Simulation Method and Device for Limit Fault in High Temperature Gas-Cooled Reactor Control Rod System

Abstract

This disclosure relates to the field of simulation technology, providing a method and apparatus for simulating limit faults in a high-temperature gas-cooled reactor (HTGR) control rod system. The method includes: receiving a limit fault simulation type input by a user; determining a simulation operation corresponding to the limit fault simulation type; and performing a limit fault simulation on the control rod system according to the simulation operation to obtain a simulation result corresponding to the limit fault simulation type. This disclosure effectively demonstrates the simulated phenomena and logic control simulation of limit faults in a HTGR control rod system. It can be applied to training scenarios for control rod system fault handling, thereby further improving the control rod system training system, enhancing the fault diagnosis and handling capabilities of HTGR operators, and evaluating the operators' basic reactive control capabilities and monitoring and reaction capabilities during control rod movement.

Description

Technical Field

[0001] This disclosure relates to the field of simulation technology, and in particular to a method and apparatus for simulating limit faults in a high-temperature gas-cooled reactor control rod system. Background Technology

[0002] The high-temperature gas-cooled reactor is equipped with two independent systems for reactivity control and shutdown control based on different operating principles: the control rod system (JDA) and the absorber ball shutdown system. The control rod system has normal reactivity control, compensation, and regulation functions, and can realize emergency shutdown and cold shutdown functions under various operating conditions.

[0003] Each reactor is equipped with 24 control rods, with the control rod channels located in the graphite-side reflector layer near the active region of the reactor core. The 24 control rods are divided into three groups: 6 safety rods, 6 regulating rods, and 12 compensating rods. Each of the 24 control rods is driven by a corresponding control rod drive mechanism, which uses a stepper motor as its power source.

[0004] The control rod system is equipped with upper limit switch, lower limit switch, and lower extreme limit switch to achieve redundancy and versatility in limit switching during rod descent. After the control rod triggers the corresponding limit switch, its open / closed state can be uniformly displayed on the human-machine interface.

[0005] In a control rod system, the primary function of the limit device is to restrict the upper and lower limit positions of the control rods. When a control rod reaches the upper or lower limit position of the reactor, the limit device provides an indication signal to the control rod system, causing the stepper motor power to be disconnected. This prevents the control rod from being lifted or lowered beyond its travel range, thus avoiding damage to the control rod components. In practical applications, the limit device uses a lead screw-nut transmission mechanism. The rotational motion of the stepper motor is transmitted to the lead screw after being reduced in speed by two stages of cylindrical gears. The lead screw drives the nut, converting the rotational motion into linear motion. Since electrodes are installed on both the upper and lower surfaces of the nut, contact between the nut and the upper and lower limit electrodes triggers corresponding electrical signals. These signals, acting as interlocking upper and lower limit signals for the control rods, are transmitted to the control rod system cabinet, causing the cabinet to stop the movement of the control rods.

[0006] However, when the limit device malfunctions, the movement of the control rod cannot be stopped by the interlock stop function. If the operator fails to detect this malfunction in time, the control rod will be raised or lowered beyond the corresponding stroke range, which can easily cause damage to the control rod components. Summary of the Invention

[0007] This disclosure aims to address at least one of the problems existing in the prior art by providing a method and apparatus for simulating limit faults in a high-temperature gas-cooled reactor control rod system.

[0008] One aspect of this disclosure provides a simulation method for simulating limit faults in a high-temperature gas-cooled reactor control rod system, the simulation method comprising:

[0009] Receive user input for limit switch fault simulation type;

[0010] Based on the limit fault simulation type, determine the simulation operation corresponding to the limit fault simulation type;

[0011] Based on the simulation operation, a limit fault simulation is performed on the control rod system to obtain the simulation results corresponding to the limit fault simulation type.

[0012] Optionally, determining the simulation operation corresponding to the limit fault simulation type based on the limit fault simulation type includes:

[0013] Based on the limit fault simulation type, a fault signal is determined, and the fault signal is used to indicate whether the limit fault simulation type corresponds to a limit fault condition;

[0014] The simulation operation is determined based on the fault signal and the current simulated state of the limit switch corresponding to the control rod system.

[0015] Optionally, determining the simulation operation based on the fault signal and the current simulation state of the limit switch corresponding to the control rod system includes:

[0016] Determine whether the fault signal indicates that the limit fault simulation type corresponds to the limit fault condition:

[0017] If so, then based on the fault signal and the current simulated state of the limit switch, determine the simulated fault operation corresponding to the limit fault simulation type;

[0018] If not, the fault signal is negated, and the simulated normal operation corresponding to the limit switch simulation type is determined based on the fault signal after the negation operation and the current simulation state of the limit switch.

[0019] Optionally, the step of performing a limit fault simulation on the control rod system based on the simulation operation to obtain the simulation results corresponding to the limit fault simulation type includes:

[0020] Based on the simulation operation, determine the data transfer file corresponding to the simulation operation;

[0021] The simulation results are obtained by performing a limit fault simulation based on the data transmission file.

