Reuse method and system for nuclear power plant monitoring system

Abstract

The present invention discloses a method and system for reusing a nuclear power plant monitoring system. The method includes: obtaining the operating status of the unit through the life monitoring unit of the main monitoring system, where the operating status is determined by the non-safety level and safety level states of the main monitoring system, as well as the non-safety level and safety level states of the auxiliary monitoring system. The auxiliary monitoring system switches modes with the main monitoring system through a multi-channel switching system, and the auxiliary monitoring system reuses the display terminal of the main monitoring system. Based on the operating status, the monitoring status of the auxiliary monitoring system, a diversified human-machine interface panel, or an extended operating condition and emergency panel is activated through the multi-channel switching system. This method can simplify the human-machine interface equipment in the control room, reduce project costs, and complete the monitoring and control of normal and emergency conditions of the nuclear power plant, thereby effectively ensuring the safety and operation of the nuclear power plant.

Description

Technical Field

[0001] The present invention relates to the field of nuclear power plant control room design, and in particular to a multiplexing method and system for a nuclear power plant monitoring system. Background Art

[0002] Before the introduction of DCS (Digital Control System) instrumentation and control technology, nuclear power plants used conventional hardware control panels in their main control rooms to operate and control the power plant. These panels were equipped with numerous light-emitting alarms to alert operators to normal and emergency operations. However, after the widespread adoption of DCS instrumentation and control technology in nuclear power plants, the main control room primarily uses a digital human-machine interface. In the event of a failure of the main control system (MCS), an independent auxiliary control system (ACS) is installed to monitor and control the nuclear power plant.

[0003] Conventional hardware control panels typically utilize a large number of control buttons, indicators, and light-emitting diode alarms, typically around 3,000 hardware devices. Operation is typically one-to-one, with each operation corresponding to a specific device. The complex interactions between devices and the large number of hardware device cables result in a large number of DCS cabinets. The human-machine interface is fragmented, placing a significant workload on operators. Furthermore, ongoing maintenance and repair costs are high, and regular testing procedures are complex. After the adoption of digital human-machine interfaces in control rooms, nuclear power plants typically used hardware backup disks to handle both normal and emergency operations in the main control room. These hardware backup disks also typically utilize a large number of control buttons, indicators, light-emitting diode alarms, and other devices, typically numbering around 1,500 devices on the panel. The sheer size and volume of these hardware backup disks, coupled with the large number of hard-wired devices and cables, also necessitates a large number of DCS cabinets. The complex interactions between devices and the fragmented human-machine interface also place a significant workload on operators. Summary of the Invention

[0004] The embodiment of the present invention provides a multiplexing method and system for a nuclear power plant monitoring system to solve the problem.

[0005] A multiplexing method for a nuclear power plant monitoring system, comprising:

[0006] The operating conditions of the unit are obtained through the life monitoring unit of the main monitoring system. The operating conditions are determined by the non-safety level and safety level states of the main monitoring system and the non-safety level and safety level states of the auxiliary monitoring system. The auxiliary monitoring system switches modes between the main monitoring system and the auxiliary monitoring system through a multi-channel switching system, and the auxiliary monitoring system reuses the display terminal of the main monitoring system.

[0007] Based on the operating conditions, the monitoring status of the auxiliary monitoring system, diversified human-machine interface panel or extended operating condition emergency panel is started through the multi-channel switching system.

[0008] Preferably, the operating condition of the unit is obtained through the life monitoring unit of the main monitoring system, including:

[0009] When the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is normal or failure, the operating condition is the design reference condition;

[0010] When the non-safety level state of the main monitoring system is failure, and the safety level state of the main monitoring system is failure due to common cause failure of the protection system, the operating condition is the design expansion condition.

[0011] Preferably, the operating conditions include normal operating conditions and design reference conditions;

[0012] Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is activated through the multi-channel switching system, including:

[0013] When the operating condition is normal operating condition or design reference condition, the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is normal, the auxiliary monitoring system is used to monitor the unit or perform accident processing;

[0014] When the operating conditions are the design reference conditions, the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is failure, accident handling is performed on the unit through the safety level status of the main monitoring system.

[0015] Preferably, when the operating condition is a normal operating condition, the auxiliary monitoring system monitors the unit, and when unstable fluctuations occur in the core parameters, the auxiliary monitoring system is used to bring the unit to and maintain it in a safe state.

[0016] Preferably, the operating conditions include design expansion conditions and severe accidents;

[0017] Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is activated through the multi-channel switching system, including:

[0018] When the operating condition is the design extended condition, the unit can be monitored or accident handling can be performed through the diversified human-machine interface panel;

[0019] When the operating condition is a serious accident, the unit will be handled by expanding the operating condition accident panel.

