Plant operation assistance system

Abstract

This plant operation assistance system: discerns an operating condition of engineered safety features (ESF) related to safety of a plant on the basis of plant parameter information that is plant information acquired from a plant apparatus (210); discerns whether there occurs a maintenance bypass in the ESF on the basis of plant equipment information; and discerns whether there occurs an operating bypass hindering operation of the ESF on the basis of permissive information. The operating condition (311-314) of the ESF, whether there occurs a maintenance bypass (321, 322), and whether there occurs an operating bypass (331) are each displayed at an output device (240) so as to be visible. The foregoing makes it possible to improve situational awareness, for an operations team that performs monitoring, pertaining to the state of apparatus tripping and ESF.

Description

Plant operation support system

[0001] The present application relates to a plant operation support system.

[0002] Nuclear power plants require monitoring and control of the operating status and safety state of the entire plant and each piece of equipment during operation and maintenance. To this end, nuclear power plants are equipped with monitoring and control panels equipped with various monitoring and operation functions. While traditionally hardware-based analog monitoring and control panels have been the norm, software-based digital monitoring and control panels have been increasingly adopted in recent years. Digital monitoring and control panels primarily consist of output devices (e.g., large display devices) that consolidate and constantly display important plant information and alarms during plant operation, or input / output devices that allow individual operators to monitor and control the plant through a graphical user interface (GUI).

[0003] Generally, nuclear power plants are operated by an operation team consisting of multiple operators who monitor and operate a monitoring control panel. If an abnormality occurs during plant operation, the operation team must recognize the operation status of Engineered Safety Features (ESFs) related to the safety of the nuclear power plant and the equipment trip operation status of the reactor, etc., and take appropriate action if an abnormality is detected. Furthermore, during plant operation, there is a risk of a maintenance bypass occurring, in which safety-critical equipment related to equipment trip operation and ESF operation cannot be operated due to maintenance or other reasons. Furthermore, there is a risk of an operating bypass occurring, in which ESF operation and equipment trip operation are prevented by a permissive signal transmitted when the plant is starting up or shutting down.

[0004] The operation team is aware of these ESF inoperable states and takes appropriate measures if the ESF is in an unintended inoperable state. An example of a system that supports the operation team in this situational awareness is one that constantly displays in a list format on a large display device the ESF operation status, equipment trip operation status, and the occurrence status of maintenance bypasses for each ESF and equipment trip in the event of a plant abnormality. It is known that such a system makes it easy for operators to determine in which system the abnormality has occurred when a safety-critical abnormality occurs (see, for example, Patent Document 1).

[0005] Patent No. 5773565

[0006] Conventional plant operation support systems have focused on improving situational awareness for operators in the event of a plant abnormality, and have constantly displayed on a large display device the operating status of ESF and equipment trips, as well as ESF information and equipment trip information affected by a maintenance bypass, which is a type of bypass. However, no consideration has been given to the occurrence of operating bypasses that occur during normal operation, such as when the plant is started up or shut down, and in order to obtain information on ESF and equipment trips whose operation is hindered by the occurrence of an operating bypass, it is necessary to operate a separate input / output device to display the information, which has created a problem in that it is difficult to quickly recognize the operating status of ESF and equipment trips.

[0007] The present application has been made to solve the above-mentioned problems, and aims to provide an operation support system that improves the operation team's situational awareness regarding the operating status of the ESF and equipment trips by visually displaying on an output device the operating status of the ESF, whether a maintenance bypass has occurred, and whether an operating bypass has occurred.

[0008] The plant operation support system disclosed in the present application is a system comprising a plant monitoring and control device and an operation support information generation device, wherein the plant monitoring and control device comprises: plant equipment constituting a plant; a plant control device that outputs plant information obtained from the plant equipment, such as plant parameter information and plant equipment information, and permissive information generated based on the plant parameter information, to the operation support information generation device; an input device that provides operation control input to the plant control device; and an information display processing unit that performs processing to display signals generated by the operation support information generation device on an output device, wherein the operation support information generation device comprises: an engineered safety facility determination processing unit that determines the operating status of engineered safety facilities related to the safety of the plant based on the plant parameter information and sends the determination result to the information display processing unit; a maintenance bypass determination processing unit that determines whether a maintenance bypass has occurred in the engineered safety facilities based on the plant equipment information and sends the determination result to the information display processing unit; and an operating bypass determination processing unit that determines whether an operating bypass has occurred that prevents the operation of the engineered safety facilities based on the permissive information and sends the determination result to the information display processing unit, and the output device displays the operating status of the engineered safety facilities, whether a maintenance bypass has occurred, and whether an operating bypass has occurred so that they can be visually confirmed.

[0009] According to the plant operation support system disclosed in the present application, the operating status of the ESF, whether a maintenance bypass has occurred, and whether an operating bypass has occurred are each displayed on the output device so that they can be visually confirmed, thereby improving the operating team's situational awareness regarding the operating status of the ESF and equipment trips.

