Control method of molten salt heat release system and molten salt heat release system

Abstract

This application discloses a control method and a molten salt exothermic system. The method includes: acquiring real-time operating parameters of each device in the molten salt exothermic system; determining the upper and lower dynamic thresholds of the feedwater pressure and the safe range of the feedwater flow rate based on the rated operating parameters of the first and second feedwater pumps, the operating frequency of the high-temperature molten salt pump, the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater; determining the dual-pump operation mode based on the operating status of the first and second feedwater pumps, the feedwater pressure deviation, and the feedwater flow rate deviation; and interlocking and adjusting the operating status of the first and second feedwater pumps based on the dynamic thresholds of the upper and lower feedwater pressure, the safe range of the feedwater flow rate, the dual-pump operation mode, and the real-time operating parameters of each device, thereby controlling the opening and closing states of the molten salt electric valve at the inlet of the molten salt exothermic system, the desuperheating water electric valve, and the superheater outlet electric valve to achieve safe control of the molten salt exothermic system.

Description

Technical Field

[0001] This application relates to the field of power grid technology, and in particular to a control method and a molten salt exothermic system. Background Technology

[0002] In auxiliary cogeneration unit heating scenarios, the molten salt exothermic system needs to coordinate peak shaving and heating tasks. Its stable operation depends on the precise matching of the feedwater supply status and the real-time operating requirements of the system. However, existing technologies typically use fixed feedwater pressure thresholds and feedwater flow ranges for control. But the peak shaving requirements of cogeneration units cause the system's operating conditions to be constantly changing. Fixed parameters cannot adapt to these changes in a timely manner, which can easily lead to problems such as excessive pressure damaging heat exchangers, excessive pressure failing to meet operating requirements, excessive flow causing equipment overload, and insufficient flow leading to insufficient cooling, ultimately threatening the safe operation of the system. Summary of the Invention

[0003] In view of the above problems, this application provides a control method for a molten salt exothermic system and a molten salt exothermic system.

[0004] To solve the above-mentioned technical problems, this application proposes the following solution: In a first aspect, this application provides a control method for a molten salt exothermic system. The method includes: when the molten salt exothermic system is in operation or hot standby mode, and high-temperature molten salt is introduced into the molten salt side of the molten salt exothermic system, acquiring real-time operating parameters of each device in the molten salt exothermic system; determining the upper and lower dynamic thresholds of the feedwater pressure and the safe range of the feedwater flow rate based on the rated operating parameters of the first feedwater pump and the second feedwater pump, the operating frequency of the high-temperature molten salt pump, the opening degree of the molten salt inlet electric valve of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater in the real-time operating parameters; determining the dual-pump operation mode based on the operating status of the first feedwater pump and the second feedwater pump, the feedwater pressure deviation, and the feedwater flow rate deviation in the real-time operating parameters; and interlocking and adjusting the operating status of the first feedwater pump and the second feedwater pump based on the upper and lower dynamic thresholds of the feedwater pressure, the safe range of the feedwater flow rate, the dual-pump operation mode, and the real-time operating parameters of each device, controlling the opening and closing states of the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system, thereby achieving safe control of the molten salt exothermic system.

[0005] Secondly, this application provides a molten salt exothermic system, which includes: a deaerator, a preheater, a first feedwater pump, a second feedwater pump, a first feedwater inlet pipe, a second feedwater inlet pipe, a first feedwater outlet pipe, a second feedwater outlet pipe, and a main feedwater pipe; the inlet of the first feedwater pump is sealed to the deaerator through the first feedwater inlet pipe, and the outlet is sealed to the main feedwater pipe through the first feedwater outlet pipe; the inlet of the second feedwater pump is sealed to the deaerator through the second feedwater inlet pipe, and the outlet is sealed to the main feedwater pipe through the second feedwater outlet pipe; the end of the main feedwater pipe away from the feedwater pump is sealed to the preheater.

[0006] To achieve the above objectives, according to a third aspect of this application, a storage medium is provided, the storage medium including a stored program, wherein, when the program is running, the device where the storage medium is located is controlled to execute the molten salt exothermic system control method of the first aspect.

[0007] To achieve the above objectives, according to a fourth aspect of this application, an electronic device is provided, the device including at least one processor, and at least one memory and bus connected to the processor; wherein the processor and memory communicate with each other through the bus; the processor is used to call program instructions in the memory to execute the molten salt exothermic system control method of the first aspect described above.

[0008] By employing the above-described technical solution, the technical solution provided in this application has at least the following advantages: The rated operating parameters of the first and second feedwater pumps provide a basic safety constraint for feedwater parameter adjustments, ensuring that all adjustments are made within the equipment's allowable operating range and preventing damage from exceeding parameter limits. The operating frequency of the high-temperature molten salt pump directly reflects the power intensity of molten salt transport, and the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system determines the actual amount of molten salt entering the system. Together, these two parameters quantify the real-time state of the system's energy input. The temperature difference between the inlet and outlet of the preheater directly reflects the current energy exchange intensity of the system. The synergistic effect of these three parameters can accurately capture the dynamic changes in the system's operating conditions. Based on these key indicators that reflect the operating conditions in real time, the upper and lower limits of feedwater pressure and the safe range of feedwater flow are dynamically calculated, allowing feedwater pressure and flow to be adjusted synchronously with fluctuations in system operating conditions, breaking the limitations of fixed parameters. Furthermore, based on the operating status of the two feedwater pumps, feedwater pressure deviation, and feedwater flow deviation, a dual-pump operating mode suitable for the current operating conditions is determined, such as single-pump operation, dual-pump parallel operation, and pump switching. This improves the redundancy and flexibility of feedwater transport, ensuring a stable feedwater supply under different operating conditions. Ultimately, based on dynamically determined feedwater pressure thresholds, safe flow ranges, and dual-pump operation modes, the operating status of the two feedwater pumps is interlocked and adjusted. At the same time, the on / off status of the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system are controlled to achieve coordinated linkage of various devices, thereby avoiding potential risks that may threaten the safety of system operation from the source and ensuring the overall stability of system operation.

[0009] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description

[0010] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 This paper shows a schematic diagram of the structure of a molten salt exothermic system provided in an embodiment of this application; Figure 2 A schematic diagram of another molten salt exothermic system provided in an embodiment of this application is shown; Figure 3 A schematic flowchart of a molten salt exothermic system control method provided in an embodiment of this application is shown; Figure 4 A schematic flowchart of another molten salt exothermic system control method provided in an embodiment of this application is shown; Figure 5 This paper shows a schematic diagram of the structure of a molten salt exothermic system control device provided in an embodiment of this application; Figure 6 A schematic diagram of the structure of an electronic device provided in an embodiment of this application is shown. Detailed Implementation

[0011] Exemplary embodiments of the present application will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present application are shown in the drawings, it should be understood that the present application may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this application will be thorough and complete, and will fully convey the scope of the present application to those skilled in the art.

[0012] In the embodiments of this application, the terms "first," "second," etc., do not have a logical or temporal dependency, nor do they limit the quantity or execution order. It should also be understood that although the following description uses the terms "first," "second," etc., to describe various elements, these elements should not be limited by the terms. These terms are merely used to distinguish one element from another.

[0013] In this application, the term "at least one" means one or more, and the term "multiple" means two or more.

[0014] It should also be understood that the term “if” can be interpreted as “when” or “upon”, or “in response to determination” or “in response to detection”. Similarly, depending on the context, the phrase “if determination…” or “if detection [the stated condition or event]” can be interpreted as “when determination…” or “in response to determination…” or “when detection [the stated condition or event]” or “in response to detection [the stated condition or event]”.

[0015] Cogeneration units coupled with molten salt exothermic systems need to balance peak shaving and heating functions. The stable operation of such systems relies on reliable medium delivery and efficient energy conversion. Existing technologies often face problems such as insufficient feedwater delivery redundancy, poor equipment coordination, and incomplete safety monitoring. For example, a single feedwater pump configuration is prone to failure leading to feedwater interruption, and poor equipment sealing can cause medium leakage, directly affecting the heat exchange efficiency and operational safety of the molten salt exothermic system. To address these shortcomings, the molten salt exothermic system for auxiliary cogeneration unit heating described in this embodiment is designed with a complete feedwater delivery path as its core, integrating equipment for molten salt storage and circulation, multi-stage heat exchange, and steam regulation. By optimizing the connection structure and functional coordination of each device, it achieves a synergistic effect of stable feedwater delivery, efficient molten salt heat exchange, and safe steam supply. The following details all the key equipment.

[0016] like Figure 1 As shown, the molten salt side is the energy source of the entire molten salt exothermic system. Its core function is to store and stably transport high-temperature molten salt to provide a continuous heat source for subsequent feedwater heat exchange. The high-temperature molten salt storage tank (1) is used to store high-temperature molten salt heated by surplus steam from the thermal power unit. As the core of the energy reserve of the molten salt exothermic system, its outlet is sealed to the inlet of the high-temperature molten salt pump (3) through the high-temperature molten salt storage tank to the high-temperature molten salt pump molten salt pipeline (2). This pipeline adopts a high-strength sealing connection structure to effectively prevent high-temperature molten salt leakage. The high-temperature molten salt pump (3) is the power core for molten salt transportation. It is responsible for pressurizing the high-temperature molten salt and transporting it to the heat exchange equipment. Its outlet is sealed to one end of the molten salt electric valve (5) at the inlet of the molten salt exothermic system through the high-temperature molten salt pump to the superheater molten salt pipeline (4). Only when the high-temperature molten salt pump (3) is in operation and the molten salt electric valve (5) at the inlet of the molten salt exothermic system is opened synchronously can it be confirmed that there is a continuous flow of high-temperature molten salt on the molten salt side. After heat exchange in the superheater (8), the temperature of the molten salt decreases. It then enters the evaporator (10) through the molten salt pipeline (9) from the superheater to the evaporator to continue releasing heat. The molten salt side of the evaporator (10) is equipped with molten salt side pressure measuring point 1 (11) and molten salt side pressure measuring point 2 (12). The two measuring points monitor the pressure changes synchronously, providing real-time data support for the safety protection of the molten salt heat release system. Subsequently, the molten salt enters the preheater (14) through the molten salt pipeline (13) from the evaporator to the preheater, completes the final stage of heat exchange with the feedwater, and is finally transported to the low-temperature molten salt storage tank (18) through the molten salt pipeline (17) from the preheater to the low-temperature molten salt storage tank for temporary storage, forming a complete molten salt circulation loop to ensure a stable heat source for continuous heat exchange of the feedwater.

