A nuclear power safety-level digital instrumentation and control system

Abstract

The present invention relates to the field of nuclear power plant safety level control technology, and in particular to a nuclear power safety level digital instrumentation and control system. The invention comprises a multi-node communication network and a point-to-point communication network, wherein a reactor shutdown protection system, a dedicated safety facility drive system, and a safety control display system are connected to the multi-node communication network, wherein the reactor shutdown protection system is connected to the dedicated safety facility drive system through the point-to-point communication network, and the reactor shutdown protection system is connected to a nuclear power simulation platform and a signal preprocessing system through a first communication interface. In the present application, the nuclear power safety level digital instrumentation and control system is simplified to select typical functions as basic applications, adopt the design principle of function typification and minimum hardware configuration, and realize the communication between the reactor shutdown protection system, the dedicated safety facility drive system, the safety-related system, and the safety control display system through the multi-node communication network and the point-to-point communication network, thereby simplifying the configuration scale of whether the safety level DCS equipment is safe to identify the prototype.

Description

Technical Field

[0001] The present invention relates to the technical field of nuclear power plant safety level control, and in particular to a nuclear power safety level digital instrumentation and control system. Background Art

[0002] The digital instrumentation and control system (DCS) of a nuclear power plant is the "nerve center" of the nuclear power plant. It provides more advanced control and management methods and is an important equipment to ensure the safe and reliable operation of the nuclear power plant. It must undergo strict appraisal before being put into engineering application. This is mainly to determine the safety, reliability and availability of the system by verifying the basic performance and functions of the system in a specific artificial environment, so as to ensure that it can maintain its ability to perform safety functions under normal operating conditions of the nuclear power plant, including design basis events, and minimize possible common cause failures of equipment.

[0003] In the process of safety-level DCS equipment identification, whether the prototype used can represent the equipment used in the actual project directly affects the validity of the equipment identification results. According to relevant standards, some identification tests are destructive to a certain extent, and the identification activities require a certain period of time. Therefore, for the design of the prototype, it is necessary to consider the selection of representative hardware components and application software in combination with factors such as cost and project progress. The representativeness of the prototype mainly needs to be considered from the perspective of hardware representativeness and software function representativeness to determine an identification prototype with a minimum scale configuration.

[0004] In the prior art, since there are no specific requirements for the configuration of the safety-level DCS equipment identification prototype, in order to ensure that the equipment identification prototype is sufficiently comprehensive (representative), manufacturers usually consider "large and comprehensive" when configuring the identification prototype, such as using hardware that includes all types, or even modules of the same type with different physical parameter settings (such as the number of channels of the IO module, the range setting, etc.). The configuration scale of the safety-level DCS equipment identification prototype is too complicated, and at the same time, it leads to a long equipment identification cycle and increased costs. Therefore, how to reduce the configuration scale of the safety-level DCS equipment identification prototype has become an urgent problem to be solved. Summary of the invention

[0005] Based on this, it is necessary to provide a nuclear power safety-level digital instrumentation and control system to address the above technical issues and solve the problem of overly complex configuration scale of safety-level DCS equipment identification prototypes.

[0006] A first aspect of an embodiment of the present application provides a nuclear power safety-level digital instrumentation and control system, including a multi-node communication network and a point-to-point communication network, wherein a reactor shutdown protection system, a dedicated safety facility drive system, and a safety control display system are connected to the multi-node communication network, wherein the reactor shutdown protection system is connected to the dedicated safety facility drive system via the point-to-point communication network, wherein the reactor shutdown protection system is connected to a nuclear power simulation platform and a signal preprocessing system via a first communication interface, and wherein the dedicated safety facility drive system is connected to the nuclear power simulation platform and a device interface system via a second communication interface;

[0007] When the nuclear power simulation platform outputs simulation data, the reactor shutdown protection system and the dedicated safety facility drive system generate corresponding control operation information, and the safety control display system obtains the control operation information through the multi-node communication network for display.

