ETS system judgment method and related equipment

Abstract

The invention discloses an ETS system judgment method and related equipment, and aims to solve the technical problem of insufficient protection reliability caused by single-channel design of an existing ETS system. According to the method, at least three paths of mutually independent protection signals are collected for the same protection parameter, cooperative logic judgment based on the two-out-of-three voting principle is executed on the signals, a judgment result is generated according to most consistent signal states, and then a control instruction is generated and output. By means of the mode of combining redundancy collection and cooperative judgment, the single-point fault risk is effectively eliminated, and the ETS system protection reliability is remarkably improved.

Description

Technical Field

[0001] This invention relates to the field of industrial automation control system technology, specifically to an ETS system judgment method and related equipment. Background Technology

[0002] The Emergency Trip System (ETS) is a critical system for ensuring the safety of large rotating machinery. Its core function is to monitor key parameters of the unit in real time (such as speed, vibration, displacement, etc.) and reliably issue a trip command when the parameters exceed the limits to prevent equipment damage.

[0003] Currently, many in-service generating units' ETS systems employ a single-channel signal processing architecture. This means that for a specific protection signal, only a single sensing element, an independent signal transmission channel, and a corresponding input processing unit are used. This architecture has inherent technical flaws: a single point of failure in any link of the signal chain (such as sensor malfunction, transmission line interference, or input card damage) will directly lead to distortion or interruption of the protection signal. This introduces two risks that endanger unit safety: first, "false activation," where a fault generates a false danger signal, leading to unplanned unit shutdown and significant economic losses; second, "failure to activate," where a fault masks the true danger signal, causing protection functions to fail and potentially triggering serious equipment accidents.

[0004] To improve the reliability of critical protection systems, the industrial sector has widely adopted requirements for signal redundancy and logical judgment, such as using "two-out-of-three" logic to avoid the impact of single-point failures. However, for existing ETS systems that already employ a single-channel architecture, how to economically, effectively, and reliably upgrade them without altering their core protection principles to incorporate redundant judgment logic has become a specific and urgent technical challenge. Current technology lacks a systematic approach to solving this problem. Summary of the Invention

[0005] The purpose of this invention is to provide an ETS system judgment method and related equipment to overcome the technical problem of insufficient protection reliability caused by the single-channel design of existing ETS systems.

[0006] To achieve the above objectives, the present invention adopts the following technical solution: In a first aspect, the present invention provides an ETS system judgment method, comprising: For the same protection parameter, at least three independent protection signals should be collected; The protection signal is subjected to collaborative logic judgment, which is based on the two-out-of-three voting principle and generates a judgment result based on the signal state that is consistent with the majority. Based on the judgment result, the corresponding control command is generated and output.

[0007] The acquisition of at least three independent protection signals includes: By using multiple independent sensors set at the same protection parameter measurement point, or by using a single sensor in conjunction with a signal isolation distribution unit, at least three physically or electrically isolated signal acquisition channels are formed to obtain the at least three mutually independent protection signals.

[0008] The process of performing coordinated logic judgment on the at least three protection signals includes: Each protection signal is compared with its corresponding preset threshold to obtain the binary logic state of each protection signal; Perform a two-out-of-three voting logic operation on the binarized logic states of the at least three protection signals; When the binary logic state of at least two protection signals is the first state indicating abnormal parameters, it is determined that protection action needs to be triggered and a first judgment result is generated; otherwise, it is determined that protection action does not need to be triggered and a second judgment result is generated.

[0009] The execution of collaborative logic judgment also includes fault diagnosis and processing: Real-time monitoring of the effectiveness and rationality of each of the at least three protection signals; When a certain protection signal is identified as a fault signal, the binary logic state of the fault signal is excluded in the three-out-of-two voting logic operation, and a fault alarm information for the fault signal is generated.

[0010] The fault diagnosis process also includes: If two or more fault signals are detected simultaneously among the at least three protection signals, a system-level abnormal alarm is triggered, and the execution process of the collaborative logic judgment is switched to a preset safety processing mode.

