PLC control system for radiation environment

Abstract

The invention discloses a PLC (Programmable Logic Controller) control system for a radiation environment, which comprises a control cabinet, a plurality of PLC control subsystems and various electrical devices, and is characterized in that the plurality of PLC control subsystems comprise a radiation-resistant PLC control subsystem arranged on a near-end accelerator site and a non-radiation-resistant PLC control subsystem arranged on a far-end non-accelerator site; the non-radiation-resistant PLC control subsystem is used for diagnosing the fault condition of the radiation-resistant PLC control subsystem, and the radiation-resistant PLC control subsystem adopts a dual-mode redundancy design. According to the invention, by introducing the radiation hardening PLC, redundancy design and anti-interference design, the risk of control system failure caused by radiation is effectively reduced. Meanwhile, equipment close to the accelerator can be controlled, higher universality is achieved, the situation that heavy metal shielding is added to a controller of each piece of equipment is avoided, and therefore the workload of personnel is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial automation control, and more specifically, to a PLC control system for a radiation environment. Background Art

[0002] In fields such as nuclear power plants, particle accelerators, and aerospace, automatic control is often required in radiation environments. However, traditional PLC control systems perform well in conventional industrial environments. However, in radiation environments, the impact of high-energy particles can cause damage to electronic components, causing electrons in electronic components to be excited or ionized, thereby leading to failure of electronic equipment. In addition, single-event upsets (SEUs), single-event disturbances (SEDs), and single-event latchups (SELs) may occur in storage devices and logic circuits, resulting in circuit logic errors, reduced control system reliability, data loss, or control failure, seriously affecting the safety and reliability of the equipment.

[0003] In terms of equipment anti-radiation design, heavy metal shielding and post-placement of sensitive electronic systems are generally used to deal with radiation problems. However, this approach leads to an increase in the size and weight of the equipment, and the debugging operation becomes inconvenient. In addition, some sensors and actuators are difficult to post-process, which also brings difficulties to the design. Therefore, it is of great practical significance to develop a PLC control system that can operate stably in a radiation environment. Summary of the invention

[0004] The present invention aims to solve the problems existing in the prior art and proposes a PLC control system for a radiation environment. The purpose is to provide a PLC control system for a radiation environment.

[0005] The present invention proposes the following technical solutions to solve the technical problems:

[0006] A PLC control system for a radiation environment, the system comprising a control cabinet, multiple PLC control subsystems and various electrical devices, wherein the multiple PLC control subsystems comprise a radiation-resistant PLC control subsystem arranged at a proximal accelerator site, and a non-radiation-resistant PLC control subsystem arranged at a remote non-accelerator site, the non-radiation-resistant PLC control subsystem being used to diagnose faults of the radiation-resistant PLC control subsystem, and the radiation-resistant PLC control subsystem adopts a dual-mode redundant design.

[0007] Furthermore, the radiation-resistant PLC control subsystem adopts a dual-mode redundant design, specifically: the radiation-resistant PLC control subsystem includes a main PLC controller and a backup PLC controller, which have the same system structure: both are composed of a power module, a CPU module, a coupling module and several I / O modules, including a main power module and a backup power module; a main CPU module and a backup CPU module; a main coupling module and a backup coupling module; a main I / O module and a backup I / O module, which are installed in sequence on the same backplane; the main CPU module and the backup CPU module communicate in real time.

[0008] Furthermore, the active coupling module and the standby coupling module are each connected to their own CPU module via an Ethernet cable, and the control signal is transmitted to their respective back-end I / O and communication gateway via the backplane, and at the same time, the lower-level coupling modules are cascaded via Ethernet cables or optical fibers to achieve slave station expansion.

[0009] Furthermore, the main I / O module and the standby I / O module are connected to the same device. Under normal working conditions, the main PLC controller is working and the standby PLC controller is on standby. The standby means that the power module, CPU module and coupling module of the standby PLC controller are still in working state in the standby state, while the channels of several I / O modules are in the off state. When the main PLC controller is working, the channels of the main I / O module are opened and work on the device. When the main PLC controller fails, the standby PLC controller automatically takes over the control, and the channels of several I / O modules of the standby PLC controller are changed from the off state to the open state.

