Method for interfacing a nuclear power plant ex-core nuclear instrumentation and reactor protection system

Abstract

The application provides a method for connecting a nuclear power plant out-of-core nuclear measurement system and a reactor protection system, comprising: outputting a "threshold trigger" signal of each instrument channel of the out-of-core nuclear measurement system to each protection channel of the reactor protection system through a connection mode of "relay parallel photo-coupler isolation"; and outputting a "test / error" signal of each instrument channel of the out-of-core nuclear measurement system to each protection channel of the reactor protection system through a connection mode of "relay series photo-coupler isolation". The application adopts a combined connection method of "photo-coupler-relay series" and "photo-coupler-relay parallel" to solve the problem that the signal trigger time sequence of the traditional single relay interface is random and the reactor is mistakenly triggered in some specific working conditions.

Description

Technical Field

[0001] The present application belongs to the field of nuclear power technology, and specifically relates to a method for connecting an interface between an off-core nuclear measurement system and a reactor protection system of a nuclear power plant. Background Art

[0002] The off-reactor nuclear measurement system (RPN system) and reactor protection system (RPR system) of nuclear power units (for example, Fuqing Nuclear Power Units 1-4) are typically implemented using a digital platform. The RPN system drives the relay to output its source range, intermediate range "threshold trigger" signal, and channel "test / error" signal switching signals to the RPR system for calculation and output of the reactor shutdown signal. This interface design currently has the problem of erroneously triggering the reactor shutdown when a single channel loses power or is powered on, which does not meet the design requirements. The response mechanism is explained as follows:

[0003] (1) The source range and intermediate range are designed with two instrument channels (CH1 and CH2). Each channel has two pairs of relays ("Threshold Trigger" 1, "Threshold Trigger" 2, and "Test / Error" 1, "Test / Error" 2). Each pair of relays drives two contact signals, which are sent to the four protection channels of the RPR system (IP, IIP, IIIP, and IVP). The interface relay contacts are designed to operate upon power failure. That is, after the relay loses power, the "Threshold Trigger" and "Test / Error" signals output by the RPN to the RPR are in the triggered state in the RPR software configuration. Assuming a channel power failure occurs, under normal circumstances, the "Test / Error" signal will be triggered first, blocking the "Threshold Trigger" signal, thereby preventing the triggering of a trip signal.

[0004] (2) Due to the uncertainty of relay triggering timing, if a single-channel power outage occurs and the "Threshold Trigger" 1 relay operates before the "Test / Error" 1 relay, the reactor will be shut down. Similarly, if the "Test / Error" relay is powered on before the threshold relay during the power restoration phase without human intervention, the reactor may also be triggered to trigger a shutdown signal. Summary of the Invention

[0005] In view of this, the present application is committed to providing a method for connecting the interface between the off-core nuclear measurement and reactor protection systems of a nuclear power plant. By adopting the "optocoupler-relay series" and "optocoupler-relay parallel" combined connection methods, it solves the problem that the traditional single relay interface between the source range or intermediate range of the off-core nuclear measurement system and the reactor protection system has random signal trigger timing, which may cause erroneous triggering of the reactor shutdown under certain specific working conditions.

[0006] The present application provides a method for connecting an off-core nuclear measurement system of a nuclear power plant to an interface with a reactor protection system. The method comprises:

[0007] The "threshold trigger" signal of the instrument channel one of the ex-core instrumentation system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay parallel optical coupling isolation".

[0008] The "threshold trigger" signal of the instrument channel two of the ex-core instrumentation system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay parallel optical coupling isolation".

[0009] The "test / error" signal of the instrument channel one of the ex-core instrumentation system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay series optical coupling isolation".

[0010] The "test / error" signal of the instrument channel two of the ex-core instrumentation system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay series optical coupling isolation".

[0011] In each protection channel of the reactor protection system, the "test / error" signal is taken "not", and then the "threshold trigger" signal and the "test / error" signals of two protection channels are logically "and" operated, and three signals are logically "or" operated to determine whether to generate the shutdown instruction of the corresponding protection channel, and the final shutdown instruction is determined according to the generation results of the shutdown instructions of the four protection channels.

[0012] In one specific embodiment of the present application, the instrument channel one of the ex-core instrumentation system has a "threshold trigger 1" signal and a "threshold trigger 2" signal.

[0013] The "threshold trigger" signal of the instrument channel one of the ex-core instrumentation system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay parallel optical coupling isolation", comprising:

[0014] The "threshold trigger 1" signal of the instrument channel one of the ex-core instrumentation system is transmitted to the protection channel one and the protection channel two of the reactor protection system through the "relay parallel optical coupling isolator";

[0015] The "threshold trigger 2" signal of the instrument channel one of the ex-core instrumentation system is transmitted to the protection channel three and the protection channel four of the reactor protection system through the "relay parallel optical coupling isolator".

[0016] In one specific embodiment of the present application, the instrument channel one of the ex-core instrumentation system also has a "test / error 1" signal and a "test / error 2" signal.

