Control of a power generation system during online maintenance using multiple maintenance modes

Abstract

To provide a method of controlling a power generating system under online maintenance.SOLUTION: A method according to the present invention has a step of operating a power generating system 100 in a first maintenance mode in which a controller invalidates automatic response to at least one operation failure in the power generating system 100, a step of monitoring a risk parameter of the power generating system 100 or at least one sensor 164 in the power generating system 100 while operating the power generating system 100 in the first maintenance mode, and a step of operating the power generating system 100 in a second maintenance mode in which the controller 180 validates the automatic response to at least one operation failure of the power generating system 100 in response to detection of an overwrite command, excess of lapsed time over a time limit, or excess of the monitored risk parameter over a safety threshold value.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present disclosure generally relates to the operation of power generation systems. More specifically, embodiments of the present disclosure provide a method for controlling a power generation system during online maintenance operations by providing a plurality of maintenance modes.

Background Art

[0002] Power generation systems, also known as power plants, typically include various different systems (e.g., turbomachinery, generators, and / or other interconnected assemblies) that are used to generate electrical output. Such power plants may include a power source (e.g., a turbomachine, a solar panel, a nuclear reactor, etc.), a prime mover (e.g., a rotatable shaft or similar element) for coupling the power source to the generator, and / or various components of the generator. For example, a power generation system may include a gas turbine assembly having a compressor coupled to the gas turbine. The gas turbine is coupled to a generator mounted on the same shaft and can drive the generator. The generator generates electrical output.

[0003] The power generation system is designed and constructed to operate over several years. Over this period, the aging deterioration and continuous use of the power generation system result in the need for maintenance of the power generation system and its components, such as repair, replacement, upgrade, and / or other types of service. Considering the constant power demand by customers of the electrical infrastructure, it is not desirable to completely shut down the system to receive "offline" maintenance except when absolutely necessary. Many power generation systems enable operation in a "maintenance setting", i.e., a setting in which the power generation system continues to generate power with a modified output. Operation in the maintenance setting may be possible during periods of low demand. When the power generation system operates in this setting, the component or part in question is repaired (e.g., mechanical repair or purging of contaminants), replaced, upgraded, etc. Maintenance of the power generation system in this state is known as "online maintenance".

[0004] Online maintenance settings characteristic of some power generation systems may face technical challenges that limit their effectiveness. For example, many systems for monitoring variables such as harmful fluid concentrations or other variables such as shaft speed, fluid pressure, and vibration magnitude may trigger the start of online maintenance in response to minor anomalies. When such anomalies do not indicate a larger system problem, the transition to and / or from online maintenance consumes a significant amount of time and cost in the form of loss of power output, service time, purchase of parts and / or repair equipment. Increasing the threshold value for each variable monitored to reduce "false detection" may leave problems on the system unchecked. In extreme situations, reducing the management of system failures may require shutting down the power generation system for offline maintenance. SUMMARY OF THE INVENTION

[0005] Aspects of the present disclosure provide a method for controlling a power generation system during online maintenance. The method includes operating the power generation system in a first maintenance mode, where operating the power generation system in the first maintenance mode disables an automatic response of the controller of the power generation system to at least one operating fault of the power generation system; monitoring a risk parameter of the power generation system or at least one sensor within the power generation system while operating the power generation system in the first maintenance mode; and operating the power generation system in a second maintenance mode in response to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, where operating the power generation system in the second maintenance mode enables an automatic response of the controller of the power generation system to at least one operating fault of the power generation system.

[0006] A further aspect of the present disclosure provides a program product stored on a computer-readable storage medium for controlling a power generation system during online maintenance, the computer-readable storage medium being operative to operate the power generation system in a first maintenance mode, wherein operating the power generation system in the first maintenance mode disables an automatic response of the controller of the power generation system to at least one operating failure of the power generation system, monitoring a risk parameter of the power generation system or at least one sensor within the power generation system while operating the power generation system in the first maintenance mode, and operating the power generation system in a second maintenance mode in response to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, wherein operating the power generation system in the second maintenance mode enables an automatic response of the controller of the power generation system to at least one operating failure of the power generation system, and includes program code for causing a computer system to execute operations including these operations.

[0007] A further aspect of the present disclosure provides a system including a power generation system configured to operate in an online maintenance setting and a system controller in communication with the power generation system, the system controller being configured to execute operations during operation of the power generation system in the online maintenance setting, the operations including operating the power generation system in a first maintenance mode, operating the power generation system in the first maintenance mode disabling an automatic response of a controller of the power generation system to at least one operating fault of the power generation system, monitoring a risk parameter of the power generation system or at least one sensor within the power generation system while operating the power generation system in the first maintenance mode, and operating the power generation system in a second maintenance mode in response to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, operating the power generation system in the second maintenance mode enabling an automatic response of a controller of the power generation system to at least one operating fault of the power generation system.

[0008] Exemplary aspects of the present disclosure are designed to solve the problems described herein and / or other problems not described.

[0009] These and other features of the present disclosure will be more readily understood from the following detailed description of the various aspects of the present disclosure in conjunction with the accompanying drawings that depict various embodiments of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

DETAILED DESCRIPTION OF THE INVENTION

[0011] It should be noted that the drawings of the present disclosure are not to scale. The drawings depict only typical aspects of the present disclosure and should not be considered as limiting the scope of the present disclosure. In the drawings, like numbering represents like elements among the drawings.

[0012] As a first issue, in order to clearly describe the current technology, when referring to and describing various systems, components, and related mechanical components within other embodiments of the present disclosure, it is necessary to select specific technical terms. As much as possible, general industrial technical terms are used and utilized in a manner consistent with their accepted meanings. Unless otherwise stated, such technical terms should be given a broad interpretation consistent with the context of this application and the appended claims. Those skilled in the art will understand that often a particular component may be referred to using several different or overlapping terms. What may be described herein as a single part may include other contexts as consisting of multiple components and may be referred to in another context. Alternatively, what may be described herein as including multiple components may be referred to elsewhere as a single part.

[0013] In addition, as described below, in this specification, several descriptive terms may usually be used. The terms "first," "second," and "third" may be used interchangeably to distinguish one component from another and do not indicate the location or importance of individual components.

