Reactor power control device for nuclear power station

Abstract

The utility model discloses a reactor power control device for a nuclear power station, which comprises a hard wiring signal distribution device, a communication signal distribution device, N hard wiring signal acquisition devices, N communication signal acquisition devices, N controllers, N output devices, a logic processing device and a man-machine interface device, the hard wiring signal distribution device is connected with the N controllers through the N hard wiring signal acquisition devices, and the N hard wiring signal acquisition devices are in one-to-one correspondence with the N controllers; the communication signal distribution device is connected with the N controllers through the N communication signal acquisition devices, and the N communication signal acquisition devices are in one-to-one correspondence with the N controllers; the N controllers are connected with the N output devices, and the N controllers are in one-to-one correspondence with the N output devices; the N output devices are connected with the logic processing device; the man-machine interface device is connected with the N controllers through a looped network. The device can solve the problem that a reactor power control device is unavailable due to the failure of a single component.

Description

Technical Field

[0001] The utility model relates to the technical field of automatic control, in particular to a reactor power control device used in a nuclear power plant. Background Art

[0002] The reactor power control device of a nuclear power plant is mainly used to realize the reactor power control function under different working conditions. By receiving unit parameters such as reactor power and main steam pressure, the device performs power calculations according to the power and pressure setting values ​​and parameter values ​​set by the operator, outputs control rod drive instructions, and then controls the reactor power. In the nuclear power plants currently in operation, some use analog technology to realize power control, and new nuclear power plants generally use digital reactor power control devices. Existing digital reactor power control devices generally use controllers with active-standby redundant structures to collect unit parameters for calculation and output control rod drive instructions. When a controller in the control state fails, the active-standby switching function is realized by diagnosing and judging its own state. The existing reactor power control devices mainly have the following problems:

[0003] (1) Existing reactor power control devices generally consist of a single acquisition unit and an output unit. If the acquisition unit or the output unit fails, the controller cannot perform the control function normally.

[0004] (2) When the active / standby redundant controller fails, or the active / standby switching mechanism fails due to reasons such as undiagnosable faults, the control device cannot achieve active / standby switching as expected, and the possibility of refusal to operate or malfunction is high;

[0005] (3) When online maintenance is performed on faulty components, the normal control function of the device will be affected.

[0006] The existing patent CN104007657B discloses a device for docking a triple redundant system with a double redundant system, which includes a triple redundant system, two logic processing units and a double redundant system. The triple redundant system and the double redundant system are respectively connected to the two logic processing units, and the two logic processing units are connected to each other. The two logic processing units are provided with a state acquisition module and a logic judgment module. The state acquisition module is used to acquire the operating state of the triple redundant system and the double redundant system; the logic judgment module is used to realize the mutual docking of the triple redundant system and the double redundant system. This solution focuses on the interface logic design, and does not solve the practical problems of the reactor power control device of the nuclear power plant in the prior art.

[0007] The existing patent CN109920562A discloses a protection system control device for a nuclear power plant. The protection system control device includes multiple protection channels, each of which includes a signal acquisition and conditioning module, a shutdown protection unit, a human-machine interface module, a dedicated protection unit, and an equipment priority drive module. The signal acquisition and conditioning module collects the on-site process signals of the nuclear power plant, performs shutdown safety judgment in the shutdown protection unit, issues drive instructions and control instructions in the dedicated protection unit according to the judgment results, judges the priority of the above instructions through the equipment priority module, and controls the on-site equipment to perform corresponding actions according to the priority instructions. This solution focuses on simplifying the design of the protection system control device, and does not solve the practical problems of the reactor power control device of the nuclear power plant in the prior art.

[0008] In summary, the above two existing patents have not solved the problems in the prior art that the reactor power control device is unavailable due to the failure of a single key component, the control device cannot achieve the main-standby switching as expected, and the online maintenance of the faulty component is difficult. Summary of the invention

[0009] Based on the above technical problems, the utility model proposes a reactor power control device for a nuclear power plant, which solves the problems in the prior art that the reactor power control device is unavailable due to the failure of a single key component, the control device cannot achieve the main-standby switching as expected, and the online maintenance of the faulty component is difficult.