[0008] Compared with the prior art, the present invention has the following beneficial effects:

[0009] The present application provides a nuclear power safety-level digital instrumentation and control system, including a multi-node communication network and a point-to-point communication network, a reactor shutdown protection system, a dedicated safety facility drive system, and a safety control display system are connected to the multi-node communication network, the reactor shutdown protection system is connected to the dedicated safety facility drive system through the point-to-point communication network, the reactor shutdown protection system is connected to the nuclear power simulation platform and the signal preprocessing system through the first communication interface, and the dedicated safety facility drive system is connected to the nuclear power simulation platform and the equipment interface system through the second communication interface. When the nuclear power simulation platform outputs simulation data, the reactor shutdown protection system and the dedicated safety facility drive system generate corresponding control operation information, and the safety control display system obtains the control operation information through the multi-node communication network for display. In the present application, the nuclear power safety-level digital instrumentation and control system is simplified to select typical functions as basic applications, adopt the design principle of functional typification and minimum hardware configuration, and realize the communication between the reactor shutdown protection system, the dedicated safety facility drive system, the safety-related system, and the safety control display system through the multi-node communication network and the point-to-point communication network, which simplifies the configuration scale of whether the safety-level DCS equipment is safe to identify the prototype. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0011] Figure 1This is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 1 of the present invention;

[0012] Figure 2 This is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 2 of the present invention;

[0013] Figure 3 This is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 3 of the present invention;

[0014] Figure 4 This is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 4 of the present invention;

[0015] Figure 5 This is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 5 of the present invention. DETAILED DESCRIPTION

[0016] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0018] It should also be understood that the term "and / or" used in the present description and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0019] As used in the present specification and the appended claims, the term "if" may be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" may be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]", depending on the context.

[0020] In addition, in the description of the present specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0021] References to "one embodiment" or "some embodiments" etc. described in the present specification mean that one or more embodiments of the present invention include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0022] It should be understood that the order of execution of the steps in the following embodiments does not imply a precedence of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0023] In order to illustrate the technical solution of the present invention, the following is described through specific embodiments.

[0024] See also Figure 1 , is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Example 1 of the present invention. The nuclear power safety-level digital instrumentation and control system includes a multi-node communication network 11 and a point-to-point communication network 12. The multi-node communication network 11 is connected with a reactor shutdown protection system 13, a dedicated safety facility drive system 14, and a safety control display system 15. The reactor shutdown protection system 13 is connected to the dedicated safety facility drive system 14 through the point-to-point communication network 12. The reactor shutdown protection system 13 is connected to a nuclear power simulation platform 18 and a signal preprocessing system 16 through a first communication interface. The dedicated safety facility drive system 14 is connected to the nuclear power simulation platform 18 and a device interface system 17 through a second communication interface. When the nuclear power simulation platform 18 outputs simulation data, the reactor shutdown protection system 13 and the dedicated safety facility drive system 14 generate corresponding control operation information, and the safety control display system 15 obtains the control operation information through the multi-node communication network 11 for display.

[0025] It should be noted that, in this embodiment, the multi-node communication network 11 is a network that can connect multiple systems, so that the signals in each system can be transmitted arbitrarily through the network, and the reactor shutdown protection system 13 is used to realize the automatic reactor emergency shutdown according to the corresponding shutdown signal. The dedicated safety facility drive system 14 is used to collect and process process signals, generate system-level dedicated instructions, that is, corresponding control operation information, and control each device in the nuclear power safety-level digital instrumentation and control system 10 according to the corresponding dedicated instructions. The drive signal and feedback signal and other information are transmitted to the gateway through the multi-node network to communicate with other systems. The safety control display system 15 is used to display the control operation information, so as to verify whether the nuclear power safety-level digital instrumentation and control system 10 can perform safety control according to the display results.

[0026] It should be noted that the signal preprocessing system 16 is provided with a conditioning module, which can be used to implement the functions of conditioning, isolating and distributing the signal.

[0027] The reactor shutdown protection system 13 and the dedicated safety facility drive system 14 generate corresponding control operation information, including:

[0028] The reactor shutdown protection system 13 collects the first simulation data output by the nuclear power simulation platform 18, generates a local shutdown signal according to the first simulation data, performs a voting logic operation according to the local shutdown signal, obtains a first operation result, and outputs the first operation result to the dedicated safety facility drive system 14.

[0029] The dedicated safety facility driving system 14 performs a voting logic operation according to the first operation result and the second simulation data collected on the nuclear power simulation platform 18 to obtain a second operation result.

[0030] The dedicated safety facility driving system 14 generates corresponding control operation information according to the second operation result.