[0014] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present disclosure. As used herein, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. The terms "comprises" and / or "comprising", when used herein, specify the presence of the stated feature, integer, step, operation, element, and / or component, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. The term "optional" or "optionally" means that the subsequent described event or circumstance may or may not occur, and that the description includes instances where the event occurs and instances where it does not.

[0015] When an element or layer is referred to as being "on", "engaged to", "connected to", or "coupled to" another element or layer, it can be directly on, engaged to, connected to, or coupled to the other element or layer, or intervening elements or layers may be present. In contrast, when an element is referred to as being "directly on", "directly engaged to", "directly connected to", or "directly coupled to" another element or layer, intervening elements or layers may not be present. Other words used to describe the relationship between elements should be interpreted in a like manner (e.g., "between" versus "directly between", "adjacent to" versus "directly adjacent to", etc.). As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0016] Embodiments of the present disclosure provide a method, a program product, and a system for operating a power generation system in a maintenance setting. The method according to the present disclosure enables a power generation system to operate in a first maintenance mode without at least one automatic response to an operating failure of the power generation system (i.e., changes such as automatic shutdown, firing rate, temperature, pressure, etc.) using a plurality of maintenance modes. While operating in the first maintenance mode, one or more sensors of the power generation system can monitor various risk parameters, such as chemical parameters like gas concentration, mechanical parameters like shaft speed, and / or electrical parameters like power output. In this state, any one of several conditions can cause the power generation system to transition from operating in the first maintenance mode to operating in the second maintenance mode. For example, detecting an override command, operating in the first maintenance mode for longer than a limit time, and / or one of the monitored risk parameters exceeding a safety threshold can cause the power generation system to operate in the second maintenance mode. In the second maintenance mode, the controller of the power generation system enables an automatic response to an operating failure again, thereby making the power generation system more sensitive to various maintenance scenarios. Thus, the method according to the present disclosure allows for a limited amount of operation with a more permissive form of monitoring while ensuring safety by automatically restoring a preventive response to operating risks.

[0017] FIG. 1 shows a schematic diagram of a power generation system 100 configured to implement various embodiments of the present disclosure. The power generation system 100 according to an example may include a turbomachine 102 (e.g., a gas turbine assembly), although other types of power sources and / or assemblies may also be used in embodiments of the present disclosure. The turbomachine 102 itself may be one of two, five, ten, one hundred, or more turbomachines within a single power plant, and for illustrative purposes only, FIG. 1 shows only one turbomachine assembly in detail. In one non-limiting example, the turbomachine 102 may include a gas turbine, and the gas turbine may include a compressor 122. The compressor 122 compresses the incoming flow of fluid (e.g., air) from the inlet 124 as the fluid flows through the compressor 122. The compressor 122 may include a plurality of stages of stationary vanes (not shown) and rotating blades (not shown) positioned within the compressor 122. The stationary vanes and rotating blades positioned within the compressor 122 may be configured to assist in moving and / or passing the fluid through the compressor 122. The compressor 122 may include a set of inlet guide vanes (IGV) 126. The IGV 126 is a type of adjustable compressor nozzle specifically configured to direct the incoming flow of the working fluid to the rotating blades of the compressor 122. The IGV 126 may be adjustable between several positions so as to affect the flow rate, angle of incidence, and / or other characteristics of the fluid entering the compressor 122. Accordingly, the IGV 126 may be capable of affecting the temperature of the compressor 122, the power output from the power generation system 100, and / or other characteristics.

[0018] The compressor 122 sends a flow of compressed fluid (e.g., compressed air) to the combustor 138. The combustor 138 mixes the flow of compressed fluid with a pressurized flow of fuel provided by the fuel supply source 140, ignites the mixture to generate a flow of combustion gas. Then, the flow of combustion gas is typically sent, similar to the compressor 122, to a turbine component 142 that includes a plurality of stages of stator blades (not shown) and turbine blades (not shown). The exhaust gas from the combustion in the combustor 138 may flow to the exhaust component 144. The exhaust component 144 may include various filtering devices that extract harmful substances from the exhaust gas before they reach components (e.g., a heat recovery steam generator) to which they are interconnected. The flow of combustion gas drives the turbine component 142 to generate mechanical work. The mechanical work generated by the turbine component 142 may be used to drive the compressor 122 via the shaft 150 and to drive a generator 152 (e.g., an external component) configured to generate electricity. The generator 152 may be electrically coupled to an electrical infrastructure for supplying power to customers, e.g., various transmission lines (not shown), via a substation, distribution lines, etc.

[0019] Various parts of the power generation system 100 may also include, or be in fluid communication with, a cooling fluid source 154 for directing one or more cooling fluids (e.g., air, various refrigerants, etc.) to various components of the power generation system 100. The cooling fluid source 154 may often be a fluid that couples to the fluid within the compressor 122 for siphon connection to other components of the power generation system 100. In other types of power generation systems, the cooling fluid source 154 may be a dedicated source of cooling fluid. The cooling fluid source 154 may be a dedicated source of fluid and / or a connection to ambient air or water. One or more cooling passages, air circuits, etc. can control the flow of cooling fluid from the cooling fluid reservoir throughout the power generation system 100 to cool the compressor 122, turbine component 142, generator 152, and / or other components. The flow of fluid to, from, or within the power generation system 100 can be controlled using one or more valves 162. Such fluid may include, for example, fuel from the fuel source 140, cooling fluid from the cooling fluid source 154, and / or other fluid sources directed to, from, or within the power generation system 100. Each valve 162 can take the form of any currently known or later developed component for controlling the flow of fluid through a line for transmitting the fluid. Regardless of how the valve 162 is embodied, one or more variables such as the amount, temperature, flow rate, etc. of the working fluid within the turbine component 142 can be affected by adjusting the position of the control valve 162 as described herein. The valve 162 can control the amount or proportion of fuel, working fluid, cooling fluid, etc. circulating to, from, or within the power generation system 100. Some valves 162 can take the form of a three-way valve coupled to one or more bypass lines configured to allow fluid to bypass and / or be discharged from one or more components of the power generation system 100, for example.