[0017] The "test / error" signal of the instrument channel one of the out-of-pile nuclear measurement system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay series optocoupler isolation", including:

[0018] The "test / error 1" signal of the instrument channel one of the out-of-pile nuclear measurement system is transmitted to the protection channel one and the protection channel two of the reactor protection system through the "relay series optocoupler isolator" respectively.

[0019] The "test / error 2" signal of the instrument channel one of the out-of-pile nuclear measurement system is transmitted to the protection channel three and the protection channel four of the reactor protection system through the "relay series optocoupler isolator" respectively.

[0020] In one specific embodiment of the present application, the instrument channel two of the out-of-pile nuclear measurement system has a "threshold trigger 1" signal and a "threshold trigger 2" signal.

[0021] The "threshold trigger" signal of the instrument channel two of the out-of-pile nuclear measurement system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay parallel optocoupler isolation", including:

[0022] The "threshold trigger 1" signal of the instrument channel two of the out-of-pile nuclear measurement system is transmitted to the protection channel one and the protection channel two of the reactor protection system through the "relay parallel optocoupler isolator".

[0023] The "threshold trigger 2" signal of the instrument channel two of the out-of-pile nuclear measurement system is transmitted to the protection channel three and the protection channel four of the reactor protection system through the "relay parallel optocoupler isolator" respectively.

[0024] In one specific embodiment of the present application, the instrument channel two of the out-of-pile nuclear measurement system also has a "test / error 1" signal and a "test / error 2" signal.

[0025] The "test / error" signal of the instrument channel two of the out-of-pile nuclear measurement system is output to the protection channel one, the protection channel two, the protection channel three and the protection channel four of the reactor protection system through the connection mode of "relay series optocoupler isolation", including:

[0026] The "test / error 1" signal of the instrument channel two of the out-of-pile nuclear measurement system is transmitted to the protection channel one and the protection channel two of the reactor protection system through the "relay series optocoupler isolator" respectively.

[0027] The "test / error 2" signal of the instrument channel two of the out-of-pile nuclear measurement system is transmitted to the protection channel three and the protection channel four of the reactor protection system through the "relay series optocoupler isolator" respectively.

[0028] In one embodiment of the present application, in each protection channel of the reactor protection system, the "test / error" signal is logically ANDed with the "threshold trigger" signal after being logically NOTed, and the "test / error" signals of the two protection channels are logically ANDed, and the three signals are logically ORed to determine whether to generate a shutdown command of the corresponding protection channel, and a "4-to-2" logical operation is performed according to the generation results of the shutdown commands of the four protection channels to determine whether to generate a final shutdown command, including:

[0029] In the normal operation mode, the relays and optocoupler isolators of the "threshold trigger" signals in the instrument channel one CH1 and the instrument channel two CH2 of the out-of-core nuclear instrumentation system are energized, and the output is "0". The relays and optocoupler isolators of the "test / error" signals are also energized, and the output is "0", so no final shutdown command will be generated.

[0030] When the reactor power abnormally rises, the instrument channel one CH1 and the instrument channel two CH2 of the out-of-core nuclear instrumentation system (RPN) detect the reactor anomaly to generate a "threshold trigger" signal, that is, in the protection channel one IP of the reactor protection system, the "threshold trigger" signal TRIP-CH1-IP transmitted from the instrument channel one CH1 of the out-of-core nuclear instrumentation (RPN) system and the "threshold trigger" signal TRIP-CH2-IP transmitted from the instrument channel two CH2 of the out-of-core nuclear instrumentation (RPN) system are both "1", while the "test / error" signal TF-CH1-IP transmitted from the instrument channel one CH1 of the out-of-core nuclear instrumentation (RPN) system and the "test / error" signal TF-CH2-IP transmitted from the instrument channel two CH2 of the out-of-core nuclear instrumentation (RPN) system are "0" (no test / error) after being logically NOTed, and the logical AND is "1", triggering the reactor protection system IP shutdown signal. The protection channel two IIP, the protection channel three IIIP, and the protection channel four IVP of the reactor protection system are the same, and also generate the shutdown signals in the respective channels. The shutdown signals of the four channels are logically "4-to-2" operated to generate the final shutdown command.

[0031] In one embodiment of the present application, in each protection channel of the reactor protection system, the "test / error" signal is logically ANDed with the "threshold trigger" signal after being logically NOTed, and the "test / error" signals of the two protection channels are logically ANDed, and the three signals are logically ORed to determine whether to generate a shutdown command of the corresponding protection channel, and a "4-to-2" logical operation is performed according to the generation results of the shutdown commands of the four protection channels to determine whether to generate a final shutdown command, including:

[0032] When one instrument channel of the ex-core instrumentation system loses power, the "threshold trigger" signal and the "test / error" signal are generated simultaneously, the "test / error" signal is logically ANDed with the "threshold trigger" signal and the "test / error" signals of the two protection channels, and the three signals are logically ORed to determine that no shutdown command is generated by the multiple protection channels. The "4-to-2" logic operation is performed according to the result that no shutdown command is generated by the multiple protection channels, and it is determined that no final shutdown command is generated.

