Control system

By introducing redundant distributed control system cabinets into the distributed control system, the reliability problems caused by DCS cabinet power failure or processor shutdown are solved, normal control in the event of failure is achieved, and the system reliability and production continuity are improved.

CN223065667UActive Publication Date: 2025-07-04SIEMENS POWER PLANT AUTOMATION
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202422047939.5
Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
Filing Date
2024-08-22
Publication Date
2025-07-04
Estimated Expiration
2034-08-22

AI Technical Summary

Technical Problem

When the cabinet of the distributed control system (DCS) fails to control the execution equipment normally when the processor is powered down or the processor is shut down, resulting in poor system reliability.

Method used

The control system including a control device, the first and second distributed control system cabinets are adopted. When the first cabinet fails, the control device switches to the second cabinet to receive the detection device signal and control the execution device to realize redundant backup.

Benefits of technology

Improves the reliability of the control system in the event of failure, ensures the normal operation of the execution equipment, and reduces maintenance costs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN223065667U_ABST
    Figure CN223065667U_ABST
Patent Text Reader

Abstract

The utility model provides a control system, which is applied to a power plant and comprises a control device, a first distributed control system cabinet and a second distributed control system cabinet. The control device is connected with detection equipment and execution equipment which are arranged in a power plant, and the first distributed control system cabinet and the second distributed control system cabinet are respectively connected with the control device; the control device is configured to connect the first distributed control system cabinet between the detection equipment and the execution equipment when the first distributed control system cabinet is in a normal working state, and connect the second distributed control system cabinet between the detection equipment and the execution equipment when the first distributed control system cabinet is in a target fault state; and the second distributed control system cabinet is configured to receive a detection signal sent by the detection equipment and send a control signal to the execution equipment when being connected between the detection equipment and the execution equipment. The reliability of the control system can be improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The utility model relates to the field of industrial equipment, in particular to a control system. Background Art

[0002] A distributed control system (DCS) is an instrument control system, which is usually applied in scenarios such as power plants.

[0003] The current distributed control system usually includes a DCS cabinet. During the operation of the distributed control system, the DCS cabinet can receive signals from detection devices and generate signals for controlling the operation of actuating devices according to these signals to control the operation of the actuating devices. For example, in a power plant, when the temperature sensor at the production site detects that the temperature of the on-site equipment exceeds the preset temperature, the temperature sensor will send a corresponding indication signal to the DCS cabinet. According to this indication signal, the DCS cabinet will send a signal to the air conditioner installed at the production site to make the air conditioner start refrigerating.

[0004] However, when a fault such as power failure of the DCS cabinet or shutdown of the processor inside the DCS cabinet occurs in the distributed control system, the DCS cabinet cannot output signals for controlling the operation of the actuating devices, so that the distributed control system cannot normally control the operation of the actuating devices. Therefore, the reliability of the distributed control system is poor. Summary of the Utility Model

[0005] In order to solve the technical problem of poor reliability of the distributed control system, the utility model provides a control system, which improves the reliability of the control system.

[0006] An embodiment of the present application provides a control system applied to a power plant. The control system includes: a control device, a first distributed control system cabinet, and a second distributed control system cabinet; the control device is connected to a detection device and an execution device, both the detection device and the execution device are disposed in the power plant, and the first distributed control system cabinet and the second distributed control system cabinet are respectively connected to the control device; the control device is configured to connect the first distributed control system cabinet between the detection device and the execution device when the first distributed control system cabinet is in a normal working state, and connect the second distributed control system cabinet between the detection device and the execution device when the first distributed control system cabinet is in a target fault state; the first distributed control system cabinet is configured to receive a detection signal sent by the detection device for indicating the working environment or working state of at least some devices in the power plant and send a control signal for controlling the execution device to work when connected between the detection device and the execution device; the second distributed control system cabinet is configured to receive a detection signal sent by the detection device for indicating the working environment or working state of at least some devices in the power plant and send a control signal for controlling the execution device to work when connected between the detection device and the execution device.

[0007] In a possible implementation, the control device includes a first relay and a second relay; the coil of the first relay is connected to the first distributed control system cabinet, the normally open contact and the normally closed contact of the first relay are respectively connected to the detection device, the moving contact for attracting to the normally open contact in the first relay is connected to the first distributed control system cabinet, and the moving contact for attracting to the normally closed contact in the first relay is connected to the second distributed control system cabinet; the coil of the second relay is connected to the first distributed control system cabinet, the normally open contact of the second relay is connected to the first distributed control system cabinet, the normally closed contact of the second relay is connected to the second distributed control system cabinet, the moving contact for attracting to the normally open contact in the second relay is connected to the execution device, and the moving contact for attracting to the normally closed contact in the second relay is connected to the execution device; the first distributed control system cabinet is further configured to send a high-level life signal to the coil of the first relay and the coil of the second relay, so that the first distributed control system cabinet sends the life signal to the coil of the first relay and the coil of the second relay when in a normal working state, and stops sending the life signal when in a target fault state of power loss.

