Method for connecting ex-core nuclear measurement system with reactor protection system trip timing interface

Abstract

The present application belongs to the technical field of reactor trip timing, and particularly relates to a method for connecting the timing of a reactor protection system and an out-of-pile nuclear measurement system, wherein a CH1 channel or a CH2 channel of the out-of-pile nuclear measurement system outputs a threshold trigger signal to an IP channel, an IIP channel, an IIIP channel and an IVP channel of the reactor protection system through a relay parallel photo-coupler isolation connection mode; and a CH1 channel or a CH2 channel of the out-of-pile nuclear measurement system outputs a test or error signal to the IP channel, the IIP channel, the IIIP channel and the IVP channel of the reactor protection system through a relay series photo-coupler isolation connection mode. The method establishes a connection mode of the timing of the source range or the intermediate range of the out-of-pile nuclear measurement system and the reactor protection system, ensures that the timing of the source range or the intermediate range can be triggered correctly, solves the problem of random timing in the traditional connection method, improves the reliability, and adopts a combined connection mode with faster response, and the response time is more optimal.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of reactor trip timing, and particularly relates to a method for connecting the trip timing of an ex-core nuclear instrumentation system and a reactor protection system. BACKGROUND

[0002] The main function of an ex-core nuclear instrumentation system (RPN) is to measure the power of a reactor by monitoring the neutrons leaked from a reactor pressure vessel. According to the range of the measurement range, it is mainly divided into source range, intermediate range and power range, and there is a certain overlap between the three ranges. The source range and the intermediate range of the ex-core nuclear instrumentation system are mainly installed in channel 1 (CH1) and channel 2 (CH2).

[0003] The main function of a reactor protection system (RPR) of a nuclear power plant is to prevent or mitigate damage to the core and the coolant system components, protect the integrity of the three nuclear safety barriers of the nuclear power plant, avoid causing a large amount of radioactive material to escape, protect the surrounding environment of the nuclear power plant from pollution, and protect the safety of personnel under abnormal conditions or accident conditions by stopping the reactor and / or starting the special safety facilities. The reactor protection system is divided into four channels (IP or IIP or IIIP or IVP).

[0004] The ex-core nuclear instrumentation system and the reactor protection system are both nuclear systems, and both are related to nuclear safety. The abnormal condition of the power measured by the ex-core nuclear instrumentation system is sent to the reactor protection system to trigger the reactor to stop. Due to the requirements of the response time of the entire reactor protection system channel and the system reliability, the traditional connection adopts a single relay element interface, and there is a random problem of triggering timing, which causes the signal to be unable to trigger according to the expected timing under certain conditions. SUMMARY

[0005] The purpose of the present application is to provide a method for connecting the trip timing of an ex-core nuclear instrumentation system and a reactor protection system. The method establishes a connection mode of the trip timing signal between the source range or the intermediate range of the ex-core nuclear instrumentation system and the reactor protection system, ensures that the trip timing of the source range or the intermediate range can be triggered correctly, solves the problem of random timing in the traditional connection method, improves the reliability, and adopts a combined connection mode with faster response, which is more optimal in response time.

[0006] The technical scheme for achieving the purpose of the present application is as follows:

[0007] A method for connecting a nuclear reactor protection system and a nuclear reactor in-core instrumentation system, wherein a CH1 channel or a CH2 channel of the nuclear reactor in-core instrumentation system outputs a threshold trigger signal to an IP channel, an IIP channel, an IIIP channel and an IVP channel of the nuclear reactor protection system through a relay parallel optical coupling isolation connection mode; and the CH1 channel or the CH2 channel of the nuclear reactor in-core instrumentation system outputs a test or error signal to the IP channel, the IIP channel, the IIIP channel and the IVP channel of the nuclear reactor protection system through a relay series optical coupling isolation connection mode.

