Intelligent electronic device and method for controlling the same

Abstract

The present invention relates to an intelligent electronic device, comprising: a sensor unit including a sensor for measuring the current and voltage of the power supply supplied from a line to electric power equipment; an output unit for outputting a control signal for driving a circuit breaker; and a plurality of IED modules, each connected to the sensor unit to receive the measurement results of the sensor unit and determine whether or not an overvoltage or overcurrent has occurred due to an accident situation based on the received measurement results, wherein the plurality of IED modules are configured so that any one of the plurality of IED modules has output authority to control the output unit and output a control signal, and according to the result of self-diagnosis execution based on the measurement results of the sensor unit, a first module having output authority controls the output unit according to its own accident situation determination result or transfers the output authority to a second module, and the second module controls the output unit according to its own accident situation determination result.

Description

[Technical Field]

[0001] The present invention relates to an intelligent electronic device (IED), and more particularly to an IED having a dual structure of a main IED module and a sub-IED module. [Background technology]

[0002] Generally, an intelligent electronic device (IED) is an electronic device that is installed on a line to detect the occurrence of a fault in the power system and control a circuit breaker to shut off the section where the fault occurred, thereby protecting power equipment in the faulted section, or protecting other power equipment connected to the line from overvoltage or overcurrent caused by a fault in the faulted section, thereby providing protection and monitoring functions for the power system in a specified line section.

[0003] To provide the protection and monitoring functions, such intelligent electronic devices connect to the power system via communication functions and perform designated functions according to commands from built-in software. As such, they tend to become more sophisticated and intelligent, not only providing communication functions and power equipment protection and monitoring functions, but also being able to provide more enhanced protection or monitoring functions according to built-in software or algorithms.

[0004] Meanwhile, the intelligent electronic device is connected to a line 10 that supplies power to the power equipment 30, as shown in Fig. 1, in order to provide protection and monitoring functions for the power equipment in the section. The intelligent electronic device is also configured to detect the voltage and current supplied to the power equipment 30 and control the circuit breaker 20 based on the detected voltage and current. For this purpose, a typical intelligent electronic device 40 is connected to the circuit breaker 20 arranged on the line 10 that connects the bus 11 and the power equipment 30.

[0005] However, as mentioned above, as intelligent electronic devices become more sophisticated, the possibility of malfunction or errors occurring in the intelligent electronic devices increases. Furthermore, if the protection and monitoring described above are not performed properly due to a malfunction or error in the intelligent electronic devices, an overvoltage or overcurrent caused by an accident occurring in the busbar 11 section may flow in and damage the power equipment, and an overvoltage or overcurrent caused by an accident occurring within the section connected via the line 10 may flow into the busbar 11 section and damage other equipment connected to the busbar 11.

[0006] Therefore, there has been much research into methods for stably maintaining the protection and monitoring functions even when the intelligent electronic device breaks down, malfunctions, or experiences an error. Summary of the Invention [Problem to be solved by the invention]

[0007] The present invention aims to solve the above problems and other problems, and aims to provide an intelligent electronic device and a control method for the intelligent electronic device that ensures that the protection and monitoring functions for the power equipment in the section are stably maintained even when a failure, malfunction, or error occurs. [Means for solving the problem]

[0008] In order to achieve the above or other objects, according to one aspect of the present invention, an intelligent electronic device according to an embodiment of the present invention includes a sensor unit including at least one sensor that measures at least one of the current and voltage of the power supply supplied from a line to electric power equipment, an output unit that outputs a control signal for driving a circuit breaker that cuts off the power supply supplied to the electric power equipment, and a plurality of IED (Intelligent Electronic Device) modules, each connected to the sensor unit, receiving the measurement results of the sensor unit, and determining whether the received measurement results are due to an overvoltage or overcurrent caused by an accident situation, respectively, and the plurality of IED modules are configured so that any of the plurality of IED modules has output authority to control the output unit and output the control signal, and depending on the result of self-diagnosis execution based on the measurement results of the sensor unit, a first module having the output authority controls the output unit according to its own accident situation determination result, or transfers the output authority to a second module, and the second module controls the output unit according to its own accident situation determination result.

[0009] In one embodiment, if the self-diagnosis execution result indicates that the first module's operating status is normal, the first module transmits the self-diagnosis execution result to the second module, and if the self-diagnosis execution result indicates that the first module's operating status is abnormal, the first module transmits data regarding the output authority to the second module and transfers the output authority to the second module.

[0010] In one embodiment, the self-diagnosis is performed based on whether the CRC check result of the data generated in the process of processing the measurement results of the sensor unit according to a predetermined accident situation determination algorithm exceeds a predetermined range, or whether the result value processed according to the accident situation determination algorithm exceeds a predetermined range, and the predetermined range is determined based on a setting value set in the IED module performing the self-diagnosis or at least one previous result value.

[0011] In one embodiment, the first module performs the self-diagnosis at a predetermined time interval and notifies the second module of the self-diagnosis result.

[0012] In one embodiment, if the second module does not receive a self-diagnosis result from the first module for a predetermined period of time, it activates the output control function and obtains the output authority from the first module, and if the self-diagnosis result of the first module is not sent to the second module for the predetermined period of time or the output control function of the second module is activated, the first module deactivates its own output control function.

[0013] In one embodiment, the multiple IED modules are equipped with an internal communication unit for internal communication between each other, and the internal communication unit allows the setting values ​​set in any of the modules to be shared and synchronized.

[0014] In one embodiment, when the setting values ​​of the multiple IED modules are synchronized, the other modules except for one of the modules having the output authority operate in a standby state, and when the output authority is acquired from one of the modules in the standby state, the measurement results of the sensor unit are received, and whether or not an accident situation has occurred is determined based on the received measurement results.

[0015] In one embodiment, when the setting values ​​of the multiple IED modules are synchronized, each receives the measurement results of the sensor unit, and determines whether the overvoltage or overcurrent is due to an accident situation based on the received measurement results, and controls the output unit according to the accident situation determination result of any module among the multiple IED modules that has output authority to output the control signal.

[0016] In one embodiment, when the first module determines that an accident situation has occurred in the result of the accident situation determination based on the measurement results, it requests the second module to determine whether an accident situation has occurred, and upon receiving the accident situation determination result from the second module, if its own accident situation determination result and the accident situation determination result of the second module are the same, it controls the output unit in accordance with its own determination result to output the control signal, and if its own accident situation determination result and the accident situation determination result of the second module are different, it controls the output unit in accordance with the determination result of the second module to output the control signal.

[0017] In one embodiment, when the first module determines that an accident situation has occurred based on the result of the accident situation determination based on the measurement result, the first module requests the second module to determine whether an accident situation has occurred after a predetermined time delay.

[0018] In one embodiment, if the first module's own accident situation occurrence determination result differs from the accident situation occurrence determination result of the second module, the first module receives a measurement signal from the sensor unit and re-determines whether an accident situation has occurred, and if the re-determined accident situation occurrence determination result differs from the accident situation occurrence determination result received from the second module, the first module controls the output unit in accordance with the re-determined accident situation occurrence determination result to output the control signal.

[0019] In addition, the control method of the intelligent electronic device according to an embodiment of the present invention includes the steps of: when operation is started, a first module among the plurality of IED modules, which has control authority to control an output unit to output a control signal for driving a circuit breaker that cuts off power supplied to a power device, checking a setting value set in the first module and transmitting the setting value to at least one other IED module; and the at least one other IED module receiving the transmitted setting value, synchronizing the setting value, and entering standby mode. by), a step of the first module receiving the measurement signal, a step of the first module processing the received measurement signal in accordance with a predetermined accident situation determination algorithm, a step of the first module performing a self-examination based on the measurement signal processing result, a step of the first module transferring control authority to control the output unit to a second module among the at least one other IED module when an abnormal state is detected in the self-examination result, a step of the second module determining whether an accident situation has occurred according to the measurement signal processing result, and a step of the second module controlling the output unit to output the control signal according to the result of determining whether an accident situation has occurred.

[0020] In one embodiment, the step of the first module performing the self-examination includes the steps of the first module transmitting the self-examination result to a second module among the at least one other IED module if the self-examination result is normal, the first module determining whether or not an accident situation has occurred based on the measurement signal processing result, and the first module controlling the output unit based on the accident situation determination result, or repeating the steps from receiving the measurement signal to performing the self-examination.

[0021] In one embodiment, the step of the first module transmitting the self-examination result to the second module is characterized in that the first module detects whether a predetermined time has expired, and if the self-examination result is normal when the predetermined time has expired, the first module transmits the self-examination result to the second module.

[0022] In one embodiment, the step of the first module transferring the control authority to control the output unit to the second module includes a step of detecting whether the second module has received the self-examination result from the first module within a predetermined time since previously receiving the self-examination result, and a step of the second module obtaining the control authority to control the output unit from the first module and activating the output unit control function that is in an inactive state if the self-examination result is not received.