[0033] When one instrument channel of the ex-core instrumentation system regains power, the "test / error" signal is logically ANDed with the "threshold trigger" signal and the "test / error" signals of the two protection channels, and the three signals are logically ORed to determine that no shutdown command is generated by the multiple protection channels. The "4-to-2" logic operation is performed according to the result that no shutdown command is generated by the multiple protection channels, and it is determined that no final shutdown command is generated.

[0034] In one specific embodiment of the present application, in each protection channel of the reactor protection system, the "test / error" signal is logically ANDed with the "threshold trigger" signal and the "test / error" signals of the two protection channels, and the three signals are logically ORed to determine whether a shutdown command of the corresponding protection channel is generated. The "4-to-2" logic operation is performed according to the results of the shutdown commands of the four protection channels, and it is determined whether a final shutdown command is generated. The method includes:

[0035] In the test test mode, when one protection channel of the ex-core instrumentation system performs a periodic test, the other protection channel of the ex-core instrumentation system functions normally. The "test / error" signal is logically ANDed with the "threshold trigger" signal and the "test / error" signals of the two protection channels, and the three signals are logically ORed to determine that no shutdown command is generated by the multiple protection channels. The "4-to-2" logic operation is performed according to the result that no shutdown command is generated by the multiple protection channels, and it is determined that no final shutdown command is generated.

[0036] The beneficial effects of the technical scheme of the application are that: mainly by using the response time of the optocoupler which is much faster than the response time of the relay, two types of combination connection methods are proposed, the "optocoupler-relay parallel combination" connection is used to realize the "threshold trigger" function, and the "optocoupler-relay series combination" connection is used to realize the "test / error" signal trigger function. Through the combination connection methods of "optocoupler-relay series" and "optocoupler-relay parallel" described above, the optocoupler and relay sub-components are effectively connected in series and parallel by using simple circuit connection, the external interface can be designed in the form of adapting the original relay board card, that is, the effective replacement can be realized, the problem of random timing in the traditional connection method is solved, the risk of power loss induced reactor false trigger shutdown in the current unit design can be solved, and the shutdown risk induced by the "test / error" signal unable to lock the "threshold trigger" signal in the power recovery process can also be avoided, the reliability of the interface connection is improved, and the combination connection method with faster response is adopted, and the response time is also better. BRIEF DESCRIPTION OF DRAWINGS

[0037] Figure 1 Fig. 1 shows a flowchart of a nuclear power plant ex-core nuclear instrumentation and reactor protection system interface connection method provided by an embodiment of the application.

[0038] Figure 2 Fig. 2 shows a design principle diagram of a nuclear power plant ex-core nuclear instrumentation and reactor protection system interface connection method provided by an embodiment of the application. DETAILED DESCRIPTION

[0039] The technical solutions in the embodiments of the application will be described clearly and completely below with reference to the drawings in the embodiments of the application. Obviously, the described embodiments are only part of the embodiments of the application, not all the embodiments. Based on the embodiments in the application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the application.

[0040] The ex-core nuclear instrumentation system and the reactor protection system are both nuclear level systems, and both are related to nuclear safety. The abnormal condition of the power measured by the ex-core nuclear instrumentation system is sent to the reactor protection system to trigger shutdown, and due to the requirements of the response time of the entire reactor protection system channel and the system reliability, the traditional connection adopts a single relay element interface, and there is a random problem of trigger timing, which leads to that the signal cannot be triggered according to the expected timing under certain working conditions.

[0041] Based on this, at least one embodiment of the present application provides a nuclear power plant out-of-core nuclear measurement and reactor protection system interface connection method, the out-of-core nuclear measurement (RPN) system is divided into instrument channel one CH1 and instrument channel two CH2, the reactor protection (RPR) system is divided into protection channel one IP, protection channel two IIP, protection channel three IIIP and protection channel four IVP. Reference Figure 1 The nuclear power plant out-of-core nuclear measurement and reactor protection system interface connection method comprises the following steps.

[0042] S1: The "threshold trigger" signal of the instrument channel one CH1 of the out-of-core nuclear measurement system is output to the protection channel one IP, the protection channel two IIP, the protection channel three IIIP and the protection channel four IVP of the reactor protection system through the connection mode of "relay parallel optical coupling isolation".

[0043] S2: The "threshold trigger" signal of the instrument channel two CH2 of the out-of-core nuclear measurement system is output to the protection channel one IP, the protection channel two IIP, the protection channel three IIIP and the protection channel four IVP of the reactor protection system through the connection mode of "relay parallel optical coupling isolation".

[0044] S3: The "test / error" signal of the instrument channel one CH1 of the out-of-core nuclear measurement system is output to the protection channel one IP, the protection channel two IIP, the protection channel three IIIP and the protection channel four IVP of the reactor protection system through the connection mode of "relay series optical coupling isolation".

[0045] S4: The "test / error" signal of the instrument channel two CH2 of the out-of-core nuclear measurement system is output to the protection channel one IP, the protection channel two IIP, the protection channel three IIIP and the protection channel four IVP of the reactor protection system through the connection mode of "relay series optical coupling isolation".