[0031] In this embodiment, the reactor shutdown protection system 13 collects the first simulation data output by the nuclear power simulation platform 18, generates a local shutdown signal according to the first simulation data, performs a voting logic operation according to the local shutdown signal, obtains a first operation result, and outputs the first operation result to the dedicated safety facility driving system 14, wherein the first simulation data is a signal that can trigger the reactor shutdown, the first simulation data may include analog and digital signals from field equipment, and a local shutdown signal is generated according to the first simulation data, wherein the local shutdown signal may be a signal generated by data that is greater than a preset threshold value when the first simulation data is greater than the preset threshold value, and a local shutdown signal is generated according to the first simulation data. In this embodiment, the local shutdown signal can be set to a certain value, such as 1, that is, when a 1 signal is generated, it is considered that a local shutdown signal is generated. If the local shutdown signal is not generated, another value can be used to represent it, such as 0, that is, when a 0 signal is generated, it is considered that no local shutdown signal is generated.

[0032] It should be noted that the reactor shutdown protection system 13 includes multiple subsystems, each of which corresponds to the first simulation data output by the nuclear power simulation platform 18. In each subsystem, different first simulation data are collected, and it is determined whether to generate a local shutdown signal according to the first simulation data. The local shutdown signal used by each subsystem is the same identifier. After each subsystem generates a corresponding signal, the corresponding signal is sent to other subsystems. Therefore, each subsystem can obtain a signal corresponding to the number of subsystems. Each subsystem performs a voting logic operation according to the received signal to obtain a first operation result. If 4 subsystems are included, each subsystem performs a "2 / 4" logic operation, and "2 / 4" means 4-to-2 logic. After each subsystem is operated, a corresponding operation result is obtained. Among them, the 4-to-2 logic means that if there are 2 or more local shutdown signals in 4 subsystems, it is considered that the shutdown protection signal is triggered, and a signal for triggering the shutdown protection is generated. Otherwise, it is considered that there is no signal for triggering the shutdown protection. The signal for triggering the shutdown protection can also be set to a certain value, such as 1, that is, when a 1 signal is generated, it is considered that the shutdown protection signal is triggered. If there is no signal triggering the stack trip protection, another numerical value may be used to represent it, such as 0, that is, when a 0 signal is generated, it is considered that there is no signal triggering the stack trip protection.

[0033] In this embodiment, after the first operation result is output to the dedicated safety facility driving system 14, the dedicated safety facility driving system 14 performs a voting logic operation based on the first operation result and the second simulation data collected on the nuclear power simulation platform 18 to obtain a second operation result. The second simulation data is other signals for safety control output by the nuclear power simulation platform 18, and the second simulation data may include analog and digital signals from field equipment, which are different from the first simulation data.

[0034] The dedicated safety facility driving system 14 performs a voting logic operation based on the first operation result and the second simulation data collected on the nuclear power simulation platform 18 to obtain a second operation result, wherein the second operation result includes signals representing shutdown instructions and system-level dedicated instructions, so as to generate corresponding control operation information based on the second operation result.

[0035] It should be noted that the dedicated safety facility drive system 14 is a system in a single sequence. For example, if the dedicated safety facility drive cabinet in column A is selected for typical configuration, the dedicated safety facility drive system 14 includes a parallel redundant processor, wherein the parallel redundant processor is a single processor, connected to the nuclear power simulation platform 18 and the device interface system 17 through a second communication interface, and the second communication interface is a single input and output interface. The parallel redundant processor is used to perform a voting logic operation based on the received first operation result and the second simulation data collected on the nuclear power simulation platform 18 to obtain a second operation result, and generate corresponding control operation information based on the second operation result.

[0036] See also Figure 2 , is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 2 of the present invention. Optionally, the reactor shutdown protection system 13 includes a first subsystem 131 and a first subsystem 132. The first subsystem 131 includes a first hot standby redundant processor 1311, and the first subsystem 132 includes a second hot standby redundant processor 1322.

[0037] The first communication interface includes a first sub-communication interface and a second sub-communication interface;

[0038] The first hot standby redundant processor 1311 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 via the first sub-communication interface.

[0039] The second hot standby redundant processor 1322 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 via the second sub-communication interface.