[0023] In one embodiment, the step of the first module determining whether or not an accident situation has occurred according to the measurement signal processing result includes the steps of: when the first module determines that the accident situation has occurred, requesting the second module to determine whether or not an accident situation has occurred; the second module determining whether or not an accident situation has occurred based on the measurement signal and transmitting the determination result to the first module; and the first module determining whether or not an accident situation has occurred according to its own determination result if its own determination result of whether or not an accident situation has occurred is the same as the result of the second module's determination of whether or not an accident situation has occurred, and determining whether or not an accident situation has occurred according to the determination result of the second module if its own determination result of whether or not an accident situation has occurred is different from the result of the second module's determination of whether or not an accident situation has occurred.

[0024] In one embodiment, the step of the first module requesting the second module to determine whether or not an accident situation has occurred is characterized in that, when the occurrence of the accident situation is determined, the first module requests the second module to determine whether or not an accident situation has occurred after a predetermined time has elapsed. [Effects of the Invention]

[0025] The effects of the intelligent electronic device and the control method for the intelligent electronic device according to the present invention will now be described.

[0026] According to at least one embodiment of the present invention, an intelligent electronic device includes a plurality of intelligent electronic device modules that are operated independently of each other and each perform the protection and monitoring functions. Furthermore, if a failure or malfunction is detected in one of the intelligent electronic device modules while the protection and monitoring functions are being performed by the other intelligent electronic device modules, the protection and monitoring functions can be continued by the other intelligent electronic device modules. Therefore, even if a failure, malfunction, or error occurs in the intelligent electronic device, the protection and monitoring functions can be stably maintained.

[0027] In addition, according to at least one embodiment of the present invention, when one intelligent electronic device module determines that an accident has occurred, it requests at least one other intelligent electronic device module to determine whether an accident has occurred, and determines whether an accident has occurred by combining the accident determination results of the at least one other intelligent electronic device module, thereby preventing any intelligent electronic device module from erroneously determining an accident due to a failure or malfunction.

[0028] Furthermore, according to at least one embodiment of the present invention, the present invention allows at least one intelligent electronic device module to share at least one component with another, thereby maintaining stable protection and monitoring functions for power equipment within the section and reducing costs compared to using multiple intelligent electronic devices. [Brief explanation of the drawings]

[0029] [Figure 1] FIG. 1 shows an example of a typical intelligent electronic device being deployed on a railroad line. [Figure 2] FIG. 1 illustrates an example of an on-rail deployment of intelligent electronic devices according to an embodiment of the present invention. [Figure 3] FIG. 2 is a block diagram illustrating in more detail the configuration of an intelligent electronic device according to an embodiment of the present invention. [Figure 4] 1 is a flowchart illustrating an operation process of a main IED module in an intelligent electronic device according to an embodiment of the present invention. [Figure 5] 1 is a flowchart illustrating an operation process of a sub-IED module in an intelligent electronic device according to an embodiment of the present invention. [Figure 6] 10 is a flowchart illustrating another operation process of a sub-IED module in an intelligent electronic device according to an embodiment of the present invention. [Figure 7] FIG. 10 is a block diagram illustrating the configuration of an intelligent electronic device according to another embodiment of the present invention. [Figure 8] 10 is a flowchart illustrating an operation process of changing a sensor unit that receives a measurement result according to the measurement result of the sensor unit in an intelligent electronic device according to another embodiment of the present invention. [Figure 9] 1A and 1B are diagrams illustrating an example of a temporary overvoltage phenomenon caused by noise. [Figure 10] 4 is a flowchart illustrating an operation process of an intelligent electronic device according to an embodiment of the present invention, in which a plurality of intelligent electronic device modules cooperate to determine whether an accident situation has occurred. [Figure 11] 11 is a diagram illustrating an example in which different intelligent electronic modules detect voltages in different time intervals according to the operation process of FIG. 10; DETAILED DESCRIPTION OF THE INVENTION

[0030] The technical terms used in this specification are merely used to describe specific embodiments and are not intended to limit the present invention. Furthermore, singular expressions used in this specification include plural expressions unless otherwise specified. The suffixes "module" and "section" for components used in the following description are given or mixed to facilitate the preparation of the specification and do not have any significance or utility in themselves.

[0031] In the present invention, the terms "comprise" or "include" should not be interpreted as necessarily including all of the various components or steps described in the specification, but rather as including some of the components or steps, or as including other components or steps.

[0032] Furthermore, when describing the technology disclosed in this specification, if it is determined that a specific description of related publicly known technology would obscure the gist of the technology disclosed in this specification, that detailed description will be omitted.

[0033] Furthermore, the accompanying drawings are merely intended to aid in understanding the embodiments disclosed in this specification, and are not intended to limit the technical ideas disclosed in this specification, but should be understood to include any modifications, equivalents, or alternatives within the spirit and technical scope of the present invention. Furthermore, it goes without saying that not only the embodiments described below, but also combinations thereof are modifications, equivalents, or alternatives within the spirit and technical scope of the present invention.

[0034] FIG. 2 is a diagram illustrating an example of an on-rail deployment of intelligent electronic devices according to an embodiment of the present invention.

[0035] As shown in Fig. 2, power is supplied to the power equipment 30 via a line 10 connected to a bus 11. Here, the power equipment 30 is a transformer or a current transformer that converts a voltage or current supplied via the line 10 into a different voltage or current and supplies it to at least one other connected equipment. In addition, a circuit breaker 20 is provided on the line 10 between the power equipment 30 and the bus 11 to prevent an overvoltage or overcurrent caused by a fault occurring on the bus 11 from flowing into the power equipment 30 or to prevent an influence of a fault condition in an internal section of the power equipment 30 from reaching the bus 11 via the line 10.

[0036] Furthermore, the intelligent electronic device 100 according to the embodiment of the present invention is connected to the line 10 through which the electrical energy flowing from the circuit breaker 20 is supplied to the power equipment 30 so as to detect the voltage or current of the electrical energy supplied to the power equipment 30. Furthermore, the intelligent electronic device 100 is connected to the circuit breaker 20 and transmits a circuit breaker control signal to the circuit breaker 20 to drive the circuit breaker 20 to cut off the electrical energy supplied to the power equipment 30. Hereinafter, the section to which power is supplied via the line 10 is referred to as the internal section.

[0037] Meanwhile, the intelligent electronic device 100 according to an embodiment of the present invention has a dual structure including a first intelligent electronic device (IED) module (hereinafter referred to as the first IED module) 110 and a second IED module 120, as shown in Fig. 2. Here, the first IED module 110 and the second IED module 120 refer to modules that share at least one component, including the output unit 140 that outputs a circuit breaker control signal to the circuit breaker 20, in the intelligent electronic device 100 according to an embodiment of the present invention.

[0038] In this case, only one of the first IED module 110 and the second IED module 120 has the right to output the circuit breaker control signal through the output unit 140 .

[0039] Meanwhile, the first IED module 110 and the second IED module 120 cooperate with each other to more stably perform protection and monitoring functions in response to accident conditions within or outside the internal section. For this cooperation, one of the first IED module 110 and the second IED module 120 functions as a main IED module, and the other functions as a sub-IED module. Here, the main IED module operates normally, and the sub-IED module operates auxiliary only upon request from the main IED module or when an abnormality occurs in the main IED module. For this purpose, the main IED module has a function for self-diagnosing its operating state.

[0040] The self-diagnosis function is a function for determining whether or not there is a failure, malfunction, or error based on a test signal generated by the IED module itself, which may be provided by another IED module.

[0041] For example, one of the IED modules (the verification module) provides a virtual measurement signal as the test signal to the other IED module (the module to be verified), and the verification module receives the result of the module to be verified processing the virtual measurement signal in response to the test signal.

[0042] The pre-stored processing results are the results of processing the virtual measurement signal when the module under test operates normally. Therefore, the verification module determines whether or not there is a fault, error, or malfunction in the module under test by comparing the processing results received from the module under test with the pre-stored processing results. To this end, the verification module has at least one test signal and pre-stored processing results corresponding to each of the at least one test signal.

[0043] In addition, after the self-diagnosis of one of the IED modules is completed, the verifying module and the verified module may be switched. In other words, multiple IED modules use virtual measurement signals to determine whether there is a failure, error, or malfunction.

[0044] The self-diagnosis function is a function for determining whether the IED module is operating normally based on the measurement results of the sensor unit that detects at least one of the current and voltage on the line 10. For example, the self-diagnosis function is a function for determining whether the IED module is operating normally based on at least one of a CRC check, a range of result values ​​according to a processing result corresponding to the measurement results of the sensor unit, and a range of result values ​​based on a previous result value and a setting value currently set in the IED module. In this case, if an error occurs in the CRC check of the processing result or the result value, a value that is excessively low or high compared to a previous result value is calculated, or a result value that deviates from the range based on the measurement results of the sensor unit or the setting value set in the IED module is calculated, it is determined that a failure, error, or malfunction has occurred in the IED module.

