Periodic test analysis method and device for emergency diesel generator protection system in nuclear power plants

Abstract

The present application discloses a method and device for analyzing periodic tests of a nuclear power plant emergency diesel generator protection system. The method comprises: analyzing the reliability of the nuclear power plant emergency diesel generator protection system; analyzing the necessity of periodic tests of the nuclear power plant emergency diesel generator protection system; determining the system functions and signal flows of the nuclear power plant emergency diesel generator protection system; and determining the test method for the nuclear power plant emergency diesel generator protection system. The method and device for analyzing periodic tests of a nuclear power plant emergency diesel generator protection system of the embodiments of the present application, by successively analyzing the reliability and necessity of the nuclear power plant emergency diesel generator protection system, and determining the system functions and signal flows of the nuclear power plant emergency diesel generator protection system, and then determining the test method for the nuclear power plant emergency diesel generator protection system, can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel.

Description

Technical Field

[0001] The present application relates to the technical field of nuclear power plant diesel generator protection systems, and in particular to a method and device for periodic testing and analysis of nuclear power plant emergency diesel generator protection systems. Background Art

[0002] EDG (Emergency Diesel Generator) is an important backup power source for nuclear power plants. It provides power for the medium and low voltage nuclear auxiliary equipment required for safe shutdown of nuclear power plants, preventing damage to important equipment due to failure of external AC power supply, thereby ensuring personal and environmental safety.

[0003] Currently, nuclear power plant emergency diesel generator protection and control systems are primarily traditional analog systems, mostly using relays to build logic. These systems exhibit high failure rates and poor reliability, severely impacting the reliability of emergency generators (EDGs). With technological advancements, digital technology is increasingly being applied to EDGs. Unlike traditional analog systems, which are purely hardware-based, digital systems are a combination of hardware and software. The hardware is based on discrete digital logic, while software functions are implemented through software programming. Therefore, digital protection systems differ significantly from traditional analog systems in terms of application technology, development methods, failure modes, reliability analysis, and periodic testing methods.

[0004] According to relevant domestic and international standards and regulations, regular testing is required to verify the performance indicators of EDG and ensure system reliability and availability. Existing nuclear power plant EDG units only perform regular overall testing, which cannot meet the current EDG testing requirements. Summary of the Invention

[0005] The purpose of this application is to solve one of the above technical problems at least to a certain extent.

[0006] To this end, the first purpose of this application is to propose a periodic test analysis method for the emergency diesel generator protection system of a nuclear power plant, which can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel.

[0007] The second object of the present application is to provide a periodic test and analysis device for a nuclear power plant emergency diesel generator protection system.

[0008] The third object of this application is to provide a computer device.

[0009] A fourth object of the present application is to provide a non-transitory computer-readable storage medium.

[0010] To achieve the above objectives, the first embodiment of the present application proposes a periodic test analysis method for a nuclear power plant emergency diesel generator protection system, comprising:

[0011] Analyze the reliability of the emergency diesel generator protection system in nuclear power plants;

[0012] Analyze the necessity of periodic testing of the emergency diesel generator protection system of the nuclear power plant;

[0013] Determine the system functions and signal flow of the nuclear power plant emergency diesel generator protection system;

[0014] Determine the test method for the emergency diesel generator protection system of the nuclear power plant.

[0015] Optionally, analyze the reliability of the nuclear power plant emergency diesel generator protection system, including:

[0016] Analyze the structure and function of the nuclear power plant emergency diesel generator protection system to determine the failure modes and failure effects of all components in the nuclear power plant emergency diesel generator protection system;

[0017] Generate reliability analysis reports based on failure modes and failure effects for all components.

[0018] Optionally, determining a test method for the nuclear power plant emergency diesel generator protection system includes:

[0019] Determining a processing logic of the nuclear power plant emergency diesel generator protection system, wherein the processing logic includes a first stage, a second stage, and a third stage;

[0020] executing a first stage of the processing logic in a first cycle;

[0021] executing a second stage of the processing logic in a second cycle;

[0022] executing the third stage of the processing logic in a third cycle;

[0023] The first phase overlaps with a logical portion of the second phase, and the second phase overlaps with a logical portion of the third phase.