[0008] In a possible implementation, the control device includes a first relay and a second relay, and the first distributed control system cabinet includes a first automation processing module; a coil of the first relay is connected to the first distributed control system cabinet, normally open contacts and normally closed contacts of the first relay are respectively connected to the detection device, a moving contact for engaging to the normally open contact in the first relay is connected to the first distributed control system cabinet, and a moving contact for engaging to the normally closed contact in the first relay is connected to the second distributed control system cabinet; a coil of the second relay is connected to the first distributed control system cabinet, a normally open contact of the second relay is connected to the first distributed control system cabinet, a normally closed contact of the second relay is connected to the second distributed control system cabinet, a moving contact for engaging to the normally open contact in the second relay is connected to the execution device, and a moving contact for engaging to the normally closed contact in the second relay is connected to the execution device; the first distributed control system cabinet is further configured to send a high-level life signal to the coils of the first relay and the second relay through the first automation processing module, so that when the first distributed control system cabinet is in a normal working state, the life signal is sent to the coils of the first relay and the second relay, and when in a target fault state where the first automation processing module stops operating, the sending of the life signal is stopped.

[0009] In a possible implementation, the first distributed control system cabinet includes a first automation processing module and a first hardware output module, and the normally open contact of the second relay is connected to the first hardware output module; the first automation processing module is connected to the first hardware output module, and the first automation processing module is configured to output a first signal to the first hardware output module when the first distributed control system cabinet is in the normal working state, so that when the first distributed control system cabinet is in the target fault state, the output of the first signal is stopped; the first hardware output module is configured to send the life signal to the coils of the first relay and the second relay when receiving the first signal.

[0010] In a possible implementation, the first distributed control system cabinet further includes the first hardware input module. The moving contact of the first relay that is configured to be attracted to the normally open contact is connected to the first hardware input module. The first hardware input module is connected to the first automation processing module. The first hardware input module is configured to send a first communication signal to the first automation processing module when receiving a detection signal sent by the detection device through the first relay. The first automation processing module is further configured to send a second communication signal to the first hardware output module when receiving the first communication signal. The first hardware output module is further configured to send a control signal to the execution device through the second relay when receiving the second communication signal.

[0011] In a possible implementation, the first automation processing module includes one first automation processor or multiple first automation processors that are redundant to each other.

[0012] In a possible implementation, the shutdown of the first automation processing module means the shutdown of all the first automation processors included in the first automation processing module.

[0013] In a possible implementation, the second distributed control system cabinet includes a second hardware input module, a second automation processing module, and a second hardware output module. The moving contact of the first relay that is configured to be attracted to the normally closed contact is connected to the second hardware input module. The normally closed contact of the second relay is connected to the second hardware output module. The second hardware input module is connected to the second automation processing module. The second hardware input module is configured to send a third communication signal to the second automation processing module when receiving a detection signal sent by the detection device through the first relay. The second automation processing module is connected to the second hardware output module. The second automation processing module is configured to send a fourth communication signal to the second hardware output module when receiving the third communication signal. The second hardware output module is configured to send a control signal to the execution device through the second relay when receiving the fourth communication signal.

[0014] In a possible implementation, the second automation processing module includes one second automation processor or multiple second automation processors that are redundant to each other.

[0015] In a possible implementation, the moving contact for engaging the normally open contact and the moving contact for engaging the normally closed contact in the first relay are the same moving contact or different moving contacts; the moving contact for engaging the normally open contact and the moving contact for engaging the normally closed contact in the second relay are the same moving contact or different moving contacts.

[0016] According to the above technical solution, by adopting a control system including a control device, a first distributed control system cabinet, and a second distributed control system cabinet, when the first distributed control system cabinet is in a target fault state, the control device will control the disconnection of the connection between the first distributed control system cabinet and the detection device, and also control the disconnection of the connection between the first distributed control system cabinet and the execution device, and control the second distributed control system cabinet to be connected between the detection device and the execution device, so that the second distributed control system cabinet replaces the first distributed control system cabinet to receive the detection signal sent by the detection device and send a control signal to the execution device. Thus, when a fault such as power failure or internal processor shutdown occurs in the first distributed control system cabinet in the control system, the second distributed control system cabinet will replace the first distributed control system cabinet to work, normally receive the detection signal sent by the detection device, and send a control signal to the execution device according to the detection signal, so that the control system can still normally control the execution device to work. Therefore, the reliability of the control system is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 is a schematic block diagram of a control system provided by an embodiment of the present application;

[0018] Figure 2 is a schematic circuit diagram of a control system provided by an embodiment of the present application;

[0019] Figure 3 is a schematic diagram of signal transmission of a control system provided by an embodiment of the present application;

[0020] Figure 4 is a schematic diagram of signal transmission of a control system provided by another embodiment of the present application.