[0046] S5: In each protection channel of the reactor protection system, the "test / error" signal is taken "not", and then the "threshold trigger" signal and the "test / error" signals of two protection channels are logically "and" operated, three signals are logically "or" operated, and it is determined whether the shutdown instruction of the corresponding protection channel is generated, and the final shutdown instruction is determined according to the "4 to 2" logical operation result of the shutdown instruction of the four protection channels.

[0047] The connection method of the new type out-of-pile nuclear measurement system and the reactor protection system shutdown timing interface proposed in the embodiments of the present application mainly utilizes the response time of the optical coupler isolator which is much faster than the response time of the relay, and proposes two types of combined connection methods. The "optical coupler- relay parallel combination" connection is used to realize the "threshold trigger" function, and the "optical coupler- relay series combination" connection is used to realize the "test / error" signal trigger function. Through the "optical coupler- relay series" and "optical coupler- relay parallel" combined connection methods described, the optical coupler and relay subcomponents are effectively connected in series and in parallel by using a simple circuit, and the external interface can be designed in the form of adapting the original relay board card, that is, the effective replacement can be realized, solving the timing randomness problem in the traditional connection method, and the risk of introducing reactor false trigger shutdown due to power loss in the current unit design can be solved. At the same time, the shutdown risk introduced by the "test / error" signal unable to lock the "threshold trigger" signal in the power recovery process can also be avoided, the reliability of the interface connection is improved, and the combined connection method with faster response is adopted, and the response time is also better.

[0048] Reference Figure 2 When the out-of-pile nuclear measurement system single channel loses power, that is, in the case that a certain instrument channel (instrument channel one CH1 or instrument channel two CH2) in the out-of-pile nuclear measurement system loses power, in order to ensure that the reactor is in a safe mode when one of the channels loses power, and to avoid false shutdown, the "threshold trigger" and "test / error" will be generated at the same time when one of the channels loses power. Considering the scanning period of the processor (CPU) of the reactor protection system, and the fault safety design of the out-of-pile nuclear measurement system and the reactor protection system interface adopting power loss action. Therefore, the connection between the "test / error" signal and the reactor protection system adopts the "relay series optical coupler isolation" connection method, and the "threshold trigger" signal and the reactor protection system adopt the "relay parallel optical coupler isolation" connection method.

[0049] Because the transmission time of the optical coupler is much faster than the time of the relay signal action, when a certain channel (instrument channel one CH1 or instrument channel two CH2) in the out-of-pile nuclear measurement system (RPN) loses power, the "test / error" signal using the series connection method is collected by the reactor protection system (RPR) first than the "threshold trigger" signal using the parallel connection method. The "test / error" signal and the "threshold trigger" signal perform logical "and" operation, and the "test / error" will lock the "threshold trigger" signal, and no shutdown instruction will be generated in the reactor protection system.

[0050] When the channel of the out-core instrumentation system is powered, that is, the maintenance of a certain channel (instrumentation channel one CH1 or instrumentation channel two CH2) in the out-core instrumentation system is over or the upstream power supply is restored, in order to ensure that the power-on process will not trigger the shutdown by mistake, the "threshold trigger" signal in the parallel connection mode will disappear in the reactor protection system (RPR) earlier than the "test / error" signal in the series connection mode. The shutdown instruction will not be generated by mistake during the power restoration process.

[0051] The design realizes that when a certain channel in the out-core instrumentation system loses power (upstream power loss or cabinet power loss) or the channel is powered, the "test / error" will always lock the "threshold trigger" signal in the normal working condition of the reactor. The randomness of the relay action is avoided, and the "threshold trigger" is collected by the reactor protection system (RPR) earlier than the "test / error" to generate the "false shutdown" signal. Thus, the high reliability of the system and the economy of the enterprise are ensured.

[0052] Reference Figure 2 The left out-core instrumentation (RPN) system is divided into instrumentation channel one CH1 and instrumentation channel two CH2, and the right reactor protection (RPR) system is divided into protection channel one IP, protection channel two IIP, protection channel three IIIP, and protection channel four IVP.

[0053] In at least one embodiment of the present application, the instrumentation channel one CH1 in the out-core instrumentation (RPN) system has a "threshold trigger 1" signal and a "threshold trigger 2" signal. S1.1 and S1.2 are a specific implementation of the above S1.

[0054] S1.1: The "threshold trigger 1" signal of the instrumentation channel one CH1 in the out-core instrumentation (RPN) system is transmitted to the protection channel one IP and the protection channel two IIP of the reactor protection system through the "relay parallel optocoupler isolator".

[0055] S1.2: The "threshold trigger 2" signal of the instrumentation channel one CH1 in the out-core instrumentation (RPN) system is transmitted to the protection channel three IIIP and the protection channel four IVP of the reactor protection system through the "relay parallel optocoupler isolator", respectively.

[0056] In at least one embodiment of the present application, the instrumentation channel one CH1 in the out-core instrumentation (RPN) system also has a "test / error 1" signal and a "test / error 2" signal. S3.1 and S3.2 are a specific implementation of the above S3.

