Electronically controllable and testable turbine release system

Abstract

A trigger control system (100) for controlling the operation of a controlled steam valve (140) by means of fluid pressure provided from a fluid pressure source, comprising: a fluid pressure line (150, 150a, 150b) adapted to be connected between the fluid pressure source and the controlled steam valve (140), wherein the steam valve (140) is caused to close when the pressure in the fluid pressure line (150b) at a trigger input of the steam valve (140) drops to a predetermined or significant value below the system pressure; a low-pressure fluid return line (160); a drain circuit (130) comprising a drain valve system hydraulically connected between the fluid pressure line (150, 150b) and the low-pressure fluid return line (160), the drain valve system being operable to hydraulically and controllably connect the fluid pressure line (150, 150b) to the low-pressure fluid return line (160) to reduce the fluid pressure within the fluid pressure line (150, 150b); and a blocking circuit (120) comprising: a first valve (440) and a second valve (470) arranged in series upstream of the discharge circuit (130) in the fluid pressure line (150, 150a, 150b), wherein both the first valve (440) and the second valve (470) are operable to separate the fluid pressure line (150a) upstream of the blocking circuit (120) from the fluid pressure line (150b) downstream of the blocking circuit (120); and a first (420) and a second (450) electronically controlled actuator hydraulically connected to the first (440) and second (470) valves for controlling the operation of the first (440) and second (470) valves, wherein the first (420) and second (450) electronically controlled actuator is configured to receive control signals for controlling the operation of the first (440) and second (470) valves.

Description

TECHNICAL APPLICATION

[0001] The present patent relates generally to an electronically controllable and testable tripping system that can be used, for example, in connection with a turbine, and more particularly in connection with an apparatus and method for controlling and testing turbine trip control components while the turbine is operating in a manner that does not prevent tripping of the turbine during testing.

[0002] The invention relates to a trigger control system according to claim 1, claim 13 and an integrated trigger system according to claim 29. BACKGROUND OF THE INVENTION

[0003] Hydraulic control systems are widely used to control power generation machines such as turbines. Common hydraulic control systems may include a trip control system or other protection system configured to stop the turbine (i.e., trip the turbine) when an abnormal operating condition or other system malfunction is detected. However, in the worst case, improper functioning of one or more components of the trip control system may prevent the turbine from tripping in emergency situations, potentially resulting in significant damage to the turbine and serious incidents such as injury to plant personnel.

[0004] Existing emergency trip systems, such as the mechanical emergency trip system manufactured by General Electric Company (GE), incorporate various components (e.g., valves, regulators, locking elements, ports, etc.) interconnected via tubing to form a mechanically actuated trip system. In a purely mechanical version, the locking and venting functions are performed by non-redundant, hydraulically actuated valves. In some cases, however, this system has been retrofitted with electronically controlled, redundant vent valves that perform a venting action to relieve or remove pressure from a steam valve trip circuit that operates the turbine based on a two-out-of-three selection circuit. However, once a venting action has occurred, GE's mechanical trip system requires shutting off the flow of hydraulic fluid to the steam valve control port.Such a mechanical system requires a large, complex structure with separate parts that can be costly to manufacture. Furthermore, GE's mechanical trip system requires an operator to manually test the locking components. Furthermore, the mechanical nature of GE's mechanical trip system's locking system requires an operator to travel to the turbine site, which is undesirable.

[0005] While automatic trip systems have been developed that replace the mechanical governor and associated linkages with a governor that automatically performs a tripping operation, these types of automatic trip systems typically involve individual, isolated valves or are limited to the bleed functionality of the trip system. In particular, as described above with respect to the retrofit of a GE turbine system, one known design utilizes a group of three control valves connected to a controller to perform a two-out-of-three selection to perform a bleed function within a turbine trip system.In this configuration, each of the control valves actuates two DIN valves that are interconnected in such a way that actuation of any two of the three control valves ensures that a hydraulic path is created through a group of two of the DIN valves, releasing pressure through the steam valve's trip port, which supplies steam to the turbine. The loss of pressure at the steam valve's trip port closes the steam valve and trips or stops the turbine. In this configuration, the failure of one of the control valves does not prevent a trip from being performed when desired or required, and accordingly does not result in a trip when such a trip is not desired. Furthermore, because of the two-out-of-three selection scheme, the individual components of this bleed circuit can be tested while the turbine is running without tripping.

[0006] Unfortunately, the locking circuit, or the locking portion of the trip control system, represents a critical part of the control circuit. There is currently no way to provide redundancy within the locking circuit to ensure proper functioning if one of its components fails. Furthermore, there is no way to electronically test or actuate the locking circuit. Indeed, the locking circuit of this known turbine trip control system currently requires manual actuation, which is difficult because it requires an operator to approach the locking circuit components (generally located near the turbine) and actually actuate them manually after the venting portion of the tripping process has occurred.Accordingly, due to the manually operated components, there is no easy way to remotely check the function of the locking part of the trigger control system.

[0007] A device of the type mentioned at the beginning is also known from DE 31 38 561 A1, EP 0 430 089 A1 and DE 24 11 525 A. SUMMARY

[0008] The problems addressed above are solved by a trigger control system according to claim 1 and claim 13 and an integrated trigger system according to claim 29.

[0009] In particular, the problems addressed above are solved by a trip control system, for example for use in turbines, which includes a blocking circuit with two or more redundant blocking valves connected in series within a pressure feed line to block the inflow of hydraulic fluid within the pressure feed line, and a drain circuit with two or more drain valves connected in parallel between the trip line and a return flow or drain line for draining the hydraulic fluid from the trip. The blocking valves and the drain valves are actuated by one or more control valves controlled by a process or safety controller that initiates a trip by first performing a drain function by at least one of the drain valves and then performing a blocking function by at least one of the blocking valves.In addition, pressure sensors are located at multiple locations within the trip control system and transmit feedback signals to the controller, allowing the controller to individually test each of the lock and vent valves while the turbine is running, without actually tripping the turbine. In this way, the trip control system ensures a reliable tripping process by providing redundant lock and vent functionality and allowing testing of individual components of the lock and vent circuits while the turbine is online and running, without preventing the turbine from tripping during testing, if necessary. Furthermore, the trip control circuit can be integrated into a small, single package that can be easily connected to a power plant. existing turbine systems, allowing existing turbine trigger control systems to be retrofitted or extended at relatively low cost. BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a functional block diagram of one embodiment of a hydraulic control system for a turbine including a bleed circuit and a lock circuit; Fig. 2 is a functional block diagram of an embodiment of the Fig. 1 shown drain circuit; Fig. 3 is a more detailed schematic drawing of an embodiment of the Fig. 1 and Fig. 2 shown discharge circuit; Fig. 4 is a functional block diagram of an embodiment of the Fig. 1 shown blocking circuit; Fig. 5 is a more detailed schematic drawing of an embodiment of the Fig. 1 and Fig. 4 shown blocking circuit; Fig. Figure 6 is a detailed schematic of a trip control circuit in which the drain circuit and the blocking circuit are arranged according to Fig. 1 are hydraulically connected to each other via a distributor and form an integrated, electronically controlled, hydraulic release unit; and Fig. 7A and Fig. 7B are three-dimensional perspective views of a manifold with various components of a bleed circuit and a lock circuit removably mounted to the manifold to form an integrated trip circuit. DETAILED DESCRIPTION

[0010] Fig. 1 shows a trip control system 100 for use in conjunction with a turbine 110, including a lockout circuit 120 implementing internally (automatically) actuated and testable lockout functionality, in conjunction with a vent circuit 130 implementing electronically actuated and testable vent functionality, which together control the operation of a steam valve 140 to ensure reliable tripping of the turbine 110 during a safety trip. Generally speaking, the lockout circuit 120 and the vent circuit 130 include redundant lockout and vent functionality, allowing the components of the lockout circuit 120 and the vent circuit 130 to be tested while the turbine 110 is online and operating, with this testing being performed such that a tripping event is not prevented during testing of any of the components of the lockout circuit 120 or the vent circuit 130.Furthermore, the lock circuit 120 and the bleed circuit 130 can be integrated into a small, single package that can be easily mounted on existing turbine trip control systems, allowing these existing systems to be retrofitted with the enhanced, redundant, and testable lock and bleed functionality described herein.

[0011] As in Fig. 1, a line 150 carries hydraulic fluid from a fluid or pressure source (not shown) through the barrier circuit 120 and the vent circuit 130, generally supplying control pressure to individual valves within those circuits. Additionally, a line 150a is connected to the hydraulic fluid source upstream of the barrier circuit 120 and, depending on the operation of the barrier circuit 120, carries hydraulic fluid to a line 150b downstream of the barrier circuit 120. The line 150b leads through the vent circuit 130 to a control input (trigger) of the steam valve 140 to control the operation of the steam valve 140. Generally speaking, a pressure above a certain amount within line 150b at the inlet of steam valve 140 keeps this steam valve 140 open, allowing steam to flow into turbine 110 via line 155, thereby enabling or causing the turbine 110 to operate.In addition, a backflow hydraulic or pressure line 160, which is a low-pressure fluid line, connects the steam valve 140 to a backflow reservoir 162 via the drain circuit 130, while a drain line 170, which is also a low-pressure fluid line, connects the drain circuit 130 and the barrier circuit 120 to a hydraulic fluid drain 172. If desired, the fluid drain 172 and the backflow reservoir 162 can be the same container, commonly referred to as a tank, so that the low-pressure fluid lines 160 and 170 are hydraulically connected to each other via the tank.

[0012] As in Fig. 1, a controller 145, which may be a safety controller, a process controller, or any other desired type of controller and may be implemented as a decentralized controller based on DCS technology, PLC technology, or any other type of control technology, is operatively connected to both the lock circuit 120 and the vent circuit 130. During operation, the controller 145 is configured to automatically actuate the vent circuit 130, so that the lock circuit 120 automatically closes via the pressure loss in the pilot passage from the trip pressure line 150b, causing the turbine 110 to trip.In addition, the controller 145 is configured to receive pressure readings from the lock circuit 120 and the bleed circuit 130 so that the controller 145 is able to perform tests on the individual components of the lock circuit 120 and the bleed circuit 130 and thus test the function of the components of these circuits.

[0013] It should be noted that the controller 145 may be remote from the lock circuit 120 and the vent circuit 130 or installed locally. Furthermore, the controller 145 may include a single control unit that controls the lock circuit 120 and the vent circuit 130, or the controller 145 may include multiple control units, such as distributed control units, each configured to separately operate the lock circuit 120 and the vent circuit 130. Generally speaking, the controller 145 has a conventional structure and configuration, so these will not be discussed further here.

[0014] During normal operation of the turbine 110, which may be configured to drive, for example, a power generator, pressurized hydraulic fluid (e.g., hydraulic oil) is transported from a hydraulic fluid source (e.g., a pump) via line 150 into a lock circuit 120 and the drain circuit 130, and via the hydraulic fluid path consisting of lines 150a and 150b to the steam valve 140. The hydraulic fluid may include any suitable type of hydraulic material capable of flowing in the hydraulic paths 150, 150a, and 150b, as well as in the return path 160 and the drain line 170. As previously mentioned, the steam valve 140 enables or permits the flow of steam to the turbine 110 when the pressure in the fluid line 150b at the trigger inlet to the steam valve 140 is at a predetermined system pressure.However, if the pressure in the fluid line 150b at the trigger inlet of the steam valve 140 drops to a predetermined or significant value below the system pressure, the steam valve 140 closes, resulting in the shutdown of the turbine 110.

