Wind turbine generator safety system hierarchical control system and method
By designing a hierarchical control system for the safety system of wind turbines, the problem of the inability to achieve hierarchical protection in existing technologies has been solved, enabling the normal operation of some functions during faults and improving the operating efficiency and safety level of the unit.
Patent Information
- Application Number
- CN202310780985.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-06-28
- Publication Date
- 2025-11-18
- Estimated Expiration
- 2043-06-28
AI Technical Summary
The existing wind turbine safety system cannot achieve graded protection, which means that some functions cannot be guaranteed to operate normally when a fault occurs.
Design a hierarchical control system for the safety system of a wind turbine, including a signal input device, a logic control device, and an execution device. The system generates input signals through a multi-level signal input device and performs hierarchical control through the logic control device to achieve hierarchical protection for different functional control loops of the wind turbine.
This ensures that some functions of the wind turbine can continue to operate normally in the event of a fault, thereby improving the unit's operating efficiency and safety level.
Smart Images

Figure CN116988925B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of wind power generation technology, in particular to a wind turbine safety system hierarchical control system and a wind turbine safety system hierarchical control method. BACKGROUND
[0002] The functions of the wind turbine safety system and the control system are independent of each other, and the safety system is logically prior to the control system. When the control system cannot keep the wind turbine running within a safe range, or the operating parameters of the wind turbine exceed the relevant safety limit, the safety system executes a safety strategy to ensure the safety function of the wind turbine during operation. Therefore, the safety system is the last line of defense for ensuring the safe operation of the wind turbine, and whether the wind turbine has the corresponding safety function and whether the safety system function can correctly execute its function are of great significance to the safe operation of the wind turbine and the safety of persons and property.
[0003] At present, the safety control of the wind turbine generally uses a safety system that is divided into several loops according to functions, and each loop uses a safety relay to connect related detection signals in series to form a complete electrical circuit. However, the current series safety chain form determines that each protection function has only one safety response level, and when any one safety function loop is triggered, the wind turbine cannot achieve hierarchical protection, and in some cases, the wind turbine cannot ensure that part of the function remains normal after a fault occurs.
[0004] SUMMARY
[0005] The purpose of the embodiments of the present application is to provide a wind turbine safety system hierarchical control system and a wind turbine safety system hierarchical control method to solve the above problems.
[0006] In order to achieve the above purpose, the first aspect of the present application provides a wind turbine safety system hierarchical control system, comprising:
[0007] a signal input device, a logic control device, and an execution device;
[0008] The signal input device comprises at least a first-level signal input device and a second-level signal input device;
[0009] The first-level signal input device is configured to generate a first-level input signal and a reset signal;
[0010] The second-level signal input device is configured to generate a second-level input signal;
[0011] The logic control device is configured to control a first-level control loop to be disconnected by the execution device when it is confirmed that the first-level input signal meets a first preset condition, and to control the first-level control loop to be turned on by the execution device after receiving the reset signal; and
[0012] in a case where it is confirmed that the secondary input signal meets a second preset condition, controlling, by the execution device, the secondary control circuit to be turned off;
[0013] wherein the secondary control circuit is turned off in a case where the primary control circuit is turned off, and the secondary control circuit is turned on in a case where the primary control circuit is turned on.
[0014] Optionally, the signal input device further comprises a tertiary signal input device, configured to generate a tertiary input signal.
[0015] The logic control device is further configured to, in a case where it is confirmed that the tertiary input signal meets a third preset condition, control, by the execution device, a tertiary control circuit to be turned off.
[0016] wherein the tertiary control circuit is turned off in a case where the secondary control circuit is turned off, and the tertiary control circuit is turned on in a case where the secondary control circuit is turned on.
[0017] Optionally, the primary signal input device comprises:
[0018] an emergency stop button switch and a reset switch.
[0019] The reset switch is configured to generate a reset signal in response to a reset instruction.
[0020] The emergency stop button switch is configured to generate a primary input signal in response to an emergency stop control instruction.
[0021] The first preset condition comprises:
[0022] The primary input signal is generated by the emergency stop button switch.
[0023] Optionally, the primary signal input device comprises:
[0024] a rotation speed sensor.
[0025] The rotation speed sensor is configured to collect a rotation speed of an impeller and take the rotation speed of the impeller as the primary input signal.
[0026] The first preset condition comprises:
[0027] The rotation speed of the impeller is lower than a first rotation speed threshold.
[0028] Optionally, the reset switch comprises:
[0029] a manual reset switch and a remote reset switch.