[0022] Optionally, after obtaining the simulation results corresponding to the limit fault simulation type, the simulation method further includes:

[0023] The simulation results are then displayed.

[0024] Another aspect of this disclosure provides a simulation device for simulating limit faults in a high-temperature gas-cooled reactor control rod system.

[0025] Optionally, the simulation device includes:

[0026] The receiving module is used to receive the limit fault simulation type input by the user;

[0027] The limit switch simulation module is used to determine the simulation operation corresponding to the limit switch fault simulation type based on the limit switch fault simulation type.

[0028] The control simulation module is used to perform limit fault simulation on the control rod system according to the simulation operation, and obtain the simulation results corresponding to the limit fault simulation type.

[0029] Optionally, the limit simulation module includes:

[0030] The fault input unit is used to determine a fault signal based on the limit fault simulation type, wherein the fault signal is used to indicate whether the limit fault simulation type corresponds to a limit fault condition.

[0031] The limit switch simulation unit is used to simulate the limit switches of the control rod system and determine the current simulation state of the limit switches.

[0032] The integration unit is used to determine the simulation operation based on the fault signal and the current simulation state of the limit switch corresponding to the control rod system.

[0033] Optionally, the limit simulation module further includes:

[0034] The negation unit is used to determine whether the fault signal represents the limit fault simulation type corresponding to the limit fault condition:

[0035] If so, the fault signal is input to the integrated unit so that the integrated unit can determine the simulated fault operation corresponding to the limit switch fault simulation type based on the fault signal and the current simulation state of the limit switch.

[0036] If not, the fault signal is negated, and the negated fault signal is input into the integration unit so that the integration unit can determine the simulated normal operation corresponding to the limit switch fault simulation type based on the negated fault signal and the current simulation state of the limit switch.

[0037] Optionally, the control simulation module is specifically used to determine the data transfer file corresponding to the simulation operation based on the simulation operation; and to perform limit fault simulation based on the data transfer file to obtain the simulation result.

[0038] Optionally, the simulation device further includes:

[0039] The display module is used to display the simulation results.

[0040] Compared to existing technologies, the embodiments disclosed herein effectively demonstrate the simulated phenomena and logic control simulation of limit faults in the control rod system of a high-temperature gas-cooled reactor (HTGR). This can be applied to training scenarios for control rod system fault handling, thereby further improving the control rod system training system, enhancing the fault diagnosis and handling capabilities of HTGR operators, and evaluating the operators' basic reactive control capabilities and monitoring and reaction capabilities during control rod movement. Furthermore, the HTGR control rod system limit fault simulation method provided by this disclosure has simple logic and can be implemented through the human-machine interface and control rod system model of the simulation platform, exhibiting good software and hardware compatibility. Attached Figure Description

[0041] One or more embodiments are illustrated by way of example with the corresponding pictures in the accompanying drawings. These illustrations do not constitute a limitation on the embodiments. Elements with the same reference numerals in the drawings are denoted as similar elements. Unless otherwise stated, the figures in the drawings are not to be limited by scale.

[0042] Figure 1 A flowchart of a simulation method for limiting faults in a control rod system of a high-temperature gas-cooled reactor, provided as an embodiment of this disclosure;

[0043] Figure 2 A schematic diagram of the lower limit fault judgment logic provided for another embodiment of this disclosure;

[0044] Figure 3 A schematic diagram illustrating the control rod raising and lowering permission logic of a control rod system provided in another embodiment of this disclosure;

[0045] Figure 4 A schematic diagram of the processing logic of a control rod system fault handling module provided in another embodiment of this disclosure;

[0046] Figure 5 A schematic diagram illustrating the logic for generating the lower limit indicator signal of the control rod, provided in another embodiment of this disclosure;

[0047] Figure 6 A schematic diagram showing the indicator light display under non-fault conditions of the lower limit indicator, provided for another embodiment of this disclosure;

[0048] Figure 7 A schematic diagram showing the indicator light display in the event of a lower limit indicator failure, provided for another embodiment of this disclosure;

[0049] Figure 8 A schematic diagram of a high-temperature gas-cooled reactor control rod system limit fault simulation device provided for another embodiment of this disclosure;

[0050] Figure 9 This is a schematic diagram of a high-temperature gas-cooled reactor control rod system limit fault simulation device provided as another embodiment of the present disclosure. Detailed Implementation

[0051] The limit switches in the high-temperature gas-cooled reactor control rod system are categorized into upper limit, lower limit, and lower limit position. The upper and lower limits are implemented by limit switches within the control rod system. During normal operation, the control rod system, under the control of the Distributed Control System (DCS), performs energized rod lifting or insertion. The upper and lower limit interlocking functions are implemented by the upper limit switch and lower limit switch in the limit switch device, respectively. When the control rod reaches the upper limit position, the upper limit switch prevents further lifting to avoid exceeding the upper limit position. When the control rod reaches the lower limit position, the lower limit switch prevents further lowering to avoid exceeding the lower limit position. The limit switch device can also implement limit control and manipulation control of the control rods within the control rod system's fault handling module. The lower limit position is implemented by limit switches within the control rod system. The lower limit position can serve as the rod position starting point, providing installation positioning during control rod assembly. The lower limit switch signal can also serve as an interlock signal for local energized rod insertion into the drive cabinet, stopping the insertion operation via the limit switch.

