the nuclear power plant diversity drive system 1. Signals 101 and 102, one signal 102 is directly input to the reactor emergency shutdown system 22, and the other signal 101 is directly input to the signal receiving module 11. The branching and isolation module 4 may be part of a detection device that detects signals, or it may be a separate device or device.

[0078] Figures 1-4 illustrate four embodiments of branching and isolation detection signals. It should be understood that those skilled in the art can also derive further embodiments based on the four embodiments, and these embodiments are all within the scope of the present invention.

 In a preferred embodiment provided by the present invention, the diversity drive system 1 does not perform a protection function when the reactor protection system 2 is operating normally. The diversity drive system 1 is automatically latched by receiving the feedback signal from the actuator 3, and the drive signal 20 is never sent to the actuator. The diversity drive system 1 can also be delayed by logic processing, lags behind the reactor protection system 2 receiving the detection signal 10 or lags behind the reactor protection system 2 output drive signal 20. Thus, when the reactor protection system 2 is operating normally, the reactor protection system 2 performs the safety protection of the nuclear power plant, and the diversity drive system 1 is automatically blocked. The automatic latching method of the diversity drive system 1 will be described in detail in the embodiment shown in Figs. 8 and 11. As shown in Figures 6 and 7, the logic processing module 12 includes a comparison module and a voting module. As shown in Figure 6, the logic processing module 12 includes two comparison modules 121A and 121B. The two comparison modules simultaneously receive the detection signal 10 sent from the signal receiving module 11, and then compare the detection signal 10 with the set value in the comparison modules 121A and 121B, respectively, and output the comparison result to the voting module 122. For example, the detection signal 10 can be the reactor temperature, and the temperature values T0 are preset in the comparison modules 121A and 121B. According to the actual working principle of the nuclear power plant, for example, when the reactor temperature exceeds the preset value TO吋, it indicates that a design basis accident has occurred, then when the temperature values input to the comparison modules 121A and 121B are greater than the preset temperature TO吋, the comparison module 121A and 121B then outputs a high level to the voting module 122. Otherwise, the comparison modules 121A and 121B output a low level to the voting module 122. When the comparison modules 121A and 121B output a high level 吋, the voting module 122 outputs a high level, that is, a driving signal, to the signal output module 13; otherwise, no driving signal is output to the signal output module 13. In the present embodiment, since the number of comparison modules is only two, the voting module 122 can be implemented as an AND gate.

[0080] As shown in FIG. 7, the number of comparison modules may also be three, but the working principle is similar to that of the embodiment shown in FIG. 6, and is not described here. In this case, the voting module 122 can be implemented as a three-choice voter. Of course, those skilled in the art can also set the drive signal to be output when the output of the three comparison modules is a high level 吋 voting module according to actual needs. [0081] In the present invention, the reliability of the logic processing module 12 can be improved by providing at least two comparison modules in the logic processing module 12. The logic processing module 12 generates a drive signal only if the output of at least two of the comparison modules reflects that a design basis event has occurred.

 [0082] FIG. 8 shows a specific logic processing module, namely a reactor shutdown hardware logic module 12A. This hardware logic module is used to execute reactor shutdown logic in the event of a design basis accident. As shown in FIG. 8, in the reactor protection system 2, the reactor emergency shutdown system 22 includes an analog input module 221, a reactor shutdown software logic module 222, and an output module 223. Since the detection signal 10 is an analog signal, the analog input module 221 converts the analog signal into a digital signal and inputs it to the reactor shutdown software logic module 222 for logic processing. If a design basis accident occurs, the reactor shutdown software logic module 222 generates a drive signal that is input through the output module 223 to the actuator 3, that is, the shutdown circuit breaker 31 in the power cabinet 3 of the bar control and stick system, thereby causing the shutdown The circuit breaker 31 is broken. The shutdown circuit breaker 31 is electrically connected to the control rod drive mechanism 5, and the operation of the shutdown circuit breaker 31 causes the control rod drive mechanism 5 to act accordingly, thereby performing shutdown protection. In the prior art, the reactor shutdown software logic module 222 is also referred to as a digital protection system. Digital protection systems are prone to common cause failures due to design basis accidents at nuclear power plants, making it impossible to perform shutdown protection. Therefore, this embodiment provides a shutdown protection logic implemented by hardware.