[0020] Preferably, the auxiliary monitoring system switches modes between the primary monitoring system and the multi-channel switching system, including:

[0021] When the main monitoring system switches to the auxiliary monitoring system, all control instructions on the display terminal of the main monitoring system and test instructions on the auxiliary monitoring system are locked, and the operator workstation exits the main monitoring system operation mode;

[0022] Activate all control commands on the auxiliary monitoring system, and log in the operator workstation in the auxiliary monitoring system operation mode;

[0023] When the auxiliary monitoring system switches to the main monitoring system, all control instructions on the display terminal of the main monitoring system are activated, and the operator workstation logs in in the main monitoring system operation mode;

[0024] The control instructions and test instructions on the auxiliary monitoring system are locked, the operator workstation exits the auxiliary monitoring system operation mode and forced login to the auxiliary monitoring system operation mode is prohibited.

[0025] Preferably, the auxiliary monitoring system reuses the display terminal of the main monitoring system, including:

[0026] The operator workstation controls the display terminal to switch directly between the auxiliary monitoring system and the main monitoring system through the screen display switching switch.

[0027] Preferably, the main monitoring system includes a nuclear island operator workstation, a conventional island operator workstation, a crew chief workstation, and a safety engineer workstation with multiplexed display terminals, wherein the display terminals are respectively connected to the auxiliary monitoring system and the main monitoring system equipped with the life monitoring unit;

[0028] The auxiliary monitoring system switches modes between the main monitoring system and the multi-channel switching system, including:

[0029] When the main monitoring system displays the loss of life signal through the life monitoring unit, the main monitoring system is switched to the auxiliary monitoring system through the multi-channel switching system. At the same time, the working modes of the nuclear island operator workstation, conventional island operator workstation, crew chief workstation and safety engineer workstation are switched to the auxiliary monitoring system operation mode.

[0030] Preferably, the nuclear power plant monitoring system further comprises a large-screen display reused by the main monitoring system and the auxiliary monitoring system, for displaying the main parameters of the nuclear power plant, the status of the main equipment and the status of the safety protection system; the main monitoring system comprises at least one operator workstation;

[0031] All operator workstations control large-screen displays through multi-channel multiplexing.

[0032] A nuclear power plant monitoring system includes a main monitoring system and an auxiliary monitoring system, and is characterized in that the main monitoring system and the auxiliary monitoring system implement the aforementioned multiplexing method of the nuclear power plant monitoring system.

[0033] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the multiplexing method of the nuclear power plant monitoring system.

[0034] The above-mentioned method and system for reusing the monitoring system of a nuclear power plant adopts a display terminal device reuse scheme for the main monitoring system and the auxiliary monitoring system with a low failure rate. The signal processing and network units of the main monitoring system and the auxiliary monitoring system respectively adopt different systems that meet independence and diversity. When the main monitoring system loses its life signal, the main monitoring system can be switched to the auxiliary monitoring system through a multi-channel switching system. The auxiliary monitoring system can reuse the display terminal device of the main monitoring system and reconnect with the independent and diverse signal processing and network units to realize monitoring and control of the nuclear power plant, so as to achieve the elimination of the physical auxiliary backup monitoring panel, and meet the purpose of simplifying the human-machine interface equipment of the control room, improving the efficiency of operating personnel, and reducing project costs under the premise of unchanged functions; it can also effectively solve the problem of completing the monitoring and control of normal and accident conditions of the nuclear power plant in the event of failure of the main digital main monitoring system, thereby effectively ensuring the safety and operation of the nuclear power plant. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0036] Figure 1 is a flow chart of a multiplexing method of a nuclear power plant monitoring system according to one embodiment of the present invention;

[0037] Figure 2 is a first flow chart of a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention;

[0038] Figure 3 is a second flow chart of a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention;

[0039] Figure 4 is a third flow chart of a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention;

[0040] Figure 5This is a schematic diagram of the downgraded mode operation principle of the main control room in the reuse method of the nuclear power plant monitoring system in another embodiment of the present invention;

[0041] Figure 6 is a fourth flow chart of a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention;

[0042] Figure 7 This is a schematic diagram of a multi-channel multiplexing solution for a single OWP screen in a multiplexing method for a nuclear power plant monitoring system according to one embodiment of the present invention;

[0043] Figure 8 This is a schematic diagram of a large-screen multi-channel multiplexing solution in a multiplexing method for a nuclear power plant monitoring system in another embodiment of the present invention;

[0044] Figure 9 2 is a schematic diagram of a second multiplexing scheme of a single OWP screen with multiple channels in a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention;