[0052] Based on the above-mentioned limit characteristics of the control rod system, this disclosure provides a method and apparatus for simulating limit faults in the control rod system of a high-temperature gas-cooled reactor, so as to realize the simulation of limit faults in the control rod system of a high-temperature gas-cooled reactor.

[0053] To make the objectives, technical solutions, and advantages of the embodiments of this disclosure clearer, the various embodiments of this disclosure will be described in detail below with reference to the accompanying drawings. However, those skilled in the art will understand that many technical details have been provided in the various embodiments of this disclosure to facilitate a better understanding of the disclosure. However, the technical solutions claimed in this disclosure can be implemented even without these technical details and with various variations and modifications based on the following embodiments. The division of the various embodiments below is for ease of description and should not constitute any limitation on the specific implementation of this disclosure. The various embodiments can be combined with and referenced by each other without contradiction.

[0054] One embodiment of this disclosure relates to a simulation method S100 for simulating limit faults in a high-temperature gas-cooled reactor control rod system, the process of which is as follows: Figure 1 As shown, it includes:

[0055] Step S110: Receive the limit fault simulation type input by the user.

[0056] Specifically, the limit fault simulation types here can include upper limit fault simulation, lower limit fault simulation, and lower extreme fault simulation. More specifically, the limit fault simulation type can also be an upper limit fault simulation, lower limit fault simulation, or lower extreme fault simulation for a preset control rod in a preset reactor. For example, the limit fault simulation type input by the user can be a lower limit fault simulation of control rod S1 in reactor #2, an upper limit fault simulation of control rod S2 in reactor #2, or a lower extreme fault simulation of control rod C1 in reactor #2. Those skilled in the art can set it according to actual needs, and this embodiment does not limit it in this way.

[0057] Step S120: Determine the simulation operation corresponding to the limit fault simulation type based on the limit fault simulation type.

[0058] Specifically, when the limit fault simulation type is for a preset control rod in a preset reactor, the corresponding simulation operation is the simulated limit fault operation for that control rod, such as the simulated upper limit fault operation, the simulated lower limit fault operation, the simulated lower extreme limit fault operation, etc.

[0059] Step S130: Based on the simulation operation, perform limit fault simulation on the control rod system to obtain the simulation results corresponding to the limit fault simulation type.

[0060] Specifically, this step can perform corresponding limit fault simulations based on the simulation operations determined in step S120, such as simulating upper limit fault operation, simulating lower limit fault operation, and simulating lower extreme limit fault operation, thereby realizing the limit fault simulation of the control rod system according to the limit fault simulation type input by the user and obtaining the corresponding simulation results.

[0061] It should be noted that the simulation method S100 for simulating limit faults in the control rod system of a high-temperature gas-cooled reactor provided in this embodiment can be implemented using the 3KeyMaster simulation platform. The 3KeyMaster simulation platform is a nuclear power plant simulation support platform specifically designed for graphical modeling and dynamic graphics development. It features a WYSIWYG visual user interface, a rich simulation module library, and open custom module development components, enabling the simulation of multiple systems in a high-temperature gas-cooled reactor, including the control rod system. The 3KeyMaster simulation platform is a fully object-oriented nuclear power simulator development and operation platform. The 3KeyMaster platform predefines various types of objects, and by copying objects, setting parameters for objects, or connecting objects, modeling of nuclear power plant systems and equipment can be achieved.

[0062] Compared to existing technologies, this disclosure first receives the user-inputted limit fault simulation type, then determines the corresponding simulation operation based on the simulation type, and performs limit fault simulation on the control rod system according to the simulation operation to obtain the corresponding simulation results. This effectively realizes the simulation of limit fault phenomena and logic control simulation in the high-temperature gas-cooled reactor control rod system. It can be applied to training scenarios for control rod system fault handling, thereby further improving the control rod system training system, enhancing the fault diagnosis and handling capabilities of high-temperature gas-cooled reactor operators, and evaluating the operators' basic reactive control capabilities and monitoring and reaction capabilities during control rod movement. Furthermore, the high-temperature gas-cooled reactor control rod system limit fault simulation method provided by this disclosure has simple logic and can be implemented through the human-machine interface of the simulation platform and the control rod system model, exhibiting good software and hardware compatibility.

[0063] For example, step S120 may include: determining a fault signal based on the limit fault simulation type, the fault signal being used to indicate whether the limit fault simulation type corresponds to a limit fault condition; and determining a simulation operation based on the fault signal and the current simulation state of the limit switch corresponding to the control rod system.