[0010] FIG. 1 is a block diagram showing the configuration of a nuclear power plant operation support system according to embodiment 1. FIG. 2 is a flowchart showing the processing flow of an ESF discrimination processor according to embodiment 1. FIG. 3 is a flowchart showing the processing flow of a maintenance bypass discrimination processor according to embodiment 1. FIG. 4 is a flowchart showing the processing flow of an operating bypass discrimination processor according to embodiment 1. FIG. 5 is a diagram showing an example of a screen display displayed on an output display device according to embodiment 1. FIG. 6 is a block diagram showing the configuration of a nuclear power plant operation support system according to embodiment 2. FIG. 7 is a diagram showing an example of data stored in a discrimination condition DB according to embodiment 2. FIG. 8 is a flowchart showing the processing flow of an operating bypass discrimination processor according to embodiment 2. FIG. 9 is a diagram showing another example of data stored in the discrimination condition DB according to embodiment 2. FIG. 10 is a diagram showing an example of the hardware configuration of a plant control device and an operation support information generation device according to an embodiment.

[0011] Hereinafter, preferred embodiments of the plant operation support system according to the present invention will be described with reference to the drawings. The same reference numerals are used to designate the same contents and corresponding parts, and detailed descriptions thereof will be omitted. Similarly, in the following embodiments, redundant descriptions of components with the same reference numerals will be omitted.

[0012] Embodiment 1. Fig. 1 is a block diagram showing the configuration of a plant operation support system according to embodiment 1. In embodiment 1, a nuclear power plant operation support system will be described as an example, but the present invention is not limited to this. The nuclear power plant operation support system is composed of a plant monitoring and control device 20A and an operation support information generation device 10A.

[0013] [Plant monitoring and control device] The plant monitoring and control device 20A is composed of plant equipment 210, a plant control device 220, an information display processing unit 230A, an output device 240, and an input / output device 250. The input / output device 250 is an input / output terminal that allows an operator to monitor the status of the plant equipment 210 and control the plant equipment 210. The input / output device 250 may be, for example, a touch panel display or a combination of a display and a mouse, but is not limited to these. Input for control made by the operator using the input / output device 250 is transmitted to the plant control device 220 as control input information.

[0014] The plant control device 220 transmits the control input information received from the input / output device 250 to the plant device 210, receives the control status of the plant device 210 as plant parameters D221 (hereinafter referred to as plant parameters D221), and transmits them to an information display processing unit 230A, which will be described later. The plant parameters D221 (control status) are displayed on the output device 240.

[0015] The plant control device 220 also periodically receives plant information related to the plant equipment 210, such as instruments. Alternatively, the plant control device 220 receives the plant information in response to a request from the operation support information generation device 10A. In this embodiment, the received plant information includes plant parameters D221 and plant equipment information D222, but is not limited to these. Furthermore, the plant control device 220 uses the obtained plant parameters D221 to generate permissive information D223 according to the plant operation status as a type of plant information.

[0016] The permissive information D223 is information used to prevent or allow plant equipment operation until predefined criteria are met. Examples of plant equipment operations include ESF operations such as reactor trip, main feedwater isolation, and main steam isolation. If a plant equipment operation, for example, an ESF operation, is prevented by the permissive information D223, an operating bypass occurs.

[0017] The plant control device 220 transmits plant information, such as plant parameters D221, plant equipment information D222, and permissive information D223, to the information display processing unit 230A and the operation support information generation device 10A.

[0018] The information display processing unit 230A generates drawing data for display on the input / output device 250 and the output device 240 based on the received plant information, and transmits the drawing data to the input / output device 250 and the output device 240. An example of the output device 240 is a display terminal such as a large display device. The input / output device 250 and the output device 240 display the received display data.

[0019] [Driving Assistance Information Generating Device] The driving assistance information generating device 10A is composed of an ESF discrimination processing unit 110, a maintenance bypass discrimination processing unit 120, and an operating bypass discrimination processing unit 130A.

[0020] The ESF determination processing unit 110 determines the operating status of the ESF and equipment trip (hereinafter collectively referred to as ESF), for example, not operating, operating, completed operation, or abnormal operation, based on the plant parameter D221. Various ESFs operate in response to an abnormality occurring in the plant equipment 210 or an abnormality in the plant state. For example, an abnormality occurring in the plant equipment 210 may be due to a pump failure, and an abnormality in the plant state may be due to an abnormal water level in the equipment.

[0021] The plant control device 220 receives plant parameters D221 from the plant equipment 210, and when it detects an abnormality in the plant state, such as an abnormal drop in equipment water level below a threshold, it activates the ESFs required to ensure the safety of the plant. Specifically, the plant control device 220 generates ESF activation signals for the required ESFs, and transmits the equipment activation signals to the plant equipment 210 that each ESF controls, thereby operating the plant equipment 210. The signal processing within the plant control device 220 is programmed as control logic.

[0022] <ESF Discrimination Processing Unit> As described above, the ESF discrimination processing unit 110 detects the operation of the ESF in the plant parameter D221 outside the plant control device 220, and if the ESF is operating, determines its operating status. Specifically, it determines whether the ESF is operating, and if it is determined that the ESF is operating, determines whether the ESF's operating status is in operation, operation completed, or abnormal operation.

