Risk control method, electronic device and storage medium for the transformation of the nuclear power plant instrument control system

Abstract

The present invention relates to a risk control method, an electronic device, and a storage medium for the transformation of the instrument control system of a nuclear power plant, and includes the following steps: obtaining experience feedback data; analyzing and processing the experience feedback data to obtain events that break through existing control methods; based on the events that break through existing control methods, performing risk identification and classification to determine the risk categories and risk levels of the events that break through existing risk control methods; and formulating risk control methods according to the risk categories and risk levels. The present invention can effectively improve the risk of the transformation of the instrument control system, reduce the impact of single failures, reduce the probability of unexpected failure consequences caused by insufficient fault tolerance design, reduce the common cause defects caused by equipment aging, and reduce the risks during the installation and implementation process.

Description

Technical Field

[0001] The present invention relates to the technical field of nuclear power instrument and control equipment transformation, and more specifically, to a risk control method, an electronic device, and a storage medium for nuclear power plant instrument and control system transformation. Background Art

[0002] With the operation of nuclear power instrument and control equipment, problems such as equipment out-of-production and aging gradually appear in the analog instrument and control system with the increase of service time. Moreover, it is difficult to design redundancy and electromagnetic compatibility for the analog control system, resulting in a high failure rate and a large impact of the old analog instrument and control system. To solve the above problems, the existing method is to transform the analog instrument and control system into a digital instrument and control system. However, there must be certain transformation risks in the process of transforming the analog instrument and control system into a digital instrument and control system. Therefore, a certain method is needed to control the transformation risks. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide a risk control method, an electronic device, and a storage medium for nuclear power plant instrument and control system transformation in view of the above-mentioned defects of the prior art.

[0004] The technical solution adopted by the present invention to solve its technical problems is to construct a risk control method for nuclear power plant instrument and control system transformation, including the following steps:

[0005] Obtain experience feedback data;

[0006] Analyze and process the experience feedback data to obtain events that break through existing control methods;

[0007] Based on the events that break through existing control methods, conduct risk identification and classification to determine the risk categories and risk levels of the events that break through existing risk control methods;

[0008] According to the risk categories and risk levels, formulate risk control methods.

[0009] In the risk control method for nuclear power plant instrument and control system transformation of the present invention, the risk levels include: the first level, the second level, and the third level;

[0010] The first level is the key attention level, the second level is the attention level, and the third level is the negligible level.

[0011] In the risk control method for nuclear power plant instrument and control system transformation of the present invention, the conducting risk identification and classification based on the events that break through existing control methods to determine the risk categories and risk levels of the events that break through existing risk control methods includes:

[0012] Based on the said experience feedback data, obtain the occurrence probability and impact consequences of the event of breaking through the existing control method;

[0013] Based on the occurrence probability of the event of breaking through the existing control method and the said impact consequences, determine the risk level of the event of breaking through the existing control method;

[0014] Conduct identification processing on the event of breaking through the existing control method to determine the risk category of the event of breaking through the existing control method.

[0015] In the risk control method for the transformation of the nuclear power plant I&C system described in the present invention, the formulating of the risk control method according to the said risk category and risk level includes:

[0016] According to the said risk category and risk level, formulate risk control methods for the design stage, implementation stage and operation and maintenance stage.

[0017] In the risk control method for the transformation of the nuclear power plant I&C system described in the present invention, the risk control method for the design stage includes: the single equipment failure identification control method for the design stage.

[0018] In the risk control method for the transformation of the nuclear power plant I&C system described in the present invention, the single equipment failure identification control method for the design stage includes:

[0019] Identify the I&C equipment corresponding to the process system actuator and the failure modes caused by the said I&C equipment;

[0020] According to the failure modes caused by the said I&C equipment, identify the conditions for the action of the said I&C equipment through the equipment configuration file;

[0021] Identify the related equipment related to the said actuator according to the conditions for the action of the said I&C equipment;

[0022] Obtain the location information and failure mode information of the said related equipment;

[0023] Record the location information and failure mode information of the said related equipment;

[0024] Based on the location information and failure mode information of the said related equipment, formulate a failure identification control method.

[0025] In the risk control method for the transformation of the nuclear power plant I&C system described in the present invention, the risk control method for the implementation stage includes: the full-scope simulation system construction control method and the construction risk control method.

