Multi-redundancy control and safety protection system and method for vortex magnetic brake of drilling platform

Abstract

The invention discloses a multi-redundancy control and safety protection system and method for vortex magnetic braking of a drilling platform. The system is characterized in that a first controller and a second controller of a control module operate in a main-standby redundancy mode; a first direct-current driving device and a second direct-current driving device of the driving module are in communication connection with the control module and are controlled by the control module; the first direct-current driving device and the second direct-current driving device are respectively connected with the vortex magnetic brake coil for driving; the power supply standby module comprises a standby emergency busbar used for providing power for a vortex magnetic brake, a standby direct-current power supply used for providing power for a vortex magnetic brake coil and a standby control power supply used for providing power for the control module. The first controller and the second controller are further used for conducting fault diagnosis and early warning and alarm processing on the vortex magnetic brake according to the real-time electrical data. And the control state of the vortex magnetic brake is determined according to the state of the dry contact signal, and an output control signal is determined according to a preset parabola control curve and preset protection logic.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of marine engineering, specifically to a multi-redundancy control and safety protection system and method for vortex magnetic brakes on drilling platforms. Background Technology

[0002] Eddy current brakes, also known as eddy current brakes or electromagnetic brakes, are the core braking device in the traveling system of modern oil drilling rigs. They generate contactless braking torque through electromagnetic induction and are primarily used to: control the descent speed of the drill string, achieving smooth and precise drill feeding; assist in suspending the drill string, reducing the load on the mechanical braking system; and provide powerful electromagnetic braking force in emergencies, serving as a crucial safety barrier to prevent drill slippage and drill bit fall accidents. The reliability of its control directly affects the safety and efficiency of drilling operations, as well as the safety of millions of dollars worth of drilling equipment.

[0003] Existing vortex brake control systems generally suffer from the following pain points that urgently need to be addressed: 1) The control architecture is simple and has low reliability, which easily leads to the risk of single point of failure: It adopts a single controller (such as a single PLC or an old relay system) and a single DC driver architecture. If any critical component in the system (such as PLC, driver, power module, etc.) fails, the entire electronic braking system will completely fail and the braking function will be reduced to zero.

[0004] 2) Poor control performance and poor user experience: The system generally uses simple linear control curves, which have problems such as "stopping when touched and slipping when lifted".

[0005] 3) Insufficient security depth and lack of ultimate backup: The system lacks backup measures for extreme failures (such as main grid power failure, simultaneous failure of both drives, etc.). Usually, there is only one or two levels of backup, and when the above backups also fail, the system will be completely unable to cope.

[0006] 4) Low level of intelligence and difficult maintenance: The system lacks comprehensive status monitoring, fault diagnosis and data recording functions. Summary of the Invention

[0007] In view of the above problems, embodiments of the present invention are proposed to provide a multi-redundancy control and safety protection system and method for vortex brakes of drilling platforms that overcomes or at least partially solves the above problems.

[0008] According to one aspect of the present invention, a multi-redundancy control and safety protection system for a drilling platform vortex brake is provided, the system comprising: a control module, a drive module and a power backup module; The control module includes a first controller and a second controller, wherein the first controller and the second controller operate in a primary-backup redundancy mode, and when the first controller fails, the switchover occurs to the second controller; The drive module includes: a first DC drive device and a second DC drive device, wherein the first DC drive device and the second DC drive device are communicatively connected to the control module and controlled by the control module; the first DC drive device and the second DC drive device are respectively connected to the vortex brake coil for driving. The power backup module includes: a backup emergency busbar for providing power to the vortex brake, a backup DC power supply for providing power to the vortex brake coil, and a backup control power supply for providing power to the control module. The first and second controllers are also used to diagnose faults in the vortex brake based on real-time electrical data, to provide early warnings or alarms based on the diagnostic results, and to determine the control state of the vortex brake based on the state of the dry contact signal. The first and second controllers are also used to determine the output control signal to control the drive module based on the preset parabolic control curve and the preset protection logic.