[0017] The deaerator (19), as a pretreatment device for feedwater treatment, mainly removes oxygen and other non-condensable gases from the feedwater, preventing damage to subsequent pipelines, feedwater pumps, and heat exchange equipment due to oxidation and corrosion, ensuring that the feedwater quality meets the long-term operating requirements of the molten salt exothermic system, and laying the foundation for the stable operation of the feedwater path. To solve the problem of insufficient redundancy in the single-pump configuration of the existing technology, the molten salt exothermic system of this application adopts a design of independent operation of two feedwater pumps. The inlet of the first feedwater pump (20) is sealed and connected to the outlet of the deaerator (19) through the first feedwater inlet pipe (47), and the inlet of the second feedwater pump (21) is sealed and connected to the outlet of the deaerator (19) through the second feedwater inlet pipe (48). The layout of independent water intake through two pipes ensures that when one water intake path fails, the other path can still supply water normally, greatly improving the reliability of feedwater delivery. The outlet of the first water pump (20) is sealed to the main water supply pipeline (24) through the first water supply outlet pipeline (22), and the outlet of the second water pump (21) is sealed to the main water supply pipeline (24) through the second water supply outlet pipeline (23). The main water supply pipeline (24) serves as the core confluence channel for water supply transportation. Its diameter is determined by hydraulic calculation based on the rated flow of the two water pumps and the maximum water supply demand of the molten salt exothermic system. An insulation layer is installed on the outer wall of the pipeline to reduce heat loss during transportation. The end of the main water supply pipeline (24) away from the water pump is sealed to the water supply inlet of the preheater (14). The connection part adopts a high-strength flange sealing structure, equipped with a special sealing gasket, and the bolt tightening torque is strictly controlled to effectively prevent water supply leakage.

[0018] After being preheated by the preheater (14), the feedwater enters the evaporator (10) and superheater (8) in sequence to finally form high-quality heating steam. The stable operation of each device depends on the stable supply of feedwater. The preheater (14) is the first-stage heat exchange device between feedwater and molten salt. It uses the residual heat of molten salt to preheat the feedwater to a suitable temperature, reducing the energy loss of subsequent heat exchange links. The preheated feedwater enters the steam drum (37) through the steam-water pipeline (25) from the preheater. The steam drum (37) is a key device for steam-water separation and energy buffering. The feedwater and steam are separated through an efficient separation structure. Its bottom is connected to the feedwater inlet of the evaporator (10) through the steam drum downcomer (26), and its top is connected to the steam-water outlet of the evaporator (10) through the steam drum riser (27), forming a natural circulation loop to ensure that the feedwater fully absorbs the heat of molten salt in the evaporator (10) to produce a saturated steam-water mixture. The saturated steam separated from the steam drum (37) enters the superheater (8) through the steam pipe (38) from the steam drum to the superheater. In the superheater (8), it is further heated into superheated steam by high-temperature molten salt. In order to ensure the quality of steam, the molten salt heat release system is equipped with a complete desuperheating regulation device. Desuperheating water (44) is transported to the steam pipe (41) from the superheater to the steam supply manifold through the desuperheating water pipe (42). The desuperheating water electric valve (43) connected in series on the desuperheating water pipe (42) can precisely control the amount of desuperheating water injected by adjusting the opening degree, thereby stabilizing the steam temperature entering the heating manifold. The high-quality superheated steam generated by the superheater (8) is transported to the steam supply header (46) through the steam pipeline (41) from the superheater to the steam supply header. The superheater outlet electric valve (45) connected in series on the pipeline is used to control the on and off of the steam supply. In conjunction with the protection logic of the molten salt exothermic system, the safe management and control of the steam transportation is realized. The steam supply header (46) finally delivers stable superheated steam to the heating network of the thermal power unit to complete the auxiliary heating function.

[0019] like Figure 2 As shown, based on the above-mentioned molten salt exothermic system, a sludge discharge system is further added to the steam drum. The main purpose is to promptly remove bottom deposits, high-salt boiler water, and excess water from the steam drum through both periodic and continuous sludge discharge. This prevents the accumulation of impurities and excessively high salt content in the boiler water from affecting steam quality, and prevents scaling or corrosion inside the equipment, thereby improving the operational stability and reliability of the entire molten salt exothermic system.

[0020] The periodic blowdown expansion container (30) is specifically designed to receive high-concentration wastewater and bottom sediment impurities periodically discharged from the steam drum (37). By expanding its capacity and reducing pressure, it lowers the temperature and pressure of the wastewater discharge, thus reducing its impact on the environment. The continuous blowdown expansion container (33) is used to continuously treat the surface boiler water with high salinity discharged from the steam drum (37). By expanding its capacity and evaporating, it recovers some of the steam heat, thereby improving energy utilization. The steam drum to periodic blowdown steam-water pipeline (28) serves as the transport channel for periodic blowdown. One end is sealed and connected to the bottom of the steam drum (37), which can accurately align with the impurity deposition area to ensure efficient discharge of bottom impurities during blowdown. The other end is sealed and connected to the periodic blowdown expansion container (30). The connection structure is adapted to the high temperature and high pressure characteristics of the blowdown medium, ensuring stable and leak-free transport. The steam drum to the constant discharge electric valve (29) is connected in series on the steam drum to the constant discharge steam and water pipeline (28). It has high temperature resistance, high pressure resistance, and corrosion resistance. It responds quickly and has high adjustment accuracy. It can receive control instructions from the molten salt exothermic system to realize the automatic on / off of periodic sewage discharge. The sewage discharge cycle and duration are set according to the operation of the molten salt exothermic system, so as to ensure the sewage discharge effect while avoiding water waste.

[0021] The steam drum to continuous blowdown steam-water pipeline (31) serves as a continuous blowdown transport channel. One end is sealed to the outlet near the water level of the steam drum (37), enabling precise discharge of boiler water with high surface salinity. The other end is sealed to the continuous blowdown expansion tank (33), employing a high-strength sealing structure to ensure long-term sealing. The steam drum to continuous blowdown electric valve (32) is connected in series to the steam drum to continuous blowdown steam-water pipeline (31). Its performance parameters are compatible with those of the steam drum to constant blowdown electric valve (29). It can adjust the opening or achieve on / off operation by controlling the molten salt exothermic system according to the water quality and steam quality requirements in the steam drum, ensuring a stable continuous blowdown flow rate. This effectively reduces the salinity of the boiler water without affecting the normal water level and operating pressure of the steam drum.

[0022] In order to comprehensively monitor the operating status of heat exchange equipment and promptly detect abnormalities such as leaks, the molten salt heat release system is equipped with dual pressure measuring points on key heat exchangers: the superheater (8) is equipped with superheater molten salt side pressure measuring point 1 (6) and superheater molten salt side pressure measuring point 2 (7), the evaporator (10) is equipped with evaporator molten salt side pressure measuring point 1 (11) and evaporator molten salt side pressure measuring point 2 (12), and the preheater (14) is equipped with preheater molten salt side pressure measuring point 1 (15) and preheater molten salt side pressure measuring point 2 (16). All pressure measuring points adopt the "two-out-of-two" judgment logic to monitor the molten salt side pressure changes of the corresponding heat exchanger in real time. When both pressure measuring points of any heat exchanger detect pressure exceeding the preset threshold and continue for a certain delay, the molten salt exothermic system protection will be triggered. At this time, the molten salt inlet electric valve (5), the steam drum to the constant exhaust electric valve (29), the steam drum to the continuous exhaust electric valve (32), the desuperheating water electric valve (43), and the superheater outlet electric valve (45) of the molten salt exothermic system will be interlocked and closed to prevent the accident from escalating.

[0023] Meanwhile, two measuring points, superheater outlet steam temperature 1 (39) and superheater outlet steam temperature 2 (40), are configured at the outlet end of the superheater (8). The steam temperature is monitored using the same "two-out-of-two" logic. When the temperature is higher than the preset threshold, the molten salt exothermic system will trigger a protection action to prioritize the safety of the equipment.

[0024] The control method of the molten salt exothermic system will be described in detail below with reference to the accompanying drawings. Figure 3 A flowchart illustrating a control method for a molten salt exothermic system provided in this application. Specifically, it includes the following steps: Step 310: When the molten salt exothermic system is in operation or hot standby mode, and high-temperature molten salt is introduced into the molten salt side of the molten salt exothermic system, obtain the real-time operating parameters of each device in the molten salt exothermic system.

[0025] When the molten salt exothermic system is in operation or hot standby mode, and high-temperature molten salt is being introduced from the molten salt side, real-time operational parameter acquisition of all system equipment is initiated. The core is to first accurately determine the operating conditions, and then comprehensively capture key data to provide reliable input for subsequent control logic. Operation mode refers to the high-temperature molten salt pump, the first feedwater pump, or the second feedwater pump being started. The high-temperature molten salt is circulating in the molten salt pipeline. The feedwater, after being treated by the deaerator, enters the preheater and evaporator to complete heat exchange. The steam separated from the steam drum is heated by the superheater and then transported out through the superheater outlet electric valve. All equipment is in normal operating condition. Hot standby mode refers to the system not officially producing steam, but all heat exchange equipment is in a ready state. The deaerator maintains its rated liquid level and pressure. The high-temperature molten salt pump and feedwater pump are operating at low output. Key valves such as the molten salt inlet electric valve and the desuperheating water electric valve of the molten salt exothermic system are set to their initial opening degree (usually 5%-10% of the maximum opening). It only needs to receive a start command to switch to operation mode within 30 seconds.