[0008] In the method, the logic operation of triggering a single-channel reactor shutdown signal in the nuclear reactor protection system includes: (1) when there is no test or error signal, a 2-to-1 logic of the threshold trigger signals of the CH1 channel and the CH2 channel; (2) the CH1 channel and the CH2 channel simultaneously trigger a test or error signal; and (3) the CH1 channel or the CH2 channel triggers a threshold trigger signal, and the other channel triggers a test or error signal.

[0009] In the method, the logic operation of triggering a reactor shutdown signal in the nuclear reactor protection system includes: a 4-to-2 logic of the IP channel, the IIP channel, the IIIP channel and the IVP channel.

[0010] In the method, each of the CH1 channel and the CH2 channel of the nuclear reactor in-core instrumentation system includes a threshold trigger 1 signal, a threshold trigger 2 signal, a test or error 1 signal and a test or error 2 signal; the threshold trigger 1 signal is transmitted to the IP channel and the IIP channel of the nuclear reactor protection system through a relay parallel optical coupling isolation connection mode; the threshold trigger 2 signal is transmitted to the IIIP channel and the IVP channel of the nuclear reactor protection system through a relay parallel optical coupling isolation connection mode; the test or error 1 signal is transmitted to the IP channel and the IIP channel of the nuclear reactor protection system through a relay series optical coupling isolation connection mode; and the test or error 2 signal is transmitted to the IIIP channel and the IVP channel of the nuclear reactor protection system through a relay series optical coupling isolation connection mode.

[0011] In the method, when in normal operation, the relays and the optical coupling isolators of the threshold trigger signals and the test or error signals of the nuclear reactor in-core instrumentation system are in a power-on state, and the logic operation has no reactor shutdown signal output.

[0012] In the method, when an accident condition occurs, the out-of-pile nuclear measurement system automatically triggers the "threshold trigger" signal of CH1 or CH2, the relays and the parallel light coupling isolators simultaneously act to generate the "threshold trigger" signal, the "threshold trigger" signal is transmitted to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, the "2-to-1" logic operation is performed in the four channels, respectively, to generate the IP channel, IIP channel, IIIP channel and IV channel shutdown signals, and the "4-to-2" logic operation is performed on the four shutdown signals to generate the final shutdown signal.

[0013] In the method, when the out-of-pile nuclear measurement system fails, when one channel of the out-of-pile nuclear measurement system detects a failure, the channel generates a "test or error" signal, and if the "threshold trigger" signal of the channel appears at this time, no shutdown signal will be generated; if another channel generates a "threshold trigger" signal, the "threshold trigger" signal will be transmitted to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, the "2-to-1" logic operation is performed in the four channels, respectively, to generate the IP channel, IIP channel, IIIP channel and IV channel shutdown signals, and the "4-to-2" logic operation is performed on the four shutdown signals to generate the final shutdown signal; when two channels of the out-of-pile nuclear measurement system fail, the two channels will simultaneously generate "test or error" signals and transmit them to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, and the reactor protection system performs logic operation in the channel to generate a shutdown signal.

[0014] In the method, when the reactor protection system fails, when a failure occurs in one of the four channels of the reactor protection system, due to the redundancy of the four channels, in the case that the shutdown signal cannot be sent out in the case of failure of a certain channel, the other three channels generate a shutdown signal by "3-to-2".

[0015] In the method, when a single channel of the out-of-pile nuclear measurement system fails, the channel will simultaneously generate "threshold trigger" and "test or error", the "test or error" signal and the "threshold trigger" signal perform logic "and" operation, the "test or error" will lock the "threshold trigger" signal, and no shutdown instruction will be generated in the reactor protection system.

[0016] In the method, when a channel of the out-of-pile nuclear measurement system is overhauled or the upstream power supply is restored, the "threshold trigger" signal will disappear in the reactor protection system earlier than the "test or error" signal, and no shutdown instruction will be generated in the process of restoring the power supply.