[0040] The first hot standby redundant processor 1311 and the second hot standby redundant processor 1322 are connected via a point-to-point communication network 12 .

[0041] The first hot standby redundant processor 1311 is used to collect the first simulation data output by the nuclear power simulation platform 18, and generate a first local shutdown signal according to the first simulation data; the second hot standby redundant processor 1322 is used to collect the first simulation data output by the nuclear power simulation platform 18, and generate a second local shutdown signal according to the first simulation data.

[0042] The first hot standby redundant processor 1311 is used to perform voting logic operations according to the first local shutdown signal and the second local shutdown signal obtained through the point-to-point communication network 12 to obtain the operation result corresponding to the first hot standby redundant processor 1311. The first hot standby redundant processor 1311 outputs the operation result corresponding to the first hot standby redundant processor 1311 to the dedicated safety facility drive system 14 through the point-to-point communication network 12.

[0043] The second hot standby redundant processor 1322 is used to perform voting logic operations according to the second local shutdown signal and the first local shutdown signal obtained through the point-to-point communication network 12 to obtain the operation result corresponding to the second hot standby redundant processor 1322. The second hot standby redundant processor 1322 outputs the operation result corresponding to the second hot standby redundant processor 1322 to the dedicated safety facility drive system 14 through the point-to-point communication network 12.

[0044] In this embodiment, the reactor shutdown protection system 13 includes a first subsystem 131 and a first subsystem 132, the first communication interface includes a first sub-communication interface and a second sub-communication interface, and each subsystem is connected to the corresponding communication interface, that is, the first hot standby redundant processor 1311 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 through the first sub-communication interface, and the second hot standby redundant processor 1322 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 through the second sub-communication interface. Among them, when each subsystem is connected to the corresponding communication interface, the corresponding hard connection is used, and the communication interface is configured as a single output interface. The first subsystem 131 includes a first hot standby redundant processor 1311, and the first subsystem 132 includes a second hot standby redundant processor 1322. The first hot standby redundant processor 1311 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 through the first sub-communication interface; the second hot standby redundant processor 1322 is connected to the nuclear power simulation platform 18 and the signal preprocessing system 16 through the second sub-communication interface, and the first hot standby redundant processor 1311 and the second hot standby redundant processor 1322 are connected through a point-to-point communication network 12.

[0045] The first hot standby redundant processor 1311 is used to perform a voting logic operation according to the first local shutdown signal and the second local shutdown signal obtained through the point-to-point communication network 12, and obtain the operation result corresponding to the first hot standby redundant processor 1311. The first hot standby redundant processor 1311 outputs the operation result corresponding to the first hot standby redundant processor 1311 to the dedicated safety facility drive system 14 through the point-to-point communication network 12. The second hot standby redundant processor 1322 is used to perform a voting logic operation according to the second local shutdown signal and the first local shutdown signal obtained through the point-to-point communication network 12, and obtain the operation result corresponding to the second hot standby redundant processor 1322. The second hot standby redundant processor 1322 outputs the operation result corresponding to the second hot standby redundant processor 1322 to the dedicated safety facility drive system 14 through the point-to-point communication network 12.

[0046] It should be noted that the reactor shutdown protection system 13 includes a first subsystem 131 and a second subsystem 132, so each subsystem obtains two first simulation data, and each subsystem performs "1 / 2" processing, "1 / 2" means 2-to-1 logic, and each subsystem obtains the corresponding operation result after operation. Among them, if there is a local shutdown signal in one or two of the two subsystems in the 2-to-1 logic, it is considered that the safety protection signal is triggered. Otherwise, it is considered that there is no signal that triggers the shutdown protection. The signal that triggers the shutdown protection can also be set to a certain value, such as 1, that is, when the 1 signal is generated, it is considered that the shutdown protection signal is triggered. If there is no signal that triggers the shutdown protection, another value can be used to represent it, such as 0, that is, when the 0 signal is generated, it is considered that there is no signal that triggers the shutdown protection.

[0047] It should be noted that, when the safety protection signal is triggered, each subsystem sends the corresponding operation result to the dedicated safety facility drive system 14, and also sends a shutdown DO signal to open the depressurization coil of the shutdown circuit breaker. Among them, sending the shutdown DO signal is regarded as the bypass DCS system sending the DO signal to the excitation and depressurization coils of the shutdown circuit breaker.