[0021] LIST OF REFERENCE NUMERALS:

[0022] 1: Control device 11: First relay 12: Second relay

[0023] 2: First distributed control system cabinet 21: First hardware input module 22: First automation processing module

[0024] 23: First hardware output module 3: Second distributed control system cabinet 31: Second hardware input module

[0025] 32: Second automation processing module 33: Second hardware output module 4: Detection device

[0026] 5: Execution device Detailed implementation manners

[0027] As described above, the current distributed control system usually includes a DCS cabinet. During the operation of the distributed control system, the DCS cabinet can receive signals from the detection device and generate signals for controlling the execution device to work based on these signals, so as to control the operation of the execution device. For example, in a power plant, when the temperature sensor at the production site detects that the temperature of the on-site equipment exceeds the preset temperature, the temperature sensor will send a corresponding indication signal to the DCS cabinet. According to this indication signal, the DCS cabinet will send a signal to the air conditioner installed at the production site to make the air conditioner start cooling. However, when a fault such as power failure of the DCS cabinet or shutdown of the processor inside the DCS cabinet occurs in the distributed control system, the DCS cabinet cannot output signals for controlling the execution device to work, resulting in the distributed control system being unable to normally control the operation of the execution device. Therefore, the reliability of the distributed control system is poor.

[0028] In the embodiment of the present application, by adopting a control system including a control device, a first distributed control system cabinet, and a second distributed control system cabinet, when the first distributed control system cabinet is in a target fault state, the control device will control the disconnection of the connection between the first distributed control system cabinet and the detection device, and also disconnect the connection between the first distributed control system cabinet and the execution device, and control the second distributed control system cabinet to be connected between the detection device and the execution device, so that the second distributed control system cabinet replaces the first distributed control system cabinet to receive the detection signal sent by the detection device and send a control signal to the execution device. Thus, when a fault such as power failure of the DCS cabinet or shutdown of the internal processor occurs in the first distributed control system cabinet in the control system, the second distributed control system cabinet will replace the first distributed control system cabinet to work, normally receive the detection signal sent by the detection device, and send a control signal to the execution device according to this detection signal, so that the control system can still normally control the operation of the execution device. Therefore, the reliability of the control system is improved.

[0029] The control system provided in the embodiment of the present application will be described in detail below with reference to the accompanying drawings.

[0030] Figure 1 is a schematic block diagram of a control system provided in an embodiment of the present application. This control system is applied to a power plant, such as Figure 1As shown in the figure, the control system includes: a control device 1, a first distributed control system cabinet 2, and a second distributed control system cabinet 3; the control device 1 is connected to a detection device 4 and an execution device 5, both the detection device 4 and the execution device 5 are arranged in a power plant, and the first distributed control system cabinet 2 and the second distributed control system cabinet 3 are respectively connected to the control device 1; the control device 1 is configured to connect the first distributed control system cabinet 2 between the detection device 4 and the execution device 5 when the first distributed control system cabinet 2 is in a normal working state, and connect the second distributed control system cabinet 3 between the detection device 4 and the execution device 5 when the first distributed control system cabinet 2 is in a target fault state; the first distributed control system cabinet 2 is configured to receive a detection signal sent by the detection device 4 for indicating the working environment or working state of at least some devices in the power plant and send a control signal for controlling the operation of the execution device 5 to the execution device 5 when connected between the detection device 4 and the execution device 5; the second distributed control system cabinet 3 is configured to receive a detection signal sent by the detection device 4 for indicating the working environment or working state of at least some devices in the power plant and send a control signal for controlling the operation of the execution device 5 to the execution device 5 when connected between the detection device 4 and the execution device 5.

[0031] Among them, both the first distributed control system cabinet 2 and the second distributed control system cabinet 3 are DCS cabinets, the structures of the first distributed control system cabinet 2 and the second distributed control system cabinet 3 are the same, the detection device 4 is a device for detecting the working environment or working state of at least some devices in the power plant, and the execution device 5 is a device for working according to the control signal sent by the second distributed control system cabinet 2 or the second distributed control system cabinet 3. For example, the detection device 4 can be a temperature sensor and / or a humidity sensor in the power plant, etc., and the execution device 5 can be an air conditioner and / or a humidifying device in the power plant, etc.