[0010] A reactor power control device for a nuclear power plant, comprising: a hard-wired signal distribution device, a communication signal distribution device, N hard-wired signal acquisition devices, N communication signal acquisition devices, N controllers, N output devices, a logic processing device and a human-machine interface device,

[0011] The hard-wired signal distribution device is connected to the N controllers through N hard-wired signal acquisition devices, and the N hard-wired signal acquisition devices correspond to the N controllers one by one;

[0012] The communication signal distribution device is connected to the N controllers through N communication signal acquisition devices, and the N communication signal acquisition devices correspond to the N controllers one by one;

[0013] N controllers are connected to N output devices, and the N controllers correspond to the N output devices one by one;

[0014] N output devices are connected to the logic processing device;

[0015] The human-machine interface device is connected with N controllers via a ring network.

[0016] Furthermore, it also includes: a diagnosis and maintenance device, which is connected to N controllers through a ring network.

[0017] Furthermore, it also includes: N output locking devices, one end of the N output locking devices is connected to the diagnostic maintenance device and the N output devices respectively, and the N output locking devices correspond to the N output devices one by one; the other end of the N output locking devices is connected to the logic processing device.

[0018] Furthermore, the hard-wired signal includes a switch signal and / or an analog signal, and the communication signal includes an optical signal.

[0019] Furthermore, the ring network includes a ring network communication unit and an optoelectronic conversion unit, one end of the ring network communication unit is connected to the controller and the human-machine interface device respectively, and the other end of the ring network communication unit is connected to the optoelectronic conversion unit.

[0020] Furthermore, the ring network communication unit is also connected to the diagnosis and maintenance device.

[0021] Furthermore, the controller includes a logic operation unit and a first AND gate, the diagnostic maintenance device includes N heartbeat monitoring units, N manual maintenance units and an OR gate, the output locking device includes a second AND gate, the heartbeat monitoring unit and the manual maintenance unit are connected to the ring network through the OR gate, the non-end of the first input end of the first AND gate is connected to the OR gate through the ring network, the second input end of the first AND gate is connected to the logic operation unit, the output end of the first AND gate is connected to the output device, the non-end of the first input end of the second AND gate is connected to the OR gate, and the second input end of the second AND gate is connected to the output device.

[0022] Furthermore, the logic processing device is a two-out-of-three logic.

[0023] Furthermore, the ring network is a redundant ring network.

[0024] Furthermore, the photoelectric conversion units are provided in two groups for redundancy, and the photoelectric conversion units in the same group are connected by optical cables.

[0025] Based on the above technical solution, the utility model has at least the following beneficial effects:

[0026] 1. The utility model forms a digital reactor power control device with multiple redundant channel structures by arranging hard-wired wires, communication signal distribution devices, and multiple independent acquisition devices, output devices, and controllers. The logic processing device generates control rod drive instructions after performing logic processing on the results of the output device. The utility model can solve the problem of unavailability of the control device due to the failure of a single key component, thereby realizing online maintenance of the faulty component without affecting the control function.

[0027] 2. The utility model displays the output status of each redundant channel through a centralized human-machine interface device. When any redundant channel is abnormal, the operator can compare the output status of each redundant channel in the human-machine interface device and combine the system diagnostic information to more timely and accurately judge the status of the control device.

[0028] 3. The utility model connects the diagnostic maintenance device to the controller through a ring network, and uses the heartbeat unit of the diagnostic maintenance device to monitor the heartbeat signal in the controller to determine the operating status of the controller. Combined with the self-diagnosis function of the controller, the diagnostic coverage rate can be greatly improved to avoid the risk of false operation due to device failure.