[0023] FIG. 2 shows the processing flow of the ESF determination processing unit 110. For each ESF, one or more plant parameters D221 that affect ESF operation are periodically received (step ST1101), and it is determined whether any of them satisfy the criteria for ESF operation, i.e., whether any of them may be a cause of ESF operation (step ST1102). As described above, an example of the criteria for ESF operation is when the plant parameters D221 include alarm information indicating an abnormal drop in equipment water level. It may also be determined whether each individual plant parameter D221 exceeds a threshold value that satisfies the criteria for ESF operation. Alternatively, it may be determined by operating a logic circuit or processor, described below, that comprehensively determines multiple plant parameters D221. Here, if there is no plant parameter D221 that satisfies the criteria for ESF operation, the ESF operation status is determined to be "not operating (D1101)."

[0024] If a plant parameter D221 that satisfies the criteria for ESF operation is present, the operating status of one or more plant devices 210 on which the ESF is operating is checked. It takes a predetermined time for the plant devices 210 to complete their operation. For example, this may be the time until a valve is fully closed or fully opened, or the time until a pump is started or stopped. Therefore, for all plant devices 210 that are the target of ESF operation, the operation time until the operation is completed, i.e., the operation completion time, is defined for each ESF. For example, the time until all valves that are the target of ESF operation are closed may be defined as 15 seconds.

[0025] When it is determined in step ST1102 that there is a plant parameter D221 that satisfies the criteria for ESF operation, a timer that measures the operation completion time is started, and it is determined whether or not the operation completion time has elapsed (step ST1103). If the operation completion time has not elapsed, the ESF operation status is determined to be "operating (D1102)." In this case, after outputting determination result data (step ST1106) (to be described later), the process returns to step ST1103 again, and it is determined whether or not the operation completion time has elapsed (step ST1107).

[0026] When the operation completion time of the plant equipment 210 has elapsed, the ESF determination processing unit 110 requests and receives one or more plant parameters D221 related to the plant equipment to be operated by the ESF from the plant control device 220 (step ST1104). Using the received plant parameters D221, it is determined whether all of the plant equipment 210 to be operated by the ESF are operating normally (step ST1105). Here, the equipment state that should be after ESF operation is defined for each ESF. For example, valve 1 is fully closed, valve 2 is fully closed, and valve 3 is fully open. The received plant parameters D221 of the plant equipment 210 are compared with the equipment state that should be after ESF operation. If all comparison results match, it is determined that all are operating normally, and the ESF operation status is determined to be "operation completed (D1103)." If even one of them is not operating normally, for example, if the desired equipment states are valve 1 fully closed, valve 2 fully closed, and valve 3 fully open, but the plant parameter D221 states valve 1 fully open, valve 2 half open, and valve 3 fully open, the comparison result for the state of valve 2 does not match, and the ESF operating status is determined to be "abnormal operation (D1104)."

[0027] The ESF operation status determination results D110 (D1101 to D1104) are transmitted from the ESF determination processing unit 110 to the information display processing unit 230A, and are output by the information display processing unit 230A (step ST1106). Such determination processing of the ESF operation status is performed for all ESFs.

[0028] <Maintenance Bypass Discrimination Processor> The maintenance bypass discrimination processor 120 determines whether a maintenance bypass has occurred in each ESF and the type of maintenance bypass that has occurred. The plant devices 210 that affect the operation of each ESF, such as instruments such as water level gauges, may include instruments that cause a maintenance bypass. These plant devices 210 measure plant values ​​on multiple channels, for example, four channels.

[0029] A maintenance bypass refers to a state in which one or more channels become unusable due to maintenance, anomalies, or other reasons. In plant operation, a small number of channels, for example, one channel, is often permitted for maintenance bypass, taking into account the need to operate while performing maintenance. However, if more than two channels, for example, a maintenance bypass occurs, an abnormal state occurs in which the ESF does not operate normally, requiring operator intervention. In order to provide appropriate status notification to operators, it is necessary to determine when a maintenance bypass has occurred.

[0030] The maintenance bypass determination processing unit 120 determines whether a maintenance bypass has occurred for the plant equipment 210 that could be a factor in the operation of each ESF, based on the plant equipment information D222 indicating whether a maintenance bypass has occurred, in order to output the occurrence status of the maintenance bypass to the output device 240. Furthermore, if a maintenance bypass has occurred, the maintenance bypass type is determined, i.e., whether it is within the normal range or whether an abnormality has occurred.

[0031] 3 shows a processing flow of the maintenance bypass determination processing unit 120. First, the plant equipment information D222 related to each ESF is periodically requested from and received by the plant control device 220 (step ST1201). The plant equipment information D222 is bypass occurrence information for multiple channels of plant equipment.

[0032] One ESF contains plant equipment information D222 related to zero or more plant devices 210. The following description will be given taking as an example a case where there are two plant devices 210, Instrument 1 and Instrument 2, that can be the operating factors of the ESF, and each of Instrument 1 and Instrument 2 has four channels. In this case, the plant equipment information D222 includes maintenance bypass information MD1-1 to MD1-4 for channels 1 to 4 of Instrument 1, and maintenance bypass information MD2-1 to MD2-4 for channels 1 to 4 of Instrument 2. Each piece of maintenance bypass information MD stores a 1 if a maintenance bypass has occurred, and a 0 if it has not occurred. Furthermore, with regard to maintenance bypass, it is assumed that one channel can be bypassed for reasons such as maintenance and is in a normal state, and that a state in which two or more channels are in maintenance bypass for reasons such as an equipment abnormality is in an abnormal state.