[0064] Specifically, the user-input limit fault simulation type can be upper limit fault simulation, lower limit fault simulation, lower extreme limit fault simulation, or non-fault simulation. Therefore, to distinguish between fault simulations and non-fault simulations, different fault signals can be set for different limit fault simulation types. These fault signals indicate whether the limit fault simulation type corresponds to a limit fault situation (such as upper limit fault simulation, lower limit fault simulation, lower extreme limit fault simulation) or a limit non-fault situation (such as non-fault simulation).

[0065] For example, when the limit fault simulation type corresponds to a non-fault limit condition, such as a non-fault simulation, the fault signal can be set to 0. However, when the limit fault simulation type corresponds to a limit fault condition, such as an upper limit fault simulation, a lower limit fault simulation, or a lower extreme limit fault simulation, the fault signal can be set to the corresponding non-zero value to distinguish the fault signal in this case from the fault signal in the non-fault simulation.

[0066] The current simulated state of the limit switch corresponding to the control rod system is used to simulate the current state of the limit switch in the control rod system. It can be a fault simulation state corresponding to the current fault state of the limit switch, or a non-fault simulation state corresponding to the current non-fault state of the limit switch.

[0067] This implementation combines the limit fault simulation type with the current simulation state of the corresponding limit switch in the control rod system to determine the corresponding simulation operation, which can further realize the simulation phenomenon demonstration and logic control simulation of the limit fault in the high-temperature gas-cooled reactor control rod system.

[0068] For example, based on the fault signal and the current simulated state of the limit switch corresponding to the control rod system, the simulation operation is determined, including:

[0069] Determine whether the fault signal indicates a limit switch fault, and the corresponding limit switch fault situation in the simulation type:

[0070] If so, then determine the simulated fault operation corresponding to the limit fault simulation type based on the fault signal and the current simulated state of the limit switch;

[0071] If not, perform a NOT operation on the fault signal, and determine the simulated normal operation corresponding to the limit switch fault simulation type based on the fault signal after the NOT operation and the current simulated state of the limit switch.

[0072] Specifically, if the fault signal indicates a limit switch fault simulation type corresponding to a limit switch fault condition, it means the user wants to simulate a limit switch fault condition. In this case, the corresponding simulated fault operation can be determined based on the fault signal and the current simulated state of the limit switch. For example, if the limit switch fault simulation type corresponding to the fault signal is a lower limit switch fault simulation, and the current simulated state of the limit switch simulates the current fault state of the limit switch, then the determined simulated fault operation could be to continue the simulated fault state of the limit switch, continuing to simulate the failure of the limit switch's lower limit function. If the limit switch fault simulation type corresponding to the fault signal is a lower limit switch fault simulation, and the current simulated state of the limit switch simulates the current non-fault state of the limit switch, then the determined simulated fault operation could be to change the current simulated state of the limit switch to a simulated fault state, simulating the failure of the limit switch's lower limit function.

[0073] If the fault signal indicates that the limit switch fault simulation type corresponds to a non-limit switch fault condition, it means that the user wants to simulate the non-fault condition of the limit switch. In this case, if the fault signal is 0, after negating it to 1, the corresponding simulated normal operation can be determined by combining it with the current simulation state of the limit switch. This simulated normal operation represents the operation of simulating the non-fault condition, i.e., the normal limit condition, of the limit switch.

[0074] By determining whether the fault signal represents the limit fault situation corresponding to the limit fault simulation type, and by determining the simulated fault operation and simulated normal operation based on the judgment result, the simulation phenomenon demonstration and logic control simulation of the limit fault of the high-temperature gas-cooled reactor control rod system can be further refined, enriching the training scenarios for control rod system fault handling.

[0075] For example, step S130 may include: determining the data transfer file corresponding to the simulation operation based on the simulation operation; performing limit fault simulation based on the data transfer file to obtain the simulation result.

[0076] For example, when using the 3KeyMaster simulation platform to implement the simulation method S100 for limit faults in the control rod system of a high-temperature gas-cooled reactor, the data transfer file can be determined using the variables shown in Table 1 below:

[0077] Table 1. Variable names and corresponding descriptions involved in the data transfer file.

[0078] Serial Number variable name describe 1 N02CTLROD02.BLLS Control rod to lower limit switch signal 2 N02CTLROD02_BLLS_IN.Input4_i4 Control rod lower limit switch input 3 N02CTLROD02_BLLS.Output_i Lower limit indicator output signal generation 4 dcsc_inbH12JDA01GS002 DCS control logic signal introduction 5 PLC12CWB01DU201_02L Panel input / output system channel indication signals

[0079] Among them, the introduction of DCS control logic signals refers to building corresponding simulation control logic based on the control logic of the DCS for the control rod system. The panel input / output (I / O) system channel indicator signals refer to the channel indicator signals of the input / output system of the 3KeyMaster simulation platform.