[0032] In the embodiment of the present application, by adopting a control system including a control device 1, a first distributed control system cabinet 2, and a second distributed control system cabinet 3, when the first distributed control system cabinet 2 is in a target fault state, the control device 1 will control the disconnection of the connection between the first distributed control system cabinet 2 and the detection device 4, and also disconnect the connection between the first distributed control system cabinet 2 and the execution device 5, and control the second distributed control system cabinet 3 to be connected between the detection device 4 and the execution device 5, so that the second distributed control system cabinet 3 replaces the first distributed control system cabinet 2 to receive the detection signal sent by the detection device 4 and send a control signal to the execution device 5. Thus, when a fault such as power failure of the cabinet or shutdown of the internal processor occurs in the first distributed control system cabinet 2 in the control system, the second distributed control system cabinet 3 will replace the first distributed control system cabinet 2 to work, normally receive the detection signal sent by the detection device 4, and send a control signal to the execution device 5 according to the detection signal, so that the control system can still normally control the execution device 5 to work. Therefore, the reliability of the control system is improved.

[0033] In addition, when the first distributed control system cabinet 2 in the control system is in a target fault state, it will not affect the normal operation in the application scenario of the control system. For example, when the first distributed control system cabinet 2 in the control system of a power plant is in a target fault state, there is no need to stop production and wait until the fault is repaired before continuing production. Compared with stopping production when the first distributed control system cabinet 2 in the control system is in a target fault state, the cost of maintaining the control system is reduced.

[0034] It should be noted that the target fault state is power failure of the first distributed control system cabinet 2 or shutdown of the first automation processing module 22 included in the first distributed control system cabinet 2.

[0035] Figure 2 is a circuit schematic diagram of the control system provided by an embodiment of the present application, as Figure 2As shown in the figure, the control device 1 includes a first relay 11 and a second relay 12; the coil of the first relay 11 is connected to the first distributed control system cabinet 2, the normally open contact and the normally closed contact of the first relay 11 are respectively connected to the detection device 4, the moving contact for attracting to the normally open contact in the first relay 11 is connected to the first distributed control system cabinet 2, and the moving contact for attracting to the normally closed contact in the first relay 11 is connected to the second distributed control system cabinet 3; the coil of the second relay 12 is connected to the first distributed control system cabinet 2, the normally open contact of the second relay 12 is connected to the first distributed control system cabinet 2, the normally closed contact of the second relay 12 is connected to the second distributed control system cabinet 3, the moving contact for attracting to the normally open contact in the second relay 12 is connected to the execution device 5, and the moving contact for attracting to the normally closed contact in the second relay 12 is connected to the execution device 5; based on this, the following introduces the above two target fault states respectively:

[0036] In a possible implementation manner, the first distributed control system cabinet 2 is further configured to send a high-level life signal to the coils of the first relay 11 and the second relay 12, so that when the first distributed control system cabinet 2 is in a normal working state, it sends a life signal to the coils of the first relay 11 and the second relay 12, and stops sending the life signal when in the target fault state of power failure.

[0037] In another possible implementation manner, the first distributed control system cabinet 2 includes a first automation processing module 22. Based on this, the first distributed control system cabinet 2 is further configured to send a high-level life signal to the coils of the first relay 11 and the second relay 12 through the first automation processing module 22, so that when the first distributed control system cabinet 2 is in a normal working state, it sends a life signal to the coils of the first relay 11 and the second relay 12, and stops sending the life signal when in the target fault state of the first automation processing module 22 shutting down.

[0038] Among them, the specific voltage value of the life signal can be set according to the actual situation. For example, the voltage of the life signal is equal to 5, 12, 24 or 36 volts, etc. The embodiments of the present application do not limit this.

[0039] Figure 3 is a signal transmission schematic diagram of the control system provided by an embodiment of the present application. As Figure 3 shown, when the first distributed control system cabinet 2 is in a normal working state, the first distributed control system cabinet 2 outputs a life signal to the coils of the first relay 11 and the second relay 12 (as Figure 3As shown by the arrows pointing to the first relay 11 and the second relay 12, the coils of the first relay 11 and the second relay 12 are energized. At this time, the moving contact for attracting to the normally open contact in the first relay 11 attracts to the normally open contact of the first relay 11, so that the first distributed control system cabinet 2 is connected to the detection device 4. At the same time, the moving contact for attracting to the normally closed contact in the first relay 11 separates from the normally closed contact of the first relay 11, so that the second distributed control system cabinet 3 is in a disconnected state from the detection device 4; the moving contact for attracting to the normally open contact in the second relay 12 attracts to the normally open contact of the second relay 12, so that the first distributed control system cabinet 2 is connected to the execution device 5. At the same time, the moving contact for attracting to the normally closed contact in the second relay 12 separates from the normally closed contact of the second relay 12, so that the second distributed control system cabinet 3 is in a disconnected state from the execution device 5.

[0040] Therefore, as Figure 3 shown, during the normal operation of the first distributed control system cabinet 2, the first distributed control system cabinet 2 is connected between the detection device 4 and the execution device 5, and both the detection device 4 and the execution device 5 are in a disconnected state from the second distributed control system cabinet 3.