[0045] Figure 10 This is a second schematic diagram of a large-screen multi-channel multiplexing solution in a multiplexing method for a nuclear power plant monitoring system in another embodiment of the present invention;

[0046] Figure 11 It is a schematic diagram of an implementation method of switching switches between a main monitoring system and an auxiliary monitoring system in a multiplexing method of a nuclear power plant monitoring system in another embodiment of the present invention. DETAILED DESCRIPTION

[0047] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0048] In one embodiment, if Figure 1 As shown, a multiplexing method for a nuclear power plant monitoring system is provided, which is applied in Figure 1 The server in the example is used as an example. The specific steps include the following:

[0049] S10. The operating condition of the unit is obtained through the life monitoring unit of the main monitoring system. The operating condition is determined by the non-safety level state and the safety level state of the main monitoring system, and the non-safety level state and the safety level state of the auxiliary monitoring system. Among them, the auxiliary monitoring system switches modes between the multi-channel switching system and the main monitoring system, and the auxiliary monitoring system reuses the display terminal of the main monitoring system.

[0050] Specifically, the life monitoring unit is a unit that obtains a life status report after analyzing various parameters during the operation of the nuclear power plant units.

[0051] A nuclear power plant's digital instrumentation and control system (DCS), often called the "nerve center" of nuclear power plant operations, consists of both a safety-level DCS and a non-safety-level DCS. Through the Main Control Room (MCR), it controls hundreds of systems, nearly 10,000 pieces of equipment, and various operating conditions. The safety-level DCS enables safe reactor shutdown in the event of an accident, ensuring the plant's safe operation. The non-safety-level DCS is responsible for operation and management, crucial for the plant's efficient and economical operation. Nuclear power plants generally monitor safe operation through the primary monitoring system, activating the secondary monitoring system in the event of an abnormality.

[0052] S20. Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is started through the multi-channel switching system.

[0053] Specifically, the Diverse Human-Interface Panel (DHP) is a manual control platform designed with diverse features, high integration, and human-machine interactive editing. The DEC Control Panel (DCP) is a platform for controlling major accidents.

[0054] The nuclear power plant monitoring system reuse method provided in this embodiment utilizes a low-failure-rate display terminal device reuse scheme for the primary and auxiliary monitoring systems. The signal processing and network units of the primary and auxiliary monitoring systems utilize separate systems that ensure independence and diversity. When the primary monitoring system loses its life signal, the primary monitoring system can be switched to the auxiliary monitoring system via a multi-channel switching system. The auxiliary monitoring system can reuse the primary monitoring system's display terminal devices and reconnect with independent, diverse signal processing and network units to monitor and control the nuclear power plant. This eliminates the need for physical auxiliary backup monitoring panels, achieving the goals of simplifying control room human-machine interface equipment, improving operator efficiency, and reducing project costs while preserving functionality. This method also effectively addresses the issue of monitoring and controlling the normal and accident conditions of the nuclear power plant in the event of a failure of the primary digital primary monitoring system, thereby effectively ensuring the safety and operation of the nuclear power plant and forming a safety automation system (SAS).

[0055] In a specific embodiment, if Figure 2As shown, the life monitoring unit of the main monitoring system obtains the operating conditions of the unit, including:

[0056] S111. When the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is normal or failure, the operating condition is the design reference condition.

[0057] S112. When the non-safety level state of the main monitoring system is failure, and the safety level state of the main monitoring system is failure due to a common cause failure of the protection system, the operating condition is the design expansion condition.

[0058] Specifically, DBC: Design Basis Condition, the design basis condition is the condition in which the auxiliary monitoring system works, and DEC: Design Extension Condition, the design extension condition is the condition in which the main monitoring system starts the safety level state.

[0059] In a specific embodiment, if Figure 3 As shown in Figure 1, the operating conditions include normal operating conditions and design reference conditions.

[0060] Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is activated through the multi-channel switching system, including:

[0061] S211. When the operating condition is normal operating condition or design reference condition, the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is normal, the unit is monitored or accident handling is performed through the auxiliary monitoring system.

[0062] S212. When the operating condition is the design reference condition, the non-safety level status of the main monitoring system is failure, and the non-safety level status of the auxiliary monitoring system is failure, the accident processing is performed on the unit through the safety level status of the main monitoring system.

[0063] Specifically, in order to solve the problem of how the main control room operates during the descending mode, the descending mode operation principle is proposed as follows:

[0064] Under normal unit operation, if the MCS non-safety level fails, the ACS non-safety level will be used to monitor and maintain the unit in a steady-state power operation state. Once the core parameters become unstable or the core power fluctuates significantly, the ACS will be used to immediately bring the unit to and maintain a safe state.