[0017] The beneficial technical effects of the present application are as follows:

[0018] 1. The reactor protection system and the ex-core nuclear instrumentation system provided by the application are connected by a light coupling-relay combination interface connection method, which can solve the risk of false reactor shutdown caused by the randomness of interface response in the power-off and power recovery conditions in the current RPN-RPR design, and can maximize the reliability of the RPN-RPR interface.

[0019] 2. The reactor protection system and the ex-core nuclear instrumentation system provided by the application are connected by a light coupling-relay combination interface connection method, which can solve the risk of false reactor shutdown caused by the randomness of interface response in the power-off and power recovery conditions in the current RPN-RPR design, and can maximize the reliability of the RPN-RPR interface. BRIEF DESCRIPTION OF DRAWINGS

[0020] Figure 1 The connection diagram between the ex-core nuclear instrumentation system and the reactor protection system provided by the application.

[0021] In the figure: 1, light coupling; 2, relay. DETAILED DESCRIPTION

[0022] The application will be further described in detail below in combination with the drawings and examples.

[0023] The reactor protection system and the ex-core nuclear instrumentation system provided by the application are connected by a light coupling-relay combination interface connection method, which can solve the risk of false reactor shutdown caused by the randomness of interface response in the power-off and power recovery conditions in the current RPN-RPR design, and can maximize the reliability of the RPN-RPR interface.

[0024] In order to ensure the high reliability of the whole shutdown system, the technical solutions involved in the present application are described in different working conditions.

[0025] 1) Normal operation and accident mode

[0026] During normal operation, the relays and opto-isolators of the "threshold trigger" signal and the "test or error" signal of the reactor power monitoring system (RPN) are in the powered state, and in this state, the "threshold trigger" signal and the "test or error" signal are both "0". The reactor protection system (RPR) detects the signal state in real time. The logic operation has no reactor shutdown signal output.

[0027] Under accident conditions, that is, when the reactor power monitoring system (RPN) detects an abnormal rise in reactor power, the "threshold trigger" signal of CH1 or CH2 will be automatically triggered in the reactor power monitoring system (RPN) at this time, and the relays and opto-isolators are simultaneously actuated to generate the "threshold trigger" signal. The signal is transmitted to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system (RPR) respectively, and the "2-to-1" logic operation is performed inside the four channels respectively to generate the IP channel, IIP channel, IIIP channel, and IV channel shutdown signals respectively. The four shutdown signals are subjected to "4-to-2" logic operation to generate the final shutdown signal.

[0028] Due to the response time requirements set by the reactor protection system (RPR) for the collected signals, the solid-state relays and opto-isolators are used as the interface of the threshold signal, and the relays and opto-isolators are used as the interface of the "test or error" signal. Compared with a single relay interface, the response is more rapid. Both in terms of functional implementation and response time optimization, the interface can be ensured to be safe and reliable.

[0029] 2) System device failure mode

[0030] a. Reactor power monitoring system (RPN) device failure

[0031] When the reactor power monitoring system (RPN) detects a device failure in one channel (CH1 channel or CH2 channel), the channel generates a "test or error" signal. If the "threshold trigger" signal of the channel appears at this time, no shutdown signal will be generated. If the other channel generates a "threshold trigger" signal, it will be sent to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system (RPR) respectively, and the "2-to-1" logic operation is performed inside the four channels respectively to generate the IP channel, IIP channel, IIIP channel, and IV channel shutdown signals respectively. The four shutdown signals are subjected to "4-to-2" logic operation to generate the final shutdown signal.

[0032] If both channels (CH1 channel or CH2 channel) of the reactor power nuclear instrumentation system (RPN) fail, both channels will generate a "test or error" signal and send it to the IP channel or IIP channel or IIIP channel or IVP channel of the reactor protection system (RPR). The reactor protection system channel internally performs logical operations to generate a shutdown signal. At this time, if both channels of the RPN are unavailable due to failure, it is considered that the monitoring of the neutron flux level is lost, and based on nuclear safety considerations, the reactor needs to be shut down.

