Safety interlock method for a pulsed power device

Abstract

The present application relates to a kind of safety interlocking methods, specifically, a kind of safety interlocking methods of pulse power device, solve the technical problem that existing safety interlocking system cannot meet single operation pulse power device laboratory strong electromagnetic interference / ionizing radiation, wide range multi-point deployment requirement.The safety interlocking methods of pulse power device, comprising the following steps:1】The equipment in safety interlocking system is classified as high sensitive equipment and low sensitive equipment;The area in safety interlocking system is divided into low interference area and high interference area;2】to low sensitive device in low interference area of safety interlocking system, low sensitive device in high interference area, high sensitive equipment of low interference area, using conventional protection means;To high sensitive equipment in high interference area of safety interlocking system, build reinforced interlocking system;N is greater than or equal to 1 integer;3】operation, to realize the reliable safety interlocking of pulse power device.

Description

Technical Field

[0001] This invention relates to a safety interlocking method, specifically a safety interlocking method for a pulse power device. Background Technology

[0002] A pulsed power device is a device that generates high voltage, high current, and high electromagnetic pulses or ionizing radiation in a short period of time. Marx-type large high-power pulsed power devices typically operate in single-cycle mode. They are generally charged by a constant current power supply until the operating voltage (hundreds of kilovolts) is reached. Then, multiple high-pressure gas switches are triggered to discharge simultaneously, thereby generating high voltage (several mV) and high current (hundreds of kA). The energy is released in an extremely short time (tens of ns), which can produce high-power electromagnetic pulses or ionizing radiation. This can easily cause nearby electronic equipment to stop working, power supply breakdown, or component burnout.

[0003] The safety interlock system is a crucial component of the pulsed power device control system. It is used to suspend or terminate the device's operation in hazardous situations, minimizing and mitigating risks to ensure the safety of the device and personnel. As the last line of defense for safety protection, the stability and reliability of the safety interlock system are paramount. However, the safety interlock system for pulsed power devices differs from that of conventional accelerators, and its operating environment has the following characteristics:

[0004] (1) Strong electromagnetic interference. When the pulse power device discharges, it generates high voltage, fast leading edge, and large current discharge. Through conducted interference and spatial electromagnetic radiation interference, it couples to the power supply and communication cables of nearby safety interlocking system electrical equipment, causing device failure or high voltage breakdown. When the pulse power device is running, it will generate a fast leading edge impulse grounding current of several kA, causing the ground grid voltage to rise, resulting in overvoltage or undervoltage of the power supply near the pulse power device, causing electronic equipment to break down or shut down; the switching discharge generates spatial electromagnetic radiation of tens of kV / m, which couples to the cable, generating a high voltage of several kV, causing electronic equipment failure.

[0005] (2) Strong ionizing radiation. When a pulsed power device discharges, if a high atomic number metal material is used as the anode target, X-rays, gamma rays, etc. will be generated. These rays will cause instantaneous ionizing radiation effects, displacement damage, and other nuclear radiation effects on electronic devices and electronic systems, leading to a decline in the performance of electronic systems or even damage, and loss of their ability to work reliably.

[0006] (3) The interlocking points are far apart, widely distributed, and numerous. When the pulse power device is running, the dangerous area is large, there are many related objects, and there are many points that need to be interlocked, which are far apart. In the past, a scheme was adopted with one PLC as the center and other points connected one by one by pure cable. The wiring was long, the interference was great, and the implementation was difficult. Summary of the Invention

[0007] The purpose of this invention is to address the technical problem that existing safety interlocking systems cannot meet the requirements of strong electromagnetic interference / ionizing radiation and large-scale multi-point deployment of pulse power devices in laboratory settings during single-operation. This invention provides a safety interlocking method for pulse power devices to achieve reliable safety interlocking.