[0041] Figure 4 is a signal transmission schematic diagram of the control system provided by another embodiment of the present application. As Figure 4 shown, when the first distributed control system cabinet 2 is in the target fault state of power failure or in the target fault state of the first automation processing module 22 stopping, the first distributed control system cabinet 2 stops outputting the life signal to the coils of the first relay 11 and the second relay 12, which can also be equivalently regarded as outputting a low-level signal to the coils of the first relay 11 and the second relay 12, so that the coils of the first relay 11 and the second relay 12 are not energized. At this time, the moving contact for attracting to the normally open contact in the first relay 11 separates from the normally open contact of the first relay 11, so that the connection between the first distributed control system cabinet 2 and the detection device 4 is disconnected. At the same time, the moving contact for attracting to the normally closed contact in the first relay 11 attracts to the normally closed contact of the first relay 11, so that the second distributed control system cabinet 3 is connected to the detection device 4; the moving contact for attracting to the normally open contact in the second relay 12 separates from the normally open contact of the second relay 12, so that the connection between the first distributed control system cabinet 2 and the execution device 5 is disconnected. At the same time, the moving contact for attracting to the normally closed contact in the second relay 12 attracts to the normally closed contact of the second relay 12, so that the second distributed control system cabinet 3 is connected to the execution device 5.

[0042] Therefore, as Figure 4As shown, during the process when the first distributed control system cabinet 2 is in the target fault state, the second distributed control system cabinet 3 is connected between the detection device 4 and the execution device 5, and both the detection device 4 and the execution device 5 are in a disconnected state from the first distributed control system cabinet 2.

[0043] In the embodiment of the present application, by adopting the control device 1 including the first relay 11 and the second relay 12, during the process when the first distributed control system cabinet 2 is in the normal working state, the first distributed control system cabinet 2 can be connected between the detection device 4 and the execution device 5, and during the process when the first distributed control system cabinet 2 is in the target fault state, the second distributed control system cabinet 3 can be connected between the detection device 4 and the execution device 5. Thus, the control device 1 can control the working states of the first relay 11 and the second relay 12 through the same life signal, so as to realize the control of the connection states of the first distributed control system cabinet 2 and the second distributed control system cabinet 3 between the detection device 4 and the execution device 5, with a simple structure and relatively low cost.

[0044] In a possible implementation manner, as Figure 3 and Figure 4 shown, the first distributed control system cabinet 2 includes a first automation processing module 22 and a first hardware output module 23, and the normally open contact of the second relay 12 is connected to the first hardware output module 23; the first automation processing module 22 is connected to the first hardware output module 23, and the first automation processing module 22 is configured to output a first signal to the first hardware output module 23 when the first distributed control system cabinet 2 is in the normal working state, so as to stop outputting the first signal when the first distributed control system cabinet 2 is in the target fault state. For example, when the first distributed control system cabinet 2 is in the normal working state, a logic signal indicating the constant 1 is output from the first automation processing module 22 as the first signal, and when the first distributed control system cabinet 2 is in the target fault state, the first signal is no longer output; the first hardware output module 23 is configured to send a life signal to the coils of the first relay 11 and the second relay 12 when receiving the first signal.

[0045] In an embodiment of the present application, by using the first distributed control system cabinet 2 including the first automation processing module 22 and the first hardware output module 23, the first automation processing module 22 can generate a first signal to control whether the first hardware output module 23 outputs a life signal. Thus, by setting a relatively simple first signal generation logic in the first distributed control system cabinet 2, it is possible to control whether the life signal is output, and further control the connection status between the first distributed control system cabinet 2 and the second distributed control system cabinet 3 between the detection device 4 and the execution device 5. Without adding too many modules in the first distributed control system cabinet 2, it is possible to control whether the life signal is output, reducing the hardware development cost.

[0046] In a possible implementation, as Figure 3 and Figure 4 shown, the first distributed control system cabinet 2 further includes a first hardware input module 21. The moving contact of the first relay 11 for attracting to the normally open contact is connected to the first hardware input module 21. The first hardware input module 21 is connected to the first automation processing module 22. The first hardware input module 21 is configured to send a first communication signal to the first automation processing module 22 when receiving a detection signal sent by the detection device 4 through the first relay 11. The first automation processing module 22 is further configured to send a second communication signal to the first hardware output module 23 when receiving the first communication signal. The first hardware output module 23 is further configured to send a control signal to the execution device 5 through the second relay 12 when receiving the second communication signal.

[0047] When the first distributed control system cabinet 2 is in a normal working state, as Figure 3 shown, since the coil of the first relay 11 is energized, the first hardware input module 21 can receive the detection signal sent by the detection device 4 through the first relay 11, and can generate a first communication signal according to the detection signal, and then send the first communication signal to the first automation processing module 22. After receiving the first communication signal, the first automation processing module 22 generates a corresponding second communication signal according to the first communication signal, and sends the second communication signal to the first hardware output module 23, so that the first hardware output module 23 generates a corresponding control signal and sends the control signal to the execution device 5 through the second relay 12. When the first distributed control system cabinet 2 is in a target fault state, as Figure 4As shown, since the coil of the first relay 11 is not energized, the first hardware input module 21 cannot receive the detection signal sent by the detection device 4 through the first relay 11. As a result, the first automation processing module 22 cannot normally receive the first communication signal, nor will it generate a second communication signal to be sent to the first hardware output module 23 based on the first communication signal, so that the first hardware output module 23 will not generate a control signal to be sent to the execution device 5.

