Miniaturized reactor emergency shutdown system suitable for micro-reactor

Abstract

The invention discloses a miniaturized reactor emergency shutdown system suitable for a micro-reactor, which comprises N sequences, and each sequence comprises a data acquisition and processing unit and a coincidence logic unit; the data acquisition and processing unit determines whether a local shutdown signal is triggered or not, and sends the local shutdown signal to the coincidence logic units of the N sequences; the coincidence logic unit receives the local shutdown signal, carries out voting logic processing on the signal, and judges whether the sequence generates a shutdown signal or not; the hardware circuit voting units are arranged in two columns, and each column of hardware circuit voting unit receives the shutdown signal generated by the coincidence logic unit and carries out hardware logic voting on the signal to generate a voting result; the driving output units are arranged in two columns and are in one-to-one correspondence with the two columns of the hardware circuit voting unit; and each column of driving output unit receives the voting result generated by the corresponding column of hardware circuit voting unit, generates a shutdown driving signal according to the voting result, and cuts off an equipment control cabinet power supply for driving the shutdown driving mechanism to realize emergency shutdown.

Description

Technical Field

[0001] The present invention belongs to the technical field of reactor control, and in particular relates to a miniaturized reactor emergency shutdown system suitable for a micro reactor, and can also be applied to a small reactor. Background Art

[0002] Micro-reactors are a unique small reactor system. Compared with traditional reactors, micro-reactors are significantly reduced in power, size, weight, etc. They can be prefabricated in factories, transportable devices, and self-adjusting in operation. Micro-reactors are greatly simplified in system design, and have very high requirements for flexibility and rapid deployment capabilities on the basis of ensuring safety. In order to improve the reliability of the reactor protection systems of existing mature large pressurized water reactor nuclear power plants, they need to meet stringent requirements such as isolation, independence, redundancy, and diversity. Most of them will be configured with four completely independent sequences, and each sequence will further consider setting up two redundant sub-sequences or diversified sub-sequences, resulting in a complex architecture and large size. It is not suitable for the application needs and scenarios of various types of micro-reactors and small-scale reactors that are urgently needed now.

[0003] In order to meet the application requirements of micro-reactors, the 1E-level system "reactor protection system" needs to have the requirements of lightweight, miniaturization, rapid deployment, simple installation and configuration, and high reliability. In the process of tackling key problems, the first key issue is to design the reactor protection system in a miniaturized and intensive manner, including from the system architecture, equipment development and other aspects. The reactor protection system mainly includes two functions: reactor emergency shutdown and dedicated safety facility drive. Since the micro-reactor has considered the significant simplification of dedicated safety facilities from the process design concept, the number of equipment has been greatly compressed, and the safety level control equipment has even reached the single-digit level. Therefore, the demand for miniaturization of equipment related to the dedicated safety facility drive function in the reactor protection system is not urgent. On the contrary, the miniaturization of equipment related to the reactor emergency shutdown system is one of the key factors that restrict it. If the safety and reliability are met, the design of the reactor emergency shutdown system can be simplified from the architecture, which is of great significance to the miniaturization of the protection system equipment. Summary of the invention

[0004] The purpose of the present invention is to overcome the deficiencies in the above-mentioned prior art and to provide a miniaturized reactor emergency shutdown system suitable for micro-reactors, which has the characteristics of simplified structure, high reliability, miniaturization, etc.

[0005] In order to achieve the above object, the present invention is implemented through the following technical solutions:

[0006] The technical solution of the present invention provides a miniaturized reactor emergency shutdown system suitable for a micro reactor, comprising:

[0007] N sequences, each sequence includes a data acquisition processing unit and a coincidence logic unit; each of the data acquisition processing units calculates and processes the collected field data to determine whether to trigger a local shutdown signal, and sends the local shutdown signal to the coincidence logic units of the N sequences; each coincidence logic unit receives the local shutdown signal generated by the data acquisition processing units of the N sequences, and performs voting logic processing on the signal to determine whether the sequence generates a shutdown signal;

[0008] A hardware circuit voting unit, wherein the hardware circuit voting unit is arranged in two columns, each column of the hardware circuit voting unit receives a shutdown signal generated by a coincidence logic unit of N sequences, and performs hardware logic voting on the signal to generate a voting result;

[0009] The drive output unit is provided with two columns, which correspond one to one with the two columns of the hardware circuit voting unit; each column of the drive output unit receives the voting result generated by the corresponding column of the hardware circuit voting unit, generates a shutdown drive signal according to the voting result, and disconnects the power supply of the equipment control cabinet that drives the shutdown drive mechanism to realize emergency shutdown.