[0009] According to another aspect of the present invention, a method for multi-redundancy control and safety protection of vortex brakes for drilling platforms is provided. The method is based on the multi-redundancy control and safety protection system for vortex brakes of drilling platforms as claimed in the preceding claims, and includes: The first controller of the control module operates as the main controller, performing real-time fault diagnosis on the vortex brake, issuing warnings or alarms based on the diagnosis results, and determining the output control signal to control the drive module based on the preset parabolic control curve and preset protection logic. The first DC drive device of the drive module controls the first vortex brake coil, and the second DC drive device controls the second vortex brake coil. The first DC drive device and the second DC drive device are independent of each other. When a fault is detected in the first controller, the system switches to the second controller. When the main power supply of the vortex brake is out of service, the backup control power supply powers the control module. The power supply contactor of the backup DC power supply closes to supply power to the first and second vortex brake coils respectively, and the power supply contactor of the main power supply of the vortex brake opens.

[0010] The multi-redundant control and safety protection system and method for vortex brakes on drilling platforms provided by embodiments of the present invention employs a redundant design. Control redundancy prevents loss of braking function due to single-point failures in the control system, improving the reliability of the core control chain. Multi-level progressive power supply redundancy solves the problem of main power grid failure, providing a safety guarantee for the power supply to the vortex brake coils and ensuring power consumption for the entire control module, as well as the timeliness and completeness of alarms and fault records. It achieves a leap from passive response to active warning in fault diagnosis, early warning, or alarm systems, and constructs multi-layered safety protection based on the state of dry contact signals.

[0011] The above description is merely an overview of the technical solutions of the embodiments of the present invention. In order to better understand the technical means of the embodiments of the present invention and to implement them in accordance with the contents of the specification, and to make the above and other objects, features and advantages of the embodiments of the present invention more apparent and understandable, specific implementation methods of the embodiments of the present invention are described below. Attached Figure Description

[0012] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the embodiments of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 A schematic diagram of a multi-redundancy control and safety protection system for a drilling platform vortex brake according to an embodiment of the present invention is shown. Figure 2 A schematic diagram of a multi-redundant control and safety protection system network for vortex brakes on drilling platforms is shown. Figure 3 A schematic diagram showing the switching between the main power supply and the backup DC power supply is shown. Figure 4 A flowchart of a method for multiple redundancy control and safety protection of a drilling platform vortex brake according to another embodiment of the present invention is shown. Detailed Implementation

[0013] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0014] Figure 1 A schematic diagram of a multi-redundancy control and safety protection system for a drilling platform vortex brake according to an embodiment of the present invention is shown, as follows: Figure 1 As shown, the system includes: a control module 100, a drive module 200, and a power backup module 300.

[0015] In this embodiment, the multi-redundant control and safety protection system for the drilling platform's vortex brake is an additional multi-redundant control and safety protection system added to the drilling platform's vortex brake system. This system employs a redundant design, and the control redundancy prevents the loss of braking function due to a single point of failure in the control system, thus improving the reliability of the core control chain. The multi-level progressive power supply redundancy solves the problem of mains grid power failure, providing a safe guarantee for the power supply to the vortex brake coil, ensuring power supply to the entire control module, and guaranteeing the timeliness and completeness of alarms and fault records.

[0016] The control module 100 includes a first controller 110 and a second controller 120, which operate in a primary-backup redundancy mode. The first controller 110 operates as the primary controller, and the second controller 120 operates as the backup controller. When the first controller 110 fails, the system quickly switches to the second controller 120 within a preset time, such as 100ms, and simultaneously triggers an alarm, such as displaying and recording alarm information on the main control cabinet's HMI (Human Machine Interface). This alarm information facilitates rapid fault location and quick problem resolution. The redundancy of the control module 100 ensures "dual-active" standby and seamless automatic or manual switching within milliseconds (<100ms), ensuring the continuity and stability of braking control commands. This completely avoids the loss of braking function due to single-point failures in existing control systems, thereby improving the reliability of the core control chain. The specific models of the first and second controllers can be set according to the implementation situation and are not limited here.