[0010] Furthermore, when the active I / O module channel is turned on or the standby I / O module channel is turned on, they each use two channels to connect to the device, that is, the two channels send or receive the same data at the same time.

[0011] Furthermore, the CPU of the non-radiation-resistant PLC control subsystem communicates in real time with the CPU of the main PLC controller and the CPU of the standby PLC controller of the radiation-resistant PLC control subsystem respectively; the CPU of the main PLC controller and the standby PLC controller store the error diagnostic code of the local device in a special register in their respective CPUs, and the error diagnostic code includes the error diagnostic code of the CPU itself, the coupling module, and the I / O interface; the CPU of the non-radiation-resistant PLC control subsystem accesses the fault code of the main PLC controller and the standby PLC controller in real time, and when a fault occurs, sends troubleshooting instructions to the CPU of the main PLC controller and the standby PLC controller, and the CPU of the main PLC controller and the standby PLC controller execute the troubleshooting instructions.

[0012] Furthermore, the non-radiation-resistant PLC control subsystem is used to diagnose faults of the radiation-resistant PLC control subsystem, specifically: diagnosing faults of the CPUs, coupling modules, and I / O modules of the main PLC controller and the standby PLC controller of the radiation-resistant PLC control subsystem.

[0013] Further, when the non-radiation-resistant PLC control subsystem diagnoses that the CPU of the main PLC controller of the radiation-resistant PLC control subsystem is faulty, the CPU of the non-radiation-resistant PLC control subsystem starts the CPU of the backup PLC controller and shuts down the CPU of the main PLC controller.

[0014] Furthermore, when the non-radiation-resistant PLC control subsystem diagnoses that a coupling module of the main PLC controller has a fault through communication between the CPUs of both parties, the CPU of the main PLC controller is notified to stop the operation of its coupling module and I / O module, and the CPU of the main PLC controller is notified to connect to the coupling module of the standby PLC controller.

[0015] Furthermore, when the non-radiation-resistant PLC control subsystem diagnoses through CPU communication between both parties that both channels of the main PLC controller currently connected to the same device have faults, the CPU of the main PLC controller is notified to stop the operation of the two channels, and the CPU of the main PLC controller is notified to connect to the corresponding I / O module of the standby PLC controller.

[0016] Advantages and effects of the present invention

[0017] The present invention combines "radiation resistance" and "non-radiation resistance", "remote end" and "proximal end" organically; combines "main use", "standby" and "diagnosis" organically, effectively reducing the risk of control system failure caused by radiation. At the same time, it can control the equipment close to the accelerator, has stronger versatility, avoids adding heavy metal shielding to the controller of each device, and thus reduces the workload of personnel. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is a schematic diagram of a PLC control system used in a radiation environment according to the present invention;

[0019] Figure 2 This is the fault example 1 of the PLC control system used in the radiation environment of the present invention—CPU module fault;

[0020] Figure 3 This is the fault example 2 of the PLC control system used in the radiation environment of the present invention—coupling module fault;

[0021] Figure 4This is the fault example 3 of the PLC control system used in the radiation environment of the present invention - I / O module fault;

[0022] Figure 5 A schematic diagram of the connection between the main or standby PLC controller of the present invention and the respective CPU through the slots on the respective backplanes;

[0023] Figure 6 This is a schematic diagram of the present invention using two channels to simultaneously transmit the same data; DETAILED DESCRIPTION

[0024] Design principle of the present invention

[0025] 1. Innovation of the present invention: The innovation lies in the organic combination of "radiation resistance" and "non-radiation resistance", "remote end" and "proximal end"; the organic combination of "primary use", "standby" and "diagnosis".

