Equipment control system for small nuclear reactor protection system
By setting up multiple sets of device interface modules in the equipment control subsystem of a small nuclear reactor and achieving feedback on equipment control commands, the problem of large space occupancy and inability to be repaired online is solved, and space saving and rapid processing of equipment failures is achieved.
Patent Information
- Application Number
- CN202411716177.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-27
- Publication Date
- 2025-04-04
AI Technical Summary
The equipment interface modules of existing small nuclear reactors occupy a large space, resulting in congestion in space and inability to perform online maintenance, affecting normal operation.
A device control system is designed to realize feedback of device control commands and online maintenance by setting at least two sets of device interface modules in each device control subsystem and connecting the device interface modules in a single device control subsystem with all dedicated security facilities in the same sequence.
It reduces the number of equipment interface modules installed, reduces space occupation, realizes online maintenance when a single equipment interface module fails, and ensures the normal operation and safety of small nuclear reactors.
Smart Images
Figure CN119763878A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of nuclear power technology, and in particular to an equipment control system for a small nuclear reactor protection system. Background Art
[0002] The statements herein merely provide background information related to the present invention and do not necessarily constitute prior art.
[0003] Nuclear energy plays an indispensable role in the current energy landscape. It not only provides a large amount of clean electricity to the world, but also plays a key role in promoting the diversification of energy structure. In addition to power generation, the application of nuclear energy has also expanded to many fields such as heating and seawater desalination, showing a wide range of application potential. Small nuclear reactors, as one of the important ways to diversify the application of nuclear energy, are gaining attention in more and more occasions, and provide new possibilities for achieving more flexible and sustainable energy utilization.
[0004] In the protection system of a small nuclear reactor, when the safety parameters monitored by the protection system reach or exceed the preset protection action setting value, the protection system will issue a protection function trigger signal, and respond to possible accidents or abnormal conditions by driving dedicated safety facilities to ensure the overall safety of the nuclear power plant; the equipment interface module is the interface for the protection system to control the dedicated safety facilities, and provides guarantees for the protection system to perform related functions.
[0005] In existing small nuclear reactors, the design space is limited, while the equipment interface module occupies a large space. Therefore, one equipment interface module is usually used to control up to three dedicated safety facilities to ensure the normal operation of the small nuclear reactor. However, this method still requires a large number of equipment interface modules to control all the dedicated safety facilities, resulting in crowded space in the small nuclear reactor, which is not conducive to maintenance; at the same time, when the equipment interface module fails, it is impossible to perform online maintenance of the equipment interface module, which affects the normal operation of the small nuclear reactor. Summary of the invention
[0006] The technical problem to be solved by the present invention is to provide an equipment control system for a small nuclear reactor protection system. By providing at least two groups of equipment interface modules in each equipment control subsystem of the equipment control system, a single equipment control subsystem can control all dedicated safety facilities in a sequence through only two equipment interface modules; at the same time, online maintenance can be achieved when a single equipment interface module fails.
[0007] The object of the present invention is to provide an equipment control system for a small nuclear reactor protection system, which is used for connecting the protection system with dedicated safety facilities; the equipment control system includes at least two equipment control subsystems, each of which includes at least two groups of equipment interface modules, and the equipment interface modules in each of the equipment control subsystems are connected to the protection system; the equipment interface modules in a single equipment control subsystem are connected to all dedicated safety facilities in the same sequence, and the equipment interface modules in a single equipment control subsystem are interconnected, and equipment control command feedback is performed.
[0008] As a further technical solution, the device interface modules in the single device control subsystem are all connected to all dedicated safety facilities in the same sequence. Specifically, the single device control subsystem also includes a D / O port and a D / I port. The device interface modules in the device control subsystem are all connected to all dedicated safety facilities in the same sequence through the D / O port, and all dedicated safety facilities in the same sequence are connected to the device control subsystem through the D / I port, and device status feedback of the dedicated safety facilities is performed.
[0009] As a further technical solution, the device interface modules are all connected to the protection system. Specifically, the device interface modules include a voting logic unit, which is connected to the protection system; the voting logic unit is used to receive the output signal of the protection system and perform voting logic processing.
[0010] As a further technical solution, the voting logic unit adopts a 2-out-of-4 or 2-out-of-3 processing method.
[0011] As a further technical solution, the device interface module also includes a preferred logic unit, which is used to receive the voting results of the voting logic unit and also to receive local control signals and non-safety-level system control signals; the preferred logic unit performs priority selection on the received voting results and control signals.