[0017] The drive module 200 includes a first DC drive device 210 and a second DC drive device 220, wherein the first DC drive device 210 and the second DC drive device 220 are independent of each other. The first DC drive device 210 and the second DC drive device 220 are communicatively connected to the control module 100 and are controlled by the control module 100. Data interaction between the first DC drive device 210 and the second DC drive device 220 and the control module 100 is based on DP communication. DP communication can handle large data transmissions and can be used for data for which there is no urgent need for transmission time. For preset level control signals, such as control signals of important levels set according to implementation conditions, such as emergency stop signals, drive prohibition signals, fault reset signals, etc., the first DC drive device 210 and the second DC drive device 220 can transmit signals to the control module 100 based on hardwired and relay connections. Hardwired refers to independent, point-to-point physical cables, and relay connections are based on the physical switches of relays to transmit signals. Transmission via hardwired and relay connections is independent of any software protocol stack, network configuration, or processor, offering high real-time performance and significantly reduced processing latency. Hardwired connections provide physical isolation from the DP communication loop, ensuring that critical control signals can still be transmitted even if DP communication fails. The specific model of the DC drive device can be chosen based on implementation requirements and is not limited here.

[0018] Furthermore, the first DC drive device 210 and the second DC drive device 220 are respectively connected to the vortex brake coil for driving. Specifically, the vortex brake coil includes a first vortex brake coil and a second vortex brake coil. The first DC drive device 210 drives the first vortex brake coil, and the second DC drive device 220 drives the second vortex brake coil, forming their own independent drive paths.

[0019] The backup power module 300 includes: a backup emergency busbar 310 for providing power to the vortex brake, a backup DC power supply 320 for providing power to the vortex brake coil, and a backup control power supply 330 for providing power to the control module. The main power supply used by the vortex brake system is connected to the backup emergency busbar 310, enabling backup power supply within 20 seconds when the main power grid fails, ensuring the safety of AC power supply. The backup DC power supply 320 can be a battery pack. In the extremely rare case where both the first DC drive device 210 and the second DC drive device 220 of the drive module 200 completely fail, the backup DC power supply 320 directly supplies power to the vortex brake coil, giving operators crucial reaction time to operate the mechanical brake lever and fundamentally eliminating the risk of drill bit falls. The backup control power supply 330 can be a UPS uninterruptible power supply, ensuring that the control module 100 can still perform monitoring and alarm processing normally in the event of a power failure, guaranteeing complete recording of fault information and timely alarm prompts. Through the above multi-level progressive power redundancy settings, when the main power supply of the vortex brake is interrupted, the backup control power supply can supply power to the control module to realize emergency control and data recording functions. When the power supply contactor of the backup DC power supply is closed, it supplies power to the vortex brake coil. The vortex brake system will be powered by the backup DC power supply. The time can be set according to the implementation situation, such as 3 minutes, etc., which is not limited here. This ensures the safe operation of the vortex brake system in emergency situations. At this time, the power supply contactor of the main power supply of the vortex brake is disconnected, and no main power supply is required.

[0020] Furthermore, considering the lack of safety management in existing vortex brake systems, the first controller 110 and the second controller 120 are also used to perform fault diagnosis on the vortex brake based on real-time electrical data and to handle alarms based on the diagnostic results. Specifically, fault diagnosis is performed on the vortex brake based on real-time electrical data and other parameters. Fault diagnosis includes electrical protection such as overcurrent, overvoltage, undervoltage, grounding, winding short circuit, and winding open circuit. It can also include fault diagnosis such as low cooling water flow of the vortex brake, low cooling water flow of the drilling winch brake hub, and high cooling water temperature. For each of the above fault diagnoses, early warning or alarm information containing the diagnostic results is generated and recorded. Early warning or alarm can be issued using the display interface of the vortex brake system, such as an HMI. Early warning can help operators be aware of potential risks in advance and take effective risk avoidance measures. Alarms can enable operators to quickly locate faults and repair them in a timely manner.

[0021] The first controller 110 and the second controller 120 can also determine the control state of the vortex brake based on the state of the dry contact signal. Here, the dry contact signal is the anti-collision crane signal added in this embodiment. The dry contact signal can be a pure physical switch contact, and it can be set at a preset height, etc., depending on the implementation situation. There is no limitation here. The specific control state of the vortex brake is as follows: When the dry contact signal is determined to be in a closed state, the dry contact signal has the highest priority, surpassing all manual control, and can force the vortex brake to be fully loaded. When the dry contact signal is determined to be in an open state, the vortex brake is controlled by the vortex brake control handle in the driller's cabin.