[0008] The concept of this invention is:

[0009] When a large pulse power device is discharged under controlled conditions during a single operation, a transient strong electromagnetic interference / ionizing radiation will be generated in the effect area of ​​the pulse power device, with a duration of <1s. Under normal operating conditions, when an electronic system is powered on, it is subjected to electromagnetic interference / ionizing radiation, and its own operating point changes, which manifests as a sudden increase in current, insulation breakdown, power supply overload short circuit or open circuit, etc., which ultimately causes some or all electronic components in the system to fail, system functions to be lost or damaged, and the pulse power device cannot be safely interlocked. However, when an electronic system is not powered on, it often has a strong ability to resist electromagnetic interference / ionizing radiation. This is because: (1) when the power is off, the high-voltage surge coupled from the power line will be cut off, blocking the path of conducted interference; (2) when the electronic system is operating within a certain range of electrical parameters, electromagnetic interference / ionizing radiation will cause disturbances in the various components of the system, and the various parameters in the system will exceed the rated range, causing the components to fail or be damaged. Therefore, before electromagnetic interference / ionizing radiation occurs, turning off the power supply of the electronic system can reduce the risk of failure and component damage and improve the anti-interference capability of the electronic system.

[0010] Within a very short time (<1s) before the pulse power device discharges, the main control module sends a shutdown command to the sub-node that needs to be reinforced. Upon receiving the command, the reinforced sub-node shuts off its power, causing it to be de-energized and avoid power loss. Simultaneously, the sub-node's power-off delay relay (a purely mechanical structure) is activated, initiating a delay. After this very short time (<1s), the pulse power device discharges. After the power-off delay relay reaches its set time (1-2s), the power is restored, and the reinforced sub-node resumes operation. Throughout this process, the power-off avoidance time for the reinforced sub-node is on the order of seconds, and it resumes its pre-power-off operation after power-on. The main control module and operators can disregard the power-off of the reinforced sub-node, and the entire safety interlock system operates continuously.

[0011] To solve the above-mentioned technical problems and realize the above-mentioned inventive concept, the technical solution adopted by the present invention is as follows:

[0012] A safety interlocking method for a pulse power device, characterized by comprising the following steps:

[0013] 1. In a safety interlocking system, devices with an internal working voltage ≤24V, or those using chips for logic control, data acquisition, or signal transmission are classified as highly sensitive devices; mechanical switches, passive working devices, or devices with an internal insulation voltage greater than 500V are classified as low sensitive devices; and areas in a safety interlocking system are divided into low-interference areas and high-interference areas based on electromagnetic interference intensity or ionizing radiation intensity indicators.

[0014] 2. Conventional protection measures should be adopted for low-sensitivity devices in low-interference areas, low-sensitivity devices in high-interference areas, and high-sensitivity devices in low-interference areas of the safety interlock system.

[0015] For highly sensitive equipment in high-interference areas of the safety interlocking system, a rugged interlocking system is constructed. The rugged interlocking system includes a power supply module, a main control module, N rugged sub-node modules, and N sub-node power supply components connected in sequence; N is an integer greater than or equal to 1.

[0016] 3. Run:

[0017] 3.1 Based on the operating progress of the pulse power device, the main control module issues a power-down command to N hardened sub-node modules before the arrival of the instantaneous electromagnetic interference / ionizing radiation pulse;

[0018] 3.2N reinforced sub-node modules execute a power-down command, cut off their own power supply, and start timing;

[0019] 3.3 During the timing period, the pulse power device outputs, completing one experiment, and the strong electromagnetic interference / ionizing radiation is instantaneously generated and then terminated;

[0020] 3.4 When the timer for the child node power supply component ends, power will be automatically restored.

[0021] Furthermore, in step 2], the main control module includes a main control PC and a controller that communicates with the main control PC; both the main control PC and the controller are connected to the power supply module.

[0022] Each reinforced sub-node module includes a sub-node PLC and sensor components;

[0023] The controller communicates with the child node PLC via optical fiber;

[0024] The power supply terminal of the sensor component is connected to the output terminal of the corresponding sub-node power supply component; the output terminal of the sensor component is connected to the input terminal of the corresponding sub-node PLC; the sub-node PLC is connected to the sub-node power supply component; the sub-node power supply component is connected to the external mains power.

[0025] Furthermore, in step 2], the power supply components for the sub-node include a power-off delay relay, a DC power supply, and a contactor;

[0026] One end of the power-off delay relay and one end of the contactor are respectively connected to the external mains power, and the other end is respectively connected to the input terminal of the DC power supply.

[0027] The output terminal of the DC power supply is connected to the power supply terminal of the sub-node PLC, the power supply terminal of the sensor assembly, and the drive terminal of the power-off delay relay, respectively.