[0065] The unit is in the design basis operating condition and the MCS unsafe level fails: Regardless of whether the MCS unsafe level failure occurs during the accident operating condition or the design basis accident occurs during the ACS unsafe level operation (i.e., the MCS unsafe level has failed), the corresponding accident procedures shall be followed to monitor or execute the corresponding post-accident safety functions on the ACS to enable the unit to reach and maintain a safe state.

[0066] In a specific embodiment, when the operating condition is normal operating condition, the auxiliary monitoring system monitors the unit, and when unstable fluctuations occur in the core parameters, the auxiliary monitoring system is used to bring the unit to and maintain it in a safe state.

[0067] In a specific embodiment, if Figure 4 and Figure 5 As shown, the operating conditions include design expansion conditions and severe accidents.

[0068] Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is activated through the multi-channel switching system, including:

[0069] S221. When the operating condition is the design extended condition, the unit is monitored or accident handling is performed through a diversified human-machine interface panel.

[0070] S222. When the operating condition is a serious accident, perform accident processing on the unit by expanding the operating condition accident panel.

[0071] Specifically, if both the MCS unsafety level and the ACS unsafety level fail, the MCS safety level is used to handle the accident, ensuring the unit reaches and maintains a safe state. If a common cause failure of the Reactor Protection System (RPS) results in the MCS safety level failing, monitoring and control of the unit is transferred to the Diversified Human-Machine Panel (DHP). In the event of a severe accident, the extended Condition Contingency Panel (DCP) provides prevention and mitigation capabilities.

[0072] In a specific embodiment, if Figure 6 As shown, the auxiliary monitoring system switches modes between the main monitoring system and the multi-channel switching system, including:

[0073] S121. When the main monitoring system switches to the auxiliary monitoring system, all control instructions on the display terminal of the main monitoring system and test instructions on the auxiliary monitoring system are locked, and the operator workstation exits the main monitoring system operation mode.

[0074] S122. Activate all control instructions on the auxiliary monitoring system, and the operator workstation logs in in the auxiliary monitoring system operation mode.

[0075] S123. When the auxiliary monitoring system switches to the main monitoring system, all control instructions on the display terminal of the main monitoring system are activated, and the operator workstation logs in in the main monitoring system operation mode.

[0076] S124. The control instructions and test instructions on the auxiliary monitoring system are locked, the operator workstation exits the auxiliary monitoring system operation mode and forced login to the auxiliary monitoring system operation mode is prohibited.

[0077] Specifically, in order to solve the problem of how to switch between the various operating modes of the main control room and how to set the human-machine interface monitoring authority after switching, the present invention proposes the following switching principle of the various operating modes of the main control room.

[0078] 1) Principle of switching from MCS to ACS operation mode

[0079] By default, in MCR operation mode, when the power plant monitoring mode is switched from MCS to ACS operation mode, the relevant human-machine interface monitoring permissions are as follows:

[0080] a) All MCS column control commands (VDU, Visual Display Unit, display device multiplexing) and ACS test commands (except lamp test) are blocked, the OWP automatically exits the MCS operation mode and cannot be forced to log in to the MCS operation mode, and the MCS alarm flashing and sound functions are disabled;

[0081] b) All ACS control commands (VDU, hardware) are valid, the OWP's VDU automatically logs in to the ACS operating mode, and the ACS alarm flashing and sound functions are valid;

[0082] c) All control instructions in the upper security level section of OWP are valid;

[0083] d) All ECP column control instructions are valid;

[0084] e) DHP control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DHP activation mode);

[0085] f) The DCP column control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DCP activation mode).

[0086] 2) Principles of switching from ACS to MCS operation mode

[0087] By default, in MCR operation mode, when the power plant monitoring mode is switched from ACS to MCS operation mode, the relevant human-machine interface monitoring permissions are as follows:

[0088] a) All MCS column control instructions (VDU) are valid, the operator can log in the OWP to the MCS operation mode, and the MCS alarm flashing and sound functions are valid;

[0089] b) All ACS column control and test commands (VDU, hardware) are locked (except for control devices not affected by MCS / ACS switching). The OWP's VDU automatically exits ACS operating mode and cannot be forcibly logged into ACS operating mode. The ACS alarm flashing and sound functions are disabled (except for MCS life monitoring alarms and RSS operating mode alarms, as their flashing and sound functions are not affected by MCS / ACS switching). Alarms are indicated by flat light.

[0090] c) All control instructions in the upper security level section of OWP are valid;

[0091] d) All control commands in the ECP (Emergency Control Panel) are valid;

[0092] e) DHP control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DHP activation mode);

[0093] f) The DCP column control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DCP activation mode).