[0020] The power generation system 100, as well as components connected thereto (e.g., fuel supply source 140 and / or coolant supply source 154), may include one or more sensors 164 for monitoring parameters such as mechanical, electrical, and / or chemical parameters. In one example, the sensors 164 may be in the form of temperature sensors, gas sensors, flow sensors, pressure sensors, and / or other devices for evaluating the characteristics of the power generation system 100 and / or substances therein at specific locations. The sensors 164 may include, for example, fluid concentration sensors for detecting the concentration of harmful and / or explosive fluids such as methane, and / or other substances harmful to the power generation system 100 (e.g., corrosive acids and / or gases). In this case, the sensors 164 may be disposed in the exhaust component 144 and / or other parts of the power generation system 100 where such gases may appear. The sensors 164 for detecting harmful fluids may include suction sensors, direct point sensors, light-based sensors, catalytic bead sensors, electrochemical sensors, and / or ultrasonic sensors.

[0021] The sensor 164 in the form of a temperature sensor can include a thermometer, a thermocouple (i.e., a voltage device that indicates a change in temperature from a change in voltage), a resistance temperature detection device (i.e., a device for evaluating temperature from a change in electrical resistance), an infrared sensor, an expansion type sensor (i.e., a sensor for deriving a change in temperature from the expansion or contraction of a substance such as metal), and / or a state change sensor. The sensor 164 in the form of a pressure sensor can include a barometer, a pressure gauge, a tactile pressure sensor, an optical pressure sensor, an ionization pressure sensor, etc. To calculate the flow rate and / or other mechanical properties of the working fluid, the sensor 164 can include, for example, an air flow meter, a mass flow sensor, a flow velocity meter, etc. The sensor 164 can also derive one or more parameters from other measured quantities such as temperature, pressure, flow rate, etc. These measured quantities are then measured at multiple positions in the turbine component 142 and / or the power generation system 100 and can be applied to a mathematical model of the fluid flow through a specific component, for example, via the controller 180 described herein. In this case, the sensor 164 can include a component for measuring variables related to temperature, as well as a processing component (e.g., computer software) for predicting and / or calculating the value of temperature or other measurement criteria based on the related variables. Generally, the term "monitoring" in the context of the sensor 164 refers to the process of mathematically calculating a specific value by direct measurement, predictive modeling, derivation from related quantities, and / or other mathematical techniques for measuring and / or finding specific quantities. In any case, the state measured by each sensor 164 can be indexed, tabulated, etc. according to the corresponding measurement time or, in the case of a movable sensor 164, at each location. In some cases, the controller 180 can function as a "virtual sensor" for calculating one or more operating conditions (e.g., by estimation or derivation) at a position within the power generation system 100 that does not include the sensor 164.

[0022] One or more sensors 164 may include, for example, energy sensors for measuring the energy output from the power generation system 100 and / or the generator 152. Such sensors 164 may include, but are not limited to, current sensors, voltage detectors, magnetometers, speed sensors configured to measure the rotational speed of the shaft 150 (including, for example, optical-based sensors, position sensors, capacitance sensors, tachometers, etc.), and / or any currently known or later-developed instrument for measuring the energy generated by the power generation system 100 and / or the generator 152, including other types of sensors for calculating the amount of energy generated by the power generation system 100 and / or the generator 152. The sensors 164 can be communicatively (e.g., electrically and / or wirelessly) connected to the controller 180 to calculate the energy output from the power generation system 100 and / or the generator 152, regardless of the embodiment used. Additionally, the energy output detected by the sensors 164 may be tabulated or indexed by measurement time, such that the calculated energy output can be cross-referenced in the controller 180 with other parameters monitored by other sensors 164. The controller 180 can calculate the energy output from the power generation system 100 and / or the generator 152 corresponding to a set of input conditions, output conditions, etc. monitored by the sensors 164.

[0023] Power generation system 100 may include a controller 180 configured to monitor and / or control the operation of power generation system 100. Controller 180 may be structurally integrated into power generation system 100 or embodied as a separate controller that communicates with power generation system 100. Controller 180 can operably communicate with power generation system 100 via any suitable electrical and / or mechanical communication components or communication techniques. Controller 180 and its various components described herein can each be part of, or function separately from, another power plant control system (e.g., a computing device) (not shown) that can control and / or adjust the operation and / or function of power generation system 100. Controller 180 can be operably coupled to sensor 164, for example, via one or more electrical couplings, wireless data couplings, etc., to receive information therefrom. Accordingly, the various characteristics measured by sensor 164 can be measured and / or converted into electrical signals or inputs that are relayed to controller 180. In some cases, controller 180 can operably communicate with valve 162 or other elements of power generation system 100 to adjust its operation in real time. Controller 180 can use sensor 164 to monitor and control the operation of power generation system 100 in a maintenance mode, for example, to enable or disable various automatic responses to one or more of the risk parameters described herein.

[0024] To implement the various control functions of the present disclosure, the controller 180 may be operably coupled to one or more valves 162 such that the controller 180 adjusts the position of the valve 162 during operation of the power generation system 100. More specifically, the controller 180 can adjust the position of the valve 162 based on measurements collected by and / or derived from the data of the sensor 164. In an exemplary embodiment, the controller 180 can adjust the position of the valve 162 based on a performance model calibrated using measurements such as operating conditions, energy output, etc. provided by the sensor 164. In addition to directly controlling variables such as temperature, pressure, and fluid flow rate through various parts of the power generation system 100, the valve 162 can also affect other characteristics resulting from fuel combustion and / or routing of the cooling fluid through the power generation system 100 (e.g., an increase in volume from thermal expansion, thermal stress, etc.). Additionally, the controller 180 remains operable to adjust further attributes of the power generation system 100, for example, by controlling the amount of combustion in the combustor 138 and / or the amount of cooling fluid withdrawn from the cooling fluid source 154. To achieve this purpose, the controller 180 can include program code including a model for operating the power generation system 100 in a maintenance mode. Such a model may include one or more automatic responses to various operating malfunctions, such as pressures, temperatures, harmful fluid concentrations, etc. exceeding corresponding thresholds.