[0028] The input terminal of the sub-node PLC is connected to the coil of the contactor to control the energization or de-energization of the contactor.

[0029] Furthermore, in step 2], the sensor components include a camera, an audible and visual alarm, an emergency stop switch, and a door control switch;

[0030] The power supply terminals of the camera and the audible and visual alarm are respectively connected to the output terminal of the DC power supply;

[0031] The output terminals of the camera, the audible and visual alarm, the emergency stop switch, and the door control switch are respectively connected to the input terminals of the corresponding sub-node PLC.

[0032] Step 3.1 specifically involves:

[0033] 3.1.1 Power on the controller;

[0034] 3.1.2 The controller sends a query command to each sub-node PLC, and each sub-node PLC returns its own status information to the controller;

[0035] 3.1.3 The controller receives status information returned by each sub-node PLC;

[0036] 3.1.4 The controller determines the working status of each sub-node PLC based on the status information returned by each sub-node PLC;

[0037] If any of the sub-node PLCs malfunction, the main control PLC sends a pause / termination command to the pulse power device control system. The controller manually judges the working status of each sub-node PLC and takes corresponding measures until the fault is eliminated. Then, the system returns to step 3.1.2 and updates the status list of the sub-node PLCs.

[0038] If all PLCs in each sub-node are working properly, proceed to step 3.1.5;

[0039] 3.1.5 The controller determines the alarm status of each sub-node PLC based on the status information returned by each sub-node PLC;

[0040] If any sub-node PLC experiences an alarm, the main control PLC sends a pause / stop command to the pulse power device control system. The controller manually determines the alarm level and type and takes appropriate measures until the alarm is cleared. Then, the main control PLC sends an alarm clear command to the sub-node PLC, clears the alarm, and returns to step 3.1.2. If no alarm occurs, proceed to step 3.1.6.

[0041] 3.1.6 Upon entering the experimental state, the controller sends a power-down command to the sub-node PLC at the first preset time dT1 before the pulse power device control system is about to be triggered; the first preset time dT1 is the maximum time delay from when the sub-node PLC receives the power-down command to when the power-off delay relay completely cuts off the power.

[0042] 3.1.7 After the controller waits for the second preset time dT2, it updates the alarm list of the sub-node PLC and returns to step 3.1.2; the second preset time dT2 is the time for each sub-node PLC to work normally from power-down to power-on.

[0043] Furthermore, step 3.2 specifically includes:

[0044] 3.2.1 When the sub-node PLC receives the power-down command from the controller, it saves the parameters of the sub-node PLC and prepares for power-down.

[0045] 3.2.2 The sub-node PLC sends a power-down command to the corresponding contactor;

[0046] 3.2.3 The contactor cuts off the power supply to the PLC of this sub-node, and the power-off delay relay starts timing.

[0047] Furthermore, step 3.4 specifically includes:

[0048] The power-off delay relay stops timing after the second preset time dT2 is reached, and the power supply to the sub-node PLC is restored at the same time; the second preset time dT2 is the normal working time of each sub-node PLC from power-off to power-on.

[0049] After the controller waits for the second preset time dT2, it returns to step 3.1.2.

[0050] Further, in step 3.1.2, the specific steps for each sub-node PLC to return its respective status information to the controller are as follows:

[0051] 3.1.2.1 Each child node PLC traverses all IO ports under its own child node PLC; based on the input level of the IO port, updates the IO status list in the corresponding child node PLC, and at the same time updates the alarm list;

[0052] 3.1.2.2 The sub-node PLC sets the corresponding alarm status according to the alarm list;

[0053] 3.1.2.3 When the child node PLC receives a query command from the controller, the child node PLC uploads the IO status list and alarm list to the controller;

[0054] In step 3.1.5, the specific steps for clearing the alarm on the sub-node PLC are as follows:

[0055] The child node PLC receives the alarm cancellation command from the controller, stops the alarm, and updates the alarm list.

[0056] Furthermore, in step 2], the conventional protection measures include grounding, shielding, lightning protection, and surge protection;

[0057] In step 3.2.1, the parameter of the sub-node PLC is specifically the program pointer.