[0057] S3.1: The "test / fault 1" signal of instrument channel one CH1 in the ex-core instrumentation (RPN) system is transmitted through a "relay in series with opto-coupler isolator" to protection channel one IP and protection channel two IIP of the reactor protection system, respectively.

[0058] S3.2: The "test / fault 2" signal of instrument channel one CH1 in the ex-core instrumentation (RPN) system is transmitted through a "relay in series with opto-coupler isolator" to protection channel three IIIP and protection channel four IVP of the reactor protection system, respectively.

[0059] In at least one embodiment of the present application, instrument channel two CH2 in the ex-core instrumentation (RPN) system has a "threshold trigger 1" signal and a "threshold trigger 2" signal. S2.1 and S2.2 are a specific implementation of the above S2.

[0060] S2.1: The "threshold trigger 1" signal of instrument channel two CH2 in the ex-core instrumentation (RPN) system is transmitted through a "relay in parallel with opto-coupler isolator" to protection channel one IP and protection channel two IIP of the reactor protection system.

[0061] S2.2: The "threshold trigger 2" signal of instrument channel two CH2 in the ex-core instrumentation (RPN) system is transmitted through a "relay in parallel with opto-coupler isolator" to protection channel three IIIP and protection channel four IVP of the reactor protection system, respectively.

[0062] In at least one embodiment of the present application, instrument channel two CH2 in the ex-core instrumentation (RPN) system also has a "test / fault 1" signal and a "test / fault 2" signal. S4.1 and S4.2 are a specific implementation of the above S4.

[0063] S4.1: The "test / fault 1" signal of instrument channel two CH2 in the ex-core instrumentation (RPN) system is transmitted through a "relay in series with opto-coupler isolator" to protection channel one IP and protection channel two IIP of the reactor protection system, respectively.

[0064] S4.2: The "test / fault 2" signal of instrument channel two CH2 in the ex-core instrumentation (RPN) system is transmitted through a "relay in series with opto-coupler isolator" to protection channel three IIIP and protection channel four IVP of the reactor protection system, respectively.

[0065] For example, reference is made to Figure 2The protection channel 1 IP of the reactor protection (RPR) system receives the “threshold trigger” signal TRIP-CH1-IP and the “test / error” signal TF-CH1-IP transmitted from the instrument channel 1 CH1 of the external reactor nuclear measurement (RPN) system, as well as the “threshold trigger” signal TRIP-CH2-IP and the “test / error” signal TF-CH2-IP transmitted from the instrument channel 2 CH2 of the external reactor nuclear measurement (RPN) system; the protection channel 2 IIP of the reactor protection (RPR) system receives the “threshold trigger” signal TRIP-CH1-IIP and the “test / error” signal TF-CH1-IIP transmitted from the instrument channel 1 CH1 of the external reactor nuclear measurement (RPN) system, as well as the “threshold trigger” signal TRIP-CH2-IIP and the “test / error” signal TF-CH2-IIP transmitted from the instrument channel 2 CH2 of the external reactor nuclear measurement (RPN) system; the reaction Protection channel three IIIP of the reactor protection (RPR) system receives the "threshold trigger" signal TRIP-CH1-IIIP and the "test / error" signal TF-CH1-IIIP transmitted from instrument channel one CH1 of the external reactor nuclear measurement (RPN) system, as well as the "threshold trigger" signal TRIP-CH2-IIIP and the "test / error" signal TF-CH2-IIIP transmitted from instrument channel two CH2 of the external reactor nuclear measurement (RPN) system; protection channel four IVP of the reactor protection system receives the "threshold trigger" signal TRIP-CH1-IVP and the "test / error" signal TF-CH1-IVP transmitted from instrument channel one CH1 of the external reactor nuclear measurement (RPN) system, as well as the "threshold trigger" signal TRIP-CH2-IVP and the "test / error" signal TF-CH2-IVP transmitted from instrument channel two CH2 of the external reactor nuclear measurement (RPN) system.

[0066] In at least one embodiment of the present application, S5.1 and S5.2 are a specific implementation of the above-mentioned S5.

[0067] S5.1: In normal operation mode, the relays and optocouplers for the "threshold trigger" signal in instrument channel 1 (CH1) and instrument channel 2 (CH2) of the off-core nuclear measurement system are energized, and the output is "0." The relays and optocouplers for the "test / error" signal are energized, and the output is "0," and the final shutdown command will not be generated.