[0029] 4. The diagnostic maintenance device in the utility model is connected to the output locking device, and the locking signal is transmitted to the output locking device through hard wiring. The output result of the controller is locked by the hardware circuit, which can avoid the problem of output instruction error caused by the locking signal failing to take effect in the controller when the communication between the controller and the diagnostic maintenance device is abnormal. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The drawings constituting part of the present invention are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation on the present invention. In the drawings:

[0031] Figure 1 This is a schematic diagram of a reactor power control device for a nuclear power plant according to an embodiment of the utility model;

[0032] Figure 2 A schematic diagram of signal distribution and collection of different types in one embodiment of the utility model;

[0033] Figure 3 A schematic diagram showing the display of each channel in a human-machine interface device in one embodiment of the utility model;

[0034] Figure 4 A schematic diagram of the internal structure of a redundant ring network in one embodiment of the utility model;

[0035] Figure 5 A schematic diagram of fault diagnosis and instruction blocking in one embodiment of the utility model;

[0036] Figure 6 A schematic diagram of a logic processing device outputting a driving instruction in one embodiment of the utility model;

[0037] Figure 7 The present invention is a schematic diagram of a reactor power control device for a nuclear power plant according to an embodiment of the present invention.

[0038] The above drawings have the following reference numerals:

[0039] 100, hard-wired signal distribution device; 200, communication signal distribution device; 300, hard-wired signal acquisition device; 400, communication signal acquisition device; 500, controller; 501, first port; 502, logic operation unit; 503, first AND gate; 504, second port; 600, output device; 700, logic processing device; 800, human-machine interface device; 900, diagnosis and maintenance device; 901, heartbeat monitoring unit; 902, manual maintenance unit; 903, OR gate; 1000, output locking device; 1001, second AND gate; 1100, ring network; 1101, ring network communication unit; 1102, photoelectric conversion unit; 1200, power supply drive. DETAILED DESCRIPTION

[0040] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present invention can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0041] The present invention is further described in detail below in conjunction with specific embodiments. These embodiments should not be construed as limiting the scope of protection claimed for the present invention.

[0042] Example

[0043] In order to solve the problems in the prior art that a reactor power control device is unavailable due to a single key component failure, the control device cannot achieve the expected main-standby switching, and online maintenance of the faulty component is difficult, the utility model proposes a reactor power control device for a nuclear power plant.

[0044] like Figure 1 FIG. 1 shows a schematic diagram of a reactor power control device for a nuclear power plant according to an embodiment of the utility model. Figure 1 As shown, the reactor power control device includes: a hard-wired signal distribution device 100, a communication signal distribution device 200, three hard-wired signal acquisition devices 300, three communication signal acquisition devices 400, three controllers 500, three output devices 600, a logic processing device 700, a human-machine interface device 800, three output locking devices 1000 and a diagnostic maintenance device 900, through which the collection, calculation, output, monitoring and other functions of the unit parameters such as the reactor power and the main steam pressure are realized. The connection relationship between the various devices inside the reactor power control device will be described in detail below.

[0045] The hard-wired signal distribution device 100 is connected to three controllers 500 through three hard-wired signal acquisition devices 300, and the three hard-wired signal acquisition devices 300 correspond to the three controllers 500. The hard-wired signal distribution device 100 receives switch quantity signals and analog quantities (including current signals, resistance signals, etc.) through hard wiring, and after completing signal distribution using hardware technology, transmits them to three independent hard-wired signal acquisition devices 300 respectively, and then sends them to each controller 500 accordingly.

[0046] The communication signal distribution device 200 is connected to the controller 500 through three communication signal acquisition devices 400, and the three communication signal acquisition devices 400 correspond to the three controllers 500. The communication signal distribution device 200 receives the optical signal through the optical cable, distributes the optical signal into three paths, and sends them to three independent communication signal acquisition devices 400 respectively to realize the conversion function of optical signal-electrical signal, and sends them to each controller 500 accordingly.