[0026] The organic combination of "radiation-resistant" and "non-radiation-resistant", "remote" and "proximal" means using a non-radiation-resistant remote PLC controller to diagnose the fault of a radiation-resistant proximal PLC controller, because the safety factor of the remote non-radiation-resistant PLC controller is relatively higher. The error diagnostic code of the radiation-resistant proximal PLC controller is stored in a special register in its CPU, and the error diagnostic code includes the error diagnostic code of the CPU itself, the coupling module, and the I / O interface. The remote non-radiation-resistant PLC controller obtains the error diagnostic code by real-time communication with the CPU and accessing the addresses of these special registers in the CPU in real time, and compares it with the diagnostic error code in the database to determine the specific damaged module. The information contained in the error diagnostic code includes configuration errors, error device hardware identifiers, and error channel numbers. The CPU of the remote non-radiation-resistant PLC controller is used to send commands, and the CPU of the proximal radiation-resistant PLC controller is used to execute commands.

[0027] The organic combination of "main", "standby" and "diagnosis" means that there are both "standby" equipment and "diagnosis" measures. The purpose of diagnosis is to reduce the scope of standby equipment failure, extend the standby times of "standby equipment", and improve the use efficiency of standby equipment.

[0028] 2. Key points of the present invention: First key point: The CPU of the remote non-radiation-resistant PLC controller is used to send commands, and the CPU of the near-end radiation-resistant PLC controller is used to execute commands; Second key point: The remote PLC controller and the near-end PLC controller are connected only to the CPU. As for the coupling module or I / O module failure, the remote CPU does not directly eliminate the failure but notifies the local CPU, and the local CPU closes the local I / O port or coupling module, and the local CPU automatically connects to the standby coupling module or standby I / O port of the standby PLC controller according to the instruction of the remote CPU. Third key point: Each component on the near-end radiation-resistant PLC controller, such as the coupling module and multiple I / O modules, is connected to the CPU through the slots on the backplane. When they fail, the CPU will store the error diagnosis data of the coupling module or multiple I / O modules in the special register of the CPU itself. The remote non-radiation-resistant PLC controller determines the specific location of the fault based on the queried error diagnosis data and notifies the CPU to perform corresponding actions. The fourth key point: The I / O port uses two channels to connect to the same device at the same time. When one of the two channels of the I / O interface on the main PLC controller fails, the other channel can still be used normally. When both channels fail, the corresponding I / O channel of the standby PLC controller is used. The corresponding I / O channels are still two channels.

[0029] Based on the above invention principle, the present invention relates to a PLC control system for radiation environment such as Figure 1-6 As shown, the system includes a control cabinet, multiple PLC control subsystems and various electrical devices, and its characteristics are: the multiple PLC control subsystems include a radiation-resistant PLC control subsystem arranged at a proximal accelerator site, and a non-radiation-resistant PLC control subsystem arranged at a remote non-accelerator site, the non-radiation-resistant PLC control subsystem is used to diagnose faults of the radiation-resistant PLC control subsystem, and the radiation-resistant PLC control subsystem adopts a dual-mode redundant design.

[0030] like Figure 5 As shown, the radiation-resistant PLC control subsystem adopts a dual-mode redundant design, specifically: the radiation-resistant PLC control subsystem includes a main PLC controller and a backup PLC controller, which have the same system structure: they are all composed of a power module, a CPU module, a coupling module and several I / O modules, including a main power module and a backup power module; a main CPU module and a backup CPU module; a main coupling module and a backup coupling module; a main I / O module and a backup I / O module, such as Figure 5 As shown, they are installed in sequence on the same backplane; the active CPU module and the standby CPU module communicate in real time.

[0031] The main coupling module and the standby coupling module are each connected to their own CPU module via an Ethernet cable, and the control signal is transmitted to their respective back-end I / O and communication gateway via the backplane. At the same time, the lower-level coupling modules are cascaded through Ethernet cables or optical fibers to achieve slave station expansion.

[0032] The main I / O module and the standby I / O module are connected to the same device. Under normal working conditions, the main PLC controller is working and the standby PLC controller is on standby. The standby means that the power module, CPU module and coupling module of the standby PLC controller are still in working state in the standby state, while the channels of several I / O modules are in the off state. When the main PLC controller is working, the channels of the main I / O module are opened to act on the device. When the main PLC controller fails, the standby PLC controller automatically takes over the control, and the channels of several I / O modules of the standby PLC controller are changed from the off state to the open state.