[0024] Optionally, executing the first stage of the processing logic in a first cycle includes:

[0025] The data acquisition logic is executed and a channel verification method is used to determine whether the acquisition channel of the data acquisition has drifted.

[0026] Optionally, executing data acquisition logic and employing a channel verification method to determine whether an acquisition channel for data acquisition has drifted, including:

[0027] Use a standard signal source to input the test signal to the test terminal and obtain the corresponding data measured value;

[0028] Reading an expected value corresponding to the test signal from a preset table in the channel verification method;

[0029] Calculating the deviation between the measured value of the data and the expected value;

[0030] If the deviation is less than or equal to the preset error range, it is determined that the acquisition channel has not drifted and the first stage test has passed;

[0031] If the deviation is greater than the preset error range, it is determined that the acquisition channel has drifted, and the first stage test fails.

[0032] Optionally, executing the second stage of the processing logic in a second cycle includes:

[0033] injecting test data into the processor using a maintenance test tool, and reading back a logical calculation result of the processor processing the test data;

[0034] Determining whether the logical calculation result is consistent with the test data;

[0035] If the logic calculation result is consistent with the test data, the second stage test is passed;

[0036] If the logic calculation result is inconsistent with the test data, the second stage test fails.

[0037] Optionally, executing the third stage of the execution logic in a third cycle includes:

[0038] Output test execution signal to field equipment;

[0039] determining whether the field device receives the test execution signal;

[0040] If the test execution signal is received, the third stage test is passed;

[0041] If the test execution signal is not received, the third stage test fails.

[0042] The periodic test analysis method for the nuclear power plant emergency diesel generator protection system of the embodiment of the present application can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel by successively analyzing the reliability and necessity of the nuclear power plant emergency diesel generator protection system, and determining the system functions and signal flow of the nuclear power plant emergency diesel generator protection system, and then determining the test method of the nuclear power plant emergency diesel generator protection system.

[0043] In order to achieve the above-mentioned objectives, the second embodiment of the present application proposes a periodic test and analysis device for a nuclear power plant emergency diesel generator protection system, comprising:

[0044] The first analysis module is used to analyze the reliability of the nuclear power plant emergency diesel generator protection system;

[0045] A second analysis module is used to analyze the necessity of periodic testing of the emergency diesel generator protection system of the nuclear power plant;

[0046] A first determination module is used to determine the system function and signal flow of the nuclear power plant emergency diesel generator protection system;

[0047] The second determination module is used to determine the test method of the nuclear power plant emergency diesel generator protection system.

[0048] Optionally, the first analysis module is used to:

[0049] Analyze the structure and function of the nuclear power plant emergency diesel generator protection system to determine the failure modes and failure effects of all components in the nuclear power plant emergency diesel generator protection system;

[0050] Generate reliability analysis reports based on failure modes and failure effects for all components.

[0051] Optionally, the second determining module is configured to:

[0052] Determining a processing logic of the nuclear power plant emergency diesel generator protection system, wherein the processing logic includes a first stage, a second stage, and a third stage;

[0053] executing a first stage of the processing logic in a first cycle;

[0054] executing a second stage of the processing logic in a second cycle;

[0055] executing the third stage of the processing logic in a third cycle;

[0056] The first phase overlaps with a logical portion of the second phase, and the second phase overlaps with a logical portion of the third phase.

[0057] Optionally, the second determining module is specifically configured to:

[0058] The data acquisition logic is executed and a channel verification method is used to determine whether the acquisition channel of the data acquisition has drifted.

[0059] Optionally, the second determining module is specifically configured to:

[0060] Use a standard signal source to input the test signal to the test terminal and obtain the corresponding data measured value;

[0061] Reading an expected value corresponding to the test signal from a preset table in the channel verification method;

[0062] Calculating the deviation between the measured value of the data and the expected value;

[0063] If the deviation is less than or equal to the preset error range, it is determined that the acquisition channel has not drifted and the first stage test has passed;

[0064] If the deviation is greater than the preset error range, it is determined that the acquisition channel has drifted, and the first stage test fails.

[0065] Optionally, the second determining module is specifically configured to:

[0066] injecting test data into the processor using a maintenance test tool, and reading back a logical calculation result of the processor processing the test data;

[0067] Determining whether the logical calculation result is consistent with the test data;

[0068] If the logic calculation result is consistent with the test data, the second stage test is passed;

[0069] If the logic calculation result is inconsistent with the test data, the second stage test fails.