[0010] In at least one embodiment, N=2; or, N=3; or, N=4.

[0011] In at least one embodiment, the local shutdown signal is generated in the following manner:

[0012] N measurement values ​​are obtained by performing multiple measurements by N independent field sensors, and the N measurement values ​​are processed by N sequences respectively; the data acquisition and processing unit of each sequence first performs analog-to-digital conversion on the measurement values ​​processed by the sequence, and then calculates and processes the measurement values ​​converted into digital signals; the processed data are compared with the preset setting values, and if the measurement value of a sensor channel exceeds the preset setting value, a local shutdown signal triggered by the variable will be generated.

[0013] In at least one embodiment, the determining whether the sequence generates a shutdown signal is specifically:

[0014] The coincidence logic unit of each sequence receives the local shutdown signals generated by the data acquisition and processing units of N sequences, and performs voting logic processing on these signals;

[0015] When N=3 or N=4, if two or more of the multiple sequences of a single measurement value are in a local shutdown state, the sequence will generate a shutdown signal;

[0016] Alternatively, when N=2, if one or more of the multiple sequences of single measurement values ​​are in a local shutdown state, the sequence will generate a shutdown signal.

[0017] In at least one embodiment, the hardware circuit voting unit includes an undervoltage voting circuit and an excitation voting circuit, and the undervoltage voting circuit and the excitation voting circuit are independent of each other.

[0018] In at least one embodiment, the undervoltage voting circuit and the excitation voting circuit respectively receive the shutdown signals generated by N sequences of coincidence logic units, and respectively perform hardware logic voting on these signals to generate voting results and send them to the drive output unit.

[0019] In at least one embodiment, the drive output unit includes four shutdown circuit breakers, which are arranged in two columns, each column corresponding to two shutdown circuit breakers; each shutdown circuit breaker receives the voting results of the undervoltage voting circuit and the excitation voting circuit of the corresponding column respectively;

[0020] The arrangement of the four shutdown circuit breakers realizes a selective four-out-of-two logic. Except that two shutdown circuit breakers on the same branch busbar cannot shut down the reactor when opened at the same time, any two shutdown circuit breakers of the other four shutdown circuit breakers can cause the equipment control cabinet of the shutdown drive mechanism to lose power to realize emergency shutdown.

[0021] In at least one embodiment, the drive output unit includes two shutdown circuit breakers, which are arranged in two columns, each column corresponding to a shutdown circuit breaker; each shutdown circuit breaker receives the voting results of the undervoltage voting circuit and the excitation voting circuit of the corresponding column respectively;

[0022] The two circuit breakers are connected in series, and opening of any one of the shutdown circuit breakers can cause the equipment control cabinet of the shutdown drive mechanism to lose power to realize emergency shutdown.

[0023] In at least one embodiment, each shutdown circuit breaker includes an excitation trip coil and an undervoltage trip coil. The voting result of the undervoltage voting hardware circuit will cause the undervoltage trip coil of the shutdown circuit breaker to lose power, and the voting result of the excitation voting hardware circuit will cause the excitation trip coil of the shutdown circuit breaker to be energized. Any action of these coils can cause the corresponding shutdown circuit breaker to open.

[0024] In at least one embodiment, a manual shutdown unit is further included; the manual shutdown unit directly acts on the hardware circuit voting unit.

[0025] The beneficial effects of the technical solution of the present invention are as follows:

[0026] 1) The miniaturized reactor emergency shutdown system suitable for micro reactors of the present invention moves the voting logic of the traditional shutdown circuit breaker forward, and is implemented by the undervoltage voting hardware circuit and the excitation voting hardware circuit. The hardware voting logic is built by hardware circuits such as small relays and other low-voltage small devices or other simplified methods, and the shutdown circuit breaker is no longer implemented by relatively large equipment, which reduces the size of the equipment and realizes the miniaturization of the emergency shutdown system. At the same time, the hardware voting logic of the undervoltage voting hardware circuit and the excitation voting hardware circuit is built by hardware, does not rely on logic processing devices, and adopts a diversified design, which realizes the high reliability of the emergency shutdown system and reduces software common cause failures.