[0025] Figure 2 schematically depicts various operational interactions between the power generation system 100 and the controller 180 according to an exemplary implementation. As referred to herein, the power generation system 100 may be communicatively coupled to the controller 180 such that various elements of the power generation system 100 provide data to the controller 180. The controller 180 can operate on and / or interpret the provided data so as to affect the operation of the power generation system 100. The controller 180 can implement one or more operational methods to interact with and / or control the power generation system. Embodiments of the present disclosure can provide an independent process for the control of the power generation system 100 by the controller 180. In some implementations, the controller 180 can interact with and / or override existing methods for controlling the operation of the power generation system 100. Such existing methods can operate on the same data as embodiments of the present disclosure, or other data received from the power generation system 100 and / or other sources. As depicted in the example of Figure 2, the controller 180 can receive monitoring data (e.g., harmful fluid concentration, shaft speed, air flow, power output level, etc.) of the power generation system 100 via one or more sensors 164. The controller 180 can receive, additionally or alternatively, various forms of sensor quality data indicative of the fidelity of various types of data collected by, e.g., the sensors 164. The sensor quality data provided to the controller 180 can include parameters such as the air flow through the sensor 164 (e.g., in the case of a suction sensor), the total deployment time for the various sensors 164, the estimated error (e.g., comparing the measurements of several similar sensors 164 to each other and / or comparing the expected measurement to the actual measurement), and / or other variables indicative of sensor quality.

[0026] As described herein, the maintenance control program 212 can determine whether it is possible to operate the power generation system 100 in a "first maintenance mode" using various types of data from the power generation system 100 and / or the sensor 164. The first maintenance mode refers to any type of online maintenance mode in which at least one automatic reaction of the controller 180 to an operating failure is disabled. For example, the first maintenance mode can disable the automatic shutdown of the power generation system 100 that would normally occur when monitored harmful fluid concentrations, shaft speed, efficiency losses, and / or other parameters exceed certain thresholds. Thus, the first maintenance mode has a modified (e.g., relaxed) response to detected faults but can allow the continued operation of the power generation system 100 with various preventive means for distinguishing false positives from actual faults in the power generation system 100. In some cases, the maintenance control program 212 can also determine whether the controller 180 must operate the power generation system 100 in a "second maintenance mode", i.e., an operating state in which the automatic response to an operating failure is enabled again. As mentioned herein, the power generation system 100 can operate in the second maintenance mode when the controller 180 detects a risk parameter exceeding a safety threshold, an override command issued by a user or another component, and / or operation in the first maintenance mode for a permitted limited time. In any case, the controller 180 can generate control functions (e.g., various diagnostic and protection operations) that directly affect the operation of the power generation system 100. In some cases, one or more intervening components (e.g., a converter (not shown)) can receive the control functions output from the controller 180 and modify the operation of the power generation system 100.

[0027] Referring to FIG. 3, a schematic diagram of the controller 180 and its sub-components is shown as part of the power generation system 100. In the illustration of FIG. 3, only one power generation system 100 is shown in detail, and the operable couplings between the controller 180 and the various components of the power generation system 100 from FIG. 1 are shown only schematically in FIG. 3 for clarity of illustration. As shown, the controller 180 may include a computing device 200 that may include a memory 202 on which a control system 204 operates. The control system 204 may be a software system that is integrated with or operably communicates with a part of the exciter 170. The control system 204 may include, for example, a maintenance control program 212. The maintenance control program 212 can cause the controller 180 to act on and / or modify the power generation system 100 and / or modify the existing operating methods of the controller 180 for operating the power generation system 100. The controller 180 shown in FIG. 3 represents one type of hardware for interacting with and / or controlling the power generation system 100. As described herein, the controller 180 can ensure the safe and reliable operation of the power generation system 100 in maintenance mode in response to various risk parameters and / or other monitored attributes of the power generation system 100. Within the controller 180, the maintenance control program 212 monitors and / or interacts with other operations (such as adjusting the valve 162, modifying the consumption of fuel and / or cooling fluid, etc.) that the controller 180 undertakes to control the power generation system 100 during operation in maintenance settings and can, in some cases, override them.

[0028] According to one example, the controller 180 can control the power generation system 100 during operation in a maintenance setting and continuously evaluate whether to operate the power generation system 100 using a first maintenance mode or a second maintenance mode, each with a different response to various operating malfunctions. The maintenance control program 212 can cause the controller 180 to operate the power generation system 100 in the first maintenance mode or the second maintenance mode based on a plurality of criteria including monitored safety risks, operating times in one or both modes, and / or user override commands. Embodiments of the present disclosure may be partially configured or operated by an engineer, the computing device 200, and / or a combination of the engineer and the computing device 200. Some of the various components shown in FIG. 3 may be individually implemented, combined, and / or stored in memory for one or more separate computing devices included in the computing device 200. Further, it is understood that some of the components and / or functions may not be implemented and additional schemas and / or functions may be included as part of the control system 204.

[0029] The computing device 200 can include a processor unit (PU) 228, an input / output (I / O) interface 230, a memory 202, and a bus 234. Further shown is the computing device 200 communicating with an external I / O device 236 and a storage system 238. The control system 204 can provide a maintenance control program 212, and the maintenance control program 212 can operate using various modules 242 (such as calculators, determiners, comparators, etc.) for implementing various functions and / or logical steps. The various modules 242 can execute their respective functions using algorithm-based calculations, look-up tables, and similar tools stored in the memory 202 for processing, analyzing, and manipulating data. Generally, the PU 228 can execute software such as the control system 204 that can be stored in the memory 202 and / or the storage system 238 by executing computer program code. While executing the computer program code, the PU 228 can read and write data between the memory 202, the storage system 238, and / or the I / O interface 236. The bus 234 can provide a communication link between each of the components within the computing device 200. The I / O device 230 can comprise any device that enables a user to interact with the computing device 200, or any device that enables the computing device 200 to communicate with the devices and / or other computing devices described herein. (Including, but not limited to, a keyboard, a display, a pointing device, etc.) The I / O device 230 can be coupled to the controller 180 directly or via an intervening I / O controller (not shown).

[0030] Memory 202 can also include various forms of data 250 regarding various components of the power generation system 100, such as various forms of data and / or predetermined data that can be used as references by the controller 180 to modify the operation of the power generation system 100. The maintenance control program 212 can store and interact with the data 250 subdivided into various fields. For example, the risk parameter field 252 can store any type of data collected by the sensor 164 (such as harmful fluid concentration, shaft speed, firing temperature, inlet temperature, exhaust temperature, power output, operating efficiency, etc.) that can be used to evaluate the risk of continuing to operate the power generation system 100 in the first maintenance mode. When applicable, the risk parameter field 252 may be divided into various sub-fields corresponding to specific types of data. The data 250 can include, additionally or alternatively, a sensor risk field 254 for storing risk parameters for any sensor 164 (such as the accuracy of measurements compared to other sensors 164 of the power generation system 100 or other systems 100, total deployment time, expected remaining useful life, air flow through the sensing line of the power generation system 100 or sensor 164, etc.).