[0068] S5.2: When the reactor power is abnormally raised, the instrument channel one CH1 and the instrument channel two CH2 of the reactor power nuclear instrumentation system (RPN) detect the reactor abnormality to generate a "threshold trigger" signal, that is, the "threshold trigger" signal TRIP-CH1-IP transmitted from the instrument channel one CH1 of the reactor power nuclear instrumentation system (RPN) to the protection channel one IP of the reactor protection system, the "threshold trigger" signal TRIP-CH2-IP transmitted from the instrument channel two CH2 of the reactor power nuclear instrumentation system (RPN) to the protection channel one IP of the reactor protection system are both "1", and the "test / error" signal TF-CH1-IP transmitted from the instrument channel one CH1 of the reactor power nuclear instrumentation system (RPN) to the protection channel one IP of the reactor protection system, the "test / error" signal TF-CH2-IP transmitted from the instrument channel two CH2 of the reactor power nuclear instrumentation system (RPN) to the protection channel one IP of the reactor protection system are both "0" (no test / error) after taking the logical "not", and the logical "and" is "1" to trigger the reactor protection system IP shutdown signal, the protection channel two IIP, the protection channel three IIIP and the protection channel four IVP of the reactor protection system are the same, and the shutdown signals in the respective channels are also generated, and the shutdown signals of the four channels are subjected to a logical "4-to-2" operation to generate the final shutdown instruction.

[0069] In at least one embodiment of the present application, S5.3 and S5.4 are a specific implementation of the above S5.

[0070] S5.3: When the instrument channel of the reactor power nuclear instrumentation system loses power, the instrument channel simultaneously generates a "threshold trigger" signal and a "test / error" signal, the "test / error" signal is taken "not" and then logically "and" with the "threshold trigger" signal, and the "test / error" signals of the two protection channels are logically "and" operated, the three signals are logically "or" operated to determine that the multiple protection channels do not generate the shutdown instruction, and the "4-to-2" logical operation is performed according to the multiple protection channels not generating the shutdown instruction to determine that the final shutdown instruction is not generated.

[0071] Assuming that the instrument channel one CH1 loses power, the instrument channel one CH1 loses power will produce "threshold trigger" and "test / error" at the same time, but the "test / error" signal is isolated by "relay in series optocoupler isolator", the response time depends on the optocoupler isolator, and the "threshold trigger" signal is isolated by "relay in parallel optocoupler isolator", the response time depends on the relay. The response time of the optocoupler isolator is faster than that of the relay, so the "test / error" signal will enter the reactor protection system (RPR) earlier than the "threshold trigger" in the transmission time, that is, the TF-IP-IP signal in the protection channel one IP of the reactor protection system will block the TRIP-IP-IP signal (TF-IP-IP is "1" after taking the complement, and TRIP-IP-IP is "1", and the two are "and" to "0"), so the protection channel one IP of the reactor protection system will not produce a trip signal, and similarly for the protection channel two IIP or the protection channel three IIIP or the protection channel four IVP, so the final trip command will not be generated. It will not cause the reactor to be mistakenly stopped.

[0072] At this time, the instrument channel two CH2 of the ex-core nuclear instrumentation system is functioning normally, and if an abnormal operating condition of the reactor occurs at this time, the reactor trip can be triggered through the instrument channel two CH2. No "refusal to act" situation will occur due to single channel power loss. The protection channel two IIP of the ex-core nuclear instrumentation system loses power in the same way.

[0073] S5.4: When the ex-core nuclear instrumentation system single channel recovers power, the "test / error" signal is taken "not" and then logically "and" with the "threshold trigger" signal and the "test / error" signals of the two protection channels, and the three signals are logically "or" operated to determine that multiple protection channels do not produce trip commands, and a "4-to-2" logic operation is performed according to the multiple protection channels not producing trip commands to determine that no final trip command is generated.

[0074] Specifically, when a channel in the out-of-core nuclear instrumentation system, assuming that the instrument channel one CH1 maintenance ends or upstream power supply is restored, in order to ensure that the power-on process will not trigger the false shutdown. The "threshold trigger" signal uses the "relay in parallel optocoupler isolator" connection mode, and its response when the power supply is restored depends on the optocoupler isolator. The "test / error" signal uses the "relay in series optocoupler isolator" connection mode, and its response when the power supply is restored depends on the relay. Because the optocoupler isolator has a faster response time than the relay, therefore in the transmission time, the "threshold trigger" signal will disappear from the reactor protection system (RPR) earlier than the "test / error" signal. That is, the TRIP-CH1-IP signal in the protection channel one IP of the reactor protection system will first become "0", at this time TF-CH1-IP is "1", and after taking the complement, it becomes "0", and no shutdown signal is output. Then TF-CH1-IP becomes 0, and after taking the complement, it becomes "1", and the two are "and" as "0", so no shutdown signal will be generated in the protection channel one IP of the reactor protection system. Similarly, the protection channel two IIP or the protection channel three IIIP or the protection channel four IVP are similar, so no final shutdown command will be generated. No reactor false shutdown will be caused.

[0075] In at least one embodiment of the present application, S5.5 is a specific implementation of S5.

[0076] S5.5: In the test test mode, when one protection channel of the out-of-core nuclear instrumentation system performs a periodic test, another protection channel of the out-of-core nuclear instrumentation system functions normally, respectively, the "test / error" signal is taken "not" and then the "threshold trigger" signal and the "test / error" signals of the two protection channels are logically "and" operated, and the three signals are logically "or" operated to determine that no shutdown command is generated in multiple protection channels, and according to the "4 to 2" logical operation of the multiple protection channels not generating the shutdown command, it is determined that no final shutdown command is generated.