[0094] 3) Switching to ACS test mode principle

[0095] By default, in MCR operation mode, when the power plant monitoring mode is switched to ACS test mode, the relevant human-machine interface monitoring permissions are as follows:

[0096] a) All ACS control commands (VDU, hardware) are blocked (except for control devices not affected by MCS / ACS switching). ACS-related periodic tests can be performed. The ACS alarm flashing and sound functions are valid. The OWP VDU cannot be forced to log in to the ACS operating mode.

[0097] b) All control commands (VDU) of each column of MCS are valid, and the alarm flashing and sound functions of MCS are valid;

[0098] c) All control instructions in the upper security level section of OWP are valid;

[0099] d) All ECP column control instructions are valid;

[0100] e) DHP control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DHP activation mode);

[0101] f) The DCP column control commands (VDU and hardware), alarm flashing and sound functions are not affected (their effectiveness is determined by the DCP activation mode).

[0102] In a specific embodiment, the auxiliary monitoring system reuses the display terminal of the main monitoring system, including:

[0103] The operator workstation controls the display terminal to switch directly between the auxiliary monitoring system and the main monitoring system through the screen display switching switch.

[0104] Specifically, in order to solve the problem of switching the screen display between the primary monitoring system and the auxiliary monitoring system without affecting the operation mode of the primary monitoring system and the auxiliary monitoring system, the present invention proposes the following principle for switching the screen display between the primary monitoring system and the auxiliary monitoring system:

[0105] Each OWP panel is equipped with an MCS / ACS screen display switching switch. Each switching switch has two positions: "MCS" and "ACS" are selectable. Through this switch, the overall 5 screen display inputs of this OWP can be switched between the MCS and ACS platforms.

[0106] When the MCS / ACS screen display switch fails, the default position signal from the switch is "MCS". When one screen display switch fails, only the OWP cannot switch the display, and the other three OWPs are not affected.

[0107] Since the MCS / ACS screen display switch only switches the display content of the OWP screen and does not switch the operation mode, the operation mode of all human-machine interfaces in the main control room will not change after switching.

[0108] In a specific embodiment, the main monitoring system includes a nuclear island operator workstation, a conventional island operator workstation, a crew chief workstation and a safety engineer workstation with multiplexed display terminals, wherein the display terminals are respectively connected to the auxiliary monitoring system and the main monitoring system equipped with a life monitoring unit.

[0109] The auxiliary monitoring system switches modes between the main monitoring system and the multi-channel switching system, including:

[0110] When the main monitoring system displays the loss of life signal through the life monitoring unit, the main monitoring system is switched to the auxiliary monitoring system through the multi-channel switching system. At the same time, the working modes of the nuclear island operator workstation, conventional island operator workstation, crew chief workstation and safety engineer workstation are switched to the auxiliary monitoring system operation mode.

[0111] Specifically, in order to solve the problem of how to multiplex the multiple channels of the main monitoring system and the auxiliary monitoring system screens, thereby optimizing the human-machine interface equipment and reducing the duplication of human-machine interface functions, the following technical principles and solutions for multiplexing the multiple channels of the main monitoring system and the auxiliary monitoring system screens are proposed.

[0112] The central operating area of the main control room is equipped with four redundantly configured operator workstations (OWPs) for the main monitoring system: the nuclear island operator workstation (NI-OWP), the conventional island operator workstation (CI-OWP), the crew chief workstation (US-OWP), and the safety engineer workstation (SE-OWP). The VDUs of these four OWPs are connected to the mainframes of the main and auxiliary monitoring systems, respectively. A life monitoring unit is also included in the main monitoring system. If the main monitoring system loses its life signal, a multi-channel switching system switches the main monitoring system to the auxiliary monitoring system, placing the four main monitoring system operator workstations in auxiliary monitoring system mode. Independent and diverse signal processing and networking units are then used to monitor and control the nuclear power plant.

[0113] In a specific embodiment, the nuclear power plant monitoring system further includes a large-screen display shared by the primary monitoring system and the auxiliary monitoring system, for displaying the main parameters of the nuclear power plant, the status of the main equipment, and the status of the safety protection system. The primary monitoring system includes at least one operator workstation.

[0114] All operator workstations control large-screen displays through multi-channel multiplexing.

[0115] Specifically, the large display panel (LDP) is multiplexed by the main monitoring system and the auxiliary monitoring system to display the main parameters of the power plant, the status of the main equipment and the status of the safety protection system, and provide an overall picture of the power plant to the operators and all personnel entering the main control room during normal or accident conditions of the power plant.

