Communication Module

Abstract

To solve the problem that the installation of an arithmetic processing unit and an input / output unit for a diversification system is needed due to the application of the diversification system, with the result that an amount of material for an instrumentation control system is increased.SOLUTION: A module has two different communication units therein, the communication units are respectively operated by pieces of software different from each other, and an input / output module serves for both a safety protection system and a diversification system, thereby eliminating the need to provide the systems with respective dedicated input / output modules.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present application relates to a communication module. [Background technology]

[0002] The safety protection system of a nuclear power plant is composed of a redundant system to meet the required high reliability. Generally, it is composed of a quadruple system. In recent years, the application of digital equipment to the safety protection system has been progressing from the viewpoint of maintainability and reliability.

[0003] Unlike equipment configured with hardware, in digital safety systems that implement software including firmware and programmable devices including FPGAs, it is rare to design and develop software for a quadruple system. In other words, it is common to reuse to some extent software designed and developed for one subsystem, and to design and develop software for other subsystems (for example, see Patent Document 1).

[0004] Although the software applied to safety protection systems is designed and manufactured with high quality through rigorous design and verification processes, the possibility of design defects being introduced during the design and manufacturing process cannot be completely eliminated. Therefore, due to the circumstances described above in which software designed and manufactured for one subsystem is reused, there is concern that a malfunction due to a design defect could become a common cause, causing multiplexed safety protection systems to lose function simultaneously.

[0005] As a countermeasure to failures due to the above common causes, many countries require the installation of diverse back-up systems (hereinafter referred to as diversification systems) that do not use common software between the safety protection systems and the multiplexed safety protection systems.

[0006] In recent years, the nuclear power market has seen the development of small reactors, including SMRs (Small Modular Reactors), as next-generation plants. One of the advantages of small reactors is that they require a small footprint. To reduce the footprint of such plants, there is a demand for compact instrumentation and control equipment as well as major equipment in the plant. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2006-155678 A Summary of the Invention [Problem to be solved by the invention]

[0008] The diversification system requires the installation of a communication module with input / output modules and signal processing modules separate from the safety protection system, which is an obstacle to making the instrumentation control equipment more compact.As a result, the common cause of malfunctions is considered to be poor software design, as mentioned above, and therefore the diversification system is not required for the part of the safety protection system that is composed only of hardware.Therefore, measures have been taken to reduce the amount of material by sharing the following areas between the safety protection system and the diversification system. (1) Sensors for process monitoring (2) Actuator (3) Sensor-input module cable (4) Output module-actuator cable

[0009] However, the input modules and output modules of the safety protection system are equipped with software for data communication with the signal processing unit, and cannot be shared with diversified systems.

[0010] For example, the above-mentioned Patent Document 1 proposes an input / output module that can interface with a triplex arithmetic processing circuit. However, this triplex arithmetic processing circuit is considered to be equipped with common software, and cannot be used as a common module for a diversification system and a reactor protection system that aim to eliminate common factors.

[0011] The present application has been made to solve the above-mentioned problems, and has an object to provide a communication module that can reduce installation space and is common to a safety protection system and a diversification system. [Means for solving the problem]

[0012] The communication module disclosed in the present application includes an input circuit for inputting a signal, a first signal processing circuit for processing a signal from the input circuit, a first communication unit connected between a safety protection system of a nuclear power plant and the first signal processing circuit and for transmitting a signal processed by the first signal processing circuit to the safety protection system, and a second communication unit connected between a diversification system, which is a backup system that does not use software common to the safety protection system, and the first signal processing circuit and for transmitting a signal processed by the first signal processing circuit to the diversification system, wherein the first communication unit and the second communication unit use a common input module, a common output module, or a common input / output module. , each of which is characterized by running different software. Effect of the Invention