[0070] Optionally, the second determining module is specifically configured to:

[0071] Output test execution signal to field equipment;

[0072] determining whether the field device receives the test execution signal;

[0073] If the test execution signal is received, the third stage test is passed;

[0074] If the test execution signal is not received, the third stage test fails.

[0075] The nuclear power plant emergency diesel generator protection system test device of the embodiment of the present application can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel by successively analyzing the reliability and necessity of the nuclear power plant emergency diesel generator protection system, determining the system functions and signal flow of the nuclear power plant emergency diesel generator protection system, and then determining the test method of the nuclear power plant emergency diesel generator protection system.

[0076] In order to achieve the above-mentioned purpose, the third aspect embodiment of the present application proposes a computer device, including a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the periodic test and analysis method for the nuclear power plant emergency diesel generator protection system as described in the first aspect embodiment.

[0077] In order to achieve the above-mentioned purpose, the fourth embodiment of the present application also proposes a non-temporary computer-readable storage medium on which a computer program is stored, characterized in that when the computer program is executed by a processor, it implements the periodic test and analysis method of the nuclear power plant emergency diesel generator protection system as described in the first embodiment.

[0078] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0079] The drawings that constitute part of this application are used to provide a further understanding of this application. The illustrative embodiments of this application and their descriptions are used to explain this application and do not constitute an improper limitation on this application. In the drawings:

[0080] Figure 1 This is a flow chart of a periodic test analysis method for a nuclear power plant emergency diesel generator protection system according to one embodiment of the present application;

[0081] Figure 2 This is a signal flow diagram of the execution logic of the emergency diesel generator protection system of the present application;

[0082] Figure 3 This is a schematic diagram of a test section of a nuclear power plant emergency diesel generator protection system according to an embodiment of the present application;

[0083] Figure 4 This is a flow chart of determining whether the collected data has drifted according to an embodiment of the present application;

[0084] Figure 5 This is a flow chart of the second phase test of one embodiment of the present application;

[0085] Figure 6 This is a flow chart of the third phase test of one embodiment of the present application;

[0086] Figure 7 This is a flow chart of a digital-based periodic test analysis method for an EDG protection system according to an embodiment of the present application;

[0087] Figure 8 This is a flow chart of system reliability analysis according to one embodiment of the present application;

[0088] Figure 9 This is a schematic diagram of T1 channel verification according to one embodiment of the present application;

[0089] Figure 10 It is a structural schematic diagram of a nuclear power plant emergency diesel generator protection system test device according to an embodiment of the present application. DETAILED DESCRIPTION

[0090] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments in this application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0091] The present application is further described in detail below with reference to specific embodiments. These embodiments should not be construed as limiting the scope of protection claimed in this application.

[0092] The following describes, with reference to the accompanying drawings, a method, apparatus, and computer equipment for periodic testing and analysis of a nuclear power plant emergency diesel generator protection system according to an embodiment of the present application.

[0093] Figure 1 FIG. 1 is a flow chart of a method for periodic testing and analyzing a protection system for an emergency diesel generator in a nuclear power plant according to an embodiment of the present invention. Figure 1 As shown, the method includes the following steps:

[0094] S1, Analyze the reliability of the emergency diesel generator protection system of the nuclear power plant.

[0095] When applied to emergency diesel generator protection systems, nuclear power plant safety-grade digital instrumentation and control systems require reliability analysis. Based on the platform product, reliability analysis, based on the system architecture and functionality, examines all component failure modes, system status, failure impacts, compensation measures, self-diagnostic monitoring methods, and periodic testing. This ensures that all single faults are detectable during normal system operation and that any single fault could prevent system protection.

[0096] Specifically, the structure and function of the emergency diesel generator protection system are first analyzed to determine the failure modes and failure effects of all components in the system. A reliability analysis report is then generated based on these failure modes and effects. The reliability analysis report then identifies the failure mode of a particular component and determines whether it can be detected through self-diagnosis. If the failure mode of a component cannot be detected through self-diagnosis, regular testing is required.

[0097] S2. Analyze the necessity of regular testing of the emergency diesel generator protection system of nuclear power plants.