[0015] Generally speaking, to cause turbine 110 to trip, controller 145 first actuates bleed circuit 130 to vent fluid from feed line 150b at the trip inlet of steam valve 140 to return line 160, thereby removing system pressure from the trip inlet of steam valve 140 and causing turbine 110 to trip. After turbine 110 has tripped, lock circuit 120 is automatically actuated due to the loss of trip pressure 150b, blocking the flow of hydraulic fluid within feed line 150a to prevent the continuous flow of hydraulic fluid from feed line 150a to 150b while turbine 110 is in the tripped state.Furthermore, as will be explained in more detail below, during normal operation of the turbine 110, the controller 145 can control various components of the vent circuit 130 and the lock circuit 120 to test these components without causing the turbine 110 to trip. This test functionality makes it possible to periodically test the components of the trip system 100 during operation of the turbine 110 and replace them if necessary without having to shut down the turbine 110 or take them offline. This test functionality also makes it possible to detect failed components of the lock circuit and the vent circuit 120 or 130 and replace or repair them before a trip actually occurs, thus ensuring reliable trip operation when needed.

[0016] In one embodiment, the controller 145 actuates the bleed circuit 130 to cause a trip of the turbine 110 in response to the detection of one or more abnormal conditions or malfunctions within the plant in which the turbine 110 is located. To ensure that a trip occurs even if one or more components belonging to the bleed circuit 130 are not operating properly, the bleed circuit 130 preferably includes a plurality of redundant valve systems forming redundant bleed fluid paths connected in parallel between the line 150b and the return line 160, wherein actuation of one of the parallel bleed fluid paths is sufficient to remove the trip pressure from the trip input of the steam valve 140 and thereby cause a trip of the turbine 110.In one embodiment, the vent circuit 130 may include three such valve systems, where each of the valve systems may include an actuating valve that controls two trigger valves. In this case, as described with reference to FIG. Fig. 2, actuation of two or more of the valve systems creates at least one vent fluid path between line 150b and return line 160, while actuation of only one of the valve systems does not create a vent path between line 150b and return line 160. This configuration is known as a two-out-of-three selection system and ensures that a malfunction of any one of the valve systems cannot cause a trip if the controller 145 does not attempt to cause a trip, while further ensuring that a malfunction of any one of the valve systems does not prevent a trip if the controller 145 does attempt to cause a trip.

[0017] Fig. 2 is a more detailed representation of a functional block diagram of an embodiment of the drain circuit 130 of Fig. 1. In particular, the bleed circuit 130 includes a plurality of redundant trip branches 200, 210, and 220 through which hydraulic fluid can flow from the hydraulic fluid path 150b to the return flow path 160 during a trip event, so that the pressure in the line 150b at the trip inlet of the steam valve 140 is removed or vented to stop the operation of the turbine 110. As in Fig. 2, each of the release branches 200-220 includes two valves 230 and 280, 240 and 260, or 250 and 270, wherein, in the case that both release valves of a single branch are open, a drain path is created and hydraulic fluid can flow from the hydraulic fluid path 150b to the return flow path 160. However, if one of the two valves of a single branch 200-220 is closed, the flow of hydraulic fluid from the hydraulic fluid path 150b to the return flow path 160 is blocked or prevented by the respective branch. As can be seen from Fig. 2, the plurality of trigger valves 230-280 include a first trigger valve (A1) 230, a second trigger valve (A2) 240, a third trigger valve (B1) 250, a fourth trigger valve (B2) 260, a fifth trigger valve (C1) 270, and a sixth trigger valve (C2) 280.

[0018] In one embodiment, each of the first through sixth trigger valves 230-280 may be a two-way DIN cartridge valve having a pair of operative ports (A, B) and a pilot port (X), the operative ports (A, B) being normally biased closed by a spring or other mechanical device (not shown). Hydraulic fluid may flow through the operative ports (A, B) of the trigger valves 230-280 in response to the loss of pilot pressure at the pilot port. DIN cartridge valves are well known in the art and therefore will not be described in detail here. In any event, as will be shown, hydraulic fluid may flow from port A to port B of the respective valve when one of the trigger valves 230-280 is in the open position.In contrast, the pilot pressure actuated release valve 230-280 locks the valve in the closed position when the control port (X) of one of the release valves 230-280 is actuated with control pressure, so that the flow of hydraulic fluid between the operational ports (A, B) of the respective valve is shut off or prevented.

[0019] As in Fig. 2, the first trigger branch 200 includes the first trigger valve (Al) 230 and the sixth trigger valve (C2) 280, which are connected between the hydraulic fluid path 150b and the return flow path 160. In particular, port A of the first trigger valve (Al) 230 is hydraulically connected to the hydraulic fluid path 150b via a hydraulic line 282; port B of the first trigger valve (Al) 230 is hydraulically connected to port A of the sixth trigger valve (C2) 280 via hydraulic line 283, and port B of the sixth trigger valve (C2) 280 is hydraulically connected to the return flow path 160 via hydraulic line 284.

[0020] As in Fig. 2, the second trigger branch 210 includes the second trigger valve (A2) 240 and the fourth trigger valve (B2) 260, which are connected between the hydraulic fluid path 150b and the return flow path 160. In particular, port A of the second trigger valve (A2) 240 is hydraulically connected to the hydraulic fluid path 150b via a hydraulic line 285; port B of the second trigger valve (A2) 240 is hydraulically connected to port A of the fourth trigger valve (B2) 260 via hydraulic line 286, and port B of the fourth trigger valve (B2) 260 is hydraulically connected to the return flow path 160 via hydraulic line 287.

[0021] Furthermore, the third trigger branch 220 includes the third trigger valve (Bl) 250 and the fifth trigger valve (Cl) 270, which are connected between the hydraulic fluid path 150b and the return flow path 160. In particular, port A of the third trigger valve (Bl) 250 is hydraulically connected to the hydraulic fluid path 150b via a hydraulic line 288; port B of the third trigger valve (Bl) 250 is hydraulically connected to port A of the fifth trigger valve (C1) 270 via hydraulic line 289, and port B of the fifth trigger valve (C1) 270 is hydraulically connected to the return flow path 160 via hydraulic line 290.

[0022] In the interest of clarity, the control valves that control the operation of the release valves 230-280 are shown in Fig. 2 is not shown. However, it should be noted that a single control valve or actuator controls the operation of each pair of trigger valves 230-280, with particular reference to a first actuator simultaneously controlling the operation of valves A1 and A2 (230, 240), a second actuator simultaneously controlling the operation of valves B1 and B2 (250, 260), and a third actuator simultaneously controlling the operation of valves C1 and C2 (270, 280). Fig. 3 shows an example of a schematic drawing in which one form of realization of the Fig. 2, wherein the first to sixth trigger valves (Al, A2, B1, B2, C1, C2) 230-280 are connected between the hydraulic fluid line 150b and the return flow line 160 in a real turbine triggering system. As in Fig. 3, the first actuator 292 is operatively connected via hydraulic line 295 to a control port (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240 and simultaneously controls the application of control pressure to the control port (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240. The first actuator 292 is configured such that, when actuated, it activates both the first trigger valve (A1) 230 and the second trigger valve (A2) 240 to lock the first and second trigger valves 230, 240 in the closed position.Accordingly, the second actuator 293 is operatively connected via the hydraulic line 296 to a control port (X) of both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260 and controls the application of control pressure to the control port (X) of both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260. The second actuator 293 is configured such that, upon actuation, it activates both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260 to lock the third and fourth trigger valves 250, 260 in the closed position.Furthermore, the third actuator 294 is operatively connected via the hydraulic line 297 to a control port (X) of both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280 and controls the application of control pressure to the control port (X) of both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280. The third actuator 294 is configured such that, when actuated, it activates both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280 to lock the fifth and sixth trigger valves 270, 280 in the closed position.

[0023] As shown, each of the first, second, and third actuators 292-294 is operatively connected to the controller 145, which is configured to activate and deactivate each of the first, second, and third actuators 292-294 either individually or simultaneously. In one embodiment, each of the first, second, and third actuators 292-294 may include a solenoid valve that, when activated by the controller 145, provides control pressure from the system pressure line 150 to the control port (X) of the associated trigger valves 230-280 to lock the corresponding trigger valves 230-280 in the closed position. Similarly, when deactivated by the controller 145, the first, second, and third actuators 292-294 connect the control port (X) of the associated trigger valves 230-280 to the drain line 170.

[0024] As in Fig. 2 and Fig. 3, the drain circuit 130 further includes a pressure reducing port 299a arranged between the hydraulic line 283 and the hydraulic fluid path 150b, a pressure reducing port 299b arranged between the hydraulic line 286 and the hydraulic fluid path 150b, and a pressure reducing port 299c arranged between the hydraulic line 289 and the hydraulic fluid path 150b. In addition, the drain circuit 130 includes a pressure reducing port 301a between the hydraulic line 283 and the drain line 170, a pressure reducing port 301b between the hydraulic line 286 and the drain line 170, and a pressure reducing port 301c between the hydraulic line 289 and the drain line 170. If, under normal operating conditions, all the trigger valves, iethe first to sixth release valves (A1, A2, B1, B2, C1, C2) 230-280 are in the closed position, the pressure in the hydraulic line 283, the pressure in the hydraulic line 286 and the pressure in the hydraulic line 289 are maintained at a value which is below the release pressure (ie below the pressure within the line 150b) but above zero, the amount or value of the fluid pressure being based on the size and configuration of the orifices 299a-299c and 301a-301c.Generally speaking, openings 299a-299c are sized to allow gradual fluid flow from line 150b into lines 283, 286, and 289, while openings 301a-301c are sized to allow gradual fluid flow from lines 283, 286, and 289 when the pressure in lines 283, 286, and 289 reaches a predetermined amount (which is lower than the pressure in line 150b, for example, about half the system pressure in line 150b). In one embodiment, openings 299a-299c and 301a-301c may have a diameter of approximately 0.07874 cm (approximately 0.031 inches), although other sizes are possible if desired. The purpose of providing the reduced fluid pressure in lines 283, 286 and 289 is described in more detail in the following discussion.

[0025] To ensure that all components are functioning properly to initiate a trip when required or desired, the components associated with the bleed circuit 130 can be tested while the turbine 110 is operating online, without interrupting the operation of the turbine 110. For testing purposes, the bleed circuit 130 includes first, second, and third pressure transducers (PT1-PT3) 300-320 configured to sense the pressure in the first, second, and third trip branches 200-220, and in particular, the fluid pressure in lines 283, 286, and 289. In addition, the bleed circuit 130 may include first, second, and third pressure sensors (PS1-PS3) 330-350 configured to sense the fluid pressure in the hydraulic lines 295-297. As shown in Fig. 3, the first pressure sensor (PS1) 330 is configured to detect the fluid pressure in the hydraulic line 295 connecting the first actuator 292 to the control port (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240, while the second pressure sensor (PS2) 340 is configured to detect the fluid pressure in the hydraulic line 296 connecting the second actuator 293 to the control port (X) of both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260, while the third pressure sensor (PS3) 350 is configured to detect the fluid pressure in the hydraulic line 297 connecting the third actuator 294 to the control port (X) of both the fifth trigger valve (C1) 270 and the sixth Trigger valve (C2) 280. If desired, the pressure sensors 330, 340, and 350 may be connected to the controller 145, but this is not required.Consequently, the connections between the pressure sensors 330, 340 and 350 and the controller 145 are shown in . Fig. 3 as dotted lines. As described in more detail below, the function of the components belonging to each of the majority of redundant valve systems or branches 200-220 can be checked by monitoring the fluid pressure in each of the hydraulic lines 283, 286, 289 and, if desired, the hydraulic lines 295, 296, 297.