[0033] b. Reactor protection system (RPR) equipment failure

[0034] When a failure occurs in one of the four channels of the reactor protection system (RPR), due to the redundancy of the four channels, the other three channels will generate a shutdown signal in the event of a failure in one channel.

[0035] Therefore, in the event of a failure, the reactor can normally trigger the reactor shutdown logic, and regardless of partial failure in the reactor power nuclear instrumentation system (RPN) or the reactor protection system (RPR), the shutdown logic can be normally triggered to ensure reactor safety. The system design has strong reliability.

[0036] 3) Loss of power failure mode

[0037] a. Single channel loss of power failure of the reactor power nuclear instrumentation system

[0038] When a channel (CH1 channel or CH2 channel) of the reactor power nuclear instrumentation system fails, in order to ensure that the reactor is in a safe mode when one of the channels fails, and to avoid false shutdown, the channel will generate a "threshold trigger" and a "test or error" signal when one of the channels fails. Considering the scanning period of the reactor protection system processor (CPU) and the loss of power action fault safety design of the interface between the reactor power nuclear instrumentation system and the reactor protection system, the connection between the "test or error" signal and the reactor protection system uses a relay in series with an optical coupling isolation connection, and the "threshold trigger" signal and the reactor protection system use a relay in parallel with an optical coupling isolation connection.

[0039] Because the light coupling transmission time is much faster than the time of the relay signal action, when a certain channel (CH1 channel or CH2 channel) in the reactor power nuclear measurement system (RPN) loses power, the "test or error" signal connected in series is collected by the reactor protection system (RPR) before the "threshold trigger" signal connected in parallel, the "test or error" signal and the "threshold trigger" signal are logically ANDed, and the "test or error" will lock the "threshold trigger" signal, so that the reactor shutdown instruction will not be generated in the reactor protection system.

[0040] b. Reactor power nuclear measurement system channel power recovery

[0041] When a certain channel (CH1 channel or CH2 channel) in the reactor power nuclear measurement system (RPN) is overhauled or the upstream power supply is restored, in order to ensure that the power-on process will not mis-trigger the reactor shutdown, the "threshold trigger" signal connected in parallel will disappear in the reactor protection system (RPR) before the "test or error" signal connected in series. The reactor shutdown instruction will not be mis-generated during the power recovery process.

[0042] The design realizes that when a certain channel in the reactor power nuclear measurement system loses power (upstream power loss or cabinet power loss) or the channel recovers power, and the reactor is still in normal working condition, the "test or error" will always lock the "threshold trigger" signal. The randomness of the relay action is avoided, and the "threshold trigger" is collected by the reactor protection system (RPR) before the "test or error", so that the "mis-shutdown" signal is generated. Thus, the high reliability of the system and the economy of the enterprise are ensured.

[0043] 4) Test test mode

[0044] According to the relevant requirements of the regulations, the reactor power nuclear measurement system (RPN) also needs to be periodically tested during normal reactor power operation. The main content of the periodic test is to check whether the reactor power nuclear measurement system (RPN) channel can normally trigger the reactor shutdown threshold by simulating the change of the reactor power. In order to ensure that the reactor will not be mis-shutdown during normal periodic test, there is a "test" rotary switch on the reactor power nuclear measurement system. After the "test" rotary switch is triggered, the "test or error" signal of the channel is generated. Through the logical AND operation in the reactor protection channel, the "threshold trigger" signal generated during the test process is shielded.

[0045] The design realizes the related requirements of the periodic test of the reactor power nuclear measurement system required by the regulations, and ensures the safety of the reactor during the periodic test, so that the reactor will not be mis-shutdown due to the periodic test.