[0026] The presence of high-temperature molten salt on the molten salt side is verified through dual signal coordination: Firstly, the actual operating frequency of the high-temperature molten salt pump is collected by its frequency sensor. When the frequency is ≥30% of the rated frequency (default rated frequency is 50Hz) and lasts for more than 5 seconds, the high-temperature molten salt pump is determined to be in effective operation. Secondly, the actual opening degree is collected by the opening degree feedback module of the inlet molten salt electric valve. When the opening degree is ≥10% (maximum opening degree is 100%) and lasts for more than 5 seconds, the valve is determined to be in effective open state. Only when both signals are simultaneously satisfied and the duration meets the standard is it confirmed that high-temperature molten salt is continuously flowing into the molten salt side, avoiding misjudgments caused by instantaneous equipment operation.

[0027] After the working conditions are confirmed, the operating parameters of all system equipment are collected at a frequency of 100 ms / time through the sensors and acquisition modules supporting the distributed control system (DCS). The collection range covers core equipment and key measuring points. The molten salt side includes the operating frequency, output pressure, and bearing temperature of the high-temperature molten salt pump, the opening of the molten salt motorized valve at the inlet of the molten salt heat release system, the temperature at the outlet of the high-temperature molten salt storage tank, the inlet and outlet of the molten salt side of the superheater, the inlet and outlet of the molten salt side of the evaporator, and the inlet and outlet of the molten salt side of the preheater (including pressure measuring points 1 and 2 on the molten salt side of the superheater, pressure measuring points 1 and 2 on the molten salt side of the evaporator, and pressure measuring points 1 and 2 on the molten salt side of the preheater), and the temperature at the inlet of the low-temperature molten salt storage tank. The feed water side includes the operating status, output pressure, actual flow rate, operating current, and bearing temperature of the first feed water pump and the second feed water pump, the working pressure and liquid level of the deaerator, and the feed water temperature and pressure of the main feed water pipeline and each branch pipeline. The heat exchange and steam drum system includes the temperature differences at the inlets and outlets of the preheater, evaporator, and superheater, the real-time liquid levels of the three liquid level measuring points of the steam drum (steam drum liquid level 1, steam drum liquid level 2, steam drum liquid level 3), the working pressure and saturation temperature of the steam drum. The steam side includes the real-time temperatures of the two steam temperature measuring points at the outlet of the superheater (superheater outlet steam temperature 1, superheater outlet steam temperature 2), the steam pressure of the steam pipeline from the superheater to the steam supply header, the flow rate and pressure of the desuperheating water in the desuperheating water pipeline, the opening of the desuperheating water motorized valve, and the switch status of the motorized valve at the outlet of the superheater. The auxiliary system includes the switch status of the motorized valve from the steam drum to the regular blowdown valve and the motorized valve from the steam drum to the continuous blowdown valve, and the working pressure and temperature of the regular blowdown flash tank and the continuous blowdown flash tank. After all the collected original data are subjected to signal conversion (converting the sensor signal into a 4-20 mA standard current signal) and filtering (eliminating the instantaneous fluctuation data within the range of ±15%), the arithmetic mean of 10 consecutive collections is taken as the current valid parameter, which is stored in the system database (storage period ≥ 90 days), and at the same time, it is synchronously pushed to subsequent control modules such as the calculation of the feed water pressure threshold and the determination of the dual-pump operation mode to ensure the real-time and accuracy of the data.

[0028] Step 320: Determine the dynamic thresholds of the upper and lower limits of the feed water pressure and the safe interval of the feed water flow rate according to the rated working parameters of the first feed water pump and the second feed water pump, the operating frequency of the high-temperature molten salt pump, the opening of the molten salt motorized valve at the inlet of the molten salt heat release system, and the temperature difference at the inlet and outlet of the preheater.

[0029] To ensure that the feedwater supply continuously adapts to the real-time operating conditions of the molten salt exothermic system and avoids equipment damage or operational abnormalities caused by fixed pressure and flow parameters, it is necessary to pay attention to the impact of peak-shaving demand from the thermal power unit. This demand directly changes the molten salt flow rate and heat exchange load within the system. These two key indicators are constantly changing, and fixed thresholds are difficult to adapt to such fluctuations. This can easily lead to situations such as excessively high pressure damaging the heat exchanger, excessively low pressure failing to meet heat exchange requirements, excessive flow causing equipment overload, or insufficient flow resulting in inadequate cooling. Therefore, this application dynamically sets upper and lower limits for feedwater pressure and a safe range for feedwater flow to ensure that feedwater parameters accurately match the real-time system demand. This effectively guarantees equipment operational safety while maintaining stable heat exchange efficiency and steam quality.

[0030] In practical implementation, the rated operating parameters, such as the rated pressure and rated flow rate of the first and second feedwater pumps, are used as the basic benchmark, and then combined with key operating condition indicators from real-time operating parameters for comprehensive calculation. The operating frequency of the high-temperature molten salt pump is used to determine the power intensity of molten salt transportation, and the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system is used to determine the actual molten salt flow rate. At the same time, the actual situation of the current heat exchange load is determined by the temperature difference between the inlet and outlet of the preheater. These three factors work together to reflect the real-time operating needs of the system. Based on this comprehensive information, the upper and lower limits of the feedwater pressure are dynamically defined. The upper limit does not exceed the maximum allowable operating pressure of core equipment such as the superheater and evaporator in the system, while the lower limit ensures the minimum pressure supply required to meet the current heat exchange load. Correspondingly, when determining the safe range of feedwater flow rate, the lower limit covers the basic cooling and heat exchange needs of the preheater and evaporator, while the upper limit does not exceed the maximum allowable flow rate limit of the equipment, ensuring that the feedwater pressure and flow rate are always adapted to the real-time molten salt supply status and heat exchange load.

[0031] In one specific implementation, the molten salt inflow intensity coefficient and heat exchange load correction coefficient are first calculated using real-time operating parameters to provide a quantitative basis for subsequent parameter calculations. When calculating the molten salt inflow intensity coefficient, the actual operating frequency and rated frequency of the high-temperature molten salt pump are first obtained, and their ratio is calculated (this ratio reflects the actual output percentage of the pump). Then, the actual opening degree and maximum opening degree of the inlet molten salt electric valve of the molten salt exothermic system are obtained, and their ratio is also calculated (this ratio reflects the actual flow capacity percentage of the valve). The product of these two ratios is taken as the molten salt inflow intensity coefficient, with the coefficient range controlled between 0 and 1. When the high-temperature molten salt pump is operating at full load and the electric valve is fully open, the coefficient is 1, representing that the molten salt inflow has reached its maximum. When calculating the heat exchange load correction coefficient, the real-time temperature difference between the inlet and outlet of the preheater is first collected. This temperature difference directly reflects the current heat exchange intensity. Then, the rate of change per unit time (e.g., the change in temperature difference per minute) is calculated using continuously collected temperature difference data. The heat exchange load correction coefficient is obtained by multiplying the temperature difference by (1 + rate of change of temperature difference × 0.08), where 0.08 is the trend correction coefficient. When the temperature difference rises rapidly, the correction coefficient increases accordingly to ensure that the parameters can adapt to the growth of the heat exchange load in a timely manner.

[0032] Based on the aforementioned molten salt inflow intensity coefficient and heat exchange load correction coefficient, the dynamic thresholds for the upper and lower limits of the feedwater pressure are determined. Specifically, using the rated pressures of the first and second feedwater pumps (assuming both are rated at 10 MPa) as the baseline, the rated pressures are multiplied by the molten salt inflow intensity coefficient and the heat exchange load correction coefficient, respectively. Then, adjustment coefficients are applied to the upper and lower limits, with the upper limit adjustment coefficient set at 1.15 and the lower limit adjustment coefficient at 0.85, to obtain the initial dynamic thresholds for the upper and lower limits of the feedwater pressure. For example, when the molten salt inflow intensity coefficient is 0.8 and the heat exchange load correction coefficient is 0.9, the initial upper limit threshold is 10 × 0.8 × 0.9 × 1.15 = 8.28 MPa, and the initial lower limit threshold is 10 × 0.8 × 0.9 × 0.85 = 6.12 MPa. Next, boundary checks are performed. First, the maximum allowable operating pressure of the superheater (assumed to be 9 MPa) and the maximum allowable operating pressure of the evaporator (assumed to be 8.5 MPa) are queried, and the smaller value of 8.5 MPa is taken as the upper limit pressure check value. Then, the minimum guaranteed pressure value (assumed to be 5 MPa) is determined based on the minimum heat exchange requirement of the system, and is used as the lower limit pressure check value. The initial threshold is compared with the check value. If the initial upper limit threshold of 8.28 MPa is lower than 8.5 MPa, it remains unchanged; if the initial lower limit threshold of 6.12 MPa is higher than 5 MPa, it also remains unchanged. Finally, the final dynamic threshold of the upper and lower limits of the feedwater pressure is determined to be 6.12 MPa - 8.28 MPa.