[0027] 2) A miniaturized reactor emergency shutdown system suitable for a micro reactor of the present invention also includes a backup manual shutdown (manual RT) function. The manual shutdown switch acts directly on the hardware circuit voting unit without passing through the data acquisition and processing unit and the conforming logic unit, so that the manual drive and automatic drive paths are relatively independent, and the common part is limited to the hardware drive part. The failure of the automatic control logic part will not hinder the triggering of the manual function, which is beneficial to improving the reliability of the emergency shutdown system and reducing common cause failures of the software.

[0028] 3) The shutdown circuit breaker and the matching undervoltage voting hardware circuit and excitation voting hardware circuit of the miniaturized reactor emergency shutdown system suitable for micro-reactors of the present invention are simplified into two sequences compared with the design of large pressurized water reactors, which greatly reduces the number of equipment and realizes the intensification of the emergency shutdown system. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0030] Figure 1 It is a structural schematic diagram of a miniaturized reactor emergency shutdown system applicable to a micro reactor provided by the present invention;

[0031] Figure 2 It is a schematic diagram of another circuit breaker arrangement structure of a miniaturized reactor emergency shutdown system applicable to a micro reactor provided by the present invention;

[0032] In the figure: 1. On-site sensor; 2. Data acquisition and processing unit; 3. Coincidence logic unit; 4. Hardware circuit voting unit; 5. Reactor shutdown circuit breaker cabinet; 6. Equipment control cabinet for shutdown drive mechanism; DETAILED DESCRIPTION

[0033] It should be noted that the following detailed descriptions are illustrative and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used in the present invention have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.

[0034] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present invention. As used herein, unless otherwise explicitly stated in the present invention, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "include" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof;

[0035] As introduced in the background technology, the purpose of the present invention is to overcome the deficiencies existing in the above-mentioned prior art, and to provide a miniaturized reactor emergency shutdown system and method suitable for micro-reactors, which has the characteristics of simplified structure, high reliability, miniaturization, etc. The system includes: N sequences, each sequence includes a data acquisition processing unit 2 and a coincidence logic unit 3; each data acquisition processing unit 2 calculates and processes the collected field data to determine whether to trigger a local shutdown signal, and sends the local shutdown signal to the coincidence logic unit 3 of the N sequences; each coincidence logic unit 3 receives the local shutdown signal generated by the data acquisition processing unit 2 of the N sequences, and performs voting logic processing on the signal to determine whether the sequence generates a shutdown signal;

[0036] The hardware circuit voting unit 4 is provided with two columns, each column of the hardware circuit voting unit receives the shutdown signal generated by the N sequence coincidence logic units 3, and performs hardware logic voting on the signal to generate a voting result;

[0037] The drive output unit is provided with two columns, which correspond one to one with the two columns of the hardware circuit voting unit 4; each column of the drive output unit receives the voting result generated by the corresponding column of the hardware circuit voting unit 4, generates a shutdown drive signal according to the voting result, and disconnects the power supply of the equipment control cabinet 6 that drives the shutdown drive mechanism to realize an emergency shutdown.

[0038] Among them, N=2 or N=3 or N=4.

[0039] The following is a detailed description with reference to the accompanying drawings, assuming that N=3, i.e., 3 sequences.

[0040] Example 1

[0041] like Figure 1 As shown, in this embodiment, the structural levels of the reactor emergency shutdown system applicable to a micro reactor or a small reactor are mainly divided into three layers, including the following:

[0042] The first layer: data collection and data processing layer

[0043] This layer mainly includes a data acquisition and processing unit 2. The reactor emergency shutdown system performs multiple measurements through three independent sensors, that is, three sequences, each sequence processes a measurement value, and each sequence meets the isolation requirements. After the field sensor 1 enters the system, the data acquisition and processing unit 2 of each sequence receives the measurement value collected by the field sensor 1 of this sequence and processes it. First, the analog signal is converted into a digital signal through analog-to-digital conversion, and then the measurement value converted into a digital signal is calculated and processed, and the processed measurement value data is compared with the preset setting value or calculation limit. If the measurement value of a sensor channel exceeds the preset setting value or calculation limit, a local shutdown signal triggered by the variable will be generated. These local shutdown signals will be sent to the next layer for processing. Not only this sequence, but each sequence also sends the local shutdown signal of this sequence to the other two sequences through an isolated data link for logical processing at the next level, that is, the triggered local shutdown signal is sent to the next level of the three sequences. Among them, the processing of the shutdown variables in the three sequences is the same. The data acquisition and data processing layer is generally implemented by a 1E-level digital DCS (distributed computer control system).