[0048] In this embodiment, the reactor shutdown protection system 13 includes a first subsystem 131 and a second subsystem 132 , which reduces the signal channels of the reactor shutdown protection system 13 and simplifies the configuration of the reactor shutdown protection system 13 .

[0049] See also Figure 3 , is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 3 of the present invention. Optionally, the nuclear power safety-level digital instrumentation and control system 10 further includes a safety-related system 19, which is connected to the multi-node communication network 11 and hard-connected to the device interface system 17;

[0050] The safety-related system 19 is connected to the nuclear power simulation platform 18 via a third communication interface.

[0051] The safety-related system 19 is used to collect the third simulation data of the nuclear power simulation platform 18, transmit the third simulation data to the safety control display system 15 for display, and send the manual signal in the safety-related system 19 to the device interface system 17 through a hard connection.

[0052] In this embodiment, the safety-related system 19 is connected to the multi-node communication network 11 to facilitate signal transmission in the multi-node communication network 11, and is hard-connected to the device interface system 17. The safety-related system 19 is connected to the nuclear power simulation platform 18 via a third communication interface to facilitate the safety-related system 19 to collect third simulation data on the nuclear power simulation platform 18, wherein the third simulation data is other signals output by the nuclear power simulation platform 18 for safety control, and the third simulation data may include analog and digital signals from on-site equipment, which are different from the first simulation data and the second simulation data.

[0053] The safety-related system 19 transmits the third simulation data to the safety control display system 15 for display, and sends the manual signal in the safety-related system 19 to the device interface system 17 through a hard connection, so that the device interface system 17 performs priority management and driving according to the corresponding manual signal. The manual signal is an operation performed by the operator in cooperation with the nuclear power safety-level digital instrumentation and control system 10 for safety verification.

[0054] It should be noted that the safety-related system 19 includes a third hot standby redundant processor, which is used to collect the third simulation data of the nuclear power simulation platform 18, transmit the third simulation data to the safety control display system 15 for display, and send the manual signal in the safety-related system 19 to the device interface system 17 through a hard connection.

[0055] Optionally, after the reactor shutdown protection system 13 and the dedicated safety facility driving system 14 generate corresponding control operation information, the following further comprises:

[0056] The dedicated safety facility driving system 14 sends the control operation information to the equipment interface system 17 .

[0057] In this embodiment, the dedicated safety facility driving system 14 sends the control operation information to the device interface system 17, so that the device interface system 17 performs priority management according to all the received control operation information.

[0058] Optionally, the device interface system 17 is used to perform priority management and driving according to the received manual signal and control operation information.

[0059] In this embodiment, the device interface system 17 is hard-connected to the safety-related system 19, and the safety-related system 19 can be used for manual operation. After the manual signal of the safety-related system 19 is sent to the device interface system 17 through the hard connection, the device interface system 17 performs priority management and drive according to the received manual signal and control operation information, and sends the priority management and drive results to the safety control display system 15 for display to determine whether the operation of the device interface system 17 is correct.

[0060] Optionally, the safety control display system 15 is also used to issue manual operation instructions, which are transmitted to the dedicated safety facility drive system 14 and the safety-related system 19 through the multi-node communication network 11.

[0061] In this embodiment, the safety control and display system 15 is used to monitor the nuclear power safety-level digital instrumentation and control system 10. The safety control and display system 15 includes an operator workstation, which can be manually operated in the operator workstation. Corresponding instructions are issued to the dedicated safety facility driving system 14 and the safety-related system 19 through the multi-node communication network 11, so that the dedicated safety facility driving system 14 and the safety-related system 19 can enforce the received issued instructions.

[0062] See also Figure 4 , is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 4 of the present invention. Optionally, the nuclear power safety-level digital instrumentation and control system 10 further includes a gateway system 20;

[0063] The gateway system 20 is connected to the multi-node communication network 11 .

[0064] The gateway system 20 is used to realize information transmission between the reactor shutdown protection system 13, the dedicated safety facility drive system 14, the safety-related system 19, and the safety control display system 15, as well as information transmission between the nuclear power safety-level digital instrumentation and control system 10 and non-safety-level equipment.