[0022] Furthermore, existing output control signals use proportional control curves such as Output = k * Input, where the output and input have only a simple linear relationship. However, in practical applications, the load, inertia, and torque characteristics of the drilling winch itself are non-linear under actual working conditions. Linear curves often exhibit overly sensitive characteristics in low-load regions, where even slight handle movements can cause abrupt torque changes, hindering precise operation (such as low-load, low-speed lowering); in high-load regions, they exhibit insufficient power, requiring significant handle movements to obtain sufficient torque. Considering these issues, the first controller 110 and the second controller 120 in this embodiment can also determine the output control signal based on a preset parabolic control curve and preset protection logic. Specifically, after determining the input signal, a preset parabolic control curve is obtained based on preset coefficients and the square of the input signal, thereby calculating the output control signal. For example, the preset parabolic control curve is Output = h * (Input)², where Output is the output control signal, Input is the input signal, and h is a preset coefficient, which can be set according to the implementation situation and is not limited here. The output control signal, calculated based on a preset parabolic control curve, increases gradually in the low input range and rapidly in the high input range, ensuring that the control output matches the actual load variation and improving control accuracy. Furthermore, the output control signal can be updated based on preset protection logic according to different handle positions and durations. For example, when the handle is at zero, the voltage output is set to less than 1VDC. When the output voltage exceeds half of the maximum voltage via the handle, and the duration reaches 7 minutes, the output voltage automatically decreases to half of the maximum voltage. When the handle is fully extended and the duration is less than 7 minutes, the voltage output is 230-250VDC; when the duration exceeds 13 minutes, the voltage output is 110-140VDC. No action is needed when the output voltage is less than half of the maximum voltage via the handle. The above are examples; adjustments may be made based on implementation conditions, and no specific limitations are set here. By adding safety protection and adjusting the output control signal, the safety protection and precise control of the vortex brake on the drilling platform are further achieved.

[0023] Figure 2This diagram illustrates a multi-redundant control and safety protection system network for a drilling platform's vortex brake. It mainly includes a first controller 1, a second controller 2, a first DC drive unit 3, a second DC drive unit 4, and an HMI (display interface) 5, all installed in a control cabinet. A network switch 8 connects to the first controller 1, second controller 2, HMI 5, and protocol converter 9 via Ethernet, facilitating data exchange and communication between the first controller 1, second controller 2, and HMI 5 based on TCP / IP. A backup DC power supply (battery charger) 7, installed next to the control cabinet, provides backup power to the protocol converter 9; the two are connected via a CAN bus. The first controller 1, second controller 2, and first DC drive units 3 and 4 exchange data via DP communication. Important control signals are connected using hardwired connections and relays (not shown in the diagram). Figure 2 It also includes a vortex brake cooling water monitoring slave station 6 installed in the driller's room, which communicates with the first controller 1 and the second controller 2 via an industrial serial bus RS485 to diagnose faults such as low vortex brake cooling water flow, low drilling winch brake hub cooling water flow, and high cooling water temperature. The above is just an example, and the specific settings can be configured according to the implementation situation. No limitation is made here.

[0024] The switching between the main power supply and the backup power module can be done as follows: Figure 3 As shown, when the main power supply of the vortex brake system is operating normally, the battery-powered first contactor 9 and the battery-powered second contactor 11 are disconnected, and the main power supply contactor 10 is energized and closed. The first DC drive device can drive the first vortex brake coil 12 independently, and the second DC drive device can drive the second vortex brake coil 13 independently. When the main power supply is abnormal or fails, resulting in a power outage or emergency situation, the backup control power supply (UPS power supply) supplies power to each control circuit of the control module. The battery-powered first contactor 9 and the battery-powered second contactor 11 are closed, and the main power supply contactor 10 is disconnected. The backup DC power supply (battery) can then supply power to the first vortex brake coil 12 and the second vortex brake coil 13 independently. The battery disconnects after a certain period of power supply, such as 3 minutes. Figure 3 The circuit breakers are Q8 (14) and Q9 (15). The Q8 and Q9 circuit breakers can serve as safety protection switches for the battery circuit, with a final manual or automatic disconnection point. Figure 3 Other circuits can be connected with reference to the existing system's circuit connections, and will not be elaborated here. The above is an example; the specific configuration can be adjusted according to the implementation situation, and is not limited here.