[0044] The second layer: logical layer

[0045] This layer mainly includes the coincidence logic unit 3 and the hardware circuit voting unit 4. Each sequence of this layer receives the local shutdown signal of multiple sequences from the upper layer and performs voting logic processing on these signals. If two or more multiple channels of a single parameter are in the local shutdown state, the sequence will generate a shutdown signal. The coincidence logic processing part is also implemented by the 1E-level digital DCS. The shutdown signal generated by the coincidence logic unit 3 will enter the hardware circuit voting unit 4.

[0046] Different from the coincidence logic unit 3, the hardware circuit voting unit 4 is provided with only two independent columns, which are shown as column A and column B in the figure, and can also be arranged as any other two columns as required, such as column A and column C, or column B and column C. In addition to the shutdown signal sent by the coincidence logic unit 3 of the current sequence, the hardware circuit voting unit 4 also receives the shutdown signal sent by the isolated coincidence logic unit 3 of other sequences.

[0047] The hardware circuit voting unit 4 of each column is completely built by hardware and does not contain any processor components. The hardware circuit voting unit 4 is divided into two parts, the undervoltage voting circuit and the excitation voting circuit. The undervoltage voting circuit is also called the UV (Under voltage) voting hardware circuit, and the excitation voting circuit is also called the ST (Shunt Trip) voting hardware circuit. Any output of the undervoltage voting circuit or the excitation voting circuit has the ability to disconnect the two shutdown circuit breakers in this column. The UV voting hardware circuit and the ST voting hardware circuit are completely independent, and both are designed with diversity and have diversity characteristics. The UV voting hardware circuit and the ST voting hardware circuit respectively receive the shutdown signals sent by the multiple sequence matching logic processing parts, and each performs hardware three-to-two logic voting on these shutdown signals. The results of the voting will be sent to the third-level drive output layer respectively.

[0048] The traditional two-out-of-three voting logic of the shutdown circuit breaker is moved forward and implemented by the undervoltage voting hardware circuit and the excitation voting hardware circuit. The 2 / 3 logic or other simplified methods are built by hardware circuits such as small relays and other low-voltage small devices, and the shutdown circuit breaker is no longer implemented by relatively large equipment, which reduces the size of the equipment and realizes the miniaturization of the emergency shutdown system. The two-out-of-three voting logic of the undervoltage voting hardware circuit and the excitation voting hardware circuit is built by hardware, does not rely on logic processing devices, and adopts a diversified design, which realizes the high reliability of the emergency shutdown system and reduces software common cause failures.

[0049] In this embodiment, a backup manual shutdown (manual RT) function is also included. The manual shutdown switch does not pass through the 1E-level digital DCS system, that is, it does not pass through the data acquisition and processing unit 2 and the coincidence logic unit 3, but directly acts on this hardware circuit voting unit 4, so that the manual drive and automatic drive paths are relatively independent, and the common part is limited to the hardware drive part. The failure of the automatic control logic part will not hinder the triggering of the manual function, which is beneficial to improving the reliability of the emergency shutdown system and reducing software common cause failures.

[0050] The third layer: drive output layer

[0051] This layer mainly includes a drive output unit. In this embodiment, the drive output unit mainly includes four shutdown circuit breakers RTA1, RTA2, RTB1, and RTB2, which are arranged in two columns, one-to-one corresponding to the two columns of the hardware circuit voting unit 4, and each column has two shutdown circuit breakers. The two columns of circuit breakers are arranged in different compartments of the reactor shutdown circuit breaker cabinet. The shutdown signal of one column will simultaneously open the two shutdown circuit breakers in this column. Each shutdown circuit breaker includes an excitation trip coil and an undervoltage trip coil, and the excitation trip serves as a diversified backup for the undervoltage trip. When the shutdown signal is output, the excitation trip coil can be energized and the undervoltage trip coil can be de-energized. When the excitation trip coil is energized or the undervoltage trip coil is de-energized, the shutdown circuit breaker can be tripped, and the power supply to the shutdown drive mechanism equipment control cabinet can be cut off.

