Heavy-duty gas turbine control and protection system and method

Abstract

The invention discloses a heavy-duty gas turbine control and protection system and method, and the system comprises a control platform which is used for outputting a control instruction and / or a first protection instruction of a heavy-duty gas turbine based on the control demand of the heavy-duty gas turbine; the protection platform is used for outputting a first protection control instruction of the heavy gas turbine based on a first protection requirement of the heavy gas turbine; the special protection device is used for outputting a first special protection control instruction of the heavy gas turbine based on a second protection requirement of the heavy gas turbine; and the protection link is used for receiving an instruction sent by the control platform and / or the protection platform and / or the special protection device, and executing a corresponding safety protection action based on the instruction. The heavy gas turbine is protected and controlled through cooperation of the control platform, the protection platform and the special protection device, the method does not depend on a hardware platform, rapid migration is achieved, when a certain system breaks down, normal operation of the heavy gas turbine control and protection system is not affected, common mode risks are reduced, and universality is high.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of combustion engine protection, in particular to a heavy-duty combustion engine control and protection system, method and storage medium. BACKGROUND

[0002] The control and protection platform of the heavy-duty gas turbine is the core to ensure the safe and efficient operation of the unit. However, in the related technology, the control and protection platform of the heavy-duty gas turbine relies on the hardware platform, and needs to be customized and developed for different hardware platforms, which has poor universality. And when the hardware platform is switched, due to the difference in bottom layer implementation (such as interrupt response mechanism, communication protocol and redundancy architecture), the hardware platform needs to be re-adapted, so it is difficult to realize the rapid migration of the control and protection platform design across hardware platforms, and if a module in the hardware platform fails, the entire hardware platform may not work, which has a common mode failure risk and cannot ensure the stable operation of the unit. SUMMARY

[0003] The present application provides a heavy-duty combustion engine control and protection system, method and storage medium to solve the technical problems of poor universality, inability to quickly migrate and common mode failure risk in the prior art.

[0004] Therefore, the present application provides a heavy-duty combustion engine control and protection system, which can protect and control the heavy-duty combustion engine through the cooperation of the control platform, the protection platform and the special protection device, does not rely on the hardware platform, can realize rapid migration, and when any platform or device fails, does not affect the normal operation of the heavy-duty combustion engine control and protection system, reduces the common mode risk, and has strong universality.

[0005] Another object of the present application is to provide a heavy-duty combustion engine control and protection method.

[0006] To achieve the above object, the present application provides a heavy-duty combustion engine control and protection system, which comprises a control platform, a protection platform, a special protection device and a protection link. The control platform is used to output the control instruction and / or the first protection instruction of the heavy-duty combustion engine based on the control requirement of the heavy-duty combustion engine. The protection platform is used to output the first protection control instruction of the heavy-duty combustion engine based on the first protection requirement of the heavy-duty combustion engine, wherein the first protection requirement comprises an overspeed protection requirement and a normal cycle requirement. The special protection device is used to output the first special protection control instruction of the heavy-duty combustion engine based on the second protection requirement of the heavy-duty combustion engine, wherein the second protection requirement comprises the overspeed protection requirement and an ultra-fast cycle requirement. The protection link is configured to receive instructions sent by the control platform and / or the protection platform and / or the special protection device, and perform corresponding safety protection actions based on the instructions.

[0007] The heavy-duty gas turbine control and protection system according to the embodiments of the present application can further have the following additional technical features. In one embodiment of the present application, the control requirements include first control requirements and second control requirements; and the control platform includes a slow cycle processing module and a fast cycle processing module. The slow cycle processing module is configured to process the first control requirements. The fast cycle processing module is configured to process the second control requirements.

[0008] In one embodiment of the present application, the system further includes an execution mechanism connected to the control platform. The execution mechanism is configured to perform corresponding control actions based on the control instructions.

[0009] In one embodiment of the present application, the control platform is further configured to: send a first interlocking signal to the protection platform based on the first protection instructions; send a second interlocking signal to the special protection device based on the first protection instructions; and / or receive a first state feedback signal sent by the protection platform, and output second protection instructions based on the first state feedback signal; receive a second state feedback signal sent by the special protection device, and output third protection instructions based on the second state feedback signal.

[0010] In one embodiment of the present application, the protection platform is further configured to: send the first state feedback signal to the control platform; send a third interlocking signal to the special protection device based on the first protection control instructions; and / or receive the first interlocking signal sent by the control platform, and output second protection control instructions based on the first interlocking signal; receive a fourth interlocking signal sent by the special protection device, and output third protection control instructions based on the fourth interlocking signal.

[0011] In one embodiment of the present application, the special protection device is further configured to: send the second state feedback signal to the control platform; send the fourth interlocking signal to the protection platform based on the first special protection control instructions; and / or receive the second interlocking signal sent by the control platform, and output a second dedicated protection control instruction based on the second interlocking signal; receive the third interlocking signal sent by the protection platform, and output a third dedicated protection control instruction based on the third interlocking signal.

[0012] In an embodiment of the present application, the system further comprises an emergency manual device, which is configured to determine the operation state of the heavy-duty gas turbine and trigger a gas turbine protection action based on the obtained determination result.