[0033] Based on the determined pressure threshold, the safe range of feedwater flow rate is determined. Using the rated flow rates of the first and second feedwater pumps (assuming both are 20 m³ / h), and combining the calculated molten salt inflow intensity coefficient (0.8) and heat exchange load correction coefficient (0.9), the baseline value of the single pump flow rate is first calculated as 20 × 0.8 × 0.9 = 14.4 m³ / h. Considering the redundancy requirements of the parallel operation of the two pumps, the lower limit of the initial safe range of feedwater flow rate is taken as 0.9 times the baseline value of the single pump flow rate (12.96 m³ / h), and the upper limit is taken as 0.9 times the sum of the rated flow rates of the two pumps (36 m³ / h), i.e., the initial range is 12.96 m³ / h - 36 m³ / h. Subsequently, a dual boundary check was performed. For the lower limit check, the minimum cooling flow rate requirement of the preheater (assumed to be 12 m³ / h) and the minimum cooling flow rate requirement of the evaporator (assumed to be 14 m³ / h) were consulted, and the larger value, 14 m³ / h, was taken as the lower limit flow rate check value. For the upper limit check, the maximum allowable flow rate limit of the preheater (assumed to be 32 m³ / h) and the maximum allowable flow rate limit of the evaporator (assumed to be 28 m³ / h) were consulted, and combined with the sum of the rated flow rate limits of the two feedwater pumps (40 m³ / h), the smallest value, 28 m³ / h, was taken as the upper limit flow rate check value. Comparing the initial range with the check values, the initial lower limit of 12.96 m³ / h was lower than 14 m³ / h, so the lower limit was adjusted to 14 m³ / h; the initial upper limit of 36 m³ / h was higher than 28 m³ / h, so the upper limit was adjusted to 28 m³ / h. Finally, the final safe range for the feedwater flow rate was determined to be 14 m³ / h - 28 m³ / h.

[0034] Throughout the process, the calculation of the molten salt inlet strength coefficient and the heat exchange load correction coefficient is dynamically adapted based on real-time operating data. Boundary verification strictly follows equipment safety constraints. The calculation logic of pressure and flow parameters corresponds to each other, ensuring that the two can work together to match the current molten salt inlet state and heat exchange load, thus ensuring the system's heat exchange efficiency and avoiding damage to the equipment due to abnormal pressure or flow.

[0035] Step 330: Determine the dual-pump operation mode based on the operating status, water pressure deviation, and water flow deviation of the first and second water pumps in the real-time operating parameters.

[0036] After determining the dynamic threshold of the upper and lower limits of the feedwater pressure and the safe range of the feedwater flow, this application judges the operating mode of the dual pumps by the actual operating status and parameter deviation of the dual pumps, so as to ensure that the output of the feedwater pump set can accurately match the real-time demand of the system, avoid pressure and flow fluctuations caused by improper operating mode, and ensure heat exchange efficiency and equipment safety. The specific implementation method is as follows.

[0037] First, the water supply pressure deviation in this application is calculated using the formula "ΔP=[(actual water supply pressure - P)]". 中 ) / P 中]×100%” calculation, where P 中 =(Upper limit dynamic threshold of water supply pressure + Lower limit dynamic threshold of water supply pressure) / 2. Water supply flow deviation is calculated using the formula: ΔQ = [(Actual water supply flow - Q]]. 中 ) / Q 中 ]×100%” calculation, where Q 中 = (Upper limit of safe water flow range + Lower limit of safe water flow range) / 2. For example, if the dynamic threshold for the upper and lower limits of water pressure is 6.12 MPa - 8.28 MPa, then P 中 =7.2MPa, if the actual water supply pressure is 7.5MPa, then ΔP=(7.5-7.2) / 7.2×100%≈4.17%; if the safe range of water supply flow rate is 14m³ / h-28m³ / h, then Q 中 =21m³ / h, if the actual water supply flow rate is 22.68m³ / h, then ΔQ=(22.68-21) / 21×100%≈8%.

[0038] Simultaneously, quantization thresholds for each fluctuation range were determined. All ranges were based on system operational stability test data: The small fluctuation range was defined as ΔP∈[-5%, 5%] and ΔQ∈[-8%, 8%], within which system parameters were stable and single-pump output could meet requirements. The large fluctuation range was defined as ΔP... [-5%, 5%] or ΔQ [-8%, 8%], at which point the output of a single pump cannot offset the load fluctuation. The stable range is defined as ΔP∈[-3%, 3%] and ΔQ∈[-5%, 5%], used to determine the adaptability of a fault-free pump operating alone. The switching fluctuation range is defined as ΔP∈[-7%, 7%] and ΔQ∈[-10%, 10%], with a duration set to 30 seconds (adjustable through the system parameter configuration interface to adapt to different operating conditions). This range represents the critical stable range for single pump operation.

[0039] The determination of a fault-free pump body is achieved through multi-dimensional parameter collaborative verification. A fault-free state requires the following simultaneous conditions: the pump body operating current is within 85%-115% of the rated current (without abnormal fluctuations, fluctuation range ≤ ±5% / second); the bearing temperature is ≤ the equipment's rated limit (usually set at 85℃; if the pump body's design rated temperature differs, the value marked on the equipment nameplate shall prevail); the output pressure fluctuation is ≤ ±3% / minute, with no sudden drops (pressure drop ≤ 10% within 3 seconds); and the DCS system does not receive alarm signals for overload, phase loss, mechanical seal leakage, etc., from the pump. When all the above conditions are met, the pump body is determined to be fault-free.

[0040] Based on this, the operating modes are further divided according to the parameter deviation range. When both the first and second feed water pumps meet the fault-free conditions, if ΔP and ΔQ are within a small fluctuation range, it indicates that the output of a single pump can stably cover the system demand, and there is no need for dual-pump coordination. In this case, it is determined that the first or second feed water pump operates alone, and the pump selection can be based on preset priority (such as shorter cumulative running time or more recent maintenance time) or a rotation mechanism (automatic switching every 2 hours of continuous operation). If ΔP or ΔQ is within a large fluctuation range, it indicates that the output of a single pump cannot offset the load fluctuation, and it is necessary to increase the total output by connecting the two pumps in parallel. In this case, it is determined that the two pumps operate in parallel. When starting the standby pump, the speed is increased according to a preset slope to ensure that the output pressure difference between the two pumps is ≤0.3MPa, so as to achieve uniform output distribution.

[0041] When the status of the two pumps differs—that is, one pump meets the fault determination criteria while the other is fault-free—if the fault-free pump's ΔP and ΔQ are both within a stable range, it indicates that its individual operation can stably meet the current system load. This is determined to be single-pump operation with the fault-free pump, and the system issues an alarm to prompt maintenance personnel to repair the faulty pump. If the fault-free pump's ΔP or ΔQ exceeds the stable range, it indicates that the output of a single fault-free pump cannot cover the load demand, and no other backup pump is available. This is determined to be a no-adjustment mode, and the system immediately triggers a level-three warning and uploads fault information, providing a basis for subsequent interlocking control.

[0042] For scenarios where a single pump is currently operating, continuous monitoring of parameter deviations in the operating pump is conducted. The DCS system compares the operating pump's ΔP and ΔQ values ​​with the switching fluctuation range every 100ms. If ΔP and ΔQ remain within the switching fluctuation range for 300 consecutive tests (30 seconds cumulatively), and the other pump meets the fault-free criteria, it indicates that the current operating pump is nearing its output limit. Continued operation may cause parameters to deviate from safe ranges. In this case, a switch to the other fault-free pump for single-pump operation is initiated. The switching process employs a "soft switch" mode. The new pump increases its output power at a rate of 2% / second, while the original operating pump simultaneously reduces its load. Once the total water supply pressure and flow rate stabilize (deviation ≤ ±2% for 5 seconds), the original operating pump is then disconnected to prevent water supply interruption.

[0043] Step 340: Based on the dynamic threshold of upper and lower limits of water supply pressure, the safe range of water supply flow, the dual-pump operation mode and the real-time operating parameters of each device, interlock and adjust the operating status of the first water supply pump and the second water supply pump, and control the opening and closing status of the molten salt inlet electric valve, the desuperheating water electric valve and the superheater outlet electric valve of the molten salt exothermic system.

[0044] When the molten salt exothermic system is in single-pump operation mode (either the first or second feedwater pump), the actual feedwater pressure and steam drum liquid level data of the corresponding operating pump are continuously monitored. The actual feedwater pressure is acquired in real time through a pressure transmitter in the main feedwater pipeline, while the steam drum liquid level is simultaneously received from three measuring points: Steam Drum Liquid Level 1, Steam Drum Liquid Level 2, and Steam Drum Liquid Level 3. A "two-out-of-three" logic is used to determine the true liquid level status. The preset low liquid level threshold is 30% of the rated liquid level of the steam drum (based on the test data of the lowest safe operating liquid level of the steam drum), and the preset delay is 10 seconds (to avoid malfunctions caused by instantaneous fluctuations in liquid level). When the actual feedwater pressure is detected to be lower than the dynamic threshold of the lower limit of feedwater pressure, and the real-time liquid level of at least two of the three steam drum liquid level measuring points remains below the preset low liquid level threshold for 10 seconds, the molten salt exothermic system immediately performs protection actions: first, it cuts off the running command of the currently running feedwater pump and locks the pump's starting circuit (to prevent accidental starting), then simultaneously closes the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system, and simultaneously closes the steam drum to constant discharge electric valve and the steam drum to continuous discharge electric valve, thereby isolating the medium between the molten salt side and the feedwater side and preventing equipment damage due to water shortage or pressure imbalance.

[0045] If the molten salt exothermic system is in dual-pump parallel operation mode, interlock control is implemented for two typical abnormal operating conditions. The first condition is when the actual feedwater flow rate exceeds the lower limit of the feedwater flow rate safety range, and the real-time temperatures at two measuring points, superheater outlet steam temperature 1 and superheater outlet steam temperature 2, are both higher than the preset temperature threshold (usually 105% of the superheater's rated operating temperature) for 15 seconds. In this case, the molten salt exothermic system first increases the output power of the dual pumps according to the preset strategy. If the superheater outlet steam temperature still does not drop back to the preset safe range within 10 seconds after adjustment, the molten salt exothermic system cuts off the dual pump operation command, closes the molten salt inlet electric valve, the superheater outlet electric valve, the steam drum to constant discharge electric valve, and the steam drum to continuous discharge electric valve, stops the molten salt inlet and blowdown operations, and prioritizes protecting the superheater from high-temperature damage. The second operating condition is that the real-time liquid level at at least two of the three steam drum liquid level measuring points is higher than the preset high liquid level threshold (80% of the rated liquid level of the steam drum) for 10 seconds. At this time, the molten salt exothermic system directly cuts off the dual pump operation command and sequentially closes the molten salt inlet electric valve, the superheater outlet electric valve, the desuperheating water electric valve, the steam drum to the constant discharge electric valve, and the steam drum to the continuous discharge electric valve to prevent the steam from carrying water due to the steam drum being full.