[0031] For online maintenance, the plurality of maintenance modes that the controller 180 can use to operate the power generation system 100 can be stored in the maintenance mode field 256. Such maintenance modes can include ranges such as acceptable power output, shaft speed, combustion rate, etc. for selected components of the power generation system 100. More specifically, the maintenance modes can include operation settings specific only to, for example, the compressor 122, the combustor 138, the turbine components 142, the generator 152, etc., and such settings may be selected to enable online maintenance of the specific components within the power generation system 100. Moreover, each maintenance mode within the maintenance mode field 256 can include one or more automatic responses to at least one operating fault of the power generation system 100. An "operating fault" refers to any detected characteristic of the power generation system 100 that violates a specific threshold, rule, and / or other requirement. In various examples, operating faults can include harmful fluid concentrations exceeding an acceptable maximum value, shaft speeds greater than or less than a desired level range, firing temperatures greater than or less than an expected or safe operating range, etc. The automatic response to an operating fault in each maintenance mode can include, for example, reducing the firing rate or firing temperature within the combustor, reducing the generator shaft speed and / or power output, purging the gas from a selected line, partially or fully shutting down the power generation system 100, etc. The maintenance mode field 256 can include a first maintenance mode that disables at least one automatic response to an operating fault, and a second maintenance mode that enables an automatic response to an operating fault.

[0032] Data 250 may include one or more risk thresholds for various parameters measured by sensor 164 during operation of power generation system 100 in any of a variety of maintenance modes. The thresholds can indicate whether it is safe to continue operating power generation system 100 in a first maintenance mode (i.e., a state in which one or more automatic responses are disabled) under certain circumstances. One or more of the thresholds may be stored in threshold field 258 of data 250. Such thresholds may, in various examples, include a maximum harmful fluid concentration (e.g., any harmful fluid at a concentration exceeding about 1000 ppm), a shaft speed exceeding a particular maximum value (e.g., about 25,000 revolutions per minute), and / or other values indicating that operation of power generation system 100 is approaching a dangerous state.

[0033] Computing device 200 can comprise any general-purpose computing manufactured product (e.g., a personal computer, a server, a handheld device, etc.) for executing computer program code installed by a user. However, it is understood that computing device 200 merely represents various conceivable equivalent computing devices and / or technicians capable of performing various process steps of the present disclosure. Additionally, computing device 200 can be part of a larger system architecture operable to model and / or control various aspects and elements of power generation system 100.

[0034] In this regard, in other embodiments, the computing device 200 can comprise any special-purpose computing manufacturing article comprising hardware and / or computer program code for performing a particular function, any computing manufacturing article comprising a combination of special-purpose and general-purpose hardware / software, and the like. In any case, the program code and the hardware can each be created using standard programming and engineering techniques. In one embodiment, the computing device 200 may include a program product stored on a computer-readable storage device that may be operable to automatically control other elements of the power generation system 100 at runtime. The computing device 200 can also take the form of, for example, a remote monitoring system that is part of a central monitoring system, where the central monitoring system is responsible for monitoring several power generation systems 100. In this case, the computing device 200 can represent a part or a sub-component of the central control system.

[0035] Referring to FIGS. 3 and 4, embodiments of the present disclosure provide a method for controlling a power generation system 100 during operation in an online maintenance setting. The power generation system 100 may include, for example, a power source such as a turbomachine 102 that mechanically drives a shaft 150 to drive the power output from a generator 152. FIG. 4 provides a flowchart for operating the power generation system 100 during online maintenance and is described with reference to the example of FIG. 3, although embodiments of the present disclosure are equally applicable to other types of power generation systems 100. Embodiments of the methods described herein may be implemented using, for example, a controller 180 and / or various modules and / or subcomponents of a computing device 200. The method according to the present disclosure may also depend on other components such as a controller 180 communicatively coupled to the computing device 200 for operating the power generation system 100 using various control settings described herein. The power generation system 100 can analyze various characteristics of the power generation system 100 when operating, and in particular, can shift the power generation system 100 between a first maintenance mode and a second maintenance mode. The various maintenance modes may affect whether the power generation system 100 initiates one or more automatic responses when an operating failure is detected. The exemplary flowchart of FIG. 4 is shown with several processes organized in an exemplary flow, but it is understood that one or more processes may be implemented simultaneously and / or sequentially while maintaining the various technical features described by the examples herein and / or may be executed in any alternative order.

[0036] In an exemplary implementation, the method according to the present disclosure may include a process P1 of operating the power generation system 100 in a first maintenance mode. The process P1 may be preceded by other operations described herein (e.g., a process P0 of authorizing the first maintenance mode and / or determining whether the power generation system 100 meets the preconditions in determination D0), and the details of these processes are described elsewhere in this specification. The process P1 may include using the controller 180 to shift the operation of the power generation system 100 from a non-maintenance mode (or a second maintenance mode when the method is implemented in a loop) to the first maintenance mode. Such a shift may involve adjusting the valve 162 and / or other features of the power generation system 100 so as to affect the power output, combustion temperature, shaft rotation speed, flow of the cooling fluid, and / or other characteristics of the power generation system 100 to enable maintenance (e.g., repair, replacement, service of components, etc.) while the power generation system 100 continues to operate. In the first maintenance mode, the maintenance control program 212 of the controller 180 may be able to disable one or more automatic responses to corresponding operational malfunctions within the power generation system 100. The responses to be disabled may be specified via the module 242 and / or described within the maintenance mode field 256 of the data 250. According to an exemplary implementation, operating the power generation system 100 in the first maintenance mode may be able to disable an automatic response that temporarily shuts down the power generation system 100 in response to detecting a harmful fluid exceeding 1500 ppm. The power generation system 100 may continue to operate in the first maintenance mode unless the maintenance control program 212 implements a further process of the present disclosure and, as mentioned herein, the controller 180 changes the maintenance mode.