[0046] Embodiment

[0047] like Figure 1 As shown, each channel of the external nuclear testing system (RPN) has "threshold trigger 1", "threshold trigger 2" signals and "test or error 1" and "test or error 2" signals. The "threshold trigger 1" signal is transmitted to the IP channel and IIP channel of the reactor protection system through a relay in parallel optocoupler isolator, respectively. The "threshold trigger 2" signal is transmitted to the IIIP channel and IVP channel of the reactor protection system through a relay in parallel optocoupler isolator, respectively. The "test or error 1" signal is transmitted to the IP channel and IIP channel of the reactor protection system through a relay in series optocoupler isolator, respectively. The "test or error 2" signal is transmitted to the IIIP channel and IVP channel of the reactor protection system through a relay in series optocoupler isolator, respectively.

[0048] The Reactor Protection System (RPR) IP channel receives threshold signals (TRIP-CH1-IP) and "Test or Error" signals (TF-CH1-IP) from the External Nuclear Monitoring System (RPN) CH1 channel, and threshold signals (TRIP-CH2-IP) and "Test or Error" signals (TF-CH2-IP) from the External Nuclear Monitoring System (RPN) CH2 channel; the Reactor Protection System (RPR) IIP channel receives threshold signals (TRIP-CH1-IIP) and "Test or Error" signals (TF-CH1-IIP) from the External Nuclear Monitoring System (RPN) CH1 channel, and threshold signals (TRIP-CH2-IIP) and "Test or Error" signals (TF-CH2-IIP) from the External Nuclear Monitoring System (RPN) CH2 channel; the Reactor Protection System (RPR) IIIP channel receives threshold signals (TRIP-CH1-IIIP) and "Test or Error" signals (TF-CH2-IIP) from the External Nuclear Monitoring System (RPN) CH1 channel. The reactor protection system (RPR) receives the threshold signal (TRIP-CH1-IVP) and the "test or error" signal (TF-CH2-IIIP) from the external nuclear testing system (RPN) CH2 channel, as well as the threshold signal (TRIP-CH1-IVP) and the "test or error" signal (TF-CH2-IIIP) from the external nuclear testing system (RPN) CH2 channel; the reactor protection system (RPR) IVP channel receives the threshold signal (TRIP-CH1-IVP) and the "test or error" signal (TF-CH1-IVP) from the external nuclear testing system (RPN) CH1 channel, as well as the threshold signal (TRIP-CH1-IVP) and the "test or error" signal (TF-CH1-IVP) from the external nuclear testing system (RPN) CH2 channel. The threshold signal (TRIP-CH2-IVP) and the "test or error" signal (TF-CH2-IVP) transmitted from the CH2 channel are used in each channel of the reactor protection system. The "test or error" signal is NOTed and then logically ANDed with the threshold signal and the "test or error" signals from the two channels. The three signals are then logically ORed to generate the shutdown command for that channel. The shutdown commands from the four channels are then logically ORed to generate the final shutdown command.

[0049] The technical solutions of the embodiment are implemented as follows in different working conditions.

[0050] 1) Normal operation and accident mode

[0051] When the reactor is in normal operation, the relays and opto-isolators of the threshold trigger signal of the out-of-core nuclear instrumentation system are energized, and the output is "0". The relays and opto-isolators of the test or error signal are energized, and the output is "0".

[0052] When the reactor power abnormally increases, the out-of-core nuclear instrumentation system (RPN) detects the threshold trigger signal of the reactor anomaly in two channels (CH1 and CH2), that is, in the IP channel of the reactor protection system, the signals TRIP-CH1-IP and TRIP-CH2-IP are "1", and the signals TF-CH1-IP and TF-CH2-IP are "0" after taking the logical "not", which is "1", and the logical "and" is "1" to trigger the IP trip signal of the reactor protection system. The IIP, IIIP and IVP of the reactor protection system are the same, and the trip signals in the respective channels are also generated. After the "4 to 2" operation of the trip signals of the four channels, the final trip instruction is generated.