[0026] In the risk control method for the transformation of the nuclear power plant I&C system described in the present invention, the risk control method for the operation and maintenance stage includes: the aging management control method.

[0027] The present invention also provides an electronic device, comprising: a memory and a processor;

[0028] The memory is used for storing a computer program;

[0029] The processor is used for executing the computer program to implement the risk control method for the transformation of the nuclear power plant instrument control system as described above.

[0030] The present invention also provides a storage medium, on which a computer program is stored. When the computer program is executed by a processor, the processor processes the risk control method for the transformation of the nuclear power plant instrument control system as described above.

[0031] Implementing the risk control method, electronic device and storage medium for the transformation of the nuclear power plant instrument control system of the present invention has the following beneficial effects: including the following steps: obtaining experience feedback data; analyzing and processing the experience feedback data to obtain events that break through the existing control methods; based on the events that break through the existing control methods, conducting risk identification and classification to determine the risk categories and risk levels of the events that break through the existing risk control methods; formulating risk control methods according to the risk categories and risk levels. The present invention can effectively improve the risk of the instrument control system transformation, reduce the impact of single failures, reduce the probability of unexpected failure consequences caused by insufficient fault tolerance design, reduce the common cause defects caused by equipment aging, and reduce the risks during the installation and implementation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The present invention will be further described below in conjunction with the drawings and embodiments. In the drawings:

[0033] Figure 1 is a schematic flowchart of the risk control method for the transformation of the nuclear power plant instrument control system provided by an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0034] In order to have a clearer understanding of the technical features, objectives and effects of the present invention, the specific embodiments of the present invention will now be described in detail with reference to the drawings.

[0035] Referring to Figure 1 , it is a schematic flowchart of an optional embodiment of the risk control method for the transformation of the nuclear power plant instrument control system provided by the present invention.

[0036] As Figure 1 shown, the risk control method for the transformation of the nuclear power plant instrument control system includes the following steps:

[0037] Step S101, obtaining experience feedback data.

[0038] Optionally, in the embodiments of the present invention, the experience feedback data includes, but is not limited to, control methods designed by DCS, control methods manufactured by DCS, control methods installed by DCS, control methods for DCS debugging, and control methods during DCS operation and maintenance.

[0039] Step S102: Analyze and process the experience feedback data to obtain events that break through existing control methods.

[0040] Specifically, by sorting out the existing experience feedback data, events or faults that cannot be controlled by the existing control methods can be obtained, that is, events that break through the existing control methods.

[0041] Step S103: Based on the events that break through the existing control methods, conduct risk identification and classification to determine the risk categories and risk levels of the events that break through the existing risk control methods.

[0042] Optionally, the risk levels include: the first level, the second level, and the third level. The first level is the key attention level, the second level is the attention level, and the third level is the negligible level.

[0043] In some embodiments, based on the events that break through the existing control methods, conduct risk identification and classification to determine the risk categories and risk levels of the events that break through the existing risk control methods, including: obtaining the occurrence probability and impact consequences of the events that break through the existing control methods according to the experience feedback data; determining the risk levels of the events that break through the existing control methods according to the occurrence probability and impact consequences of the events that break through the existing control methods; identifying and processing the events that break through the existing control methods to determine the risk categories of the events that break through the existing control methods.

[0044] Further, in the embodiments of the present invention, the key attention level is for events with serious consequences and relatively high occurrence probabilities; the attention level is for events with serious consequences but low probabilities, or for events with relatively small consequences but high occurrence probabilities; the negligible level is for events with not serious consequences and low occurrence probabilities. Among them, for events at the negligible level, risk control is not performed in the embodiments of the present invention.

[0045] Further, in the embodiments of the present invention, through risk identification and classification of the events that break through the existing control methods, various risks can be classified into the following major categories, namely: interface and wiring risks, supply chain management risks, human factors engineering risks, communication risks, information security risks, thermal design risks, derating design risks, fault tolerance design risks, power supply risks, grounding risks, electromagnetic compatibility risks, maintainability management risks, configuration management risks, aging and elimination device management risks. Among them, for these risks, if their risk levels are the first level or the second level, corresponding risk control methods need to be formulated.

[0046] Step S104: Develop risk control methods based on the risk category and risk level.