[0030] The reset signal includes a manual reset signal and a remote reset signal, the manual reset signal is generated by the manual reset switch, and the remote reset signal is generated by the remote reset switch.
[0031] The logic control device is further configured to, after the number of received remote reset signals reaches a reset number threshold, control the primary control loop to be turned on only when the manual reset signal is received.
[0032] Optionally, the secondary signal input device includes:
[0033] A yaw position sensor;
[0034] The yaw position sensor is configured to collect a yaw angle of the wind turbine and take the yaw angle of the wind turbine as a secondary input signal.
[0035] Optionally, the second preset condition includes:
[0036] The yaw angle of the wind turbine is greater than a yaw angle threshold.
[0037] Optionally, the tertiary signal input device includes:
[0038] A rotational speed sensor;
[0039] The rotational speed sensor is configured to collect a rotational speed of an impeller and take the rotational speed of the impeller as a tertiary input signal.
[0040] The third preset condition includes:
[0041] The rotational speed of the impeller is higher than a second rotational speed threshold.
[0042] Optionally, the tertiary signal input device further includes:
[0043] A vibration sensor;
[0044] The vibration sensor is configured to collect a vibration amplitude or a vibration frequency of the wind turbine and take the vibration amplitude or the vibration frequency as a tertiary input signal.
[0045] The third preset condition further includes:
[0046] The vibration amplitude of the wind turbine is greater than a vibration amplitude threshold, or the vibration frequency of the wind turbine is greater than a vibration frequency threshold.
[0047] In a second aspect, the application provides a hierarchical control method of a wind turbine safety system, which applies the wind turbine safety system hierarchical control system described above, and the method includes:
[0048] Generating a primary input signal through the primary signal input device and generating a reset signal.
[0049] generate a secondary input signal through the secondary signal input device;
[0050] control the primary control loop to be off through the execution device under the condition that the primary input signal meets the first preset condition, and control the primary control loop to be on through the execution device after receiving the reset signal; and
[0051] control the secondary control loop to be off through the execution device under the condition that the secondary input signal meets the second preset condition.
[0052] The secondary control loop is off under the condition that the primary control loop is off, and the secondary control loop is on under the condition that the primary control loop is on.
[0053] The embodiments provided by the present application have the following beneficial effects:
[0054] The different function control loops of the wind turbine are controlled in stages, so that the partial functions of the wind turbine can still be kept normal under the condition that some faults occur.
[0055] Other features and advantages of the embodiments or the implementation manners of the present application will be described in detail in the following specific implementation part. BRIEF DESCRIPTION OF DRAWINGS
[0056] The accompanying drawings are included to provide a further understanding of the embodiments of the present application, and constitute a part of the specification, and are used to explain the embodiments of the present application together with the following specific implementation part, but do not constitute a limitation to the embodiments of the present application. In the drawings:
[0057] Figure 1 The system structure schematic diagram of the wind turbine safety system hierarchical control system of the embodiments of the present application is schematically shown;
[0058] Figure 2 The priority control logic schematic diagram of the embodiments of the present application is schematically shown;
[0059] Figure 3 The personnel level control logic schematic diagram of the embodiments of the present application is schematically shown;
[0060] Figure 4 The yaw level control logic schematic diagram of the embodiments of the present application is schematically shown;
[0061] Figure 5 The unit level control logic schematic diagram of the embodiments of the present application is schematically shown;
[0062] Figure 6A method flow chart of a wind turbine safety system hierarchical control method of the embodiment of the application is schematically shown. DETAILED DESCRIPTION
[0063] The specific embodiments of the embodiments of the application are described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are merely intended to illustrate and explain the embodiments of the application, and are not intended to limit the embodiments of the application.
[0064] To solve the above problems, as shown in the first aspect of the application, a wind turbine safety system hierarchical control system is provided, comprising: Figure 1
[0065] a signal input device, a logic control device and an execution device;
[0066] The signal input device at least comprises a primary signal input device and a secondary signal input device;
[0067] The primary signal input device is used to generate a primary input signal and a reset signal;
[0068] The secondary signal input device is used to generate a secondary input signal;
[0069] The logic control device is used to control the primary control loop to be turned off through the execution device when it is confirmed that the primary input signal meets the first preset condition, and to control the primary control loop to be turned on through the execution device after receiving the reset signal; and
[0070] The logic control device is used to control the secondary control loop to be turned off through the execution device when it is confirmed that the secondary input signal meets the second preset condition;
[0071] The secondary control loop is turned off when the primary control loop is turned off, and the secondary control loop is turned on when the primary control loop is turned on.