[0013] In an embodiment of the present application, the system further comprises an adjustment platform, which is configured to determine a redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on an input requirement, wherein the input requirement comprises the control requirement or the first protection requirement or the second protection requirement.

[0014] In an embodiment of the present application, the determination of the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on the input requirement comprises: determining a target barrier for processing the input requirement, wherein the target barrier is at least one of the control platform, the protection platform, the dedicated protection device and the emergency manual device; determining a first reliability of the input requirement based on the number of the target barriers; determining a second reliability of each of the target barriers; determining a third reliability of the input requirement based on the first reliability and the second reliability; determining the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on the third reliability.

[0015] In an embodiment of the present application, the determination of the second reliability of each of the target barriers comprises: determining an input reliability corresponding to the barrier; determining a processing reliability corresponding to the barrier; determining an output reliability corresponding to the barrier; determining the second reliability of each of the barriers based on the input reliability, the processing reliability and the output reliability.

[0016] In an embodiment of the present application, the determination of the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on the third reliability comprises: determining whether the redundancy needs to be adjusted based on the third reliability; if it is determined that the redundancy needs to be adjusted, determining the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system.

[0017] In one embodiment of the present application, the protection link comprises a first execution unit, a second execution unit and a third execution unit, wherein, the first execution unit is configured to receive the first protection instruction sent by the control platform and perform a corresponding safety protection action based on the first protection instruction; the second execution unit is configured to receive the first protection control instruction sent by the protection platform and perform a corresponding safety protection action based on the first protection control instruction; the third execution unit is configured to receive the first special protection control instruction sent by the special protection device and perform a corresponding safety protection action based on the first special protection control instruction.

[0018] To achieve the above-mentioned purpose, another aspect of the present application provides a heavy-duty gas turbine control and protection method applied to a heavy-duty gas turbine control and protection system, the method comprising: outputting a control instruction and / or a first protection instruction of the heavy-duty gas turbine by a control platform based on a control requirement of the heavy-duty gas turbine; outputting a first protection control instruction of the heavy-duty gas turbine by a protection platform based on a first protection requirement of the heavy-duty gas turbine, wherein the first protection requirement comprises an overspeed protection requirement and a normal cycle requirement; outputting a first special protection control instruction of the heavy-duty gas turbine by a special protection device based on a second protection requirement of the heavy-duty gas turbine, wherein the second protection requirement comprises the overspeed protection requirement and an ultra-fast cycle requirement; receiving instructions sent by the control platform and / or the protection platform and / or the special protection device through a protection link and performing a corresponding safety protection action based on the instructions.

[0019] Another object of the present application is to provide an electronic device comprising: at least one processor; and a memory in communication connection with the at least one processor; wherein, the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method of any one of the preceding aspects.

[0020] Another object of the present application is to provide a computer storage medium, wherein the computer storage medium stores computer executable instructions; the computer executable instructions are executed by a processor to make a computer perform the method of any one of the preceding aspects.

[0021] The heavy-duty combustion engine control and protection system and method, the system comprises a control platform, a protection platform, a special protection device and a protection link, the control platform is used for outputting the control instruction and / or the first protection instruction of the heavy-duty combustion engine based on the control demand of the heavy-duty combustion engine; the protection platform is used for outputting the first protection control instruction of the heavy-duty combustion engine based on the first protection demand of the heavy-duty combustion engine; the special protection device is used for outputting the first special protection control instruction of the heavy-duty combustion engine based on the second protection demand of the heavy-duty combustion engine; the protection link is used for receiving the instruction sent by the control platform and / or the protection platform and / or the special protection device, and performing the corresponding safety protection action based on the instruction. Thus, the heavy-duty combustion engine is protected and controlled by the control platform, the protection platform and the special protection device, does not depend on the hardware platform, can realize rapid migration, and when any platform or device fails, does not affect the normal operation of the heavy-duty combustion engine control and protection system, reduces the common mode risk, and has strong universality.

[0022] Additional aspects and advantages of the present application will be set forth in part in the description which follows, and in part will become apparent to those having ordinary skill in the art upon examination of the following or can be learned from practice of the application. BRIEF DESCRIPTION OF DRAWINGS

[0023] The above and / or additional aspects and advantages of the present application will become apparent and be readily appreciated from the following description, taken in conjunction with the accompanying drawings, in which: Figure 1 is a structural schematic diagram of a heavy-duty combustion engine control and protection system according to an embodiment of the present application; Figure 2 is a flow schematic diagram of a heavy-duty combustion engine control and protection method according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict. The present application will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.

[0025] In order for those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, not all. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should belong to the scope of protection of the present application.

[0026] The heavy-duty combustion engine control and protection system and method according to the embodiments of the present application will be described below with reference to the accompanying drawings.

[0027] Figure 1is a structural schematic diagram of a heavy-duty gas turbine control and protection system according to an embodiment of the present application.

[0028] As shown in Figure 1 , the system comprises a control platform, a protection platform, a dedicated protection device and a protection link.