[0047] The hard-wired signal distribution device 100 and the hard-wired signal acquisition device 300 are independent of the communication signal distribution device 200 and the communication signal acquisition device 400. For important input signals, they can be collected separately by the above two methods to avoid the failure of a single signal transmission method affecting the control function. In addition, the hard-wired signal acquisition device 300 and the communication signal acquisition device 400 can also be used independently of the two signal distribution devices. When the external system signal has been distributed, it can be directly connected to the hard-wired signal acquisition device or the communication signal acquisition device for signal acquisition.

[0048] Furthermore, the controller 500 is connected to three output devices 600 respectively, and each controller 500 corresponds to each output device 600 one by one. Figure 2 , a schematic diagram of the distribution and collection of different types of signals in this embodiment is shown. The three controllers 500 receive the unit parameters from the hard-wired signal collection device 300 and the communication signal collection device 400, as well as the parameter setting values ​​from the human-machine interface device through the first port 501 and the second port 504, respectively. After the logic operation unit 502 in the controller 500 performs power operation respectively, the control rod drive instruction is output to the corresponding three output devices 600.

[0049] The human-machine interface device 800 is connected to the three controllers 500 via a ring network 1100. The drive instructions and display information of each controller 500 can be output to the human-machine interface device 800 for display through the ring network 1100, so that the operation and maintenance personnel can monitor the status of different channels in the device. The display diagram of each channel in the human-machine interface device is shown in FIG. Figure 3Specifically, when the channels corresponding to each controller are in normal operation, the diagnostic information and other display information are displayed normally; when one of the channels corresponding to each controller is operating abnormally, and the controller itself or the diagnostic maintenance device has diagnosed the abnormal state, the diagnostic information and other display information of the channel can be used by personnel to determine the specific fault condition of the channel; when one of the channels corresponding to the controller is operating abnormally but has not been diagnosed by the controller or the diagnostic maintenance device, then at this time, the other display information of the channel may deviate from the display information of the normal channel, and personnel can determine the fault condition of the channel based on the deviation.

[0050] like Figure 4 As shown, the ring network 1100 in this embodiment is a redundant ring network, and the ring network 1100 includes a ring network communication unit 1101 and an optoelectronic conversion unit 111. One end of the ring network communication unit 1101 is respectively connected to the controller 500, the human-machine interface device 800, and the diagnostic maintenance device 900, and the other end of the ring network communication unit 1101 is connected to the optoelectronic conversion unit 1102. Further, the optoelectronic conversion unit 1102 is configured as two groups of redundant configurations, and the optoelectronic conversion units 1102 in the same group are connected by optical cables.

[0051] The diagnosis and maintenance device 900 is connected to three controllers 500 via a ring network 1100 , and each controller 500 periodically sends a dynamic heartbeat signal to the diagnosis and maintenance device 900 so that the diagnosis and maintenance device 900 can determine the operating status of each controller 500 .

[0052] like Figure 5 As shown, each controller 500 includes a logic operation unit 502 and a first AND gate 503, and the diagnostic maintenance device 900 includes three heartbeat monitoring units 901, three manual maintenance units 902 and an OR gate 903. The diagnostic maintenance device provides a human-computer interaction interface, and the operator can manually trigger the maintenance of a single controller by operating the manual maintenance unit to lock the output of the controller. Specifically, the connection relationship between the controller 500, the diagnostic maintenance device 900 and the output device 600 is as follows: the heartbeat monitoring unit 901 and the manual maintenance unit 902 are connected to the ring network 1100 through the OR gate 903, the non-end of the first input end of the first AND gate 503 is connected to the OR gate 903 through the ring network 1100, the second input end of the first AND gate 503 is connected to the logic operation unit 502, and the output end of the first AND gate 503 is connected to the output device 600. When the diagnostic maintenance device 900 determines that a certain controller 500 is in an abnormal state, or the operator needs to manually operate the diagnostic maintenance device 900 for maintenance or other reasons, the diagnostic maintenance device 900 transmits a locking signal to the corresponding controller 500 in an abnormal state through the ring network 1100, thereby locking the controller from outputting a drive instruction.