[0052] The single-line diagram of the arrangement of these four shutdown circuit breakers is as follows Figure 1 As shown, the reactor shutdown circuit breaker is located between the power supply bus and the equipment control cabinets of various drive mechanisms. Each circuit breaker on this layer receives the voting results of the UV voting hardware circuit and the ST voting hardware circuit on the second layer of the corresponding column. The voting result of the UV voting hardware circuit will de-energize the undervoltage tripping coil of the shutdown circuit breaker, and the voting result of the ST voting hardware circuit will energize the excitation tripping coil of the shutdown circuit breaker. Any coil action can open the corresponding shutdown circuit breaker. When the two shutdown circuit breakers in any sequence of the two sequences are opened, the power supply to the shutdown drive mechanism equipment control cabinet can be cut off. After the power is lost, the shutdown rod will be inserted into the core by elastic force, and the drum will quickly turn into the shutdown state, or other driving methods can be used to achieve emergency shutdown.

[0053] The arrangement of the four shutdown circuit breakers realizes the selective four-out-of-two logic. Except that the two shutdown circuit breakers on the same branch busbar cannot be shut down at the same time, any two shutdown circuit breakers of the other four shutdown circuit breakers will cause the equipment control cabinets of various driving mechanisms related to the emergency shutdown of the reactor to lose power and realize the emergency shutdown. Compared with the design of large pressurized water reactors, the shutdown circuit breaker and the supporting undervoltage voting hardware circuit and excitation voting hardware circuit are simplified to two sequences, which greatly reduces the number of equipment and realizes the intensive emergency shutdown system.

[0054] Example 2

[0055] Based on the embodiment, there is a second situation in which the output unit is driven in the above embodiment 1: Figure 2 As shown, in this embodiment, the drive output unit includes two shutdown circuit breakers, which are arranged in two columns, each column corresponds to a shutdown circuit breaker, and each shutdown circuit breaker receives the voting results of the undervoltage voting circuit and the excitation voting circuit of the corresponding column.

[0056] In this embodiment, the two circuit breakers of the drive output unit are connected in series, and opening of any one of the shutdown circuit breakers can cause the equipment control cabinet 6 of the shutdown drive mechanism to lose power to realize emergency shutdown.

[0057] The number of shutdown circuit breakers is further simplified. Two shutdown circuit breakers are used for four shutdown circuit breakers. Each column corresponds to one shutdown circuit breaker. The two shutdown circuit breakers are connected in series. Based on Example 1, the equipment is further miniaturized.

[0058] Example 3

[0059] Based on the embodiments, the number of the three sequences in the above embodiment 1 can be N sequences, wherein the value of N is 2 or 3 or 4, that is, the number of sequences can be 2 sequences, 3 sequences or 4 sequences, which can make the emergency shutdown system of the present invention not limited to the emergency shutdown of 3 sequences, thereby improving the applicability of the reactor emergency shutdown system.

[0060] When N=2 (i.e., 2 sequences), the UV voting hardware circuit and the ST voting hardware circuit respectively receive the shutdown signals sent by the logic processing part of the 2 sequences, and respectively perform hardware two-to-one logic voting on these shutdown signals, and the voting results are sent to the third-level drive output layer respectively.

[0061] When N=4 (i.e., 4 sequences), the UV voting hardware circuit and the ST voting hardware circuit respectively receive the shutdown signals sent by the logic processing part of the 4 sequences, and respectively perform hardware four-to-two logic voting on these shutdown signals, and the voting results are sent to the third-level drive output layer respectively.

[0062] Example 4

[0063] Based on the embodiment, the structural level in the above embodiment 1 is merged from 3 layers to 2 layers, or decomposed into 4 layers. The boundary range of the structural level is adjusted: for example, according to the number of sensors and signal processing capabilities, the data acquisition and processing unit 2 and the conforming logic unit 3 are merged into one layer to further realize the miniaturization of the device; for example, the undervoltage (UV) voting hardware circuit and the excitation (ST) voting hardware circuit are separated from the conforming logic layer and become an independent layer, or belong to the drive output layer.