[0080] For example, if the simulation operation requires the control rod to input the lower limit switch signal into the existing simulation control logic via the lower limit switch quantity of the control rod, then a JDA.ass point file can be written and implemented using the following instructions:

[0081] N02CTLROD02.BLLS N02CTLROD02_BLLS_IN.Input4_i4

[0082] If the simulation operation requires transmitting the lower limit indicator output signal generated by the simulation to the DCS control logic signal and the panel input / output system respectively, the NI_DVI.ass and Rodposition.ass files can be written using the following two commands:

[0083] N02CTLROD02_BLLS.Output_i dcsc_inbH12JDA01GS002

[0084] N02CTLROD02_BLLS.Output_i PLC12CWB01DU201_02L

[0085] By using data transfer files to simulate limit switch failures, training scenarios for handling control rod system failures can be further enriched.

[0086] For example, after obtaining the simulation results corresponding to the limit fault simulation type, the high-temperature gas-cooled reactor control rod system limit fault simulation method S100 further includes: displaying the simulation results.

[0087] Specifically, there are various ways to display simulation results, such as through indicator lights, text, charts, etc. This implementation method is not limited in this regard.

[0088] For example, this step can set a corresponding indicator light for each control rod. When the simulation result indicates that the limit function of a certain control rod is normal, the corresponding indicator light can be lit up to indicate this. When the simulation result indicates that the limit function of a certain control rod is malfunctioning, the corresponding indicator light can be kept off to indicate this. In this way, the simulation result can be displayed through indicator lights.

[0089] This implementation method displays the simulation results, providing a more intuitive presentation of the simulation outcomes.

[0090] To enable those skilled in the art to better understand the above embodiments, the following describes a simulation method for a lower limit fault in a high-temperature gas-cooled reactor control rod system.

[0091] First, combine Figure 2 The logic for judging lower limit switch faults is explained.

[0092] like Figure 2 As shown, Malfunction (fault) represents the lower limit fault signal of the control rod, the lower limit switch represents the lower limit switch signal of the control rod, NOT is used to negate the normal lower limit signal of the control rod when the lower limit is triggered normally. AND indicates that the lower limit switch signal is combined with the lower limit fault signal or the normal lower limit signal of the control rod to determine the lower limit position of the control rod, so as to display the lower limit position. Figure 2The lower limit fault judgment logic states that when the lower limit of the control rod is triggered normally without triggering a lower limit fault, the lower limit position of the control rod will be displayed normally. However, when a lower limit fault is triggered, the lower limit position of the control rod will no longer be displayed normally, the lower limit interlock control rod stop logic will no longer function, and the control rod can still be inserted downwards.

[0093] Figure 3 The logic for enabling the raising and lowering of the control rod system is defined as follows: UPL indicates that the control rod is at the upper limit, FT indicates that the control rod is in a fault state, EM indicates an emergency shutdown state, DWL indicates that the control rod is at the lower limit, PEUP indicates that raising the control rod is permitted, PEDW indicates that lowering the control rod is permitted, and hollow circles represent negation operations.

[0094] Figure 3 This indicates that the control rod should not be raised under the following conditions during normal operation:

[0095] (1) The control bar has reached its upper limit;

[0096] (2) The control rod is in a faulty state;

[0097] (3) An emergency shutdown occurred.

[0098] In other words, when the control rod is operating normally, it is only allowed to be raised when UPL, FT, and EM are negated simultaneously. That is, the control rod is only allowed to be raised when the following conditions are met:

[0099] (1) The control bar has not reached the upper limit position;

[0100] (2) The control rod is not in a faulty state;

[0101] (3) No emergency shutdown incidents occurred.

[0102] at the same time, Figure 3 It also states that if the control rod is operating normally, it is not allowed to descend under the following conditions:

[0103] (1) The control bar has reached the lower limit;

[0104] (2) The control rod is in a faulty state;

[0105] (3) An emergency shutdown occurred.

[0106] In other words, when the control stick is operating normally, it is only allowed to descend when DWL, FT, and EM are negated simultaneously. That is, the control stick is only allowed to descend when the following conditions are met:

[0107] (1) The control rod has not reached the lower limit;

[0108] (2) The control rod is not in a faulty state;

[0109] (3) No emergency shutdown incidents occurred.

[0110] Therefore, when the lower limit of the control rod fails and the control rod reaches the lower limit, the control rod can continue to descend because the limiting function of the limit device fails. If it is not controlled, the control rod can descend directly to the lower limit position before stopping.

[0111] To address the issue of control rod malfunction, the following measures are adopted: Figure 4 The processing logic of the control rod system fault handling module shown is used for operation. Here, XBDW represents the rod selection signal, UP represents the rod lifting command, UPL represents the control rod at the upper limit, FT represents the control rod in a fault state, BP represents the current rod position, 200 represents the maximum movement distance of the control rod being 200mm, EM represents the emergency shutdown state, DWL represents the control rod at the lower limit, DW represents the rod lowering command, BCB indicates whether it is a compensation rod, PUP represents protective rod lifting, PDW represents protective rod lowering, OR represents an OR operation, AND represents an AND operation, BPCT01 represents the continuous operation quantity setting and displacement calculation unit 01, BPCT represents the continuous operation quantity setting and displacement calculation, RCL represents the control signal, LP represents the displacement setpoint, STP indicates that the rod lifting / lowering is in place, and the hollow circle represents the NOT operation.