[0098] Based on safety system standards, the necessity of periodic testing of nuclear power plant emergency diesel generator protection systems is analyzed. For example, IEEE 603 ​​stipulates that safety systems must demonstrate their ability to fulfill their safety functions through periodic testing and calibration. IEEE 338 and GB / T 5204 stipulate that periodic testing and monitoring of safety systems is intended to achieve the desired system availability. IEC 60671 stipulates that safety systems must ensure the functional capabilities and corresponding control paths of nuclear power plant instrumentation and control systems (I&C) through monitoring testing.

[0099] Therefore, it is necessary to conduct regular testing of the emergency diesel generator protection system of nuclear power plants.

[0100] S3, determine the system functions and signal flow of the nuclear power plant emergency diesel generator protection system.

[0101] The main function of the nuclear power plant emergency diesel generator protection system is to receive on-site sensor signals or remote / local start / stop commands, perform logical operations, and finally output protection action signals. Figure 2 As shown in the figure, the signal flow of the execution logic of the emergency diesel generator protection system is as follows: first, the signal collected by the sensor S is isolated and distributed, then signal acquisition, logic processing, and signal output are performed in sequence, and finally output to the field device M to execute the corresponding control command.

[0102] S4, determine the test method for the emergency diesel generator protection system of nuclear power plants.

[0103] Based on the analysis results of steps S1-S3 above, the processing logic of the nuclear power plant emergency diesel generator protection system can be determined. This processing logic includes a first stage, a second stage, and a third stage. The logic of the first stage partially overlaps with the logic of the second stage, and the logic of the second stage partially overlaps with the logic of the third stage.

[0104] In this embodiment, the processing logic may include: Figure 3 The three stages shown are T1, T2, and T3. T1 includes hardware testing, such as isolation and distribution, signal acquisition cards, and connection lines, as well as testing the front-end processing logic in the software. T2 covers the entire processing logic. T3 includes testing the back-end processing logic and hardware testing, including output cards, connection lines, field devices, or third-party interfaces. This shows that there is some overlap in processing logic between T1 and T2, and between T2 and T3.

[0105] S41, executing the first stage of the processing logic in the first cycle.

[0106] The data acquisition logic is executed and a channel verification method is used to determine whether the acquisition channel of the data acquisition has drifted.

[0107] like Figure 4 The specific steps are as follows:

[0108] S411: Input a test signal to the test terminal using a standard signal source, and obtain a corresponding measured data value.

[0109] S412, reading the expected value corresponding to the test signal from a preset table in the channel verification method.

[0110] S413, calculating the deviation between the measured data value and the expected value.

[0111] S414: If the deviation is less than or equal to the preset error range, it is determined that the acquisition channel has not drifted, and the first stage test has passed.

[0112] S415, if the deviation is greater than the preset error range, it is determined that the acquisition channel has drifted and the first stage test has failed.

[0113] It should be understood that, since the existing EDG overall periodic test cannot cover the detection of acquisition channel drift, the processing logic of T1 is generally executed separately with an 18-month cycle.

[0114] S42, executing the second stage of the processing logic in a second cycle.

[0115] like Figure 5 The specific steps are as follows:

[0116] S421: inject test data into the processor using a maintenance test tool, and read back the logical calculation results of the processor processing the test data.

[0117] S422, judging whether the logical calculation result is consistent with the test data.

[0118] S423, if the logic calculation result is consistent with the test data, the second stage test is passed.

[0119] S424: If the logic calculation result is inconsistent with the test data, the second stage test fails.

[0120] T2's processing logic is the protection logic for processor detection. The current EDG overall periodic test frequency is generally monthly. If the EDG overall periodic test includes the processor protection logic, T2 does not need to be executed separately; the T2 processing logic can be completed during the EDG overall periodic test.

[0121] S43, executing the third stage of the processing logic in the third cycle.

[0122] like Figure 6 The specific steps are as follows:

[0123] S431, output the test execution signal to the on-site equipment.

[0124] S432: Determine whether the on-site device receives a test execution signal.

[0125] S433: If the test execution signal is received, the third stage test is passed.

[0126] S434: If the test execution signal is not received, the third stage test fails.

[0127] T3's processing logic tests the correctness of outputs to field devices, field device inputs, and third-party interfaces. Existing EDG overall periodic testing is typically performed monthly. If the overall EDG periodic testing includes actual field device operation and protection signal testing related to third-party interfaces, T3 does not need to be performed separately; its processing logic can be completed along with the overall EDG periodic testing.