[0045] Therefore, if a failure, error, or malfunction is detected in the main IED module as a result of the self-diagnosis, the main IED module transfers the authority to output the circuit breaker control signal to the sub-IED module. Alternatively, if the self-diagnosis execution result is not received from the main IED module for a predetermined period of time, the sub-IED module seizes the authority to output the circuit breaker control signal from the main IED module. Through this transfer or seizure process, the sub-IED module obtains the authority to output the circuit breaker control signal from the main IED module in which the abnormality occurred. In addition, the sub-IED module receives and processes the measurement results of the sensor unit, thereby performing protection and monitoring functions according to accident conditions within or outside the internal section. Therefore, even if one IED module fails or malfunctions, the other IED module maintains stable functionality of the intelligent monitoring device.

[0046] To this end, the main IED module and the sub-IED module are modules that can independently perform the general functions of an intelligent electronic device, which measures voltage and current signals supplied from the line 10 to the power equipment 30, determines whether an accident has occurred based on the measured voltage and current signals, and outputs a circuit breaker control signal for controlling the circuit breaker 20 according to the determination result. The main IED module and the sub-IED module also share and synchronize their setting values. To this end, the main IED module and the sub-IED module are modules that are connected to each other through internal communication. Through this internal communication, the setting values ​​of the main IED module are automatically sent to the sub-IED module, and the setting values ​​are synchronized.

[0047] On the other hand, an example of cooperation between the main IED module and the sub-IED module is the double-check function for the judgment results of the main IED module.

[0048] For example, depending on the voltage or current measurement results of the sensor unit, the main IED module determines that an accident situation has occurred on the line 10. For example, if an accident such as a short circuit or a ground fault occurs on the line 10, the main IED module detects an overvoltage or overcurrent caused by the accident such as the short circuit or ground fault, and thereby determines that an accident situation has occurred.

[0049] However, the overvoltage or overcurrent can also occur due to abnormal phenomena such as noise or a temporary surge. Such a temporary overvoltage or overcurrent caused by a noise-related abnormal phenomenon occurs and disappears in a short time, and has little or no effect on the power equipment 30.

[0050] On the other hand, if the circuit breaker 20 is driven to cut off the power supplied to the power equipment 30, losses will occur due to the interruption of the operation of the power equipment 30. In addition, there is a problem that it may cause unexpected damages such as the loss of data in operation on the power equipment 30 and related equipment, and the cost of restarting equipment related to the stopped power equipment 30. Therefore, in order to cope with the noise-related abnormal phenomenon, it is necessary to prevent the circuit breaker 20 from being driven even when an overvoltage or overcurrent occurs.

[0051] To this end, when the intelligent electronic device 100 according to an embodiment of the present invention determines based on the received measurement signal that an accident has occurred in the main IED module, it requests the sub-IED module to perform the double check. The sub-IED module that requested the double check then re-determines whether an accident has occurred based on the measurement signal measured by its sensor, allowing the main IED module and the sub-IED module to independently determine whether an accident has occurred. Furthermore, the main IED module receives the determination result from the sub-IED module and combines it with its own determination result to ultimately determine whether an accident has occurred. Therefore, the intelligent electronic device 100 according to an embodiment of the present invention can more powerfully and accurately determine whether an accident has occurred in the face of such temporary abnormal phenomena.

[0052] Meanwhile, in the above description, the intelligent electronic device 100 according to an embodiment of the present invention has been described as including a first IED module 110 and a second IED module 120 as IED modules that share at least one component, including an output unit. However, it goes without saying that the present invention is not limited to this. That is, two or more IED modules may be included as needed. However, for the sake of convenience, the following description will be given by way of example of an IED including two IED modules, the first IED module 110 and the second IED module 120. Furthermore, an intelligent electronic device 100 including multiple IED modules according to an embodiment of the present invention will be referred to as a duplicated intelligent electronic device (duplicated IED).

[0053] FIG. 3 is a block diagram showing in more detail the configuration of the duplexed IED 100 according to the embodiment of the present invention described above.

[0054] As shown in Figure 3, the duplicated IED 100 according to the embodiment of the present invention includes a sensor unit 130, an output unit 140, and a first IED module 110 and a second IED module 120 that share the sensor unit 130 and the output unit 140. Here, the components shown in Figure 3 are not essential for realizing an intelligent electronic device, and the components of the intelligent electronic device (duplicated IED 100) described in this specification may be more or less than the components described above.

[0055] First, the sensor unit 130 is connected to the line 10 that supplies electric energy to the power equipment 30, and includes at least one sensor for detecting the current and voltage of the electric energy. Here, the measurement result of the sensor unit 130 is an analog signal corresponding to the change in the magnitude of the current or voltage, and the measured current signal or voltage signal, i.e., the measurement signal, is input to either the first IED module 110 or the second IED module 120, or to both the first IED module 110 and the second IED module 120.

[0056] In addition, the output unit 140 outputs a circuit breaker control signal to the circuit breaker 20 to drive the circuit breaker 20 depending on the result of the first IED module 110 or the second IED module 120 determining whether an accident has occurred in response to the input measurement signal. To this end, the output unit 140 is connected to the circuit breaker 20 and configured to output the circuit breaker control signal to the circuit breaker 20 under the control of either the first IED module 110 or the second IED module 120.

[0057] 3, the sensor unit 130 and the output unit 140 are connected to the first IED module 110 and the second IED module 120, respectively, and are shared by the first IED module 110 and the second IED module 120. However, while the sensor unit 130 can provide measurement signals to both the first IED module 110 and the second IED module 120, the output unit 140 is connected to only one of the IED modules and is configured to operate under the control of either of the connected IED modules. In other words, only one of the first IED module 110 and the second IED module 120 has the authority to control the output unit 140 and output a circuit breaker control signal.

[0058] First, the first IED module 110 will be described. The first IED module 110 includes a first processor 111, a first communication unit 112 connected to the first processor 111, a first memory 114, and a first self-diagnosis unit 113. The components of the first IED module 110 shown here are not essential, and the components of the first IED module 110 described in this specification may be more or less than the components described above.

[0059] First, the first communication unit 112 establishes a communication connection with the second IED module 120. For example, the first communication unit 112 is connected to a second communication unit 122 provided in the second IED module 120, and supports the communication connection between the first IED module 110 and the second IED module 120 in a predetermined communication method.

[0060] Here, the dual IED 100 does not have a large internal space, and the first IED module 110 and the second IED module 120 are located adjacent to each other. Therefore, the first communication unit 112 and the second communication unit 122 are connected by a wired communication method in which they are directly connected by a hard wire or the like, rather than by a wireless communication method. However, it goes without saying that the first communication unit 112 and the second communication unit 122 may also be connected by a short-range wireless communication method such as Bluetooth.

[0061] The first self-diagnosis unit 113 also performs a self-diagnosis on the first IED module 110. For example, the first self-diagnosis unit 113 performs a CRC check on data generated during processing of a measurement signal measured by the sensor unit 130. Alternatively, the first self-diagnosis unit 113 receives a processing result from the first processor 111 corresponding to the measurement result of the sensor unit 130 and determines whether the received result value is excessively low or high compared to at least one previous result value. The first self-diagnosis unit 113 also determines whether the result value falls outside the range of result values ​​according to the setting values ​​currently set for the first IED module 110 or the range of result values ​​according to the measurement result of the sensor unit 130. Based on the determination result, the first self-diagnosis unit 113 determines whether the first IED module 110, i.e., the first processor 111, is operating normally.

[0062] Meanwhile, the first memory 114 stores data that supports the functions of the first processor 111. The first memory 114 stores commands and data related to a plurality of programs or algorithms that are launched in the first IED module 110 by the first processor 111. The first memory 114 also stores data to be sent to the second IED module 120 and data received from the second IED module 120. The first memory 114 also stores information related to parameters that are set to determine whether an accident has occurred.

[0063] The first processor 111 also controls the connected components and the overall operation of the first IED module 110. That is, the first processor 111 receives voltage and current signals measured by the sensor unit 130 and detects measurement values ​​corresponding to the received measurement signals. The first processor 111 processes the detected measurement values ​​based on at least one program or algorithm stored in the first memory 114 and determines whether an accident has occurred based on the processing results. Here, the measurement values ​​are values ​​obtained by converting analog measurement signals into digital values ​​through quantization.

[0064] Meanwhile, the second IED module 120 is configured in the same manner as the first IED module 110. That is, the second IED module 120 also includes a second processor 121, a second communication unit 122 connected to the second processor 121, a second memory 124, and a second self-diagnosis unit 123. The components of the second IED module 120 shown here are not essential, and the components of the second IED module 120 described in this specification may be more or less than the components described above.

[0065] First, the second communication unit 122 establishes a communication connection with the first IED module 110. For example, the second communication unit 122 is connected to the first communication unit 112 provided in the first IED module 110, and supports the communication connection between the second IED module 120 and the first IED module 110 using a predetermined communication method, for example, a wired communication method.