[0058] Furthermore, the controller can be a PLC, MCU, microcontroller, or programmable controller;

[0059] The sub-node PLC uses a power-loss protected PLC;

[0060] The emergency stop switch is connected to the sub-node PLC via a double-core shielded cable, and the connection method is normally closed.

[0061] The door control switch is connected to the sub-node PLC via a double-core shielded cable, and the connection method is normally open.

[0062] The camera is a motion detection camera.

[0063] Compared with the prior art, the beneficial effects of the technical solution of the present invention are:

[0064] (1) The safety interlocking method of the pulse power device of the present invention classifies the equipment in the safety interlocking system into high-sensitivity equipment and low-sensitivity equipment, and divides the area in the safety interlocking system into low-interference area and high-interference area; based on the above high-low level division, the proposed four-quadrant rule (i.e., low-sensitivity devices in low-interference area, low-sensitivity devices in high-interference area, high-sensitivity devices in low-interference area and high-sensitivity devices in high-interference area) defines the range of equipment that must be "reinforced", reducing the difficulty of "reinforcement" implementation.

[0065] (2) The safety interlocking method of the pulse power device of the present invention adopts a "reinforcement" method of power-off avoidance, automatic power-on and program continued operation for highly sensitive equipment in high interference areas, which can quickly improve the anti-interference capability of highly sensitive equipment in interference areas.

[0066] (3) The safety interlocking method of the pulse power device of the present invention ensures smooth operation of the safety interlocking system of the pulse power device and provides a good user experience. For the equipment in the reinforced sub-node module, it briefly powers down to avoid interference before it arrives, and then quickly powers up to work. The main control PLC program automatically restores the state before power-down. All operations are completed automatically without user intervention.

[0067] (4) The safety interlocking method of the pulse power device of the present invention can achieve high resistance to electromagnetic interference / ionizing radiation interference. The delay function involved is implemented by mechanical means, which cuts off the interference propagation path from the electrical connection and greatly improves the stability of the pulse power device control system itself.

[0068] (5) The safety interlocking method for pulse power devices of the present invention can significantly improve the electromagnetic interference / ionizing radiation resistance of electrical components in the safety interlocking system without increasing equipment costs or construction expenses, thereby improving the stability and reliability of the safety interlocking system and meeting the operational needs of large pulse power devices operating in a single run. This method can also be applied to other environments with strong electromagnetic interference / ionizing radiation, offering advantages such as low cost and broad application prospects. Attached Figure Description

[0069] Figure 1 This is a time-content diagram of a single operation of the pulse power device in an embodiment of the safety interlocking system for the pulse power device of the present invention;

[0070] Figure 2 This is a schematic diagram of an embodiment of the control system for the pulse power device of the present invention;

[0071] Figure 3 This is a schematic diagram of the sub-node power supply component in an embodiment of the control system for the pulse power device of the present invention;

[0072] Figure 4 This is a flowchart illustrating the operation of the central control PLC in an embodiment of the safety interlocking method for the pulse power device of the present invention.

[0073] Figure 5 This is a flowchart illustrating the process of the reinforced sub-node module in an embodiment of the safety interlocking method for pulse power devices of the present invention. Detailed Implementation

[0074] like Figure 1As shown, this embodiment applies the safety interlocking method of the pulse power device of the present invention to a large-scale pulse power device operating in a single run. The operation process of a large-scale pulse power device operating in a single run includes five stages: preparation, power-on, instantaneous discharge, post-processing, and shutdown. Based on the characteristics of the pulse power laboratory and according to the influence range of the pulse power device and the anti-interference capability of the electrical system of the safety interlocking device, the safety interlocking system is divided into a "conventional system" and a "reinforced system," narrowing down the scope requiring "reinforcement." It is stipulated that sensors within a certain range (cable length less than 10-20 meters) are controlled by a single central control module, forming a "node" unit. A node is the smallest control unit. Electronic components in the "conventional sub-nodes" are designed and installed according to general electrical principles, ensuring uninterrupted power supply during operation.

[0075] The safety interlocking method for the pulse power device of the present invention includes the following steps:

[0076] 1. In a safety interlocking system, devices with an internal working voltage ≤24V, or those using chips for logic control, data acquisition, or signal transmission are classified as highly sensitive devices; mechanical switches, passive working devices, or devices with an internal insulation voltage greater than 500V are classified as low sensitive devices; and areas in a safety interlocking system are divided into low-interference areas and high-interference areas based on electromagnetic interference intensity or ionizing radiation intensity indicators.