[0012] As a further technical solution, the device interface module also includes a device control logic unit, which is used to receive the priority selection result of the preferred logic unit, and is also used to receive device status feedback of dedicated safety facilities and device control commands of device control logic units in other device interface modules in the current device control subsystem, and to fan out control commands.
[0013] As a further technical solution, the device control command feedback is specifically that after the device control logic units in all device interface modules in a single device control subsystem generate a device control command, the device control logic units in each device interface module confirm the device control command, and when the device control commands are consistent, fan-out the device control commands.
[0014] As a further technical solution, the device control subsystem operates in one of FPGA SRAM, FPGA FLASH, FPGA and PLC.
[0015] As a further technical solution, the device interface module in the single device control subsystem and a single dedicated safety facility in a sequence are controlled in a 2V1 manner.
[0016] A device control method for a small nuclear reactor protection system, comprising:
[0017] S1, the protection system transmits the command signal to the equipment control subsystem;
[0018] S2. All device interface modules in the device control subsystem receive command signals through the voting logic unit and vote; after voting, the voting results are input into the optimization logic unit;
[0019] S3, the optimization logic unit receives the local control signal and the non-safety-level system control signal at the same time, performs priority selection, and inputs the selection result into the device control logic unit;
[0020] S4, the device control logic unit simultaneously receives the device status feedback of all dedicated safety facilities in the same sequence and generates a device control command; at the same time, the device control logic units in each device interface module perform device control command feedback, and when the device control commands are consistent, the device control commands are fanned out;
[0021] S5. The equipment control subsystem adjusts the operating status of all dedicated safety facilities in the same sequence according to the fan-out command; at the same time, all dedicated safety facilities in the same sequence provide equipment status feedback again through the D / I port and transmit it to the equipment control subsystem.
[0022] Beneficial effects of one or more of the above technical solutions:
[0023] (1) The present invention sets at least two groups of device interface modules in each device control subsystem, and the device control logic units in each group of device interface modules feedback the device control commands, so that all dedicated safety facilities in a sequence can be controlled by only two groups of device interface modules, thereby reducing the number of device interface modules installed and reducing the space occupied by the device interface modules in the small nuclear reactor, which is in line with the space design of the small nuclear reactor.
[0024] (2) The present invention controls the device interface module in a single device control subsystem and each dedicated safety facility in a sequence in a 2V1 manner, so that when a single device interface module fails or malfunctions, the other device interface module can still control the dedicated safety facility to operate, thereby realizing online maintenance of the failed device interface module without affecting the operation of the entire small nuclear reactor.
[0025] (3) The present invention controls different sequences of dedicated safety facilities through multiple equipment control subsystems, and the multiple equipment control subsystems adopt different operating modes, so that the entire small nuclear reactor meets the requirements of diversity, ensuring that the small nuclear reactor will not have common cause failures of equipment. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] The drawings in the specification that constitute a part of this application are used to provide further understanding of the present application. In order to facilitate understanding, the proportions between the structures of each part are adjusted. The schematic embodiments of the present application and their descriptions are used to explain the present application and do not constitute a limitation on the present application.
[0027] Figure 1 It is the equipment control solution for the CAP1000 nuclear power plant reactor protection system.
[0028] Figure 2 Equipment control solution for the reactor protection system in the NuScale power plant.
[0029] Figure 3 The present application discloses a logic diagram of a single device control subsystem in a device control system for a small nuclear reactor protection system.
[0030] Figure 4 Logic diagram for multiple equipment control subsystems set up in a small nuclear reactor protection system.
[0031] Figure 5 Schematic diagram for two equipment interface modules to control dedicated safety facilities in a sequence. DETAILED DESCRIPTION
[0032] The following is combined with Figure 1-5, clearly and completely describe the technical solutions in the embodiments of the present invention.
[0033] Meaning:
[0034] Voting logic: N takes M logic (where N>M), receives N set values in the small nuclear reactor protection system and the output results of the voting logic cabinet, and performs logical judgment. When the output results of M or more set value comparisons are 1, the output result is 1.
[0035] Optimization logic: Priority selection, priority selection of received automatic control signals (from voting logic), manual control signals (from other manual control devices), local control signals and signals from non-safety level systems, and the optimization results are sent to the unit of equipment control logic. Among them, the local control signal has the highest priority, followed by the automatic control signal and manual control signal in the reactor protection system, and finally the non-safety level system has the lowest priority.
[0036] Fan-out: Break down a general control command that requires simultaneous control of multiple dedicated safety facilities into direct control commands for each controlled dedicated safety facility.
[0037] Figure 1 This is the equipment control solution for the reactor protection system of the existing large-scale commercial CAP1000 nuclear power plant. In the reactor protection system, one device interface module corresponds to one dedicated safety facility and is controlled in a 1V1 manner. Among them, 1V1 means that a single device interface module controls one dedicated safety facility, that is, a dedicated safety facility only needs to obtain commands from a single device interface module.
