A control method, device and system for nuclear power plant equipment

Abstract

The present invention provides a control method, device and system for nuclear power plant equipment, the method comprising: judging whether the equipment to be operated has monitoring according to the instruction of the executive personnel to open the equipment to be operated, when the judgment result is yes, controlling the executive personnel workstation to display the operation information including "request for monitoring" corresponding to the equipment to be operated, judging whether the equipment selected by the executive personnel needs monitoring according to the operation instruction of the executive personnel, when the judgment result is yes, refusing to execute the operation instruction of the executive personnel; according to the instruction of the executive personnel to request monitoring, controlling the monitoring personnel workstation to display the monitoring information of the equipment to be operated, and choosing to execute or refuse to execute the operation command of the executive personnel according to the monitoring instruction of the monitoring personnel; when the judgment result is that monitoring is not required, executing the operation instruction of the executive personnel; when the judgment result is that monitoring does not exist, executing the operation instruction of the executive personnel. The present invention can avoid human risk and meet the safe operation requirements of nuclear power plants.

Description

Technical Field

[0001] The invention relates to a control method, device and system for nuclear power plant equipment. Background Art

[0002] With the rapid development of science and technology, industrial control systems are more widely used in various fields of industrial production. At present, industrial control systems are further integrated with the Internet of Things and the Internet, and can obtain more information from outside the system. Industrial control systems have gradually walked out of the dilemma of "information islands" and are widely used in important fields related to national security and people's livelihood, such as energy, water conservancy, transportation, petrochemicals, and metallurgy.

[0003] Although the information that can be obtained in industrial systems is very rich, and the equipment information that can be displayed to operators is also increasing, the analysis and research on the soft control of the corresponding equipment is still not perfect, especially the control methods of important equipment in nuclear power plants still have human risks, and incidents caused by equipment misoperation have occurred repeatedly in various nuclear power plants. Therefore, the soft control of equipment in nuclear power plants needs to be further optimized to eliminate human risks as much as possible to meet the requirements of safe operation of nuclear power plants. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a control method for nuclear power plant equipment that avoids human risks and meets the safe operation requirements of nuclear power plants in view of the above-mentioned deficiencies in the prior art, and also provide a device and system corresponding to the control method.

[0005] The technical solution adopted to solve the technical problem of the present invention is:

[0006] The present invention provides a control method for nuclear power plant equipment, comprising:

[0007] According to the instruction of the executive personnel to open the device to be operated, it is determined whether the device to be operated is under monitoring. When the result of the determination is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring".

[0008] According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored;

[0009] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated,

[0010] Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions;

[0011] When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel;

[0012] When the judgment result is that there is no supervision, the operation instruction of the executive officer is executed.

[0013] Optionally, according to the instruction of the executive personnel requesting monitoring, controlling the monitoring personnel workstation to display the monitoring information of the device to be operated specifically includes:

[0014] According to the instruction of the executive personnel requesting supervision, the supervisory personnel workstation is controlled to display supervision prompt information,

[0015] According to the open request command of the guardian, the guardian workstation is controlled to display the guardian information of the device to be operated.

[0016] Optionally, the monitoring information includes: the name of the executor who issues the monitoring request, the device to be operated, the specific operation performed on the device to be operated, the current status of the device to be operated, and three buttons: "Agree to Execute", "Reject Execution", and "Confirm".

[0017] Optionally, the selecting to execute or refuse to execute the operation command of the executive person according to the supervisory instruction of the supervisor specifically includes:

[0018] When the guardianship instruction is "agree to execute", choose to execute the operation order of the executor,

[0019] When the monitoring instruction is "refuse to execute", choose to refuse to execute the operation order of the executor.

[0020] Optionally, the refusing to execute the operation instruction of the executor specifically includes:

[0021] Locks the confirmation button on the executive workstation.

[0022] Optionally, the executing the operation instruction of the execution personnel specifically includes:

[0023] Unlock the confirmation button on the executive workstation,

[0024] According to the confirmation instruction of the executor, the operation instruction of the executor is executed.

[0025] Optionally, before judging whether the device to be operated is under monitoring according to the instruction of the executor to open the device to be operated, the method further comprises:

[0026] According to the service request instruction of the executive personnel, the equipment list or the equipment to be operated is displayed on the executive personnel workstation.