[0112] according to Figure 4 The processing logic shown can handle control rod malfunctions and allow rod lifting operations when the following conditions are met:

[0113] (1) The malfunctioning control rod was selected and a rod lifting command was issued;

[0114] (2) The control bar has not reached the upper limit position;

[0115] (3) The maximum movement distance of the control rod that malfunctions is limited to 200mm.

[0116] Under these conditions, the malfunctioning control rod can only be handled manually. The operator needs to select the corresponding control rod through the key switch on the control panel, then raise the control rod to a maximum distance of 200mm, and then lower the control rod until it reaches the lower limit position.

[0117] For control rod fault conditions that occur during the cold shutdown and rod lowering process, rod lowering is permitted under the following conditions:

[0118] (1) The faulty control rod was selected and a lowering command was issued;

[0119] (2) The control rod has not reached the lower limit position;

[0120] (3) The reactor has been shut down in an emergency.

[0121] (4) Select the lower compensating rod for cold shutdown.

[0122] When performing a rod lowering operation, the corresponding control rod needs to be selected on the control console. Only one control rod can be selected at a time. After the control rod is selected, it is manually lowered until it reaches the lower limit position. This process is repeated for the other compensating rods until all compensating rods reach the lower limit position. After an emergency shutdown, the rod lowering operation is only effective for the 12 compensating rods.

[0123] Combining the logic function of the lower limit switch of the control rod system, when simulating the lower limit switch fault of the control rod, the 3KeyMaster simulation platform is used to implement the simulation method S100 for the limit switch fault of the control rod system in the high temperature gas-cooled reactor.

[0124] Taking safety bar S1 of stack #2 as an example, the fault function of the lower limit indicator of the safety bar is simulated.

[0125] First, the logic for generating the lower limit indicator signal of the control rod was built using the 3KeyMaster simulation platform. The built logic for generating the lower limit indicator signal of the control rod is as follows: Figure 5 As shown. Among them, It is denoted as Malfunction, and its corresponding fault name is defined as mf2JDA18. It is denoted as lgConvertType, which means that the lower travel switch quantity of the safety bar S1 of the #2 stack is introduced into the control bar lower limit indicator signal generation logic built on the 3KeyMaster simulation platform, and named N02CTLROD02_BLLS_IN. This is denoted as lgNOT, representing the negation module. Under normal fault conditions, the output of mf2JDA18 is zero; this output can be converted to 1 using the negation module. It is denoted as lgAND, which represents the logic "AND" module. The output signal of this module can be connected to the panel and control rod of the 3KeyMaster simulation platform to generate logic and trigger the output of the lower limit indicator signal, named N02CTLROD02_BLLS.

[0126] according to Figure 5 The logic for generating the lower limit indicator signal of the control stick shown is as follows: When a fault is inserted into the mf2JDA18 fault on the 3KeyMaster simulation platform's teaching console, and the non-fault condition of the lower limit indicator is simulated (i.e., the output of mf2JDA18 is zero), the following can be obtained: Figure 6The indicator lights are shown in the diagram. A gray box corresponding to the lower limit indicates the indicator light is on, while a white box corresponding to the lower limit indicates the indicator light is off. It can be seen that the lower limit indicator light corresponding to safety bar S1 in stack #2 is on, indicating that the simulation result at this time corresponds to a non-fault condition indicated by the lower limit position.

[0127] according to Figure 5 The logic for generating the lower limit indicator signal of the control stick shown is as follows: When an mf2JDA18 fault is inserted into the teaching console of the 3KeyMaster simulation platform, and the fault condition of the lower limit indicator is simulated (i.e., the output of mf2JDA18 is not zero), the following can be obtained: Figure 7 The indicator lights shown indicate that the white box corresponding to the lower limit of safety bar S1 in stack #2 indicates that its lower limit indicator light is not lit, while the gray boxes corresponding to the lower limits of other control bars indicate that their lower limit indicator lights are lit. This shows that the simulation result at this time corresponds to the fault condition of the lower limit indicator.

[0128] In actual use of this fault simulation, when the operator lowers the control rod to its lower limit position, if a lower limit fault simulation is inserted during the descent but before reaching the lower limit position, the lower limit interlock stop function of the control rod will fail. If the operator's monitoring is insufficient or the anticipation is inadequate, the control rod will unexpectedly descend to the lower limit position. Therefore, using limit fault simulation can further evaluate the basic reactive control capabilities of nuclear power plant operators and their ability to monitor and react to the control rod movement process.