[0048] In the embodiment of the present application, by adopting the first distributed control system cabinet 2 including the first hardware input module 21, the first automation processing module 22, and the first hardware output module 23, it is possible to implement a solution in which when the first distributed control system cabinet 2 is in a normal working state, the first distributed control system cabinet 2 outputs a control signal according to the detection signal. The structure is simple and easy to implement.

[0049] In a possible implementation manner, the first automation processing module 22 includes a first automation processor or multiple first automation processors that are redundant to each other. Based on the fact that the first distributed control system cabinet 2 includes the first hardware input module 21, the first automation processing module 22, and the first hardware output module 23, the input end of the first automation processor is connected to the first hardware input module 21, and the output end of the first automation processor is connected to the first hardware output module 23.

[0050] When the first automation processing module 22 includes multiple first automation processors that are redundant to each other, one first automation processor in the first automation processing module 22 is in a working state at the same time, and the connection between the other first automation processors other than this first automation processor and the first hardware input module 21 can be disconnected, and / or the connection between the other first automation processors other than this first automation processor and the first hardware output module 23 can be disconnected.

[0051] In the embodiment of the present application, if the first automation processing module 22 includes a first automation processor, the structure of the first automation processing module 22 is relatively simple and easy to implement; if the first automation processing module 22 includes multiple first automation processors that are redundant to each other, the first automation processing module 22 can implement a redundant design of the first automation processor, reducing the possibility that the control system cannot work normally due to the failure of the first automation processor and improving the reliability of the first automation processing module 22.

[0052] In a possible implementation manner, based on the fact that the first automation processing module 22 includes a first automation processor or multiple first automation processors that are redundant to each other, the shutdown of the first automation processing module 22 means the shutdown of all the first automation processors included in the first automation processing module 22.

[0053] In a possible implementation, as Figure 4 shown, the second distributed control system cabinet 3 includes a second hardware input module 31, a second automation processing module 32, and a second hardware output module 33. The moving contact of the first relay 11 that is used to be attracted to the normally closed contact is connected to the second hardware input module 31, and the normally closed contact of the second relay 12 is connected to the second hardware output module 33. The second hardware input module 31 is connected to the second automation processing module 32. The second hardware input module 31 is configured to send a third communication signal to the second automation processing module 32 when receiving a detection signal sent by the detection device 4 through the first relay 11. The second automation processing module 32 is connected to the second hardware output module 33. The second automation processing module 32 is configured to send a fourth communication signal to the second hardware output module 33 when receiving the third communication signal. The second hardware output module 33 is configured to send a control signal to the execution device 5 through the second relay 12 when receiving the fourth communication signal.

[0054] When the first distributed control system cabinet 2 is in a target fault state, as Figure 4 shown, since the coil of the first relay 11 is not powered on, the second hardware input module 31 can receive the detection signal sent by the detection device 4 through the first relay 11, generate a third communication signal according to the detection signal, and then send the third communication signal to the second automation processing module 32. After receiving the third communication signal, the second automation processing module 32 generates a corresponding fourth communication signal according to the third communication signal, and sends the fourth communication signal to the second hardware output module 33, so that the second hardware output module 33 generates a corresponding control signal and sends the control signal to the execution device 5 through the second relay 12.

[0055] In the embodiment of the present application, by adopting the second distributed control system cabinet 3 including the second hardware input module 31, the second automation processing module 32, and the second hardware output module 33, a solution can be realized that when the first distributed control system cabinet 2 is in a target fault state, the second distributed control system cabinet 3 outputs a control signal according to the detection signal. The structure is simple and easy to implement.

[0056] Optionally, based on the same structures of the first distributed control system cabinet 2 and the second distributed control system cabinet 3, the second hardware input module 31 has the same structure as the first hardware input module 21, the second automation processing module 32 has the same structure as the first automation processing module 22, and the first hardware output module 23 and the second hardware output module 33 have the same structure.

[0057] In a possible implementation, as Figure 2As shown in the figure, the second automation processing module 32 includes a second automation processor or multiple redundant second automation processors. Based on the second distributed control system cabinet 3, it includes a second hardware input module 31, a second automation processing module 32, and a second hardware output module 33. The input end of the second automation processor is connected to the second hardware input module 31, and the output end of the second automation processor is connected to the second hardware output module 33.