[0066] In addition, the second self-diagnosis unit 123 performs a self-diagnosis on the second IED module 120. For example, the first self-diagnosis unit 113 performs a CRC check on data generated during processing of a measurement signal measured by the sensor unit 130, determines whether a result value calculated according to the processing result of the second processor 121 corresponding to the measurement result of the sensor unit 130 is excessively low or high compared to at least one previous result value, or determines whether the result value is outside the range of result values ​​according to the setting value currently set for the second IED module 120 or the range of result values ​​according to the measurement result of the sensor unit 130. Furthermore, depending on the determination result, the first self-diagnosis unit 113 determines whether the operating state of the second IED module 120, i.e., the second processor 121, is normal.

[0067] Meanwhile, the second memory 124 stores data that supports the functions of the second processor 121. The second memory 124 stores commands and data related to a plurality of programs or algorithms that are launched in the second IED module 120 by the second processor 121. The second memory 124 also stores data to be sent to the first IED module 110 and data received from the first IED module 110. The second memory 124 also stores information related to setting values ​​that are set to determine whether or not an accident situation has occurred.

[0068] The second processor 121 also controls the connected components and the overall operation of the second IED module 120. That is, the second processor 121 receives voltage and current signals measured by the sensor unit 130, detects measurement values ​​corresponding to the received measurement signals, processes the detected measurement values ​​based on at least one program or algorithm stored in the second memory 124, and determines whether an accident situation has occurred based on the processing results.

[0069] Meanwhile, the first IED module 110 and the second IED module 120 are IED modules to which similar software and algorithms for processing measurement signals measured by the sensor unit 130 are applied. Therefore, the setting values, i.e., parameters, applied to the first IED module 110 and the second IED module 120 are the same in number and type.

[0070] In addition, either the first IED module 110 or the second IED module 120 operates as a main IED module, and the other operates as a sub-IED module. In this case, the processor of the main IED module (hereinafter referred to as the main processor) controls the self-diagnosis unit of the main IED module to diagnose whether there is an abnormality in the operation of the main IED module, i.e., the main processor. The diagnosis result is also sent to the sub-IED module to notify it that there is no abnormality in the main IED module. In this case, since the main IED module has the authority to control the output unit 140, only the main IED module controls the output unit 140 to output a circuit breaker control signal.

[0071] In contrast, if the main processor detects an abnormality in its operation as a result of the diagnosis by the self-diagnosis unit of the main IED module, the main processor transfers the authority to control the output unit 140 to the sub-IED module. The sub-IED module then processes the measurement results of the sensor unit 130 based on at least one program or algorithm stored in the memory of the sub-IED module and determines whether an accident has occurred based on the processing results. The sub-IED module also controls the output unit 140 to output a circuit breaker control signal. Therefore, if the main IED module is unable to operate normally due to a failure, malfunction, or error, the sub-IED module takes over from the main IED module to determine whether an accident has occurred and outputs a circuit breaker control signal to activate the circuit breaker 20 according to the determination result.

[0072] Meanwhile, as described above, if the main processor detects a failure, error, malfunction, or the like by itself based on the diagnosis result of the self-diagnosis unit, the authority to output the circuit breaker control signal is transferred to the sub-IED module under the control of the main processor. For example, the transfer of the authority to output the circuit breaker control signal is performed by transmitting data regarding the authority to output the circuit breaker control signal to the sub-IED module. In this case, when the sub-IED module receives the data regarding the authority to output the circuit breaker control signal, it activates the circuit breaker control function. Furthermore, when the sub-IED module transmits the data regarding the authority to output the circuit breaker control signal, the main IED module deactivates the circuit breaker control function.

[0073] However, if the main IED module becomes inoperable, such as when it is turned off due to a power failure, the sub-IED module will seize the authority to output the circuit breaker control signal from the main IED module and acquire the authority to output the circuit breaker control signal for itself.

[0074] The processor of the sub-IED module, i.e., the sub-processor, determines that the state of the main IED module is inoperable if the main IED module does not establish a communication connection with the main IED module for a predetermined period of time, for example, if the main IED module does not notify the sub-IED module of its self-test results for a predetermined period of time. Furthermore, if the sub-processor determines that the main IED module is inoperable, it seizes the authority to output a circuit breaker control signal from the main IED module. Therefore, even if the main IED module does not transmit data regarding the authority to output a circuit breaker control signal, the sub-IED module activates its circuit breaker control function. In this case, the main IED module is in an inoperable state (e.g., unable to notify the self-test results), and the circuit breaker control function is disabled. Furthermore, even if the main IED module is not in an inoperable state, if it does not notify the sub-IED module of its self-test results for a predetermined period of time, the circuit breaker control function of the main IED module is deactivated.

[0075] Therefore, even if the main processor does not transfer the authority to output the circuit breaker control signal due to a sudden inoperation of the main IED module, the sub-IED module continues to perform the protection and monitoring functions for the internal section by seizing the authority to output the circuit breaker control signal.

[0076] 4 to 6 are flowcharts showing the operation process of the main IED module and the operation process of the sub-IED module in the duplexed IED 100 according to the embodiment of the present invention.

[0077] First, Fig. 4 is a flowchart showing the operation process of the main processor of the main IED module. Here, as shown in Fig. 3, when the dual IED 100 is realized to include the first IED module 110 and the second IED module 120, either the first IED module 110 or the second IED module 120 operates as the main IED module, and the other operates as the sub-IED module.

[0078] Here, only one of the first IED module 110 and the second IED module 120 has the authority to output a circuit breaker control signal that drives the circuit breaker 20 to cut off the power supplied to the power equipment 30. In this case, the main IED module has the authority to output the circuit breaker control signal in priority over the sub-IED module.

[0079] As shown in FIG. 4, when power is supplied to the duplicated IED 100, power is supplied to both the main IED module and the sub-IED module provided in the duplicated IED 100. Then, the main IED module and the sub-IED module enter a standby state where they can perform their designated functions. Furthermore, one of the modules authorized to output the circuit breaker control signal operates first according to the operation process of FIG. 4. Hereinafter, the IED module authorized to output the circuit breaker control signal and set to operate before the other IED modules is referred to as the main IED module. Therefore, when power is supplied to the duplicated IED 100, the sub-IED module remains in a standby state, while the main IED module begins operation according to the operation process of FIG. 4.

[0080] First, the main processor of the main IED module checks the setting values ​​set in the main IED module. It also checks whether the sub-IED module is operating normally in standby mode (S400). In this case, the sub-IED module transmits a response signal in response to the operation status check request in step S400, and the main IED module determines whether the sub-IED module has been switched to standby mode normally based on the response signal received from the sub-IED module. In this case, the operation status check request and the response signal are exchanged through communication between the first communication unit 112 of the first IED module 110 and the second communication unit 122 of the second IED module 120.

[0081] If a response signal is not received from the sub-IED module as a result of the check in step S400, the main IED module determines that the sub-IED module is not operating normally. In this case, the main IED module records the fault status of the sub-IED module and indicates the occurrence of a fault in the duplicated IED 100. For example, if the duplicated IED 100 includes a communication unit (not shown) connected to a predetermined external server, the main processor notifies the external server of the fault status of the sub-IED module. Meanwhile, since the main IED module is currently operating normally, no circuit breaker control signal is output.

[0082] On the other hand, if the check result in step S400 indicates that the sub-IED module is operating normally, the main processor transmits the setting value of the main IED module checked in step S400 to the sub-IED module (S402). The sub-IED module then synchronizes the setting value with that of the main IED module based on the received setting value. That is, the same setting value is set in the sub-IED module and the main IED module.

[0083] After the setting value synchronization is performed by transmitting the setting value in step S402, the main processor receives the measurement signal measured by the sensor unit 130 (S404). The main processor also performs a self-diagnosis of the main IED module based on the received measurement signal and the measurement value corresponding to the measurement signal (S406). Here, the self-diagnosis process of the IED module is a process in which the processor of the self-diagnosis IED module itself determines whether the IED module to be self-diagnosed is operating normally.

[0084] Meanwhile, the self-diagnosis process is performed based on the received measurement signal. For example, the self-diagnosis process includes a CRC check on data generated in a process of processing the measurement signal measured by the sensor unit 130 according to predetermined software or algorithm. The self-diagnosis process also includes a process of detecting whether the processing result of the predetermined software or algorithm on the measurement result of the sensor unit 130 exceeds a predetermined range. Here, the predetermined range is determined based on at least one previous result value or a setting value of the main IED module to be self-diagnosed.

[0085] When the self-test in step S406 is completed, the main processor determines, based on the self-test result in step S406, whether the main IED module is operating normally or whether there is a failure, malfunction, or error, i.e., whether an abnormal state has occurred in the main IED module (S408). Also, if the determination in step S408 shows that no abnormal state has occurred, the main IED module transmits the self-test result in step S406 to the sub-IED module (S410). That is, if the self-test result shows no abnormality, the main IED module notifies the sub-IED module that there is no abnormality in the operation of the main IED module by transmitting the self-test result to the sub-IED module.