[0072] In this way, the embodiments of the application can ensure that part of the functions of the wind turbine can still operate normally after some faults occur by performing hierarchical control on different functional control loops of the wind turbine.
[0073] Specifically, the signal input device can include a multi-stage signal input device, each stage of the signal input device can include various sensors for vibration monitoring, rotational speed monitoring, over-power monitoring, power quality, yaw overrun monitoring, etc. The logic processing device can be a CPU, which is used to convert the signals fed back by the input device into control signals of the execution device through logical judgment, make judgments according to the input signals and make hierarchical control on the output signals. The execution device is used to execute the opening and closing functions of the corresponding control loop, for example, the execution device can be a contactor, etc. It can be understood that each control loop, i.e. each functional control loop of the wind turbine, for example, the generator control loop, the variable pitch system control loop, the yaw system control loop, etc. Among them, the priority of each control loop can be determined in advance according to the demand. For example, the control strategy of each control loop can be configured according to the priority of each control loop, for example, the priority of the first control loop is higher than that of the second control loop, then when the logic control device confirms that the first input signal meets the first preset condition, for example, when a manual emergency stop signal is received, the logic control device controls the first control loop and the second control loop to be disconnected at the same time; while the logic control device confirms that the second input signal meets the second preset condition, for example, when the logic control device judges that the yaw overrun, the logic control device controls the second control loop to be disconnected, at this time the first control loop is not affected. It can be understood that the on-off control of each control loop can be independently controlled by the logic control device, for example, the logic control device can control each control loop by controlling the contactor arranged in each control loop, or can cascade each control loop by a cascade circuit, which is not limited here.
[0074] In this application, the signal input device further includes a third-level signal input device for generating third-level input signals. The logic control device is also used to control the third-level control loop to disconnect via an execution device when the third-level input signal meets a third preset condition. The third-level control loop disconnects when the second-level control loop is disconnected, and connects when the second-level control loop is connected. It is understood that in this application, the first-level control loop has a higher priority than the second-level control loop, and the second-level control loop has a higher priority than the third-level control loop. Therefore, when the logic control device controls the first-level control loop to disconnect, both the second-level and third-level control loops are disconnected, meaning the functional systems corresponding to each level of control loop are in a shutdown state. If the logic control device controls the second-level control loop to disconnect, the functional systems corresponding to the second-level and third-level control loops are in a shutdown state, while the functional systems corresponding to the first-level control loop continue to operate normally. If the logic control device controls the third-level control loop to disconnect, the functional systems corresponding to the third-level control loop are in a shutdown state, while the functional systems corresponding to the first-level and second-level control loops continue to operate normally. It is understandable that the control loop is not limited to the three-level control loop mentioned above; it can be more than one control loop, and this is not limited here.
[0075] like Figure 2 As shown, this application divides the response levels of the safety system into three levels: personnel level, yaw level, and crew level. The personnel level corresponds to the first-level control loop, the yaw level to the second-level control loop, and the crew level to the third-level control loop. The personnel level has the highest priority, and the crew level has the lowest priority. For example, when the personnel level is triggered, the yaw level and the crew level will also be triggered simultaneously; when the crew level is triggered, the yaw level and the personnel level are unaffected.
[0076] like Figure 3 As shown, for personnel-level safety protection, the primary signal input device in this application includes: an emergency stop button switch and a reset switch; the reset switch generates a reset signal in response to a reset command; the emergency stop button switch generates a primary input signal in response to an emergency stop control command. For example, the emergency stop button switch is used for manual emergency stop control. When it is pressed, the switch signal it generates, i.e., the primary input signal, will be sent to the logic control device. The first preset condition includes: the primary input signal is generated by the emergency stop button switch, that is, when the logic control device receives the switch signal from the emergency stop button switch, it controls the primary control loop to disconnect. Multiple emergency stop buttons can be used. For example, when any one of the unit's emergency stop buttons is triggered, the safety system immediately triggers the pitch system to retract the pitch, disconnects the yaw system, and disconnects the generator main circuit breaker through the logic control device.
[0077] It is understood that the reset switch includes a manual reset switch and a remote reset switch, used for manual and remote reset respectively. Therefore, the reset signal includes a manual reset signal and a remote reset signal, with the manual reset signal generated by the manual reset switch and the remote reset signal generated by the remote reset switch. The emergency stop button switch, manual reset switch, and remote reset switch constitute a personnel-level link. The connection circuit structure of the emergency stop button switch, manual reset switch, and remote reset switch is existing technology and is not limited here. The emergency stop function takes precedence over all functions and operations under all fan modes, and the emergency stop function can only be reset manually.