[0077] 2. Conventional protection measures should be adopted for low-sensitivity devices in low-interference areas, low-sensitivity devices in high-interference areas, and high-sensitivity devices in low-interference areas of the safety interlock system.

[0078] For highly sensitive equipment in high-interference areas of the safety interlocking system, a rugged interlocking system is constructed. The rugged interlocking system includes a power supply module, a main control module, N rugged sub-node modules, and N sub-node power supply components connected in sequence; N is an integer greater than or equal to 1.

[0079] like Figure 2 As shown, the main control module includes a main control PC and a controller that communicates with the main control PC; both the main control PC and the controller are connected to the power supply module; each node module includes a sub-node PLC and a sensor assembly; the controller communicates with the sub-node PLC via optical fiber; the input terminal of the sensor assembly is connected to the output terminal of the sub-node power supply assembly; the output terminal of the sensor assembly is connected to the input terminal of the corresponding sub-node PLC, and the sub-node PLC communicates with the sub-node power supply assembly; the sub-node power supply assembly is connected to external AC power.

[0080] The sensor assembly includes a camera, an audible and visual alarm, an emergency stop switch, and a door control switch; the input terminals of the camera, the audible and visual alarm, the emergency stop switch, and the door control switch are respectively connected to the output terminal of the DC power supply; the output terminals of the camera, the audible and visual alarm, the emergency stop switch, and the door control switch are respectively connected to the input terminals of the corresponding sub-node PLC.

[0081] like Figure 3 As shown, the sub-node power supply component includes a power-off delay relay, a DC power supply, and a contactor; one end of the power-off delay relay and one end of the contactor are respectively connected to the external mains power, and the other end is respectively connected to the input terminal of the DC power supply; the output terminal of the DC power supply is respectively connected to the power supply terminal of the sub-node PLC and the input terminal of the sensor component; the input terminal of the sub-node PLC is connected to the coil of the contactor for controlling the energization or de-energization of the contactor.

[0082] Preferably, conventional protection measures include grounding, shielding, lightning protection, and surge protection. The controller is a main control PLC; in other embodiments, an MCU, microcontroller, or programmable controller can also be used. The sub-node PLCs are power-down protected PLCs. Emergency stop switches are connected to the sub-node PLCs via a double-core shielded cable, with a normally closed connection. Door control switches are connected to the sub-node PLCs via a double-core shielded cable, with a normally open connection. Motion detection cameras are used.

[0083] In this embodiment, the hardware of the reinforced interlocking system consists of a central control PLC and sub-node PLCs, which form a star-shaped connection structure. The central control PLC is responsible for: (1) acquiring alarm information from each sub-node PLC; (2) sending interrupt information to the pulse power device control system; (3) sending power-off signals to each sub-node PLC; (4) acquiring the status information of each sub-node PLC; and (5) communicating with the central control PLC to complete human-machine interface control. The sub-node PLCs are responsible for: (1) acquiring the next-level IO port signals; (2) sending alarm and status information to the central control PLC; and (3) sending power-off signals to the sub-node power supply components of the reinforced sub-node module.

[0084] The main control PC and PLC are located in non-electromagnetic / ionizing radiation areas, connected via LAN network, powered by UPS, and have no electromagnetic shielding requirements. The N ruggedized sub-node modules are located in areas with strong electromagnetic / ionizing radiation interference, resulting in significant interference within their operating range; the sub-node PLCs are far from the main control PLC, and data transmission lines use fiber optic connections; the sub-node power supply components are locally powered.

[0085] The sub-node PLC employs a power-loss protection mechanism. During a power outage, the I / O ports lose power, but the battery retains the data in the PLC's internal RAM and stack. Upon power-up, the program automatically restores to its pre-power-loss state, and the I / O ports return to their previous on / off states. The sub-node PLC is primarily responsible for acquiring the status of all sensors within its node and reporting this status information to the central control PLC.

[0086] If the controller uses an MCU and employs a power-down protected RAM, during a power outage, the I / O ports lose power, but the MCU's battery can still maintain the data in the MCU's internal RAM and stack data. After power-on, the program automatically restores to the state before the power outage, and the I / O ports return to their previous on / off states. The child node MCU is mainly responsible for acquiring the status of all sensor components under its node and reporting the status information to the central control PLC.