[0037] In some cases, the operator or administrator of the power generation system 100 can limit the amount of time that the power generation system 100 can operate in the first maintenance mode. To provide this functionality, embodiments of the present disclosure may include setting and enforcing a total limit time for which the power generation system 100 can operate in the first maintenance mode. The limit time for operating in the first maintenance mode may be stored, for example, in the maintenance mode field 256 of the data 250. In this case, the power generation system 100 may be enabled to operate in the first maintenance mode for the duration of the limit time before automatically switching to operation in the second maintenance mode without analyzing risk parameters and / or other operating characteristics.

[0038] In various implementations, the same limit time may be applied to the total elapsed time for multiple instances of operating the power generation system 100 in the first maintenance mode. Thus, the past operating periods in the first maintenance mode are counted towards the limit time. The elapsed time may be reset only on a specified date, for example, after two weeks, one month, three months, six months, one year, etc. In one example, the limit time for the first maintenance mode may be 500 hours of the total operating time of the first maintenance mode. The elapsed time may be reset to zero only once a year in such an example. Thus, after 50 instances of the power generation system 100 operating in the first maintenance mode for 10 hours at a time, or after a single instance of operating the power generation system 100 in the first maintenance mode for 500 hours, the limit time can be reached. When a specified time period has elapsed or after the administrator of the power generation system 100 enables the reset of the elapsed time, embodiments of the present disclosure may optionally include a process P1.1 (shown by the dashed line) to reset the elapsed time of operation in the first maintenance mode. Resetting the elapsed time may include, for example, a module 242 of the maintenance control program 212 archiving and / or replacing the current value of the "elapsed time" variable in the data 250 with zero. If a specified time period has not elapsed and / or the administrator of the power generation system 100 has not authorized the reset of the elapsed time, the process P1.1 is omitted or skipped.

[0039] While the power generation system 100 continues to operate in the first maintenance mode, the method of the present disclosure may include a process P2 of monitoring various risk parameters of the power generation system 100 and / or the sensor 164. Monitoring of the risk parameters in process P2 may be performed, for example, using the sensor 164 and / or by using the analysis of other characteristics of the power generation system 100 (such as power output, operating time, etc.) without the aid of the sensor 164. As used herein, the term "risk parameter" can refer to any conceivable characteristic and / or group of characteristics (including, for example, mechanical, electrical, and / or chemical data) that indicates whether the power generation system 100 is approaching a dangerous operation. Exemplary risk parameters of the power generation system 100 to be analyzed may include, but are not limited to, shaft speed, one or more temperatures, internal vibrations, fluid purity, purge fluid flow, fluid pressure, power output, flame detection parameters, fluid flow rate, etc. Exemplary risk parameters of the sensor 164 may similarly include, for example, the sensor quality of a gas sensor in fluid communication with the sensing line. In this case, the sensor quality can refer to the difference between one sensor 164 and other sensors 164, the total deployment time and / or expected service life of the sensor 164, and the availability of the sensor 164 when the power generation system 100 is operating. The risk parameter may be a direct measurement of the sensor 164 and / or may be based on current data, past operating data, a model of the power generation system 100, predicted operating settings, and / or parameters of the power generation system 100, etc. In a further implementation, the maintenance control program 212 of the controller 180 can simulate these and other monitored risk parameters of the power generation system 100 based on being monitored via the sensor 164. In a further process, the maintenance control program 212 of the controller 180 can use the monitored risk parameters to evaluate whether to continue operating the power generation system 100 in the first maintenance mode or to transition the power generation system 100 to the second maintenance mode.

[0040] Power generation system 100 continuously monitors risk parameters for system 100 and / or sensor 164 while continuing to operate in the first maintenance mode, so the method of the present disclosure includes determining whether to continue operating in the first maintenance mode. To maintain the safe and reliable operation of power generation system 100, further operation in the first maintenance mode (i.e., a state in which one or more automatic responses to operational failures are disabled) is conditional upon compliance with various technical and / or user-determined requirements. Examples of such requirements are illustrated in the exemplary flow diagram as decision nodes D1, D2, and D3.

[0041] In decision D1, module 242 can determine whether an operator or administrator of power generation system 100 has issued an override command. The override command can be any input to controller 180 (e.g., provided via I / O device 236) that instructs maintenance control program 212 to stop operating in the first maintenance mode and start operating in the second maintenance mode. In some cases, the override command can be automatically issued by maintenance control program 212 itself, for example, by referring to an external control program and / or a device that communicates with controller 180. If an override command is detected (i.e., "yes" in decision D1), the method can immediately proceed to process P3 of operating power generation system 100 in the second maintenance mode and / or perform further optional processes (e.g., disabling the first maintenance mode in process P4). If no override command is detected (i.e., "no" in decision D1), the method can proceed to further analyze whether to maintain operation in the first maintenance mode.

[0042] In determination D2, module 242 can determine whether the elapsed operating time (e.g., the current instance of the first maintenance mode plus the total operating time for past instances using the first maintenance mode) exceeds the limit time for operating power generation system 100 in the first maintenance mode. As mentioned elsewhere in this specification, the limit time may be, for example, about 500 hours of total operation in the first maintenance mode. In this case, if (e.g., in process P1.1) power generation system 100 has previously used the first maintenance mode without initializing the limit time, the elapsed time less than 500 hours in a single instance using the first maintenance mode may exceed the limit time. If the limit time for the first maintenance mode is reached (i.e., "yes" in determination D2), the method can proceed to process P3 and / or process P4, or other operations mentioned in this specification. If the limit time for the first maintenance mode has not been reached (i.e., "no" in determination D2), the method can proceed to the analysis of the monitored risk parameters in process P2.

[0043] In determination D3, module 242 of the maintenance control program 212 can evaluate whether any risk parameter of the power generation system 100 or the sensor has exceeded the corresponding risk threshold. The associated threshold for each monitored risk parameter may be stored and organized in the threshold field 258 of the data 250, as referred to elsewhere in this specification. The corresponding risk threshold cannot indicate whether the power generation system 100 is violating safety limits or, otherwise, malfunctioning, but can only indicate that its operation is starting to approach a level that requires more stringent scrutiny. According to one example, module 242 of the maintenance control program 212 can evaluate whether the harmful fluid concentration in one or more parts of the turbomachine 102 has exceeded a specified safety level (e.g., 1000 ppm). In some cases, determination D3 may include determining whether a predetermined number and / or percentage of the selected risk parameters have exceeded their corresponding thresholds. If the risk parameter has exceeded the corresponding risk threshold (i.e., "yes" in the determination at D3), the method can proceed to further operations for operating the power generation system 100 in a second maintenance mode. If the risk parameter does not exceed the corresponding risk threshold (i.e., "no" in determination D3), the controller 180 maintains that operation of the power generation system 100 in the first maintenance mode. Thus, the automatic response to one or more operational failures remains disabled only when each of determinations D1, D2, and D3 outputs "no".