[0128] The periodic test analysis method for the nuclear power plant emergency diesel generator protection system of the embodiment of the present application analyzes the reliability and necessity of the nuclear power plant emergency diesel generator protection system in sequence, determines the system function and signal flow of the nuclear power plant emergency diesel generator protection system, and then determines the test method for the nuclear power plant emergency diesel generator protection system and executes the test method, which can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel.

[0129] The following is a detailed description using a specific embodiment.

[0130] Currently, regular EDG testing at nuclear power plants includes low-power and full-power tests. Low-power testing involves disconnecting the external power supply and switching to the internal power source to verify that the diesel generator set's startup sequence, voltage, and frequency regulation are functioning correctly. This test cycle is typically conducted every two months. Full-power testing involves connecting the diesel generator set to the plant's external auxiliary grid via the busbar to verify its ability to deliver rated power to the dedicated emergency safety equipment. This test cycle coincides with the refueling cycle (18 months).

[0131] Due to the particularity of nuclear power plants, EDGs are required to start quickly. Therefore, the test is divided into slow start test and fast start test. The slow start test is used to prove the ability of EDG to start normally under standby conditions and verify that the voltage and frequency meet the design requirements. The slow start test cycle is once a month. The fast start test is used to prove that EDG starts under standby conditions and verifies that the voltage and frequency limits are reached within an acceptable time. The fast start test cycle is once every six months. The above tests are regular tests for the entire EDG and do not involve special regular tests for the EDG protection system. After the EDG protection system is digitized, there is a possibility of missing some failure modes, but it can cover or simplify the special regular tests of the EDG protection system to a certain extent.

[0132] This application analyzes the reliability of the EDG protection system, its structure, function, and signal flow, as well as the requirements of domestic and international regulatory standards. It proposes a specialized periodic test analysis method that effectively avoids design omissions. Furthermore, it systematically considers the overlap between different periodic tests, simplifying the entire periodic test design and reducing the workload of test personnel.

[0133] Periodic test and analysis method of EDG protection system based on digitalization, such as Figure 7 As shown, the following steps are included:

[0134] S701, system reliability analysis.

[0135] Reliability analysis needs to be based on the platform product, and according to the system architecture and functions, analyze all component failure modes, system status, failure impact, compensation measures, self-diagnosis monitoring methods and regular tests, etc., to determine whether all single faults can be detected during normal operation of the system, and whether there is a single fault that will prevent the system from taking protective action. Specific reliability analysis can be as follows Figure 8 shown.

[0136] S801, analyze system structure and functions.

[0137] S802, analyze failure modes and effects.

[0138] This step further includes determining the scope of analysis, defining failure modes, and modeling and analysis.

[0139] S803: Generate a reliability analysis report.

[0140] Digitally based I&C systems typically use a combination of self-diagnosis and periodic testing to cover all system failure modes and ensure overall system reliability. IEC60671 stipulates that self-diagnosis and monitoring can replace periodic testing, and the system must analyze and identify diagnosable failure modes. Residual failure modes that cannot be diagnosed either have no impact on safety functions or are covered by periodic testing. In summary, EDG protection system failure modes can be detected through self-diagnosis. Failure modes that cannot be detected through self-diagnosis require periodic testing.

[0141] S702, Necessity analysis of regular testing.

[0142] IEEE 603 ​​stipulates that safety systems must demonstrate their ability to perform safety functions through periodic testing and calibration. IEEE 338 and GB / T 5204 stipulate that periodic testing and monitoring of safety systems is intended to achieve the desired system availability. IEC 60671 stipulates that safety systems must ensure the functional capabilities and corresponding control paths of nuclear power plant instrumentation and control systems (I&C) through monitoring testing.

[0143] Based on the discussion in the above standards, regular testing of EDG protection systems is necessary.

[0144] S703, analyze system functions and signal flow.

[0145] like Figure 2 As shown in the figure, the EDG protection system's primary function is to receive signals from field sensors S or remote / local start / stop commands, perform logical operations, and output EDG unit protection action signals. The system is equipped with operating buttons and rotary switches for local manual control of diesel engine starting or other equipment. Furthermore, the system transmits relevant alarm information and operating parameters to the display unit.