[0047] Optionally, in the embodiments of the present invention, developing risk control methods based on the risk category and risk level includes: developing risk control methods for the design stage, the implementation stage, and the operation and maintenance stage according to the risk category and risk level.

[0048] Optionally, in the embodiments of the present invention, the risk control method for the design stage includes: a single device failure identification and control method for the design stage.

[0049] Specifically, in the embodiments of the present invention, the single device failure identification and control method for the design stage includes: identifying the instrument control equipment corresponding to the process system actuator and the failure modes caused by the instrument control equipment; according to the failure modes caused by the instrument control equipment, identifying the conditions for the instrument control equipment to act through the device configuration file; identifying the related equipment related to the actuator according to the conditions for the instrument control equipment to act; obtaining the location information and failure mode information of the related equipment; recording the location information and failure mode information of the related equipment; and developing a failure identification and control method based on the location information and failure mode information of the related equipment. Optionally, by recording the failure mode information, it is possible to identify the equipment whose single device failure can cause serious consequences, and then analyze and calculate the failure probability of this equipment one by one. If the failure probability * consequence loss amount > the amount spent on adding redundancy or improving the design to prevent the equipment from causing serious consequences due to a single failure, the failure identification and control method that can be developed is: adding redundancy or improving the design.

[0050] Among them, the conditions for the instrument control equipment to act are such as: the pump trips when the liquid level is low and the temperature is high, then record the conditions of low liquid level and high temperature. In the embodiments of the present invention, the related equipment related to the actuator can be: for example, the acquisition card upstream of the actuator, the intermediate processing unit, and the communication unit. After identifying the related equipment, record the location information of the related equipment and the failure mode that can cause the final failure.

[0051] It can be understood that in the single device failure identification and control method for the design stage, it is necessary to identify the conditions for the instrument control equipment to act, the related equipment, and record the location information and failure mode information of the related equipment until all conditions have been determined or transmitted to the management terminal.

[0052] It should be noted that the failure modes of the equipment are related to the final failure consequences. For example, in the logic of the RPN intermediate range energy high causing the reactor to trip, if the analog input card for reading the RPN intermediate range current directly fails (such as losing power), it will only cause the IO consequence of the intermediate range being unavailable, and it is only possible to cause the reactor to trip when the analog input card drifts above the trip setting value and during the operation of the intermediate range protection.

[0053] In addition, during the process of sorting out signal conditions, there will be a situation where a signal, after being sampled by input card A, is simply processed and then sent to another processing unit through output card B. After being sampled by input card C of another processing unit, calculations are performed. At this time, it is necessary to identify a fault mode in which, when there is a fault in input card A, although there is a quality bit signal, the quality bit signal is filtered out when output card B outputs, resulting in the use of incorrect signals by input card C.

[0054] Alternatively, during the sorting process, there are signals passing through redundant components, typically redundant control card communication cards. At this time, there are two options:

[0055] If subsequent probability calculations are to consider redundant failures, the redundant links passed through here should be recorded;

[0056] If redundant failures are not considered subsequently, the recording of redundant links can be skipped, but false redundancy evaluation and testing need to be performed to avoid false redundancy caused by system design mistakes.

[0057] Alternatively, for specific dynamic processes that may lead to specific fault modes of equipment, the following need to be considered: the impact of occasional over-range fluctuations on the equipment, and the impact when the output of the equipment returns from the default value to the normal value after recovering from the fault state, which needs to be considered when there is a differential link.

[0058] By adopting this method, the cause chain of equipment failures and signal loops that lead to serious consequences can be quickly locked, an important equipment list can be quickly obtained, and subsequent probability calculations can be facilitated.

[0059] Furthermore, in the embodiments of the present invention, the risk control method in the implementation stage includes: constructing a full-range simulation system control method and a construction risk control method.

[0060] Optionally, in the embodiments of the present invention, the full-range simulation system control method can be constructed based on existing methods to construct a full-range simulation system, and corresponding control methods can be formulated based on this full-range simulation system. Specifically, the full-range simulation system can connect the physical DCS (simulated instrument control system) and the process simulation model by expanding the semi-physical simulation technology, and realize the full-range closed-loop verification technology covering the whole plant DCS and process system and covering the entire project during the same period in the factory, and then realize control.