[0087] The camera uses a motion detection camera, which defines the motion detection area based on the characteristics of the image area. The alarm signal is output through IO on / off and connected to the sub-node PLC to monitor key areas where people often stay and have a high frequency of entry and exit (where they must leave when the device is running).

[0088] The audible and visual alarm is connected to the sub-node PLC via I / O, receiving control signals from the sub-node PLC and providing audible and warning light alerts to the personnel in charge. It is primarily used for pre-experiment departure reminders.

[0089] The emergency stop switch is connected to the sub-node PLC using a double-core shielded cable, and the connection method is normally closed. When the emergency stop switch is pressed, or if there is an electrical fault in the button, the circuit is broken. The emergency stop switch provides a method to suspend experiments if personnel cannot evacuate the site in time.

[0090] The door control switch is connected to the sub-node PLC using a double-core shielded cable, and the connection method is normally open. The switch only closes when the door is closed. This connection method prevents missed alarms caused by line faults. The door control switch is mainly used to monitor whether each shielded door and the pedestrian door in the radiation field control area is closed.

[0091] The 220V AC mains power is connected to the normally closed terminal of the power-off delay relay; the 220V AC mains power is connected to the normally open contact of the contactor; the other contact of the contactor is connected in parallel with the output terminal of the power-off delay relay and then connected to the DC power input terminal; the DC power output terminal is connected to the sub-node PLC, the camera, and the audible and visual alarm; one IO output of the sub-node PLC is connected to the contactor coil.

[0092] 3. Run:

[0093] 3.1 such as Figure 4As shown, the main control PLC sends a power-down command to the hardened sub-node module via optical fiber before the arrival of the instantaneous electromagnetic interference / ionizing radiation pulse, based on the operating progress of the pulse power device.

[0094] 3.1.1 Power on the main control PLC;

[0095] 3.1.2 The main control PLC sends a query command to the sub-node PLCs in the reinforced sub-node module, and each sub-node PLC returns its own status information to the controller;

[0096] 3.1.3 The central control PLC receives status information returned by each reinforced sub-node module;

[0097] 3.1.4 The main control PLC determines the working status of each sub-node PLC based on the status information returned by each sub-node PLC;

[0098] If any of the sub-node PLCs malfunction, the main control PLC sends a pause / termination command to the pulse power device control system. The controller manually judges the working status of each sub-node PLC and takes corresponding measures until the fault is eliminated. Then, the system returns to step 3.1.2 and updates the status list of the sub-node PLCs.

[0099] If all PLCs in each sub-node are working properly, proceed to step 3.1.5;

[0100] 3.1.5 The central control PLC determines the alarm status of each sub-node PLC based on the status information returned by each sub-node PLC;

[0101] If any sub-node PLC experiences an alarm, the main control PLC sends a pause / stop command to the pulse power device control system. The controller manually determines the alarm level and type and takes appropriate measures until the alarm is cleared. Then, the main control PLC sends an alarm clear command to the sub-node PLC, clears the alarm, and returns to step 3.1.2. If no alarm occurs, proceed to step 3.1.6.

[0102] 3.1.6 Upon entering the experimental state, the controller sends a power-down command to the sub-node PLC at the first preset time dT1 before the pulse power device control system is about to be triggered; the first preset time dT1 is the maximum time delay from when the sub-node PLC receives the power-down command to when the power-off delay relay completely cuts off the power.

[0103] 3.1.7 After the controller waits for the second preset time dT2, it updates the alarm list of the sub-node PLC and returns to step 3.1.2; the second preset time dT2 is the time for each sub-node PLC to work normally from power-down to power-on.

[0104] 3.2N reinforced sub-node modules execute a power-down command, cut off their own power supply, and start timing;

[0105] 3.3 During the timing period, the pulse power device outputs, completing one experiment, and the strong electromagnetic interference / ionizing radiation is instantaneously generated and then terminated;

[0106] 3.4 The power outage delay relay will automatically restore power after the timer expires.