[0086] The main IED module then determines whether an accident such as a leakage current or a short circuit has occurred based on a measurement value corresponding to the measurement result received from the sensor unit 130, for example, a processing result value obtained by processing the measured analog signal according to predetermined software or an algorithm (S412, S414). If it determines that an accident has occurred, it outputs a circuit breaker control signal for controlling the circuit breaker 20 to cut off the power supply to the power equipment 30 and displays the current accident status (S416). For example, the main processor notifies the external server of the current accident status and the power supply cut-off status of the power equipment 30 via a communication unit (not shown) connected to the external server. Alternatively, the duplicated IED 100 displays whether the accident has occurred using a display unit (not shown) or an optical output unit (not shown) such as an LED provided in the duplicated IED 100.

[0087] On the other hand, if the determination result of step S414 indicates that no accident has occurred, the main processor proceeds to step S404, where it again receives the measurement signal measured by the sensor unit 130. It also performs the subsequent steps again. Therefore, the main processor continues to self-diagnose whether the main IED module is operating normally and transmits the self-diagnosis result to the sub-IED module. Therefore, the sub-IED module continues to receive the self-diagnosis result.

[0088] Meanwhile, in the above description, it has been assumed that the self-examination is continuously repeated, but the self-examination may be repeated at a predetermined interval. In this case, the main processor performs the self-examination at a predetermined interval. That is, when a measurement signal is received in step S404, if the predetermined time has elapsed, the process proceeds to step S406, where the self-examination is performed. However, if the predetermined time has not elapsed since the measurement signal was received in step S404, the main processor immediately proceeds to step S412, where it determines whether an accident has occurred based on the measurement values.

[0089] On the other hand, if the main IED module is determined to have an abnormality as a result of the abnormality determination based on the self-examination results in step S408, the main processor transfers the authority to output the circuit breaker control signal to the sub-IED module (S418). The main processor also records the occurrence of the abnormality and displays the detected abnormality (S420). For example, the main processor notifies the currently detected abnormality of the main IED module via a communication unit (not shown) connected to the external server. Alternatively, the main processor displays the occurrence of the abnormality of the main IED module via a display unit (not shown) or an optical output unit (not shown) such as an LED provided in the duplicated IED 100. The main processor also switches the main IED module to an inactive state. In this case, the inactive state is a state in which the power is turned off or a state in which only the abnormality display of the main IED module is maintained.

[0090] Meanwhile, when the sub-IED module receives the authority to output the circuit breaker control signal from the main IED module, it replaces the main IED module and protects and monitors the internal section to which power is supplied to the power equipment 30. Figures 5 and 6 are diagrams showing the operation process of such a sub-IED module.

[0091] 5 is a flowchart showing the operation of the sub-IED module in the intelligent electronic device according to an embodiment of the present invention. In this case, the sub-IED module is in a standby state, and then the authority to output the circuit breaker control signal is transferred from the main IED module. Then, the sub-IED module receives a measurement signal from the sensor unit 130 and determines whether an accident has occurred based on the received measurement signal.

[0092] FIG. 5 is a flowchart showing the operation process of the sub-IED module in this case.

[0093] 5, the processor of the sub-IED module (hereinafter referred to as the sub-processor) according to the embodiment of the present invention transmits a response signal to the standby state check request received from the main IED module if it is operating in a standby state (S500). For example, the main IED module transmits the standby state check request at a predetermined time period to check the operating state (standby state) of the sub-IED module.

[0094] On the other hand, if the sub-IED module is in standby mode and is operating, the main IED module transmits its own setting value to the sub-IED module. The sub-processor then adjusts the setting value of the sub-IED module according to the setting value received from the main IED module (S502). Thus, the setting values ​​of the main IED module and the sub-IED module are synchronized.

[0095] In this manner, with the setting values ​​synchronized with the main IED module, the sub-processor determines whether it has received authority to output a circuit breaker control signal from the main IED module (S504). For example, if an abnormality is detected as a result of the main processor's self-check of the main IED module, the main processor transfers the authority to output the circuit breaker control signal to the sub-IED module. Then, as a result of the determination in step S504, the sub-processor determines that it has received authority to output a circuit breaker control signal.

[0096] On the other hand, if the main IED module detects an abnormal state through its own self-check, the main processor of the main IED module transfers the authority to output the circuit breaker control signal to the sub-IED module in step S504. However, if a situation occurs in which the self-check cannot be performed, such as when the main IED module stops operating due to a sudden failure or malfunction, the main processor cannot transfer the authority to output the circuit breaker control signal to the sub-IED module.

[0097] To prevent this, if the sub-processor determines in step S504 that it has not received the authority to output a circuit breaker control signal, it further checks whether it has received a self-diagnosis result from the main IED module within a predetermined time (S506). If it has received a self-diagnosis result from the main IED module within the predetermined time, it returns to step S504 and determines whether a circuit breaker control signal has been transferred from the main IED module. Therefore, if the main IED module is operating normally, the sub-IED module repeats steps S504 and S506 in the standby state.

[0098] Furthermore, if the self-check result of the main IED module is not received within a predetermined time in step S506, the sub-processor seizes the authority to output a circuit breaker control signal from the main IED module (S508). That is, if the main processor cannot transfer the authority to output a circuit breaker control signal to the sub-IED module due to a malfunction or the like, the sub-processor directly obtains the authority to output a circuit breaker control signal from the main IED module. In this case, when the authority to output a circuit breaker control signal is seized from the sub-IED module, the main IED module is switched to a state in which it cannot output a circuit breaker control signal (e.g., an inactive state).

[0099] Meanwhile, when the authority to output a circuit breaker control signal is seized from the main IED module in step S508 or when the authority to output a circuit breaker control signal is transferred from the main IED module, the sub-processor receives a measurement signal measured by the sensor unit 130 (S510).Then, the sub-processor determines whether an accident has occurred based on the result of processing the received measurement signal according to predetermined software or algorithm (S516).

[0100] Furthermore, if an accident situation has occurred as a result of determining whether an accident situation has occurred in step S516, the sub-processor outputs a circuit breaker control signal for controlling the circuit breaker 20 to cut off the power supply to the power equipment 30. Furthermore, the currently occurring accident situation is displayed (S518). For example, the sub-processor notifies the currently occurring accident situation and the power supply cut-off status of the power equipment 30 via a communication unit (not shown) connected to the external server. Alternatively, the presence or absence of the accident situation is displayed based on a display unit (not shown) or an optical output unit (not shown) such as an LED provided in the duplicated IED 100.

[0101] On the other hand, if it is determined in step S516 that the accident situation has not occurred, the sub-processor proceeds to step S510 to receive a measurement signal again from the sensor unit 130. Then, the sub-processor performs the subsequent steps again.

[0102] On the other hand, in the above explanation, an example was described in which when the sub-processor of the sub-IED module obtains the authority to output a circuit breaker control signal through transfer or seizure, it proceeds to step S510, receives a measurement signal from the sensor unit 130, and immediately proceeds to step S516 to determine whether or not an accident situation has occurred.

[0103] However, it goes without saying that the sub-processor can also perform a self-diagnosis based on the measurement signal received from the sensor unit 130. In this case, as shown in Figure 5, when the sub-processor receives a measurement signal in step S510, it performs a self-diagnosis of the sub-IED module based on the measurement value corresponding to the received measurement signal (S512).

[0104] Meanwhile, the self-diagnosis process includes a CRC check on data generated in a process of processing a measurement signal measured by the sensor unit 130 according to predetermined software or algorithm. It also includes a process of detecting whether the processing result of the predetermined software or algorithm on the measurement result of the sensor unit 130 exceeds a predetermined range. Here, the predetermined range is determined based on at least one previous result value or a setting value of the sub-IED module to be self-diagnosed.

[0105] The sub-processor then determines whether an abnormal condition has occurred in the sub-IED module based on the results of the self-diagnosis in step S512 (S514). If no abnormal condition is detected in the sub-IED module, i.e., if the sub-IED module is operating normally, the sub-processor proceeds to step S516, where it determines whether an accident has occurred based on the result of processing the measurement signal, i.e., the measurement value. Depending on the determination result in step S516, the sub-processor either returns to step S510 or proceeds to step S518, where it cuts off the power supplied to the power equipment 30.

[0106] On the other hand, if an abnormal condition is detected in the sub-IED module as a result of the detection in step S514, the sub-processor displays the detected abnormal condition (S520). In this case, the sub-processor notifies the external server of the abnormal condition of the sub-IED module via a communication unit (not shown) that establishes a communication connection with the external server. Alternatively, the sub-processor displays the abnormal condition that has occurred in the sub-IED module via a display (not shown) or an optical output unit (not shown) including at least one LED.

[0107] On the other hand, if an abnormal state occurs in the sub-IED module following the main IED module, the sub-processor determines that it is difficult to protect and monitor the internal section through which power is supplied to the power equipment 30. Therefore, the sub-processor proceeds to step S518 and outputs a circuit breaker control signal to prevent overcurrent or overvoltage caused by the accident from flowing into the power equipment 30 in a state where protection and monitoring of the duplicated IED 100 is impossible.