[0061] In the embodiments of the present invention, by constructing a full-range simulation system and using this full-range simulation system to perform the basic tests in Table 1 below, risks such as the fault-tolerant design and human factors engineering effect of the transformed system can be verified, and at the same time, it can be used to verify the correctness and feasibility of operation procedures during daily operation and maintenance.

[0062]

[0063]

[0064]

[0065]

[0066]

[0067]

[0068]

[0069]

[0070]

[0071]

[0072]

[0073]

[0074]

[0075]

[0076]

[0077]

[0078] Table 1: Basic Test Items of the Full-Range Simulation System

[0079] Furthermore, since the fault-tolerant design is the main source that breaks through the existing risk control methods and leads to serious consequences, in the embodiments of the present invention, when using the full-range simulation system to conduct basic test item tests, it is also necessary to focus on considering the fault-tolerant design test. Among them, the fault-tolerant design test is specifically shown in Table 2 below.

[0080]

[0081]

[0082]

[0083] Table 2: Fault-Tolerant Design Test Table

[0084] It can be understood that the main risk difference of the renovation work compared with the new unit is that the construction period of the renovation work is more tense. Under strong billing pressure, the probability of risks caused by cable disassembly, installation, and laying errors, as well as mechanical transportation bumps, will increase significantly. Therefore, corresponding risk control methods need to be adopted.

[0085] Optionally, in the embodiments of the present invention, the construction risk control method may include: a cable termination management control method, a cable aging management control method, and a cabinet transportation route optimization control method.

[0086] Among them, the cable termination management control method can use the corresponding system to automatically identify the old cable identifier and automatically generate the corresponding new cable identifier, and complete the printing and fixing of the cable identifier to avoid cable termination errors caused by human errors during cable disassembly and assembly.

[0087] In the cable aging management control method, for the cables used in the old analog system that have been used for more than 20 years, there may be a possibility of aging and failure. At the same time, during the cable disassembly and assembly process, the pulling of the cable may exacerbate the aging and damage of the cable outer skin. Therefore, the corresponding work can be used to detect the aging degree of the cable and the damage degree of the outer skin of the cable after reassembly.

[0088] In the cabinet transportation route optimization control method, 3D data can be used to model the workshop where the cabinet is located, construct a virtual 3D workshop structure and cabinet structure, and conduct a simulation exercise of cabinet transportation in advance through sand table deduction to find the best transportation plan, that is, to avoid bumps caused by cabinet interference and improve the cabinet transportation speed and efficiency.

[0089] In the embodiments of the present invention, the risk control method in the operation and maintenance stage includes: an aging management control method.

[0090] Optionally, by adopting the aging management method, the expected life of the DCS equipment can be evaluated, and an aging management strategy can be formulated according to the evaluation results, and the components or equipment approaching the life can be updated regularly to avoid common cause failures caused by the aging of the DCS equipment.

[0091] Specifically, through a method combining qualitative and quantitative analysis, an equipment aging evaluation method for the digital instrument control system of a nuclear power plant is given, and an aging management strategy is formulated based on this.

[0092] Implementing the aging management control method of the embodiments of the present invention does not require implementing high-cost event accelerated aging life tests. At the same time, based on the existing experience data of similar equipment and the operation data of the equipment itself, a quantitative evaluation conclusion of the equipment aging cycle is obtained, which is beneficial to determining a suitable equipment aging management strategy.

[0093] Adopting the risk control method for the transformation of the nuclear power plant instrument control system in the embodiments of the present invention can effectively improve the risk control ability of the DCS system transformation, reduce the impact of single failures, reduce the probability of unexpected failure consequences caused by insufficient fault tolerance design, reduce the common cause defects caused by equipment aging, and reduce the risks during the installation and implementation process.

[0094] The present invention also provides an electronic device, including: a memory and a processor.

[0095] The memory is used for storing a computer program.

[0096] The processor is used for executing the computer program to implement the risk control method for the transformation of the nuclear power plant instrument control system disclosed in the embodiments of the present invention.

[0097] The present invention also provides a storage medium, on which a computer program is stored. When the computer program is executed by a processor, the processor processes the risk control method for the transformation of the nuclear power plant instrument control system disclosed in the embodiments of the present invention.

[0098] In the present specification, the various embodiments are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. For the same or similar parts among the various embodiments, reference can be made to each other. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple, and reference can be made to the description in the method part for related parts.