[0116] 1) The multi-channel multiplexing technology solution for OWP and LDP, "one-to-one multiplexing technology for operation terminals", is as follows: 1) Both adopt a solution where one host (OPS) corresponds to one screen (VDU). That is, OWP adopts a solution where 5 main monitoring system OPSs are switched to 5 auxiliary monitoring system OPSs, and LDP adopts a solution where 6 main monitoring system large-screen OPSs are switched to 6 auxiliary monitoring system large-screen OPSs. The multi-channel switching system will have both multi-channel display and control switching functions.

[0117] 2) The display signal switching between the main monitoring system and the auxiliary monitoring system is achieved by setting a separate hardware switch. The switching diagram is as follows Figure 7 and Figure 8 .

[0118] The second multi-channel multiplexing technology solution for OWP and LDP, "one-to-many multiplexing technology for operation terminals," is as follows:

[0119] 3) A solution where one host (OPS) corresponds to multiple screens (VDUs) is adopted. That is, OWP adopts a solution where 5 main monitoring system OPSs are cut into 2 auxiliary monitoring system OPSs, and LDP adopts a solution where 6 main monitoring system large-screen OPSs are cut into 2 auxiliary monitoring system large-screen OPSs. The multi-channel switching system will have both host remote arrangement and video matrix switching functions.

[0120] 4) The display signal switching between the main monitoring system and the auxiliary monitoring system is achieved by setting a separate hardware switch. The switching diagram is as follows Figure 9 and Figure 10 .

[0121] Furthermore, the present application also provides an implementation method for switching the operation mode of the main monitoring system and the auxiliary monitoring system.

[0122] In order to solve the problem of how to set the operating mode switch of the main monitoring system and the auxiliary monitoring system, the present invention proposes the following implementation method:

[0123] In order to switch the control authority of the non-security part of the main monitoring system and auxiliary monitoring system on the OWP and prevent the mis-issuance of commands, the overall mode switch of MCS / ACS is set. The security level part on the OWP is shared by MCS / ACS, so the MCS / ACS mode switch is not performed, that is, it is not affected by the MCS / ACS mode switch.

[0124] There are three MCS / ACS mode switches, each with two positions: "MCS" and "ACS" for selection. The number of switches in the "ACS" position determines the operating mode.

[0125] The switching signal of each transfer switch should be sent to the DCS A / B column and the DCS cabinets of the four protection channels for switching lockout logic to ensure that all cabinets affected by MCS / ACS switching receive switching status information and execute corresponding switching lockout functions.

[0126] In order to solve the problem of how to set the screen display switch of the main monitoring system and the auxiliary monitoring system, the present invention proposes the following implementation method:

[0127] In order to conduct MCS / ACS periodic tests and parameter comparisons, a screen display switch between MCS / ACS is set. An MCS / ACS screen display switch is set on each OWP panel.

[0128] There are four MCS / ACS screen display switching switches (one on each OWP panel). Each switch has two positions: "MCS" and "ACS". This switch can be used to switch the screen display input of this OWP between the MCS and ACS platforms (the control authority is not affected by this screen display switching switch);

[0129] If the screen display switching switch on any OWP fails, it will not affect the switching of other OWP screens, meeting the redundancy requirements.

[0130] Implementation of the mode switching between the main monitoring system and the auxiliary monitoring system: Among the three MCS / ACS mode switches, the number of switches placed in the "ACS" position determines the operating mode:

[0131] 0 / 3: All switches are placed in the "MCS" position, and the operating mode is MCS operation mode;

[0132] 1 / 3: Only one switch is in the "ACS" position, and the other two are still in the "MCS" position. The ACS will be in test mode.

[0133] 2 / 3 or 3 / 3: 2 or 3 switches are placed in the "ACS" position, and the operating mode is ACS operation mode.

[0134] 1) Equipment configuration, MCS / ACS mode switching equipment configuration is as follows, such as Figure 11 As shown:

[0135] Transfer switch module: used to issue switching commands, meet the single fault criterion, have testable conditions, and consider the risks of false operation and refusal to operate as well as operational convenience;

[0136] Signal acquisition module of the switching processing cabinet: used to receive the switching switch status signal and distribute it to the logic processing module;

[0137] Logic processing module: used to perform logic processing on the switch command combination to determine the working mode of the ACS;

[0138] Signal output module: used to send the logic processing results (i.e. ACS working mode) to the corresponding control cabinet;

[0139] Command activation and locking module: used to activate or lock the operation authority of ACS-related operating equipment (including conventional hardware equipment and digital equipment) according to the ACS working mode;

[0140] Output display module: used to feed back the working status of MCS and ACS, and the activation / lockout status of control equipment operation authority to MCS and ACS for indication.