[0026] The controller 145 is configured to actuate each of the first, second, and third actuators 292-294 simultaneously under normal operating conditions (i.e., when the turbine 110 is not triggered) to activate the first through sixth trigger valves (A1, A2, B1, B2, C1, C2) 230-280. When the first, second, and third actuators 292-294 are actuated, the control port (X) of each of the first through sixth trigger valves (A1, A2, B1, B2, C1, C2) 230-280 is pressurized with control pressure, causing the first through sixth trigger valves (A1, A2, B1, B2, C1, C2) 230-280 to lock the valve in the closed position. When the first to sixth release valves (A1, A2, B1, B2, C1, C2) 230-280 are in the closed position, the flow of hydraulic fluid between the operational ports (A, B) of the respective valves is blocked or prevented, so that consequently there is no direct path between the hydraulic fluid path 150b and the return flow path 160.This configuration maintains sufficient hydraulic pressure within the hydraulic fluid path 150b at the trigger inlet of the steam valve 140 to maintain the steam valve 140 in the open position. When the steam valve 140 is maintained in the open position, the turbine 110 is pressurized with steam and operates normally.

[0027] During abnormal conditions or malfunctions, it may be desirable to stop the operation of the turbine 110 to prevent damage to the turbine 110 and / or other serious incidents. To this end, the controller 145 creates a bleed fluid path between the hydraulic fluid path 150b and the return flow path 160 to thereby remove hydraulic pressure from the hydraulic fluid path 150b. By relieving pressure from the fluid path 150b, the trip input of the steam valve 140 is depressurized, thereby moving the steam valve 140 to the closed position and preventing steam from being applied to the turbine 110. This action results in the tripping or stopping of the turbine 110 and is referred to accordingly.

[0028] To determine whether a trip is necessary, the controller 145 may monitor turbine parameters such as turbine speed, turbine load, vacuum pressure, bearing oil pressure, pressurized oil pressure, and the like using various sensors (not shown). As will be shown, the controller 145 may be configured to receive information from these sensors during operation of the turbine 110 to monitor the operating conditions of the turbine 110 and thereby detect abnormal operating conditions and problems associated with the turbine 110 that may require shutdown of the turbine 110. In response to the information received from the operational sensors, such as overspeed detection, the controller 145 may initiate a tripping operation.To actually effect such a trigger, the components associated with only two of the redundant valve systems or branches 200-220 of the bleed circuit 130 must be functioning properly. However, to initiate a trigger, the controller 145 generally actuates (actually by deactivating) each of the actuators 292, 293, and 294 in an attempt to open each of the trigger valves (A1, A2, B1, B2, C1, C2) 230-280 and create three parallel bleed fluid paths between the hydraulic fluid line 150b and the return flow path 160. In this way, the trigger control system ensures that a trigger occurs even if one of the components of the drain circuit 130 is not working properly, because in this case at least one drain fluid path is created or opened between the hydraulic fluid path 150b and the return flow path 160 and thereby causes a trigger.

[0029] More specifically, the controller 145 may be configured to simultaneously deactivate each of the first, second, and third actuators 292-294 during a tripping event, allowing hydraulic fluid to flow through each of the first trip branch 200, second trip branch 210, and third trip branch 220, thereby relieving pressure at the trip input of the steam valve 140 to stop operation of the turbine 110. As shown in Fig. 3, when the controller 145 deactivates the first actuator 292, the control ports (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240 are connected to the drain 170 via the actuator 292. As a result, control or system pressure is vented or removed from the line 150 of each of the control ports (X) of the first trigger valve (A1) 230 and the second trigger valve (A2) 240, and the pressure within the control line for these valves is diverted or vented to the drain 170.When the control pressure at the control ports (X) of the first trigger valve (Al) 230 and the second trigger valve (A2) 240 is released to the drain 170, both the first trigger valve (Al) 230 and the second trigger valve (A2) 240 move from the closed to the open position, and hydraulic fluid can flow through the operative ports (A, B) of the first trigger valve (Al) 230 and the second trigger valve (A2) 240.

[0030] Accordingly, when the controller 145 deactivates the second actuator 293, the control ports (X) of both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260 are connected to the drain 170 through the actuator 293. As a result, control or system pressure is vented or removed from the line 150 of each of the control ports (X) of the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260, and the pressure within the control line for these valves is directly diverted or vented to the drain 170.When the control pressure at the control ports (X) of the third release valve (Bl) 250 and the fourth release valve (B2) 260 is released to the drain 170, both the third release valve (Bl) 250 and the fourth release valve (B2) 260 move from the closed to the open position, and hydraulic fluid can flow through the operative ports (A, B) of the third release valve (Bl) 250 and the fourth release valve (B2) 260.

[0031] Accordingly, when the controller 145 deactivates the third actuator 294, the control ports (X) of both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280 are connected to the drain 170 through the actuator 294. As a result, control or system pressure is vented or removed from each of the control ports (X) of the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280, and the pressure within the control line for these valves is directly diverted or vented to the drain 170.When the control pressure at the control ports (X) of the fifth release valve (Cl) 270 and the sixth release valve (C2) 280 is released to the drain 170, both the fifth release valve (Cl) 270 and the sixth release valve (C2) 280 move from the closed to the open position, and hydraulic fluid can flow through the operative ports (A, B) of the fifth release valve (Cl) 270 and the sixth release valve (C2) 280.

[0032] As shown, to trigger a trip, all that is required is for the hydraulic fluid in fluid path 150b to flow from the first, second, or third trip branch 200-220 to the return flow path 160, thereby depressurizing the trip input of the steam valve 140 and stopping the operation of the turbine 110. As a result, only the components associated with two of the redundant valve systems A1 and A2, B1 and B2, or C1 and C2 need to operate properly to perform a trip.In other words, if all of the components associated with the first valve system (e.g., the first actuator 292, the first trip valve (A1) 230, and the second trip valve (A2) 240) are operating properly, and if all of the components associated with the third valve system (e.g., the third actuator 294, the fifth trip valve (C1) 270, and the sixth trip valve (C2) 280) are operating properly, hydraulic fluid can flow from the hydraulic path 150b to the return flow path 160 via the first trip branch 200, thereby relieving trip pressure from the steam valve 140 and stopping operation of the turbine 110.Accordingly, if all of the components associated with the first valve system are operating properly and if all of the components associated with the second valve system (e.g., the second actuator 293, the third trip valve (B1) 250, and the fourth trip valve (B2) 260) are operating properly, hydraulic fluid may flow via the second trip path from the hydraulic fluid path 150b to the return flow path 160, thereby relieving trip pressure from the steam valve 140 and stopping operation of the turbine 110. Furthermore, if all of the components associated with the second and third valve systems are operating properly, hydraulic fluid may flow via the third trip branch 220 from the hydraulic fluid path 150b to the return flow path 160, thereby relieving trip pressure from the steam valve 140 and stopping operation of the turbine 110.In this way, redundancy is achieved, since only the components of two of the three valve systems need to be functioning properly to perform a tripping operation. In other words, this means that the failure of one or more components associated with branches 200-220 does not prevent the controller 145 from performing a tripping operation to stop the turbine 110.

[0033] Furthermore, it is desirable to test the components belonging to the bleed circuit 130 while the turbine 110 is online and operating to ensure that all of these components are functioning properly. However, it is desirable to test these components without interrupting the operation of the turbine 110, since stopping the turbine 110 for testing or maintenance purposes is expensive and undesirable. Fig. 2 and Fig. 3, the controller 145 can remotely test the operation of each of the redundant valve branches 200-220 individually while the turbine 110 is online and operating. Specifically, to perform a test, the controller 145 can individually operate the actuators 292, 293, and 294 and, using pressure transducers 300, 310, 320, 330, 340, and 350, monitor the pressure in one or more of the hydraulic lines 283, 286, 289, and, if desired, in lines 295, 296, and 297 to determine whether the components belonging to the discharge circuit are operating properly. In this way, no operator is required to perform manual tests of the various valves (Al, A2, B1, B2, C1, C2) 230-280 and the actuators 292-294, which requires the turbine 110 to be shut down.In addition, while testing the components associated with the bleed circuit 130, the controller 145 remains capable of stopping the operation of the turbine 110 (ie, tripping the turbine 110) in the event of an abnormal condition or malfunction to prevent damage to the turbine 110 and / or other serious incidents.

[0034] More specifically, to test the operation of the first actuator 292, the first trigger valve (A1) 230, and the second trigger valve (A2) 240 belonging to the first valve system, the controller 145 deactivates the first actuator 292 while keeping the second actuator 293 and the third actuator 294 activated. When the controller 145 deactivates the first actuator 292, the control ports (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240 should be connected to the drain 170, so that the control pressure is removed from the control ports (X) of both the first trigger valve (A1) 230 and the second trigger valve (A2) 240. Therefore, if the first actuator 292 is operating properly, both the first trigger valve (A1) 230 and the second trigger valve (A2) 240 should move from the closed to the open position when the first actuator 292 is deactivated.By monitoring the pressure sensed by the first pressure transducer (PT1) 300 on the hydraulic line 283, the pressure sensed by the second pressure transducer (PT2) 310 on the hydraulic line 286, and the pressure sensed by the third pressure transducer (PT3) 320 on the hydraulic line 289, the controller 145 is able to determine whether one or more of the first actuator 292, the first trigger valve (A1) 230, and the second trigger valve (A2) 240 is operating properly.

[0035] In particular, if each of the first actuator 292, the first trigger valve (A1) 230, and the second trigger valve (A2) 240 is operating properly when the controller 145 deactivates 292 the first actuator, the third pressure transducer (PT3) 320 should detect a small or negligible pressure change on the hydraulic line 289 connecting the third trigger valve (B1) 250 to the fifth trigger valve (C1) 270. Furthermore, the first pressure transducer (PT1) 300 should detect system pressure on the hydraulic line 283 when the controller 145 deactivates the first actuator 292 because the first trigger valve (A1) 230 is in the open position and the sixth trigger valve (C2) 280 is in the closed position.Furthermore, the second pressure transducer (PT2) 310 should detect system pressure on the hydraulic line 286 when the controller 145 deactivates the first actuator 292 because the second trigger valve (A2) 240 is in the open position and the fourth trigger valve (B2) 260 is in the closed position.

[0036] If the third pressure transducer (PT3) 320 detects anything other than a small or negligible pressure change on the hydraulic line 289 after the controller 145 has deactivated the first actuator 292, the controller 145, if it receives a reading from the pressure transducer 320, can determine that the first actuator 292 is not operating properly and generate a fault or alarm signal or take any other desired action to alert a user to the problem. Furthermore, if the pressure transducer (PT3) 320 detects a small or negligible pressure change, but the first pressure transducer (PT1) 300 detects a pressure other than the system pressure on the hydraulic line 283 after the controller 145 has deactivated the first actuator 292, the controller 145 can determine that the first release valve (AI) 230 is not operating properly and generate a fault or alarm signal, if desired.In particular, if the first pressure transducer (PT1) 300 detects a lower pressure level than the system pressure due to the opening 299a in the hydraulic line 283, the controller 145 may determine that both the first trigger valve (A1) 230 and the sixth trigger valve (C2) 280 are in the closed position, indicating that the first trigger valve (A1) 230 did not operate properly. Furthermore, if the third pressure transducer (PT3) 320 detects a small or negligible pressure change, but the second pressure transducer (PT2) 310 detects a pressure other than the system pressure on the hydraulic line 286 after the controller 145 deactivates the first actuator 292, the controller 145 may determine that the second trigger valve (A2) 240 is not operating properly and generate a fault or alarm signal, if desired.