[0027] The present invention also provides a control device for nuclear power plant equipment, comprising:

[0028] A first judgment module, a second judgment module and an execution module,

[0029] The first judgment module is electrically connected to the executive workstation and is used to judge whether the device to be operated is under monitoring according to the executive's instruction to open the device to be operated.

[0030] The execution module is electrically connected to the first judgment module, and is used to control the execution personnel workstation to display the operation information corresponding to the device to be operated, including "request for monitoring", when the first judgment module determines that the device to be operated has monitoring.

[0031] The second judgment module is electrically connected to the executive workstation and is used to judge whether the equipment selected by the executive needs monitoring according to the executive's operation instruction.

[0032] The execution module is also electrically connected to the second judgment module, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module determines that the device selected by the execution personnel needs to be monitored;

[0033] The execution module is also electrically connected to the monitoring personnel workstation, and is used to control the monitoring personnel workstation to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring.

[0034] It is also used to select to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instruction;

[0035] It is also used to execute the operation instruction of the executor when the second judgment module determines that the device selected by the executor does not need to be monitored;

[0036] It is also used to execute the operation instruction of the execution personnel when the first judgment module determines that there is no supervision on the device to be operated.

[0037] The present invention also provides a control system for nuclear power plant equipment, comprising:

[0038] DCS system, executive workstation and supervisor workstation,

[0039] The DCS system is electrically connected to the executive workstation and the guardian workstation respectively.

[0040] The executive workstation is used to receive the executive's instructions and transmit them to the DCS system, and is also used to display the control signals transmitted by the DCS system.

[0041] The supervisor workstation is used to receive supervisory personnel's instructions and transmit them to the DCS system, and is also used to display control signals transmitted by the DCS system.

[0042] The DCS system is used to determine whether the device to be operated is under monitoring according to the instruction of the executive personnel to open the device to be operated, and when the judgment result is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring",

[0043] According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored;

[0044] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated,

[0045] Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions;

[0046] When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel;

[0047] When the judgment result is that there is no supervision, the operation instruction of the executive officer is executed.

[0048] Optionally, the DCS system includes a first judgment module, a second judgment module and an execution module.

[0049] The first judgment module is electrically connected to the executive workstation and is used to judge whether the device to be operated is under monitoring according to the executive's instruction to open the device to be operated.

[0050] The execution module is electrically connected to the first judgment module, and is used to control the execution personnel workstation to display the operation information corresponding to the device to be operated, including "request for monitoring", when the first judgment module determines that the device to be operated has monitoring.

[0051] The second judgment module is electrically connected to the executive workstation and is used to judge whether the equipment selected by the executive needs monitoring according to the executive's operation instruction.

[0052] The execution module is also electrically connected to the second judgment module, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module determines that the device selected by the execution personnel needs to be monitored;

[0053] The execution module is also electrically connected to the monitoring personnel workstation, and is used to control the monitoring personnel workstation to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring.

[0054] It is also used to select to execute or refuse to execute the operation order of the executive personnel according to the supervisory instruction of the supervisory personnel;

[0055] It is also used to execute the operation instruction of the executor when the second judgment module determines that the device selected by the executor does not need to be monitored;

[0056] It is also used to execute the operation instruction of the execution personnel when the first judgment module determines that there is no supervision on the device to be operated.

[0057] Through the control method of the present invention, the device adds a monitoring function based on the original operation command. Therefore, in addition to the second confirmation of the operation command by the individual, a step of reconfirmation of the device operation command by others is added, further avoiding the risk of misoperation caused by human error. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 A schematic diagram of a human-computer interaction process for controlling nuclear power plant equipment using Embodiment 1 of the present invention;

[0059] Figure 2 This is a framework diagram of the control system of nuclear power plant equipment provided in Example 3 of the present invention. DETAILED DESCRIPTION

[0060] The following will be combined with the accompanying drawings in the present invention to clearly and completely describe the technical solutions in the invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of the present invention.

[0061] In the description of the present invention, it should be noted that the directions or positional relationships indicated by “upper” and the like are based on the directions or positional relationships shown in the accompanying drawings and are only for the convenience and simplification of the description. They do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction. Therefore, they cannot be understood as limitations on the present invention.