 As shown in FIG. 8, the nuclear power plant diversity driving system 1 includes a signal receiving module 11, a reactor hardware logic module 12A, and a signal output module 13. Because the nuclear power plant diversity driving system provided by the present application is implemented by hardware, the detection signal 10 can be directly input to the signal receiving module 11 and further directly input to the reactor shutdown hardware logic module 12A without performing digital/analog conversion. deal with. The drive signal generated by the reactor shutdown hardware logic module 12A (to distinguish the drive signal of the embodiment shown in FIG. 11, the drive signal can be named as the first drive signal) 201 is sent by the signal output module 13 to the stick control and the stick system. The control unit 32 of the power cabinet directly cuts off the power supply 6 of the power cabinet. Therefore, even if the reactor protection system 2 or the shutdown circuit breaker 31 fails and does not work properly, the diversity drive system 1 can also achieve emergency shutdown. Therefore, the nuclear power plant diversity drive system 1 is not affected by the common fault of the digital protection system from its signal input to signal output, ensuring the diversity and integrity of its automatic shutdown function.

Although FIG. 8 shows only a part of the structure of the nuclear power plant diversity driving system 1, those skilled in the art should understand that the nuclear power plant diversity driving system 1 may further include the human machine interface module 15 shown in FIG. 5. Of course, the branch and isolation module 21 of FIG. 8 can also be implemented as shown in FIGS. Reactor shutdown hardware logic The specific structure of block 12A is similar to that of the logic processing modules shown in Figures 6 and 7, but improvements may be made. Two of the structures will be specifically explained below.

As shown in FIGS. 9 and 10, the reactor shutdown hardware logic module 12A includes a delay module 123 in addition to the comparison modules 1 21A and 121B shown in FIG. 6. The delay module 123 may be connected after the voting module 122 as shown in FIG. 9, or may be connected before the comparison modules 121A and 121B as shown in FIG. The working principle is as follows: The delay module 123 delays the input signal or output signal of the reactor shutdown hardware logic module 12A. For example, the delay is tl, which means that only the design basis accident lasts for more than or equal to tl吋, and the reactor shutdown hardware logic module 12A determines that a design basis accident has occurred. This allows the reactor protection system 2 to prioritize protection actions. That is, in the event of a design basis accident, if the reactor protection system 2 is operating normally, the reactor protection system 2 first performs a protection process in response to the design basis accident. After the reactor protection system 2 responds, the detection signal 10 changes, and the signal received by the nuclear power plant diversity drive system 1 is that no design basis accident has occurred, so that no drive signal is generated. In this way, it is possible to avoid the nuclear power plant diversity drive system 1 repeating the protection action when the reactor protection system 2 is normal. In the event of a design basis accident, if the reactor protection system 2 generates a common cause failure and fails to function properly, the nuclear power plant diversity drive system 1 will perform the protection action after the design basis accident occurs.

 [0086] Of course, in order to avoid the nuclear power plant diversity drive system 1 repeatedly performing the protection action, the preset value in the comparison module of the reactor shutdown hardware logic module 12A may also be different from the preset value in the reactor shutdown software logic module 222. For example, the reactor temperature in the reactor shutdown software logic module 222 is preset to Tl, and the reactor preset temperature in the reactor shutdown hardware logic module 12A is Τ2, and Τ2 can be greater than Tl. Thus, the nuclear power plant diversity drive system 1 will also lag behind the reactor protection system 2 to perform protection actions.