[0033] Next, the presence or absence of a maintenance bypass is determined for one of the pieces of plant equipment information D222 related to the received ESF (step ST1202). For example, when determining whether a maintenance bypass has occurred for instrument 1, the number of pieces of maintenance bypass information MD1-1 to MD1-4, which are the plant equipment information D222 for instrument 1, that have a value of 1 is counted. If only maintenance bypass information MD1-1 stores a value of 1, the number of maintenance bypasses is 1, meaning that a maintenance bypass of one channel has occurred for instrument 1. If both maintenance bypass information MD1-1 and MD1-2 store a value of 1, the number of maintenance bypasses is 2, meaning that a maintenance bypass of two or more channels has occurred for instrument 1. If all of the values ​​of maintenance bypass information MD1-1 to MD1-4 are 0, the number of maintenance bypasses is 0, meaning that no maintenance bypass has occurred for instrument 1. This process is performed for all plant devices 210 related to the ESF (step ST1203). That is, in this embodiment, this process is also performed for instrument 2.

[0034] Then, it is determined whether there is any plant equipment information D222 among all the plant equipment information D222 related to the ESF in which maintenance bypass of two or more channels has occurred, and if there is, it is determined that "maintenance bypass of two or more channels has occurred (D1201)" (step ST1204).

[0035] If there are no maintenance bypasses for two or more channels, it is next determined whether there is at least one piece of plant equipment information D222 in which a maintenance bypass for one channel has occurred, and if there is, it is determined that "a maintenance bypass for one channel has occurred (D1202)" (step ST1205). If a maintenance bypass for one channel has not occurred, it is determined that "no maintenance bypass has occurred (D1203)." The maintenance bypass determination result D120 (D1201 to D1203) is sent to the information display processing unit 230A (ST1206). The above maintenance bypass determination process is performed for all ESFs.

[0036] <Operating Bypass Discrimination Processor> The operating bypass discrimination processor 130A determines whether an operating bypass has occurred in each ESF. An operating bypass refers to the blocking of the start-up of an ESF by a permissive signal during plant startup or shutdown. Therefore, an operating bypass that blocks the operation of each ESF occurs basically based on the transmission status of permissive information D223. The permissive information D223 is generated and transmitted when the plant parameter D221 reaches a predefined set point.

[0037] The permissive information D223 may indicate, for example, the reaching of a set point for reactor power or the reaching of a set point for pressurizer pressure, and is represented by the name of the permissive signal, such as P-1 or P-2. For example, if the plant parameter D221 related to the permissive signal P-1 of the permissive information D223 is reactor power, and the set point of the plant parameter D221 is "10% reactor power," then the permissive signal P-1 will be "1" if the reactor power value is 10% or greater, and will be 0 if the reactor power value is less than 10%. Examples of conditions for generating an operating bypass include the plant parameter D221 being equal to or greater than the set point (the permissive signal P-1 is "1"), or being less than the set point (the permissive signal P-1 is "0"). In many of these cases, an operating bypass is automatically generated when the plant parameter D221 satisfies the conditions for generating an operating bypass.

[0038] Here, there is also an operating bypass that is generated by manual operation by an operator. In this case, the plant control device 220 receives manual inhibit input information transmitted from the input / output device 250 by the operation of the operator, and after the plant control device 220 determines that the operating bypass generation condition, that is, the permissive signal P-1 is "1" or, if the permissive signal P-1 is "0", is satisfied, a manual operating bypass is generated.

[0039] The operating bypass determination processing unit 130A, like the ESF determination processing unit 110 and the maintenance bypass determination processing unit 120, performs a process of determining whether an operating bypass has occurred in order to display the occurrence status of the operating bypass on the output device 240.

[0040] 4 shows the processing flow of the operating bypass determination processing unit 130A, and explains an example of determining operating bypass information generated by a manual operation performed by an operator. First, zero or more permissive information D223 related to ESF operation is periodically received from the plant control device 220. At the same time, plant parameters D221, i.e., one or more manual inhibition signals, which are the processing results of manual inhibition input information received from the input / output device 250, are periodically received (step ST1301).

[0041] Thereafter, it is determined whether or not a manual operating bypass has occurred. If the permissive information D223 is included in the determination conditions, it is determined whether or not the permissive information D223 satisfies the operating bypass occurrence condition and whether or not a manual inhibit signal has been generated (step ST1302). If both conditions are met, it is determined that an operating bypass has occurred.

[0042] For example, if the conditions for manual operating bypass occurrence in a certain ESF are that the plant parameter D221 is equal to or greater than the set point and a manual inhibit signal is generated, that is, if the value of the permissive signal P-1 in the permissive information D223 is "1" (equal to or greater than the set point) and the value of the manual inhibit signal is "1 (occurred)," then it is determined that "operating bypass occurred (D1301A)." Note that if the permissive information D223 is not included in the determination conditions, it is determined based on whether or not an occurrence has occurred due to a manual inhibit signal. If the conditions for occurrence are not met, it is determined that "operating bypass has not occurred (D1302A)."

[0043] The operating bypass determination result D130 (D1301A or D1302A) is sent to the information display processing unit 230A (step ST1303). The above operating bypass determination process is performed for all ESFs in which an operating bypass may occur.