[0037] The second actuator 293, the third trigger valve (B1) 250, and the fourth trigger valve (B2) 260, which belong to the second valve system, can be tested in a manner similar to that described above for the first valve system. Specifically, when the controller 145 deactivates the second actuator 293 while leaving the first actuator 292 and the third actuator 294 activated, the control ports (X) of both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260 should be connected to the drain 170 via the actuator 293, so that control or system pressure is vented or removed from each of the control ports (X) of the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260.Therefore, if the second valve system is operating properly, when actuator 293 is deactivated, both the third trigger valve (B1) 250 and the fourth trigger valve (B2) 260 should move from the closed to the open position. By monitoring the pressure sensed by the first pressure transducer (PT1) 300 on hydraulic line 283, the pressure sensed by the second pressure transducer (PT2) 310 on hydraulic line 286, and the pressure sensed by the third pressure transducer (PT3) 320 on hydraulic line 289, the controller 145 is able to determine whether one or more of the second actuator 293, the third trigger valve (B1) 250, and the fourth trigger valve (B2) 260 is operating properly.

[0038] In particular, if the second actuator 293, the third trigger valve (B1) 250, and the fourth trigger valve (B2) 260 are operating properly when the controller 145 deactivates the second actuator 293, the first pressure transducer (OT1) 300 should detect a small or negligible pressure change on the hydraulic line 283 connecting the first trigger valve (A1) 230 to the sixth trigger valve (C2) 280. Furthermore, the second pressure transducer (PT2) 310 should detect a small or negligible pressure change on the hydraulic line 286, since the actuation of the fourth trigger valve (B2) 210 should allow the reduced system pressure in the hydraulic line 286 due to the actuation of the openings 299b and 301b to be released into the return flow path 160 via the now-open trigger valve (B2) 260.Furthermore, the third pressure sensor (PT3) 320 should detect a system pressure in the hydraulic line 289 since the third release valve (Bl) 250 is in the open position and the fifth release valve (C1) 270 is in the closed position.

[0039] If the first pressure transducer (PT1) 300 detects anything other than a small or negligible pressure change on the hydraulic line 283 after the controller 145 deactivates the second actuator 293, the controller 145 may determine that the second actuator 293 is malfunctioning and generate a fault or alarm signal or take any other desired action. Furthermore, if the first pressure transducer (PT1) 300 detects a small or negligible pressure change, but the second pressure transducer (PT2) 310 detects a pressure other than the system pressure on the hydraulic line 286, the controller 145 may determine that the fourth trigger valve (B2) 260 is malfunctioning and generate a fault or alarm signal.In particular, if the second pressure transducer (PT2) 310 detects a reduced system pressure that is higher than a small or negligible pressure in the hydraulic line 286, the controller 145 may determine that the fourth trigger valve (B2) 260 remains in the closed position, rather than opening and venting the reduced system pressure in the hydraulic line 286 due to the actuation of the ports 299b and 301b via the return path 160. Furthermore, if the first pressure transducer (PT1) 300 detects a small or negligible pressure change, but the third pressure transducer (PT3) 320 detects a pressure other than the system pressure on the hydraulic line 289, the controller 145 may determine that the third trigger valve (B1) 250 is not operating properly and generate a fault or alarm signal.

[0040] The third actuator 294, the fifth trigger valve (C1) 270, and the sixth trigger valve (C2) 280 of the third valve system can be tested in the same manner as the first valve system and the second valve system. Specifically, when the controller 145 deactivates the third actuator 294 while leaving the first actuator 292 and the second actuator 293 activated, the control ports (X) of both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280 should be connected to the drain 170 so that control pressure is vented or removed from each of the control ports (X) of the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280. Furthermore, if the third actuator is operating properly when deactivated by the controller 145, both the fifth trigger valve (C1) 270 and the sixth trigger valve (C2) 280 should move from the closed to the open position.By monitoring one or more of the pressures sensed by the second pressure transducer (PT2) 310 on hydraulic line 286, the first pressure transducer (PT1) 300 on hydraulic line 283, and the third pressure transducer (PT3) 320 on hydraulic line 289, the controller 145 is able to determine whether one or more of the third actuator 294, the fifth trigger valve (C1) 270, and the sixth trigger valve (C2) 280 are operating properly.

[0041] In particular, if each of the third actuator 294, the fifth trigger valve (C1) 270, and the sixth trigger valve (C2) 280 is operating properly, when the controller 145 deactivates the third actuator 294 while keeping the first actuator 292 and the second actuator 293 activated, the second pressure transducer (PT2) 310 should detect a small or negligible pressure change on the hydraulic line 286 connecting the second trigger valve (A2) 240 to the fourth trigger valve (B2) 260.Furthermore, the first pressure transducer (PT1) 300 should detect a small or negligible pressure change on the hydraulic line 283 because the first release valve (A1) 230 is in the closed position and the sixth release valve (C2) 280 is in the open position, so that the reduced system pressure that has developed in the line 283 through the openings 299a and 301a can be released into the return flow path 160 via the sixth release valve (C2) 280. Furthermore, the third pressure transducer (PT3) 320 should detect a low or negligible pressure on the hydraulic line 289 because the third release valve (B1) 250 is in the closed position and the fifth release valve (C1) 270 is in the open position, so that the reduced system pressure that has developed in the line 289 through the openings 299c and 301c can be released into the return flow path 160 via the fifth release valve (C1) 270.

[0042] If the second pressure transducer (PT2) 310 detects anything other than a small or negligible pressure change on the hydraulic line 286 after the controller 145 has deactivated 294 the third actuator and keeps the first actuator 292 and the second actuator 293 activated, the controller 145 may determine that the third actuator 294 is not operating properly and generate a fault or alarm signal. Furthermore, if the second pressure transducer (PT2) 310 detects a small or negligible pressure change, but the first pressure transducer (PT1) 300 detects anything other than a small or negligible pressure on the hydraulic line 283 after the controller 145 has deactivated the third actuator, the controller 145 may determine that the sixth trigger valve (C2) 280 is not operating properly and generate a fault or alarm signal.Furthermore, if the second pressure transducer (PT2) 310 detects a small or negligible pressure change, but the third pressure transducer (PT3) 320 detects anything other than a small or negligible pressure on the hydraulic line 289 after the controller 145 has deactivated the third actuator 294, the controller 145 may determine that the fifth trip valve (C1) 270 is not operating properly and generate a fault or alarm signal, if desired.Of course, if desired, it is also possible for the controller 145 to not receive any signals from the pressure sensors PS1, PS2 and PS3 and yet to diagnose a fault within or associated with the trigger valves using the signals from the pressure transmitters PT1, PT2 and PT3 in the manner discussed above, it being understood that if the controller 145 determines that both valves associated with a particular actuator, such as valves A1 and A2, appear to be malfunctioning, the problem may lie with the actuator controlling or actuating those valves.

[0043] As can be seen, the execution of a triggering of the turbine 110 during the test of any of the valve systems associated with actuators 292, 293, and 294 is not prevented because the controller 145 generally controls one of the three valve systems during a test to simulate a triggering for that valve system. Therefore, to effect an actual triggering during a test, the controller 145 merely needs to send a trigger signal to one or both of the other (not currently being tested) valve systems by deactivating one or both of the actuators 292, 293, or 294 associated with the other valve systems.

[0044] As shown, the bleed circuit 130 described above is configured such that, in response to abnormal conditions or malfunctions, a tripping operation is performed electronically from a remote location such that the hydraulic fluid in the hydraulic fluid path 150b is vented into the return flow path 160 using a two-out-of-three selection scheme, thereby depressurizing the trip input of the steam valve 140. Furthermore, due to the two-out-of-three redundancy, the components of this bleed circuit 130 can be individually tested during operation of the turbine 110 without, however, preventing the controller 145 from performing a true trip during the test. This means that there is no need for an operator to manually operate or test the components belonging to the bleed circuit 130.Furthermore, the majority of redundant valve systems included in the above-described vent circuit 130 ensure that a tripping operation can be performed even if one of the components included in the vent circuit fails. This means that the vent circuit 130 described here ensures with greater reliability that a tripping operation is performed when one is desired or required.

[0045] Even if in Fig. 2 and Fig. 3, manually operated valves such as needle valves can be arranged between the pressure sensors 300, 310, and 320 and the lines to which these sensors are connected, for example, to isolate these sensors from the fluid lines so that these sensors can be repaired or replaced. Furthermore, if desired, another valve such as a manually operated needle valve 392 can be arranged between the line 150, which transports the system pressure to the drain circuit 130, and the line 150b, so that the user can manually pressurize the line 150b at any time or compensate for a leak in the line 150b.

[0046] As soon as the drain circuit 130 in Fig. 1-3 performs a venting function to thereby cause the turbine 110 to be triggered, it is desirable to block or inhibit the flow of hydraulic fluid from the hydraulic fluid source to the turbine triggering feed line while the turbine 110 is in the triggering state. As shown in Fig. 1, the lock circuit 120 is hydraulically located upstream of the bleed circuit 130 and is connected thereto to perform the lock function. In particular, the lock circuit 120 operates to isolate the pressure line 150b from the hydraulic pressure source (not shown in the figures, but located upstream of the lock circuit 120) to prevent unnecessary flow of hydraulic fluid through the pressure lines 150a and 150b and the return path 160 during a tripping condition of the turbine 110. The lock circuit 120 operates automatically by sensing a pressure loss in the turbine tripping forward pressure 150b. If the lock circuit 120 does not properly shut off system pressure to the turbine tripping forward after the bleed circuit 130 has removed the pressure from line 150b, the hydraulic pressure pump orHydraulic pressure source unnecessarily in an attempt to increase the pressure in the line 150b, which is of course not possible due to the actuation of the drain circuit 130 during the triggering.

[0047] Preferably, the locking circuit 120 includes redundancy to allow the locking circuit 120 to continue operating properly even in the event of a failed component within the locking circuit 120. Furthermore, the locking circuit 120 is preferably configured to allow remote testing during operation of the turbine 110 such that the turbine 110 is not triggered during testing of the locking circuit 120, but can be triggered if necessary. In one embodiment, the locking circuit 120 may include a plurality of redundant locking components connected in series with the hydraulic fluid line 150 and configured to redundantly shut off system pressure to the turbine trigger line after a trigger has occurred.

[0048] As in Fig. 4, the lock circuit 120 may include a first lock section 400 and a second lock section 410, each having a valve 440 and 470, respectively, connected in series with the hydraulic fluid line 150a to isolate the line 150a upstream of the lock circuit 120 from the line 150b downstream of the lock circuit 120. Each of the first lock section 400 and the second lock section 410 is configured to shut off the flow of hydraulic fluid from the hydraulic fluid source to the turbine trigger advance during a lock event by isolating or preventing fluid flow from line 150a to line 150b. As will be described in more detail later, the first locking portion 400 and the second locking portion 410 operate redundantly with respect to one another such that actuation of either the first locking portion 400 or the second locking portion 410 prevents or allows the flow of hydraulic fluid to the turbine trigger advance.shuts off, ie, the upstream pressure line 150a is shut off from the downstream pressure line 150b. Due to this redundancy, the flow of hydraulic fluid from the shut-off circuit 120 can still be shut off even if one of the first shut-off section 400 or the second shut-off branch 410 does not perform the shut-off operation, which contributes to reliable shut-off functionality.

[0049] As shown in the function diagram in Fig. 4, the first blocking section 400 includes a first blocking member 420, a first blocking valve 430 hydraulically connected to the first blocking member 420, and a first logic valve 440 hydraulically connected to the first blocking valve 430 and disposed within the hydraulic fluid path 150. The actuator 420 includes an electronic control port (X) that receives an electronic signal from the controller 145, a fluid input port (A) connected to the downstream fluid line 150b, and an output port (B) connected to a hydraulic control port (X) of the first blocking valve 430.Accordingly, the first check valve 430 includes a fluid input port (A) connected to receive system pressure from line 150a, and an output port (B) connected to the hydraulic control port (X) of the first logic valve 440, which has an input port (A) connected to line 150a and an output port (B) connected to the second logic valve 470. As shown, the first check member 420 controls the application of downstream system pressure to the control input of the first check valve 430. In one embodiment, the first check member 420 includes a solenoid valve that, upon activation by the controller 145, transmits downstream system pressure (i.e., the pressure existing in line 150b) to the control input of the first check valve 430. The first check valve 430 controls the movement of the first logic valve 440 between an open and a closed position.The first logic valve 440 may be a two-way DIN cartridge valve, for example, having a pair of operational ports (A, B) and a control port (X). However, it should be noted that the first logic valve 440 may be any other type of valve capable of being operated in an open or closed position.