[0062] In the description of the present invention, the terms “first” and “second” are used for descriptive purposes only and should not be understood as indicating or implying relative importance.

[0063] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "connect", "set", "install", "fix" and the like should be understood in a broad sense, for example, it can be a fixed connection or a detachable connection, or an integral connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0064] The present invention provides a control method for nuclear power plant equipment, comprising:

[0065] According to the instruction of the executive personnel to open the device to be operated, it is determined whether the device to be operated is under monitoring. When the result of the determination is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring".

[0066] According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored;

[0067] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated,

[0068] Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions;

[0069] When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel;

[0070] When the judgment result is that there is no supervision, the operation instruction of the executive officer is executed.

[0071] The present invention also provides a control device for nuclear power plant equipment, comprising:

[0072] A first judgment module, a second judgment module and an execution module,

[0073] The first judgment module is electrically connected to the executive workstation and is used to judge whether the device to be operated is under monitoring according to the executive's instruction to open the device to be operated.

[0074] The execution module is electrically connected to the first judgment module, and is used to control the execution personnel workstation to display the operation information corresponding to the device to be operated, including "request for monitoring", when the first judgment module determines that the device to be operated has monitoring.

[0075] The second judgment module is electrically connected to the executive workstation and is used to judge whether the equipment selected by the executive needs monitoring according to the executive's operation instruction.

[0076] The execution module is also electrically connected to the second judgment module, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module determines that the device selected by the execution personnel needs to be monitored;

[0077] The execution module is also electrically connected to the monitoring personnel workstation, and is used to control the monitoring personnel workstation to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring.

[0078] It is also used to select to execute or refuse to execute the operation order of the executive personnel according to the supervisory instruction of the supervisory personnel;

[0079] It is also used to execute the operation instruction of the executor when the second judgment module determines that the device selected by the executor does not need to be monitored;

[0080] It is also used to execute the operation instruction of the execution personnel when the first judgment module determines that there is no supervision on the device to be operated.

[0081] The present invention also provides a control system for nuclear power plant equipment, comprising:

[0082] DCS system, executive workstation and supervisor workstation,

[0083] The DCS system is electrically connected to the executive workstation and the guardian workstation respectively.

[0084] The executive workstation is used to receive the executive's instructions and transmit them to the DCS system, and is also used to display the control signals transmitted by the DCS system.

[0085] The supervisor workstation is used to receive supervisory personnel's instructions and transmit them to the DCS system, and is also used to display control signals transmitted by the DCS system.

[0086] The DCS system is used to determine whether the device to be operated is under monitoring according to the instruction of the executive personnel to open the device to be operated, and when the judgment result is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring",

[0087] According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored;

[0088] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated,

[0089] Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions;

[0090] When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel;

[0091] When the judgment result is that there is no supervision, the operation instruction of the executive officer is executed.

[0092] Embodiment 1:

[0093] This embodiment provides a control method for nuclear power plant equipment, including:

[0094] According to the instruction of the executive personnel to open the device to be operated, it is judged whether the device to be operated is under monitoring. When the judgment result is that there is monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring".

[0095] According to the operation instructions of the executor, determine whether the equipment selected by the executor needs to be monitored. If the judgment result is that the equipment needs to be monitored, refuse to execute the operation instructions of the executor;

[0096] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated.

[0097] Choose to execute or refuse to execute the executive officer's operation order according to the executive officer's supervisory instructions;

[0098] When the judgment result is that supervision is not required, the operating instructions of the executive personnel are executed;

[0099] When the judgment result is that there is no supervision, the operating instructions of the executive officer are executed.

[0100] In current nuclear power plants, the main instrumentation and control systems all use fully digital DCS systems. The control of most of the equipment included in the main instrumentation and control system is achieved through the control in the human-machine interface of the DCS system. The human-machine interaction window for equipment control is mainly the operation panel of the equipment. In addition to the corresponding operation commands, the operation panel also has a confirmation button. This confirmation button is mainly to meet the human factor requirements for secondary confirmation of equipment control. However, even with the secondary confirmation function, individual operators may make mistakes, especially for the fixed value input function of regulating equipment. Because as long as it is a single individual, the possibility of misoperation cannot be ruled out. Events caused by equipment misoperation in various nuclear power plants are generally caused by individual operating errors.