[0077] For example, when a channel in the out-of-core nuclear instrumentation system, assuming that the instrument channel one CH1 performs a periodic test, first the operator first hits the "test" position through the "test rotary switch", then the channel will generate the "test / error" signal, that is, TF-CH1-IP in the protection channel one IP of the reactor protection system is "1" and after taking the complement, it becomes "0". During the test execution, TRIP-CH1-IP will forcibly trigger a "1" signal, which will be blocked by TF-CH1-IP as "0" signal. Therefore, no shutdown signal will be generated during the test.

[0078] When the protection channel one IP of the out-of-pile nuclear measurement system performs the test, at this time the protection channel two IIP of the out-of-pile nuclear measurement system functions normally, if at this time the related abnormal conditions of the reactor occur, the reactor shutdown can be triggered by the protection channel two IIP. The "refuse to act" situation will not be caused by the test. The situation of the protection channel two IIP of the out-of-pile nuclear measurement system performing the periodic test is the same.

[0079] It should be noted that the combination of various technical features in the embodiments of the present application is not limited to the combination manner described in the embodiments of the present application or the combination manner described in the specific embodiments, and all the technical features described in the present application can be freely combined or combined in any manner, unless contradictory.

[0080] The above only describes the preferred embodiments of the present application and is not intended to limit the present application. Any modification, equivalent replacement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A method for connecting the interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant, characterized in that: include: The "threshold trigger" signal of instrument channel 1 of the off-core nuclear measurement system is output to protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay parallel optocoupler isolation" connection method; The "threshold trigger" signal of instrument channel 2 of the off-core nuclear measurement system is output to protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay parallel optocoupler isolation" connection method; The "test / error" signal of instrument channel 1 of the off-core nuclear measurement system is output to protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay in series with optocoupler isolation" connection method. The "test / error" signal of instrument channel 2 of the off-core nuclear measurement system is output to protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay in series with optocoupler isolation" connection method. In each protection channel of the reactor protection system, a logical AND operation is performed on the "test / error" signal after negation, and then the logical AND operation is performed on the "upper threshold trigger" signal and the "test / error" signals of the two protection channels. A logical OR operation is then performed on these three signals to determine whether a shutdown instruction for the corresponding protection channel has been generated. A "2 out of 4" logical operation is then performed based on the shutdown instruction generation results of the four protection channels to determine whether a final shutdown instruction has been generated.

2. A method for connecting an interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant according to claim 1, characterized in that: The instrument channel 1 in the out-of-core nuclear measurement system has a "threshold trigger 1" signal and a "threshold trigger 2" signal. The "threshold trigger" signal of the instrument channel 1 of the off-core nuclear measurement system is output to the protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay parallel optocoupler isolation" connection method, including: The "threshold trigger 1" signal of instrument channel 1 in the off-core nuclear measurement system is transmitted to protection channels 1 and 2 of the reactor protection system through the "relay parallel optocoupler isolator"; The "threshold trigger 2" signal of instrument channel 1 in the off-core nuclear measurement system is transmitted to protection channels 3 and 4 of the reactor protection system through the "relay parallel optocoupler isolator".

3. A method for connecting an interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant according to claim 1, characterized in that: The instrument channel 1 in the out-of-core nuclear test system also has "test / error 1" signal and "test / error 2" signal. The "test / error" signal of the instrument channel 1 of the off-core nuclear measurement system is output to the protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay series optocoupler isolation" connection method, including: The "test / error 1" signal from instrument channel 1 of the off-core nuclear measurement system is transmitted to protection channel 1 and protection channel 2 of the reactor protection system through a "relay in series with optocoupler isolator"; The "test / error 2" signal of instrument channel 1 of the off-core nuclear measurement system is transmitted to protection channel 3 and protection channel 4 of the reactor protection system through the "relay in series with optocoupler isolator".

4. A method for connecting an interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant according to claim 1, characterized in that: The instrument channel 2 in the out-of-core nuclear measurement system has "threshold trigger 1" signal and "threshold trigger 2" signal. Among them, the "threshold trigger" signal of the instrument channel 2 of the off-core nuclear measurement system is output to the protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay parallel optocoupler isolation" connection method, including: The "threshold trigger 1" signal of instrument channel 2 in the off-core nuclear measurement system is transmitted to protection channels 1 and 2 of the reactor protection system through the "relay parallel optocoupler isolator"; The "threshold trigger 2" signal of instrument channel 2 in the off-core nuclear measurement system is transmitted to protection channel 3 and protection channel 4 of the reactor protection system through the "relay parallel optocoupler isolator" respectively.

5. A method for connecting an interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant according to claim 1, characterized in that: The instrument channel 2 in the out-of-core nuclear test system also has "test / error 1" signal and "test / error 2" signal. The "test / error" signal of the instrument channel 2 of the off-core nuclear measurement system is output to the protection channels 1, 2, 3, and 4 of the reactor protection system through the "relay series optocoupler isolation" connection method, including: The "Test / Error 1" signal from instrument channel 2 of the off-core nuclear measurement system is transmitted to protection channel 1 and protection channel 2 of the reactor protection system through a "relay in series with optocoupler isolator"; The "test / error 2" signal of instrument channel 2 in the off-core nuclear measurement system is transmitted to protection channel 3 and protection channel 4 of the reactor protection system through the "relay in series with optocoupler isolator".