[0053] When a controller in the reactor power control device fails, the channel can be shut down and repaired online, and the other two controllers can assume the control function. When the faulty controller is repaired, its internal parameter status may deviate from the internal parameters of the two normally operating controllers. To avoid this deviation, before the faulty controller resumes operation, the parameter status of the normally operating controller can be written into the repaired faulty control station by connecting an external maintenance tool between the diagnostic maintenance device and the repaired controller.

[0054] When the controller self-diagnoses and finds an abnormality, it will set a fail-safe value to avoid generating erroneous output results. In addition, to avoid false locking due to abnormality of the diagnostic maintenance device itself, when the diagnostic maintenance device self-diagnoses abnormality, or detects abnormality in all three controllers, the diagnostic maintenance device will exit operation. Through the heartbeat monitoring of the diagnostic maintenance device and the self-diagnosis of the controller, the diagnostic coverage can be greatly improved to avoid the risk of false operation due to device failure.

[0055] In order to avoid abnormal communication between the controller 500 and the diagnostic maintenance device 900, which causes the locking signal to fail to take effect in the controller 500, this embodiment transmits the locking signal to the output locking device 1000 through hard wiring, and locks the output result of the controller 500 through a hardware circuit. Specifically, one end of the output locking device 1000 is respectively connected to the diagnostic maintenance device 900 and the three output devices 600, and each of the three output locking devices 1000 corresponds to each of the three output devices 600; the other end of the output locking device 1000 is connected to the logic processing device 700. Specifically, each output locking device 1000 includes a second AND gate 1001, such as Figure 5 As shown, the negative end of the first input end of the second AND gate 1001 is connected to the OR gate 903 , and the second input end of the second AND gate 1001 is connected to the first output device 600 .

[0056] Furthermore, the logic processing device 700 in this embodiment is a three-out-of-two logic, and the logic processing device 700 performs a "three-out-of-two" processing on the output instructions of the three output devices 600 to output the final control rod drive instruction. Under normal circumstances, the output devices 600 of the three channels should all output control rod drive instructions in the same direction. When one of the channels is abnormal (such as no output or output of the reverse instruction), the reactor power control device can still output the expected control rod drive instruction based on the calculation results of the other two channels. When two or three channels are abnormal, the reactor power control device will lose its normal control function.

[0057] The logic processing device 700 is implemented by an active device (such as a relay) and is connected to the output locking device 1000 through hard wiring. Figure 6As shown, in order to avoid the failure of the logic processing function due to the loss of active power supply, this embodiment adopts an independent power supply driver 1200 for the output locking device 1000.

[0058] like Figure 7 As shown, in another embodiment of the utility model, the reactor power control device includes: a hard-wired signal distribution device 100, a communication signal distribution device 200, three hard-wired signal acquisition devices 300, three communication signal acquisition devices 400, three controllers 500, three output devices 600, a logic processing device 700 and a human-machine interface device 800, wherein the output device 600 is connected to the logic processing device 700, and the connection method between the remaining devices is consistent with the above embodiment.

[0059] It should be understood that the number N of hard-wired signal acquisition devices, communication signal acquisition devices, controllers, output devices, and output locking devices in the present invention can be changed according to the actual scenario.

[0060] In summary, it can be seen from the above description that the above embodiments of the present invention achieve the following technical effects:

[0061] 1. The utility model forms a digital reactor power control device with multiple redundant channel structures by arranging hard-wired wires, communication signal distribution devices, and multiple independent acquisition devices, output devices, and controllers. The logic processing device generates control rod drive instructions after performing logic processing on the results of the output device. The utility model can solve the problem of unavailability of the control device due to the failure of a single key component, thereby realizing online maintenance of the faulty component without affecting the control function.