[0107] In this embodiment, after each sub-node PLC is powered on, as follows: Figure 5 As shown, first, all IO ports under this child node PLC are traversed; based on the input level of the IO port, the IO status list in the corresponding child node PLC is updated, and the alarm list is also updated, as shown in Table 1, alarm levels and fault handling methods:

[0108] Table 1 Alarm Levels and Fault Handling Methods

[0109]

[0110] The sub-node PLC sets the corresponding audible and visual alarm outputs according to the alarm list;

[0111] The sub-node PLC periodically uploads alarm information to the central control PLC;

[0112] The child node PLC receives information from the central control PLC;

[0113] The child node PLC performs the corresponding operation based on the type of information received;

[0114] If the child node PLC receives the query command, its communication is normal, it updates the IO status list, uploads the information list to the controller, and returns a list of all IO ports under this child node PLC.

[0115] If the child node PLC receives a power-down avoidance command, it will perform the following operations:

[0116] Save the parameters of the child node PLC and prepare for power-down; preferably, the parameters of the child node PLC are program pointers;

[0117] Send a power-down command to the contactor corresponding to the PLC of this sub-node;

[0118] The contactor cuts off the power supply to the PLC of this sub-node, and the power-off delay relay starts timing.

[0119] After a 1-second delay, the power-off delay relay stops timing and power is restored; the corresponding sub-node PLC power supply is normal and continues to work normally, starting the next round of IO port scanning;

[0120] If the child node PLC receives an alarm cancellation command, it resets the alarm list, resets the IO ports, stops the alarm, and begins the next round of IO port scanning.

Claims

1. A safety interlocking method for a pulse power device, characterized in that, Includes the following steps:

1. In a safety interlocking system, devices with an internal working voltage ≤24V, or those using chips for logic control, data acquisition, or signal transmission are classified as highly sensitive devices; mechanical switches, passive working devices, or devices with an internal insulation voltage greater than 500V are classified as low sensitive devices; and areas in a safety interlocking system are divided into low-interference areas and high-interference areas based on electromagnetic interference intensity or ionizing radiation intensity indicators.

2. Conventional protection measures should be adopted for low-sensitivity devices in low-interference areas, low-sensitivity devices in high-interference areas, and high-sensitivity devices in low-interference areas of the safety interlock system. For highly sensitive equipment in high-interference areas of the safety interlocking system, a rugged interlocking system is constructed. The rugged interlocking system includes a power supply module, a main control module, N rugged sub-node modules, and N sub-node power supply components connected in sequence; N is an integer greater than or equal to 1. The main control module includes a main control PC and a controller that communicates with the main control PC; both the main control PC and the controller are connected to the power supply module. Each of the reinforced sub-node modules includes a sub-node PLC and sensor components; The controller communicates with the sub-node PLC via optical fiber; The power supply terminal of the sensor assembly is connected to the output terminal of the corresponding sub-node power supply assembly; the output terminal of the sensor assembly is connected to the input terminal of the corresponding sub-node PLC; the sub-node PLC is connected to the sub-node power supply assembly; the sub-node power supply assembly is connected to external AC power.

3. Run: 3.1 Based on the operating progress of the pulse power device, the main control module issues a power-down command to N hardened sub-node modules before the arrival of the instantaneous electromagnetic interference / ionizing radiation pulse; 3.1.1 Power on the controller; 3.1.2 The controller sends a query command to each sub-node PLC, and each sub-node PLC returns its own status information to the controller; 3.1.3 The controller receives status information returned by each sub-node PLC; 3.1.4 The controller determines the working status of each sub-node PLC based on the status information returned by each sub-node PLC; If any of the sub-node PLCs malfunction, the main control PLC sends a pause / termination command to the pulse power device control system. The controller manually judges the working status of each sub-node PLC and takes corresponding measures until the fault is eliminated. Then, the system returns to step 3.1.2 and updates the status list of the sub-node PLCs. If all PLCs in each sub-node are working properly, proceed to step 3.1.5; 3.1.5 The controller determines the alarm status of each sub-node PLC based on the status information returned by each sub-node PLC; If any sub-node PLC experiences an alarm, the main control PLC sends a pause / stop command to the pulse power device control system. The controller manually determines the alarm level and type and takes appropriate measures until the alarm is cleared. Then, the main control PLC sends an alarm clear command to the sub-node PLC, clears the alarm, and returns to step 3.1.