[0044] As described above, the permissive information D223 generates a signal when the plant parameter D221 reaches a predefined set point. For example, the permissive information D223 is also periodically sent to the information display processing unit 230A to display "1" on the output device 240 or the input / output device 250 when the plant parameter D221 is equal to or greater than the set point, and "0" when the plant parameter D221 is less than the set point.

[0045] The information display processing unit 230A generates drawing data for displaying driving assistance information on the output device 240 based on the ESF operation status determination result D110, maintenance bypass determination result D120, and operating bypass determination result D130, which are determination result data output from the ESF determination processing unit 110, maintenance bypass determination processing unit 120, and operating bypass determination processing unit 130A of the driving assistance device 10, as well as permissive information D223 output from the plant control device 220, and outputs the drawing data to the output device 240.

[0046] <Screen Display of Output Display Device> Figure 5 shows an example of a screen display displayed on the output device 240. In the ESF operation status display 300, the names of each ESF are arranged (e.g., 311, 312, 313, 314), and the operation status is displayed (e.g., 315, 316). Above each operation status display, icons 321 and 322 indicating the occurrence of a maintenance bypass are displayed on the right, and icon 331 indicating the occurrence of an operating bypass is displayed on the left. In addition, in the permissive status display 350, displays indicating each permissive signal (e.g., P-1 to P-9) are arranged.

[0047] <ESF Operation Display> The ESF operation status display will now be described. When the information display processing unit 230A receives the ESF operation status determination result D110 (D1101 to D1104) from the ESF determination processing unit 110, it performs display processing according to the data type. (1) If the ESF is not operating (D1101 is received), it generates drawing data to display the ESF in a color indicating that it is off, as in ESF displays 313 and 314. (2) If the ESF is operating (D1102 is received), it generates drawing data to display the ESF in a color indicating that it is operating (e.g., yellow), as in ESF displays 311 and 312. (3) If the ESF operation has been completed (D1103 is received), it generates drawing data to display the ESF in a color indicating that the operation has been completed (e.g., blue), as in ESF display 316. (4) If there is an ESF operation abnormality (D1104 is received), the ESF display 318 is displayed in a color indicating the operation abnormality (for example, red indicating an alarm color), and drawing data is generated that flashes for a certain period of time to prompt the operator to take action against the abnormality.

[0048] <Maintenance Bypass Display> The display of a maintenance bypass will now be described. When the information display processing unit 230A receives the maintenance bypass determination result D120 (D1201 to D1203) from the maintenance bypass determination processing unit 120, it performs display processing according to the data type. (1) If a maintenance bypass has occurred on two or more channels in the ESF (D1201 is received), it generates drawing data that displays an icon 322 indicating an abnormality and blinks it for a certain period of time to prompt the operator to take action against the abnormality. (2) If a maintenance bypass has occurred on only one channel (D1202 is received), it generates drawing data that displays an icon 321 indicating the occurrence of a one-channel bypass and blinks it for a certain period of time. (3) If a maintenance bypass has not occurred (D1203 is received), it does not generate drawing data (if an icon has already been drawn, it performs drawing processing to erase the icon).

[0049] <Operating Bypass Display> The display of an operating bypass will now be described. When the information display processing unit 230A receives the operating bypass determination result D130 (D1301A or D1302A) from the operating bypass determination processing unit 130A, it performs display processing according to the data type. (1) If an operating bypass has occurred in the ESF (D1301A is received), it generates drawing data that displays an icon 331 indicating the occurrence of an operating bypass by blinking it for a certain period of time. (2) If an operating bypass has not occurred (D1302A is received), it does not generate drawing data (if an icon has already been drawn, it performs drawing processing to erase the icon).

[0050] <Permissive Information Display> The display of permissive information will now be described. The information display processing unit 230A receives permissive information D223 from the plant control device 220. (1) If the plant parameter D221 is equal to or greater than a set point (for example, the value of the permissive signal P-6 is "1"), drawing data is generated to display the corresponding permissive display 352 of the permissive status display 350 by blinking it for a certain period of time in order to notify the operator. (2) If the plant parameter D221 is less than the set point (for example, the value of the permissive signal P-6 is "0"), drawing data is generated for a display 351 showing that the light is off.

[0051] The above-described display methods are merely examples and are not limiting. The ESF operation display, maintenance bypass display, operating bypass display, and permissive information display may be displayed not only on the output device 240 but also on the input / output device 250. In addition to displaying information on a display, each operating status may be presented by sound.

[0052] 2 to 4, the discrimination result data D110 to D130 are described as being output as individual discrimination data (for example, in the case of D110, D1101 to D1104 are output), but the discrimination result data D110 to D130 may each be of one type, and the discrimination result may be expressed by the difference in its value (for example, value of D1101: 0, value of D1102: 1, value of D1103: 2, value of D1104: 3), which may be processed and displayed by the information display processing unit 230A. Alternatively, other methods may be used.

[0053] <Effects> (1) According to the first embodiment, not only is the operating status of ESFs and equipment trips related to the safety of the nuclear plant and information on ESFs and equipment trips affected by a maintenance bypass displayed, but information on ESFs and equipment trips whose operation is prevented by the occurrence of an operating bypass manually by an operator is also displayed, and permissive information that causes the occurrence of an operating bypass is also displayed. This makes it possible to improve each operator's situational awareness regarding the status of ESFs and equipment trips throughout plant operation, including not only when there is an abnormality in the plant but also during normal operation at plant startup and shutdown.