[0025] The multi-redundant control and safety protection system for a drilling platform vortex brake according to an embodiment of the present invention employs a redundant design. This redundancy prevents loss of braking function due to single-point failures in the control system, improving the reliability of the core control chain. Multi-level progressive power supply redundancy addresses the issue of mains grid power failure, providing a safety guarantee for the vortex brake coil power supply and ensuring power consumption for the entire control module, as well as the timeliness and completeness of alarms and fault records. It achieves a leap from passive response to active warning in fault diagnosis, early warning, and alarm systems, and constructs multi-layered safety protection based on the state of dry contact signals.

[0026] Figure 4 A flowchart of a multi-redundancy control and safety protection method for a drilling platform vortex brake according to another embodiment of the present invention is shown, such as... Figure 4 As shown, the method includes the following steps: In step S401, the first controller of the control module operates as the main controller, performs real-time fault diagnosis on the vortex brake, issues warnings or alarms based on the diagnosis results, and determines the output control signal to control the drive module based on the preset parabolic control curve and preset protection logic. The first DC drive device of the drive module controls the first vortex brake coil, and the second DC drive device controls the second vortex brake coil. The first DC drive device and the second DC drive device are independent of each other. When a fault is detected in the first controller, the system switches to the second controller.

[0027] The method in this embodiment is implemented by various modules in the multi-redundant control and safety protection system of the vortex brake on the drilling platform. The control module includes a first controller and a second controller, which operate in a primary-backup redundancy mode. The first controller operates as the primary controller, and the second controller operates as the backup controller. When the first controller fails, it quickly switches to the second controller within a preset time, such as 100ms, and simultaneously triggers alarm processing, such as displaying and recording alarm information on the HMI (Human Machine Interface) of the main control cabinet. The alarm information facilitates quick fault location and thus rapid problem resolution.

[0028] The first and second controllers are also used to perform fault diagnosis on the vortex brake based on real-time electrical data. Taking the first controller as an example, the first controller performs fault diagnosis on the vortex brake in real time, such as based on real-time electrical data and other parameters. Fault diagnosis includes electrical protection such as overcurrent, overvoltage, undervoltage, grounding, winding short circuit, and winding open circuit. It can also include fault diagnosis such as low cooling water flow of the vortex brake, low cooling water flow of the drilling winch brake hub, and high cooling water temperature. For each of the above fault diagnoses, a warning or alarm message containing the diagnosis results is generated and recorded. The warning or alarm can be issued using the display interface of the vortex brake system, such as an HMI. Furthermore, the control state of the vortex brake can be determined based on the state of the dry contact signal. Here, the dry contact signal is the anti-collision crane signal added in this embodiment. The dry contact signal can be a pure physical switch contact, which can be set at a preset height, etc., depending on the implementation situation. There is no limitation here. The specific control states of the vortex brake are as follows: When the dry contact signal is determined to be closed, the dry contact signal has the highest priority, surpassing all manual control, and can force the vortex brake to be fully loaded. When the dry contact signal is determined to be open, the vortex brake is controlled by the vortex brake control handle in the driller's cabin.

[0029] The first and second controllers can also determine the output control signal based on a preset parabolic control curve and preset protection logic. Specifically, after determining the input signal, a preset parabolic control curve is obtained based on preset coefficients and the square of the input signal, thereby calculating the output control signal. For example, the preset parabolic control curve is Output = h * (Input)², where Output is the output control signal, Input is the input signal, and h is a preset coefficient, which can be set according to the implementation situation and is not limited here. Furthermore, the output control signal can be updated based on the different position information of the handle and the duration, according to the preset protection logic. For example, when the handle is in the zero position, the voltage output is set to less than 1VDC. When the output voltage exceeds 1 / 2 of the maximum voltage through the handle control, the output voltage automatically decreases to 1 / 2 of the maximum voltage when the duration reaches 7 minutes. When the handle is fully extended and the duration is less than 7 minutes, the voltage output is 230-250VDC; when the duration exceeds 13 minutes, the voltage output is 110-140VDC. When the output voltage is less than 1 / 2 of the maximum voltage through the handle control, no action is required. The above are examples; adjustments may be made based on implementation conditions, and no specific limitations are set here. By adding safety protection and adjusting the output control signals, the safety protection and precise control of the vortex brake on the drilling platform are further achieved.