[0033] like Figure 6 As shown, when the active I / O module channel or the standby I / O module channel is turned on, they each use two channels to connect to the device, that is, the two channels send or receive the same data at the same time.

[0034] like Figure 1 As shown, the CPU of the non-radiation-resistant PLC control subsystem communicates in real time with the CPU of the main PLC controller and the CPU of the standby PLC controller of the radiation-resistant PLC control subsystem respectively; the CPU of the main PLC controller and the standby PLC controller store the error diagnostic code of the local device in a special register in their respective CPUs, and the error diagnostic code includes the error diagnostic code of the CPU itself, the coupling module, and the I / O interface; the CPU of the non-radiation-resistant PLC control subsystem accesses the fault code of the main PLC controller and the standby PLC controller in real time, and when a fault occurs, sends troubleshooting instructions to the CPU of the main PLC controller and the standby PLC controller, and the CPU of the main PLC controller and the standby PLC controller execute the troubleshooting instructions.

[0035] like Figure 2-4 As shown, the non-radiation-resistant PLC control subsystem is used to diagnose fault conditions of the radiation-resistant PLC control subsystem, specifically: diagnosing the fault conditions of the CPU, coupling module, and I / O module of the main PLC controller and the standby PLC controller of the radiation-resistant PLC control subsystem.

[0036] like Figure 2As shown, when the non-radiation-resistant PLC control subsystem diagnoses that the CPU of the main PLC controller of the radiation-resistant PLC control subsystem has a fault, the CPU of the non-radiation-resistant PLC control subsystem starts the CPU of the backup PLC controller and shuts down the CPU of the main PLC controller.

[0037] like Figure 3 As shown, when the non-radiation-resistant PLC control subsystem diagnoses that the coupling module of the main PLC controller is faulty through CPU communication between the two parties, the CPU of the main PLC controller is notified to stop the operation of its coupling module and I / O module, and the CPU of the main PLC controller is notified to connect to the coupling module of the standby PLC controller.

[0038] Supplementary Note 1:

[0039] 1) If Figure 1-4 As shown in the figure, since the coupling module is like a bridge between the CPU and the I / O module, once the coupling module fails, the I / O module behind it cannot be used. Figure 3 Although the coupling module fails, all I / O modules behind it also become disabled.

[0040] 2) When the coupling module of the active PLC controller fails, its CPU receives the coupling module connected to the standby PLC controller.

[0041] like Figure 4 As shown, when the non-radiation-resistant PLC control subsystem diagnoses through CPU communication between both parties that both channels of the main PLC controller currently connected to the same device are faulty, the CPU of the main PLC controller is notified to stop working the two channels, and the CPU of the main PLC controller is notified to connect to the corresponding I / O module of the standby PLC controller.

[0042] Supplementary Note 2:

[0043] like Figure 6 As shown, since the two channels of the current I / O module are connected to the same device, under normal circumstances, if a fault occurs, only one of them will fail, and in extreme cases, both channels will fail. Regardless of whether one or two channels of the current I / O module fail, the CPU of the non-radiation-resistant PLC control subsystem can access the error code through communication with the CPU of the main PLC controller, and send a troubleshooting instruction to the CPU of the main PLC controller of the radiation-resistant PLC control subsystem according to the error code.

[0044] It should be emphasized that the above specific embodiments are merely explanations of the present invention, and they are not limitations of the present invention. After reading this specification, those skilled in the art can make modifications to the above embodiments without any creative contribution as needed, but as long as they are within the scope of the claims of the present invention, they are protected by patent law.

Claims

1. A PLC control system for a radiation environment, the system comprising a control cabinet, a plurality of PLC control subsystems and various electrical devices, characterized in that: The multiple PLC control subsystems include a radiation-resistant PLC control subsystem deployed at a proximal accelerator site, and a non-radiation-resistant PLC control subsystem deployed at a remote non-accelerator site. The non-radiation-resistant PLC control subsystem is used to diagnose faults of the radiation-resistant PLC control subsystem, and the radiation-resistant PLC control subsystem adopts a dual-mode redundant design.