[0029] The control platform is configured to output control instructions and / or first protection instructions of the heavy-duty gas turbine based on control requirements of the heavy-duty gas turbine. The protection platform is configured to output first protection control instructions of the heavy-duty gas turbine based on first protection requirements of the heavy-duty gas turbine. The dedicated protection device is configured to output first dedicated protection control instructions of the heavy-duty gas turbine based on second protection requirements of the heavy-duty gas turbine. The protection link is configured to receive instructions sent by the control platform and / or the protection platform and / or the dedicated protection device, and perform corresponding safety protection actions based on the instructions.

[0030] In an embodiment of the present application, the control requirements can include first control requirements, second control requirements and overspeed protection requirements, wherein the first control requirements correspond to "slow cycle" processing tasks (such as gas turbine parameter monitoring), and the second control requirements correspond to "fast cycle" processing tasks (such as fuel system P2 pressure control).

[0031] In an embodiment of the present application, the control platform can adopt a software and hardware architecture A, and integrate processing modules to process the first control requirements and the second control requirements.

[0032] Specifically, in an embodiment of the present application, the control platform can include a slow cycle processing module and a fast cycle processing module. The slow cycle processing module is configured to process the first control requirements and generate control instructions, and the fast cycle processing module is configured to process the second control requirements and generate control instructions, so that accurate control of the gas turbine can be achieved, the requirements of fast control and protection can be met, the gas turbine protection function is provided, and the response timeliness is improved.

[0033] In addition, in an embodiment of the present application, the system can further include an execution mechanism connected with the control platform. The execution mechanism is configured to perform corresponding control actions based on the control instructions.

[0034] In an embodiment of the present application, the first protection requirements can include overspeed protection requirements and normal cycle requirements (such as gas turbine bearing temperature protection and shaft vibration protection).

[0035] In an embodiment of the present application, the protection platform can adopt a software and hardware architecture B meeting the SIL3 safety level to process the overspeed protection requirements and the normal cycle requirements of the gas turbine protection from the perspective of safety and hazard.

[0036] In one embodiment of the present application, the second protection requirement can include overspeed protection requirement and ultra-fast cycle requirement (such as surge requirement).

[0037] In one embodiment of the present application, the special protection device can adopt a pure hardware architecture meeting the SIL3 safety level, so that the protection action can be triggered by pure hardware, avoiding software interference and independently executing the protection action of the gas turbine.

[0038] Further, in one embodiment of the present application, the protection link can be composed of the first, second and third execution units of the control platform, the protection platform and the special protection device, so that the protection function can be realized by receiving the instructions sent by the control platform and / or the protection platform and / or the special protection device and executing any corresponding safety protection action based on the instructions, and the gas turbine can enter a safe state.

[0039] In one embodiment of the present application, the overspeed protection requirement can be processed by the control platform, the protection platform and the special protection device at the same time, so as to ensure the timely processing of the overspeed protection requirement and the stable operation of the unit.

[0040] In one embodiment of the present application, the control platform, the protection platform and the special protection device all adopt the "fault safety power-off action" mechanism, that is, when any platform or device abnormally loses power, a fault safety power-off instruction will be sent to the protection link, so that the protection link can trigger a safety protection action based on the fault safety power-off instruction, thereby ensuring that the gas turbine enters a safe state.

[0041] Further, in one embodiment of the present application, after the control platform receives the control requirement, it can collect the signals of the field measurement equipment, perform logical operation according to the operation control requirement, send the obtained control instruction to the execution mechanism through hardwiring or communication, and control the corresponding components (such as servo valve, electromagnetic valve, switch, valve positioner, valve electric device), thereby realizing the control of the gas turbine. In one embodiment of the present application, the logical operation is pre-set and specified.

[0042] Further, in one embodiment of the present application, the control platform can also obtain the first protection instruction (such as the protection of the compressor, combustion chamber, turbine, secondary air, auxiliary machine and other systems) based on the control requirement or trigger protection, and trigger the first execution unit of the control platform in the protection link to execute the first protection instruction.

[0043] In an embodiment of the present application, the control platform can further send an interlocking signal to the protection platform and the special protection device based on the first protection instruction to prevent the corresponding execution unit of the control platform from refusing to act, while outputting the first protection instruction.

[0044] In an embodiment of the present application, the protection platform can further receive the first interlocking signal sent by the control platform, and output a corresponding second protection control instruction based on the first interlocking signal, and send the output second protection control instruction to the protection link by hardwiring or communication, and execute the second protection control instruction by the corresponding second execution unit in the protection link, wherein the first interlocking signal can include the first protection instruction, and the first protection instruction and the second protection control instruction can be the same, thereby preventing the corresponding execution unit of the control platform from refusing to act, and ensuring stable operation of the unit.

[0045] In an embodiment of the present application, the special protection device can further receive the second interlocking signal sent by the control platform, and output a corresponding second special protection control instruction based on the second interlocking signal, and send the output second special protection control instruction to the protection link by hardwiring or communication, and execute the second special protection control instruction by the corresponding third execution unit in the protection link, wherein the second interlocking signal can include the first protection instruction, and the first protection instruction and the second special protection control instruction can be the same, thereby preventing the corresponding execution unit of the control platform from refusing to act, and ensuring stable operation of the unit.