[0129] Another embodiment of this disclosure relates to a simulation device 100 for simulating limit faults in a high-temperature gas-cooled reactor control rod system, such as... Figure 8 As shown, it includes:

[0130] The receiving module 801 is used to receive the limit fault simulation type input by the user;

[0131] The limit switch simulation module 802 is used to determine the simulation operation corresponding to the limit switch fault simulation type based on the limit switch fault simulation type.

[0132] The control simulation module 803 is used to perform limit fault simulation on the control rod system according to the simulation operation, and obtain the simulation results corresponding to the limit fault simulation type.

[0133] For example, the limit simulation module 802 includes:

[0134] The fault input unit is used to determine the fault signal according to the limit fault simulation type. The fault signal is used to indicate whether the limit fault simulation type corresponds to the limit fault condition.

[0135] The limit switch simulation unit is used to simulate the limit switches of the control rod system and determine the current simulation state of the limit switches;

[0136] The integrated unit is used to determine the simulation operation based on the fault signal and the current simulation state of the limit switch corresponding to the control rod system.

[0137] For example, the limit simulation module 802 also includes:

[0138] The negation unit is used to determine whether the fault signal represents the limit fault simulation type corresponding to the limit fault condition:

[0139] If so, the fault signal is input into the integrated unit so that the integrated unit can determine the simulated fault operation corresponding to the limit fault simulation type based on the fault signal and the current simulation state of the limit switch.

[0140] If not, the fault signal is negated, and the negated fault signal is input into the integration unit so that the integration unit can determine the simulated normal operation corresponding to the limit fault simulation type based on the negated fault signal and the current simulation state of the limit switch.

[0141] For example, the control simulation module 803 is specifically used to determine the data transfer file corresponding to the simulation operation based on the simulation operation; and to perform limit fault simulation based on the data transfer file to obtain the simulation result.

[0142] For example, such as Figure 9 As shown, the high-temperature gas-cooled reactor control rod system limit fault simulation device 100 also includes:

[0143] Display module 804 is used to display simulation results.

[0144] The specific implementation method of the high-temperature gas-cooled reactor control rod system limit fault simulation device provided in this disclosure can be found in the high-temperature gas-cooled reactor control rod system limit fault simulation method provided in this disclosure, and will not be repeated here.

[0145] Compared with the prior art, the embodiments disclosed herein effectively realize the simulation of limit failure of the control rod system in high-temperature gas-cooled reactors and the simulation of logic control. They can be applied to training scenarios for control rod system failure handling, thereby further improving the control rod system training system, enhancing the failure diagnosis and handling capabilities of high-temperature gas-cooled reactor operators, and evaluating the basic reactive control capabilities of operators and their monitoring and reaction capabilities during control rod movement.

[0146] Those skilled in the art will understand that the above embodiments are specific implementations of this disclosure, and in practical applications, various changes can be made to them in form and detail without departing from the spirit and scope of this disclosure.

Claims

1. A method for simulating a control rod system limit fault of a high temperature gas cooled reactor, characterized in that, The simulation method comprises: receiving a user inputted limit fault simulation type; the limit fault simulation type comprises upper limit fault simulation, lower limit fault simulation, lower extreme limit fault simulation and non-fault simulation; determining a simulation operation corresponding to the limit fault simulation type according to the limit fault simulation type; performing limit fault simulation on a control rod system according to the simulation operation to obtain a simulation result corresponding to the limit fault simulation type; determining a fault signal according to the limit fault simulation type, the fault signal being used to indicate whether the limit fault simulation type corresponds to a limit fault condition; and determining the simulation operation according to the fault signal and a current simulation state of a travel switch corresponding to the control rod system; in the actual use of the fault simulation, when an operator generates a control rod lowering operation, if it is required to lower the control rod to a lower limit position, and if a lower limit fault simulation of the control rod is inserted during the lowering of the control rod and before the lower limit position is reached, the lower limit interlock stop function of the control rod is disabled, and if the operator has a monitoring deficiency or an insufficient early prediction, the control rod will be lowered to a lower extreme limit position by accident; when the following conditions are met, the fault condition of the control rod is processed, and a rod lifting operation is allowed: a control rod that has a fault is selected, and a rod lifting instruction is issued; the control rod does not reach an upper limit position; a maximum moving distance limit of the control rod that has a fault is 200 mm; under these conditions, the control rod that has a fault is processed by manual operation, the operator selects the corresponding control rod through a piano key switch on a console, and then the control rod is lifted, the maximum lifting distance is limited to 200 mm, and then the control rod is lowered until the control rod is lowered to the lower limit position; for the control rod fault state generated in the cold shutdown de-energized rod dropping process, when the following conditions are met, a rod lowering operation is allowed: a control rod that has a fault is selected, and a rod lowering instruction is issued; the control rod does not reach a lower limit position; the reactor has been emergency shut down; a lower compensation rod is selected for cold shutdown; when the rod lowering operation is performed, the corresponding control rod is selected on the console, only one control rod can be selected each time, the control rod is manually lowered after being selected, and the other compensation rods are sequentially operated until the compensation rods reach the lower limit position; after the emergency shutdown, the rod lowering operation is only effective for the compensation rods.