[0038] Based on the above description of large nuclear power plants, each device interface module can select a different control operation mode to meet the diversity of the protection system and avoid common cause failures of the equipment; however, the number of device interface modules is proportional to the number of dedicated safety facilities, which makes this solution unsuitable for small nuclear reactor scenarios and unable to realize online maintenance of device interface modules.
[0039] At the same time, in some large-scale nuclear power plants, the control of dedicated safety facilities is also achieved through the 2V1 method; however, the fan-out position of the equipment control commands in large nuclear power plants is located between the voting logic unit and the preferred logic unit. This is because for large nuclear power plants, a single dedicated safety facility has a wider range of uses and receives more commands and signals; therefore, different dedicated safety facilities need to be equipped with separate preferred logic units and equipment control logic units to achieve precise control of a single dedicated safety facility.
[0040] In large nuclear power plants, the 2V1 control method is to control a single dedicated safety facility through two equipment interface modules, and the number ratio between equipment interface modules and dedicated safety facilities is also 2:1. This method is not suitable for the layout of small nuclear power plants. At the same time, the equipment interface modules in large nuclear power plants are all customized, and the equipment interface modules cannot be improved or modified.
[0041] Figure 2 This is the equipment control solution for the small reactor protection system of the existing NuScale power station. In order to adapt to the small space of the small reactor, the equipment interface module and the dedicated safety facilities are controlled in a 1V3 manner, and in order to ensure the normal operation of the small reactor, each equipment interface module controls at most three dedicated safety facilities.
[0042] Through the above description of the small reactor, although the occupied area of the equipment interface module can be reduced to a certain extent, a large number of equipment interface modules are still required to ensure the operation of the entire small reactor. At the same time, since the equipment interface module and the dedicated safety facilities are controlled in a 1V3 manner, when the equipment interface module fails, the online maintenance of the equipment interface module cannot be achieved, and the operation of the dedicated safety facilities is hindered, resulting in security loopholes in the safe operation of the small reactor.
[0043] Embodiment 1
[0044] The utility model relates to an equipment control system for a small nuclear reactor protection system, which is used for connection between the protection system and a dedicated safety facility.
[0045] Among them, the equipment control system includes at least two equipment control subsystems; this is because in the entire small nuclear reactor, the dedicated safety facilities are divided and divided into different sequences; and the dedicated safety facilities in different sequences are physically and electrically isolated. The dedicated safety facilities in different sequences may be completely consistent and used to play the same role to achieve redundant control; at the same time, the dedicated safety facilities in different sequences may not be completely the same and are used to play different roles. Therefore, by setting up multiple equipment control subsystems, a single equipment control subsystem can control the dedicated safety facilities in a single sequence.
[0046] Reference Figure 3 , described as a single device control subsystem.
[0047] Each device control subsystem includes at least two groups of device interface modules, and each device interface module in the device control subsystem is connected to the protection system. In this embodiment, the fixed value processing and voting logic cabinet is a part of the protection system, which is an entity used to receive sensor signals in the protection system and perform fixed value comparison processing and voting logic functions. The internal composition and connection method of each device interface module are exactly the same, and the number of device interface modules in each device control subsystem can also be adaptively adjusted.
[0048] The device interface module includes a voting logic unit, which is electrically connected to the fixed value processing and voting logic cabinet in the protection system, so as to receive the output signal of the fixed value processing and voting logic cabinet in the protection system, perform voting logic processing, and transmit the processed result to the next unit. In this embodiment, the voting logic unit adopts a 2-out-of-4 or 2-out-of-3 processing method, that is, it receives the output signals of four or three fixed value processing and voting logic cabinets, and uses a 2-out-of-4 or 2-out-of-3 voting logic method to process the signal.
[0049] At the same time, the device interface module also includes a preferred logic unit, and the preferred logic unit is not only used to receive the voting results of the voting logic unit, but also to receive local control signals and non-safety level system control signals; after receiving the corresponding signals, the preferred logic unit prioritizes the received voting results and control signals.
[0050] Among them, the voting result of the voting logic unit belongs to the automatic control signal, the local control signal is the control signal transmitted by the local control device, and the non-safety-level system control signal is the control signal transmitted from the non-safety-level system; in addition, the preferred logic unit can also be used to receive manual control signals from other manual control devices. After receiving the corresponding control signal, the preferred logic unit selects the priority of the control signal and transmits the selection result to the next unit.