[0046] Further, in an embodiment of the present application, the safety protection action triggered by the first protection instruction of the control platform can be realized by the three automatic protection barriers of the control platform, the protection platform and the special protection device, so that the failure of the corresponding execution unit of any two does not affect the execution of the protection action, thereby reducing the common mode risk and ensuring stable operation of the unit.

[0047] Further, in an embodiment of the present application, after receiving the first protection demand, the protection platform can generate a corresponding first protection control instruction based on the first protection demand, and send the first protection control instruction to the protection link by hardwiring or communication, and execute the first protection control instruction by the corresponding second execution unit in the protection link to execute the corresponding safety protection action (such as bearing temperature protection and shaft vibration protection of the gas turbine), thereby realizing protection of the gas turbine.

[0048] In an embodiment of the present application, the protection platform can also send a corresponding signal to the control platform and the special protection device to prevent the corresponding execution unit of the protection platform from refusing to act while the protection platform outputs the first protection control instruction. Specifically, in an embodiment of the present application, the protection platform can also be configured to send a first state feedback signal to the control platform and send a third interlocking signal to the special protection device based on the first protection control instruction.

[0049] In an embodiment of the present application, the control platform can also be configured to receive the first state feedback signal sent by the protection platform and output a second protection instruction based on the first state feedback signal. Specifically, in an embodiment of the present application, the method of outputting the second protection instruction based on the first state feedback signal can include: collecting a current operating signal of the measurement device, determining whether the gas turbine is in a safe protected state based on the operating signal, and if it is determined that the gas turbine is in the safe protected state, no further processing is needed; if it is determined that the gas turbine is not in the safe protected state, the control system outputs the second protection instruction based on the operating signal and sends the second protection instruction to the protection link through hardwiring or communication, and executes the second protection instruction by using the corresponding execution unit in the protection link, thereby realizing a protection closed loop.

[0050] For example, in an embodiment of the present application, it is assumed that the actual speed signal of the measurement device is collected, and if the actual speed exceeds the tripping limit value and the protection link has not been disconnected, it indicates that the gas turbine is not in the safe protected state; if the actual speed exceeds the tripping limit value and the protection link has been disconnected, it indicates that the gas turbine is in the safe protected state.

[0051] In an embodiment of the present application, the control platform can shorten the judgment time (e.g., 15 ms) by setting a fast cycle processing module to perform the above-mentioned abnormality judgment, thereby improving the response and timeliness of the integrated hardware platform.

[0052] In an embodiment of the present application, the special protection device can also be configured to receive the third interlocking signal sent by the protection platform and output a corresponding third special protection control instruction based on the third interlocking signal, and send the output third special protection control instruction to the protection link through hardwiring or communication, and execute the third special protection control instruction by using the corresponding third execution unit in the protection link, wherein the third interlocking signal can include the first protection control instruction, and the first protection control instruction and the third special protection control instruction can be the same, thereby preventing the corresponding execution unit of the protection platform from refusing to act and ensuring the stable operation of the unit.

[0053] Further, in an embodiment of the present application, the protection action triggered by the first protection control instruction of the protection platform can be realized by the cooperation of the three automatic protection barriers of the control platform, the protection platform and the special protection device, so that the execution of the protection action is not affected by the failure of any two corresponding execution units, thereby reducing the common mode risk and ensuring the stable operation of the unit.

[0054] In addition, in an embodiment of the present application, the protection platform can also receive analog signals, so as to cover more control and protection requirements, so that the integrated hardware platform has a wide adaptation and is applicable to more cases, thereby improving the applicability.

[0055] In an embodiment of the present application, the special protection device can generate a corresponding first special protection control instruction based on the second protection requirement after receiving the second protection requirement, and send the first special protection control instruction to the protection link through hardwiring or communication, and execute the first special protection control instruction by using the corresponding third execution unit in the protection link to execute the corresponding safety protection action (such as overspeed protection and surge protection), thereby realizing the protection of the gas turbine.

[0056] In addition, in an embodiment of the present application, the special protection device can also send a corresponding signal to the control platform and the protection platform when the special protection device outputs the first special protection control instruction, so as to prevent the corresponding execution unit of the special protection device from refusing to act. Specifically, in an embodiment of the present application, the special protection device can also be used for sending a second state feedback signal to the control platform and sending a fourth interlocking signal to the protection platform based on the first special protection control instruction.

[0057] In an embodiment of the present application, the control platform can also be used for receiving the second state feedback signal sent by the special protection device and outputting a third protection instruction based on the second state feedback signal. Specifically, in an embodiment of the present application, the method of outputting the third protection instruction based on the second state feedback signal can include: collecting the current running signal of the measuring device, determining whether the gas turbine is in a safe protected state based on the running signal, if it is determined that the gas turbine is in a safe protected state, no processing is needed; if it is determined that the gas turbine is not in a safe protected state, the control system outputs a third protection instruction based on the running signal, and sends the third protection instruction to the protection link through hardwiring or communication, and executes the third protection instruction by using the corresponding first execution unit in the protection link, thereby realizing the protection closed loop.