[0141] 2) Switching method: The switching method is implemented according to the following steps:

[0142] Issue a switching command by operating the switching switch;

[0143] The signal acquisition module of the switching processing cabinet receives the switching command;

[0144] The signal acquisition module sends the switching command to the logic processing module;

[0145] Perform logical processing operations, determine the working mode of the ACS, and transmit the operation results;

[0146] The calculation results are sent to the corresponding control cabinet through the signal output module;

[0147] The control cabinet activates or locks the device operation permissions on the ACS according to the ACS working mode;

[0148] Feedback the ACS working status, control equipment operation authority activation and blocking status to the MCS and ACS for indication.

[0149] If the MCS / ACS mode switch fails, the DCS cabinet defaults to receiving the "MCS" command signal from that switch. Therefore, if one switch fails, the existing operating mode corresponding to the MCS / ACS mode switch remains unaffected. For example, if one of the three switches fails, if the other two are set to "MCS," MCS operation remains unaffected (in this case, ACS test mode); if the other two are set to "ACS," ACS operation is in place.

[0150] The reuse method of the nuclear power plant monitoring system provided in this embodiment adopts a display terminal device reuse scheme of the main monitoring system and the auxiliary monitoring system with a low failure rate. The signal processing and network units of the main monitoring system and the auxiliary monitoring system respectively adopt different systems that meet the requirements of independence and diversity. At the same time, a life monitoring unit is set in the main monitoring system. When the main monitoring system loses the life signal, the main monitoring system can be switched to the auxiliary monitoring system through a multi-channel switching system. The auxiliary monitoring system can reuse the display terminal device of the main monitoring system and reconnect with the independent and diverse signal processing and network units to realize monitoring and control of the nuclear power plant, so as to achieve the purpose of eliminating the physical auxiliary backup monitoring panel, simplifying the control room human-machine interface equipment, improving the efficiency of operating personnel, and reducing project costs without changing the functions.

[0151] This application can effectively solve the problem of failure of the main digital monitoring system, and guide the operator to complete the monitoring and control of the normal and accident conditions of the nuclear power plant through the reuse method of the digital main monitoring system and the auxiliary monitoring system, thereby effectively ensuring the safety and operation of the nuclear power plant.

[0152] The above solutions mainly solve the following technical problems: how to operate during the main control room downgrade mode; the principle of switching from MCS to ACS operation mode; the principle of switching from ACS to MCS operation mode; the principle of switching to ACS test mode; the principle of switching the screen display of the main monitoring system and the auxiliary monitoring system; the technical solution for multi-channel multiplexing of the main monitoring system and the auxiliary monitoring system screen: solution one for how to multiplex multiple channels of a single OWP screen; the technical solution for multi-channel multiplexing of the main monitoring system and the auxiliary monitoring system screen: solution one for how to multiplex multiple channels of a large screen; the technical solution for multi-channel multiplexing of the main monitoring system and the auxiliary monitoring system screen: solution two for how to multiplex multiple channels of a single OWP screen; the technical solution for multi-channel multiplexing of the main monitoring system and the auxiliary monitoring system screen: solution two for how to multiplex multiple channels of a large screen; how to set the operation mode switching switch of the main monitoring system and the auxiliary monitoring system; how to set the screen display switching switch of the main monitoring system and the auxiliary monitoring system, and how to implement the mode switching of the main monitoring system and the auxiliary monitoring system.

[0153] Furthermore, the present application can effectively solve the problems such as the large size and volume of the conventional hardware backup panel in the main control room, the need for a large number of hard-wired equipment and cables, and the large number of DCS cabinets required; it can effectively solve the problems such as the relatively scattered human-machine interfaces between the original conventional hardware backup panel and the main monitoring system, the considerable workload of the operator during the system switching process, the high cost of subsequent maintenance and repair of the original conventional hardware backup panel, and the relatively cumbersome regular testing method; it can also effectively solve the problem that in the event of failure of the main monitoring system, the proposed auxiliary monitoring system reuses the monitoring method of the main monitoring system screen to complete accident processing, and there is no need to set up a separate physical auxiliary backup monitoring system monitoring panel, thereby achieving the purpose of simplifying the control room human-machine interface equipment, improving the efficiency of operating personnel, and maximizing project cost savings while maintaining the same function, while ensuring the safe, effective power generation and economy of the nuclear power plant.

[0154] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0155] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention, and should all be included in the scope of protection of the present invention.