6. A method for connecting an interface between an off-core nuclear test system and a reactor protection system of a nuclear power plant according to any one of claims 1 to 5, characterized in that: In each protection channel of the reactor protection system, a logical AND operation is performed on the "test / error" signal after negation, the upper threshold trigger signal, and the "test / error" signals of the two protection channels. A logical OR operation is performed on the three signals to determine whether a shutdown instruction for the corresponding protection channel is generated. A "2 out of 4" logical operation is performed based on the shutdown instruction generation results of the four protection channels to determine whether a final shutdown instruction is generated, including: In normal operation mode, the relays and optocouplers of the "threshold trigger" signal in instrument channel 1 (CH1) and instrument channel 2 (CH2) of the off-core nuclear measurement system are both energized and output "0." The relays and optocouplers of the "test / error" signal are both energized and output "0." Therefore, the final shutdown command will not be generated. When the reactor power rises abnormally, the instrument channel 1 CH1 and instrument channel 2 CH2 of the RPN system detect the reactor abnormality and generate a "threshold trigger" signal. That is, in the protection channel 1 IP of the reactor protection system, the "threshold trigger" signal TRIP-CH1-IP transmitted from the instrument channel 1 CH1 of the RPN system and the "threshold trigger" signal TRIP-CH2-IP transmitted from the instrument channel 2 CH2 of the RPN system are both "1", while the instrument channel 1 CH1 of the RPN system is "1". The "test / error" signal TF-CH1-IP transmitted and the "test / error" signal TF-CH2-IP transmitted from the instrument channel 2 CH2 of the external nuclear test (RPN) system are "0" (no test / error). After taking the logical "not" (negation), they become "1". The logical "and" ("1") triggers the reactor protection system IP trip signal. The same situation occurs for the reactor protection system's protection channel 2 IIP, protection channel 3 IIIP, and protection channel 4 IVP. They also generate trip signals within their respective channels. The trip signals of the four channels undergo a logical "4-to-2" operation to produce the final trip command.

7. A method for connecting an interface between an off-core nuclear test system and a reactor protection system of a nuclear power plant according to any one of claims 1 to 5, characterized in that: In each protection channel of the reactor protection system, a logical AND operation is performed on the "test / error" signal after negation, the upper threshold trigger signal, and the "test / error" signals of the two protection channels. A logical OR operation is performed on the three signals to determine whether a shutdown instruction for the corresponding protection channel is generated. A "2 out of 4" logical operation is performed based on the shutdown instruction generation results of the four protection channels to determine whether a final shutdown instruction is generated, including: In single-channel power-loss mode of the off-core nuclear measurement system, if one instrument channel of the off-core nuclear measurement system loses power, this instrument channel simultaneously generates a "threshold trigger" signal and a "test / error" signal. The "test / error" signal is negated and then logically ANDed with the "upper threshold trigger" signal and the "test / error" signals of the two protection channels. A logical "OR" operation is performed on these three signals, and it is determined that none of the multiple protection channels will generate a shutdown instruction. Based on the fact that none of the multiple protection channels generate a shutdown instruction, a "2 out of 4" logical operation is performed, and it is determined that no final shutdown instruction is generated. When power is restored to a single channel of the off-core nuclear testing system, the "test / error" signal is negated and then logically ANDed with the "upper threshold trigger" signal and the "test / error" signals of the two protection channels. A logical OR operation is then performed on these three signals, and it is determined that none of the multiple protection channels generate a shutdown instruction. Based on the fact that none of the multiple protection channels generate a shutdown instruction, a "2 out of 4" logical operation is performed, and it is determined that no final shutdown instruction is generated.

8. A method for connecting an interface between an off-core nuclear test system and a reactor protection system in a nuclear power plant according to claim 1, characterized in that: In each protection channel of the reactor protection system, a logical AND operation is performed on the "test / error" signal after negation, the upper threshold trigger signal, and the "test / error" signals of the two protection channels. A logical OR operation is performed on the three signals to determine whether a shutdown instruction for the corresponding protection channel is generated. A "2 out of 4" logical operation is performed based on the shutdown instruction generation results of the four protection channels to determine whether a final shutdown instruction is generated, including: In the test mode, when one protection channel of the off-core nuclear measurement system is performing a periodic test, the other protection channel of the off-core nuclear measurement system is functioning normally. The "test / error" signal is negated and then logically ANDed with the "upper threshold trigger" signal and the "test / error" signals of the two protection channels. A logical "OR" operation is performed on the three signals, and it is determined that none of the multiple protection channels generates a shutdown instruction. Based on the fact that none of the multiple protection channels generates a shutdown instruction, a "4 out of 2" logical operation is performed, and it is determined that no final shutdown instruction is generated.

Images