[0146] S704, determine the test method.

[0147] HAF102 stipulates that the design must allow for testing of all links, from sensors to final actuators. Therefore, regular testing must cover all equipment performing nuclear safety level 1E protection functions, including sensors, logic processing, and field actuators. Testing can be conducted using a segmented, overlapping testing approach to ensure complete coverage of these devices.

[0148] against Figure 2 The signal flow chart in Figure 3 The test of three overlapping sections T1, T2 and T3 is shown. In addition, in order to meet the requirements of EDG fast emergency start-up time, a special response time test is designed for the system.

[0149] (1) The T1 test is mainly used to verify whether the acquisition channel drifts.

[0150] Specific test methods include cross-verification and channel verification. Cross-verification verifies whether a single channel drifts compared to redundant channels. Channel verification, in the extremely low probability event of drift across all channels, injects a standard signal source into a single channel to identify deviations from expected values.

[0151] Analysis of the EDG protection system logic indicates that no analog data is collected for redundant protection channels, so cross-verification is not required for this application. Since existing EDG overall periodic testing does not cover channel verification, T1 testing requires channel verification. Based on product reliability data, channel verification typically occurs every refueling cycle, or 18 months.

[0152] like Figure 9 As shown, the specific method of T1 channel verification is as follows:

[0153] The standard signal source injects data through the test terminal, and through the isolation distribution, the channel verification test table reads the data, and the AI ​​board and processing unit automatically complete the deviation comparison. The deviation comparison algorithm is as follows:

[0154] ΔE 误差 =(V 实测值 -V 预期值 ) / R 量程 *100%, with an allowable error range of (-σ, +σ), where σ is generally 0.25% of the signal engineering range. If |ΔE| < σ, the test result is OK; if |ΔE| > σ, the test result is NG.

[0155] (2) The T2 test mainly tests the protection logic inside the processor.

[0156] The maintenance test tool injects test data into the processor, then reads back the logic calculation results and compares them with the expected values ​​to verify the correctness of the logic. If the expected value is the same as the test data, the test passes, otherwise the test fails. According to the conclusions of the failure mode and impact analysis of system and platform products, CPU self-diagnosis can cover all failure modes that affect safety functions. However, based on the experience and conservative practices within the nuclear power industry, it is usually adopted to perform T2 tests by selecting typical logic or regularly restarting the processor. Due to the particularity of EDG itself, the overall regular test frequency of EDG is generally one month, which covers the processor protection logic, so the T2 test does not need to be performed separately.

[0157] (3) The T3 test is used to verify the correctness of the system output to the field device or the field device input terminal and third-party interface.

[0158] Due to the unique characteristics of EDG, the overall EDG regular testing frequency is generally monthly, which covers field equipment operation and third-party interface-related protection signal testing. Therefore, the T3 test does not need to be performed separately.

[0159] (4) The response time test is used to verify the response time of the EDG protection system itself.

[0160] Since the EDG fast start test covers the verification of the overall response time, it already covers the response time of the EDG protection system. Therefore, the response time test does not need to be performed separately.

[0161] Furthermore, since the EDG protection system utilizes a number of switches, knobs, and indicator lights, a light test or switch test is required to verify equipment availability. This light test requires a dedicated light test button and test logic. Switch tests are recommended to be performed during the EDG's overall periodic test. Knobs not covered by the overall EDG test should be individually operated while blocking the corresponding outputs.

[0162] Test precautions: The design of the periodic test function should not affect the system's execution of safety functions; during the periodic test, if the function of the test object is affected, a bypass method should be used to prevent false triggering of on-site equipment and provide instructions in the control room.

[0163] This application fully combines domestic and international regulatory standards with the characteristics of digital instrumentation and control systems. Based on the current EDG overall periodic test, it conducts reliability analysis and proposes a complete special periodic test analysis method.

[0164] In order to implement the above embodiment, the present application also proposes a periodic test and analysis device for a nuclear power plant emergency diesel generator protection system.

[0165] Figure 10 It is a structural schematic diagram of a nuclear power plant emergency diesel generator protection system test device according to an embodiment of the present application.

[0166] like Figure 10 As shown, the apparatus includes a first analysis module 100 , a second analysis module 200 , a first determination module 300 and a second determination module 400 .