[0011] The method also includes a system configuration step: An independent expansion cabinet is added outside the existing ETS system cabinet. The expansion cabinet is equipped with multiple independent signal input cards and a dedicated logic processing unit. The at least three independent protection signals from different signal acquisition channels are respectively connected to different signal input cards in the expansion cabinet; The collaborative logic judgment is executed by the logic processing unit.

[0012] The system configuration steps also include: The expansion cabinet is equipped with an independent power supply circuit and grounding system to achieve electrical isolation between the expansion cabinet and the original ETS system cabinet.

[0013] In a second aspect, the present invention provides an ETS system, comprising: The signal acquisition module is used to acquire at least three independent protection signals for the same protection parameter. The collaborative logic judgment module is used to perform collaborative logic judgment on the at least three protection signals. The collaborative logic judgment is based on the two-out-of-three voting principle and generates a judgment result based on the majority of consistent signal states. The control command output module is used to generate and output corresponding control commands based on the judgment result.

[0014] Thirdly, the present invention provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the ETS system judgment method as described above.

[0015] Fourthly, the present invention provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the ETS system judgment method as described above.

[0016] Compared with the prior art, the present invention has the following beneficial technical effects: Firstly, this invention provides an ETS system judgment method that fundamentally changes the decision-making basis of traditional single-channel protection by constructing a method flow of multi-channel independent signal acquisition, collaborative logic judgment, and reliable command output. This method requires the acquisition of at least three physically or electrically independent protection signals for the same key parameter, establishing parallel redundant signal sources so that the failure of any independent channel no longer directly leads to the loss of protection function. Furthermore, it innovatively performs collaborative logic judgment based on a two-out-of-three voting principle on these three redundant signals. This mechanism changes the judgment basis from the absolute reliability of a single signal to the majority consensus of multiple signals. This design combines redundancy and fault tolerance at the signal layer with logical fault tolerance at the decision layer, ensuring that when a single signal fails and generates an erroneous indication, the system can still respond accurately based on the remaining correct signals. This fundamentally eliminates the risk of false tripping or failure to trip caused by a single point of failure, elevating the reliability of protection actions to a new level.

[0017] Secondly, this invention provides an ETS system that acquires multiple independent protection signals through a dedicated signal acquisition module, providing a redundant data foundation for subsequent judgment. The core collaborative logic judgment module embeds a 2-out-of-3 voting logic. This logic unit is designed to perform collaborative analysis and majority decision-making on the input redundant signals; essentially, it is a built-in fault-tolerant decision-maker, making the system no longer fragilely dependent on the correctness of any single signal. The control command output module then generates the final action command based on this reliable conclusion. The modules are tightly coupled through the aforementioned collaborative mechanism, allowing the entire system to depart from the traditional serial single-path decision-making path in terms of topology, forming a distributed decision-making network with inherent fault tolerance. This systematic reconstruction enables the ETS system to maintain the integrity and correctness of its protection function when facing random failures of any single module or channel within the system, thus improving protection reliability.

[0018] Thirdly, the present invention provides a computer device that, through a processor executing a specific computer program, can efficiently implement the steps of the method of the present invention. When performing data processing tasks, the computer device can accurately perform numerical calculations and logical judgments, avoiding errors caused by human factors. At the same time, since the computer program has high stability and reliability, it can ensure the accuracy and consistency of the data processing results.

[0019] Fourthly, the present invention provides a computer-readable storage medium. By programming the steps of the method of the present invention into a computer program and storing it on the computer-readable storage medium, users can easily load these programs onto any compatible computer device and execute them without rewriting or converting the code, which greatly improves the convenience and flexibility of program execution. Attached Figure Description

[0020] Figure 1 This is a flowchart of an ETS system judgment method in an embodiment of the present invention.