[0108] 5, the sub-IED module receives a measurement signal from the sensor unit 130 and determines whether an accident has occurred when the sub-IED module acquires the authority to output a circuit breaker control signal through transfer or seizure. However, it goes without saying that the sub-IED module can determine whether an accident has occurred regardless of the authority to output the circuit breaker control signal. In this case, if the sub-IED module does not have the authority to output the circuit breaker control signal, the sub-processor will not output the circuit breaker control signal.

[0109] FIG. 6 is a flowchart showing such an operation process of the sub-IED module.

[0110] As shown in Figure 6, similar to steps S500 and S502, the sub-processor sends a response signal to the standby status check request received from the main IED module (S600) and performs setting value synchronization according to the setting value received from the main IED module (S602).

[0111] The sub-processor also receives the measurement signal from the sensor unit 130. To this end, the sensor unit 130 is configured to transmit the same measurement signal to the sub-IED module as the measurement signal transmitted to the main IED module. Alternatively, the sub-IED module is connected to the measurement signal output terminal of the sensor unit 130 together with the main IED module, and simultaneously receives the measurement signal output from the sensor unit 130 from the main IED module (S604).

[0112] The sub-processor then performs a self-diagnosis based on the received measurement signal (S606). Based on the results of the self-diagnosis, it detects whether an abnormal condition has occurred in the sub-IED module (S608). If an abnormal condition is detected in step S608, the detected abnormal condition of the sub-IED module is displayed (S620). In this case, the abnormal condition is notified to an external server via a communication unit (not shown), or is displayed on a display (not shown) or an optical output unit (not shown).

[0113] In addition, as in Figure 5, the sub-processor outputs a circuit breaker control signal to prevent overcurrent or overvoltage caused by an accident situation from flowing into the power equipment 30 when protection and monitoring of the duplicated IED 100 is impossible (S618).

[0114] On the other hand, if the detection result of step S608 indicates that no abnormal condition has occurred in the sub-IED module, the sub-processor determines whether an accident situation has occurred based on the result value, i.e., the measurement value, of processing the measurement signal received from the sensor unit 130 (S610).

[0115] If the determination in step S610 indicates that an accident has occurred, the sub-IED module checks whether it currently has the authority to output a circuit breaker control signal (S612). For example, if the authority to output a circuit breaker control signal is transferred from the main IED module or if the authority to output a circuit breaker control signal is seized from the main IED module, the sub-processor determines in step S612 that it has the authority to output a circuit breaker control signal.

[0116] If the check result in step S612 indicates that the sub-IED module has the authority to output the circuit breaker control signal, the sub-processor proceeds to step S618 and outputs the circuit breaker control signal. Furthermore, the currently occurring accident situation is notified to an external server via the communication unit, or is displayed on the display unit or optical communication unit.

[0117] However, if the check result in step S612 indicates that the sub-IED module does not have the authority to output the circuit breaker control signal, the sub-processor checks whether a self-check result has been received from the main IED module within a predetermined time (S614). If the check result in step S614 indicates that a self-check result from the main IED module has been received within a predetermined time, the sub-processor ignores the determination of whether an accident has occurred in step S610 and proceeds to step S604 to receive a measurement signal from the sensor unit 130. Then, the subsequent processes are performed again.

[0118] This is because the main IED with the authority to output a circuit breaker control signal is operating normally, as indicated by the received self-check result. In other words, since the main IED module is operating normally, if the sub-IED module does not have the authority to output a circuit breaker control signal, the sub-IED module will not output a circuit breaker control signal even if it determines that an accident has occurred based on the measurement values.

[0119] On the other hand, if the result of the check in step S614 indicates that the self-check result has not been received from the main IED module within the predetermined time, the sub-processor seizes the authority to output the circuit breaker control signal from the main IED module (S616). Then, the sub-processor proceeds to step S618, and outputs a circuit breaker control signal to drive the circuit breaker 20 according to the result of the accident situation determination in step S610. In addition, the currently occurring accident situation is notified to an external server via a communication unit (not shown), or is displayed on the display unit (not shown) or optical communication unit (not shown).

[0120] Meanwhile, in the above description, step S606 in which the sub-processor performs a self-examination based on the measurement signal received, and step S608 in which the presence or absence of an abnormal condition is detected based on the self-examination result are described, but it goes without saying that steps S606 and S608 may be omitted. In this case, the sub-processor proceeds directly from step S604 to step S610, and determines whether an accident situation has occurred based on the measurement signal received from the sensor unit 130.

[0121] Alternatively, the sub-processor may perform the self-examination at a predetermined time interval. In this case, when the predetermined time expires, the sub-processor performs the self-examination based on the measurement signal measured by the sensor unit 130. In this case, if the predetermined time has not expired, the sub-processor omits steps S606 and S608.

[0122] In the above description, the main processor and the sub-processor perform self-diagnosis of the operation status of the main IED module and the sub-IED module, respectively. However, it goes without saying that failures, errors, and malfunctions may occur not only in the main IED module and the sub-IED module but also in the sensor unit 130.

[0123] In this case, the duplicated IED 100 according to the embodiment of the present invention may include a plurality of sensor units, and may change the sensor unit that measures voltage or current depending on the self-check result of the sensor unit.

[0124] 7 is a block diagram showing the configuration of a dual IED 100, which is an intelligent electronic device according to another embodiment of the present invention. It also shows the flow of the operation process of switching the sensor unit that receives the measurement results in accordance with the measurement results of the sensor unit in the dual IED 100 of FIG.

[0125] First, as shown in Fig. 7, unlike the configuration in Fig. 3, a first sensor unit 131 and a second sensor unit 132 are provided which are connected to the same line 10. In this case, one of the first sensor unit 131 and the second sensor unit 132 operates as a main sensor unit, and the other operates as a sub-sensor unit which operates auxiliary when an abnormality occurs in the main sensor unit.

[0126] Here, the first sensor unit 131 and the second sensor unit 132 are connected to both the first IED module 110 and the second IED module 120, respectively. For example, the output terminal of the first sensor unit 131 is connected to both the measurement signal input terminal of the first IED module 110 and the measurement signal input terminal of the second IED module 120. Furthermore, the output terminal of the second sensor unit 132 is connected to both the measurement signal input terminal of the first IED module 110 and the measurement signal input terminal of the second IED module 120. Therefore, the output signal output from the first sensor unit 131 or the second sensor unit 132, i.e., the measurement signal, is input to both the first IED module 110 and the second IED module 120 simultaneously.

[0127] On the other hand, when an IED module includes multiple sensor units, the processor of the IED module verifies the validity of the received measurement signal when performing a self-test on the IED module. If the measurement signal is invalid as a result of the validity verification, the processor determines that the sensor unit that detected the measurement signal has a failure, error, or malfunction, and replaces the sensor unit with another sensor unit. To this end, the first IED module 110 includes a first sensor diagnostic unit 115 that verifies the validity of the measurement signal from the sensor unit, and the second IED module 120 includes a second sensor diagnostic unit 125 that verifies the validity of the measurement signal from the sensor unit. In this case, the first sensor diagnostic unit 115 and the second sensor diagnostic unit 125 verify the validity of the measurement signal measured by the first sensor unit 131 and the second sensor unit 132 under the control of the first processor 111 and the second processor 121, respectively.

[0128] Figure 8 is a flowchart showing the operational process in which the validity of the measurement signal from the sensor unit is further verified in step S416 of Figure 4, step S512 of Figure 5, or step S606 of Figure 6, where the processor performs a self-test on the IED module.

[0129] As shown in Fig. 8, in step S416 in Fig. 4, step S512 in Fig. 5, or step S606 in Fig. 6, the main processor or sub-processor first receives the measurement result of the main sensor unit (S800), and then determines whether the measurement result of the main sensor unit is valid (S802).

[0130] Here, whether the measurement result of the main sensor unit is valid or not is determined based on whether the measurement result of the main sensor unit is outside a predetermined measurement range. That is, if the measurement result of the main sensor unit is within the measurement range, the main processor or sub-processor determines that the measurement result of the main sensor unit is valid. Then, the operation process of FIG. 8 is terminated, and the self-test of the IED module is continued.

[0131] On the other hand, if the result of the determination in step S802 indicates that the received measurement signal is outside the measurement range, the main processor or sub-processor makes a primary determination that the measurement result of the main sensor unit is invalid, and then receives the measurement result of the sub-sensor unit again (S804).Furthermore, it determines whether the measurement signal received from the sub-sensor unit is valid (S806).

[0132] In this case, whether the measurement result of the sub-sensor unit is valid is determined by whether the measurement result of the sub-sensor unit is outside a predetermined measurement range, as in step S802. Also, if the result of the determination in step S806 is that the measurement signal received from the sub-sensor unit 130 is valid, the main processor or sub-processor determines that there is an abnormality in the main sensor unit. Therefore, the sensor unit receiving the measurement signal is changed from the main sensor unit to the sub-sensor unit (S808). Also, self-examination of the main IED module or sub-IED module is continued.