[0065] In this embodiment, the gateway system 20 is connected to the multi-node communication network 11 to facilitate signal transmission between the reactor shutdown protection system 13, the dedicated safety facility drive system 14, the safety control display system 15 and the safety-related system 19. According to the gateway system 20, the reactor shutdown protection system 13 can transmit the first operation result to the dedicated safety facility drive system 14, the dedicated safety facility drive system 14 can transmit the corresponding control operation information to the safety control display system 15 for display, and the safety-related system 19 transmits the corresponding third simulation data to the safety control display system 15 for display. The gateway system 20 can also realize information transmission between the nuclear power safety-level digital instrumentation and control system 10 and non-safety-level equipment.

[0066] A nuclear power safety-level digital instrumentation and control system 10 includes a multi-node communication network 11 and a point-to-point communication network 12. The multi-node communication network 11 is connected to a reactor shutdown protection system 13, a dedicated safety facility drive system 14, and a safety control display system 15. The reactor shutdown protection system 13 is connected to the dedicated safety facility drive system 14 via the point-to-point communication network 12. The reactor shutdown protection system 13 is connected to a nuclear power simulation platform 18 and a signal preprocessing system 16 via a first communication interface. The dedicated safety facility drive system 14 is connected to the nuclear power simulation platform 18 and a device interface system 17 via a second communication interface.

[0067] When the nuclear power simulation platform 18 outputs simulation data, the reactor shutdown protection system 13 and the dedicated safety facility driving system 14 generate corresponding control operation information, and the safety control display system 15 obtains the control operation information through the multi-node communication network 11 for display.

[0068] See also Figure 5 , is a structural diagram of a nuclear power safety-level digital instrumentation and control system provided in Embodiment 5 of the present invention, wherein the nuclear power safety-level digital instrumentation and control system 10 also includes a severe accident handling system 21, one end of the severe accident handling system 21 is hard-connected to the signal preprocessing system 16, and the other end is hard-connected to the device interface system 17, the severe accident handling system 21 is used to receive the signal processed by the signal preprocessing system 16, and send the signal to the device interface system 17, and the device interface system 17 performs priority management and driving according to the corresponding signal.

[0069] The present application provides a nuclear power safety-level digital instrumentation and control system 10, including a multi-node communication network 11 and a point-to-point communication network 12. The multi-node communication network 11 is connected to a reactor shutdown protection system 13, a dedicated safety facility drive system 14, and a safety control display system 15. The reactor shutdown protection system 13 is connected to the dedicated safety facility drive system 14 through the point-to-point communication network 12. The reactor shutdown protection system 13 is connected to a nuclear power simulation platform 18 and a signal preprocessing system 16 through a first communication interface. The dedicated safety facility drive system 14 is connected to the nuclear power simulation platform 18 and a device interface system 17 through a second communication interface. When the nuclear power simulation platform 18 outputs simulation data, the reactor shutdown protection system 13 and the dedicated safety facility drive system 14 generate corresponding control operation information, and the safety control display system 15 obtains the control operation information through the multi-node communication network 11 for display. In the present application, the nuclear power safety-level digital instrumentation and control system 10 is simplified to select typical functions as basic applications, adopt the design principle of functional typification and minimum hardware configuration, and realize the communication between the reactor shutdown protection system 13, the dedicated safety facility drive system 14, the safety-related system 19, and the safety control display system 15 through a multi-node communication network 11 and a point-to-point communication network 12, thereby simplifying the configuration scale of the safety-level DCS equipment to identify whether the prototype is safe.

Claims

1. A nuclear power safety-level digital instrumentation and control system, characterized in that: It includes a multi-node communication network and a point-to-point communication network, wherein a reactor shutdown protection system, a dedicated safety facility drive system, and a safety control display system are connected to the multi-node communication network, wherein the reactor shutdown protection system is connected to the dedicated safety facility drive system via the point-to-point communication network, wherein the reactor shutdown protection system is connected to a nuclear power simulation platform and a signal preprocessing system via a first communication interface, and wherein the dedicated safety facility drive system is connected to the nuclear power simulation platform and a device interface system via a second communication interface; The reactor shutdown protection system collects first simulation data output by the nuclear power simulation platform. The reactor shutdown protection system includes a first subsystem and a second subsystem. In each subsystem, different first simulation data are collected, a local shutdown signal is generated according to the first simulation data, a voting logic operation is performed according to the local shutdown signal, a first operation result is obtained, and the first operation result is output to the dedicated safety facility driving system; The dedicated safety facility driving system performs a voting logic operation according to the first operation result and the second simulation data collected on the nuclear power simulation platform to obtain a second operation result; The dedicated safety facility driving system generates corresponding control operation information according to the second operation result; The safety control display system obtains the control operation information through the multi-node communication network for display.