[0046] When the molten salt exothermic system switches to a single-pump operation mode with another fault-free pump, the system continuously monitors the actual feedwater pressure and flow rate deviations of the newly operating feedwater pump after the switch is completed. The preset unstable range is ±10% for pressure deviation and ±15% for flow rate deviation, with a preset delay of 20 seconds. If the deviation data of the newly operating pump remains within this unstable range for 20 seconds, it indicates that it cannot independently adapt to the current load of the molten salt exothermic system. The system immediately cuts off the operation command of the pump, closes the inlet electric valve of the molten salt steam generation and molten salt exothermic system, the electric valve of the desuperheating water, the electric valve of the superheater outlet, the electric valve from the steam drum to the constant flow valve, and the electric valve from the steam drum to the continuous flow valve, locks the start-up permissions of the two feedwater pumps, and triggers an audible and visual alarm to prompt maintenance personnel to intervene.

[0047] If the molten salt exothermic system is determined to be in an unadjustable mode, the molten salt side pressure data of the superheater, evaporator, and preheater will be monitored, specifically the real-time pressure at measuring points 1 and 2 on the superheater's molten salt side, measuring points 1 and 2 on the evaporator's molten salt side, and measuring points 1 and 2 on the preheater's molten salt side. The preset pressure threshold is 110% of the rated operating pressure of the corresponding heat exchanger (based on the equipment's pressure resistance limit), with a preset delay of 5 seconds. When both pressure measuring points of any heat exchanger detect pressures higher than this threshold for 5 seconds, it is determined that the heat exchanger may have a serious fault such as tube-side leakage. The molten salt exothermic system will immediately perform an emergency isolation action: instantly closing the molten salt electric valve at the inlet of the molten salt steam generation molten salt exothermic system and the electric valve at the superheater outlet, cutting off the molten salt and steam transport path; simultaneously closing the electric valve for desuperheating water, the electric valve from the steam drum to the constant discharge valve, and the electric valve from the steam drum to the continuous discharge valve to prevent the fault from escalating and causing medium leakage; subsequently, cutting off the operating commands of the first and second feedwater pumps and stopping the feedwater supply.

[0048] When the molten salt exothermic system is in single-pump operation or dual-pump parallel operation mode, and the actual feedwater pressure is between the upper and lower dynamic thresholds of the feedwater pressure, the actual feedwater flow rate is within the safe range of the feedwater flow rate, and the steam drum liquid level (at 30%-80% of the rated liquid level), the superheater outlet temperature (at the rated temperature ±5%), and the molten salt side pressure of each heat exchanger (at the rated pressure ±3%) are all within the preset safe range, the molten salt exothermic system maintains the current dual-pump operation state and keeps the current on / off state of all key valves.

[0049] When both the first and second feedwater pumps are shut down, the molten salt exothermic system activates its timing function with a preset delay of 30 seconds (ensuring both pumps are completely stopped with no residual power output). If the shutdown continues for 30 seconds, the molten salt exothermic system automatically locks the start-up permissions of both pumps to prevent accidental start-up without a command. Simultaneously, it closes the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant flow electric valve, and steam drum to continuous flow electric valve, placing the molten salt exothermic system in a completely isolated and safe state until maintenance personnel unlock it and issue a start-up command.

[0050] Based on the interlocking control of the above-mentioned feedwater parameter threshold and dual-pump operation mode, in order to achieve accurate identification and targeted isolation of system faults and further ensure operational safety, this application also provides another control method for molten salt exothermic system that integrates fault handling logic, the flowchart of which is shown in Figure 4.

[0051] Step 410: Based on the abnormal characteristics of the operating parameters of each piece of equipment in the molten salt exothermic system and the deviation status and response characteristics of the feed water pressure, feed water flow rate, heat exchanger pressure, steam drum liquid level, and superheater outlet steam temperature, determine the fault type of the molten salt exothermic system and each piece of equipment within the molten salt exothermic system.

[0052] Accurate fault type determination is a key aspect of system safety protection. The core logic is to capture abnormal characteristics of equipment operating parameters, combine the deviations and response characteristics of key indicators such as feed water pressure, flow rate, and heat exchanger pressure, and distinguish fault types according to the troubleshooting order of equipment body, system level, and core heat exchange components. This provides a clear basis for subsequent targeted isolation measures. The specific implementation process is as follows.

[0053] The determination of pump body failure focuses on abnormal fluctuations in core operating parameters of the pump body, verified through multi-dimensional data collaboration. The system collects real-time data on the operating current, bearing temperature, and output pressure of the first and second feed pumps: the operating current is collected through the motor-side current transformer; when the current fluctuation exceeds ±10% within 1 second and lasts for ≥3 seconds, it is determined to be an abnormal current fluctuation; the bearing temperature is collected through a platinum resistance sensor; when the temperature exceeds the rated limit on the equipment nameplate (usually 85℃) and lasts for ≥5 seconds, it is considered an over-temperature; the output pressure is collected through the pump outlet pressure transmitter; when the pressure drops sharply by more than 20% within 3 seconds or fluctuates by more than ±15% within 1 minute, it is determined to be a sudden change in output pressure. As long as any of the above abnormal characteristics are met, the failure type can be determined to be a failure of the corresponding feed pump body. At the same time, the time of occurrence of the abnormality and the parameter change curve are recorded, providing a direct reference for maintenance.

[0054] After ruling out problems with the water pump itself, if the water supply parameters continue to deviate, the focus shifts to system-level anomaly assessment, i.e., water supply system malfunction. First, using the aforementioned fault-free water pump assessment criteria, confirm that both the first and second water pumps are operating normally. Current, temperature, and pressure are all within rated ranges, and there are no equipment alarm signals. Based on this, continuously monitor the deviation between the actual water supply pressure and the dynamic threshold of the upper and lower limits, and the deviation between the actual water supply flow rate and the safe flow rate range. If the pressure deviation exceeds ±8% for 15 seconds, or the flow rate deviation exceeds ±12% for 15 seconds, and adjusting the water pump output power fails to bring the parameters back to the safe range within 5 seconds, it indicates that the fault does not originate from the pump itself, but rather from system-level problems such as water supply pipeline leakage or valve jamming. At this point, the fault type is determined to be a water supply system malfunction.

[0055] Fault diagnosis for core heat exchange equipment prioritizes tube-side leaks in heat exchangers. These faults directly impact the system's media isolation safety and require verification using dual measuring points and pressure change rate analysis. The system simultaneously monitors dual pressure measuring points on the molten salt side of the superheater, evaporator, and preheater, employing a "two-out-of-two" logic to ensure accurate diagnosis: when the real-time pressure at both measuring points of any heat exchanger exceeds 110% of its rated operating pressure (preset pressure threshold), and the pressure rise rate exceeds 0.1 MPa / s (based on equipment leakage simulation test data) and lasts for ≥5 seconds, it indicates a possible leak on the tube side of the heat exchanger. High-temperature steam or feedwater seeps into the heat exchanger shell side, causing a sudden pressure surge. In this case, the fault type is determined to be a tube-side leak fault in that heat exchanger.

[0056] As the core equipment for steam-water separation, the determination of abnormal liquid level faults in the steam drum relies primarily on liquid level data, supplemented by feedwater flow rate verification to avoid misjudgment. Data is collected from three measuring points: steam drum liquid level 1, steam drum liquid level 2, and steam drum liquid level 3. The true liquid level is determined using a "two out of three" logic: when at least two measuring points show a liquid level higher than 80% of the steam drum's rated liquid level (preset high liquid level threshold) or lower than 30% (preset low liquid level threshold), and the duration is ≥10 seconds; simultaneously, the electromagnetic flowmeter on the main feedwater pipeline confirms that the actual feedwater flow rate is within the aforementioned determined safe feedwater flow rate range (excluding liquid level fluctuations caused by abnormal flow rate), indicating that the abnormal liquid level is not caused by a feedwater supply problem, but rather by a fault in the internal structure of the steam drum or an abnormality in the liquid level measurement system. In this case, the fault type is determined to be a steam drum liquid level abnormality fault.

[0057] Step 420: Based on the fault type, the safety constraints of the molten salt exothermic generation system equipment, and the media isolation requirements, determine the fault isolation measures suitable for the fault type.

[0058] In response to a feedwater pump malfunction, isolation measures focus on both pump-related risk isolation and system medium stability shutdown. First, the system immediately sends shutdown commands to the molten salt inlet electric valve, desuperheating water electric valve, and superheater outlet electric valve of the molten salt exothermic system, quickly cutting off the molten salt inlet, desuperheating water supply, and steam output pathways. This prevents the equipment from dry-burning due to continuous heat exchange caused by the molten salt after a feedwater interruption caused by the pump malfunction. Subsequently, the operating command of the faulty feedwater pump is cut off, stopping its power output. Simultaneously, the starting circuit of the faulty pump is locked, and its restart is prevented via electrical interlocking to prevent secondary risks caused by misoperation before the fault is resolved. The entire sequence of actions follows the principle of first cutting off the medium, then stopping the equipment, and finally locking the restart, ensuring a safe and shock-free isolation process.

[0059] For heat exchanger tube-side leaks, the key to isolation is to block the spread of the leaking medium and prevent cross-contamination or pressure runaway. The system shuts off the molten salt inlet electric valve of the molten salt exothermic system, cutting off the supply of molten salt to all heat exchangers and preventing further molten salt contamination at its source. Simultaneously, the superheater outlet electric valve is closed to stop steam delivery and prevent leaks from causing steam quality degradation or pipeline pressure fluctuations. Based on this, the faulty heat exchanger is precisely located (based on the aforementioned fault diagnosis, it is identified as the superheater, evaporator, or preheater), and the isolation valves in the molten salt path of that heat exchanger are kept closed. If the leak is in the superheater, the isolation valves in the molten salt pipelines before and after the superheater are closed; if the leak is in the evaporator or preheater, the corresponding molten salt path isolation valves are closed similarly until the fault is identified and repaired, ensuring complete isolation of the faulty equipment from the main system loop.