[0078] In this application, the primary signal input device may further include: a speed sensor; the speed sensor is used to acquire the impeller speed and use the impeller speed as the primary input signal; a first preset condition includes: the impeller speed is lower than a first speed threshold. When the impeller speed is lower than the first speed threshold, the logic control device can trigger the high-speed shaft brake through the primary control loop to execute mechanical braking.
[0079] In this application, the logic control device is further configured to control the primary control loop to conduct only when a manual reset signal is received, after the number of remote reset signals received has reached a reset count threshold. For example, an offshore unit can be configured with a remote reset function and can limit the number of manual resets; once the number of manual resets reaches a set value, a local manual reset is required.
[0080] like Figure 4 As shown, for safety protection at the yaw level, this application includes a secondary signal input device comprising: a yaw position sensor; the yaw position sensor is used to acquire the yaw angle of the wind turbine and uses the yaw angle of the wind turbine as the secondary input signal. The second preset condition includes: the yaw angle of the wind turbine is greater than a yaw angle threshold.
[0081] The yaw position sensor can be a yaw limit switch, independent of the main control system. This sensor measures the yaw position and triggers the safety system when the flexible cable reaches its maximum torsional strength. Simultaneously, in this application, the wind turbine controller also sends a watchdog signal. If the logic control device of the safety system cannot detect the watchdog signal, a safety chain is triggered, and the logic control device controls the secondary control loop to disconnect. Understandably, in this application, when the yaw limit switch is in the left yaw limit switch state, the logic control device, as a safety protection module, controls the actuator, such as a contactor, to disconnect the control loop of the yaw system, thus disconnecting the yaw system; when the yaw limit switch is in the right yaw limit switch state, the logic control device, as a safety protection module, controls the actuator, such as a contactor, to disconnect the control loop of the pitch system, thus disconnecting the pitch system.
[0082] Furthermore, when the controller detects a potential safety fault in the wind turbine generator and is unable to control the shutdown normally, it can stop its watchdog signal to activate the safety system yaw system level. In this application, the watchdog signal, like the left yaw limit and right yaw limit trigger levels, belongs to yaw level protection. After the yaw level is triggered, the yaw motor is immediately disconnected and pitch control is performed.
[0083] like Figure 5 As shown, for unit-level safety protection, the three-level signal input device in this application includes: a speed sensor; the speed sensor is used to collect the impeller speed and uses the impeller speed as the three-level input signal; the third preset condition includes: the impeller speed is higher than a second speed threshold, wherein the second speed threshold is higher than a first speed threshold. Optionally, the three-level signal input device further includes: a vibration sensor; the vibration sensor is used to collect the vibration amplitude or vibration frequency of the wind turbine and uses the vibration amplitude or vibration frequency as the three-level input signal; the third preset condition further includes: the vibration amplitude of the wind turbine is greater than an amplitude threshold, or the vibration frequency of the wind turbine is greater than a vibration frequency threshold.
[0084] In unit-level safety protection, when the measured values such as impeller speed, vibration amplitude, or vibration frequency exceed the safety system parameter settings, i.e., the corresponding threshold, the safety system is triggered at the unit level. The logic control device controls the pitch system to perform pitch retraction through the control actuator, such as the contactor set in the third-level control loop.
[0085] In this application, the logic control device is also used to send the triggered fault level to the PLC and display it through the HMI (human-machine interface), so that the staff can clearly read the fault level.
[0086] like Figure 6 As shown, in a second aspect, this application provides a hierarchical control method for a wind turbine safety system, applying the aforementioned hierarchical control system for a wind turbine safety system. The method includes:
[0087] A primary input signal is generated through a primary signal input device, as well as a reset signal;
[0088] A secondary input signal is generated through a secondary signal input device;
[0089] When the logic control device confirms that the primary input signal meets the first preset condition, it controls the primary control loop to disconnect via the execution device; upon receiving a reset signal, it controls the primary control loop to reconnect via the execution device.
[0090] If the secondary input signal is confirmed to meet the second preset condition, the secondary control loop is disconnected by the actuator.
[0091] The secondary control loop is disconnected when the primary control loop is disconnected, and connected when the primary control loop is connected.
[0092] In summary, this application classifies the safety protection functions of wind turbine units and implements corresponding output protection control according to a priority strategy. The control logic is clear, facilitating fault diagnosis and improving the unit's operating efficiency. Furthermore, this application nests the safety system response levels according to priority and performs logical operations through the safety module CPU. The electrical circuit design and hardware safety level of the safety module are higher than those of the safety relays, thereby enhancing the safety level of the wind turbine unit's safety system.