[0013] According to the communication module disclosed in the present application, by providing a common communication module that is connected to both the safety protection system and the diversification system and has communication units that operate with different software, input / output modules dedicated to the safety protection system and the diversification system are not required, thereby reducing installation space. [Brief description of the drawings]

[0014] [Figure 1] 1 is a schematic configuration diagram of a communication module according to a first embodiment used as an input module. [Diagram 2] FIG. 11 is a schematic configuration diagram when a communication module according to a second embodiment is used as an output module. [Diagram 3] FIG. 11 is a diagram illustrating an arbitration circuit according to a second embodiment. [Figure 4] FIG. 11 is a schematic configuration diagram of a communication module according to a third embodiment used as an input / output module. [Diagram 5] 13 is another schematic configuration diagram of the communication module according to the third embodiment when used as an input / output module. FIG. [Figure 6] 2 is a diagram illustrating the hardware configuration of a safety protection system arithmetic processing unit, a diversified system arithmetic processing unit, a safety system communication unit, and a diverse system communication unit. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, preferred embodiments of the communication module according to the present invention will be described with reference to the drawings. Note that the same reference numerals are used to designate the same contents and corresponding parts, and detailed descriptions thereof will be omitted. In the following embodiments, the same reference numerals are used to designate the same components, and redundant descriptions will be omitted.

[0016] Embodiment 1 As described above, the instrumentation control system of a nuclear power plant is equipped with a diversified system having a multiplexed safety protection system and, separate from the safety protection system, various backup systems which do not use common software between the safety protection system and the safety protection system.

[0017] 1 is a schematic configuration diagram when the communication module according to the first embodiment is used as an input module. A safety protection system calculation processing unit 1 that performs calculation processing in the safety protection system and a diversification system calculation processing unit 3 that performs calculation processing in the diversification system are connected to an input module 5 via a safety protection system IO bus 2 and a diversification system IO bus 4, respectively.

[0018] The input module 5 has a function of inputting an analog signal from the sensor 9 and transmitting a digital signal to the safety protection system arithmetic processing unit 1 or the diversification system arithmetic processing unit 3. The input circuit 51 in the input module 5 filters the analog signal from the sensor 9, for example, with a low pass filter (LPF) or the like to remove noise from the signal. The signal processing circuit 52 has an A / D converter that converts the analog signal filtered by the input circuit 51 into a digital signal. The safety system communication unit 53 transmits the converted digital signal to the safety protection system arithmetic processing unit 1 via the safety protection system IO bus 2. In addition, the diversification system communication unit 54 transmits the signal processed by the signal processing circuit 52 to the diversification system arithmetic processing unit via the diversification system IO bus 4. In this embodiment, the input signal is a sensor signal, but is not limited to this.

[0019] The input circuit 51 and signal processing circuit 52 are configured only with hardware without using software, and the safety system communication unit 53 and diversified system communication unit 54 are realized with different software. This prevents the safety system protection system and diversified system from simultaneously losing their monitoring functions due to a common factor related to the software. Here, different software refers to software in which at least one of the algorithms, flowcharts, and written programming languages ​​is created differently. Note that different algorithms usually result in different flowcharts, so this means software with different algorithms and flowcharts, or software written in different languages.

[0020] With this configuration, by using an input module common to the safety protection system and the diversification system, an input module dedicated to the diversification system and an input module dedicated to the safety protection system are not required, and installation space can be reduced. In this embodiment, the safety system communication unit 53 and the diversification system communication unit 54, which are interfaces between the safety protection system calculation processing unit 1 and the diversification system calculation processing unit 3 and the input module 5, have been described as being one each, but multiple interface units may be provided.

[0021] Embodiment 2 2 is a schematic configuration diagram when the communication module according to the second embodiment is used as an output module. A safety protection system calculation processing unit 1 that performs calculation processing in the safety protection system and a diversification system calculation processing unit 3 that performs calculation processing in the diversification system are connected to an output module 6 via a safety protection system IO bus 2 and a diversification system IO bus 4, respectively.