[0133] On the other hand, if the measurement result of the sub-sensor unit is also invalid as a result of the determination in step S806, the main processor or sub-processor determines that there is no abnormality in the measurement result of the main sensor unit. In this case, the main processor or sub-processor determines that there is an abnormality in the measurement signal. In addition, it outputs a circuit breaker control signal to protect the power equipment 30 in the internal section. In this case, the sensor unit receiving the measurement signal is not changed.

[0134] Meanwhile, as described above, the dual IED according to the embodiment of the present invention can prevent unnecessary circuit breaker activation due to noise-induced overvoltage based on cooperation between the main IED module and the sub-IED module. Hereinafter, with reference to Figures 9 to 11, an example of the noise-induced overvoltage, the cooperation process between the main IED module and the sub-IED module, and an example of circuit breaker activation prevention based on the cooperation will be described.

[0135] First, FIG. 9 is a diagram showing an example of a temporary overvoltage phenomenon caused by noise (hereinafter referred to as noise-induced overvoltage).

[0136] As shown in Figure 9, (a) of Figure 9 shows an example of a voltage change detected from the line 10 in a normal state. As such, a voltage 910 detected from the line 10 in a normal state has a value within a reference range 900. As such, when a voltage within the reference range 900 is detected, the main IED module or the sub-IED module determines that there is no accident situation.

[0137] In this case, a temporary overvoltage due to the influence of noise or the like may occur on the line 10. That is, as shown in FIG. 9(b), a temporary overvoltage 920 exceeding the reference range 900 may occur on the line. In this case, the time ts during which the noise-induced overvoltage 920 exceeding the reference range 900 occurs is very short within the predetermined time, and therefore the noise-induced overvoltage 920 does not affect the power equipment 30 or has a very small effect. Therefore, there is no need to drive the circuit breaker 20.

[0138] On the other hand, in order to prevent the activation of a circuit breaker due to a temporary overvoltage as shown in (b) of Figure 9, the dual IED 100 according to an embodiment of the present invention prevents the unnecessary activation of a circuit breaker as described above through cooperation between the multiple IED modules provided.

[0139] Figure 10 is a flowchart showing the operation process in which cooperation between multiple IED modules is performed. The following description will be given assuming that both the main IED module and the sub-IED module are operating normally. In this case, if the main IED module is the first IED module 110, the sub-IED module is the second IED module 120. Also, if the main IED module is the second IED module 120, the sub-IED module is the first IED module 110.

[0140] First, the main IED module receives a measurement signal from the sensor unit 130 (S1000). Then, based on the received measurement signal, it determines whether an accident situation has occurred (S1002). Here, whether an accident situation has occurred in step S1002 is determined in step S414 of FIG. 4.

[0141] In this case, if a noise-induced overvoltage 920 occurs, the main processor of the main IED module determines that an accident has occurred, and then, before outputting a circuit breaker control signal, the main processor requests the sub-IED module to cooperate in determining whether an accident has occurred (S1004).

[0142] Then, the sub-processor of the sub-IED module receives a measurement signal from the sensor unit 130 in response to the cooperation request (S1006). In this case, the measurement signal measured from the sensor unit 130 is the measurement signal measured from the sensor unit 130 after a predetermined time delay in response to the cooperation request. Furthermore, upon receiving the measurement signal, the sub-processor determines whether an accident situation has occurred based on the received measurement signal (S1008).

[0143] FIG. 11 shows an example in which the sub-IED module determines whether an accident situation has occurred due to noise-induced overvoltage in response to a cooperation request from the main IED module.

[0144] 11(a), which shows an example in which a noise-induced overvoltage 920 occurs. In this case, when the main IED module receives a measurement signal measured by the sensor unit 130 during the time t1 when the noise-induced overvoltage 920 occurs, the main IED module determines that an accident situation has occurred based on the measurement signal due to the noise-induced overvoltage 920.

[0145] Meanwhile, if the main processor of the main IED module determines that an accident has occurred based on the measurement signal, it requests cooperation from the sub-IED module. In this case, the cooperation request is delayed by a predetermined time from the time the main processor receives the measurement signal, depending on the calculation time required for the main processor to determine whether an accident has occurred based on the measurement signal. Alternatively, the main processor may send the cooperation request to the sub-IED module after a predetermined delay.

[0146] Meanwhile, the sub-processor of the sub-IED module that has received the cooperation request receives a measurement signal from the sensor unit 130 to determine whether an accident has occurred in response to the cooperation request. The sub-IED module then receives a measurement signal from the sensor unit 130 that has been delayed by a predetermined time due to the delay time. That is, the sub-processor receives a voltage signal 1120 measured on the line 10 during a second time t2 that is delayed by a predetermined time from a first time t1 when the noise-induced overvoltage 920 occurred.

[0147] In this case, if the overvoltage exceeding the reference range 900 is an overvoltage caused by an accident such as a leakage current or short circuit, the voltage on the line 10 will not return to the normal voltage range unless the accident is resolved. However, if the overvoltage exceeding the reference range 900 is a noise-induced overvoltage 920, the voltage on the line 10 will return to the normal voltage range after a short period of time ts within the predetermined time has elapsed. Therefore, as shown in Figure 11, when a noise-induced overvoltage 920 occurs, the sub-processor receives a voltage signal 1120 delayed by a predetermined time and determines whether an accident has occurred. As a result of the determination in step S1008, the sub-processor determines that no accident has occurred.

[0148] The sub-processor then transmits the result of the accident situation determination in step S1008 to the main IED module (S1010). The main processor then combines the result of its own (main IED module's) accident situation determination and the result of the sub-processor's (sub-IED module's) accident situation determination to determine whether an accident has occurred (S1012). In this case, the main processor determines whether an accident has occurred by prioritizing either the result of the main IED module's determination or the result of the sub-IED module's determination.

[0149] For example, if the received result of the sub-IED module's determination of whether or not an accident situation has occurred is the same as the result of the main IED module's determination, the main processor determines whether or not an accident situation has occurred based on the result of its own (main IED module's) determination.

[0150] However, if the results of the judgment made by the main IED module and the sub-IED module are contradictory, the main processor will prioritize either the results of the judgment made by the main IED module or the results of the judgment made by the sub-IED module over the other, as described in step S1012 of Figure 10, and determine whether an accident situation has occurred.

[0151] In this case, the sub-IED module receives a request from the main IED module, receives a measurement signal in response to the received request, and determines whether or not an accident has occurred.As described above, the sub-IED module determines whether or not an accident has occurred based on the measured measurement signal with a predetermined time delay from the time when the main IED module determines whether or not an accident has occurred.

[0152] However, if the main IED module determines that an accident has occurred due to the noise-induced overvoltage, the noise-induced overvoltage disappears after the predetermined time has elapsed, as shown in Figure 11(b). Therefore, based on the measurement signal measured after the predetermined time, the sub-IED module determines that an accident has not occurred, contrary to the determination of the main IED module. Therefore, if the result of the determination of the sub-IED module contradicts the result of its own determination, the main IED module prioritizes the result of the determination of the sub-IED module over its own determination and determines whether an accident has occurred.

[0153] However, just as an overvoltage or overcurrent can occur due to a noise-related abnormal phenomenon, even in an accident situation such as a ground fault or short circuit, the voltage or current can be measured temporarily within the reference range 900 due to noise, etc. In this case, as described above, if the measurement result of the sub-IED module is given priority, there is a problem that a circuit breaker control signal for driving the circuit breaker 20 is not transmitted even when an accident situation has occurred.

[0154] Therefore, if the result of the accident situation determination based on the measurement signal measured with a predetermined time delay from the sub-IED module contradicts its own measurement result, the main IED module again receives the measurement signal from the sensor unit 130. Also, based on the result of the determination based on the received measurement signal, the main IED module again determines whether an accident situation has occurred. In this case, the main IED module determines whether an accident situation has occurred based on the result of its own determination made again.

[0155] Furthermore, if the result of the determination based on the re-received measurement signal is the same as the result received from the sub-IED module, the main IED module determines whether or not an accident has occurred, in the same way as the result of the determination by the sub-IED module. However, if the result of the determination based on the re-received measurement signal is different from the result of the determination by the sub-IED module and is the same as the result of the determination made by the main processor itself, i.e., the main IED module, the main processor determines whether or not an accident has occurred based on the result of its own determination.

[0156] This cooperation between the main IED module and the sub-IED module makes it possible to more accurately determine whether an accident has occurred in abnormal situations such as leakage current or short circuits, and prevents incorrect determination of whether an accident has occurred due to the influence of noise.

[0157] While the above description has been given with reference to an example in which the main IED module and the sub-IED module use the same software or algorithm to determine whether an accident has occurred from the measurement signal, the main IED module and the sub-IED module may use different software or algorithms to determine whether an accident has occurred. In this case, the main IED module and the sub-IED module may have different sensitivities for determining whether an accident has occurred from the measurement signal.