[0064] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A miniaturized reactor emergency shutdown system suitable for micro reactors, characterized in that: include: N sequences, each sequence includes a data acquisition processing unit and a coincidence logic unit; each of the data acquisition processing units calculates and processes the collected field data to determine whether to trigger a local shutdown signal, and sends the local shutdown signal to the coincidence logic units of the N sequences; each coincidence logic unit receives the local shutdown signal generated by the data acquisition processing units of the N sequences, and performs voting logic processing on the signal to determine whether the sequence generates a shutdown signal; A hardware circuit voting unit, wherein the hardware circuit voting unit is arranged in two columns, each column of the hardware circuit voting unit receives a shutdown signal generated by a coincidence logic unit of N sequences, and performs hardware logic voting on the signal to generate a voting result; The drive output unit is provided with two columns, which correspond one to one with the two columns of the hardware circuit voting unit; each column of the drive output unit receives the voting result generated by the corresponding column of the hardware circuit voting unit, generates a shutdown drive signal according to the voting result, and disconnects the power supply of the equipment control cabinet that drives the shutdown drive mechanism to realize emergency shutdown.

2. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 1, characterized in that: N=2; or, N=3; or, N=4.

3. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 1, characterized in that: The local shutdown signal is specifically generated in the following manner: N measurement values ​​are obtained by performing multiple measurements by N independent field sensors, and the N measurement values ​​are processed by N sequences respectively; the data acquisition and processing unit of each sequence first performs analog-to-digital conversion on the measurement values ​​processed by the sequence, and then calculates and processes the measurement values ​​converted into digital signals; the processed data are compared with the preset setting values, and if the measurement value of a sensor channel exceeds the preset setting value, a local shutdown signal triggered by the variable will be generated.

4. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 1, characterized in that: The determination of whether the sequence generates a shutdown signal is specifically as follows: The coincidence logic unit of each sequence receives the local shutdown signals generated by the data acquisition and processing units of N sequences, and performs voting logic processing on these signals; When N=3 or N=4, if two or more of the multiple sequences of a single measurement value are in a local shutdown state, the sequence will generate a shutdown signal; Alternatively, when N=2, if one or more of the multiple sequences of single measurement values ​​are in a local shutdown state, the sequence will generate a shutdown signal.

5. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 1, characterized in that: The hardware circuit voting unit includes an undervoltage voting circuit and an excitation voting circuit, and the undervoltage voting circuit and the excitation voting circuit are independent of each other.

6. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 5, characterized in that: The undervoltage voting circuit and the excitation voting circuit respectively receive the shutdown signals generated by the N-sequence coincidence logic units, and respectively perform hardware logic voting on these signals to generate voting results and send them to the drive output unit.

7. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 6, characterized in that: The drive output unit includes four shutdown circuit breakers, which are arranged in two columns, each column corresponding to two shutdown circuit breakers; each shutdown circuit breaker receives the voting results of the undervoltage voting circuit and the excitation voting circuit of the corresponding column respectively; The arrangement of the four shutdown circuit breakers realizes a selective four-out-of-two logic. Except that two shutdown circuit breakers on the same branch busbar cannot shut down the reactor when opened at the same time, any two shutdown circuit breakers of the other four shutdown circuit breakers can cause the equipment control cabinet of the shutdown drive mechanism to lose power to realize emergency shutdown.

8. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 6, characterized in that: The drive output unit includes two shutdown circuit breakers, which are arranged in two columns, each column corresponding to a shutdown circuit breaker; each shutdown circuit breaker receives the voting results of the undervoltage voting circuit and the excitation voting circuit of the corresponding column respectively; The two circuit breakers are connected in series, and opening of any one of the shutdown circuit breakers can cause the equipment control cabinet of the shutdown drive mechanism to lose power to realize emergency shutdown.

9. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in any one of claims 7 or 8, characterized in that: Each shutdown circuit breaker includes an excitation trip coil and an undervoltage trip coil. The voting result of the undervoltage voting hardware circuit will cause the undervoltage trip coil of the shutdown circuit breaker to lose power, and the voting result of the excitation voting hardware circuit will cause the excitation trip coil of the shutdown circuit breaker to be energized. Any action of these coils can cause the corresponding shutdown circuit breaker to open.

10. A miniaturized reactor emergency shutdown system suitable for a micro reactor as claimed in claim 1, characterized in that: It also includes a manual stack shutdown unit; the manual stack shutdown unit directly acts on the hardware circuit voting unit.

Images