[0030] The first and second controllers of the control module can control the drive module, which includes a first DC drive unit and a second DC drive unit, each operating independently. The first DC drive unit controls the first vortex brake coil, and the second DC drive unit controls the second vortex brake coil. The first and second DC drive units interact with the control module via DP communication. DP communication can handle large data transmissions and is suitable for data without urgent transmission time requirements. For preset control signals, such as critical control signals set according to implementation requirements (e.g., emergency stop signals, drive disable signals, fault reset signals), the first and second DC drive units can transmit signals to the control module via hardwired and relay connections. Hardwired connections are independent, point-to-point physical cables, while relay connections transmit signals based on physical relay switches. Hardwired and relay-based transmission does not rely on any software protocol stack, network configuration, or processor, offering high real-time performance and significantly reducing processing latency. Hardwired connections are physically isolated from the DP communication loop, ensuring that a DP communication failure will not affect the transmission of critical control signals via hardwired connections. The specific model of the DC drive unit can be configured according to implementation requirements and is not limited here.

[0031] In step S402, when the main power supply of the vortex brake is in a power outage condition, the backup control power supply supplies power to the control module. The power supply contactor of the backup DC power supply is closed to supply power to the first vortex brake coil and the second vortex brake coil respectively, and the power supply contactor of the main power supply of the vortex brake is opened.

[0032] In this embodiment, in addition to the main power supply for the vortex brake, there are also a backup emergency busbar for powering the vortex brake, a backup DC power supply for powering the vortex brake coil, and a backup control power supply for powering the control module. The backup emergency busbar is primarily for ensuring AC power safety within 20 seconds of a main grid power failure. The backup DC power supply can be a battery pack. In the extremely rare case where both the first and second DC drive devices completely fail, the backup DC power supply directly powers the vortex brake coil, giving operators crucial reaction time to operate the mechanical brake lever and fundamentally eliminating the risk of drill bit falls. Specifically, in the circuit, the first and second battery power supply contactors are closed, while the main power supply contactor is open, allowing the backup DC power supply (battery) to independently power both the first and second vortex brake coils. The backup control power supply can be a UPS (Uninterruptible Power Supply) to ensure that the control module can still perform monitoring and alarm processing normally in the event of a power failure, guaranteeing complete recording of fault information and timely alarm prompts.

[0033] Through the above multi-level progressive power redundancy settings, when the main power supply of the vortex brake is interrupted, the backup control power supply can power the control module to realize emergency control and data recording functions. When the power supply contactor of the backup DC power supply closes, it supplies power to the vortex brake coil. The vortex brake system will be powered by the backup DC power supply. The time can be set according to the implementation situation, such as 3 minutes, etc., which is not limited here, thereby ensuring the safe operation of the vortex brake system in emergency situations.

[0034] The multi-redundancy control and safety protection method for vortex brakes on drilling platforms provided by embodiments of the present invention avoids the loss of braking function due to single-point failures in the control system, thus improving the reliability of the core control chain. Multi-level progressive power supply redundancy solves the problem of main power grid failure, providing a safety guarantee for the power supply to the vortex brake coil, ensuring power supply to the entire control module, and guaranteeing the timeliness and completeness of alarms and fault records. It achieves a leap from passive response to active warning in fault diagnosis, early warning, or alarm systems, and constructs multi-layered safety protection based on the state of dry contact signals.

[0035] It should be noted that relational terms such as "first" and "second" used in this invention are only used to distinguish different entities or operations, and do not indicate any actual order or limiting relationship between entities or operations.

[0036] The accompanying drawings are only schematic representations of the basic concept of the present invention. The components shown in the drawings are not drawn according to the actual quantity, shape or proportion of the implementation. Their specific implementation can be adjusted according to the implementation situation. The layout and structure of the components do not constitute a limitation of the present invention.

[0037] In this invention, "connection" can be either direct or indirect, including but not limited to connection forms implemented through active devices, passive devices or other electrical connection methods, as long as the corresponding function can be achieved.

[0038] The description of this invention is merely illustrative and is not intended to limit the scope of protection of this invention. Without departing from the spirit and essential characteristics of this invention, those skilled in the art can make various modifications, substitutions, or equivalent implementations to the described embodiments, and all such modifications, substitutions, or equivalent solutions should fall within the scope of protection of this invention.