[0087] FIG. 11 illustrates another specific logic processing module, namely a dedicated security facility driver hardware logic module 12 . The hardware logic module is used to perform a dedicated safety facility driver in the event of a design basis accident. As shown in FIG. 11, in the reactor protection system 2, the reactor emergency shutdown system 22 includes an analog input module 221, a reactor shutdown software logic module 222, an output module 223, and a dedicated safety facility driver software logic module 224. Figure 11 contains the same components as Figure 8, the function of which has been described in detail in Figure 8, and will not be described again. As shown in FIG. 8, in the reactor emergency shutdown system 22, the digital protection system includes two software modules, namely, an interconnected reactor providing software logic module 222 and dedicated security facility driver software. Logic module 224. The dedicated security facility driver software logic module 224 receives the detection signal 10 through the reactor provisioning software logic module 222 to determine if a design basis accident has occurred, and if a design basis accident occurs, the drive signal is sent to the dedicated security via the preferred unit 24 of the device interface module. Facility 33 to perform protection of the dedicated security facility 33.

[0088] The nuclear power plant diversity drive system 1 includes a dedicated safety facility drive hardware logic module 12B corresponding to a dedicated safety facility drive software logic module 224. When a design basis event occurs, the dedicated security facility driver hardware logic module 122B generates a drive signal (to distinguish the drive signal of the embodiment shown in FIG. 8, the drive signal can be named as the second drive signal) 202, and is protected by the reactor. The preferred module 24 of system 2 is sent to an ad hoc security facility 33. Since the preferred module 24 in the reactor protection system 2 is a hardware module, it is not affected by common cause failures. That is, even if a common cause failure occurs in the digital protection system of the reactor protection system 2 (ie, the software module in the figure), the nuclear power plant diversity drive system 1 can still perform protection actions through the preferred module 24 to provide nuclear power plant diversity protection for the nuclear power plant. . The preferred module 24 is used to provide a preferred strategy for different protections of the dedicated security facility 33 depending on the actual situation.

[0089] Preferably, the drive signal 202 output by the nuclear power plant diversity drive system 1 is isolated and sent to the preferred module 24. Figures 11 and 12 show two methods of isolating the drive signals, respectively. As shown in Fig. 11, the reactor protection system 2 includes an isolation module 23, and the signal output module 13 of the nuclear power plant diversity drive system 1 sends the output signal to the isolation module 23 and then to the optimization module 24. As shown in Fig. 12, the nuclear power plant multi-function drive system 1 includes an isolation module 14, and the output signal of the signal output module 13 is input to the isolation module 14 and then sent to the preferred module 24 of the reactor protection system 2. It should be understood that the two isolation methods for the drive signals of Figures 11 and 12 can be arbitrarily combined with the isolation method for the detection signals of Figures 1-4 to form a new embodiment. For example, the embodiment shown in FIG. 3 can be combined with the embodiment shown in FIG. 12 such that the versatile drive system 1 includes two isolation modules 14, one for isolating the detection signal 10 and one for isolating the drive signal 20 .

As shown in FIGS. 11 and 12, the dedicated safety facility 33 also transmits a feedback signal 30 to the signal receiving module 11 of the nuclear power plant diversity driving system 1, thereby preventing the nuclear power plant diversity driving system 1 from being normal in the reactor protection system 2. Repeat the protection action. The feedback signal 30 of the dedicated safety facility 33 can block the second drive signal 202 of the nuclear power plant diversity drive system 1. [0091] It should be understood that the nuclear power plant diversity drive system 1 shown in FIGS. 8, 11, and 12 may further include a human machine interface module 15.

 [0092] FIG. 13 shows another embodiment of a nuclear power plant diversity drive system 1. As shown in Fig. 13, the nuclear power plant multi-function drive system 1 includes a signal receiving module 11, a logic processing module 12, a signal output module 13, and a human interface module 15. The human interface module 15 includes a manual operation 151, an alarm module 152, an indication meter 153, and an indicator light 154. The manual operation 151 is for receiving a manual operation of the user, and the user operation information 105 is transmitted to the signal receiving module 11 through the human interface module 15. The logic processing module 12 generates a drive signal 20 based on the received user operation signal 105 to drive the actuator 3 action. In this process, the core logic processing module 12 does not need to perform as complex logic processing as described above, since the user operation signals 105 are typically very straightforward specific operations to the actuator. For example, stopping/starting a specific field device, closing/hitting a specific valve, or breaking or closing a power source. Of course, in another preferred embodiment provided by the present invention, the user operation signal 105 can also be sent directly to the logic processing module 12, which in turn generates the drive signal 20 based on the received user operation signal 105. The alarm module 152 is used to send out alarm messages such as text prompts, audible alerts and/or illuminated prompts. The indicator meter 153 is used to provide safety function monitoring information such as digital and/or text information. Indicator light 154 is used to indicate the status of the system and equipment.