[0058] And, in an embodiment of the present application, the protection platform can further be configured to receive a fourth interlocking signal sent by the special protection device, output a third protection control instruction corresponding to the fourth interlocking signal, and send the third protection control instruction to the protection link by hardwiring or communication, and execute the third protection control instruction by the second execution unit in the protection link, wherein the fourth interlocking signal can include the first special protection control instruction, and the third protection control instruction can be the same as the first special protection control instruction, so as to prevent the corresponding execution unit of the special protection device from refusing to act, and ensure the stable operation of the unit.

[0059] Further, in an embodiment of the present application, the safety protection action triggered by the first special protection control instruction of the special protection device can be realized by the three automatic protection barriers of the control platform, the protection platform and the special protection device, so that the failure of the execution unit corresponding to any two of them does not affect the execution of the protection action, thereby reducing the common mode risk and ensuring the stable operation of the unit.

[0060] In an embodiment of the present application, the heavy-duty gas turbine control and protection system can further include an emergency manual device, which is configured to judge the operating state of the heavy-duty gas turbine and trigger a protection action of the gas turbine based on the obtained judgment result.

[0061] In an embodiment of the present application, the emergency manual device can adopt a pure hardware architecture, and the operating state of the heavy-duty gas turbine is judged by a human being, and the fourth execution unit in the protection link is directly triggered based on the obtained judgment result to execute a safety protection action of the gas turbine as the final protection barrier under extreme working conditions.

[0062] In an embodiment of the present application, when the emergency manual device triggers the safety protection action in the protection link, a fifth interlocking signal can be output to the protection platform to prevent the execution mechanism of the emergency manual protection device from refusing to act.

[0063] Further, in an embodiment of the present application, the protection platform can further be configured to receive a fifth interlocking signal sent by the emergency manual device, output a fourth protection control instruction corresponding to the fifth interlocking signal, and send the fourth protection control instruction to the protection link by hardwiring or communication, and execute the fourth protection control instruction by the second execution unit in the protection link, so as to prevent the corresponding execution unit of the emergency manual device from refusing to act, and ensure the stable operation of the unit.

[0064] In an embodiment of the present application, the heavy-duty gas engine control and protection system can further comprise an adjustment platform configured to determine a redundancy adjustment suggestion of the heavy-duty gas engine control and protection system based on an input demand, wherein the input demand comprises a control demand or a first protection demand or a second protection demand.

[0065] In an embodiment of the present application, the control platform, the protection platform, the dedicated protection device and the emergency manual device in the heavy-duty gas engine control and protection system can be regarded as each barrier, so as to determine the corresponding reliability of the heavy-duty gas engine control and protection system.

[0066] Specifically, in an embodiment of the present application, the method of determining the redundancy adjustment suggestion of the heavy-duty gas engine control and protection system based on the input demand can comprise the following steps: Step 1, determining a target barrier for processing the input demand, wherein the target barrier is at least one of the control platform, the protection platform, the dedicated protection device and the emergency manual device; Step 2, determining a first reliability of the input demand based on the number of the target barriers; Step 3, determining a second reliability of each barrier in the target barriers; Step 4, determining a third reliability of the input demand based on the first reliability and the second reliability; Step 5, determining the redundancy adjustment suggestion of the heavy-duty gas engine control and protection system based on the third reliability.

[0067] In an embodiment of the present application, the target barriers corresponding to different input demands can also be different. For example, assuming that the input demand is an overspeed protection demand, the target barriers corresponding to the input demand are the control platform, the protection platform and the dedicated protection device.

[0068] In an embodiment of the present application, the target barrier for processing the input demand can be determined through the relationship between the input demand and the corresponding barrier.

[0069] In an embodiment of the present application, after determining the target barrier for processing the input demand, the first reliability of the input demand can be determined based on the number of the target barriers. In an embodiment of the present application, the method of determining the first reliability of the input demand based on the number of the target barriers can comprise determining the first reliability of the input demand through a first formula based on the number of the target barriers, wherein the first formula is:

[0070] wherein λ is the average failure rate, and is a constant, for example, 1.0e -5, which is the inverse of the mean time between failures τ; n is the number of barriers corresponding to the input requirement, such as the overspeed protection requirement, and the parallel redundancy spans four barriers, then n takes 4; t is time, in seconds (s); for the jth input requirement, the above first reliability can be marked as R0sysj.

[0071] In an embodiment of the present application, each of the above barriers includes corresponding input units, combination processing units and output units. Among them, the input units can include actual sensors, other components, wiring, but do not include those components that first combine signals through voting or other processing; the combination processing units include components that combine signals and all other components that deliver the final signals to the output units; the output units include all components and wiring used to process the final signals from the processing units, and also include the execution units in the protection link.