[0060] In the event of an abnormal steam drum liquid level, the priority of isolation measures is to stabilize the steam drum status and prevent safety accidents caused by excessively high or low liquid levels. First, the operation commands of the first and second feedwater pumps are cut off to stop the feedwater supply and prevent continued abnormal liquid levels (to avoid overflowing steam at high liquid levels and to prevent dry burning due to lack of water at low liquid levels). Simultaneously, the inlet electric valve of the molten salt exothermic system is closed to stop molten salt heat exchange and reduce fluctuations in the steam-water state within the steam drum. Then, the inlet electric valve of the molten salt exothermic system is kept closed until the steam drum liquid level is restored to the preset safe range (30%-80% of the rated liquid level) through manual intervention or automatic adjustment. Isolation can only be lifted after two out of three liquid level measuring points confirm stable liquid levels, creating conditions for subsequent system restart.

[0061] In response to superheater heat exchange anomalies, the isolation process combines temperature control and pressure monitoring to gradually mitigate risks. The system first closes the superheater outlet electric valve to stop the output of steam at abnormal temperatures, preventing substandard steam from entering the heating network and affecting downstream equipment. Simultaneously, pressure changes are continuously monitored at pressure measuring points 1 and 2 on the superheater's molten salt side, with data collected every 100ms. If the superheater molten salt side pressure continues to rise (exceeding 0.05MPa within 5 seconds), it indicates that the heat exchange anomaly has triggered a risk of pressure runaway. In this case, the inlet electric valve of the molten salt exothermic system must be closed to cut off the total molten salt supply. At the same time, the isolation valve in the molten salt path where the superheater is located is closed, completely isolating the superheater from the main molten salt circuit. This step-by-step isolation—first cutting off the output, then monitoring the pressure, and finally cutting off the heat source—minimizes the risk of equipment damage.

[0062] All fault isolation actions are executed automatically by the DCS system, with an action response time of ≤1 second. The execution result of each isolation step is fed back to the system control interface in real time and recorded in the fault log (including information such as isolation time, executed actions, and fault status).

[0063] It is understood that, in order to achieve the functions in the above embodiments, the computer device includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should readily recognize that, based on the units and method steps described in conjunction with the embodiments disclosed in this application, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed by hardware or by computer software driving hardware depends on the specific application scenario and design constraints of the technical solution.

[0064] Furthermore, as a response to the above Figure 3 The implementation of the method embodiment shown in this application provides a control device for a molten salt exothermic system. The embodiment of this device corresponds to the foregoing method embodiments. For ease of reading, this embodiment will not repeat the details of the foregoing method embodiments one by one, but it should be clear that the device in this embodiment can correspondingly implement all the contents of the foregoing method embodiments. Specifically, as shown... Figure 5 As shown, the molten salt exothermic system control device 500 includes: The acquisition module 510 is used to acquire the real-time operating parameters of each device in the molten salt exothermic system when the molten salt exothermic system is in operation or hot standby state and high-temperature molten salt is introduced into the molten salt side of the molten salt exothermic system. The first determining module 520 is used to determine the upper and lower limit dynamic thresholds of the feedwater pressure and the safe range of the feedwater flow rate based on the rated operating parameters of the first feedwater pump and the second feedwater pump, the operating frequency of the high-temperature molten salt pump, the opening degree of the electric valve at the inlet of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater in the real-time operating parameters. The second determining module 530 is used to determine the dual-pump operation mode based on the operating status, water pressure deviation, and water flow deviation of the first and second water pumps in the real-time operating parameters. The control module 540 is used to interlock and adjust the operating status of the first and second feed water pumps based on the dynamic threshold of the upper and lower limits of the feed water pressure, the safe range of the feed water flow, the dual pump operation mode, and the real-time operating parameters of each device, and to control the opening and closing status of the inlet electric valve of the molten salt exothermic system, the desuperheating water electric valve, and the superheater outlet electric valve, so as to achieve safe control of the molten salt exothermic system.

[0065] Furthermore, such as Figure 5 As shown, the first determining module 520 is specifically used to determine the molten salt inlet intensity coefficient based on the ratio of the high-temperature molten salt pump operating frequency to the high-temperature molten salt pump rated frequency and the ratio of the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system to the maximum opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system; to determine the heat exchange load correction coefficient based on the temperature difference between the inlet and outlet of the preheater and the rate of change of the temperature difference between the inlet and outlet of the preheater per unit time; to determine the initial dynamic threshold of the upper and lower limits of the feedwater pressure based on the rated pressure of the first feedwater pump and the second feedwater pump, the molten salt inlet intensity coefficient, and the heat exchange load correction coefficient; to perform boundary verification on the initial dynamic threshold of the upper and lower limits of the feedwater pressure based on the maximum allowable working pressure of the superheater and the maximum allowable working pressure of the evaporator in the molten salt exothermic system; and to determine the final dynamic threshold of the upper and lower limits of the feedwater pressure based on the boundary verification results.

[0066] Furthermore, such as Figure 5 As shown, the first determining module 520 is specifically used to determine the initial safe range of feedwater flow rate based on the molten salt inflow intensity coefficient, the heat exchange load correction coefficient, and the rated flow rates of the first and second feedwater pumps; determine the lower limit verification value of the flow rate based on the minimum cooling flow rate requirements of the preheater and the evaporator in the molten salt exothermic system; determine the upper limit verification value of the flow rate based on the maximum allowable flow rate limits of the preheater and the evaporator in the molten salt exothermic system, combined with the upper limit of the rated flow rates of the first and second feedwater pumps; perform boundary verification on the initial safe range of feedwater flow rate based on the lower limit verification value and the upper limit verification value of the flow rate; and determine the final safe range of feedwater flow rate based on the boundary verification results.

[0067] Furthermore, such as Figure 5As shown, the second determining module 530 is specifically used to determine the dual-pump operation mode as either the first or second feed water pump operating alone when both the first and second feed water pumps are fault-free and the feed water pressure deviation is within a preset small fluctuation range and the feed water flow deviation is within a preset small fluctuation range; when both the first and second feed water pumps are fault-free and the feed water pressure deviation is within a preset large fluctuation range and the feed water flow deviation is within a preset large fluctuation range, the dual-pump operation mode is determined as parallel operation of the two pumps; when either the first or second feed water pump fails and the other pump is fault-free, and the feed water pressure deviation of the fault-free pump is within a preset stable range, the feed water flow deviation is within a preset stable range, the feed water pressure deviation is within a preset stable range, the feed water flow deviation is within a preset stable range, and the feed water pressure deviation is within a preset small fluctuation range, the feed water flow deviation is within a preset small fluctuation range, ... When the water flow deviation is within the preset stable range, the dual-pump operation mode is determined to be single-pump operation with no fault. When either the first or second feed pump fails, and the other pump is not faulty, and the feed pressure deviation or feed flow deviation of the faultless pump exceeds the preset stable range, the dual-pump operation mode is determined to be an unadjustable mode. When the current operation is in single-pump operation with either the first or second feed pump, and the feed pressure deviation or feed flow deviation of the operating pump remains within the preset switching fluctuation range for a preset time, while the other pump is not faulty, the dual-pump operation mode is determined to switch to single-pump operation with the other faultless pump.

[0068] Furthermore, such as Figure 5As shown, the control module 540 is specifically used to: When the dual-pump operation mode is single-pump operation of either the first or second feedwater pump, and the actual feedwater pressure of the corresponding operating feedwater pump is lower than the dynamic threshold of the lower limit of feedwater pressure, and at least two of the three liquid level measuring points of the steam drum have real-time liquid levels lower than the preset low liquid level threshold for a preset delay, the corresponding feedwater pump operation command is cut off and locked, and the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve are closed; when the dual-pump operation mode is parallel operation of the two pumps, and the actual feedwater flow rate exceeds the lower limit of the feedwater flow rate safety range, and the real-time temperature of both steam temperature measuring points at the superheater outlet is higher than the preset threshold, the control module 540 is used to: Set a temperature threshold and maintain a preset delay, then increase the output power of both pumps to a preset high-load range. If the temperature still does not drop, cut off the dual-pump operation command, and close the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to stator and exhaust electric valve, and steam drum to continuous exhaust electric valve. When the dual-pump operation mode switches to single-pump operation of another fault-free pump, and the actual feedwater pressure deviation and feedwater flow deviation of the newly operating feedwater pump remain within a preset unstable range for a preset delay, cut off the operation command of the newly operating feedwater pump, close the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to stator and exhaust electric valve, and steam drum to continuous exhaust electric valve, and lock both pumps. Activation permission; When the dual-pump operation mode is an unadjustable mode, and the real-time pressure of any two pressure measuring points on the superheater molten salt side, the evaporator molten salt side, or the preheater molten salt side is higher than the preset pressure threshold and continues for a preset delay, immediately close the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant exhaust electric valve, and steam drum to continuous exhaust electric valve of the molten salt heat release system, and cut off the operation commands of the first feedwater pump and the second feedwater pump; When the dual-pump operation mode is single-pump operation or dual-pump parallel operation, and the actual feedwater pressure is between the upper and lower dynamic thresholds of the feedwater pressure and the actual feedwater flow rate is within the safe range of the feedwater flow rate, and the steam... The boiler water level, superheater outlet temperature, and molten salt side pressure of each heat exchanger are all within the preset safe range. The current dual-pump operation status is maintained, and the current on / off status of the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve are maintained. When the dual-pump operation mode is dual-pump parallel operation, and the actual feedwater pressure is higher than the upper limit dynamic threshold of feedwater pressure, and at the same time, the real-time liquid level of at least two of the three liquid level measuring points of the steam drum is higher than the preset high liquid level threshold and continues for a preset delay, the dual-pump operation command is cut off, and the molten salt inlet electric valve, superheater outlet electric valve, desuperheating water electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve are closed.When both the first and second feedwater pumps are shut down and remain in operation for a preset delay, the dual-pump start-up permission is locked, and the following electric valves are closed: molten salt inlet valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to stator and blowdown electric valve, and steam drum to continuous blowdown electric valve.