[0093] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.
[0094] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.
Claims
1. A hierarchical control system for the safety system of a wind turbine generator, characterized in that, include: Signal input device, logic control device and execution device; The signal input device includes at least a primary signal input device and a secondary signal input device; The primary signal input device is used to generate a primary input signal and a reset signal; The secondary signal input device is used to generate a secondary input signal; The logic control device is used to control the first-level control loop to disconnect through the execution device when the first-level input signal is confirmed to meet the first preset condition, and to control the first-level control loop to be turned on through the execution device after receiving the reset signal. as well as If the secondary input signal is confirmed to meet the second preset condition, the secondary control loop is disconnected by the actuator. Specifically, the secondary control loop is disconnected when the primary control loop is disconnected, and the secondary control loop is connected when the primary control loop is connected.
2. The hierarchical control system for wind turbine safety system according to claim 1, characterized in that, The signal input device further includes a three-level signal input device, which is used to generate three-level input signals; The logic control device is also used to control the three-level control loop to disconnect via the execution device when it is confirmed that the three-level input signal meets the third preset condition. Specifically, the third-level control loop is disconnected when the second-level control loop is disconnected, and the third-level control loop is connected when the second-level control loop is connected.
3. The hierarchical control system for wind turbine safety system according to claim 1, characterized in that, The primary signal input device includes: Emergency stop button switch and reset switch; The reset switch is used to generate a reset signal in response to a reset command; The emergency stop button switch is used to generate a first-level input signal in response to an emergency stop control command; The first preset conditions include: The primary input signal is generated by the emergency stop button switch.
4. The hierarchical control system for wind turbine safety system according to claim 1, characterized in that, The primary signal input device includes: Speed sensor; The speed sensor is used to collect the impeller speed and uses the impeller speed as a primary input signal; The first preset condition includes: The impeller speed is lower than the first speed threshold.
5. The hierarchical control system for wind turbine safety system according to claim 3, characterized in that, The reset switch includes: Manual reset switch and remote reset switch; The reset signal includes a manual reset signal and a remote reset signal. The manual reset signal is generated by the manual reset switch, and the remote reset signal is generated by the remote reset switch. The logic control device is further configured to control the first-level control loop to conduct only when the manual reset signal is received, after the number of times the remote reset signal is received reaches a reset count threshold.
6. The hierarchical control system for wind turbine safety system according to claim 1, characterized in that, The secondary signal input device includes: Yaw position sensor; The yaw position sensor is used to collect the yaw angle of the wind turbine and uses the yaw angle of the wind turbine as a secondary input signal.
7. The hierarchical control system for wind turbine safety system according to claim 6, characterized in that, The second preset condition includes: The yaw angle of the wind turbine is greater than the yaw angle threshold.
8. The hierarchical control system for wind turbine safety system according to claim 2, characterized in that, The three-level signal input device includes: Speed sensor; The speed sensor is used to collect the impeller speed and uses the impeller speed as a third-level input signal; The third preset condition includes: The impeller speed is higher than the second speed threshold.
9. The hierarchical control system for wind turbine safety system according to claim 8, characterized in that, The three-level signal input device also includes: Vibration sensor; The vibration sensor is used to collect the vibration amplitude or vibration frequency of the wind turbine, and the vibration amplitude or vibration frequency is used as the third-level input signal. The third preset condition also includes: The vibration amplitude of the wind turbine is greater than the amplitude threshold, or the vibration frequency of the wind turbine is greater than the vibration frequency threshold.
10. A hierarchical control method for a wind turbine safety system, characterized in that, The method of applying the hierarchical control system for wind turbine safety system as described in any one of claims 1 to 9 includes: The primary signal input device generates a primary input signal and a reset signal. A secondary input signal is generated through the secondary signal input device; When the logic control device confirms that the primary input signal meets the first preset condition, it controls the primary control loop to disconnect via the execution device; and upon receiving the reset signal, it controls the primary control loop to reconnect via the execution device. If the secondary input signal is confirmed to meet the second preset condition, the secondary control loop is disconnected by the actuator. Specifically, the secondary control loop is disconnected when the primary control loop is disconnected, and the secondary control loop is connected when the primary control loop is connected.
Citation Information
Patent Citations
Centralized control interrupt controller and its interrupt control method
CN101236541A
Multilevel safety protection system of wind turbine generator set
CN202417818U