[0050] The first logic valve 440 is normally positively held in a closed position by a spring (not shown) or other mechanical device to prevent or block the flow of hydraulic fluid from the hydraulic fluid source to the turbine trigger advance. The logic valve 440 normally allows free flow from port (A) to port (B) or from port (B) to port (A). Because port (X) on the logic valve 440 is directly connected to line 150a via the first check valve 430, the logic valve 440 will not allow fluid flow from port (A) to port (B) (i.e., from line 150a to the second logic valve 470) until the pressure at port (X) of the logic valve 440 is relieved. When the first check valve 430 receives pressure from line 150b via the first check member 420, the logic valve 440, since its port (X) is opened to the drain 170, allows fluid flow from port (A) to port (B) and on to the second logic valve 470.When the turbine trip pre-pressure in line 150b is vented via the vent circuit 130 (i.e., during an initiated trip), the pressure at port (X) of the first check valve 430 is also vented through the vent circuit 120, causing the first check valve 430 to move to its spring-held position, connecting port (X) of the logic valve 440 to the vent pressure line 170 and thereby closing the logic valve 440.

[0051] Accordingly, the second locking system 410 includes a second locking member 450, a second locking valve 460 hydraulically connected to the second locking member 450, and a second logic valve 470 hydraulically connected to the second locking valve 460 and disposed between the first logic valve 440 and the hydraulic fluid path 150. As shown in Fig. 4, the actuator 450 includes an electronic control port (X) that receives an electronic signal from the controller 145, a fluid input port (A) connected to the downstream fluid line 150b, and an output port (B) connected to a hydraulic control port (X) of the second check valve 460. Similarly, the second check valve 460 includes a fluid input port (A) connected to receive system pressure from line 150a and an output port (B) connected to the hydraulic control port (X) of the second logic valve 470, which has an input port (A) connected to the first logic valve 440 and an output port (B) connected to the downstream line 150b.In this configuration, the second blocking member 450 controls the application of system pressure to the second blocking valve 460. In one embodiment, the second blocking member 450 includes a solenoid valve that, when activated by the controller 145, supplies downstream system pressure to the control input of the second blocking valve 460. The second blocking valve 460 controls the movement of the second logic valve 470 between an open and a closed position. If desired, the second logic valve 470 may, for example, be a two-way DIN cartridge valve. However, it should be understood that the second logic valve 470 may be any other type of valve that can be actuated to move between an open and a closed position.

[0052] The second logic valve 470 is normally positively held in a closed position by a spring (not shown) or other mechanical device to prevent or shut off the flow of hydraulic fluid from the hydraulic fluid source to the turbine trigger. The logic valve 470 normally allows free flow from port (A) to port (B) or from port (B) to port (A). Because port (X) on the logic valve 470 is directly connected to line 150a via the second check valve 460, the logic valve 470 will not allow fluid flow from port (A) to port (B) (i.e., from the first logic valve 440 to the check valve 484) until the pressure at port (X) of the logic valve 470 is relieved. When the second check valve 460 receives pressure from line 150b via the second check member 450, the logic valve 470, since its port (X) is opened toward the drain 170, allows fluid flow from port (A) to port (B) and on to the check valve 484.When the turbine trip pre-pressure in line 150b is vented via the vent circuit 130 (i.e., during an initiated trip), the pressure at port (X) of the second check valve 460 is also vented through the check circuit 120, causing the second check valve 460 to move to its spring-held position, connecting port (X) of the logic valve 470 to the vent pressure line 170 and thereby closing the logic valve 470.

[0053] Fig. 5 is a more detailed schematic drawing of a possible configuration of the Fig. 4. In particular, the first and second locking members 420 and 450 are illustrated as solenoid-operated pilot valves, the solenoid of which is electrically connected to the controller 145 to control the flow of downstream system pressure from line 150b to the control inputs of the locking valves 430 and 460. The locking valves 430 and 460 are hydraulically actuated valves that, upon activation or deactivation of the control pressure from the pilot valves 420 and 450, connect the control input of the logic valves 440 and 470 to the system pressure line 150a or the drain 170. The controller 145 is configured to deactivate or deactivate the check members 420 and 450 under normal operating conditions, thereby causing the check members 420 and 450 to supply downstream system pressure (i.e., fluid in line 150b) to the control inputs of the check valves 430 and 460.As shown, when system pressure is applied to the control inputs of the check valves 430 and 460, the preload force of the springs in the check valves 430 and 460 is overcome and the control ports (X) of the logic valves 440 and 470 are connected to the drain line 170, allowing the logic valves 440 and 470 to open, allowing the hydraulic fluid in the feed line 150a to flow into the feed line 150b.

[0054] During a trigger event, the controller 145 may activate the solenoid of both the first blocking member 420 and the second blocking member 450 to cause the logic valves 440 and 470 to close and block the fluid line 150a from the fluid line 150b. In particular, upon activation of the first blocking member 420, system pressure is vented or removed from the control input of the first blocking valve 430, thereby applying control pressure to the control input of the first logic valve 440, causing the logic valve 440 to move to the closed position to prevent or block the flow of hydraulic fluid between line 150a and line 150b. Similarly, upon activation of the second blocking member 450, system pressure is vented or removed from the control input of the second blocking valve 460.removed, thereby applying control pressure to the control input of the second logic valve 470, causing the logic valve 470 to move to the closed position to prevent or shut off the flow of hydraulic fluid from line 150a to line 150b.

[0055] Because the logic valves 440 and 470 of the first interlock system 400 and the second interlock system 410 are connected in series between the lines 150a and 150b, the interlock circuit 120 performs redundant interlock functions, thereby ensuring a high degree of reliability. In the event that the first interlock system 400 fails to properly perform an interlock function, for example, due to a failure of one or more components belonging to the first interlock system 400, the series-connected second interlock system 410 is configured to ensure that the interlock function is still performed to prevent or shut off the flow of hydraulic fluid from the hydraulic fluid source to the turbine triggering feed line.Accordingly, in the event that the second locking system 410 fails to properly perform a locking function, for example, due to a failure of one or more of the components belonging to the second locking system 410, the series-connected second locking system is configured to ensure that the locking function is still performed to prevent or shut off the flow of hydraulic fluid from the hydraulic fluid source to the turbine triggering advance. Accordingly, the locking circuit 120 is configured such that only one of the first locking system 400 and the second locking system 410 is required to perform a locking operation to prevent or shut off the flow of hydraulic fluid from the hydraulic fluid source to the turbine triggering advance.

[0056] By means of the Fig. 4 and Fig. 5, it is possible to test the components belonging to the locking circuit 120 during operation of the turbine 110 without interrupting the operation of the turbine 110. For this purpose, the locking circuit 120 includes a pressure sensor 480 configured to detect the pressure in the line 150b, which is arranged downstream of the first and second locking systems 400, 410 and upstream of the turbine triggering flow, with an opening 482 between the line 150b and the drain line 170 ( Fig. 5) and a check valve 484 ( Fig. 5) is arranged in line 150b. By monitoring the pressure sensed by pressure transducer 480, controller 145 is able to determine whether all components comprising the locking circuit 120 are operating properly to perform a locking operation. In particular, controller 145 can individually test the operation of first locking system 400 and second locking system 410 by activating only first locking member 420 and second locking member 450 at a time and monitoring the pressure sensed by pressure transducer 480 in fluid line 150b downstream of the first and second locking systems 400, 410. As illustrated, while testing the components comprising the locking circuit 120, controller 145 still remains able to halt operation of turbine 110 (i.e., trigger turbine 110) if controller 145 detects an abnormal condition or malfunction.

[0057] As in Fig. 5, to test the operation of the first lock system 400 with the turbine 110 running, the controller 145 may activate the first lock member 420 while leaving the second lock member 450 deactivated. When the first lock member 420 is activated and the second lock member 450 is deactivated, downstream system pressure is vented or removed from the control input of the first lock valve 430, and the pressure at the control input of the first lock valve 430 is diverted to the drain 170. As a result, the first lock valve 430 immediately closes, connecting the upstream control pressure or system pressure in line 150a to the control port (X) of the first logic valve 440. This, in turn, causes the first logic valve 440 to immediately move to the closed position.When the first logic valve 440 is in the closed position, the pressure in line 150b downstream of the first and second barrier systems 400, 410 and upstream of the check valve 484 begins to decrease due to the actuation of the orifice 482, which slowly releases the pressure in line 150b downstream of the valve 440 and upstream of the check valve 484 to the drain 170. In one embodiment, the orifice 482 may be sized to have a diameter of approximately 0.07874 cm (approximately 0.031 inches), although other sizes are possible. Typically, the check valve 484 operates as a one-way valve to maintain the pressure in line 150b downstream of the check valve 484 at a value close to the system pressure, even if the pressure in line 150b upstream of the check valve 484 begins to drop to a value below the system pressure.

[0058] If the pressure transducer 480 detects a decrease in the fluid pressure in the hydraulic fluid line 150b upstream of the check valve 484 after the first locking member 420 has been activated while the second locking member 450 is deactivated, the controller 145 can determine that all components in the first locking system 400 are operating properly. However, before the fluid pressure in line 150b downstream of the check valve 484 drops to a pressure sufficiently below the system pressure to trigger a tripping event (i.e., to open the steam valve 140 in Fig. 1), or is too low to actuate the first check valve 430, the controller 145 deactivates the first check member 420, causing the first logic valve 440 to reopen and supply system pressure to the line 150b.

[0059] Accordingly, to test the operation of the second blocking system 410 with the turbine 110 running, the controller 145 activates the second blocking member 450 while leaving the first blocking member 420 deactivated. When the second blocking member 450 is activated and the first blocking member 420 is deactivated, system pressure is vented or removed from the control input of the second blocking valve 460, and the pressure at the control input of the second blocking valve 460 is diverted to drain 170. As a result of the removal of control pressure, the second blocking valve 460 operates to direct the control pressure in line 150a to the control port (X) of the second logic valve 470. This, in turn, causes the second logic valve 470 to immediately move to the closed position. When the second logic valve 470 is in the closed position, the pressure in line 150b upstream of the check valve 484 begins to decrease.If the pressure transducer 480 detects a regular or expected pressure drop in line 150b upstream of the check valve 484, the controller 145 also determines that all components in the second shutoff branch 410 are operating properly. On the other hand, if the controller 145 detects no pressure drop, one or more of the components of the valve system 410 may be faulty and in need of repair. However, before the pressure in line 150b drops to a pressure sufficiently below the system pressure to trigger the steam valve 140, the steam valve 140 may be inoperative. Fig. 1, or is too low to actuate the second lock valve 460, the controller 145 deactivates the first lock member 420, causing the second logic valve 470 to reopen. Of course, the controller 145 may send an alarm, warning, or other signal to an operator, technician, etc., to prompt them to take any other appropriate action upon detecting a fault in any of the components of the lock circuit 120.