 [0093] Manual triggering of system-level and device-level critical safety functions and manual triggering of a small number of general safety functional device levels are provided through the human-machine interface module 15. The human interface module 15 also provides a full range of safety function parameter monitoring information, alarm information, and system and device status indications.

As shown in FIG. 13, the signal receiving module 12 can receive the detection provided by the detection system 7 in addition to the detection signal 10 shared with the reactor protection system and the user operation signal 105 provided by the manual operation 151. Information 104. The detection system 7 is a third-party detection system independent of the reactor protection system 2 and the nuclear power plant diversity drive system 1 for acquiring various detection signals of the nuclear power plant. The detection signal 104 provided by the detection system 7 may include the detection signal 10 or other detection signals different from the detection signal 10. The logic processing module 12 can logically process the detection signal 104 to generate a drive signal 20 to drive the actuator 3 action when a protection action (such as a design basis accident or other accident) needs to be performed. Figure 14 illustrates another embodiment of a logic processing module. In this embodiment, the logic processing module 12C is an expected transient non-stop heap protection logic module for responding to the problem that the shutdown protection system is rejected during the shutdown process. and also That is to say, in some cases, the reactor protection system did not have a common cause failure, but in the event of an expected transient refusal, it failed to shut down as scheduled. To this end, the present embodiment provides an expected transient non-stop stack protection logic module 12C to address this problem.

As shown in FIG. 14, the expected transient non-stop reactor protection logic module 12C includes three first comparators 71A-71C, two second comparators 71D and 71E, a third-choice two voter 72A, and a first The door 72B and the second AND gate 73. The three water supply amount signals are respectively input to the input ends of the three first comparators 71A to 71C, and the three water supply amount signals respectively reflect the water supply amounts of the three steam generators. The first comparator compares the input water supply amount signal with a preset value M 0 , and then outputs the comparison result to the input terminal of the third-choice two voter 72A for voting. When the comparison result of at least two of the three comparators is that the steam generator water supply amount is less than the preset value M0 吋, the three-choice two voter 72A outputs a high level to one input end of the second AND gate 73; otherwise The output is low to an input of the second AND gate 73. Two stack power signals are input to the inputs of the second comparators 71D and 71E, respectively, and the two stack power signals respectively reflect the stack power levels of the two sets of reactors. The second comparator compares the input stack power signal with a preset value NO, and then outputs the comparison result to the first AND gate 72B. When the input two stack power signals are greater than the preset value _N0 , the first AND gate 72B outputs a high level to the other input terminal of the second AND gate 73; otherwise, the output low level to the second AND gate 72 An input. The output of the second AND gate 73 is coupled to the turbine vent module 34, the emergency shutdown module 35, the auxiliary feedwater activation module 36, and the bleed valve lockout module 37, respectively.

 [0096] Both stack power signals are greater than the preset value. NO means that the primary circuit of the nuclear power plant generates a large amount of heat. Steam generator The water supply is less than the preset value M0 means that the heat dissipation of the secondary circuit of the nuclear power plant is very small. When two things happen, it means that the temperature of the reactor is constantly rising and the heat is not enough. This obviously does not meet the design basis and is the expected transient that should initiate protection.

 [0097] On the other hand, an embodiment of the present invention further provides a nuclear power plant diversity driving method. As shown in FIG. 15, the method includes the following steps:

 [0098] Sl, receiving a detection signal;

 [0099] S2, performing logic processing on the received detection signal;

 [0100] S3, determine whether a design basis accident occurs; if yes, go to step S3, otherwise return to step S2;

[0101] S4. Generate a driving signal to drive the actuator to operate.