[0051] In this embodiment, the device interface modules in a single device control subsystem are connected to all the dedicated safety facilities in the same sequence, and the device interface modules in a single device control subsystem are connected to each other and perform device control command feedback. The above functions are all implemented by the device control logic unit in the device interface module.
[0052] Among them, the device control logic unit is first used to receive the priority selection result of the preferred logic unit, and then used to receive the device control command of the device control logic unit in other device interface modules in the current device control subsystem, and finally used to receive the device status feedback of all dedicated safety facilities in the same sequence connected to the current device control subsystem, and fan out the control commands.
[0053] Specifically, a single device control subsystem also includes a D / O port and a D / I port, and the device interface modules in the device control subsystem are connected to all dedicated safety facilities in the same sequence through the D / O port, and the D / O port is electrically connected to the device control logic unit in the device interface module. At the same time, all dedicated safety facilities in the same sequence are connected to the device control subsystem through a single D / I port, and the device status feedback of the dedicated safety facilities is performed; and after receiving the device status feedback of the dedicated safety facilities, the device control subsystem will transmit the device status feedback information to the device control logic unit.
[0054] Through the above description, the device control logic unit in each device interface module generates the final device control command after receiving the priority selection result of the preferred logic unit and the device status feedback of the dedicated safety facility. After the device control logic unit in each device interface module generates the final device control command, the device control logic units in each device interface module confirm the device control command. When the control commands are consistent, the control commands are fanned out. When the control commands are inconsistent, the control commands are not fanned out. The above setting is to avoid abnormal operation of small nuclear reactors.
[0055] Among them, when the control command is fanned out, the control command fanned out can be performed through the device control logic unit in a single device interface module, and the fanned out command is transmitted to the corresponding dedicated safety facility in the same sequence through the D / O port, and the control of the operation status of the dedicated safety facility is completed. At the same time, after all dedicated safety facilities in the same sequence complete the state change, the device state feedback is performed again through the D / I port and transmitted to the device control subsystem to complete the entire control.
[0056] When the equipment control command does not fan out, but the operating status of the dedicated safety facility needs to be changed, other manual control devices can be used to change the status of another sequence with the same dedicated safety facility and the same operating function, thereby replacing the operation of the dedicated safety facility in the current sequence and maintaining the system at the same time.
[0057] Through the above method, a single equipment control subsystem can control all dedicated safety facilities in the same sequence through only two equipment interface modules, while complying with the layout of small nuclear power plants and saving layout space.
[0058] In addition, the equipment control system for the small nuclear reactor protection system also needs to have diversity; in the present embodiment, the equipment control system includes a plurality of equipment control subsystems, and each equipment control subsystem can be operated in one of FPGA SRAM, FPGA FLASH, FPGA and PLC, that is, the operation modes of the various equipment control subsystems can be the same or different; thereby satisfying the need for diversity in the equipment control system, thereby avoiding the problem of common cause failures caused by adopting the same operation mode at the same time.
[0059] Reference Figure 5 , the device interface module and each dedicated safety facility in a sequence are controlled by 2V1, and the same two device interface modules are used; this is impossible for large nuclear power plants. Among them, the two device interface modules control the K1 coil and the K2 coil separately. When the device needs to be opened, the two device interface modules redundantly control the two contacts in series with the K1 coil to close, so that the K1 coil is energized and the opening command is sent to the device drive mechanism; when the device needs to be closed, the two device interface modules redundantly control the two contacts in series with the K2 coil to close, so that the K2 coil is energized and the closing command is sent to the device drive mechanism. Therefore, the failure of a single device interface module will not affect the drive and control of the dedicated safety facilities.
[0060] Through 2V1 control, and each device interface module is able to control the dedicated safety facilities, when a single device interface module fails, another device interface module can be used to control and drive the dedicated safety facilities, and the failed device interface module can be repaired or replaced at the same time, thereby completing the online maintenance of the device interface module.
[0061] In addition, compared with the existing 1V3 control method, this implementation can control all dedicated safety facilities in a sequence through only two device interface modules, thereby greatly reducing the number of installed device interface modules, and is suitable for the layout of small nuclear reactor protection systems, while ensuring the normal operation of small nuclear reactor protection systems.
[0062] Reference Figure 4 , which is a control method for multiple equipment control subsystems to control multiple different sequences of dedicated safety facilities. Among them, the voting logic unit in each equipment control subsystem can adaptively select the 4-out-of-2 or 3-out-of-2 logic processing method; and each equipment control subsystem is also guaranteed to be completely independent. As for the number of equipment interface modules in the equipment control subsystem, it can also be adaptively adjusted under the premise of meeting the spatial layout of the small nuclear power plant, so as to ensure a more stable and safe operation of the small nuclear power plant.