[0044] If any of the decision nodes D1, D2, or D3 outputs "yes", the method according to the present disclosure may include a process P3 of operating the power generation system 100 in a second maintenance mode instead of the first maintenance mode described above. Process P3 may include, for example, using the controller 180 to transition the operation of the power generation system 100 from the first maintenance mode to the second maintenance mode. Such a transition can maintain substantially the same power output, combustion temperature, shaft rotation speed, and / or other characteristics of the power generation system 100 to enable maintenance (e.g., repair, replacement, service of components, etc.) while the power generation system 100 continues to operate. However, in the second maintenance mode, the maintenance control program 212 of the controller 180 can enable or re-enable one or more automatic responses to corresponding operating malfunctions within the power generation system 100. As referred to herein, such responses may be specified via the module 242 and / or described within the maintenance mode field 256 of the data 250. According to an exemplary embodiment, operating the power generation system 100 in the first maintenance mode can disable an automatic response that temporarily shuts down the power generation system 100 in response to detecting a harmful fluid exceeding 1500 ppm. The power generation system 100 can continue to operate in the second maintenance mode as referred to herein, except when the controller 180 changes the maintenance mode when the maintenance control program 212 implements further processes of the present disclosure. The method can end ("complete") when the power generation system 100 starts operating in the second maintenance mode, or return to another process (e.g., process P1 or optional process P0 described below), and in some cases resume operation in the first maintenance mode.

[0045] In some cases, an operator or administrator of the power generation system 100 may want to prevent further operation in the first maintenance mode, for example, when a time limit is reached, and / or when any other situation requires a rigorous review during maintenance (e.g., exceeding the operator's preference and / or a specific risk threshold). To accommodate these situations, the method of the present disclosure optionally includes disabling further use of the first maintenance mode in process P4. Disabling may include, for example, the module 242 automatically overriding further requests to enable the first maintenance mode in decision D1, or otherwise preventing further operation in the first maintenance mode without re-initializing the controller 180, or overriding instructions from a user, operator, etc. After the first maintenance mode is disabled, the method can proceed to process P3 of operating the power generation system 100 in the second maintenance mode, as described elsewhere herein.

[0046] In some cases, the method according to the present disclosure may optionally include an optional process P0 of authorizing the first maintenance mode before other operations (e.g., processes P1, P2, decisions D1, D2, D3) can be performed. Process P0 may be performed, for example, only before any other process of the present disclosure is performed or after the power generation system 100 has started operating in the second maintenance mode. Process P0 may include, for example, preventing the maintenance control program 212 from performing any process according to the present disclosure until the first maintenance mode is authorized. Authorization may be manual (e.g., an input to the controller 180 by an operator of the power generation system 100) or automatic (e.g., based on a signal from an interconnected control device and / or automatic authorization by the maintenance control program 212).

[0047] Following process P0, the method can proceed to decision D0, where module 242 determines whether one or more preconditions for operating in the first maintenance mode are met. The preconditions may include or be the same as the risk thresholds analyzed at decision D3. Additionally or alternatively, one or more of the preconditions analyzed at decision D0 may be different from the risk thresholds of decision D3. In an example of harmful fluid monitoring, decision D0 may include determining whether the concentration of harmful fluid within a portion of the turbomachine 102 is less than 750 ppm (i.e., half of the exemplary risk threshold). The preconditions may additionally or alternatively include other requirements, such as that the elapsed time in the first mode of operation has not exceeded a limit time before a reset of the elapsed time is permitted. If the preconditions are not met (i.e., "no" at decision D0), the method can immediately proceed to process P3, which operates the power generation system 100 in the second maintenance mode and / or resumes such operation if applicable. If the preconditions are met, the method can proceed to process P1 and subsequent operations described herein.

[0048] The technical effects of the embodiments described herein include adapting to multiple levels of scrutiny for the operation of a power generation system during online maintenance. Specifically, the method of the present disclosure operates the power generation system 100 by reducing the scrutiny during maintenance via a first mode of operation. The first mode of operation prevents shutdown or other responses to operational failures when such failures are unlikely to be caused by system problems. The present disclosure automatically increases the scrutiny when an operator overrides the first maintenance mode, when a reduction in scrutiny is permitted for a specified time, or when a risk parameter exceeds the corresponding threshold. Thus, the embodiments of the present disclosure provide multiple forms of operation during online maintenance to automatically adapt to the varying need for scrutiny in different situations.

[0049] The language used herein throughout the specification and the claims to represent approximations may be applied to modify any quantitative expression that can vary within a reasonable range without causing a change in the relevant basic function. Thus, values modified by one or more terms such as "about," "approximately," and "substantially" are not limited to the precisely recited value. In at least some instances, the language representing an approximation can correspond to the accuracy of the instrument for measuring the value. Herein, as well as throughout the specification and the claims, range limitations may be combined and / or replaced, and such ranges are to be identified and include all sub-ranges subsumed therein unless the context and language specifically dictate otherwise. "About" applied to a particular value of a range applies to both end values and can indicate + / - 10% of the recited value unless specifically dependent on the accuracy of the instrument for measuring the value.

[0050] All structural, material, acts, and equivalents of all means-plus-function or step-plus-function elements in the following claims are intended to include any structure, material, or act for performing the function in combination with other claimed elements as specifically claimed. The description of the present disclosure has been presented for purposes of illustration and description, but is not intended to be exhaustive or to limit the disclosure to the forms disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the present disclosure. Embodiments have been chosen and described in order to best explain the principles of the present disclosure and its practical application, to enable others of ordinary skill in the art to understand the present disclosure for various embodiments with various modifications as are suited to the particular use contemplated.