2. If no alarm occurs, proceed to step 3.1.

6. 3.1.6 Upon entering the experimental state, the controller sends a power-down command to the sub-node PLC at the first preset time dT1 before the pulse power device control system is about to be triggered; the first preset time dT1 is the maximum time delay from when the sub-node PLC receives the power-down command to when the power-off delay relay completely cuts off the power. 3.1.7 After the controller waits for the second preset time dT2, it updates the alarm list of the sub-node PLCs and returns to step 3.1.2; the second preset time dT2 is the time it takes for each sub-node PLC to work normally from power-down to power-on. 3.2N reinforced sub-node modules execute a power-down command, cut off their own power supply, and start timing; 3.3 During the timing period, the pulse power device outputs, completing one experiment, and the strong electromagnetic interference / ionizing radiation is instantaneously generated and then terminated; 3.4 When the timer for the child node power supply component ends, power will be automatically restored.

2. The safety interlocking method for a pulse power device according to claim 1, characterized in that: In step 2], the sub-node power supply component includes a power-off delay relay, a DC power supply, and a contactor; One end of the power-off delay relay and one end of the contactor are respectively used to connect to the external mains power, and the other end is respectively connected to the input terminal of the DC power supply. The output terminal of the DC power supply is connected to the power supply terminal of the sub-node PLC, the power supply terminal of the sensor assembly, and the drive terminal of the power-off delay relay, respectively. The input terminal of the sub-node PLC is connected to the coil of the contactor and is used to control the energization or de-energization of the contactor.

3. The safety interlocking method for a pulse power device according to claim 2, characterized in that: In step 2], the sensor assembly includes a camera, an audible and visual alarm, an emergency stop switch, and a door control switch; The power supply terminals of the camera and the audible and visual alarm are respectively connected to the output terminal of the DC power supply. The output terminals of the camera, the audible and visual alarm, the emergency stop switch, and the door control switch are respectively connected to the input terminals of the corresponding sub-node PLC.

4. The safety interlocking method for a pulse power device according to claim 3, characterized in that, Step 3.2 specifically involves: 3.2.1 When the sub-node PLC receives the power-down command from the controller, it saves the parameters of the sub-node PLC and prepares for power-down. 3.2.2 The sub-node PLC sends a power-down command to the corresponding contactor; 3.2.3 The contactor cuts off the power supply to the PLC of this sub-node, and the power-off delay relay starts timing.

5. A safety interlocking method for a pulse power device according to claim 4, characterized in that, Step 3.4 specifically involves: The power-off delay relay stops timing after the second preset time dT2 is reached, and the power supply to the sub-node PLC is restored at the same time; the second preset time dT2 is the normal working time of each sub-node PLC from power-off to power-on. After the controller waits for the second preset time dT2, it returns to step 3.1.

2.

6. A safety interlocking method for a pulse power device according to claim 5, characterized in that, In step 3.1.2, the process of each sub-node PLC returning its respective status information to the controller is as follows: 3.1.2.1 Each child node PLC traverses all IO ports under its own child node PLC; based on the input level of the IO port, updates the IO status list in the corresponding child node PLC, and at the same time updates the alarm list; 3.1.2.2 The sub-node PLC sets the corresponding alarm status according to the alarm list; 3.1.2.3 When the child node PLC receives a query command from the controller, the child node PLC uploads the IO status list and alarm list to the controller; In step 3.1.5, the specific steps for clearing the alarm on the sub-node PLC are as follows: The child node PLC receives the alarm cancellation command from the controller, stops the alarm, and updates the alarm list.

7. A safety interlocking method for a pulse power device according to claim 6, characterized in that: In step 2, the conventional protection measures include grounding, shielding, lightning protection, and surge protection; In step 3.2.1, the parameter of the sub-node PLC is specifically the program pointer.

8. A safety interlocking method for a pulse power device according to claim 7, characterized in that: The controller may be a PLC, MCU, microcontroller, or programmable controller. The sub-node PLC is a power-loss protected PLC. The emergency stop switch is connected to the sub-node PLC via a double-core shielded cable, and the connection method is normally closed. The door control switch is connected to the sub-node PLC via a double-core shielded cable, and the connection method is normally open. The camera is a motion detection camera.

Images