[0021] Figure 2 This is a schematic diagram of an ETS system according to an embodiment of the present invention. Detailed Implementation

[0022] In thermal power generating units, the turbine emergency trip system (ETS) is responsible for performing emergency shutdowns when critical parameters are abnormal, serving as a core protection for ensuring equipment safety. Currently, many in-service units still use a single-channel signal design for their ETS systems. A single point of failure in any sensor, cable, or card can lead to signal distortion, resulting in malfunctions (unexplained shutdowns) or failures to trip (failure to trip when required), indicating an inherent reliability flaw in the system. Furthermore, current mandatory safety standards explicitly require critical protection systems to employ redundant decision-making logic such as "two out of three," highlighting the urgent need for technological upgrades to existing single-channel systems.

[0023] Based on the above background, this invention proposes an ETS system judgment method and related equipment, aiming to fundamentally eliminate single-point failures through architectural improvements. The core of this method lies in first acquiring at least three independent protection signals for the same parameter, constructing redundant signal sources so that the failure of a single channel does not affect information acquisition. Subsequently, an innovative collaborative logic judgment process based on a three-out-of-two voting principle is introduced. This process uses the majority consensus state of multiple signals as the decision-making basis, ensuring that an error in one signal can be corrected by the other two correct signals. Finally, the control commands generated based on this reliable judgment result exhibit significantly improved accuracy and reliability. This method, through the organic combination of "redundant acquisition" and "collaborative judgment," transforms the protection logic from a vulnerable mode dependent on a single channel into a reliable mode with inherent fault tolerance.

[0024] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0025] Reference Figure 1 The image shows a specific implementation of the ETS system judgment method provided by the present invention, comprising: For the same protection parameter, at least three independent protection signals should be collected; The protection signal is subjected to collaborative logic judgment, which is based on the two-out-of-three voting principle and generates a judgment result based on the signal state that is consistent with the majority. Based on the judgment result, the corresponding control command is generated and output.

[0026] In this specific embodiment, the acquisition of at least three independent protection signals for the same protection parameter aims to establish a parallel and redundant signal source foundation for subsequent judgment processes. "Independent" here means that the signals do not interfere with each other in terms of physical transmission path, electrical connection, or logical processing. The purpose is to ensure that faults occurring within a single signal channel (such as sensor failure, line interruption, or damage to the acquisition card) can be isolated without resulting in the loss of complete information about the protection parameter. Acquiring at least three signals is the minimum requirement to meet the specific logical judgment rules required later.

[0027] The core of this implementation is the collaborative logic judgment performed on the protection signals. This collaborative logic judgment does not process multiple signals independently or sequentially, but rather treats them as a whole, performing collaborative analysis and decision-making based on the "two-out-of-three voting principle." The "two-out-of-three voting principle" means selecting the state that appears most frequently from the real-time states of at least three signals as the final valid state. This principle enables the logic judgment process to automatically correct and shield erroneous states caused by single-signal faults. When the states of the three signals are consistent, the judgment result is clear; when one signal exhibits an erroneous state different from the other two true signals due to a fault, based on the majority consensus principle, the judgment result will adopt the states represented by the other two correct signals, thereby effectively suppressing the interference of single-signal faults on the final decision.

[0028] The generation and output of corresponding control commands based on the judgment results constitutes the execution phase of the protection logic. Since the judgment results are generated through the aforementioned fault-tolerant collaborative logic judgment, their reliability is fundamentally guaranteed. Therefore, the control commands generated based on this reliable judgment result (such as triggering tripping or maintaining operation) have a much higher degree of correctness and reliability than traditional methods that rely on single-channel signals for judgment. The entire method achieves enhanced reliability across the entire link from information acquisition to decision output through the close cooperation and synergy of the "redundant signal acquisition" and "collaborative logic judgment" phases. The redundancy of the signal acquisition phase provides the material basis for fault-tolerant processing in the logic judgment phase; while the synergy and majority rule principle of the logic judgment phase fully utilize this redundancy foundation, integrating multiple independent signals into a reliable decision basis, thereby systematically overcoming the inherent reliability deficiencies of protection due to single-channel design.