Claims

1. A multiplexing method for a nuclear power plant monitoring system, wherein the nuclear power plant monitoring system includes a main monitoring system and an auxiliary monitoring system, characterized in that: The method comprises: The operating condition of the unit is obtained through the life monitoring unit of the main monitoring system, and the operating condition is determined by the non-safety level state and the safety level state of the main monitoring system, and the non-safety level state and the safety level state of the auxiliary monitoring system, wherein the auxiliary monitoring system switches modes between the main monitoring system and the auxiliary monitoring system through a multi-channel switching system, and the auxiliary monitoring system reuses the display terminal of the main monitoring system; Based on the operating conditions, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is activated through the multi-channel switching system; The auxiliary monitoring system switches modes between the auxiliary monitoring system and the main monitoring system through a multi-channel switching system, including: When the main monitoring system switches to the auxiliary monitoring system, all control instructions on the display terminal of the main monitoring system and test instructions on the auxiliary monitoring system are locked, and the operator workstation exits the main monitoring system operation mode; Activate all control commands on the auxiliary monitoring system, and log in the operator workstation in the auxiliary monitoring system operation mode; When the auxiliary monitoring system switches to the main monitoring system, all control instructions on the display terminal of the main monitoring system are activated, and the operator workstation is logged in in the main monitoring system operation mode; The control instructions and test instructions on the auxiliary monitoring system are locked, the operator workstation exits the auxiliary monitoring system operation mode and forced login to the auxiliary monitoring system operation mode is prohibited.

2. The multiplexing method of the nuclear power plant monitoring system according to claim 1, characterized in that: The operation status of the unit is obtained through the life monitoring unit of the main monitoring system, including: When the non-safety level state of the primary monitoring system is failure, and the non-safety level state of the auxiliary monitoring system is normal or failure, the operating condition is the design reference condition; When the non-safety level state of the main monitoring system is failure, and the safety level state is failure due to a common cause failure of the protection system of the main monitoring system, the operating condition is a design expansion condition.

3. The multiplexing method of a nuclear power plant monitoring system according to claim 1, characterized in that: The operating conditions include normal operating conditions and design reference conditions; Based on the operating condition, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is started through the multi-channel switching system, including: When the operating condition is the normal operating condition or the design reference condition, the non-safety level state of the main monitoring system is failure, and the non-safety level state of the auxiliary monitoring system is normal, monitoring the unit or performing accident processing through the auxiliary monitoring system; When the operating condition is the design reference condition, the non-safety level state of the main monitoring system is failure, and the non-safety level state of the auxiliary monitoring system is failure, accident processing is performed on the unit through the safety level state of the main monitoring system.

4. The multiplexing method of the nuclear power plant monitoring system according to claim 3, characterized in that: When the operating condition is the normal operating condition, the auxiliary monitoring system monitors the unit, and when unstable fluctuations occur in the core parameters, the auxiliary monitoring system is used to bring the unit to and maintain it in a safe state.

5. The multiplexing method of a nuclear power plant monitoring system according to claim 1, characterized in that: The operating conditions include design expansion conditions and severe accidents; Based on the operating condition, the monitoring status of the auxiliary monitoring system, the diversified human-machine interface panel or the extended operating condition emergency panel is started through the multi-channel switching system, including: When the operating condition is the designed extended condition, the unit is monitored or accident handling is performed through the diversified human-machine interface panel; When the operating condition is the severe accident, the unit is subjected to accident processing via the extended operating condition accident panel.

6. The multiplexing method of a nuclear power plant monitoring system according to claim 1, characterized in that: The auxiliary monitoring system reuses the display terminal of the main monitoring system, including: The operator workstation controls the display terminal to directly switch between the auxiliary monitoring system and the main monitoring system through a screen display switching switch.

7. The multiplexing method of a nuclear power plant monitoring system according to claim 1, characterized in that: The main monitoring system includes a nuclear island operator workstation, a conventional island operator workstation, a crew chief workstation, and a safety engineer workstation that reuse the display terminal, wherein the display terminal is respectively connected to the auxiliary monitoring system and the main monitoring system equipped with a life monitoring unit; The auxiliary monitoring system switches modes with the main monitoring system through a multi-channel switching system, including: When the main monitoring system displays a loss of life signal through the life monitoring unit, the main monitoring system is switched to the auxiliary monitoring system through the multi-channel switching system. At the same time, the working modes of the nuclear island operator workstation, conventional island operator workstation, crew chief workstation and safety engineer workstation are switched to the auxiliary monitoring system operation mode.

8. The multiplexing method of a nuclear power plant monitoring system according to claim 1, characterized in that: The nuclear power plant monitoring system also includes a large-screen display reused by the main monitoring system and the auxiliary monitoring system, for displaying the main parameters of the nuclear power plant, the status of the main equipment and the status of the safety protection system; the main monitoring system includes at least one operator workstation; All the operator workstations control the large-screen display through multi-channel multiplexing.

9. A nuclear power plant monitoring system, comprising a main monitoring system and an auxiliary monitoring system, characterized in that: The main monitoring system and the auxiliary monitoring system implement the multiplexing method of the nuclear power plant monitoring system according to any one of claims 1 to 8.

Images