[0063] Based on the above description, the control method of the equipment control system is as follows:
[0064] S1, the protection system transmits the command signal to the equipment control subsystem;
[0065] S2. All device interface modules in the device control subsystem receive the command signal through the voting logic unit and vote; after voting, the voting result is input into the optimization logic unit;
[0066] S3, the optimization logic unit receives the local control signal and the non-safety-level system control signal at the same time, performs priority selection, and inputs the selection result into the device control logic unit;
[0067] S4, the device control logic unit simultaneously receives the device status feedback of all dedicated safety facilities in the same sequence and generates a device control command; at the same time, the device control logic units in each device interface module perform device control command feedback, and when the device control commands are consistent, the device control commands are fanned out;
[0068] S5. The equipment control subsystem adjusts the operating status of all dedicated safety facilities in the same sequence according to the fan-out instruction; at the same time, all dedicated safety facilities in the same sequence provide equipment status feedback again through the D / I port and transmit it to the equipment control subsystem.
[0069] Through the above control method, a single device control subsystem can control all dedicated safety facilities in the same sequence.
[0070] Although the above describes the specific implementation mode of the present invention in conjunction with the accompanying drawings, it is not intended to limit the scope of protection of the present invention. Those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art on the basis of the technical solution of the present invention without creative work are still within the scope of protection of the present invention.
Claims
1. An equipment control system for a small nuclear reactor protection system, used for connecting the protection system with a dedicated safety facility; characterized in that: The equipment control system includes at least two equipment control subsystems, each of which includes at least two groups of equipment interface modules. The equipment interface modules in each equipment control subsystem are connected to the protection system; the equipment interface modules in a single equipment control subsystem are connected to all dedicated safety facilities in the same sequence, and the equipment interface modules in a single equipment control subsystem are interconnected and perform equipment control command feedback.
2. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device interface modules in the single device control subsystem are all connected to all dedicated safety facilities in the same sequence. Specifically, the single device control subsystem also includes a D / O port and a D / I port. The device interface modules in the device control subsystem are all connected to all dedicated safety facilities in the same sequence through the D / O port, and all dedicated safety facilities in the same sequence are connected to the device control subsystem through the D / I port, and device status feedback of the dedicated safety facilities is performed.
3. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device interface modules are all connected to the protection system. Specifically, the device interface modules include a voting logic unit, which is connected to the protection system; the voting logic unit is used to receive the output signal of the protection system and perform voting logic processing.
4. The device control system for a small nuclear reactor protection system according to claim 3, characterized in that: The voting logic unit adopts a 2-out-of-4 or 2-out-of-3 processing method.
5. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device interface module also includes a preferred logic unit, which is used to receive the voting results of the voting logic unit and is also used to receive local control signals and non-safety-level system control signals; the preferred logic unit performs priority selection on the received voting results and control signals.
6. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device interface module also includes a device control logic unit, which is used to receive the priority selection result of the preferred logic unit, and is also used to receive device status feedback of dedicated safety facilities and device control commands of device control logic units in other device interface modules in the current device control subsystem, and fan out control commands.
7. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device control command feedback is specifically that after the device control logic units in all device interface modules in a single device control subsystem generate a device control command, the device control logic units in each device interface module confirm the device control command, and when the device control commands are consistent, fan out the device control commands.
8. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The equipment control subsystem operates in one of FPGA SRAM, FPGA FLASH, FPGA and PLC.
9. The device control system for a small nuclear reactor protection system according to claim 1, characterized in that: The device interface module in the single device control subsystem is controlled with a single dedicated safety facility in a sequence in a 2V1 manner.
10. A device control method for a small nuclear reactor protection system based on a device control system for a small nuclear reactor protection system according to any one of claims 1 to 9, comprising: S1, the protection system transmits the command signal to the equipment control subsystem; S2. All device interface modules in the device control subsystem receive the command signal through the voting logic unit and vote; after voting, the voting result is input into the optimization logic unit; S3, the optimization logic unit receives the local control signal and the non-safety-level system control signal at the same time, performs priority selection, and inputs the selection result into the device control logic unit; S4, the device control logic unit simultaneously receives the device status feedback of all dedicated safety facilities in the same sequence and generates a device control command; at the same time, the device control logic units in each device interface module perform device control command feedback, and when the device control commands are consistent, the device control commands are fanned out; S5. The equipment control subsystem adjusts the operating status of all dedicated safety facilities in the same sequence according to the fan-out instruction; at the same time, all dedicated safety facilities in the same sequence provide equipment status feedback again through the D / I port and transmit it to the equipment control subsystem.