[0060] The above-described interlock circuit 120 performs a reliable, electronically controlled, redundant interlock functionality by providing the redundant interlock systems 400, 410, only one of which needs to be actuated to perform an interlock function. Of course, as illustrated, testing of the interlock functionality typically occurs at times when the vent functionality of the vent circuit 130 is not being tested, although it may be possible to test these two systems simultaneously.In any event, the controller 145 can still initiate a trip of the turbine 110 while testing one of the interlock systems 400 or 410, since the controller 145 only needs to control two of the three bleed actuators 292, 293, and 294 to relieve pressure from line 150b and thereby cause an immediate trip of the turbine 110 in the manner discussed above. This bleed function can occur while one of the logic valves 440 or 470 is closed for testing purposes. In fact, a bleed function of this type can also occur when one or both of the logic valves 440 and 470 are closed, blocking line 150a from line 150b. Testing the interlock circuit 120 therefore does not affect the ability of the controller 145 to initiate a trip of the turbine 110.

[0061] In any case, after performing a triggering operation to stop the operation of the turbine 110, it is necessary to reset or start the turbine 110, for which it is first necessary to remove the blocking functionality implemented by the blocking circuit 120 so that system pressure can build up or rebuild in the hydraulic fluid line 150b. When using the Fig. 5, however, system pressure must first be present in the downstream line 150b so that the first and second logic valves 440 and 470 can be opened. This means that the lock circuit 120 must be reset after it has been activated following a trip. One of the purposes of this reset configuration is to ensure that a failure of the logic valves 440 and 470 or the controller 145 during a trip does not inadvertently reactivate the steam valve 140. To enable a reset operation of this type, the lock circuit 120 includes Fig. 4 and Fig. 5 a reset element 485 and a reset logic valve 490, which is connected to a reset bypass line 492 and has a control input (X) which is hydraulically connected to the reset element 485. As in Fig. 4 and Fig. 5, the reset element 485 is operatively connected to the controller 145 and controls the operation of the reset logic valve 490 (which is a bypass valve that bypasses the first and second logic valves 440 and 470). In the Fig. In the embodiment shown in Figure 5, the reset member 485 includes a solenoid valve, and the reset logic valve 490 is a two-way DIN cartridge valve with a pair of operative ports (A, B) and a control port (X). Hydraulic fluid flows through the operative ports (A, B) of the reset logic valve 490 in response to the absence of control pressure at the control port (X), allowing fluid to flow from line 150a into line 150b even when one or both of the logic valves 440 and 470 are closed.Once system pressure is restored in line 150b (which is only possible after the vent circuit 130 has been adjusted so that no vent paths exist between line 150b and the return line 160), the fluid pressure through line 150b increases via the first and second check valves 420 and 450, causing the first and second check valves 430 and 460 to vent pressure to the vent 170 and remove control pressure from the control inputs of the first and second logic valves 440 and 470, thereby reopening these valves. Thereafter, the controller 145 may deactivate the reset valve 485, which applies upstream system pressure to the control input of the reset logic valve 490 and causes the reset logic valve 490 to close, thereby closing the reset bypass line 492.

[0062] In one embodiment, the reset logic valve 490 is normally positively held in a closed position by a spring (not shown) or other mechanical device to prevent or shut off the flow of hydraulic fluid from the hydraulic fluid source connected to line 150a to the turbine trigger advance connected to line 150b. The logic valve 490 normally permits free flow from port (A) to port (B) or from port (B) to port (A). Because port (X) on the logic valve 490 is directly connected to line 150a via the reset member 485, the logic valve 490 will not permit flow from port (A) to port (B) (i.e., from pressure line 150a to line 150b) until the pressure at port (X) of the logic valve 490 is relieved.When the reset member 485 receives a signal from the controller 145, it moves to its activated position and connects its port (B) to the drain 170, which in turn connects the port (X) of the logic valve 490 to the drain 170, allowing fluid to flow from port (A) to port (B) on the logic valve 490 and from there to the turbine trigger feed 150b.Thus, to reset the locking circuit 120, the controller 145 is configured to activate the reset member 485 for a time sufficient to rebuild the system pressure in line 150b, to open the first and second logic valves 440 and 470 via the pressure flowing through the first and second locking members 420 and 450, and to subsequently deactivate the reset member 485, which applies control pressure to the control port (X) of the reset logic valve 490 and connects the fluid in the line connected to the control port (X) of the reset logic valve 490 to the upstream pressure 150a. As a result, the reset logic valve 490 is moved to the closed position.

[0063] Fig. Figure 6 shows a schematic diagram of an embodiment of the lock circuit 120 hydraulically connected to the discharge circuit 130 as a single, integrated hydraulic assembly connected by a manifold 500 as a single unit without numerous tubes or other components that are difficult to manufacture and install. As in the embodiment in Fig. 6, the single manifold block 500 can be used as a common platform to connect the barrier circuit 120 in series with the bleed circuit 130, so that the feed pressure can be routed via the manifold 500 to the valves and actuators associated with the barrier circuit 120 and then to the valves and actuators associated with the bleed circuit 130. However, it should be noted that some of the components of the barrier circuit 120 and the bleed circuit 130 are connected in parallel, so that the valves associated with the barrier circuit 120 and the bleed circuit 130 use the same feed pressure to actuate those valves.

[0064] In any case, the schematic drawing in Fig. 6 essentially the diagrams in Fig. 3 and Fig. 5, which are connected to form a single circle, with the components in Fig. 3 and in Fig. 5 the same reference numbers as in Fig. 6. For reasons of clarity, some of the Fig. 3 and Fig. 5 reference numbers contained in Fig. 6 are not listed. Furthermore, the connections to the control 145 are shown in Fig. 6 shown as dotted lines.

[0065] In Fig. 6, the fluid lines 150, 150a, 150b, 160, and 170, the openings 299a-299c, 301a-301c, and 482, as well as the check valve 484, are all integrated or milled into the three-dimensional distributor 500, which may be made of aluminum or another suitable material, for example. The outline of the distributor 500 is shown for clarity in Fig. shown as a thick, solid line. As shown at the top of the distributor 500 in Fig. 6, the manifold 500 includes six cutout areas that have a circular cross-section and a cylindrical shape and can be drilled into the manifold 500 with the same or different dimensions. Each of the cutout areas is dimensioned and shaped so that one of the DIN valves 230, 240, 250, 260, 270, 280, 440, 470, and 490 can be detachably contained or mounted therein. Various cover plates 510-516 (the outlines of which are shown in Fig. 6 as a thicker line) are distributed on the outside of the manifold 500 and mounted there in a removable manner, which can be done, for example, by means of threaded bolts or other fastening mechanisms, wherein the cover plates 510-516 serve to attach the DIN valves 230, 240, 250, 260, 270, 280, 470 and 490 with respect to the cut-out areas of the manifold 500. Furthermore, the actuators 292, 293, 294 and 485 are mounted in a removable manner on the cover plates 510, 512, 514 and 516 and thus in a removable manner on the manifold 500. As shown, the cover plates 510-516 contain fluid passages through which fluid within the manifold 500 can flow to the actuators 292-294 and 485 and vice versa. In this way, the cover plates 510-516 additionally function or serve as mechanical adapters that detachably adapt the mounting means of the actuators 292-294 and 485 to the manifold 500. Furthermore, as shown in Fig. 6, the DIN valves 440 and 470 are mounted in their respective cutout areas of the manifold 500 by means of the mounting aids 520 and 521 belonging to the shut-off valves 430 and 460, while the actuators 420 and 450 can be mounted in a detachable manner directly to the manifold 500 by means of the mounting aids 525 and 526 belonging to the actuators 420 and 450. The flow connections between the manifold 500 and the cover plates 510-516 as well as the mounting aids 520, 521, 525 and 526 are shown in Fig. 6 as lines passing through the outlines of these devices. Accordingly, the flow connections between the cover plates 510, 512, 514 and 516 and the assembly aids belonging to the actuators 292, 293, 294 and 485 are shown in Fig. 6 as lines passing through the outlines of these devices. Accordingly, each of the pressure sensors or pressure transmitters 300, 310, 320, 330, 340, 350, and 480 can be mounted to the manifold 500 in a detachable manner, for example, by means of threaded holes in the manifold 500 and mounting aids on the pressure sensors having holes into which pins projecting from the side of the manifold 500 engage, etc. It is understood that the illustrations in Fig. 6 are not intended to depict the exact three-dimensional construction of the manifold 500 or the three-dimensional manner in which the cover plates 510-516 and the mounting tools 520, 521, 525, and 526 are to be attached to the manifold 500, it being understood that different ones of the cut-out areas of the manifold 500 may be located on different sides of the manifold 500, and that different ones of the cover plates 510-516, the actuators 292-294, 485, the mounting tools 520, 521, 525, 526, and the pressure sensors 300, 310, 320, 330, 340, 350, 480 may be located on different sides of the manifold 500, etc.

[0066] To show Fig. 7A and Fig. 7B Examples of different three-dimensional perspective views of the manifold 500 with various cover plates 510-516, mounting aids 520, 521, 525, and 526, actuators 292-294 and 485, and pressure sensors 300, 310, 320, 330, 340, 350, 480 mounted thereon in a detachable manner. While in this case threaded bolts are used to detachably attach the cover plates 510-516, the mounting aids 520, 521, 525, and 526, the actuators 292-294 and 485, and the manifold 500, any other desired attachment structures may be used as well or instead. As in Fig. 7A and Fig.As shown in Figure 7B, each of the components comprising the barrier circuit 120 and the vent circuit 130 may be mounted and interconnected using a three-dimensional manifold block or other fluid distribution device having one or more portals, passages, and chambers. In this way, the size of the trigger control system 100 may be reduced by partially or entirely eliminating tubing and other connecting elements. Alternatively, the components comprising the barrier circuit 120 and the vent circuit 130 may be mounted on mounting or base plates interconnected by tubing.

[0067] It should be noted that the above-described trip control system 100 may be retrofitted to turbines with existing mechanical-hydraulic controls (MHC) by, for example, removing the emergency trip valve and associated linkages and other components and installing the trip control system 100 into the hydraulic fluid path 150. Furthermore, although the valves, actuators, and other components are described in several places as being electronically or hydraulically controlled components that are positively held in a normally open or closed position, individual actuators and valves may be electronically or hydraulically controlled in a manner different from that described herein and positively held in a position different from that described herein.Furthermore, in some cases, several of the valves or actuators may be omitted, or the functionality may be combined into a single valve device. For example, it may be possible to eliminate the first and second check valves 430 and 460 and connect the actuators 420 and 450 directly to the valves 440 and 470. Accordingly, it may be possible to integrate the actuators 420 and 450 onto or with the check valves 430 and 460, or even with the valves 440 and 470, such that a single valve is used in each of the check valve systems 400 and 410. It is further illustrated that the controller 145 described herein includes one or more processors and computer-readable memory containing one or more programs for performing the triggering, testing, and monitoring functions described herein.These programs, when implemented, may be stored in any computer-readable storage such as a magnetic disk, laser disk or other storage media, in the main memory or read-only memory of a computer or processor, as part of an application-specific integrated circuit, etc.

[0068] Accordingly, this software may be delivered to a user, a plant, a controller, etc., by any known or desired delivery method, such as on a computer-readable diskette or other portable computer storage medium, or over a communications channel such as a telephone line, the Internet, the World Wide Web, any other local area network or wide area network, etc. (such delivery being considered identical or interchangeable with delivery of the software in question by means of a portable storage medium). Furthermore, this software may be delivered directly without modulation or encryption, or after modulation and / or encryption by means of any suitable modulation carrier wave and / or encryption method prior to transmission over a communications channel.