[0072] Among them, in an embodiment of the present application, the above input units, combination processing units and output units can include a redundant voting structure. Based on this, in an embodiment of the present application, the above method for determining the second reliability of each barrier in the target barrier can include the following steps: Step 31, determining the input reliability corresponding to the barrier; Step 32, determining the processing reliability corresponding to the barrier; Step 33, determining the output reliability corresponding to the barrier; Step 34, determining the second reliability of each barrier based on the input reliability, the processing reliability and the output reliability.

[0073] Among them, in an embodiment of the present application, the above method for determining the input reliability corresponding to the barrier can include determining the input reliability corresponding to the barrier through a second formula, wherein the second formula is:

[0074]

[0075] Among them, r is the reliability of a single unit in the input unit, n is the number of barriers corresponding to the input requirement, and m is the redundant voting in the input unit, that is, the number of effective units required for normal operation in the redundant voting; for the jth input requirement, the above input reliability can be marked as Rsj.

[0076] In an embodiment of the present application, the reliability of a single unit can refer to the probability that a product, system, service or process completes a specified function under specified conditions and within a specified time. Among them, reliability can be used to measure the core indicators of quality and performance stability, and is widely used in many fields such as engineering, manufacturing, information technology, medical treatment, etc.

[0077] For example, in one embodiment of the present application, assuming m=2, it means that at least two units in the input unit need to output the same in order to determine the result to be valid.

[0078] In addition, in one embodiment of the present application, the processing reliability and the output reliability corresponding to the barrier can be determined by the second formula. When the processing reliability corresponding to the barrier is determined by the second formula, m is the redundant voting in the processing unit, and for the jth input requirement, the processing reliability can be marked as Raj. When the output reliability corresponding to the barrier is determined by the second formula, m is the redundant voting in the output unit, and for the jth input requirement, the output reliability can be marked as Rej.

[0079] Further, in one embodiment of the present application, after the input reliability, the processing reliability, and the output reliability are obtained by the above steps, the second reliability of the corresponding barrier can be determined by a third formula, wherein the third formula is: =Rsj+ Raj+ Rej wherein, is the second reliability of the zth barrier in the jth input requirement.

[0080] Further, in one embodiment of the present application, after the first reliability and the second reliability of each barrier are obtained by the above steps, the third reliability of the input requirement can be determined based on the first reliability and the second reliability. Specifically, in one embodiment of the present application, the method of determining the third reliability of the input requirement based on the first reliability and the second reliability can include determining the third reliability of the input requirement based on the first reliability and the second reliability by a fourth formula, wherein the fourth formula is: Rfsysj= ×R0sysj wherein, Rfsysj is the third reliability corresponding to the jth input requirement.

[0081] In addition, in one embodiment of the present application, after the third reliability of the input requirement is obtained by the above steps, the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system can be determined based on the third reliability.

[0082] Specifically, in one embodiment of the present application, the method of determining the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on the third reliability can include the following steps: Step 51, determining whether the redundancy needs to be adjusted based on the third reliability; Step 52, if it is determined that the redundancy needs to be adjusted, determining the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system.

[0083] In an embodiment of the present application, the method for determining whether the redundancy needs to be adjusted based on the third reliability can comprise: obtaining a target reliability threshold range corresponding to the input requirement, and determining that the redundancy does not need to be adjusted if the third reliability is within the target reliability threshold range; and determining that the redundancy needs to be adjusted if the third reliability is outside the target reliability threshold range.

[0084] In an embodiment of the present application, if it is determined that the redundancy needs to be adjusted, a redundancy adjustment suggestion for the heavy-duty gas turbine control and protection system can be determined. In an embodiment of the present application, the redundancy adjustment suggestion for the heavy-duty gas turbine control and protection system can be determined according to experience.

[0085] Specifically, in an embodiment of the present application, the redundancy adjustment suggestion for the heavy-duty gas turbine control and protection system can comprise at least one of the following: adjusting the redundancy within a single barrier; adjusting the level of cross-barrier parallel redundancy; reducing λ.

[0086] In an embodiment of the present application, the adjusting the level of cross-barrier parallel redundancy can specifically comprise adjusting the number of barriers for processing the input requirement.

[0087] In an embodiment of the present application, the λ is the average failure rate of the barrier, and can be a constant, which is the inverse of the mean time between failures τ. In an embodiment of the present application, the reduction of the average failure rate λ needs to be implemented throughout the whole process of “design - material selection - manufacturing - use - maintenance” to reduce the failure sources (simplified design, high-quality materials) → reduce the probability of triggering failure (de-rating use, environmental control) → reduce the impact of failure (reliable design, maintenance strategy) → continuous iteration and optimization (failure analysis).

[0088] In an embodiment of the present application, through the multi-barrier design, the control platform, the protection platform, the dedicated protection device, and the emergency manual device creatively establish a cooperative working mechanism, realize the in-depth defense of the gas turbine protection, greatly improve the reliability of the gas turbine protection, and determine the redundancy adjustment suggestion for the heavy-duty gas turbine control and protection system through the above steps, so that the method for improving the barrier diagnostic coverage rate further improves the reliability of the system.