[0102] Preferably, in the implementation, steps S2 and S3 are generally performed by the same logic processing module. [0103] In a preferred embodiment provided by the present invention, the diversity driving method further includes the following steps:

[0104] S5. Output display information to display safety function parameter monitoring information, alarm information, and system and device status indications and receive user operation signals.

[0105] Step S5 may be parallel to steps S1-S4, thereby displaying security function parameter monitoring information, alarm information, and system and device status indications.

[0106] In another embodiment provided by the present invention, the detection signal is also required to be branched and isolated before step S1. Specific branching and isolation processing methods can be performed in the system shown in Figures 1-4.

[0107] In the nuclear power plant diversity driving system shown in FIG. 1, the branching and isolation module 21 of the reactor protection system 2 divides the detection signal 10 into two identical isolated signals 101 and 102, respectively, and inputs them to the nuclear power plant diversity. Drive system 1 and reactor emergency shutdown system 22. The nuclear power plant diversity drive system 1 shown in Figure 1 can perform the nuclear power plant diversity driving method as follows:

[0108] Sl, the signal receiving module 11 receives the branch-isolated detection signal 101;

[0109] S2. The logic processing module 12 performs logic processing on the received detection signal.

[0110] S3, the logic processing module 12 determines whether a design basis accident occurs; if yes, then proceeds to step S4, otherwise returns to step S2;

 [0111] S4. The logic processing module 12 generates the driving signal 20 and outputs it to the actuator 3 through the signal output module 13 to drive the actuator 3 to operate.

 [0112] In the nuclear power plant diversity drive system shown in FIG. 3, the branch module 21 of the reactor protection system 2 branches the detection signal 10 into two identical signals 101 and 102, one of which is input to the reactor emergency shutdown. System 22, another signal 101 is input to the isolation module 14 of the nuclear power plant diversity drive system 1. The nuclear power plant diversity drive system shown in Figure 3 can perform the nuclear power plant diversity driving method as follows:

[0113] Sl, the isolation module 14 receives the branched detection signal 101 and performs isolation processing on the detection signal 101;

[0114] S2, the signal receiving module 11 receives the isolated detection signal 103 from the isolation module 14;

 [0115] S3. The logic processing module 12 performs logic processing on the received signal.

 [0116] S4, the logic processing module 12 determines whether a design basis accident occurs; if yes, then proceeds to step S5, otherwise returns to step S2;

[0117] S5. The logic processing module 12 generates the driving signal 20 and outputs it to the actuator 3 through the signal output module 13 to drive the actuator 3 to operate. [0118] Similarly, according to the specific structure of the nuclear power plant diversity driving system shown in FIGS. 2 and 4 and the above description of FIGS. 1 and 3, those skilled in the art can correspondingly derive the various nuclear power plants shown in FIGS. 2 and 4. A nuclear power plant diversity driving method implemented in a sexual drive system. It will not be repeated here.

 [0119] In a preferred embodiment provided by the present invention, the logical processing of the above nuclear power plant diversity driving method comprises the following steps:

 [0120] S21: Perform a comparison of the first detection signal and the set value in parallel at least twice to determine whether a design basis accident occurs, and output at least two comparison results correspondingly;

 [0121] S22. Vote on the at least two comparison results, and when at least two of the at least two comparison results are that a design basis accident has occurred, the driving signal generating step is performed.

 [0122] The specific steps of the logic processing can be performed by the logic processing modules shown in FIGS. 6 and 7. For example, an embodiment is described by taking the logic processing module shown in FIG. 6 as an example. As shown in Fig. 6, the signal receiving module 11 of the nuclear power plant diversity driving system 1 transmits the received detection signals to the comparison modules 121A and 121B, respectively. The comparison modules 121A and 121B respectively compare the received signals with preset values to determine whether a design basis accident has occurred, and output the comparison results to the voting module 122, respectively. The voting module 122 votes on the received signal. When the comparison results of the comparison modules 121A and 121B indicate that a design basis accident has occurred, the decision module 122 generates a drive signal and transmits it to the signal output module 13. The signal output module 13 in turn sends a drive signal to the actuator 3.