[0069] Although this patent specification refers to specific examples which are intended to be illustrative only and not limiting, it will be apparent to one of ordinary skill in the art that changes, additions, or deletions may be made to the illustrated embodiments without departing from the spirit and scope of the invention. List of reference symbols: 100 trigger control system, trigger system 110 turbines 120 Blocking circuit, shut-off valve circuit 130 Drainage Circle 140 steam valve 145 Control 150 line, hydraulic path, system pressure line, fluid path, hydraulic fluid line, hydraulic fluid path, fluid lines, fluid pressure line 150a line, hydraulic path, feed line, pressure line, hydraulic fluid line, system pressure line, fluid line, fluid pressure line, fluid pressure inlet 150b Line, trigger pressure line, hydraulic fluid path, fluid line, feed line, trigger pressure, hydraulic fluid line, fluid path, pressure line, fluid pressure outlet, fluid pressure line, turbine trigger advance pressure, turbine trigger advance 155 Line 160 Return flow hydraulic or pressure line, low-pressure fluid line, return flow path, return flow line, fluid line, low-pressure fluid path, low-pressure fluid pressure flow line 170 drain line, low-pressure fluid line, drain, drain pressure line, fluid line 172 Hydraulic fluid drain, fluid drain 200 Drain valve system, trigger branch(es), branch(es), valve branch(es), first trigger branch 210 Drain valve system, trigger branch(es), second trigger branch, valve branch(es) 220 Drain valve system, trigger branch(es), branch(es), third trigger branch, valve branch(es) 230 Drain valve, valve(s), first release valve, DIN valve(s) 240 Drain valve, valve(s), second release valve, DIN valve(s) 250 drain valve, valve(s), third release valve, DIN valve(s) 260 Drain valve, valve(s), fourth release valve, DIN valve(s) 270 Drain valve, valve(s), fifth release valve, DIN valve(s) 280 Drain valve, valve(s), release valve(s), sixth release valve, DIN valve(s) 282 Input, hydraulic line 283 Hydraulic line, line 284 Output, hydraulic line 285 Input, hydraulic line 286 Hydraulic line, line 287 Output, hydraulic line 288 Input, hydraulic line 289 Hydraulic line, line 290 Output, hydraulic line 292 (first) actuator, drain actuator 293 (second) actuator, discharge actuator 294 (third) actuator, discharge actuator 295 Hydraulic line, line 296 Hydraulic line, line 297 Hydraulic line, line 299a Opening, pressure reduction opening 299b Pressure reduction opening, opening 299c Pressure reduction opening, opening 300 (first) pressure sensor (PT1), pressure sensor 301a Pressure reduction opening, opening 301b Pressure reduction opening, opening 301c pressure reducing opening, opening 310 (second) pressure transmitter (PT2), pressure sensor 320 (third) pressure transmitter (PT3), pressure sensor 330 Drain pressure sensor, barrier pressure sensor, (first) pressure sensor (PS1), pressure transmitter 340 Drain pressure sensor, barrier pressure sensor, (second) pressure sensor (PS2), pressure transmitter 350 Drain pressure sensor, barrier pressure sensor, (third) pressure sensor (PS3), pressure transmitter 392 manually operated needle valve 400 first barrier section, first barrier section, first barrier system, barrier valve system(s) 410 second barrier section, second barrier branch, second barrier system, second barrier branch 420 (first) locking element, (first) actuator, pilot valve 430 (first) check valve, (first) intermediate control valve, actuator 440 (first) valve, (first) logic valve, DIN valve, check valve 450 (second) locking element, (second) actuator, pilot valve 460 (second) check valve, (second) intermediate control valve, actuator 470 (second) valve, (second) logic valve, DIN valve, check valve 480 pressure transmitter, pressure sensor, barrier pressure sensor 482 Opening 484 Check valve, one-way valve 485 return element, actuator 490 return valve, return logic valve, logic valve, DIN valve 492 Reset bypass line 500 distributors, distribution blocks 510 cover plate 512 cover plate 514 cover plate 516 cover plate 520 assembly aids 521 assembly aids 525 assembly aids 526 assembly aids A check valve inlet, inlet, port, fluid inlet port, inlet port, A1 (first) release valve, redundant valve system, valve A2 (second) release valve, redundant valve system, valve B Output, output port, port, check valve output B1 (third) release valve, valve, redundant valve system B2 (fourth) release valve, valve, redundant valve system C1 (fifth) release valve, valve, redundant valve system C2 (sixth) release valve, valve, redundant valve system PS1 (first) pressure sensor PS2 (second) pressure sensor PS3 (third) pressure sensor PT1 (first) pressure sensor PT2 (second) pressure sensor PT3 (third) pressure sensor X Control port, control input, reset control input