[0089] In an embodiment of the present application, a unified standardized system hierarchical architecture is formulated by the above-mentioned system, the hierarchical relationship and data flow direction of the modules such as the control platform, the protection platform, the special protection device, the emergency manual device, the tripping link, etc. are clearly controlled, a reusable architecture template is formed, system expansion and maintenance are facilitated, the cost of adapting to new scenarios is reduced, and the strong dependence of control system design on specific hardware platforms is reduced. At the same time, the control platform and the protection platform adopt a software and hardware architecture, and the protection platform meets the SIL3 safety level requirement; the special protection device and the emergency manual device adopt a pure hardware architecture, and the special protection device meets the SIL3 safety level requirement; based on this, at least one group of the software and hardware architecture or the pure hardware architecture reaches the SIL3 safety level, forming a multi-level safety and common mode prevention scheme of the software and hardware architecture, the software and hardware architecture (SIL3), the pure hardware architecture, and the pure hardware architecture (SIL3). The modules interact and work cooperatively through interlocking signals and state feedback signals, forming an organic whole, and then realizing in-depth defense integration.

[0090] The heavy-duty gas turbine control and protection system provided in the present application includes a control platform, a protection platform, a special protection device, and a protection link. The control platform is configured to output a control instruction of the heavy-duty gas turbine based on a control requirement of the heavy-duty gas turbine. The protection platform is configured to output a first protection control instruction of the heavy-duty gas turbine based on a first protection requirement of the heavy-duty gas turbine. The special protection device is configured to output a first special protection control instruction of the heavy-duty gas turbine based on a second protection requirement of the heavy-duty gas turbine. The protection link is configured to receive an instruction sent by the control platform and / or the protection platform and / or the special protection device, and perform a corresponding safety protection action based on the instruction. Thus, the present application protects and controls the heavy-duty gas turbine through the cooperation of the control platform, the protection platform, and the special protection device, does not depend on a hardware platform, realizes rapid migration, and when a fault occurs in a certain system, does not affect the normal operation of the heavy-duty gas turbine control and protection system, reduces the common mode risk, and has strong versatility.

[0091] To realize the above-mentioned embodiment, as shown in Figure 2 The present embodiment also provides a heavy-duty gas turbine control and protection method, which is applied to a heavy-duty gas turbine control and protection system. The method includes the following steps: Step 201: outputting a control instruction and / or a first protection instruction of the heavy-duty gas turbine by the control platform based on a control requirement of the heavy-duty gas turbine; Step 202: outputting a first protection control instruction of the heavy-duty gas turbine by the protection platform based on a first protection requirement of the heavy-duty gas turbine, wherein the first protection requirement includes an overspeed protection requirement and a normal period requirement; Step 203: outputting a first special protection control instruction of the heavy-duty gas turbine by the special protection device based on a second protection requirement of the heavy-duty gas turbine, wherein the second protection requirement includes an overspeed protection requirement and an ultrafast period requirement; Step 204, receiving the instructions sent by the control platform and / or the protection platform and / or the special protection device through the protection link, and performing the corresponding safety protection actions based on the instructions.

[0092] For the above steps 201~204, please refer to the detailed description in the above embodiments, which will not be repeated here.

[0093] In an embodiment of the present application, the above method can include determining the redundancy adjustment suggestion of the heavy-duty gas turbine control and protection system based on the input demand by adjusting the platform.

[0094] The heavy-duty gas turbine control and protection method provided by the present application includes: outputting the control instructions and / or the first protection instructions of the heavy-duty gas turbine by the control platform based on the control demand of the heavy-duty gas turbine; outputting the first protection control instructions of the heavy-duty gas turbine by the protection platform based on the first protection demand of the heavy-duty gas turbine, wherein the first protection demand includes the overspeed protection demand and the normal cycle demand; outputting the first special protection control instructions of the heavy-duty gas turbine by the special protection device based on the second protection demand of the heavy-duty gas turbine, wherein the second protection demand includes the overspeed protection demand and the ultra-fast cycle demand; and receiving the instructions sent by the control platform and / or the protection platform and / or the special protection device through the protection link, and performing the corresponding safety protection actions based on the instructions. Thus, the present application protects and controls the heavy-duty gas turbine by the cooperation of the control platform, the protection platform and the special protection device, does not depend on the hardware platform, realizes fast migration, and when a certain system fails, does not affect the normal operation of the heavy-duty gas turbine control and protection system, reduces the common mode risk, and has strong versatility.

[0095] It should be understood that the various forms of flow shown above can be used to reorder, add or delete steps. For example, the steps described in the present disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solutions of the present disclosure can be achieved, which are not limited herein.

[0096] The above specific embodiments do not constitute a limitation on the protection scope of the present disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A heavy-duty gas turbine control and protection system, characterized in that, The system includes a control platform, a protection platform, dedicated protection devices, and protection links; The control platform is used to output control commands and / or first protection commands for the heavy-duty gas turbine based on the control requirements of the heavy-duty gas turbine. The protection platform is used to output a first protection control command for the heavy-duty gas turbine based on a first protection requirement of the heavy-duty gas turbine, wherein the first protection requirement includes an overspeed protection requirement and a normal cycle requirement. The dedicated protection device is used to output a first dedicated protection control command for the heavy-duty gas turbine based on the second protection requirement of the heavy-duty gas turbine, wherein the second protection requirement includes the overspeed protection requirement and the ultra-fast cycle requirement; The protection link is used to receive instructions sent by the control platform and / or the protection platform and / or the dedicated protection device, and to execute corresponding security protection actions based on the instructions.