[0058] When the second automation processing module 32 includes multiple redundant second automation processors, one second automation processor in the second automation processing module 32 is in the working state at the same time. The connection between other first automation processors outside this second automation processor and the second hardware input module 31 can be disconnected, and / or the connection between other first automation processors outside this second automation processor and the second hardware output module 33 can be disconnected.

[0059] In the embodiment of this application, if the second automation processing module 32 includes a single second automation processor, the structure of the second automation processing module 32 is relatively simple and easy to implement; if the second automation processing module 32 includes multiple redundant second automation processors, the second automation processing module 32 can achieve redundant design of the second automation processor, reducing the possibility that the control system cannot work properly due to the failure of the second automation processor, and improving the reliability of the second automation processing module 32.

[0060] Optionally, both the above-mentioned first automation processor and second automation processor can be automation processors (Automation processor, AP).

[0061] In a possible implementation manner, the moving contact in the first relay 11 for attracting to the normally open contact and the moving contact in the first relay 11 for attracting to the normally closed contact are the same moving contact or different moving contacts; the moving contact in the second relay 12 for attracting to the normally open contact and the moving contact in the second relay 12 for attracting to the normally closed contact are the same moving contact or different moving contacts.

[0062] Therefore, in the control device 1 in the embodiment of this application, the number of moving contacts in the first relay 11 and the second relay 12 is not limited, so that a control system can be implemented based on multiple types of relays, facilitating the design and assembly of the control system.

[0063] Optionally, the control signal can be a digital signal. For example, the control signal is a switching signal of 24 volts or 0 volts;

[0064] The number of detection signals and control signals can both be one or more, and this application embodiment does not limit this. For example, inFigure 3 And Figure 4 In the example, the number of detection signals and control signals is both 2.

[0065] It should be noted that, in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the presence of additional identical elements in the process, method, article or device comprising the element.

[0066] Not all steps and modules in the above-mentioned processes and system structure diagrams are necessary, and some steps or modules can be ignored according to actual needs. The execution order of each step is not fixed and can be adjusted according to needs. The system structures described in the above-mentioned embodiments can be physical structures or logical structures, that is, some modules may be implemented by the same physical entity, or some modules may be implemented separately by multiple physical entities, or some components in multiple independent devices may be jointly implemented.

[0067] In the above embodiments, the hardware modules can be implemented mechanically or electrically. For example, a hardware module can include permanently dedicated circuits or logic (such as a dedicated processor, FPGA or ASIC) to complete the corresponding operations. The hardware module can also include programmable logic or circuits (such as a general-purpose processor or other programmable processor), which can be temporarily set by software to complete the corresponding operations. The specific implementation method (mechanical method, or dedicated permanent circuit, or temporarily set circuit) can be determined based on cost and time considerations.

[0068] The above has detailedly demonstrated and described the present utility model through the drawings and preferred embodiments. However, the present utility model is not limited to these disclosed embodiments. Based on the above-mentioned multiple embodiments, those skilled in the art can know that more embodiments of the present utility model can be obtained by combining the code review means in the above different embodiments, and these embodiments are also within the protection scope of the present utility model.

Claims

1. A control system, characterized in that, Applied to a power plant, the control system includes: a control device (1), a first distributed control system cabinet (2), and a second distributed control system cabinet (3); The control device (1) is connected to a detection device (4) and an execution device (5). The detection device (4) and the execution device (5) are both arranged in the power plant. The first distributed control system cabinet (2) and the second distributed control system cabinet (3) are respectively connected to the control device (1); The control device (1) is configured to connect the first distributed control system cabinet (2) between the detection device (4) and the execution device (5) when the first distributed control system cabinet (2) is in a normal working state, and connect the second distributed control system cabinet (3) between the detection device (4) and the execution device (5) when the first distributed control system cabinet (2) is in a target fault state; The first distributed control system cabinet (2) is configured to receive a detection signal sent by the detection device (4) for indicating the working environment or working state of at least part of the devices in the power plant and send a control signal for controlling the operation of the execution device (5) to the execution device (5) when connected between the detection device (4) and the execution device (5); The second distributed control system cabinet (3) is configured to receive a detection signal sent by the detection device (4) for indicating the working environment or working state of at least part of the devices in the power plant and send a control signal for controlling the operation of the execution device (5) to the execution device (5) when connected between the detection device (4) and the execution device (5).