[0054] (2) Furthermore, by making it possible to display the operating bypass generated by Operator A's manual operation on an output device that can be checked simultaneously by multiple operators, such as on a large display, Operator A's actions can be shared with the entire operation team. As a result, the situational awareness of the entire operation team regarding Operator A's actions can be improved, and even if a human error occurs, such as operating the wrong target, other operators can immediately notice and take action to restore the plant to its correct state. These effects of (1) and (2) can further improve the safety of nuclear power plant operations.

[0055] Embodiment 2 In the first embodiment, a method for implementing a plant operation support system including an operating bypass determination processing unit 130A that determines whether an operating bypass that prevents ESF operation has occurred through manual operation by an operator, and an information display processing unit 230A that displays an operating bypass that has occurred through manual operation has been described.

[0056] As described in the first embodiment, operating bypasses include those that are automatically generated in response to permissive information. During plant operation, particularly startup or shutdown, the value of the permissive signal, which corresponds to the state of plant parameter setpoints reached as plant operation progresses, is an important indicator of the progress of plant operation, and operating bypasses that are automatically generated based on the permissive signal also serve as information that improves the operating team's situational awareness regarding the operating status of plant equipment in response to the plant operation status. For this reason, it is desirable to be able to display not only operating bypasses manually operated by operators, but also automatically generated operating bypasses on an output device such as a large display device.

[0057] Here, the conditions for generating an automatically generated operating bypass will be explained. As an example of an ESF and equipment trip, reactor trip prevention, that is, the conditions for generating an operating bypass for a reactor trip and its behavior will be given. For example, "when permissive signal P-1 becomes "1," a reactor trip due to cause 1 is prevented," "when permissive signal P-1 becomes "0," a reactor trip due to cause 2 is prevented," "when permissive signal P-2 becomes "1," a reactor trip due to cause 3 is prevented," etc.

[0058] Here, the operating bypass conditions for a reactor trip related to the permissive signal P-1 include both a permissive signal P-1 of "1" and a permissive signal P-1 of "0." Therefore, if the judgment process of the operating bypass judgment processing unit in the plant operation support system of embodiment 1 were diverted to judging an automatically generated operating bypass, in other words, if an attempt was made to judge an automatically generated operating bypass by using the operating bypass generation condition as the judgment condition and eliminating the condition of manual interdiction input information, an icon display indicating an operating bypass would be constantly displayed on the output device, which would pose a problem in that the display would be meaningless.

[0059] The second embodiment is intended to solve such problems, and describes a method for obtaining an operation support system that not only determines whether an operating bypass is to be manually performed, but also determines whether an automatically occurring operating bypass is to be performed, which is particularly important during plant operation, and displays the occurrence status on an output device.

[0060] In the second embodiment, the following two methods will be described: (1) A method in which a discrimination priority is assigned to the manual operations and automatically generated operating bypasses to be displayed, and the operating bypass with the highest priority is displayed; (2) A method in which an operator selects and inputs discrimination priority data suitable for the progress of the plant from a data set in which discrimination priorities of operating bypasses are set, which are prepared for each plant operation procedure, such as a start-up procedure, a shutdown procedure, and an abnormality response procedure, and displays an operating bypass suitable for the progress status of the plant.

[0061] 6 shows a block diagram of a nuclear power plant operation support system according to the second embodiment. The system is composed of a plant monitoring and control device 20B and an operation support information generating device 10B. In addition to the plant equipment 210, input / output device 250, and output device 240 of the first embodiment, the plant monitoring and control device 20B is also equipped with an information display processing unit 230B that generates drawing data for display icons of operating bypasses according to the discrimination priority or display priority.

[0062] Furthermore, in addition to the ESF discrimination processing unit 110 and the maintenance bypass discrimination processing unit 120 of the first embodiment, the operation support information generation device 10B is configured with a discrimination condition database (hereinafter referred to as DB) 140A that stores discrimination condition data for the operating bypass to be displayed, a discrimination condition input / output device 150 that is an interface through which an operator selects discrimination priority data according to the plant progress status from one or more discrimination priority data sets, which are a type of discrimination condition data registered in the discrimination condition DB 140A, and inputs the selected data to the operating bypass discrimination processing unit 130B, and the operating bypass discrimination processing unit 130B that reads the discrimination condition data selected by the discrimination condition input / output device 150 from the discrimination condition DB 140A, selects an operating bypass to be displayed on the output device 240 based on the discrimination condition data (discrimination priority data), and transmits the selected operating bypass to the information display processing unit 230B.

[0063] Next, the above-mentioned "(1) method of assigning discrimination priorities to the operating bypasses to be displayed and displaying the operating bypass with the highest priority" will be described. An example of the discrimination condition DB 140A is shown in FIG. 7. The discrimination condition DB 140A stores the following data (A) to (F). (A) ESF / Trip name 1401: Name of the ESF and various trips (hereinafter collectively referred to as ESF). (B) ID 1402: ID for uniquely distinguishing the operating bypass that occurs. (C) Operating bypass name 1403. (D) Bypass type 1404: Indicates whether the operating bypass is generated automatically or manually. For example, "automatic" is stored for automatic generation, and "manual" for manual generation. (E) Bypass condition 1405: Indicates the conditions for generating an operating bypass. (F) Discrimination priority 1406A: Indicates the display priority of the operating bypass, and is set for each ESF.