Description of Reference Numerals

[0051] 100 System, power generation system 102 Turbomachinery 122 Compressor 124 Inlet 126 Inlet guide vane (IGV) 138 Combustor 140 Fuel supply source 142 Turbine component 144 Exhaust component 150 Shaft 152 Generator 154 Cooling fluid supply source 162 Valve, control valve 164 Sensor, movable sensor 170 Exciter 180 Controller 200 Computing device 202 Memory 204 Control system 212 Maintenance control program 228 Processor unit (PU) 230 Input / output (I / O) interface, I / O device 234 Bus 236 I / O device, I / O interface 238 Storage system 242 Module 250 Data 252 Risk parameter field 254 Sensor risk field 256 Maintenance mode field 258 Threshold field P0 Process P1 Process P1.1 Process P2 Process P3 Process P4 Process D0 Judgment D1 Judgment, judgment node D2 Judgment, judgment node D3 Judgment, judgment node

Claims

1. A method for controlling a power generation system (100) during online maintenance, the method comprising: operating the power generation system (100) in a first maintenance mode, the step of operating the power generation system (100) in the first maintenance mode disabling an automatic response to at least one operating fault of the power generation system (100) in a controller (180) of the power generation system (100); monitoring a risk parameter of the power generation system (100) or at least one sensor (164) within the power generation system (100) while operating the power generation system (100) in the first maintenance mode; responding to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, by operating the power generation system (100) in a second maintenance mode, the step of operating the power generation system (100) in the second maintenance mode enabling the automatic response to the at least one operating fault of the power generation system (100) in the controller (180) of the power generation system (100); A method comprising the above steps.

2. The method according to claim 1, wherein the monitored risk parameter includes each of a harmful fluid concentration in a detection line of the power generation system (100), an air flow in the detection line, and a sensor (164) quality of a gas sensor (164) in fluid communication with the detection line of the power generation system (100).

3. The method according to claim 1, further comprising maintaining operation of the power generation system (100) in the first maintenance mode in response to not detecting the override command, the elapsed time in the first maintenance mode not exceeding the limit time, and the monitored risk parameter not exceeding the safety threshold.

4. While operating the power generation system (100) in the second maintenance mode, In response to detecting authorization to operate the power generation system (100) in the first maintenance mode, determining whether the power generation system (100) complies with a set of prerequisite conditions for the first maintenance mode; In response to the power generation system (100) complying with the set of prerequisite conditions, operating the power generation system (100) in the first maintenance mode; In response to the power generation system (100) not complying with the set of prerequisite conditions, maintaining operation of the power generation system (100) in the second maintenance mode The method according to claim 1, further comprising.

5. The method according to claim 1, wherein the monitored risk parameters include a plurality of risk parameters each having a corresponding safety threshold.

6. The method according to claim 1, wherein the elapsed time includes the total cumulative time of past instances of operating the power generation system (100) in the first maintenance mode.

7. The method according to claim 1, further comprising disabling further operation of the power generation system (100) in the first maintenance mode in response to detecting the override command or the elapsed time in the first maintenance mode exceeding the limit time.

8. A program product stored on a computer-readable storage medium for controlling a power generation system (100) during online maintenance, the computer-readable storage medium comprising: Operating the power generation system (100) in a first maintenance mode, wherein operating the power generation system (100) in the first maintenance mode causes the controller (180) of the power generation system (100) to disable an automatic response to at least one operating failure of the power generation system (100); Monitoring risk parameters of the power generation system (100) or at least one sensor (164) within the power generation system (100) while operating the power generation system (100) in the first maintenance mode; Operating the power generation system (100) in a second maintenance mode in response to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, wherein operating the power generation system (100) in the second maintenance mode enables the controller (180) of the power generation system (100) to perform the automatic response to the at least one operating failure of the power generation system (100). A program product including program code for causing a computer system to execute an operation including the above.

9. The program product according to claim 8, wherein the monitored risk parameter includes each of a harmful fluid concentration in a detection line of the power generation system (100), an air flow in the detection line, and a sensor (164) quality of a gas sensor (164) in fluid communication with the detection line of the power generation system (100).

10. The program product according to claim 8, further including program code for maintaining the operation of the power generation system (100) in the first maintenance mode in response to not detecting the override command, the elapsed time in the first maintenance mode not exceeding the limit time, and the monitored risk parameter not exceeding the safety threshold.

11. While operating the power generation system (100) in the second maintenance mode Determining whether the power generation system (100) complies with a set of preconditions for the first maintenance mode in response to detecting authorization to operate the power generation system (100) in the first maintenance mode; Operating the power generation system (100) in the first maintenance mode in response to the power generation system (100) complying with the set of preconditions; Maintaining the operation of the power generation system (100) in the second maintenance mode in response to the power generation system (100) not complying with the set of preconditions The program product according to claim 8, further including program code for an operation further including the above.

12. The program product according to claim 8, wherein the monitored risk parameters include a plurality of risk parameters each having a corresponding safety threshold.

13. The program product according to claim 8, wherein the elapsed time includes the total cumulative time of past instances of operating the power generation system (100) in the first maintenance mode.

14. The program product according to claim 8, further comprising program code for disabling further operation of the power generation system (100) in the first maintenance mode in response to detecting the override command or the elapsed time in the first maintenance mode exceeding the limit time.

15. A power generation system (100) configured to operate in an online maintenance setting, and a system (100) controller (180) that communicates with the power generation system (100) A system (100) comprising: the system (100) controller (180) is configured to execute an operation during operation of the power generation system (100) in the online maintenance setting, and the operation is Operating the power generation system (100) in a first maintenance mode, wherein operating the power generation system (100) in the first maintenance mode causes the controller (180) of the power generation system (100) to disable an automatic response to at least one operating failure of the power generation system (100); Operating; Monitoring risk parameters of the power generation system (100) or at least one sensor (164) within the power generation system (100) while the power generation system (100) is operating in the first maintenance mode; Operating the power generation system (100) in a second maintenance mode in response to detecting an override command, the elapsed time in the first maintenance mode exceeding a limit time, or the monitored risk parameter exceeding a safety threshold, Operating the power generation system (100) in the second maintenance mode enables the controller (180) of the power generation system (100) to perform the automatic response to the at least one operating failure of the power generation system (100). Operating; A system (100) comprising.

Images