[0022] The output module 6 has a function of receiving a signal from the safety protection system calculation processing unit 1 or the diversification system calculation processing unit 3 and outputting an on / off signal to a field device 10 such as a field circuit. The safety system communication unit 53 receives a signal from the safety protection system IO bus 2. The diversification system communication unit 54 receives a signal from the diversification system IO bus 4. Note that, in this embodiment, the output signal is an on / off signal, but is not limited to this.

[0023] The arbitration circuit 61 inputs an operation request signal from the safety protection system arithmetic processing unit 1 and an operation request signal (e.g., an on / off signal) from the diversified system arithmetic processing unit 3 via the safety system communication unit 53 or the diversified system communication unit 54, and if the two signals do not match, it determines which signal to output according to a predesigned prioritized logic, and transmits an output request to the output circuit 63. When the arbitration circuit 61 has one output, it may be configured with an OR circuit when the on signal is prioritized, and may be configured with a AND circuit when the off signal is prioritized. When the arbitration circuit 61 has two outputs (output 1, output 2), the circuit that prioritizes output 1 is configured with a logic circuit that combines an OR circuit 611, a AND circuit 612, and an inversion circuit 613, as shown in FIG. 3, for example. As a circuit that prioritizes output 2, for example, the AND circuit 612 and the inversion circuit 613 of the logic circuit shown in FIG. 3 may be connected to the output 2 side.

[0024] The signal processing circuit 62 has a D / A converter and the like, and converts the output signal of the arbitration circuit 61 into an analog signal. The converted analog signal is output as an on or off signal by the output circuit 63 to the field device 10 at the site. The output circuit 63 may be an output terminal having an opening and closing function such as a relay contact or a semiconductor contact. In the case of an output terminal of a semiconductor contact, it is not necessary to use a D / A converter in the signal processing circuit 62. The output circuit 63 may also be provided with an amplifier circuit such as an operational amplifier.

[0025] The arbitration circuit 61, signal processing circuit 62, and output circuit 63 are configured only with hardware without using software, and the safety system communication unit 53 and diversified system communication unit 54 are realized with different software. This prevents the safety system protection system and diversification system from simultaneously losing their monitoring functions due to a common cause related to software.

[0026] With this configuration, by using an output module common to the safety protection system and the diversification system, an output module dedicated to the diversification system and an output module dedicated to the safety protection system are not required, and installation space can be reduced. In this embodiment, the safety system communication unit 53 and the diversification system communication unit 54, which are interfaces between the safety protection system calculation processing unit 1 and the diversification system calculation processing unit 3 and the output module 6, have been described as being one each, but multiple interface units may be provided.

[0027] Embodiment 3 A communication module may be configured as shown in Fig. 4 by using the input module 5 of the first embodiment and the output module 6 of the second embodiment as one input / output module 7. In Fig. 4, the safety system communication unit 53 and the diversification system communication unit 54, which are interfaces between the safety protection system calculation processing unit 1 and the diversification system calculation processing unit 3 and the output module 6, are described as being one each, but a plurality of interface units may be provided. The operation is similar to that of the first and second embodiments. With such a configuration, in addition to providing an input module and an output module common to the safety protection system and the diversification system, the input module and the output module can be configured on a single board, enabling further miniaturization.

[0028] Furthermore, the diversified system calculation processing unit 3 in Fig. 4 may be implemented in the input / output module 7 as a diversified system calculation processing unit 541 as shown in Fig. 5, and transmission and reception between the input / output module 7 and the diversified system may be performed as data communication within the board without using an IO bus, etc. This makes the diversified system I / O bus 4 shown in Fig. 3 unnecessary, which also contributes to reducing cables.