 [0123] Another embodiment can be derived from the specific structure of FIG. 7 by those skilled in the art in the following teachings of this embodiment. It will not be repeated here.

 [0124] Preferably, there are many types of drive signals for driving different actuators 3, respectively. Figures 8 and 11 show two different drive signals produced by two different logic processing modules. Therefore, the following steps can also be performed in the nuclear power plant multi-drive system 1:

 [0125] S31, generating a first driving signal 201 to drive the power control cabinet of the stick control and the rod position system, thereby cutting off the power of the control rod driving mechanism;

 [0126] S32. Generate a second driving signal to drive 202 the dedicated security facility to operate.

[0127] The above two steps S31 and S32 can be performed by the reactor shutdown hardware logic module 12A and the dedicated security facility drive hardware logic module 12B in the nuclear power plant diversity drive system as shown in FIGS. 8 and 11, respectively. In the specific implementation process, the two nuclear power plant diversity drive systems in Figures 8 and 11 are usually combined in one nuclear power Station diversity drive system. Therefore, the above steps S31 and S32 are usually performed in a nuclear power plant diversity drive system.

 [0128] In a preferred embodiment provided by the present invention, the second drive signal needs to be isolated. As shown in FIG. 11, the second driving signal generated by the dedicated security facility driving hardware logic module 12B also needs to be isolated by the isolation module 23 of the reactor protection system 2 and then input to the preferred module 24. In addition, as shown in FIG. 12, the isolation module 14 of the nuclear power plant diversity drive system 1 isolates the second drive signal generated by the dedicated safety facility drive hardware logic module 12B and then shares the preferred module 24 with the reactor protection system.

 [0129] In a preferred embodiment provided by the present invention, it is also necessary to perform a delay process on the detection signal or the first driving signal for generating the first driving signal. As shown in FIG. 9, the driving signal generated by the voting module 122 is delayed by the delay module 123 and sent to the signal output module 13. In addition, as shown in Figures 8 and 10, the detection signals input to the reactor shutdown hardware logic module are delayed by the delay module 123 and input to the comparison modules 121A and 121B, respectively. By delaying the treatment, the nuclear power plant diversity drive system can be avoided.

[0130] In a preferred embodiment provided by the present invention, the nuclear power plant diversity drive system 1 can also receive a feedback signal from a dedicated safety device to block the first drive signal, thereby avoiding repetitive actions. As shown in Figures 11 and 12, the dedicated safety facility 33 is electrically coupled to the signal receiving module 11 of the nuclear power plant diversity drive system 1 to provide a feedback signal 30 for the nuclear power plant diversity drive system 1.

 [0131] In a preferred embodiment provided by the present invention, as shown in FIG. 13, the nuclear power plant diversity driving system 1 can also receive the detection signal 104 from the third party detection system 7, and logically process the detection signal 104 to determine whether it occurs. The reference accident is designed, and when it is judged to be 吋, a drive signal is generated to drive the actuator 3 to operate. Preferably, as shown in FIG. 13, the human-machine interface module 15 of the nuclear power plant diversity drive system 1 includes a hand-operated switch 151, so that the nuclear power plant diversity human-machine interface module 15 can also receive the user operation signal 105 and send it to the signal receiving module. 11. Thus, the logic processing module 12 generates a third drive signal to drive the actuator 3 action based on the received user operation signal 105.

 The above disclosure is only a preferred embodiment of the present invention, and of course, the scope of the present invention is not limited thereto, and those skilled in the art can understand all or part of the process of implementing the above embodiments, and Equivalent variations of the claims of the invention are still within the scope of the invention.

Claims

 Claim

A nuclear power plant diversity drive system for protecting the safety of a nuclear power station in the event of a reactor protection system failure, characterized by comprising:

a signal receiving module, configured to receive a detection signal;

a logic processing module, configured to perform logic processing on the detection signal to determine whether a design reference accident occurs, and generate a driving signal when the determination is yes;

And a signal output module, configured to output the driving signal to an actuator to drive the actuator to operate.