[0064] In the discrimination priority order 1406A, the operating bypasses to be displayed on the output device 240 are assigned unique numbers in ascending order of priority, such as 1, 2, etc. The highest priority is assigned the number 1. Also, "-" is entered for those that are not to be displayed on the output device 240.

[0065] The operating bypass determination processing unit 130B determines an operating bypass taking into consideration the priority order to be displayed, based on the data of the determination priority order 1406A described in the determination condition DB 140A. Fig. 8 shows the processing steps of the operating bypass determination processing unit 130B according to the second embodiment.

[0066] Step ST1301 relating to data acquisition is the same as in the first embodiment. Next, the occurrence status of a manually-generated operating bypass and an automatically-generated operating bypass is determined for each ESF (step ST1302A). A manually-generated operating bypass is determined as in the first embodiment. An automatically-generated operating bypass is determined using permissive information D223, which is the occurrence condition. For example, if the occurrence condition for an automatically-generated operating bypass for a certain ESF is "above the set point of plant parameter D221," the value of permissive signal P-1 is set to "1," and it is determined that "an operating bypass is occurring."

[0067] If the ESF has multiple operating bypass conditions, if any one of them is satisfied, the process proceeds to step 1302B. If not satisfied, the process goes to "No operating bypass indication (D1302B)".

[0068] Next, the discrimination condition DB 140A is referenced, and the ID 1402 of the target in which the operating bypass has occurred is discriminated by, for example, checking the bypass condition 1405, and the discrimination priority is referenced (step ST1302B). If any of the currently occurring operating bypasses has a discrimination priority 1406A set, the ID 1402 of the operating bypass with the highest discrimination priority 1406A is discriminated as discrimination result data D1301B (step ST1302C), and output to the information display processing unit 230B (step ST1303).

[0069] 7, in determining an operating bypass related to a reactor trip, if the permissive information D223 satisfies the conditions that the permissive signal P-2 is "1" and the permissive signal P-3 is "0" and also satisfies the manual blocking operation signal "XXXX=1", that is, if "1-3" and "1-6" of ID1402 satisfy the conditions, the occurrence of an operating bypass of ID "1-6" which has the highest discrimination priority 1406A of "1" will be displayed preferentially. Note that if the discrimination priority 1406A of all operating bypasses is "-", a signal is sent to the information display processing unit 230B indicating "no operating bypass display (D1302B)".

[0070] When the information display processing unit 230B receives the data of ID1402 as D1301B, it generates drawing data to display an icon indicating an operating bypass by blinking it for a certain period of time. When a new operating bypass occurs, as in the first embodiment, when it receives data D1302B, it generates drawing data to erase the operating bypass icon.

[0071] <Effects> With the above processing, even for automatically generated operating bypasses, the occurrence of those to whom it is desired to notify the driver during operation can be output to the output device 240, further improving the situational awareness of the driving team.

[0072] Next, the above-mentioned "(2) method in which an operator selects and inputs discrimination priority data suitable for the progress of the plant from among the discrimination priority data sets of operating bypasses prepared for each plant operation procedure, and displays an operating bypass suitable for the progress status of the plant" will be described.

[0073] 9 shows data in the discrimination condition DB 140A that stores a discrimination priority order 1406B for each operating procedure. The discrimination priority order 1406B stores discrimination priority order data for each operating procedure, such as a startup procedure, a shutdown procedure, or an XX abnormality procedure, and each procedure is assigned a unique procedure ID. In the example of FIG. 9, the IDs are ID:A to ID:C.

[0074] The discrimination condition input / output device 150 is an input / output interface through which the operator selects the procedure ID of the discrimination priority order 1406B to be applied and instructs the operating bypass discrimination processing unit 130B. The contents of the discrimination condition DB shown in FIG. 9 are displayed on the screen of the discrimination condition input / output device 150, and the operator is allowed to select one procedure ID of the discrimination priority order 1406B to be applied using a radio button or the like. When the operator selects and inputs the procedure ID of a procedure that is in progress or is about to be progressed, the procedure ID is transmitted to the operating bypass discrimination processing unit 130B, and in step ST1302B, the operating bypass discrimination processing unit 130B performs discrimination processing based on the discrimination priority order 1406B linked to the transmitted procedure ID. For example, if the operator selects the startup procedure, i.e., the discrimination priority order 1406B with "procedure ID: A", through the discrimination condition input / output device 150, the operating bypass discrimination processing unit 130B performs operating bypass discrimination processing based on the priority order data.

[0075] <Effects> The above-mentioned method makes it possible to apply appropriate discrimination priorities to each operational status, thereby enabling the display of operating bypasses according to the operational status. As a result, more appropriate information can be presented to operators, further improving the safety of plant operations.

[0076] The operating bypass discrimination processing unit 130B discriminates the operating bypass with the highest discrimination priority in step ST1302C, and at this time outputs data indicating the bypass type 1404, "automatic" or "manual," together with the operating bypass display target ID 1402, as discrimination result data D1301B. The information display processing unit 230B that receives this data may display a different icon depending on the bypass type 1404, so that it can be distinguished whether the operating bypass that has occurred is the result of automatic generation or manual operation.