[0029] In a specific embodiment of the present invention, an ETS system judgment method is also provided, and the technical aspects of the method are described in detail below.

[0030] The acquisition of at least three independent protection signals can be achieved through two main technical approaches. Both approaches can form at least three physically or electrically isolated signal acquisition channels, providing an initial, hardware-level redundancy and fault-tolerance foundation for the system. The first approach involves directly configuring multiple independent sensors at the measurement point of the same protection parameter. These sensors can be of the same or different models and specifications; for example, three vibration sensors can be installed side-by-side on a turbine bearing housing, directly acquiring three independent vibration signals. The second approach uses a single sensor in conjunction with a subsequent signal isolation and distribution unit. This unit receives the raw signal from the single sensor and, through its integrated electrical isolation circuit, signal conditioning circuit, and replication circuit, generates multiple electrically completely isolated output signals that maintain strict consistency with the raw signal. These output signals are the independent protection signals. Regardless of the technical approach adopted, the resulting signal acquisition channels possess physical or electrical isolation characteristics. This isolation ensures that single-point faults such as open circuits, short circuits, intrusive interference, or component damage occurring in any channel are strictly confined within that channel and will not spread or affect the signal integrity of other channels. This guarantees the reliability of the protection signal acquisition and provides a stable signal input foundation for the accurate execution of subsequent collaborative logic judgments.

[0031] The process of performing coordinated logical judgment on the at least three protection signals includes a series of ordered data processing and decision-making steps. These steps are sequentially linked and work synergistically to achieve accurate analysis and reliable decision-making of the protection signals, giving the system the ability to correct errors in a single path. First, each acquired protection signal (which can be an analog or digital signal) is compared with a pre-set safety threshold for that protection parameter, which is then embedded in the system. This comparison process converts continuous signal values ​​into clear binary logical states. For example, a state "exceeding the threshold" is defined as logic "1" to represent "abnormal" or "dangerous," and a state "not exceeding the threshold" is defined as logic "0" to represent "normal." This step simplifies complex physical quantity judgments into clear logical quantity judgments, reducing the complexity of subsequent logical operations and improving judgment efficiency. Subsequently, a two-out-of-three voting logic operation is performed on the binary logic states of the at least three protection signals. This operation essentially involves a combination of logical AND and logical OR operations. For example, for the three binary logic states S1, S2, and S3, if states S1 and S2 are both "1", or S1 and S3 are both "1", or S2 and S3 are both "1", it is determined that a protection action needs to be triggered, generating a first judgment result. If none of the above combinations are satisfied, it is determined that no protection action needs to be triggered, generating a second judgment result. This two-out-of-three voting logic operation transforms the decision-making mechanism from relying on the "absolute correctness of a single path" to trusting the "consensus of the majority of paths," effectively shielding erroneous information from single signals and improving the reliability of the judgment results.

[0032] The execution of collaborative logic judgment also includes fault diagnosis processing. This fault diagnosis processing function runs in parallel with the main judgment logic, further enhancing the system's intelligence and reliability, achieving dynamic isolation and predictive maintenance of faulty channels, and providing additional protection for system operational safety. Specifically, the fault diagnosis processing includes real-time monitoring of the validity and rationality of each of the at least three protection signals. Validity monitoring may include checking for signal disconnection, over-range operation, and normal analog-to-digital conversion. Rationality monitoring can make preliminary judgments based on the signal's rate of change and correlation with other signals. When the diagnostic logic identifies a signal as consistently invalid or obviously unreasonable, it marks that signal as a fault signal. The binary logic state of this fault signal is excluded from the two-out-of-three voting logic operation. The system will automatically switch to a simplified but still reliable logic based on the remaining valid signals for judgment. For example, a "two-out-of-two" logic is used when two valid signals remain, and a "two-out-of-one" logic is used when one valid signal remains. This achieves dynamic isolation of faulty channels at the main signal chain level, ensuring the continuous and reliable execution of collaborative logic judgment. Simultaneously, fault alarm information is generated for the fault signal of that channel. The fault alarm information can clearly point to the specific channel where the fault signal is located, such as "vibration channel A". The fault alarm information is uploaded to the monitoring system to guide maintenance personnel to accurately locate and repair the fault, realize predictive maintenance, and reduce system downtime.