2. The nuclear power safety-level digital instrumentation and control system according to claim 1, characterized in that: The first subsystem includes a first hot standby redundant processor, and the second subsystem includes a second hot standby redundant processor; The first communication interface includes a first sub-communication interface and a second sub-communication interface; The first hot standby redundant processor is connected to the nuclear power simulation platform and the signal preprocessing system through the first sub-communication interface; The second hot standby redundant processor is connected to the nuclear power simulation platform and the signal preprocessing system through the second sub-communication interface; The first hot standby redundant processor and the second hot standby redundant processor are connected via the point-to-point communication network; The first hot standby redundant processor is used to collect the first simulation data output by the nuclear power simulation platform, and generate a first local shutdown signal according to the first simulation data; the second hot standby redundant processor is used to collect the first simulation data output by the nuclear power simulation platform, and generate a second local shutdown signal according to the first simulation data; The first hot standby redundant processor is used to perform a voting logic operation according to the first local shutdown signal and the second local shutdown signal obtained through the point-to-point communication network to obtain an operation result corresponding to the first hot standby redundant processor, and the first hot standby redundant processor outputs the operation result corresponding to the first hot standby redundant processor to the dedicated safety facility drive system through the point-to-point communication network; The second hot standby redundant processor is used to perform voting logic operations according to the second local shutdown signal and the first local shutdown signal obtained through the point-to-point communication network to obtain an operation result corresponding to the second hot standby redundant processor, and the second hot standby redundant processor outputs the operation result corresponding to the second hot standby redundant processor to the dedicated safety facility drive system through the point-to-point communication network.

3. The nuclear power safety-level digital instrumentation and control system according to claim 2, characterized in that: The nuclear power safety-level digital instrumentation and control system also includes a safety-related system, which is connected to the multi-node communication network and hard-connected to the device interface system; The safety-related system is connected to the nuclear power simulation platform via a third communication interface; The safety-related system is used to collect the third simulation data of the nuclear power simulation platform, transmit the third simulation data to the safety control display system for display, and send the manual signal of the safety-related system to the device interface system through a hard connection.

4. The nuclear power safety-level digital instrumentation and control system according to claim 3, characterized in that: After the reactor shutdown protection system and the dedicated safety facility driving system generate corresponding control operation information, the method further includes: The dedicated safety facility driving system sends the control operation information to the equipment interface system.

5. The nuclear power safety-level digital instrumentation and control system according to claim 4, characterized in that: The device interface system is used for performing priority management and driving according to the received manual signal and the control operation information.

6. The nuclear power safety-level digital instrumentation and control system according to claim 3, characterized in that: The safety control display system is also used to issue manual operation instructions, and the manual operation instructions are transmitted to the dedicated safety facility drive system and the safety-related system through a multi-node communication network.

7. The nuclear power safety-level digital instrumentation and control system according to claim 6, characterized in that: The dedicated safety facility drive system includes a parallel redundant processor; The parallel redundant processor is used to perform a voting logic operation according to the first operation result and the second simulation data collected on the nuclear power simulation platform to obtain a second operation result; The dedicated safety facility driving system generates corresponding control operation information according to the second operation result.

8. The nuclear power safety-level digital instrumentation and control system according to claim 7, characterized in that: The safety-related system includes a third hot standby redundant processor, which is used to collect third simulation data of the nuclear power simulation platform, transmit the third simulation data to the safety control display system for display, and send manual signals of the safety-related system to the device interface system through a hard connection.

9. The nuclear power safety-level digital instrumentation and control system according to claim 2, characterized in that: The nuclear power safety-level digital instrumentation and control system also includes a gateway system; The gateway system is connected to the multi-node communication network; The gateway system is used to realize information transmission between the reactor shutdown protection system, the dedicated safety facility drive system, the safety-related system, and the safety control display system, as well as information transmission between the nuclear power safety-level digital instrumentation and control system and non-safety-level equipment.

Images