[0167] The first analysis module 100 is used to analyze the reliability of the nuclear power plant emergency diesel generator protection system.

[0168] The first analysis module 100 is used to: analyze the structure and function of the nuclear power plant emergency diesel generator protection system to determine the failure modes and failure effects of all components in the nuclear power plant emergency diesel generator protection system; and generate a reliability analysis report based on the failure modes and failure effects of all components.

[0169] The second analysis module 200 is used to analyze the necessity of periodic testing of the emergency diesel generator protection system of the nuclear power plant.

[0170] The first determination module 300 is used to determine the system function and signal flow of the nuclear power plant emergency diesel generator protection system.

[0171] The second determining module 400 is used to determine a test method for the nuclear power plant emergency diesel generator protection system.

[0172] The second determination module 400 is used to: determine the processing logic of the nuclear power plant emergency diesel generator protection system, the processing logic includes a first stage, a second stage and a third stage; execute the first stage of the processing logic in a first cycle; execute the second stage of the processing logic in a second cycle; execute the third stage of the processing logic in a third cycle; the logic of the first stage overlaps with the logic of the second stage, and the logic of the second stage overlaps with the logic of the third stage.

[0173] The second determining module 400 is specifically configured to:

[0174] The data acquisition logic is executed and a channel verification method is used to determine whether the acquisition channel of the data acquisition has drifted.

[0175] The second determining module 400 is specifically configured to:

[0176] Use a standard signal source to input the test signal to the test terminal and obtain the corresponding data measured value;

[0177] Read the expected value corresponding to the test signal from the preset table in the channel verification method;

[0178] Calculate the deviation between the measured and expected values ​​of the data;

[0179] If the deviation is less than or equal to the preset error range, it is determined that the acquisition channel has not drifted and the first stage test has passed;

[0180] If the deviation is greater than the preset error range, it is determined that the acquisition channel has drifted, and the first stage test fails.

[0181] The second determining module 400 is specifically configured to:

[0182] Use the maintenance test tool to inject test data into the processor and read back the logical calculation results of the processor processing the test data;

[0183] Determine whether the logical calculation results are consistent with the test data;

[0184] If the logical calculation results are consistent with the test data, the second stage test passes;

[0185] If the logical calculation results are inconsistent with the test data, the second stage test fails.

[0186] The second determining module 400 is specifically configured to:

[0187] Output test execution signal to field equipment;

[0188] Determine whether the on-site equipment has received the test execution signal;

[0189] If the test execution signal is received, the third stage test is passed;

[0190] If the test execution signal is not received, the third stage test fails.

[0191] It should be understood that the periodic test analysis device for the nuclear power plant emergency diesel generator protection system of this embodiment is consistent with the description of the periodic test analysis method for the nuclear power plant emergency diesel generator protection system of the first embodiment, and will not be repeated here.

[0192] The periodic test analysis device for the nuclear power plant emergency diesel generator protection system of the embodiment of the present application can effectively avoid design omissions, simplify the entire periodic test design, and reduce the workload of test personnel by successively analyzing the reliability and necessity of the nuclear power plant emergency diesel generator protection system, and determining the system functions and signal flows of the nuclear power plant emergency diesel generator protection system, and then determining the test method for the nuclear power plant emergency diesel generator protection system and executing the test method.

[0193] In order to implement the above embodiments, the present application also proposes a computer device.

[0194] The computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the periodic test and analysis method for the nuclear power plant emergency diesel generator protection system according to the first embodiment is implemented.

[0195] In order to implement the above embodiments, the present application also proposes a non-transitory computer-readable storage medium.

[0196] The non-temporary computer-readable storage medium stores a computer program, which, when executed by a processor, implements the periodic test analysis method for the nuclear power plant emergency diesel generator protection system as described in the first embodiment.

[0197] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

[0198] The logic and / or steps represented in the flowcharts or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing the logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (e.g., a computer-based system, a system including a processor, or other system that can fetch and execute instructions from an instruction execution system, apparatus, or device). For purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate, or transport a program for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (a non-exhaustive list) of computer-readable media include the following: an electrical connection with one or more wires (electronic devices), a portable computer disk cartridge (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and programmable read-only memory (EPROM or flash memory), fiber optic devices, and a portable compact disc read-only memory (CDROM). Furthermore, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or otherwise processing it in a suitable manner if necessary, and then storing it in a computer memory.