[0033] The fault diagnosis and handling also includes handling extreme fault scenarios to address situations with severely insufficient signal redundancy and prevent protection function failure. If the fault diagnosis and handling identifies two or more fault signals among the at least three protection signals simultaneously, it is determined that the current system signal redundancy is severely insufficient, posing a risk of protection function failure. At this time, a system-level anomaly alarm is triggered. This system-level anomaly alarm is the highest level alarm, which can promptly alert maintenance personnel to serious security risks in the system. Simultaneously, the execution process of the collaborative logic judgment is switched to a preset safety handling mode. This preset safety handling mode can be configured as "tentative to trip" to ensure the absolute safety of the unit, or switch to a completely independent backup protection strategy. This safety handling mode provides a final safety barrier for the system, maximizing the safety of equipment and personnel.

[0034] The method also includes a system configuration step, which adopts a modular and integrable implementation scheme. This facilitates on-site upgrades of existing single-channel ETS systems without replacing the core components of the original ETS system cabinet, reducing upgrade costs and difficulty. Specifically, the system configuration step involves adding an independent expansion cabinet outside the original ETS system cabinet. This expansion cabinet is equipped with multiple independent signal input cards and a dedicated logic processing unit. For example, three independent analog input cards can be configured as multiple independent signal input cards, and a programmable logic controller (PLC), embedded processor board, or dedicated integrated circuit can be configured as the dedicated logic processing unit. The dedicated logic processing unit internally incorporates the aforementioned software algorithm, which includes collaborative logic judgment and fault diagnosis functions. The at least three independent protection signals from different signal acquisition channels are respectively connected to different signal input cards in the expansion cabinet. The independent reception and transmission of each protection signal through these multiple independent signal input cards avoids mutual interference between signals. The collaborative logic judgment is executed by the logic processing unit. The dedicated logic processing unit ensures the efficient and accurate execution of the collaborative logic judgment. The expansion cabinet interacts with the original cabinet with commands and status through a standard industrial communication bus or hard-wired cable, so as to realize the collaborative operation of the expansion system and the original system.

[0035] The system configuration steps also include configuring an independent power supply circuit and grounding system for the expansion cabinet. This independent power supply circuit can originate from different power bus segments. By configuring an independent power supply circuit and grounding system, electrical isolation between the expansion cabinet and the original ETS system cabinet can be achieved. This electrical isolation design effectively avoids mutual interference between the expansion system and the original system due to issues such as grounding interference and power coupling, ensuring the absolute independence and anti-interference capabilities of the expansion system. This, in turn, ensures the high reliability of the entire composite system after the upgrade. Functional entities such as the signal acquisition module and the collaborative logic judgment module are all stably implemented on this hardware platform.

[0036] To enable those skilled in the art to better understand and implement the present invention, a non-limiting specific application example is provided below, which takes the "turbine overspeed protection" protection parameter commonly used in thermal power plants as an example.

[0037] In this application example, the overspeed protection (set value 3300 rpm) of a certain unit needs to be modified according to the present invention. The specific implementation process is as follows: First, in the turbine speed measurement stage, three independent magnetoresistive speed sensors are used. These three independent magnetoresistive speed sensors are respectively set at the same speed measuring gear. The speed of the same speed measuring gear is detected by the three magnetoresistive speed sensors, thereby obtaining three independent speed signals (i.e., protection signals S1, S2, S3). These three speed signals are respectively connected to three independent speed measuring cards in the newly added expansion cabinet through shielded cables. The independent reception and transmission of the three speed signals are realized through the three independent speed measuring cards.