2. The control system according to claim 1, wherein The control device (1) includes a first relay (11) and a second relay (12); The coil of the first relay (11) is connected to the first distributed control system cabinet (2). The normally open contact and the normally closed contact of the first relay (11) are respectively connected to the detection device (4). The moving contact for attracting to the normally open contact in the first relay (11) is connected to the first distributed control system cabinet (2). The moving contact for attracting to the normally closed contact in the first relay (11) is connected to the second distributed control system cabinet (3); The coil of the second relay (12) is connected to the first distributed control system cabinet (2). The normally open contact of the second relay (12) is connected to the first distributed control system cabinet (2). The normally closed contact of the second relay (12) is connected to the second distributed control system cabinet (3). The moving contact for attracting to the normally open contact in the second relay (12) is connected to the execution device (5). The moving contact for attracting to the normally closed contact in the second relay (12) is connected to the execution device (5); The first distributed control system cabinet (2) is further configured to send a high-level life signal to the coils of the first relay (11) and the second relay (12), so that when the first distributed control system cabinet (2) is in a normal working state, the life signal is sent to the coils of the first relay (11) and the second relay (12), and the life signal is stopped from being sent when in a target fault state of power failure.

3. The control system according to claim 1, wherein The control device (1) includes a first relay (11) and a second relay (12), and the first distributed control system cabinet (2) includes a first automation processing module (22); The coil of the first relay (11) is connected to the first distributed control system cabinet (2). The normally open contact and the normally closed contact of the first relay (11) are respectively connected to the detection device (4). The moving contact of the first relay (11) for attracting to the normally open contact is connected to the first distributed control system cabinet (2), and the moving contact of the first relay (11) for attracting to the normally closed contact is connected to the second distributed control system cabinet (3); The coil of the second relay (12) is connected to the first distributed control system cabinet (2). The normally open contact of the second relay (12) is connected to the first distributed control system cabinet (2). The normally closed contact of the second relay (12) is connected to the second distributed control system cabinet (3). The moving contact of the second relay (12) for attracting to the normally open contact is connected to the execution device (5), and the moving contact of the second relay (12) for attracting to the normally closed contact is connected to the execution device (5); The first distributed control system cabinet (2) is further configured to send a high-level life signal to the coils of the first relay (11) and the second relay (12) through the first automation processing module (22), so that when the first distributed control system cabinet (2) is in a normal working state, the life signal is sent to the coils of the first relay (11) and the second relay (12), and the life signal is stopped from being sent when in a target fault state where the first automation processing module (22) stops operating.

4. The control system according to claim 2 or 3, characterized in that, The first distributed control system cabinet (2) includes a first automation processing module (22) and a first hardware output module (23), and the normally open contact of the second relay (12) is connected to the first hardware output module (23); The first automation processing module (22) is connected to the first hardware output module (23). The first automation processing module (22) is configured to output a first signal to the first hardware output module (23) when the first distributed control system cabinet (2) is in the normal working state, so that the first signal is stopped from being output when the first distributed control system cabinet (2) is in the target fault state; When the first hardware output module (23) receives the first signal, it is configured to send the life signal to the coils of the first relay (11) and the second relay (12).

5. The control system according to claim 4, wherein The first distributed control system cabinet (2) further includes a first hardware input module (21). The moving contact of the first relay (11) for attracting to the normally open contact is connected to the first hardware input module (21). The first hardware input module (21) is connected to the first automation processing module (22). When the first hardware input module (21) receives the detection signal sent by the detection device (4) through the first relay (11), it is configured to send a first communication signal to the first automation processing module (22). When the first automation processing module (22) receives the first communication signal, it is further configured to send a second communication signal to the first hardware output module (23). When the first hardware output module (23) receives the second communication signal, it is further configured to send a control signal to the execution device (5) through the second relay (12).

6. The control system according to claim 4, characterized in that, The first automation processing module (22) includes a first automation processor or multiple mutually redundant first automation processors.

7. The control system according to claim 6, characterized in that, The shutdown of the first automation processing module (22) means the shutdown of all the first automation processors included in the first automation processing module (22).

8. The control system according to claim 2 or 3, characterized in that The second distributed control system cabinet (3) includes a second hardware input module (31), a second automation processing module (32), and a second hardware output module (33). The moving contact of the first relay (11) for attracting to the normally closed contact is connected to the second hardware input module (31), and the normally closed contact of the second relay (12) is connected to the second hardware output module (33). The second hardware input module (31) is connected to the second automation processing module (32). When the second hardware input module (31) receives the detection signal sent by the detection device (4) through the first relay (11), it is configured to send a third communication signal to the second automation processing module (32). The second automation processing module (32) is connected to the second hardware output module (33). When the second automation processing module (32) receives the third communication signal, it is configured to send a fourth communication signal to the second hardware output module (33). When the second hardware output module (33) receives the fourth communication signal, it is configured to send a control signal to the execution device (5) through the second relay (12).

9. The control system according to claim 8, wherein The second automation processing module (32) includes a second automation processor or multiple mutually redundant second automation processors.

10. The control system according to claim 2, wherein The moving contact for engaging the normally open contact in the first relay (11) and the moving contact for engaging the normally closed contact in the first relay (11) are the same moving contact or different moving contacts; the moving contact for engaging the normally open contact in the second relay (12) and the moving contact for engaging the normally closed contact in the second relay (12) are the same moving contact or different moving contacts.