[0158] However, if the software or algorithms applied to the main IED module and the sub-IED module are different, some of the setting values ​​applied to the main IED module and the sub-IED module will differ. Therefore, the main IED module and the sub-IED module will reflect the setting values ​​stored in their respective memories for different setting values, and will use the same setting values ​​for other setting values, i.e., setting values ​​of the same type, through the setting value synchronization described above.

[0159] On the other hand, in the above description, an example was given of a case where the dual IED 100 according to an embodiment of the present invention has only two IED modules, a first IED module and a second IED module, but it goes without saying that more IED modules may be provided if desired.

[0160] In this case, the second IED module performs a self-diagnosis after obtaining the authority to output a circuit breaker control signal from the first IED module through transfer or seizure. Furthermore, if the self-diagnosis does not detect an abnormal condition, it notifies another module, such as the third IED module, of the self-diagnosis result, rather than the first IED module. On the other hand, if the self-diagnosis detects an abnormal condition, it transfers the authority to output the circuit breaker control signal to the third IED module. Alternatively, if the second IED module does not notify the third IED module of the self-diagnosis result within a predetermined time, the third IED module seizes the authority to output the circuit breaker control signal from the second IED module.

[0161] On the other hand, if the third IED module is the last module, i.e., if there are no other IED modules to notify the self-test results, the third IED module controls the output unit 140 to output a circuit breaker control signal when an abnormal condition is detected as a result of the self-test.

[0162] The present invention described above can be realized as computer-readable code on a program recording medium. Computer-readable media include any type of storage device on which data readable by a computer system is stored. Computer-readable media include hard disk drives (HDDs), solid-state disks (SSDs), silicon disk drives (SDDs), ROMs, RAMs, CD-ROMs, magnetic tapes, floppy disks, optical data storage devices, and the like, as well as media implemented in the form of carrier waves (e.g., transmissions over the Internet). Furthermore, the computer may include a control unit for a semiconductor circuit breaker. Therefore, the above detailed description should not be construed as limiting in any respect, but should be considered as illustrative. The scope of the present invention should be determined by reasonable interpretation of the appended claims, and all modifications within the scope of the present invention are encompassed within the scope of the present invention.

Claims

1. a sensor unit including at least one sensor that measures at least one of a current and a voltage of a power source supplied from a line to an electric power device; an output unit that outputs a control signal for driving a circuit breaker that cuts off the power supply supplied to the power device; a plurality of IED (Intelligent Electronic Device) modules each connected to the sensor unit, each receiving a measurement result from the sensor unit, and each determining whether an overvoltage or overcurrent has occurred due to an accident situation based on the received measurement result; The plurality of IED modules include: Any one of the plurality of IED modules is configured to have an output authority to control the output unit and output the control signal, In accordance with a result of self-diagnosis based on the measurement result of the sensor unit, the first module having the output authority controls the output unit according to its own accident situation determination result, or transfers the output authority to a second module, and the second module controls the output unit according to its own accident situation determination result. Intelligent electronic device.

2. The first module is If the self-diagnosis execution result indicates that the operating state of the device itself is normal, the self-diagnosis execution result is transmitted to the second module; If an abnormality is detected in the self-diagnosis execution result, the data regarding the output authority is transmitted to the second module, and the output authority is transferred to the second module.

10. The intelligent electronic device of claim 1.

3. The self-diagnosis includes: The CRC check result of the data generated in the process of processing the measurement results of the sensor unit according to a predetermined accident situation determination algorithm is determined based on whether it exceeds a predetermined range, or whether the result value processed according to the accident situation determination algorithm is exceeded. The predetermined range is The self-diagnosis is determined based on a set value set in the IED module that performs the self-diagnosis or at least one previous result value.

3. The intelligent electronic device of claim 2.

4. The first module is The self-diagnosis is performed at a predetermined time interval, and the result of the self-diagnosis is notified to the second module.

3. The intelligent electronic device of claim 2.

5. The second module is If the self-diagnosis result received from the first module is not received for a predetermined time, the output control function is activated to obtain the output authority from the first module; The first module is If the self-diagnosis result of the first module is not transmitted to the second module for the predetermined time or if the output unit control function of the second module is activated, the first module deactivates its own output unit control function.

5. The intelligent electronic device of claim 4.

6. The plurality of IED modules include: An internal communication unit is provided for internal communication between the modules, and the internal communication unit shares and synchronizes the setting values ​​set in any of the modules.

10. The intelligent electronic device of claim 1.

7. The plurality of IED modules include: When the setting values ​​are synchronized, all modules except for one module having the output authority operate in a standby state. In the standby state, when the output authority is acquired from any of the modules, the measurement result of the sensor unit is received, and whether or not an accident situation has occurred is determined based on the received measurement result.

7. The intelligent electronic device of claim 6.

8. The plurality of IED modules include: When the set values ​​are synchronized, each receives the measurement result of the sensor unit, and determines whether the overvoltage or overcurrent is due to an accident situation based on the received measurement result; The control signal is output by controlling the output unit according to the accident situation determination result of any one of the plurality of IED modules having an output authority.

7. The intelligent electronic device of claim 6.

9. The first module is When it is determined that an accident situation has occurred based on the accident situation occurrence determination result based on the measurement result, the second module is requested to determine whether an accident situation has occurred, and when the accident situation occurrence determination result is received from the second module, If the result of the accident situation determination by the module itself is the same as the result of the accident situation determination by the second module, the module controls the output unit in accordance with the result of the accident situation determination to output the control signal; If the result of the accident situation determination by the second module is different from the result of the accident situation determination by the first module, the output unit is controlled according to the result of the determination by the second module to output the control signal.

10. The intelligent electronic device of claim 1.

10. The first module is When it is determined that an accident situation exists in the result of the accident situation determination based on the measurement result, a request is made to the second module to determine whether an accident situation exists after a predetermined time delay.

10. The intelligent electronic device of claim 9.

11. The first module is If the result of the accident situation determination by the second module is different from the result of the accident situation determination by the first module, the second module receives a measurement signal from the sensor unit and determines again whether an accident situation has occurred; If the re-determined accident situation occurrence determination result is different from the accident situation occurrence determination result received from the second module, the output unit is controlled according to the re-determined accident situation occurrence determination result to output the control signal.

10. The intelligent electronic device of claim 9.

12. A method for controlling an intelligent electronic device including a plurality of IED (Intelligent Electronic Device) modules, each connected to a sensor unit, receiving a measurement signal and determining whether an overvoltage or overcurrent is caused by an accident based on the received measurement signal, When the operation is started, a first module among the plurality of IED modules, which has a control authority to control an output unit to output a control signal for driving a circuit breaker that cuts off power supplied to an electric power device, checks a setting value set in the first module and transmits the setting value to at least one other IED module; the at least one other IED module receives the transmitted setting value, synchronizes the setting value, and operates in a standby state; the first module receiving the measurement signal; The first module processes the received measurement signal according to a predetermined accident situation determination algorithm; the first module performing a self-examination based on the measurement signal processing result; When an abnormal state is detected in the self-examination result, the first module transfers control authority for controlling the output unit to a second module among the at least one other IED module; the second module determining whether an accident situation has occurred according to the measurement signal processing result; the second module controls the output unit to output the control signal according to the accident occurrence determination result. A method for controlling an intelligent electronic device.

13. The step of the first module performing the self-examination includes: the first module transmitting the self-examination result to a second module of the at least one other IED module if the self-examination result is normal; the first module determining whether an accident situation has occurred according to the measurement signal processing result; the first module controls the output unit according to the accident situation determination result, or repeats a step from the step of receiving the measurement signal to the step of performing the self-examination.

13. The method of claim 12.

14. The step of the first module transmitting the self-examination result to the second module includes: the first module detecting whether a predetermined time has expired; a step of the first module transmitting the self-examination result to the second module when the predetermined time has expired and the self-examination result is normal; 14. The method of claim 13, wherein the control method is an intelligent electronic device.

15. The step of the first module transferring the control authority for controlling the output unit to the second module includes: detecting whether the second module receives the self-examination result from the first module within a predetermined time period since the second module previously received the self-examination result; and if the self-examination result is not received, the second module obtains a control authority to control the output unit from the first module and activates the output unit control function that is in an inactive state.

15. The method of claim 14.

16. The step of the first module determining whether an accident situation has occurred according to the measurement signal processing result includes: a step in which the first module requests the second module to determine whether an accident situation has occurred when the first module determines that the accident situation has occurred; the second module determining whether an accident situation has occurred based on the measurement signal and transmitting the determination result to the first module; the first module, if its own accident situation occurrence determination result and the accident situation occurrence determination result of the second module are the same, determines whether an accident situation has occurred in accordance with its own determination result, and, if its own accident situation occurrence determination result and the accident situation occurrence determination result of the second module are different, determines whether an accident situation has occurred in accordance with the determination result of the second module.

14. The method of claim 13, wherein the control method is an intelligent electronic device.

17. The step of the first module requesting the second module to determine whether an accident situation has occurred includes: a step in which, when the occurrence of the accident situation is determined, the first module requests the second module to determine whether or not an accident situation has occurred after a predetermined time has elapsed.

17. The method of claim 16.

Images