[0099] Those skilled in the art can further realize that the units and algorithm steps of the examples described in combination with the embodiments disclosed in this document can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the composition and steps of the examples have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0100] The steps of the methods or algorithms described in combination with the embodiments disclosed in this document can be directly implemented by hardware, software modules executed by a processor, or a combination of the two. The software modules can be placed in a random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium well-known in the technical field.

[0101] The above embodiments are only for illustrating the technical concept and characteristics of the present invention, and their purpose is to enable those skilled in the art to understand the content of the present invention and implement it accordingly. They do not limit the protection scope of the present invention. Any equivalent changes and modifications made to the scope of the claims of the present invention shall fall within the scope covered by the claims of the present invention.

Claims

1. A risk control method for the transformation of the nuclear power plant I&C system, characterized in that, it includes the following steps: Obtain experience feedback data; Analyze and process the experience feedback data to obtain events that break through existing control methods; the events that break through existing control methods are events or failures that cannot be controlled by existing control methods; Based on the events that break through existing control methods, conduct risk identification and classification to determine the risk categories and risk levels of the events that break through existing risk control methods; According to the risk categories and risk levels, formulate risk control methods; Among them, the risk levels include: the first level, the second level, and the third level; The first level is the key attention level, the second level is the attention level, and the third level is the negligible level; no risk control is implemented for the negligible level; The formulating risk control methods according to the risk categories and risk levels includes: According to the risk categories and the risk levels, formulate risk control methods for the design stage, the implementation stage, and the operation and maintenance stage; The risk control method for the implementation stage includes: constructing a full - range simulation system control method and a construction risk control method; among them, the constructing a full - range simulation system control method includes constructing a full - range simulation system and formulating corresponding control methods based on the full - range simulation system; The construction risk control method includes: a cable termination management control method, a cable aging management control method, and a cabinet transportation route optimization control method; The cable termination management control method includes using the system to automatically identify the old cable identification and automatically generate the corresponding new cable identification; printing the new cable identification and fixing it at a preset position; The cable aging management control method includes detecting the aging degree of the cable and detecting the damage degree of the cable outer skin after reinstallation; The cabinet transportation route optimization control method includes modeling the plant where the cabinet is located, constructing a virtual plant structure and a cabinet structure, and simulating the cabinet transportation through sand table deduction to obtain the best transportation plan.

2. The risk control method for the transformation of the nuclear power plant I&C system according to claim 1, characterized in that, the conducting risk identification and classification based on the events that break through existing control methods to determine the risk categories and risk levels of the events that break through existing risk control methods includes: According to the experience feedback data, obtain the occurrence probability and impact consequences of the events that break through existing control methods; According to the occurrence probability and the impact consequences of the events that break through existing control methods, determine the risk levels of the events that break through existing control methods; Conduct identification processing on the events that break through existing control methods to determine the risk categories of the events that break through existing control methods.

3. The risk control method for the transformation of the nuclear power plant I&C system according to claim 1, characterized in that, the risk control method for the design stage includes: a single equipment failure identification control method for the design stage.

4. The risk control method for the transformation of the nuclear power plant I&C system according to claim 3, characterized in that, the single equipment failure identification control method for the design stage includes: Identify the instrument control equipment corresponding to the process system actuator and the failure modes caused by the instrument control equipment; According to the failure modes caused by the instrument control equipment, identify the conditions for the operation of the instrument control equipment through the equipment configuration file; Identify the related equipment associated with the actuator according to the conditions for the operation of the instrument control equipment; Obtain the location information and failure mode information of the related equipment; Record the location information and failure mode information of the related equipment; Based on the location information and failure mode information of the related equipment, formulate a failure identification control method.

5. The risk control method for the transformation of the nuclear power plant instrument control system according to claim 1, characterized in that, the risk control method in the operation and maintenance stage includes: an aging management control method.

6. An electronic device, characterized in that, comprising: a memory and a processor; the memory is used for storing a computer program; the processor is used for executing the computer program to implement the risk control method for the transformation of the nuclear power plant instrument control system according to any one of claims 1-5.

7. A storage medium, characterized in that, a computer program is stored on the storage medium, and when the computer program is executed by a processor, the processor processes the risk control method for the transformation of the nuclear power plant instrument control system according to any one of claims 1-5.

Images