Claims

1. A multi-redundant control and safety protection system for a vortex brake on a drilling platform, characterized in that, The system includes: a control module, a drive module, and a backup power module; The control module includes: a first controller and a second controller, wherein the first controller and the second controller operate in a primary-backup redundancy mode, and when the first controller fails, the switchover occurs to the second controller; The drive module includes: a first DC drive device and a second DC drive device, wherein the first DC drive device and the second DC drive device are communicatively connected to the control module and controlled by the control module; the first DC drive device and the second DC drive device are respectively connected to the vortex brake coil for driving. The backup power module includes: a backup emergency busbar for providing power to the vortex brake, a backup DC power supply for providing power to the vortex brake coil, and a backup control power supply for providing power to the control module. The first controller and the second controller are also used to perform fault diagnosis on the vortex brake based on real-time electrical data, to perform early warning or alarm processing based on the diagnosis results, and to determine the control state of the vortex brake based on the state of the dry contact signal. The first controller and the second controller are further configured to determine an output control signal to control the drive module based on a preset parabolic control curve and a preset protection logic.

2. The system according to claim 1, characterized in that, The specific steps of determining the output control signal to control the drive module based on the preset parabolic control curve and preset protection logic are as follows: The input signal is determined, and a preset parabolic control curve is obtained based on the preset coefficients and the square of the input signal. The output control signal is then calculated. The output control signal is updated based on the different position information of the handle and the duration, according to the preset protection logic.

3. The system according to claim 1, characterized in that, The specific steps for switching to the second controller when the first controller fails are as follows: When the first controller fails, the system switches to the second controller based on a preset time and triggers an alarm process; the alarm process includes displaying alarm information and recording alarm information on the main control cabinet.

4. The system according to claim 1, characterized in that, The communication connection between the first DC drive device and the second DC drive device and the control module is specifically as follows: the first DC drive device and the second DC drive device interact with the control module based on DP communication, and the preset level control signals are transmitted based on hard wires and relays.

5. The system according to claim 1, characterized in that, The first DC drive device and the second DC drive device are independent of each other; the vortex brake coil includes a first vortex brake coil and a second vortex brake coil, the first DC drive device drives the first vortex brake coil, and the second DC drive device drives the second vortex brake coil.

6. The system according to claim 1, characterized in that, The backup DC power supply is a battery pack; the backup control power supply is a UPS power supply.

7. The system according to claim 6, characterized in that, When the main power supply of the vortex brake is out of service, the backup control power supply supplies power to the control module. The power supply contactor of the backup DC power supply closes to supply power to the vortex brake coil, and the power supply contactor of the main power supply of the vortex brake opens.

8. The system according to claim 1, characterized in that, The process of diagnosing faults in the vortex brake based on real-time electrical data and then triggering an alarm based on the diagnosis results is as follows: The vortex brake is diagnosed based on real-time electrical data. The fault diagnosis includes one or more of the following: overcurrent, overvoltage, undervoltage, grounding, winding short circuit, winding open circuit, low cooling water flow of vortex brake, low cooling water flow of drilling winch brake hub, and high cooling water temperature. Generate and record early warning or alarm information containing diagnostic results, and use the display interface to issue early warnings or alarms.

9. The system according to claim 1, characterized in that, The specific steps for determining the control state of the vortex brake based on the state of the dry contact signal are as follows: When the dry contact signal is determined to be closed, the vortex brake is activated at full load. When the dry contact signal is determined to be in the open state, the vortex brake is controlled by the vortex brake control handle.

10. A method for multi-redundant control and safety protection of vortex magnetic brakes for drilling platforms, characterized in that, The method is based on the multi-redundant control and safety protection system of the drilling platform vortex brake as described in any one of claims 1-9, and the method includes: The first controller of the control module operates as the main controller, performing real-time fault diagnosis on the vortex brake, issuing warnings or alarms based on the diagnosis results, and determining the output control signal to control the drive module based on the preset parabolic control curve and preset protection logic. The drive module's first DC drive unit controls the first vortex brake coil, and the second DC drive unit controls the second vortex brake coil; the first and second DC drive units operate independently. When a fault is detected in the first controller, the system switches to the second controller. When the main power supply of the vortex brake is out of service, the backup control power supply supplies power to the control module. The power supply contactor of the backup DC power supply is closed to supply power to the first and second vortex brake coils respectively, and the power supply contactor of the main power supply of the vortex brake is open.

Images