[0101] The control method of the present invention can be implemented by programming in a DCS system, so that the device adds a monitoring function on the basis of the original operation command, that is, in the operation panel of the device, in addition to the normal operation command, an operation button related to the monitoring function is added. This monitoring function can be defined as an optional item through configuration according to specific needs, or it can be configured as a mandatory item or not enabled. Therefore, in addition to the second confirmation of the operation command by the person himself, the step of reconfirming the operation command of the device by others is added, which further avoids the risk of misoperation caused by human error, which is of great significance for the operation of important equipment in various industrial fields.

[0102] If it is an optional item, the executor can directly control the device without requesting monitoring, or can request monitoring in his workstation and then control the device. The steps for executing monitoring are the same as those for configuring it as a mandatory item.

[0103] If the configuration is mandatory, the executive must execute the monitoring request function and obtain the feedback of the supervisor's consent before controlling the device. If the supervisor chooses to refuse to execute after receiving the executive's monitoring request on his workstation, the confirmation button of the device's operation command on the executive's workstation will still remain in an inoperable locked state and will be prompted that the monitoring request has been rejected. At this time, if you still want to perform the operation command, you can only do so by restarting the monitoring request process.

[0104] If configured as not enabled, the Request Monitoring button in the device soft control operation panel on the executive workstation is always hidden.

[0105] In this embodiment,

[0106] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated, including:

[0107] According to the instructions of the executive personnel requesting supervision, the supervisory personnel workstation is controlled to display the supervision prompt information.

[0108] According to the open request command of the supervisor, the supervisor workstation is controlled to display the supervisor information of the device to be operated.

[0109] In this embodiment,

[0110] The monitoring information includes: the name of the executive who issues the monitoring request, the device to be operated, the specific operation to be performed on the device to be operated, the current status of the device to be operated, and three buttons: "Agree to Execute", "Reject Execution", and "Confirm".

[0111] In this embodiment,

[0112] According to the guardian's instructions, choose to execute or refuse to execute the execution officer's operation orders, including:

[0113] When the guardianship instruction is "agree to execute", select the operation order of the execution officer.

[0114] When the monitoring instruction is "Refuse to execute", choose to refuse to execute the execution officer's operation order.

[0115] In this embodiment,

[0116] Refuse to execute the instructions of the executive personnel, including:

[0117] Locks the confirmation button on the executive workstation.

[0118] In this embodiment,

[0119] Execute the operational instructions of the executive personnel, including:

[0120] Unlock the confirmation button on the executive workstation,

[0121] Execute the executor's operating instructions according to the executor's confirmation instructions.

[0122] In this embodiment,

[0123] According to the instruction of the executive personnel to open the device to be operated, before judging whether the device to be operated has a monitoring function, the following steps are also included:

[0124] According to the service request instruction of the executive personnel, the equipment list or the equipment to be operated is displayed on the executive personnel workstation.

[0125] The present invention is mainly aimed at computerized control of important equipment in nuclear power plants, but the present invention can also be widely applied to any field involving equipment control, such as energy, water conservancy, transportation, petrochemicals, metallurgy, etc.

[0126] Attached Figure 1 The human-computer interaction principle diagram for controlling, monitoring and confirming nuclear power plant equipment using the present invention is as follows:

[0127] Step 1: The executor completes the operation on the executor workstation. The executor searches or navigates through the human-machine interface of his / her workstation to find and open the interface where the device to be operated is located, and locates the specific device to be operated.

[0128] Step 2: The executor completes the task on the executor workstation. The executor selects the target device in the device interface or opens the operation panel of the target device in other ways.

[0129] If the monitoring function is configured as an optional or mandatory option, the device's operation panel has a "Request Monitoring" button for executing the monitoring function in addition to the normal operation command button and the secondary confirmation button. If the operator needs to perform monitoring confirmation on the operation of this device, the operator needs to click the "Request Monitoring" button to enter the monitoring request window after selecting the operation command in the panel. At this time, the command confirmation button in the device control panel is locked and cannot be operated. It can only be activated after the supervisor gives feedback and agrees.