[0038] In the logic processing unit of the expansion cabinet, the overspeed protection threshold is preset to 3300 rpm. Each speed signal is compared with this threshold in real time: if the speed is ≥3300 rpm, the corresponding channel's binary logic state is set to "1" (indicating an abnormality); if the speed is <3300 rpm, it is set to "0" (indicating normality). The binary conversion of the three speed signals is completed through this comparison process.

[0039] The collaborative logic judgment module performs a "two out of three" voting operation every 10 milliseconds. For example, at a certain moment, the S1 signal is falsely reported as 3400 rpm (corresponding to state 1) due to instantaneous interference, while the S2 and S3 signals are correctly displayed as 3200 rpm (corresponding to state 0). According to the two out of three voting logic, the system checks whether there is a situation where any two states are "1" at the same time. In this example, the state combination is (1, 0, 0), which does not meet the condition that any two states are "1" at the same time. Therefore, the judgment result is "0", and the system does not issue a trip command, thereby avoiding false tripping caused by interference from a single signal.

[0040] Meanwhile, the fault diagnosis module continues to run. If the fault diagnosis module finds that the S1 signal remains at an abnormally fixed value of 4000 rpm for 1 second (this value is out of range and does not change), the S1 signal is marked as a fault signal. In the subsequent voting, the binary logic state of the S1 signal is excluded. The system then switches to a "two-out-of-two" judgment based on the S2 and S3 signals (that is, both must be consistent with 1 to trigger a trip) and issues a "speed channel 1 fault" alarm message to guide the operation and maintenance personnel to handle the fault in a timely manner.

[0041] The expansion cabinet is powered by the plant's security section A, and its grounding wire is connected separately to the main grounding network, achieving electrical isolation from the original ETS cabinet (powered by the plant's security section B), effectively avoiding the impact of common ground interference, power coupling and other issues on system operation.

[0042] Ultimately, the control command output module will only send a dry contact closing signal to the trip relay circuit of the original ETS system to trigger the turbine trip when the voting logic determines that a trip is required (i.e., the judgment result is "1").

[0043] As can be seen from the specific examples above, the solution provided by this invention transforms the abstract concept of redundancy and fault tolerance into a series of concrete, operable, and verifiable hardware configurations and software logic steps. These various technical features support and synergize with each other, jointly constructing an ETS solution with reliability far exceeding that of a single-channel system. The signal acquisition stage provides a reliable signal foundation for the entire system through the configuration of multiple independent channels. The collaborative logic judgment stage achieves shielding against single-channel signal errors through a three-out-of-two voting principle. The fault diagnosis and processing stage achieves dynamic isolation and early warning for faulty channels. The system configuration stage ensures system stability and ease of upgrades through independent expansion cabinets and electrical isolation design. The close cooperation of each stage, from signal acquisition and analysis to command output, enhances the reliability and security of the ETS system throughout the entire chain, effectively avoiding protection failures or malfunctions caused by single-channel faults.

[0044] In a specific embodiment of the present invention, an ETS system is also provided, as described above. Figure 2 As shown, it includes: The signal acquisition module is used to acquire at least three independent protection signals for the same protection parameter. The collaborative logic judgment module is used to perform collaborative logic judgment on the at least three protection signals. The collaborative logic judgment is based on the two-out-of-three voting principle and generates a judgment result based on the majority of consistent signal states. The control command output module is used to generate and output corresponding control commands based on the judgment result.

[0045] In this specific embodiment, the signal acquisition module constitutes the fundamental link for reliable sensing and data input in the entire ETS system. This module is specifically configured to simultaneously acquire at least three protection signals that are physically isolated from each other in terms of transmission path, electrical characteristics, or logical processing for the same protection parameter that needs to be monitored. This multi-channel independent acquisition design aims to establish a parallel and redundant signal acquisition mechanism at the front end of the system. Its direct technical effect is to ensure that when a single sensing element, a single transmission cable, or a single interface circuit fails, the monitoring information regarding that protection parameter will not be completely interrupted or distorted, thus providing the system with the fundamental ability to resist single-point failures from the source.