[0029] FIG. 6 shows an example of hardware of a microcomputer mounted on the safety system communication unit 53 and the diverse system communication units 54 and 541. The microcomputer is composed of a processor 100 and a storage device 200. Although not shown, the storage device includes a volatile storage device such as a random access memory and a non-volatile auxiliary storage device such as a flash memory. Also, instead of the flash memory, an auxiliary storage device such as a hard disk may be included. The processor 100 transmits and receives data by executing a program input from the storage device 200. In this case, the program is input from the auxiliary storage device to the processor 100 via the volatile storage device. The safety system communication unit 53 and the diverse system communication unit 54 are composed of different software consisting of different algorithms and different flow charts, or software written in different languages. In addition, the program that operates the communication function of the safety system communication unit 53 and the diverse system calculation processing unit 541 is also composed of different software consisting of different algorithms and different flow charts, or software written in different languages. The processor 100 may output data such as the results of calculations to a volatile storage device of the storage device 200, or may store the data in an auxiliary storage device via the volatile storage device.

[0030] The hardware configurations of the safety protection system arithmetic processing unit 1 and the diversified system arithmetic processing unit 3 are also configured with microcomputer hardware similar to that described above, and arithmetic processing is performed according to a program input to the processor 100.

[0031] Although the present application describes various exemplary embodiments and examples, the various features, aspects, and functions described in one or more embodiments are not limited to application to a particular embodiment, but may be applied to the embodiments alone or in various combinations. Therefore, countless modifications not exemplified are assumed within the scope of the technology disclosed in the present specification, including, for example, modifying, adding, or omitting at least one component, and further, extracting at least one component and combining it with a component of another embodiment. [Explanation of symbols]

[0032] 1: safety protection system calculation processing unit, 2: safety protection system IO bus, 3, 541: diversification system calculation processing unit, 4: diversification system IO bus, 5: input module, 51: input circuit, 52, 62: signal processing circuit, 53: safety system communication unit, 54: diverse system communication unit, 6: output module, 61: arbitration circuit, 63: output circuit, 7: input / output module, 9: sensor, 10: field device.

Claims

1. an input circuit for inputting a signal; a first signal processing circuit for processing a signal from the input circuit; a first communication unit connected between a safety protection system of a nuclear power plant and the first signal processing circuit, and configured to transmit a signal processed by the first signal processing circuit to the safety protection system; a second communication unit connected between a diversification system, which is a backup system that does not use software common to the safety protection system, and the first signal processing circuit, and configured to transmit a signal processed by the first signal processing circuit to the diversification system; A communication module characterized in that the first communication unit and the second communication unit are provided in either a common input module, a common output module, or a common input / output module, and operate with different software.

2. 2. The communication module according to claim 1, wherein the input circuit and the first signal processing circuit are configured as hardware.

3. 3. The communications module according to claim 1, further comprising: an arbitration circuit that compares a first signal input from the safety protection system via the first communication unit with a second signal input from the diversification system via the second communication unit, and selects and outputs either of the signals if the first signal and the second signal are different; a second signal processing circuit that performs processing to output the signal selected by the arbitration circuit; and an output circuit that amplifies and outputs the output of the second signal processing circuit, wherein the arbitration circuit, the second signal processing circuit, and the output circuit are configured as hardware.

4. A communication module as described in any one of claims 1 to 3, characterized in that the connection between the safety protection system and the first communication unit is made from a first calculation processing unit in the safety protection system via a first data bus, and the connection between the diversification system and the second communication unit is made from a second calculation processing unit in the diversification system via a second data bus.

5. The communication module according to any one of claims 1 to 3, characterized in that the connection between the safety protection system and the first communication unit is made via a first data bus from a first arithmetic processing unit in the safety protection system, and the second communication unit is a second arithmetic processing unit of the diversification system.

6. 3. The communication module according to claim 1, wherein the first signal processing circuit is an A / D converter.

7. 4. The communication module according to claim 3, wherein the second signal processing circuit is a D / A converter.

8. 3. The communication module according to claim 1, wherein the input circuit is a low-pass filter.

Images