[0077] The discrimination condition DB 140A and the information display processing unit 230B may also handle data related to the importance of the operating bypass. For example, for each operating bypass for each ESF in the discrimination condition DB 140A, importance data, for example, class 1, class 2, and class 3 in descending order of importance, may be provided, and this importance data may also be output as discrimination result data D1301B. The information display processing unit 230B that receives this data may display the occurrence of an operating bypass using different colors or icons according to the importance level, thereby communicating the importance of the operating bypass to the operator.

[0078] Furthermore, although the output device 240 can always present information on the occurrence of only one operating bypass for each ESF, a list of information on the occurring operating bypasses, such as the operating bypass name 1403, bypass type 1404, bypass condition 1405, occurrence status (occurred, not occurred), etc., may be displayed on a separate display, the input / output device 250. Furthermore, the above-mentioned processing methods are merely examples, and may be realized using other methods.

[0079] The plant control device 220 and the operation support information generation devices 10A and 10B according to the first and second embodiments include a processor 50 and a storage device 60, as shown in FIG. 10 , which is an example of hardware. Although not shown, the storage device 60 includes a volatile storage device such as a random access memory and a nonvolatile auxiliary storage device such as a flash memory. Alternatively, a hard disk auxiliary storage device may be used instead of the flash memory. The processor 50 may include a central processing unit (CPU), an application specific integrated circuit (ASIC), an integrated circuit (IC), a field programmable gate array (FPGA), various logic circuits, various signal processing circuits, and the like. Furthermore, a plurality of processors 50 of the same type or different types may be provided, and each process may be shared and executed.

[0080] The processor 50 executes a program input from the storage device 60. In this case, the program is input from the auxiliary storage device to the processor 50 via the volatile storage device. The processor 50 may output data such as calculation results to the volatile storage device of the storage device 60, or may save the data in the auxiliary storage device via the volatile storage device. The discrimination condition DB may be stored in the storage device 60.

[0081] Although various exemplary embodiments and examples are described in this application, the various features, aspects, and functions described in one or more embodiments are not limited to the application of a particular embodiment, but may be applied to the embodiments alone or in various combinations. Therefore, countless variations not illustrated are contemplated within the scope of the technology disclosed in this specification. For example, this includes cases where at least one component is modified, added, or omitted, or where at least one component is extracted and combined with components of another embodiment.

[0082] 10A, 10B: operation assistance information generating device, 20A, 20B: plant monitoring control device, 50: processor, 60: storage device, 110: ESF discrimination processing unit, 120: maintenance bypass discrimination processing unit, 130A, 130B: operating bypass discrimination processing unit, 140A: discrimination condition DB, 150: discrimination condition input / output device, 210: plant equipment, 220: plant control device, 230A, 230B: information display processing unit, 240: output device, 250: input / output device.

Claims

1. A plant operation support system including a plant monitoring and control device and an operation support information generation device, The plant monitoring and control device includes: Plant equipment that constitutes the plant; a plant control device that outputs plant parameter information and plant equipment information, which are plant information acquired from the plant equipment, and permissive information generated based on the plant parameter information to the operation support information generation device; an input device for inputting operation control information to the plant control device; an information display processing unit that performs processing to display the signal generated by the driving support information generating device on an output device; Equipped with The driving assistance information generating device includes: an engineered safety facility determination processing unit that determines the operating status of engineered safety facilities related to the safety of the plant based on the plant parameter information and transmits the determination result to the information display processing unit; a maintenance bypass determination processing unit that determines whether a maintenance bypass has occurred in the engineered safety facility based on the plant equipment information and transmits the determination result to the information display processing unit; an operating bypass determination processing unit that determines whether an operating bypass that prevents the operation of the engineered safety facility has occurred based on the permissive information and sends the determination result to the information display processing unit; and wherein the output device visually displays the operating status of the engineered safety facilities, whether the maintenance bypass has occurred, and whether the operating bypass has occurred.

2. 2. The plant operation support system according to claim 1, wherein the operation support information generating device comprises: a discrimination condition database that stores IDs assigned to the operating bypasses and priorities of the operating bypasses to be preferentially displayed on the output device; and an operating bypass discrimination processing unit that selects the operating bypass with the highest priority and preferentially displays on the output device whether the selected operating bypass has occurred.

3. 3. The plant operation support system according to claim 2, wherein the priority is set for each operation procedure of the plant for the operating bypass.

4. 4. The plant operation support system according to claim 1, wherein the display on the output device displays the importance of the maintenance bypass and the importance of the operating bypass in addition to the occurrence or non-occurrence of the maintenance bypass and the occurrence or non-occurrence of the operating bypass.

5. 4. The plant operation support system according to claim 1, wherein the operating bypass includes both an operating bypass by manual operation that is generated based on input of both the permissive information and a manual inhibit signal of the plant parameter information, and an operating bypass that is automatically generated based on the permissive information.

6. 4. A plant operation support system according to claim 1, wherein the operating status of the engineered safety facilities, whether or not the maintenance bypass has been activated, and whether or not the operating bypass has been activated can all be visually confirmed on a single screen.