[0069] Furthermore, such as Figure 5 As shown, the control module 540 is also used to determine the fault type of the molten salt exothermic system and its equipment based on the abnormal characteristics of the operating parameters of each piece of equipment in the molten salt exothermic system and the deviation and response characteristics of the feed water pressure, feed water flow, heat exchanger pressure, steam drum liquid level, and superheater outlet steam temperature; and to determine fault isolation measures suitable for the fault type based on the fault type, the safety constraints of the molten salt exothermic system equipment, and the media isolation requirements.

[0070] Furthermore, such as Figure 5 As shown, the control module 540 is specifically used to determine the fault type as a corresponding feedwater pump body fault when the first or second feedwater pump experiences abnormal fluctuations in operating current, bearing temperature exceeds a preset limit, or output pressure changes abruptly; when the actual feedwater pressure and flow rate continuously deviate from the corresponding thresholds, and the first and second feedwater pumps are operating normally, the fault type is determined as a feedwater molten salt exothermic system fault; when the real-time pressure of any two pressure measuring points corresponding to the superheater molten salt side, the evaporator molten salt side, or the preheater molten salt side is higher than the preset pressure threshold, and the pressure rise rate exceeds the preset range, the fault type is determined as a heat exchanger tube-side leakage fault; when the real-time liquid level of at least two of the three liquid level measuring points of the steam drum continuously exceeds the preset high and low liquid level thresholds, and the actual feedwater flow rate is within the safe range of feedwater flow rate, the fault type is determined as a steam drum liquid level abnormality fault.

[0071] Furthermore, such as Figure 5As shown, the control module 540 is specifically used to: when the fault type is a feedwater pump body fault, close the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system, cut off the operation command of the faulty feedwater pump, and lock the start-up circuit of the faulty feedwater pump; when the fault type is a heat exchanger tube-side leakage fault, close the molten salt inlet electric valve of the molten salt exothermic system and the superheater outlet electric valve, and keep the isolation valve of the corresponding heat exchanger in the molten salt passage closed until the fault is cleared; when the fault type is an abnormal steam drum liquid level fault, cut off the operation commands of the first feedwater pump and the second feedwater pump, close the molten salt inlet electric valve of the molten salt exothermic system, and keep the molten salt inlet electric valve of the molten salt exothermic system closed until the steam drum liquid level returns to the preset safe range; when the fault type is an abnormal superheater heat exchange fault, close the superheater outlet electric valve, continuously monitor the pressure change on the superheater molten salt side, and if the superheater molten salt side pressure continues to rise, close the molten salt inlet electric valve of the molten salt exothermic system and the isolation valve of the superheater in the molten salt passage.

[0072] Optionally, the control device for the molten salt exothermic system may be an electronic device with data processing capabilities, or a functional module within the electronic device, without limitation.

[0073] For example, the electronic device can be a server, which can be a single server or a server cluster consisting of multiple servers. As another example, the electronic device can be a mobile phone, tablet computer, desktop computer, laptop computer, handheld computer, notebook computer, ultra-mobile personal computer (UMPC), netbook, as well as cellular phones, personal digital assistants (PDAs), augmented reality (AR) devices, virtual reality (VR) devices, and other terminal devices. As yet another example, the electronic device can also be a recording device, video surveillance equipment, etc. This application does not impose any special limitations on the specific form of the electronic device.

[0074] The following example uses an electronic device as the control unit for a molten salt exothermic system. Figure 6 As shown, Figure 6 The hardware structure of an electronic device 600 provided in this application.

[0075] like Figure 6 As shown, the electronic device 600 includes a processor 610, a communication line 620, and a communication interface 630.

[0076] Optionally, the electronic device 600 may also include a memory 640. The processor 610, memory 640, and communication interface 630 can be connected via a communication line 620.

[0077] The processor 610 can be a central processing unit (CPU), a general-purpose processor, a network processor (NP), a digital signal processor (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD), or any combination thereof. The processor 610 can also be any other device with processing capabilities, such as a circuit, device, or software module, without limitation.

[0078] In one example, processor 610 may include one or more CPUs, for example Figure 6 CPU0 and CPU1 in the CPU.

[0079] As an optional implementation, the electronic device 600 may include multiple processors, for example, in addition to processor 610, it may also include processor 670. A communication line 620 is used to transmit information between the components included in the electronic device 600.

[0080] Communication interface 630 is used for communicating with other devices or other communication networks. This other communication network can be Ethernet, Radio Access Network (RAN), Wireless Local Area Network (WLAN), etc. Communication interface 630 can be a module, circuit, transceiver, or any device capable of enabling communication.

[0081] The memory 640 is used to store instructions. These instructions can be computer programs.

[0082] The memory 640 can be a read-only memory (ROM) or other type of static storage device capable of storing static information and / or instructions; it can also be a random access memory (RAM) or other type of dynamic storage device capable of storing information and / or instructions; it can also be an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), disk storage media, or other magnetic storage devices, etc., without limitation.

[0083] It should be noted that the memory 640 can exist independently of the processor 610, or it can be integrated with the processor 610. The memory 640 can be used to store instructions, program code, or some data, etc. The memory 640 can be located inside or outside the electronic device 600, without restriction.

[0084] The processor 610 is configured to execute instructions stored in the memory 640 to implement the communication method provided in the following embodiments of this application. For example, when the electronic device 600 is a terminal or a chip in a terminal, the processor 610 can execute instructions stored in the memory 640 to implement the steps performed by the transmitting end in the following embodiments of this application.

[0085] As an optional implementation, the electronic device 600 also includes an output device 650 and an input device 660. The output device 650 can be a display screen, speaker, or other device capable of outputting data from the electronic device 600 to the user. The input device 660 can be a keyboard, mouse, microphone, joystick, or other device capable of inputting data into the electronic device 600.

[0086] It should be pointed out that, Figure 6 The structure shown does not constitute a limitation on the electronic device, except... Figure 6 In addition to the components shown, the electronic device may include more or fewer components than illustrated, or combine certain components, or have different component arrangements.

[0087] The molten salt exothermic system control device and application scenarios described in this application are for the purpose of more clearly illustrating the technical solutions of this application, and do not constitute a limitation on the technical solutions provided in this application. As those skilled in the art will know, with the evolution of molten salt exothermic system control devices and the emergence of new business scenarios, the technical solutions provided in this application are also applicable to similar technical problems.

[0088] This application provides a storage medium storing a program that, when executed by a processor, implements the molten salt exothermic system control method.

[0089] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (molten salt exothermic systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0090] Those skilled in the art will understand that embodiments of this application can be provided as methods, molten salt exothermic systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0091] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A molten salt heat rejection system control method, characterized by, The molten salt exothermic system includes: a high-temperature molten salt pump, a preheater, a first feedwater pump, a second feedwater pump, a molten salt inlet electric valve, a desuperheating water electric valve, and a superheater outlet electric valve. The method includes: When the molten salt exothermic system is in operation or hot standby mode, and high-temperature molten salt is introduced into the molten salt side of the molten salt exothermic system, the real-time operating parameters of each device in the molten salt exothermic system are obtained. Based on the rated operating parameters of the first and second water pumps, and the operating frequency of the high-temperature molten salt pump, the opening degree of the electric valve at the inlet of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater in the real-time operating parameters, the dynamic threshold of the upper and lower limits of the water pressure and the safe range of the water flow are determined. Based on the operating status, water pressure deviation, and water flow deviation of the first and second water pumps in the real-time operating parameters, the dual-pump operation mode is determined. Based on the dynamic threshold of the upper and lower limits of the water supply pressure, the safe range of the water supply flow, the dual-pump operation mode, and the real-time operating parameters of each device, the operating status of the first water supply pump and the second water supply pump are interlocked and adjusted, and the opening and closing status of the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system are controlled to achieve safe control of the molten salt exothermic system.

2. The method according to claim 1, characterized in that, Based on the rated operating parameters of the first and second feedwater pumps, and the real-time operating parameters including the operating frequency of the high-temperature molten salt pump, the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater, the dynamic threshold values ​​for the upper and lower limits of the feedwater pressure are determined, including: The molten salt inlet strength coefficient is determined based on the ratio of the operating frequency of the high-temperature molten salt pump to its rated frequency, and the ratio of the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system to the maximum opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system. The heat exchange load correction coefficient is determined based on the temperature difference between the inlet and outlet of the preheater and the rate of change of the temperature difference between the inlet and outlet of the preheater per unit time. Based on the rated pressures of the first and second feedwater pumps, the molten salt inlet strength coefficient, and the heat exchange load correction coefficient, the initial dynamic thresholds for the upper and lower limits of the feedwater pressure are determined. Based on the maximum allowable operating pressure of the superheater and the maximum allowable operating pressure of the evaporator in the molten salt exothermic system, the initial dynamic threshold of the upper and lower limits of the feedwater pressure is checked for boundary. The final dynamic thresholds for the upper and lower limits of water supply pressure are determined based on the boundary verification results.

3. The method according to claim 2, characterized in that, Based on the rated operating parameters of the first and second feedwater pumps, and including the operating frequency of the high-temperature molten salt pump, the opening degree of the molten salt electric valve at the inlet of the molten salt exothermic system, and the temperature difference between the inlet and outlet of the preheater in the real-time operating parameters, the safe range of feedwater flow is determined, including: Based on the molten salt inlet strength coefficient, the heat exchange load correction coefficient, and the rated flow rates of the first and second feed water pumps, the initial safe range of feed water flow rate is determined. The lower limit verification value of the flow rate is determined based on the minimum cooling flow rate requirement of the preheater and the minimum cooling flow rate requirement of the evaporator in the molten salt exothermic system. Based on the maximum allowable flow limit of the preheater and the maximum allowable flow limit of the evaporator in the molten salt exothermic system, and in conjunction with the rated flow limit of the first and second feed water pumps, the flow limit verification value is determined. Based on the lower limit verification value and the upper limit verification value, the initial safe range of the water supply flow rate is checked for boundary conditions. The final safe range of water supply flow rate is determined based on the boundary verification results.