[0046] The collaborative logic judgment module is the core decision-making unit of this ETS system. Connected to the signal acquisition module, it receives at least three independent protection signals. This module embeds and executes collaborative analysis logic based on a two-out-of-three voting principle. This principle requires the module to perform a holistic analysis of the states of the input multiple signals, using the majority signal state as the final valid judgment basis. This mechanism transforms the module's function from simple parallel processing of multiple signals into an intelligent decision-making process capable of internal cross-validation and error masking. When the states of multiple signals are consistent, the module arrives at a clear conclusion; when one signal exhibits an abnormal state contradicting the other correct signals due to its own fault, based on the majority consensus principle, the module can automatically ignore and eliminate the interference of that erroneous signal, adopting the true state represented by the majority of correct signals as the judgment result. Therefore, this module essentially transforms a potential uncertainty problem introduced by a single-channel fault into a fault-tolerant decision-making process that can be handled by deterministic rules, greatly improving the inherent reliability of the decision-making process. The control command output module is connected to the collaborative logic judgment module, and its function is to respond to and execute the judgment results generated by the collaborative logic judgment module. Because the judgment results it relies on are highly reliable conclusions generated through the aforementioned redundant acquisition and collaborative judgment process, the basis for the control commands generated by this module (such as commands to drive trip relays or maintain the status quo) is fundamentally strengthened. This module ensures the consistency between the system's final output action and the internal reliable judgment conclusion. The signal acquisition module, collaborative logic judgment module, and control command output module do not exist in isolation, but rather form a synergistically enhanced organic whole through functional integration and data flow. The redundant independent signals provided by the signal acquisition module are the material prerequisite for the collaborative logic judgment module to implement majority-rule fault-tolerant logic; while the highly reliable judgment results produced by the collaborative logic judgment module are the logical prerequisite for the control command output module to issue correct action commands. This modular architecture and collaborative working mechanism enable the entire ETS system, from information input and intermediate processing to final output, to have the ability to resist internal single-point failures throughout the entire chain. By combining redundant configuration of hardware modules with collaborative judgment of software logic, the system has achieved a transformation from a traditional fragile chain structure relying on a single path to a system structure with inherent fault tolerance and functional robustness.

[0047] This invention also provides a computer device in specific embodiments. Specifically, the computer device includes a processor and a memory. The memory stores a computer program, which includes program instructions. The processor executes the program instructions stored in the computer storage medium. The processor may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. It is the computing and control core of the terminal, suitable for implementing one or more instructions, specifically suitable for loading and executing one or more instructions to achieve corresponding method flows or corresponding functions. The processor described in this embodiment can be used to collect at least three independent protection signals for the same protection parameter. The protection signal is subjected to collaborative logic judgment, which is based on the two-out-of-three voting principle and generates a judgment result based on the signal state that is consistent with the majority. Based on the judgment result, the corresponding control command is generated and output.

[0048] This invention also provides a storage medium, specifically a computer-readable storage medium, which is a memory device in a terminal device used to store programs and data. It is understood that the computer-readable storage medium here can include both the built-in storage medium in the terminal device and extended storage media supported by the terminal device. The computer-readable storage medium provides storage space, which stores the terminal's operating system. Furthermore, the storage space also stores one or more instructions suitable for loading and execution by a processor. These instructions can be one or more computer programs (including program code). It should be noted that the computer-readable storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk storage device. The processor can load and execute one or more instructions stored in the computer-readable storage medium to implement the corresponding steps of the methods in the above embodiments; the one or more instructions in the computer-readable storage medium are loaded by the processor and execute the following steps: for the same protection parameter, at least three independent protection signals are acquired; The protection signal is subjected to collaborative logic judgment, which is based on the two-out-of-three voting principle and generates a judgment result based on the signal state that is consistent with the majority. Based on the judgment result, the corresponding control command is generated and output.