The nuclear power plant diversity driving system according to claim 1, wherein the diversity driving system further comprises a human machine interface module, configured to receive a display signal provided by the logic processing module, thereby providing safety function parameter monitoring information. And the alarm information and the system and device status indication; further configured to receive the user operation signal and send the signal to the signal receiving module according to claim 2, wherein the signal receiving module is specifically used Receiving a detection signal shared with the reactor protection system, receiving a detection signal from a third party detection system, and receiving the user operation signal input from the human interface module.

The nuclear power plant diversity driving system according to claim 1, wherein the nuclear power plant diversity driving system is further configured to receive a feedback signal of the actuator or perform delay by logic processing, thereby operating the reactor protection system Normal operation 吋 automatic locking The nuclear power plant diversity driving system according to claim 3, wherein the detection signal shared with the reactor protection system is isolated and input to the signal receiving module.

The nuclear power plant diversity driving system according to claim 5, wherein the nuclear power plant diversity driving system further comprises a first isolation module, and the detection signal shared with the reactor protection system passes through the first isolation module After isolation, input to the signal receiving module. [Claim 7] The nuclear power plant diversity driving system according to claim 1, wherein the logic processing module includes at least two parallel comparison units and a voting unit connected to the comparison unit;

 Each of the comparing units is configured to compare the detection signal with a set value to determine whether a design basis accident occurs, and output a comparison result to the voting unit; the voting unit is configured to vote on the comparison result, When the comparison result of at least two of the at least two comparison units is that a design basis accident occurs, the voting unit outputs the driving signal to the signal output module.

[Claim 8] The nuclear power plant diversity driving system according to claim 7, wherein the number of the logic processing modules is two, respectively a first logic processing module and a second logic processing module; The mechanism includes a power cabinet and a dedicated safety device of the stick control and the stick system; the first logic processing module is configured to perform logic processing on the detection signal to determine whether a design basis accident occurs, and when the judgment is that Designing a reference accident to generate a first drive signal to drive the power cabinet operation of the bar control and the rod system, thereby cutting off the power of the control rod drive mechanism;

 The second logic processing module is configured to logically process the detection signal to determine whether a design basis accident occurs, and generate a second driving signal to drive the dedicated safety facility action when the designation is determined to have occurred.

[Claim 9] The nuclear power plant diversity driving system according to claim 8, wherein the nuclear power plant diversity driving system further comprises a second isolation module, wherein the second driving signal is isolated by the second isolation module The preferred unit that is then sent to the device interface module is sent to the dedicated security facility action by the preferred unit.

[Claim 10] The nuclear power plant diversity driving system according to claim 8, wherein:

 A logic module further includes a delay unit for delaying an input signal or an output signal of the first logic module.

[Claim 11] The nuclear power plant diversity driving system according to claim 8, wherein the signal receiving module is further configured to receive a feedback signal from the dedicated safety facility to block the second driving signal. The nuclear power plant diversity driving system according to claim 1, wherein the logic processing module further comprises an expected transient non-stop reactor protection logic module, configured to respond to the shutdown protection system from being rejected during the shutdown process; The expected transient non-stop stack protection logic module includes three first comparators, two second comparators, three-two-vote, first and second AND gates, and the first three comparators respectively For determining the water supply amount of the three steam generators, the three first comparator outputs are respectively connected to the input ends of the three-selection two-voter; the two second comparators are respectively used to judge two groups of reactors Stacking power, the outputs of the two second comparators are respectively connected to the input ends of the first AND gate; the voter and the output of the first AND gate are respectively connected to the second An input of the door, the output of the second AND gate is coupled to the actuator.

A nuclear power plant diversity driving method for protecting nuclear power station safety in the event of failure of a reactor protection system, characterized in that it comprises the following steps:

 51. Receiving a detection signal;

 52, the detection signal is logically processed to determine whether a design basis accident occurs; if yes, go to step S3, otherwise continue to step S2;

 53. Generate a drive signal to drive the actuator action.

The nuclear power plant diversity driving method according to claim 13, characterized by further comprising the steps of:

 54. Output display information to display safety function parameter monitoring information, alarm information, and system and device status indications and receive user operation signals.