4. The method according to claim 1, characterized in that, Based on the operating status, water pressure deviation, and water flow deviation of the first and second water pumps in the real-time operating parameters, the dual-pump operating mode is determined, including: When both the first and second water pumps are functioning properly, and the water pressure deviation and water flow deviation are within the preset small fluctuation range, the dual-pump operation mode is determined to be either the first or second water pump operating as a single pump. When both the first and second water pumps are functioning properly, and the water pressure deviation is within the preset large fluctuation range or the water flow deviation is within the preset large fluctuation range, the dual-pump operation mode is determined to be the parallel operation of the two pumps. When either the first or second water pump fails, and the other pump is not faulty, and the water pressure deviation and water flow deviation of the faultless pump are within the preset stable range, the dual-pump operation mode is determined to be single-pump operation of the faultless pump. When either the first or second water pump fails, and the other pump is not faulty, and the water pressure deviation of the non-faulty pump exceeds the preset stable range or the water flow deviation exceeds the preset stable range, the dual-pump operation mode is determined to be an infeasible adjustment mode. When the first or second feed pump is currently in single-pump operation mode, and the feed pressure deviation and feed flow deviation of the operating feed pump remain within the preset switching fluctuation range for a preset time, while the other pump is fault-free, the dual-pump operation mode is determined to switch to single-pump operation of the other fault-free pump.

5. The method according to claim 4, characterized in that, Based on the dynamic threshold values ​​of the upper and lower limits of the feedwater pressure, the safe range of the feedwater flow rate, the dual-pump operation mode, and the real-time operating parameters of each device, the operating states of the first and second feedwater pumps are interlocked and adjusted, and the on / off states of the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system are controlled, including: When the dual-pump operation mode is the first feedwater pump or the second feedwater pump operating as a single pump, and the actual feedwater pressure of the corresponding operating feedwater pump is lower than the dynamic threshold of the lower limit of feedwater pressure, and at the same time, the real-time liquid level of at least two of the three liquid level measuring points of the steam drum is lower than the preset low liquid level threshold and continues for a preset delay, the corresponding feedwater pump operation command is cut off and locked, and the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve are closed. When the dual-pump operation mode is dual-pump parallel operation, and the actual feedwater flow exceeds the lower limit of the feedwater flow safety range, and the real-time temperature of the two steam temperature measuring points at the superheater outlet is higher than the preset temperature threshold and continues for a preset delay, the output power of the dual pumps is increased to the preset high load range. If the temperature still does not drop, the dual-pump operation command is cut off, and the molten salt inlet electric valve, the superheater outlet electric valve, the steam drum to the constant exhaust electric valve, and the steam drum to the continuous exhaust electric valve are closed. When the dual-pump operation mode is switched to the single-pump operation of another fault-free pump, and the actual feedwater pressure deviation and feedwater flow deviation of the newly operating feedwater pump after the switch are continuously within the preset unstable range and continue for a preset delay, the operation command of the newly operating feedwater pump is cut off, and the electric valves of the molten salt inlet, desuperheating water, superheater outlet, steam drum to constant flow electric valve, and steam drum to continuous flow electric valve are closed, and the dual-pump start-up permission is locked. When the dual-pump operation mode is an unadjustable mode, and the real-time pressure of any two pressure measuring points on the molten salt side of the superheater, the molten salt side of the evaporator, or the molten salt side of the preheater is higher than the preset pressure threshold and continues for a preset delay, the inlet molten salt electric valve of the molten salt heat release system, the superheater outlet electric valve, the steam drum to the constant exhaust electric valve, and the steam drum to the continuous exhaust electric valve are immediately closed, and the operation commands of the first feedwater pump and the second feedwater pump are cut off. When the dual-pump operation mode is single-pump operation or dual-pump parallel operation, and the actual feedwater pressure is between the upper and lower dynamic thresholds of the feedwater pressure, and the actual feedwater flow rate is within the safe range of the feedwater flow rate, while the steam drum liquid level, superheater outlet temperature, and molten salt side pressure of each heat exchanger are all within the preset safe range, the current dual-pump operation status is maintained, and the current on / off status of the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve is maintained. When the dual-pump operation mode is dual-pump parallel operation, and the actual feedwater pressure is higher than the upper limit dynamic threshold of feedwater pressure, and at the same time, the real-time liquid level of at least two of the three liquid level measuring points of the steam drum is higher than the preset high liquid level threshold and continues for a preset delay, the dual-pump operation command is cut off, and the molten salt inlet electric valve, superheater outlet electric valve, desuperheating water electric valve, steam drum to constant discharge electric valve, and steam drum to continuous discharge electric valve are closed. When both the first and second feedwater pumps stop operating and remain in operation for a preset delay, the dual-pump start-up permission is locked, and the molten salt inlet electric valve, desuperheating water electric valve, superheater outlet electric valve, steam drum to continuous exhaust electric valve, and steam drum to continuous exhaust electric valve are closed.

6. The method according to any one of claims 1-5, characterized in that, The method further includes: Based on the abnormal characteristics of the operating parameters of each equipment in the molten salt exothermic system and the deviation and response characteristics of the feed water pressure, feed water flow, heat exchanger pressure, steam drum liquid level, and superheater outlet steam temperature, the fault types of the molten salt exothermic system and each equipment in the molten salt exothermic system are determined. Based on the fault type, the safety constraints of the molten salt exothermic system equipment, and the media isolation requirements, determine the fault isolation measures suitable for the fault type.

7. The method according to claim 6, characterized in that, Based on the abnormal characteristics of the operating parameters of each device in the molten salt exothermic system and the deviations and response characteristics of the feedwater pressure, feedwater flow rate, heat exchanger pressure, steam drum level, and superheater outlet steam temperature, the fault types of the molten salt exothermic system and its devices are determined, including: When the first or second water pump experiences abnormal fluctuations in operating current, exceeds the preset limit in bearing temperature, or experiences a sudden change in output pressure, the fault type is determined to be a fault in the corresponding water pump body. When the actual water supply pressure and water supply flow rate continuously deviate from the corresponding threshold, and the first water supply pump and the second water supply pump are operating normally, the fault type is determined to be a fault in the water supply molten salt exothermic system. When the real-time pressure of any two pressure measuring points corresponding to the molten salt side of the superheater, the molten salt side of the evaporator, or the molten salt side of the preheater is higher than the preset pressure threshold and the pressure rise rate exceeds the preset range, the fault type is determined to be a heat exchanger tube side leakage fault. When the real-time liquid level at at least two of the three liquid level measuring points in the steam drum continuously exceeds the preset high and low liquid level thresholds, and the actual feedwater flow rate is within the safe range of feedwater flow rate, the fault type is determined to be an abnormal liquid level fault in the steam drum.

8. The method according to claim 7, characterized in that, Based on the fault type, the safety constraints of the molten salt exothermic system equipment, and the media isolation requirements, determine fault isolation measures suitable for the fault type, including: When the fault type is a fault in the feedwater pump body, close the molten salt inlet electric valve, the desuperheating water electric valve, and the superheater outlet electric valve of the molten salt exothermic system, cut off the operation command of the faulty feedwater pump, and lock the starting circuit of the faulty feedwater pump at the same time. When the fault type is heat exchanger tube-side leakage fault, close the inlet electric valve of the molten salt exothermic system and the outlet electric valve of the superheater, and keep the isolation valve of the molten salt passage where the corresponding heat exchanger is located closed until the fault is eliminated. When the fault type is abnormal steam drum liquid level, cut off the operation commands of the first feedwater pump and the second feedwater pump, close the inlet electric valve of the molten salt exothermic system, and keep the inlet electric valve of the molten salt exothermic system closed until the steam drum liquid level returns to the preset safe range. When the fault type is abnormal heat exchange in the superheater, close the superheater outlet electric valve and continuously monitor the pressure change on the superheater molten salt side. If the pressure on the superheater molten salt side continues to rise, close the molten salt inlet electric valve of the molten salt heat release system and the isolation valve of the molten salt passage where the superheater is located.

9. A molten salt exothermic system, characterized in that, The molten salt exothermic system includes: a deaerator, a preheater, a first feed water pump, a second feed water pump, a first feed water inlet pipe, a second feed water inlet pipe, a first feed water outlet pipe, a second feed water outlet pipe, and a main feed water pipe; The inlet of the first water pump is sealed to the deaerator through the first water inlet pipe, and the outlet is sealed to the main water supply pipe through the first water outlet pipe. The inlet of the second water pump is sealed to the deaerator through the second water inlet pipe, and the outlet is sealed to the main water supply pipe through the second water outlet pipe. The end of the main water supply pipeline furthest from the water supply pump is sealed and connected to the preheater.

10. The molten salt exothermic system according to claim 9, characterized in that, The molten salt exothermic system also includes: a steam drum, a periodic blowdown expansion tank, a continuous blowdown expansion tank, an electric valve from the steam drum to the periodic blowdown, an electric valve from the steam drum to the continuous blowdown, a steam-water pipeline from the steam drum to the periodic blowdown, and a steam-water pipeline from the steam drum to the continuous blowdown. One end of the steam drum to the periodic steam-water pipeline is sealed and connected to the steam drum, and the other end is sealed and connected to the periodic sewage discharge expansion container; One end of the steam drum to the continuous steam and water pipeline is sealed and connected to the steam drum, and the other end is sealed and connected to the continuous sewage expansion container; The steam drum to constant discharge electric valve is connected in series to the steam drum to constant discharge steam-water pipeline, and the steam drum to continuous discharge electric valve is connected in series to the steam drum to continuous discharge steam-water pipeline.

Images