[0049] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0050] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0051] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0052] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0053] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above, and that the invention can be implemented in other specific forms without departing from its spirit or essential characteristics. Therefore, the embodiments should be considered illustrative and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description. Thus, all variations falling within the meaning and scope of equivalents of the claims are intended to be included within the scope of the invention. No reference numerals in the claims should be construed as limiting the scope of the claims.

[0054] Furthermore, it should be understood that although this specification describes embodiments, not every embodiment contains only one independent technical solution. This narrative style is merely for clarity. Those skilled in the art should consider the specification as a whole, and the technical solutions in each embodiment can be appropriately combined to form other embodiments that can be understood by those skilled in the art. The above content is only for illustrating the technical concept of the present invention and should not be construed as limiting the scope of protection of the present invention. Any modifications made based on the technical concept proposed in this invention shall fall within the scope of protection of the claims of this invention.

Claims

1. A method for determining performance in an ETS system, characterized in that, include: For the same protection parameter, at least three independent protection signals should be collected; The protection signal is subjected to collaborative logic judgment, which is based on the two-out-of-three voting principle and generates a judgment result based on the signal state that is consistent with the majority. Based on the judgment result, the corresponding control command is generated and output.

2. The ETS system judgment method according to claim 1, characterized in that, The acquisition of at least three independent protection signals includes: By using multiple independent sensors set at the same protection parameter measurement point, or by using a single sensor in conjunction with a signal isolation distribution unit, at least three physically or electrically isolated signal acquisition channels are formed to obtain the at least three mutually independent protection signals.

3. The ETS system judgment method according to claim 2, characterized in that, The process of performing coordinated logic judgment on the at least three protection signals includes: Each protection signal is compared with its corresponding preset threshold to obtain the binary logic state of each protection signal; Perform a two-out-of-three voting logic operation on the binarized logic states of the at least three protection signals; When the binary logic state of at least two protection signals is the first state indicating abnormal parameters, it is determined that protection action needs to be triggered and a first judgment result is generated; otherwise, it is determined that protection action does not need to be triggered and a second judgment result is generated.

4. The ETS system judgment method according to claim 3, characterized in that, The execution of collaborative logic judgment also includes fault diagnosis and processing: Real-time monitoring of the effectiveness and rationality of each of the at least three protection signals; When a certain protection signal is identified as a fault signal, the binary logic state of the fault signal is excluded in the three-out-of-two voting logic operation, and a fault alarm information for the fault signal is generated.

5. The ETS system judgment method according to claim 4, characterized in that, The fault diagnosis process also includes: If two or more fault signals are detected simultaneously among the at least three protection signals, a system-level abnormal alarm is triggered, and the execution process of the collaborative logic judgment is switched to a preset safety processing mode.

6. The ETS system judgment method according to claim 1, characterized in that, It also includes system configuration steps: An independent expansion cabinet is added outside the existing ETS system cabinet. The expansion cabinet is equipped with multiple independent signal input cards and a dedicated logic processing unit. The at least three independent protection signals from different signal acquisition channels are respectively connected to different signal input cards in the expansion cabinet; The collaborative logic judgment is executed by the logic processing unit.

7. The ETS system judgment method according to claim 6, characterized in that, The system configuration steps also include: The expansion cabinet is equipped with an independent power supply circuit and grounding system to achieve electrical isolation between the expansion cabinet and the original ETS system cabinet.

8. An ETS system, characterized in that, include: The signal acquisition module is used to acquire at least three independent protection signals for the same protection parameter. The collaborative logic judgment module is used to perform collaborative logic judgment on the at least three protection signals. The collaborative logic judgment is based on the two-out-of-three voting principle and generates a judgment result based on the majority of consistent signal states. The control command output module is used to generate and output corresponding control commands based on the judgment result.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the ETS system judgment method as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the ETS system judgment method as described in any one of claims 1 to 7.

Images