2. A PLC control system for a radiation environment according to claim 1, characterized in that: The radiation-resistant PLC control subsystem adopts a dual-mode redundant design, specifically: the radiation-resistant PLC control subsystem includes a main PLC controller and a backup PLC controller, which have the same system structure: both are composed of a power module, a CPU module, a coupling module and a plurality of I / O modules, including a main power module and a backup power module; Active CPU module and standby CPU module; A main coupling module and a standby coupling module; The active I / O module and the standby I / O module are installed in sequence on the same backplane; the active CPU module and the standby CPU module communicate in real time.

3. A PLC control system for a radiation environment according to claim 2, characterized in that: The main coupling module and the standby coupling module are each connected to their own CPU module via an Ethernet cable, and the control signal is transmitted to their respective back-end I / O and communication gateway via the backplane. At the same time, the lower-level coupling modules are cascaded through Ethernet cables or optical fibers to achieve slave station expansion.

4. A PLC control system for a radiation environment according to claim 2, characterized in that: The main I / O module and the standby I / O module are connected to the same device. Under normal working conditions, the main PLC controller works and the standby PLC controller is in standby mode. The standby mode means that the power module, CPU module and coupling module of the standby PLC controller are still in working mode in the standby mode, while the channels of several I / O modules are in off mode. When the main PLC controller is working, the main I / O module channel is opened and works on the equipment. When the main PLC controller fails, the standby PLC controller automatically takes over the control, and the channels of several I / O modules of the standby PLC controller change from the off state to the open state.

5. A PLC control system for a radiation environment according to claim 4, characterized in that: When the active I / O module channel or the standby I / O module channel is turned on, they each use two channels to connect to the device, that is, the two channels send or receive the same data at the same time.

6. A PLC control system for a radiation environment according to claim 2, characterized in that: The CPU of the non-radiation-resistant PLC control subsystem communicates in real time with the CPU of the main PLC controller and the CPU of the standby PLC controller of the radiation-resistant PLC control subsystem respectively; The CPUs of the active PLC controller and the standby PLC controller store the error diagnostic codes of the local devices in special registers in their respective CPUs. The error diagnostic codes include the error diagnostic codes of the CPU itself, the coupling module, and the I / O interface. The CPU of the non-radiation-resistant PLC control subsystem accesses the fault codes of the active PLC controller and the standby PLC controller in real time, and when a fault occurs, sends troubleshooting instructions to the CPUs of the active PLC controller and the standby PLC controller, and the CPUs of the active PLC controller and the standby PLC controller execute the troubleshooting instructions.

7. A PLC control system for a radiation environment according to claim 2, characterized in that: The non-radiation-resistant PLC control subsystem is used to diagnose faults in the radiation-resistant PLC control subsystem, specifically: diagnosing faults in the CPUs, coupling modules, and I / O modules of the main PLC controller and the standby PLC controller of the radiation-resistant PLC control subsystem.

8. A PLC control system for a radiation environment according to claim 7, characterized in that: When the non-radiation-resistant PLC control subsystem diagnoses that the CPU of the main PLC controller of the radiation-resistant PLC control subsystem has a fault, the CPU of the non-radiation-resistant PLC control subsystem starts the CPU of the standby PLC controller and shuts down the CPU of the main PLC controller.

9. A PLC control system for a radiation environment according to claim 7, characterized in that: When the non-radiation-resistant PLC control subsystem diagnoses that a coupling module of the main PLC controller is faulty through CPU communication between the two parties, the CPU of the main PLC controller is notified to stop the operation of its coupling module and I / O module, and the CPU of the main PLC controller is notified to connect to the coupling module of the standby PLC controller.

10. A PLC control system for a radiation environment according to claim 7, characterized in that: When the non-radiation-resistant PLC control subsystem diagnoses through CPU communication between both parties that both channels of the main PLC controller currently connected to the same device are faulty, the CPU of the main PLC controller is notified to stop the operation of the two channels, and the CPU of the main PLC controller is notified to connect to the corresponding I / O module of the standby PLC controller.

Images