[0130] Step 3: The executor completes it on the executor workstation. After the executor clicks the "Request Guardianship" button, he / she will enter the window for requesting guardianship. In the window for requesting guardianship, you first need to select the person for whom you want to request guardianship. The level of the guardian is generally higher than that of the executor, or it can be the same as that of the executor, but it cannot be lower than that of the executor. After selecting the appropriate guardian, you can directly click the "Request Guardianship" button to complete the operation of requesting guardianship.

[0131] Step 4: The guardian completes it on the guardian workstation. After the executive completes the operation of requesting guardianship, the guardian will receive the relevant guardianship information and confirm it. Generally speaking, there will be special guardianship prompt information in the fixed display area of ​​the guardian's computerized human-machine interface, so that the guardian can see the prompt information at the first time under any circumstances. After the guardian clicks on the prompt information in the fixed area, he can enter the guardian's guardianship window. This window must at least contain information such as the name of the executive who issued the guardianship application, the equipment to be operated, the specific operation to be performed on the equipment, and the current status of the equipment. In addition to these basic information, there are three buttons: "Agree to Execution", "Reject Execution", and "Confirm".

[0132] Step 5: The supervisor completes the task on the supervisor workstation. After the supervisor confirms that the information in the supervisor window is correct and agrees to the operator's operation of the device, he / she needs to click "Agree to Execute".

[0133] Step 6: The executor completes the operation on the executor workstation. After the supervisor agrees to execute, the command confirmation button in the corresponding device operation panel in the executor workstation interface is activated and operable. At the same time, there is a prompt in the panel that the supervisor application has been accepted. At this time, the executor can click the command confirmation button to complete the device operation. The device operation is successful and the process ends.

[0134] Step 7: The supervisor completes the task on the supervisor workstation. After the supervisor confirms the information in the supervisor window and believes that the command that the executor wants to execute on the device is problematic, he / she needs to click "Reject Execution".

[0135] Step 8: The executor completes the task on the executor workstation. After the supervisor refuses to execute, the command confirmation button in the corresponding device operation panel in the executor workstation interface remains locked and inoperable, and there is a prompt message in the panel to inform the executor that the supervisor request has failed. The device operation cannot be completed and the process ends.

[0136] Embodiment 2:

[0137] like Figure 2 As shown, this embodiment provides a control device for nuclear power plant equipment, including:

[0138] The first judgment module 31, the second judgment module 32 and the execution module 33,

[0139] The first judgment module 31 is electrically connected to the executive workstation 1 and is used to judge whether the equipment to be operated is under monitoring according to the executive's instruction to open the equipment to be operated.

[0140] The execution module 33 is electrically connected to the first judgment module 31, and is used to control the execution personnel workstation 1 to display the operation information including "request for monitoring" corresponding to the device to be operated when the first judgment module 31 determines that the device to be operated has monitoring.

[0141] The second judgment module 32 is electrically connected to the execution personnel workstation 1 and is used to judge whether the equipment selected by the execution personnel needs monitoring according to the operation instructions of the execution personnel.

[0142] The execution module 33 is also electrically connected to the second judgment module 32, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module 32 determines that the device selected by the execution personnel needs to be monitored;

[0143] The execution module 33 is also electrically connected to the monitoring personnel workstation 2, and is used to control the monitoring personnel workstation 2 to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring.

[0144] It is also used to select to execute or refuse to execute the operation order of the executive officer according to the guardianship order of the guardian;

[0145] It is also used to execute the operation instruction of the executor when the second judgment module 32 judges that the device selected by the executor does not need to be monitored;

[0146] It is also used to execute the operating instructions of the execution personnel when the first judgment module 31 determines that there is no supervision on the device to be operated.

[0147] Embodiment 3:

[0148] like Figure 2 As shown, this embodiment provides a control system for nuclear power plant equipment, including:

[0149] DCS system 3, executive workstation 1 and supervisor workstation 2,

[0150] The DCS system 3 is electrically connected to the executive workstation 1 and the guardian workstation 2 respectively.

[0151] The executive workstation 1 is used to receive the executive's instructions and transmit them to the DCS system 3, and is also used to display the control signals transmitted by the DCS system 3.