Claims

[1] Trigger control system (100) for controlling the operation of a controlled steam valve (140) by means of fluid pressure provided from a fluid pressure source, comprising: a fluid pressure line (150, 150a, 150b) configured to be connected between the fluid pressure source and the controlled steam valve (140), the steam valve (140) being caused to close when the pressure in the fluid pressure line (150b) at a trigger input of the steam valve (140) drops to a predetermined or significant value below the system pressure; a low-pressure fluid return line (160); a drain circuit (130) comprising a drain valve system hydraulically connected between the fluid pressure line (150, 150b) and the low-pressure fluid return line (160), wherein the drain valve system can be operated to hydraulically and controllably connect the fluid pressure line (150, 150b) to the low-pressure fluid return line (160) in order to reduce the fluid pressure within the fluid pressure line (150, 150b); and a blocking circuit (120), containing: a first valve (440) and a second valve (470) arranged in series upstream of the drain circuit (130) in the fluid pressure line (150, 150a, 150b), wherein both the first valve (440) and the second valve (470) are operable to disconnect the fluid pressure line (150a) upstream of the shut-off circuit (120) from the fluid pressure line (150b) downstream of the shut-off circuit (120); and a first (420) and a second (450) electronically controlled actuator which are hydraulically connected to the first (440) and second (470) valve to control the operation of the first (440) and second (470) valve, wherein the first (420) and second (450) electronically controlled actuator is configured to receive control signals to control the operation of the first (440) and second (470) valve. [2] Trigger control system (100) according to claim 1, wherein the locking circuit (120) comprises a first intermediate control valve (430) hydraulically connected to the first valve (440) and the first electronically controlled actuator (420), and a second intermediate control valve (460) hydraulically connected to the second valve (470) and the second electronically controlled actuator (450), wherein both the first and the second intermediate control valve (430, 460) comprise a control input (X) and a first hydraulic output (B), and wherein both the first and the second valve (440, 470) comprise a control input (X), wherein the first electronically controlled actuator (420) comprises a hydraulic output (B) connected to the control input (X) of the first intermediate control valve (430), and wherein the first hydraulic output (B) of the first intermediate control valve (430) is connected to the control input (X) of the first valve (440),and wherein the second electronically controlled actuator (450) includes a hydraulic output (B) which is connected to the control input (X) of the second intermediate control valve (460), and wherein the first hydraulic output (B) of the second intermediate control valve (460) is connected to the control input (X) of the second valve (470). [3] Trigger control system (100) according to claim 2, wherein both the first and the second electronically controlled actuator (420, 450) include a hydraulic input connected to the fluid pressure line (150, 150a, 150b). [4] Trigger control system (100) according to claim 3, wherein at least one of the hydraulic inputs (A) of the first (420) and second (450) electronically controlled actuator is connected to the fluid pressure line (150a, 150b) downstream of the first (440) and second (470) valve. [5] Trigger control system (100) according to claim 2, wherein both the first (430) and the second (460) intermediate control valve include a hydraulic inlet (A) which is connected to the fluid pressure line (150, 150a, 150b). [6] Trigger control system (100) according to claim 5, wherein at least one of the hydraulic inputs of the first (430) and second (460) intermediate control valve is connected to the fluid pressure line (150a) upstream of the first (440) and second (470) valve. [7] Trigger control system (100) according to claim 1, further comprising a pressure sensor (480) configured to detect the pressure in the fluid pressure line (150b) downstream of the first (440) and second (470) valve. [8] Trigger control system (100) according to claim 7, further comprising an opening (482) between the fluid pressure line (150b) and a low-pressure fluid path, wherein the opening in the fluid pressure line (150b) is arranged downstream of the first (440) and second (470) valve and allows the fluid within the fluid pressure line (150b) to flow out through the opening (482) at an outflow rate from the fluid pressure line (150b) that is lower than the flow rate at which the fluid can flow through the fluid pressure line (150b). [9] Trigger control system (100) according to claim 8, further comprising a one-way valve (484) located within the fluid pressure line (150b) downstream of the opening (482). [10] Trigger control system (100) according to claim 1, wherein the locking circuit (120) further includes a reset valve (490) having a reset valve inlet (A) connected to the fluid pressure line (150a) upstream of the first (440) and second (470) valves, and a reset valve outlet (B) connected to the fluid pressure line (150b) downstream of the first (440) and second (470) valves, wherein the reset valve (490) in the open position forms a bypass path in the fluid pressure line (150, 150a, 150b) bypassing the first (440) and second (470) valves. [11] Trigger control system (100) according to claim 10, further comprising an electronically controlled reset element (485) which is connected to the reset valve (490) and is designed to open the reset valve (490) in response to an electronic reset signal. [12] Trigger control system (100) according to claim 11, wherein the reset valve (490) includes a reset control input (X) and wherein the reset element (485) includes a reset element fluid input which is hydraulically connected to the fluid pressure line (150a) upstream of the first (440) and second (470) valve, and a reset element fluid output which is hydraulically connected to the reset control input (X) of the reset valve (490). [13] Trigger control system (100), comprising: a controller (145) including a processor and a computer-readable memory; a fluid pressure line (150, 150a, 150b) configured to be connected between a fluid pressure source and a controlled steam valve (140), the steam valve (140) being caused to close when the pressure in the fluid pressure line (150b) at a trigger input of the steam valve (140) drops to a predetermined or significant value below the system pressure; a low-pressure fluid return line (160); a drain circuit (130) comprising a drain valve system arranged between the fluid pressure line (150a, 150b) and the low-pressure fluid return line (160), wherein the drain valve system can be operated to hydraulically and controllably connect the fluid pressure line (150a, 150b) to the low-pressure fluid return line (160) in order to reduce the fluid pressure within the fluid pressure line (150a, 150b) at the controlled steam valve (140); and a shut-off circuit (120) comprising a first valve (440) and a second valve (470) arranged in series in the fluid pressure line (150, 150a, 150b) upstream of the drain circuit (130), wherein both the first valve (440) and the second valve (470) are actuated to disconnect the fluid pressure line (150a) upstream of the shut-off circuit (120) from the fluid pressure line (150b) downstream of the shut-off circuit (120), and wherein the first valve (440) and the second valve (470) are connected to the control (145) and are controlled by the control (145) to control the fluid flow in the fluid pressure line (150, 150a, 150b). [14] Trigger control system (100) according to claim 13, wherein the first (440) and the second (470) valve are hydraulically actuated valves and wherein the locking circuit (120) further comprises a first electronically controlled actuator (420) which is electronically connected to the controller and hydraulically to the first valve (440) to hydraulically control the operation of the first valve (440) on the basis of one or more electronic signals from the controller (145), and further comprises a second electronically controlled actuator (450) which is electronically connected to the controller (145) and hydraulically to the second valve (470) to hydraulically control the operation of the second valve (470) on the basis of one or more electronic signals from the controller (145). [15] Trigger control system (100) according to claim 14, wherein the locking circuit (120) further comprises a first intermediate control valve (430) connected to the first valve (440) and the first electronically controlled actuator (420), and a second intermediate control valve (460) connected to the second valve (470) and the second electronically controlled actuator (450), wherein both the first (430) and the second (460) intermediate control valve comprise a control input (X) and a first hydraulic output (B), and wherein both the first (440) and the second (470) valve comprise a control input (X), wherein the first electronically controlled actuator (420) comprises a hydraulic output (B) connected to the control input (X) of the first intermediate control valve (430), and wherein the first hydraulic output (B) of the first intermediate control valve (430) is connected to the control input (X) of the first valve (440) is connected,and wherein the second electronically controlled actuator (450) includes a hydraulic output (B) which is connected to the control input (X) of the second intermediate control valve (460), and wherein the first hydraulic output (B) of the second intermediate control valve (460) is connected to the control input (X) of the second valve (470). [16] Trigger control system (100) according to claim 15, wherein both the first (420) and the second (450) electronically controlled actuator include a hydraulic input (A) which is connected to the fluid pressure line (150, 150a, 150b). [17] Trigger control system (100) according to claim 16, wherein at least one of the hydraulic inputs (A) of the first (420) and second (450) electronically controlled actuator is connected to the fluid pressure line (150b) downstream of the first (440) and second (470) valve. [18] Trigger control system (100) according to claim 17, wherein both the first (430) and the second (460) intermediate control valve include a hydraulic inlet which is connected to the fluid pressure line (150b) upstream of the first (440) and second (470) valve. [19] Trigger control system (100) according to claim 13, further comprising a pressure sensor (480) configured to detect the pressure in the fluid pressure line (150b) downstream of the first (440) and second (470) valve, wherein the pressure sensor (480) is electronically connected to the control (145). [20] Trigger control system (100) according to claim 19, further comprising an opening (482) between the fluid pressure line (150b) and a low-pressure line, wherein an opening (482) is located in the fluid pressure line (150b) downstream of the first (440) and second (470) valve and serves to allow the fluid within the fluid pressure line (150b) to slowly flow out of the fluid pressure line (150a, 150b) through the opening (482). [21] Trigger control system (100) according to claim 20, further comprising a one-way valve (484) located within the fluid pressure line (150b) downstream of the opening (482). [22] Trigger control system (100) according to claim 13, further comprising a reset valve (490) having an inlet (A) connected to the fluid pressure line (150a) upstream of the first (440) and second (470) valves, and an outlet (B) connected to the fluid pressure line (150b) downstream of the first (440) and second (470) valves, wherein the reset valve (490) in the open position forms a bypass path in the fluid pressure line (150, 150a, 150b) bypassing the first (440) and second (470) valves. [23] Trigger control system (100) according to claim 22, further comprising an electronically controlled reset element (485) which is hydraulically connected to the reset valve (490) and electronically to the control unit (145) and is designed to open the reset valve (490) in response to an electronic control signal from the control unit (145). [24] Trigger control system (100) according to claim 23, wherein the reset valve (490) includes a hydraulic control input (X) and wherein the reset element (485) includes a reset element fluid input connected to the fluid pressure line (150a) upstream of the first (440) and second (470) valve, and a reset element fluid output connected to the hydraulic control input (X) of the reset valve (490). [25] Trigger control system (100) according to claim 20, further comprising a test program contained in computer-readable memory, which is designed to be executed in the processor of the control (145) to transmit an actuation signal with which the first (440) or the second (470) valve is actuated, and to use one or more signals from the pressure sensor (480) to detect a pressure drop in the pressure line (150b) downstream of the first (440) and second (470) valve. [26] Trigger control system (100) according to claim 25, wherein the test program is designed to determine the proper functioning of the first (440) and the second (470) valve by detecting a pressure drop of a certain amount within a defined period of time. [27] Trigger control system (100) according to claim 13, wherein the drain circuit (130) includes redundant drain valve systems (200, 210, 220) arranged between the fluid pressure line (150b) and the low-pressure fluid return line (160), each of the redundant drain valve systems (200, 210, 220) comprising one or more drain valves (230, 240, 250, 260, 270, 280) and a drain pressure sensor (330, 340, 350), and wherein the shut-off circuit (120) includes a shut-off pressure sensor, each of the drain pressure sensors (330, 340, 350) and the shut-off pressure sensor communicating with the controller (145), and wherein the controller (145) includes a first test program which, when implemented in the processor of the controller (145) transmits one or more first control signals to the drain circuit (130) to control one of the drain valves (230, 240, 250, 260, 270, 280) within the drain circuit (130) to control the function of one drain valve (230, 240, 250, 260, 270,280) during the operation of the controlled device, as well as a second test program which, when implemented in the processor of the control (145), transmits a second control signal to the blocking circuit (120) to actuate the first (440) or second (470) valve within the blocking circuit (120) in order to test the function of the first (440) or second (470) valve during the operation of the controlled device. [28] Trigger control system (100) according to claim 27, wherein the first test program uses a measurement of at least one of the drain pressure sensors (330, 340, 350) to determine whether one of the drain valves (230, 240, 250, 260, 270, 280) is working properly, and wherein the second test program uses a measurement of the blocking pressure sensor to determine whether one of the first (440) or second (470) valve is working properly. [29] Integrated triggering system, including: a distributor (500) with a fluid pressure inlet (150a) for connection to a fluid pressure source and with a fluid pressure outlet (150b) for connection to a controlled steam valve (140); a fluid pressure line (150, 150a, 150b) arranged in the distributor (500) between the fluid pressure inlet (150a) and the fluid pressure outlet (150b), wherein the fluid pressure line has a first section connected to the fluid pressure inlet (150a) and a second section connected to the fluid pressure outlet (150b), wherein the steam valve (140) is caused to close when the pressure in the fluid pressure line (150, 150a, 150b) at a trigger inlet of the steam valve (140) drops to a predetermined or significant value below the system pressure; a low-pressure fluid return line (160) located within the distributor (500); an electronically controlled drain circuit (130) including a plurality of drain valve systems (200, 210, 220), each drain valve system (200, 210, 220) comprising one or more drain valves (230, 240, 250, 260, 270, 280) which are disassemblably mounted on the manifold (500), an inlet (282, 285, 288) connected to the second section of the fluid pressure line, and an outlet (284, 287, 290) which is connected to the low-pressure fluid return line (160) such that the second section of the fluid pressure line is regulated and connected to the low-pressure fluid return line (160), and a drain pressure sensor (330, 340, 350) which is disassemblably mounted on the manifold (500) to to measure the pressure belonging to the drain valve system (200, 210, 220); as well as a shut-off valve circuit, containing: two electronically controlled shut-off valve systems (400, 410), each of the electronically controlled shut-off valve systems (400, 410) comprising a shut-off valve which is disassemblably mounted on the distributor (500) and is located in the first section of the fluid pressure line in order to control and shut off the fluid flow in the fluid pressure line (150, 150a, 150b) upstream of the shut-off circuit (120) from the fluid pressure line (150, 150a, 150b) downstream of the shut-off circuit (120), the shut-off valves being arranged in series; and a shut-off pressure sensor (480) which is mounted on the distributor (500) in a removable manner and detects the pressure in the fluid pressure line (150, 150a, 150b) downstream of the shut-off valves. [30] Integrated release system according to claim 29, wherein each of the two electronically controlled shut-off valve systems (400, 410) includes an electronically controlled actuator (420, 450) which is disassemblably mounted on the distributor (500), wherein each electronically controlled actuator (420, 450) has an electrical input (X) which communicates with an electronic control unit (145) and a hydraulic output (B) which hydraulically controls one of the shut-off valves. [31] Integrated release system according to claim 30, wherein each of the two electronically controlled shut-off valve systems (400, 410) further includes an intermediate control valve having a control input (X) which is hydraulically connected to one of the electronically controlled actuators (420, 450) and a hydraulic output (B) which is hydraulically connected to one of the shut-off valves. [32] Integrated release system according to 31, wherein each of the electronically controlled actuators (420, 450) has a hydraulic inlet (A) which is connected to the fluid pressure line (150, 150a, 150b) via the distributor, and wherein each of the intermediate control valves (430, 460) has a hydraulic inlet (A) which is connected to the fluid pressure line (150, 150a, 150b) via the distributor (500). [33] Integrated release system according to claim 32, wherein the hydraulic input (A) of each of the electronically controlled actuators (420, 450) is connected to the second section of the fluid pressure line and wherein each of the hydraulic inputs (A) of the intermediate control valves (430, 460) is connected to the first section of the fluid pressure line. [34] Integrated release system according to claim 32, wherein the distributor (500) further includes a low-pressure drain line (170) contained therein and wherein each of the electronically controlled actuators (420, 450) has a further output which is connected to the low-pressure drain line (170) via the distributor (500), wherein actuation of one of the electronically controlled actuators (420, 450) connects the control input (X) of one of the intermediate control valves (430, 460) to the fluid pressure line (150, 150a, 150b) or the low-pressure drain line (170). [35] Integrated release system according to claim 32, wherein the distributor (500) further includes a low-pressure drain line (170) contained therein and wherein each of the intermediate control valves (430, 460) has a further outlet which is connected to the low-pressure drain line (170) via the distributor (500), wherein the actuation of the intermediate control valves (430, 460) connects a control input (X) of one of the shut-off valves to the fluid pressure line (150a) or the low-pressure drain line (170). [36] Integrated release system according to claim 29, further comprising an additional low-pressure fluid path in the distributor and an opening (482) between the fluid pressure line and the additional low-pressure fluid path, wherein the opening (482) is located in the fluid pressure line downstream of the shut-off valves, so that the fluid within the fluid pressure line (150, 150a, 150b) can slowly escape from the fluid pressure line through the opening (482). [37] Integrated release system according to claim 36, further comprising a one-way valve (484) located within the fluid pressure line (150, 150a, 150b) downstream of the opening (482). [38] Integrated release system according to claim 29, further comprising an electronically controlled reset valve system with a reset valve (490) which is disassemblably mounted on the distributor (500), wherein the reset valve (490) has a reset valve inlet (A) which is connected via the distributor (500) to the first section of the fluid pressure line, and via a reset valve outlet (B) which is connected via the distributor (500) to the fluid pressure line (150, 150a, 150b) downstream of the shut-off valves (440, 470), wherein the reset valve (490) in the open position forms a bypass path in the fluid pressure line (150, 150a, 150b) which bypasses the shut-off valves (440, 470). [39] Integrated release system according to claim 38, wherein the electronically controlled reset valve system includes an electronically controlled reset element (485) which is detachably attached to the distributor (500) and hydraulically connected to the reset valve (490) via the distributor (500) and is designed to open the reset valve (490) in response to an electronic control signal. [40] Integrated release system according to claim 39, wherein the reset valve (490) includes a hydraulic reset control input (X) and wherein the reset element (485) includes a reset element fluid input connected to the first section of the fluid pressure line upstream of the shut-off valves, and a reset element fluid output connected to the hydraulic reset control input (X) of the reset valve (490). [41] Integrated release system according to claim 29, wherein each of the two drain valve systems (200, 210, 220) comprises two drain valves (230, 240, 250, 260, 270, 280) which are disassemblably mounted inside the distributor (500) and hydraulically connected in series with each other via the distributor (500), wherein the electronically controlled drain circuit (130) further comprises two or more electronically controlled drain actuators (292, 293, 294) which are disassemblably mounted on the distributor (500) and connected to the drain valves (230, 240, 250, 260, 270, 280) to control the operation of the drain valves (230, 240, 250, 260, 270, 280). [42] Integrated release system according to claim 41, wherein a first of the two or more electronically controlled drain actuators (292, 293, 294) is / are hydraulically connected to the first and the second of the drain valves (230, 240, 250, 260, 270, 280) in order to simultaneously control the operation of the first and the second of the drain valves (230, 240, 250, 260, 270, 280), wherein the first of the drain valves (230, 240, 250, 260, 270, 280) is assigned to a first of the drain valve systems (200, 210, 220) and the second of the drain valves (230, 240, 250, 260, 270, 280) is assigned to a second of the drain valve systems (200, 210, 220) which is not identical to the first of the drain valve systems (200, 210, 220).

Images