[0053] 2) System device failure mode

[0054] Case 1: Single-channel failure of the out-of-core nuclear instrumentation system (RPN)

[0055] When the out-of-core nuclear instrumentation system channel (CH1) fails, in the IP channel of the reactor protection system, TF-CH1-IP is "1", and TF-CH1-IP will lock TRIP-CH1-IP signal regardless of whether TRIP-CH1-IP is "1" or "0", and the function of CH1 for trip is invalid. However, at this time, the out-of-core nuclear instrumentation system channel (CH2) can normally trigger the trip signal, that is, in the IP channel of the reactor protection system, the "2 to 1" trip logic becomes "1 to 1". The signal TRIP-CH2-IP is "1", and the signal TF-CH2-IP is "0" after taking the logical "not", which is "1", and the logical "and" is "1" to trigger the IP trip signal of the reactor protection system. The IIP, IIIP and IVP of the reactor protection system are the same, and the trip signals in the respective channels are also generated. After the "4 to 2" operation of the trip signals of the four channels, the final trip instruction is generated.

[0056] If only one of the relay and opto-isolator assembly of "threshold trigger 1" and "threshold trigger 2" in the two channels of the out-of-pile instrumentation system fails to trigger, because it is not the fault of the out-of-pile instrumentation system upstream processing card, the "test or fault" signal of the channel will not be generated. Assuming that "threshold trigger 1" fails to trigger at this time, "threshold trigger 2" can transmit the signal to the IIIP and IVP channels of the reactor protection system, and in the reactor protection system IIIP channel, the signal TRIP-CH2-IIIP is "1", and after taking the logical "not" of TF-CH2-IIIP, which is "0", the logical "and" is "1", triggering the reactor protection system IIIP trip signal. The reactor protection system IVP is the same, and after satisfying the "4-to-2" trip logic operation, the final trip command is generated. Assuming that "threshold trigger 2" fails to trigger at this time, "threshold trigger 1" can transmit the signal to the IP or IIP channel of the reactor protection system, and after satisfying the "4-to-2" trip logic operation, the final trip command is generated. The same applies when the two channels (CH2) of the out-of-pile instrumentation system fail.

[0057] Case two: single-channel failure of the reactor protection system (RPR)

[0058] Assuming that the reactor protection system IP channel fails, and IIP or IIIP or IVP is working normally, the reactor protection system trip logic changes from "4-to-2" to "3-to-2". When the reactor power abnormally rises, the out-of-pile instrumentation system detects the reactor anomaly, and the "threshold trigger 1" and "threshold trigger 2" signals in the two channels of the out-of-pile instrumentation system will be generated simultaneously, that is, in the reactor protection system IIP channel, the signals TRIP-CH1-IIP and TRIP-CH2-IIP are "1", and after taking the logical "not" of TF-CH1-IIP and TF-CH2-IIP, which are "0", the logical "and" is "1", triggering the reactor protection system IIP trip signal. The reactor protection system IIIP\IVP is the same, and the trip signals in the respective channels are also generated, and after the "3-to-2" operation of the trip signals of the three channels, the final trip command is generated. The same applies when IIP or IIIP or IVP fails.

[0059] 3) Loss of power failure mode

[0060] a. Single-channel loss of power of the out-of-pile instrumentation system

[0061] When a certain channel in the out-of-core nuclear instrumentation system, assuming that the CH1 channel is powered off, the "threshold trigger" and "test or error" signals are generated simultaneously. However, the "test or error" signal is isolated by a relay in series with an optical coupler isolator, and the response time depends on the optical coupler isolator. The "threshold trigger" signal is isolated by a relay in parallel with an optical coupler isolator, and the response time depends on the relay. The optical coupler isolator has a faster response time than the relay. Therefore, the "test or error" signal will enter the reactor protection system (RPR) earlier than the "threshold trigger" signal in terms of transmission time. That is, the TF-IP-IP signal is "1" in the reactor protection system channel IP, and the TRIP-IP-IP signal is "1". The two signals are "and" to be "0". Therefore, the TRIP-IP-IP signal is blocked in the reactor protection system channel IP, and the TF-IP-IP signal is "0" after being negated. The two signals are "and" to be "0". Therefore, the reactor protection system channel IP will not generate a trip signal. Similarly, the IIP, IIIP, and IVP will not generate a final trip command. This will not cause the reactor to be mistakenly shut down.