[0199] It should be understood that various parts of the present application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented using hardware, as in another embodiment, any one of the following technologies known in the art or a combination thereof can be used to implement: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application-specific integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0200] It should be noted that, in the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in an appropriate manner in any one or more embodiments or examples. In addition, those skilled in the art may combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

Claims

1. A periodic test and analysis method for a nuclear power plant emergency diesel generator protection system, characterized in that: include: Analyze the reliability of the emergency diesel generator protection system in nuclear power plants; Among them, the reliability of the nuclear power plant emergency diesel generator protection system is analyzed, including: Analyze the structure and function of the nuclear power plant emergency diesel generator protection system to determine the failure modes and failure effects of all components in the nuclear power plant emergency diesel generator protection system; Generate reliability analysis reports based on failure modes and failure effects of all components; Analyze the necessity of periodic testing of the emergency diesel generator protection system of the nuclear power plant; Determine the system functions and signal flow of the nuclear power plant emergency diesel generator protection system; Based on the analysis results of the above steps, a test method for the nuclear power plant emergency diesel generator protection system is determined.

2. The method according to claim 1, wherein Determine the test method for the nuclear power plant emergency diesel generator protection system, including: Determining a processing logic of the nuclear power plant emergency diesel generator protection system, wherein the processing logic includes a first stage, a second stage, and a third stage; executing a first stage of the processing logic in a first cycle; executing a second stage of the processing logic in a second cycle; executing the third stage of the processing logic in a third cycle; The first phase overlaps with a logical portion of the second phase, and the second phase overlaps with a logical portion of the third phase.

3. The method according to claim 2, wherein The first stage of the processing logic is executed in a first cycle, including: The data acquisition logic is executed and a channel verification method is used to determine whether the acquisition channel of the data acquisition has drifted.

4. The method according to claim 3, wherein Execute data acquisition logic and use channel verification methods to determine whether the acquisition channel of data acquisition has drifted, including: Use a standard signal source to input the test signal to the test terminal and obtain the corresponding data measured value; Reading an expected value corresponding to the test signal from a preset table in the channel verification method; Calculating the deviation between the measured value of the data and the expected value; If the deviation is less than or equal to the preset error range, it is determined that the acquisition channel has not drifted and the first stage test has passed; If the deviation is greater than the preset error range, it is determined that the acquisition channel has drifted, and the first stage test fails.

5. The method according to claim 2, wherein The second stage of the processing logic is executed in a second cycle, including: injecting test data into the processor using a maintenance test tool, and reading back a logical calculation result of the processor processing the test data; Determining whether the logical calculation result is consistent with the test data; If the logic calculation result is consistent with the test data, the second stage test is passed; If the logic calculation result is inconsistent with the test data, the second stage test fails.

6. The method according to claim 2, wherein The third stage of executing the execution logic is executed in a third cycle, including: Output test execution signal to field equipment; determining whether the field device receives the test execution signal; If the test execution signal is received, the third stage test is passed; If the test execution signal is not received, the third stage test fails.

7. A periodic test and analysis device for the protection system of an emergency diesel generator in a nuclear power plant, characterized in that: include: The first analysis module is used to analyze the reliability of the nuclear power plant emergency diesel generator protection system; Among them, the reliability of the nuclear power plant emergency diesel generator protection system is analyzed, including: Analyze the structure and function of the nuclear power plant emergency diesel generator protection system to determine the failure modes and failure effects of all components in the nuclear power plant emergency diesel generator protection system; Generate reliability analysis reports based on failure modes and failure effects of all components; The second analysis module is used to analyze the necessity of periodic testing of the emergency diesel generator protection system of the nuclear power plant; A first determination module is used to determine the system function and signal flow of the nuclear power plant emergency diesel generator protection system; The second determination module is used to determine the test method of the nuclear power plant emergency diesel generator protection system based on the above analysis results.

8. A computer device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory, wherein the computer program, when executed by the processor, implements the periodic test analysis method for the nuclear power plant emergency diesel generator protection system according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the periodic test analysis method for the nuclear power plant emergency diesel generator protection system according to any one of claims 1 to 6.

Images