2. The system according to claim 1, characterized in that, The control requirements include a first control requirement and a second control requirement; the control platform includes a slow-cycle processing module and a fast-cycle processing module. The slow-cycle processing module is used to process the first control requirement. The fast-cycle processing module is used to process the second control requirement.

3. The system according to claim 1, characterized in that, The system also includes an actuator connected to the control platform; The actuator is used to execute corresponding control actions based on the control instructions.

4. The system according to claim 1, characterized in that, The control platform is also used for: Based on the first protection instruction, a first interlock signal is sent to the protection platform; Based on the first protection command, a second interlock signal is sent to the dedicated protection device; and / or Receive the first status feedback signal sent by the protection platform, and output the second protection command based on the first status feedback signal; It receives the second status feedback signal sent by the dedicated protection device and outputs a third protection command based on the second status feedback signal.

5. The system according to claim 4, characterized in that, The protection platform is also used for: Send the first status feedback signal to the control platform; Based on the first protection control command, a third interlock signal is sent to the dedicated protection device; and / or Receive the first interlock signal sent by the control platform, and output a second protection control command based on the first interlock signal; It receives the fourth interlock signal sent by the dedicated protection device and outputs the third protection control command based on the fourth interlock signal.

6. The system according to claim 5, characterized in that, The dedicated protection device is also used for: Send the second status feedback signal to the control platform; Based on the first dedicated protection control command, the fourth interlock signal is sent to the protection platform; and / or Receive the second interlock signal sent by the control platform, and output a second dedicated protection control command based on the second interlock signal; The system receives the third interlock signal sent by the protection platform and outputs a third dedicated protection control command based on the third interlock signal.

7. The system according to claim 1, characterized in that, The system also includes an emergency manual device, which is used to determine the operating status of the heavy-duty gas turbine and trigger the gas turbine protection action based on the determination result.

8. The system according to claim 7, characterized in that, The system also includes an adjustment platform, which is used to determine redundancy adjustment suggestions for the heavy-duty gas turbine control and protection system based on input requirements, including the control requirements, the first protection requirements, or the second protection requirements.

9. The system according to claim 8, characterized in that, The redundancy adjustment recommendations for the heavy-duty gas turbine control and protection system based on input requirements include: Identify a target barrier for processing the input request, wherein the target barrier is at least one of the control platform, the protection platform, the dedicated protection device, and the emergency manual device; Based on the number of the target barriers, a first reliability of the input requirement is determined; Determine the second reliability of each barrier in the target barrier; Based on the first reliability and the second reliability, a third reliability of the input requirement is determined; Based on the third reliability, a redundancy adjustment recommendation for the heavy-duty gas turbine control and protection system is determined.

10. The system according to claim 9, characterized in that, Determining the second reliability of each barrier in the target barrier includes: Determine the input reliability corresponding to the barrier; Determine the processing reliability corresponding to the barrier; Determine the output reliability corresponding to the barrier; Based on the input reliability, the processing reliability, and the output reliability, a second reliability of each barrier is determined.

11. The system according to claim 9, characterized in that, The redundancy adjustment recommendations for the heavy-duty gas turbine control and protection system based on the third reliability include: Based on the aforementioned third reliability, determine whether redundancy needs to be adjusted; If it is determined that redundancy adjustment is necessary, then a redundancy adjustment recommendation for the heavy-duty gas turbine control and protection system is determined.

12. The system according to claim 1, characterized in that, The protection link includes a first execution unit, a second execution unit, and a third execution unit, wherein, The first execution unit is configured to receive the first protection instruction sent by the control platform and execute the corresponding security protection action based on the first protection instruction; The second execution unit is used to receive the first protection control command sent by the protection platform, and to execute the corresponding security protection action based on the first protection control command; The third execution unit is used to receive the first dedicated protection control command sent by the dedicated protection device, and to execute the corresponding safety protection action based on the first dedicated protection control command.

13. A method for controlling and protecting a heavy-duty gas turbine, characterized in that, The method, applied to the control and protection system of heavy-duty gas turbines, includes: Based on the control requirements of the heavy-duty gas turbine, the control platform outputs control commands and / or first protection commands for the heavy-duty gas turbine. Based on the first protection requirement of the heavy-duty gas turbine, the protection platform outputs the first protection control command of the heavy-duty gas turbine, wherein the first protection requirement includes overspeed protection requirement and normal cycle requirement; Based on the second protection requirement of the heavy-duty gas turbine, a first dedicated protection control command for the heavy-duty gas turbine is output through a dedicated protection device, wherein the second protection requirement includes the overspeed protection requirement and the ultra-fast cycle requirement; The system receives instructions from the control platform and / or the protection platform and / or the dedicated protection device via the protection link, and performs corresponding security protection actions based on the instructions.

Images