[0152] The supervisor workstation 2 is used to receive supervisory personnel's instructions and transmit them to the DCS system 3, and is also used to display control signals transmitted by the DCS system 3.

[0153] The DCS system 3 is used to determine whether the device to be operated is under monitoring according to the instruction of the executive personnel to open the device to be operated. When the judgment result is that the device to be operated is under monitoring, the executive personnel workstation 1 is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring".

[0154] According to the operation instructions of the executor, determine whether the equipment selected by the executor needs to be monitored. If the result of the determination is that the equipment needs to be monitored, refuse to execute the operation instructions of the executor;

[0155] According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation 2 is controlled to display the monitoring information of the equipment to be operated.

[0156] Choose to execute or refuse to execute the executive officer's operation order according to the executive officer's supervisory instructions;

[0157] When the judgment result is that supervision is not required, the operating instructions of the executive personnel are executed;

[0158] When the judgment result is that there is no supervision, the operating instructions of the executive officer are executed.

[0159] In this embodiment, the DCS system 3 includes a first judgment module 31, a second judgment module 32 and an execution module 33.

[0160] The first judgment module 31 is electrically connected to the executive workstation 1 and is used to judge whether the equipment to be operated is under monitoring according to the executive's instruction to open the equipment to be operated.

[0161] The execution module 33 is electrically connected to the first judgment module 31, and is used to control the execution personnel workstation 1 to display the operation information including "request for monitoring" corresponding to the device to be operated when the first judgment module 31 determines that the device to be operated has monitoring.

[0162] The second judgment module 32 is electrically connected to the execution personnel workstation 1 and is used to judge whether the equipment selected by the execution personnel needs monitoring according to the operation instructions of the execution personnel.

[0163] The execution module 33 is also electrically connected to the second judgment module 32, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module 32 determines that the device selected by the execution personnel needs to be monitored;

[0164] The execution module 33 is also electrically connected to the monitoring personnel workstation 2, and is used to control the monitoring personnel workstation 2 to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring.

[0165] It is also used to select to execute or refuse to execute the operation order of the executive officer according to the guardianship order of the guardian;

[0166] It is also used to execute the operation instruction of the executor when the second judgment module 32 judges that the device selected by the executor does not need to be monitored;

[0167] It is also used to execute the operating instructions of the execution personnel when the first judgment module 31 determines that there is no supervision on the device to be operated.

[0168] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A control method for nuclear power plant equipment, characterized in that: include: According to the instruction of the executive personnel to open the device to be operated, it is determined whether the device to be operated is under monitoring. When the result of the determination is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring". According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored; According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated, Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions; When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel; When the judgment result is that there is no supervision, the operation instruction of the execution personnel is executed; The monitoring information includes: the name of the executive who issues the monitoring request, the device to be operated, the specific operation to be performed on the device to be operated, the current status of the device to be operated, and three buttons: "Agree to Execute", "Reject Execution", and "Confirm".

2. The control method of nuclear power plant equipment according to claim 1, characterized in that: According to the instruction of the executive personnel requesting monitoring, controlling the monitoring personnel workstation to display the monitoring information of the device to be operated specifically includes: According to the instruction of the executive personnel requesting supervision, the supervisory personnel workstation is controlled to display supervision prompt information, According to the open request command of the guardian, the guardian workstation is controlled to display the guardian information of the device to be operated.

3. The control method for nuclear power plant equipment according to claim 1 or 2, characterized in that: The step of selecting to execute or refuse to execute the operation command of the executor according to the supervisory instruction of the supervisor specifically includes: When the guardianship instruction is "agree to execute", the operation order of the executor is selected to execute. When the monitoring instruction is "refuse to execute", choose to refuse to execute the operation order of the executor.

4. The control method for nuclear power plant equipment according to claim 3, characterized in that: The refusal to execute the operation instruction of the executor specifically includes: Locks the confirmation button on the executive workstation.

5. The control method for nuclear power plant equipment according to claim 4, characterized in that: The executing personnel's operating instructions specifically include: Unlock the confirmation button on the executive workstation, According to the confirmation instruction of the executor, the operation instruction of the executor is executed.