2. The simulation method of claim 1, wherein, determining a simulation operation corresponding to the limit fault simulation type according to the limit fault simulation type, comprising: determining a fault signal according to the limit fault simulation type, the fault signal being used to indicate whether the limit fault simulation type corresponds to a limit fault condition; and determining the simulation operation according to the fault signal and a current simulation state of a travel switch corresponding to the control rod system; if yes, determining a simulation fault operation corresponding to the limit fault simulation type according to the fault signal and the current simulation state of the travel switch; If not, the fault signal is subjected to a NOT operation, and according to the fault signal after the NOT operation and the current analog state of the travel switch, the analog normal operation corresponding to the limit fault simulation type is determined.

3. The simulation method according to claim 1 or 2, characterized in that, According to the simulation operation, the control rod system is subjected to limit fault simulation, and the simulation result corresponding to the limit fault simulation type is obtained. According to the simulation operation, the data transfer file corresponding to the simulation operation is determined. According to the data transfer file, the limit fault simulation is performed, and the simulation result is obtained.

4. The simulation method of claim 1 or 2, wherein, After the simulation result corresponding to the limit fault simulation type is obtained, the simulation method further comprises: The simulation result is displayed.

5. A simulation device for simulating a control rod system limit fault of a high temperature gas cooled reactor, characterized in that, The simulation device comprises: The receiving module is configured to receive a limit fault simulation type input by a user, wherein the limit fault simulation type comprises upper limit fault simulation, lower limit fault simulation, lower limit fault simulation, and non-fault simulation. The limit simulation module is configured to determine a simulation operation corresponding to the limit fault simulation type according to the limit fault simulation type. The control simulation module is configured to perform limit fault simulation on the control rod system according to the simulation operation, and obtain a simulation result corresponding to the limit fault simulation type. The limit simulation module comprises: The fault input unit is configured to determine a fault signal according to the limit fault simulation type, wherein the fault signal is used to indicate whether the limit fault simulation type corresponds to a limit fault condition. The travel switch simulation unit is configured to simulate a travel switch of the control rod system and determine a current simulation state of the travel switch. The comprehensive unit is configured to determine the simulation operation according to the fault signal and the current simulation state of the travel switch corresponding to the control rod system. In the actual use of fault simulation, when the operator generates a control rod lowering operation, if the control rod needs to be lowered to the lower limit position, if the lower limit fault simulation of the control rod is inserted during the lowering process of the control rod and before the lower limit position is reached, the lower limit interlock stop function of the control rod is disabled, and if the operator has insufficient monitoring or insufficient early prediction, the control rod will accidentally drop to the lower limit position. When the following conditions are met, the fault condition of the control rod is handled, and the rod lifting operation is allowed: the control rod that has failed is selected, and the rod lifting instruction is issued; the control rod does not reach the upper limit position; the maximum moving distance limit of the control rod that has failed is 200 mm; under these conditions, the control rod that has failed is handled by manual operation, the operator selects the corresponding control rod through the keyboard switch on the console, and then the control rod is lifted, the maximum lifting distance is limited to 200 mm, and then the control rod is lowered until the control rod is lowered to the lower limit position. In the control rod failure state generated in the cold shutdown de-energized rod dropping process, the rod dropping operation is allowed to be performed when the following conditions are met: the selected control rod is malfunctioning, and the rod dropping instruction is issued; the control rod does not reach the lower limit position; the reactor has been emergency shut down; the lower insertion compensation rod is selected for cold shutdown; when the rod dropping operation is performed, the corresponding control rod is selected on the control console, only one control rod can be selected each time, the control rod is selected and manually operated, and the control rod is dropped to the lower limit position, and the other compensation rods are sequentially operated until the compensation rods reach the lower limit position; after the emergency shutdown, the rod dropping operation is only effective for the compensation rods.

6. The emulation apparatus of claim 5, wherein, The limit simulation module further includes: The NOT taking unit is configured to determine whether the fault signal indicates that the limit fault simulation type corresponds to the limit fault condition: If yes, the fault signal is input into the comprehensive unit, so that the comprehensive unit determines the simulated fault operation corresponding to the limit fault simulation type according to the fault signal and the current simulation state of the travel switch; If no, the fault signal is subjected to NOT taking operation, and the fault signal after the NOT taking operation is input into the comprehensive unit, so that the comprehensive unit determines the simulated normal operation corresponding to the limit fault simulation type according to the fault signal after the NOT taking operation and the current simulation state of the travel switch.

7. The simulation device according to claim 5 or 6, wherein the control simulation module is specifically configured to determine a data transfer file corresponding to the simulation operation according to the simulation operation, and perform limit fault simulation according to the data transfer file to obtain the simulation result. The simulation device further includes:

8. The emulation apparatus according to claim 5 or 6, characterized by The display module is configured to display the simulation result. ​

Images