The nuclear power plant diversity driving method according to claim 14, wherein the step S1 specifically comprises: receiving a detection signal shared with the reactor protection system, receiving a detection signal from a third-party detection system, or receiving a human-machine The user operation signal input by the interface module.

The nuclear power plant diversity driving method according to claim 13, characterized by further comprising the steps of:

55. Receiving a feedback signal of the executing mechanism or delaying by logic processing, thereby The reactor protection system operates normally and achieves automatic blocking.

The nuclear power plant diversity driving method according to claim 15, wherein in the step S1, the detection signal is subjected to isolation processing.

The nuclear power plant diversity driving method according to claim 17, wherein before the step S1, the method further comprises:

So, isolating the detection signal shared with the reactor protection system. The nuclear power plant diversity driving method according to claim 13, wherein the step S2 further comprises:

 S2 performing at least two parallel comparisons of the detection signal and the set value to determine whether a design basis accident occurs, and correspondingly outputting at least two comparison results;

S22. Vote on the at least two comparison results. When two of the at least two comparison results are that a design basis accident has occurred, the process proceeds to step S3, otherwise, the process returns to step S21.

The nuclear power plant diversity driving method according to claim 19, wherein the executing mechanism comprises a power supply cabinet and a dedicated safety facility of the bar control and the bar system, and the step S3 further comprises:

 S3 generates a first driving signal to drive the power cabinet operation of the stick control and the rod system, thereby cutting off the power of the control rod driving mechanism;

 S32. Generate a second driving signal to drive an exclusive safety facility action.

The nuclear power plant diversity driving method according to claim 20, wherein the step S31 further comprises: performing isolation processing on the generated second driving signal, and then transmitting the preferred unit to the device interface module, by using the preferred The unit sends to the dedicated security facility.

The nuclear power plant diversity driving method according to claim 20, wherein the step S32 further comprises: delaying the first detection signal or the first driving signal. The nuclear power plant diversity driving method according to claim 19, further comprising the following steps:

S6. Receive a feedback signal of the dedicated security facility to block the second driving signal. [Claim 24] The nuclear power plant diversity driving method according to claim 13, further comprising

S7. Perform logic processing by the expected transient non-stop heap protection logic module to respond to the shutdown protection system from being rejected during the shutdown process; the expected transient non-stop heap protection logic module includes three first comparators, two a second comparator, a three-two voter, a first AND gate and a second AND gate;

 The three first comparators are respectively configured to determine the water supply amount of the three steam generators, and the three first comparator outputs are respectively connected to the input ends of the three-selection two voter; The two comparators are respectively configured to determine the stack power of the two groups of reactors, the outputs of the two second comparators are respectively connected to the input ends of the first AND gate; the voter and the first AND gate The output ends are respectively connected to the input ends of the second AND gate, and the output ends of the second AND gates are connected to the actuator.

[Claim 25] a diversity protection system for protecting the safety of a nuclear power plant, characterized by comprising a reactor protection system, a diversity drive system and an actuator;

 The reactor protection system is configured to drive the actuator action when a design basis accident occurs at the nuclear power plant;

 The versatile drive system is used as a backup device for the reactor protection system for driving a design basis accident at a nuclear power plant to drive the actuator action; the versatile drive system includes:

 a signal receiving module, configured to receive a detection signal;

 a logic processing module, configured to perform logic processing on the detection signal to determine whether a design basis accident occurs, and when the determination is to generate a driving signal, the signal output module is configured to output the driving signal to the actuator The actuator action is driven.

[Claim 26] The nuclear power plant diversity driving system according to claim 25, wherein the diversity driving system further includes a human machine interface module, configured to receive a display signal provided by the logic processing module, thereby providing Safety function parameter monitoring information, alarm information, and system and device status indication; also for receiving a user operation signal and transmitting to the signal receiving module [Claim 27] The nuclear power plant diversity protection system according to claim 25, wherein the nuclear power plant diversity driving system is further configured to receive a feedback signal of the actuator or perform delay by logic processing, thereby The reactor protection system works normally and realizes automatic locking