6. The control method for nuclear power plant equipment according to claim 1 or 2, characterized in that: The step of determining whether the device to be operated exists under supervision according to the instruction of the executor to open the device to be operated also includes: According to the service request instruction of the executive personnel, the equipment list or the equipment to be operated is displayed on the executive personnel workstation.

7. A control device for nuclear power plant equipment, characterized in that: include: A first judgment module, a second judgment module and an execution module, The first judgment module is electrically connected to the executive workstation and is used to judge whether the device to be operated is under monitoring according to the executive's instruction to open the device to be operated. The execution module is electrically connected to the first judgment module, and is used to control the execution personnel workstation to display the operation information including "request for monitoring" corresponding to the device to be operated when the first judgment module determines that the device to be operated has monitoring. The second judgment module is electrically connected to the executive workstation and is used to judge whether the equipment selected by the executive needs monitoring according to the executive's operation instruction. The execution module is also electrically connected to the second judgment module, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module determines that the device selected by the execution personnel needs to be monitored; The execution module is also electrically connected to the monitoring personnel workstation, and is used to control the monitoring personnel workstation to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring. It is also used to select to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instruction; It is also used to execute the operation instruction of the executor when the second judgment module determines that the device selected by the executor does not need to be monitored; Also used for executing the operation instruction of the execution personnel when the first judgment module determines that the device to be operated does not have a supervisor; The monitoring information includes: the name of the executive who issues the monitoring request, the device to be operated, the specific operation to be performed on the device to be operated, the current status of the device to be operated, and three buttons: "Agree to Execute", "Reject Execution", and "Confirm".

8. A control system for nuclear power plant equipment, characterized in that: include: DCS system, executive workstation and supervisor workstation, The DCS system is electrically connected to the executive workstation and the guardian workstation respectively. The executive workstation is used to receive the executive's instructions and transmit them to the DCS system, and is also used to display the control signals transmitted by the DCS system. The supervisor workstation is used to receive supervisory personnel's instructions and transmit them to the DCS system, and is also used to display control signals transmitted by the DCS system. The DCS system is used to determine whether the device to be operated is under monitoring according to the instruction of the executive personnel to open the device to be operated, and when the judgment result is that the device to be operated is under monitoring, the executive personnel workstation is controlled to display the operation information corresponding to the device to be operated, including "request for monitoring", According to the operation instruction of the executor, judging whether the device selected by the executor needs to be monitored, and refusing to execute the operation instruction of the executor when the judgment result is that the device needs to be monitored; According to the instruction of the executive personnel requesting monitoring, the monitoring personnel workstation is controlled to display the monitoring information of the equipment to be operated, Choose to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instructions; When the judgment result is that monitoring is not required, executing the operation instructions of the executive personnel; When the judgment result is that there is no supervision, the operation instruction of the execution personnel is executed; The monitoring information includes: the name of the executive who issues the monitoring request, the device to be operated, the specific operation to be performed on the device to be operated, the current status of the device to be operated, and three buttons: "Agree to Execute", "Reject Execution", and "Confirm".

9. The control system for nuclear power plant equipment according to claim 8, characterized in that: The DCS system includes a first judgment module, a second judgment module and an execution module. The first judgment module is electrically connected to the executive workstation and is used to judge whether the device to be operated is under monitoring according to the executive's instruction to open the device to be operated. The execution module is electrically connected to the first judgment module, and is used to control the execution personnel workstation to display the operation information including "request for monitoring" corresponding to the device to be operated when the first judgment module determines that the device to be operated has monitoring. The second judgment module is electrically connected to the executive workstation and is used to judge whether the equipment selected by the executive needs monitoring according to the executive's operation instruction. The execution module is also electrically connected to the second judgment module, and is used to refuse to execute the operation instruction of the execution personnel when the second judgment module determines that the device selected by the execution personnel needs to be monitored; The execution module is also electrically connected to the monitoring personnel workstation, and is used to control the monitoring personnel workstation to display the monitoring information of the device to be operated according to the instruction of the execution personnel requesting monitoring. It is also used to select to execute or refuse to execute the operation order of the executive officer according to the executive officer's supervisory instruction; It is also used to execute the operation instruction of the executor when the second judgment module determines that the device selected by the executor does not need to be monitored; It is also used to execute the operation instruction of the execution personnel when the first judgment module determines that there is no supervision on the device to be operated.

Images