[0062] 2. The utility model displays the output status of each redundant channel through a centralized human-machine interface device. When any redundant channel is abnormal, the operator can compare the output status of each redundant channel in the human-machine interface device and combine the system diagnostic information to more timely and accurately judge the status of the control device.

[0063] 3. The utility model connects the diagnostic maintenance device to the controller through a ring network, and uses the heartbeat unit of the diagnostic maintenance device to monitor the heartbeat signal in the controller to determine the operating status of the controller. Combined with the self-diagnosis function of the controller, the diagnostic coverage rate can be greatly improved to avoid the risk of false operation due to device failure.

[0064] 4. The diagnostic maintenance device in the utility model is connected to the output locking device, and the locking signal is transmitted to the output locking device through hard wiring. The output result of the controller is locked by the hardware circuit, which can avoid the problem of output instruction error caused by the locking signal failing to take effect in the controller when the communication between the controller and the diagnostic maintenance device is abnormal.

[0065] The above description is only the preferred embodiment of the utility model, and is not intended to limit the utility model. For those skilled in the art, the utility model can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the utility model shall be included in the protection scope of the utility model.

[0066] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0067] It should be noted that, in the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the utility model. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they contradict each other.

Claims

1. A reactor power control device for a nuclear power plant, characterized in that: include: a hard-wired signal distribution device, a communication signal distribution device, N hard-wired signal acquisition devices, N communication signal acquisition devices, N controllers, N output devices, a logic processing device, and a human-machine interface device, The hard-wired signal distribution device is connected to the N controllers through the N hard-wired signal acquisition devices, and the N hard-wired signal acquisition devices correspond to the N controllers one by one; The communication signal distribution device is connected to the N controllers through the N communication signal acquisition devices, and the N communication signal acquisition devices correspond to the N controllers one by one; The N controllers are connected to the N output devices, and the N controllers correspond to the N output devices one by one; The N output devices are connected to the logic processing device; The human-machine interface device is connected to the N controllers via a ring network.

2. The device according to claim 1, characterized in that Also includes: A diagnostic maintenance device is connected to the N controllers via the ring network.

3. The device according to claim 2, characterized in that Also includes: N output locking devices, one end of each of the N output locking devices is connected to the diagnostic maintenance device and the N output devices respectively, and each of the N output locking devices corresponds to the N output devices one by one; the other end of each of the N output locking devices is connected to the logic processing device.

4. The device according to claim 1, characterized in that The hard-wired signal includes a switch signal and / or an analog signal, and the communication signal includes an optical signal.

5. The device according to claim 2, characterized in that The ring network includes a ring network communication unit and a photoelectric conversion unit. One end of the ring network communication unit is connected to the controller and the human-machine interface device respectively, and the other end of the ring network communication unit is connected to the photoelectric conversion unit.

6. The device according to claim 5, characterized in that The ring network communication unit is also connected to the diagnosis and maintenance device.

7. The device according to claim 3, characterized in that The controller includes a logic operation unit and a first AND gate, the diagnostic maintenance device includes N heartbeat monitoring units, N manual maintenance units and an OR gate, the output locking device includes a second AND gate, the heartbeat monitoring unit and the manual maintenance unit are connected to the ring network through the OR gate, the non-end of the first input end of the first AND gate is connected to the OR gate through the ring network, the second input end of the first AND gate is connected to the logic operation unit, the output end of the first AND gate is connected to the output device, the non-end of the first input end of the second AND gate is connected to the OR gate, and the second input end of the second AND gate is connected to the output device.

8. The device according to claim 1, characterized in that The logic processing device is a two-out-of-three logic.

9. The device according to claim 1, characterized in that The ring network is a redundant ring network.

10. The device according to claim 5, characterized in that The photoelectric conversion units are arranged in two groups for redundancy, and the photoelectric conversion units in the same group are connected by optical cables.

Images