[0062] At this time, the out-of-core nuclear instrumentation system channel 2 (CH2) is functioning normally. If an abnormal condition of the reactor occurs at this time, the reactor can be shut down by triggering the CH2 channel. The single-channel power-off will not cause a "refusal to act" situation. The out-of-core nuclear instrumentation system channel 2 (IIP) is powered off in the same way.

[0063] b. Restoration of power supply to the out-of-core nuclear instrumentation system channel

[0064] When a certain channel in the out-of-core nuclear instrumentation system, assuming that the CH1 channel is powered off, the "threshold trigger" and "test or error" signals are generated simultaneously. However, the "test or error" signal is isolated by a relay in series with an optical coupler isolator, and the response time depends on the optical coupler isolator. The "threshold trigger" signal is isolated by a relay in parallel with an optical coupler isolator, and the response time depends on the relay. The optical coupler isolator has a faster response time than the relay. Therefore, the "test or error" signal will enter the reactor protection system (RPR) earlier than the "threshold trigger" signal in terms of transmission time. That is, the TF-IP-IP signal is "1" in the reactor protection system channel IP, and the TRIP-IP-IP signal is "1". The two signals are "and" to be "0". Therefore, the TRIP-IP-IP signal is blocked in the reactor protection system channel IP, and the TF-IP-IP signal is "0" after being negated. The two signals are "and" to be "0". Therefore, the reactor protection system channel IP will not generate a trip signal. Similarly, the IIP, IIIP, and IVP will not generate a final trip command. This will not cause the reactor to be mistakenly shut down.

[0065] 4) Test test mode

[0066] Periodic test of a channel of the out-of-core nuclear instrumentation system

[0067] When a certain channel in the out-of-core nuclear measurement system, assuming that the CH1 channel performs a periodic test, first the operator first hits the "test" position through the "test rotation switch", then the channel will generate a "test or error" signal, that is, the TF-CH1-IP in the reactor protection system channel (IP) is "1", and after taking the non-position, it is "0". During the test execution process, the TRIP-CH1-IP will forcibly trigger a "1" signal, which will be blocked by the TF-CH1-IP "0" signal. Therefore, during the test process, the stop signal will not be generated by mistake.

[0068] When the out-of-core nuclear measurement system channel (IP) performs a test, at this time the out-of-core nuclear measurement system channel (IIP) is normally functioning, and if at this time a related abnormal condition of the reactor occurs, the reactor shutdown can be triggered through the IIP channel. There will be no "refusal to act" situation due to the test. The out-of-core nuclear measurement system channel (IIP) performs a periodic test in the same way.

[0069] The above describes the present application in detail in combination with the drawings and examples, but the present application is not limited to the above examples, and various changes can be made within the knowledge possessed by those skilled in the art without departing from the purpose of the present application. The contents not described in detail in the present application can adopt the existing technology.

Claims

1. A method for interfacing an ex-core nuclear instrumentation system with a reactor protection system trip timing sequence, comprising: The "threshold trigger" signal of the out-of-pile nuclear measurement system CH1 channel or CH2 channel is output to the reactor protection system IP channel, IIP channel, IIIP channel and IVP channel through the relay parallel optocoupler isolation connection mode respectively; the "test or error" signal of the out-of-pile nuclear measurement system CH1 channel or CH2 channel is output to the reactor protection system IP channel, IIP channel, IIIP channel and IVP channel through the relay series optocoupler isolation connection mode respectively; In each channel of the reactor protection system, the "test or error" signal is taken "not", then the "threshold signal" is logically "and" operated, and the "test or error" signals of two channels are logically "and" operated, and the three signals are logically "or" operated to generate the shutdown instruction of the channel, and the shutdown instructions of four channels are logically "4 take 2" operated to generate the final shutdown instruction; The logical operation of triggering single-channel reactor shutdown signal in the reactor protection system includes: (1) no "test or error" signal, "2 take 1" logic of the "threshold trigger" signals of CH1 channel and CH2 channel; (2) CH1 channel and CH2 channel trigger "test or error" signal at the same time; (3) CH1 channel or CH2 channel appears "threshold trigger" signal, and the other channel appears "test or error" signal.

2. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip timing interface. In the method, the logical operation of triggering the reactor protection system shutdown caused by the reactor protection system is: the four channels of IP channel, IIP channel, IIIP channel and IVP channel are logically "4 take 2".

3. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip timing interface. In the method, each of the CH1 channel and the CH2 channel of the out-of-pile nuclear measurement system includes "threshold trigger 1" signal, "threshold trigger 2" signal, "test or error 1" signal and "test or error 2" signal; the "threshold trigger 1" signal is transmitted to the IP channel and the IIP channel of the reactor protection system through the relay parallel optocoupler isolator respectively, the "threshold trigger 2" signal is transmitted to the IIIP channel and the IVP channel of the reactor protection system through the relay parallel optocoupler isolator respectively, the "test or error 1" signal is transmitted to the IP channel and the IIP channel of the reactor protection system through the relay series optocoupler isolator respectively, and the "test or error 2" signal is transmitted to the IIIP channel and the IVP channel of the reactor protection system through the relay series optocoupler isolator respectively.

4. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip timing interface. In the method, during normal operation, the relays and optocoupler isolators of the "threshold trigger" signal and the "test or error" signal of the out-of-pile nuclear measurement system are in the power-on state, and there is no reactor shutdown signal output in the logical operation.

5. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip timing interface. In the method, when the accident condition occurs, the out-of-pile nuclear measurement system automatically triggers the "threshold trigger" signal of CH1 or CH2, the relay and the parallel light coupling isolator simultaneously act to generate the "threshold trigger" signal, the "threshold trigger" signal is transmitted to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, the "2-to-1" logic operation is performed in the four channels, respectively, to generate the IP channel, IIP channel, IIIP channel and IV channel shutdown signals, and the four shutdown signals are subjected to the "4-to-2" logic operation to generate the final shutdown signal.

6. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip sequencing interface. In the method, when the out-of-pile nuclear measurement system fails, if one channel of the out-of-pile nuclear measurement system detects a failure, the channel generates a "test or error" signal, and if the "threshold trigger" signal of the channel appears at this time, no shutdown signal will be generated. If another channel generates the "threshold trigger" signal, the signal will be transmitted to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, the "2-to-1" logic operation is performed in the four channels, respectively, to generate the IP channel, IIP channel, IIIP channel and IV channel shutdown signals, and the four shutdown signals are subjected to the "4-to-2" logic operation to generate the final shutdown signal; when two channels of the out-of-pile nuclear measurement system fail, the two channels will simultaneously generate the "test or error" signal and transmit the signal to the IP channel or the IIP channel or the IIIP channel or the IVP channel of the reactor protection system, and the reactor protection system channel performs logic operation to generate the shutdown signal.

7. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip sequencing interface. In the method, when the reactor protection system fails, if one channel of the four channels of the reactor protection system fails, the other three channels will generate the shutdown signal due to the redundancy of the four channels.

8. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip sequencing interface. In the method, when the single channel of the out-of-pile nuclear measurement system loses power, the channel will simultaneously generate the "threshold trigger" and the "test or error", the "test or error" signal and the "threshold trigger" signal perform the logic "and" operation, the "test or error" will lock the "threshold trigger" signal, and no shutdown instruction will be generated in the reactor protection system.

9. The method of claim 1, wherein the out-of-core nuclear measurement system is connected to the reactor protection system trip sequencing interface. In the method, when the maintenance of one channel of the out-of-pile nuclear measurement system is completed or the upstream power supply is restored, the "threshold trigger" signal will disappear in the reactor protection system earlier than the "test or error" signal, and no shutdown instruction will be generated in the process of restoring the power supply.

Images