JP2704005B2 - Man-machine system design support equipment - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Purpose of the Invention] (Industrial application field) The present invention relates to designing a man-machine system such as a control panel for monitoring and controlling the operation of a plant such as a nuclear power plant.
The present invention relates to a man-machine system design support device that supports the design.

(Prior Art) Generally, in a large-scale process plant such as a nuclear power plant, the operation of a plant as a mechanical system is monitored and controlled by a man-machine system such as a control panel constituting an interface between a human (man) and a machine (machine). doing.

Then, when newly designing this man-machine system, it is necessary to evaluate whether or not the intended system function is sufficiently fulfilled in actual task execution by a human.

Therefore, in designing a man-machine system,
Confirmation means for confirming the operation of the designed system is required.

For example, conventionally, for a man-machine interface such as a control panel installed in a central control room of a nuclear power plant, a plant simulator has provided means for confirming system operation.

However, in this case, the operation of the man-machine system is performed by a human operator, and the validity of the system operation is evaluated based on the result of the interaction with the plant simulator behind the system.

Therefore, when designing a man-machine system, it is necessary to operate this system by an actual person and evaluate whether or not the system functions sufficiently.

(Problems to be Solved by the Invention) However, in the method of evaluating a man-machine system using an actual person as an operator, there is a possibility that system evaluation may vary due to individual differences of a person selected as an operator. There is.

Further, in order to give the system evaluation generality, a large number of people must be engaged in the system operation for a long time, and there is a problem that the efficiency is low in terms of economy.

Therefore, the present invention has been made in view of the above circumstances,
It is an object of the present invention to provide a man-machine system design support device that evaluates a designed man-machine system with high efficiency and supports the design.

[Configuration of the invention]

(Means for Solving the Problems) That is, the present invention relates to a machine simulation device that simulates a mechanical system such as a plant and generates various events of the mechanical system, and a design object used for monitoring and controlling the operation of the mechanical system. A man-machine system simulator that simulates a certain man-machine system, an operator behavior simulator that simulates the behavior of an operator when operating the man-machine system, and data during operation of the man-machine system simulator A driving data simulating device, wherein the driving behavior simulating device includes a cognitive behavior simulating means for simulating a cognitive behavior of a driver when operating a man-machine system, and a cognitive function for simulating a driver error in the cognitive behavior. It has an error simulating means and an error recovery simulating means for simulating the detection and repair of an error made by an operator. .

Further, the cognitive behavior simulating means includes monitoring process simulating means for simulating an operator monitoring process, and diagnostic process simulating means for simulating a process of diagnosing the operating state of the mechanical system based on information from the monitoring process simulating means. A countermeasure planning process simulating means for simulating a process of preparing a countermeasure for returning the operating state of the mechanical system to a normal state based on the information from the diagnostic process simulating means, and a countermeasure planning process simulating means. And a response operation execution process simulating means for simulating a process of executing the response operation based on the countermeasure.

(Operation) The designed man-machine system is first simulated by a man-machine system simulator, which is operated by an operator behavior simulator that simulates the behavior of the operator instead of a human operator. During this operation, the operator's error is simulated by the cognitive error simulating means, and the detection and repair of the error is simulated by the error recovery simulating means, and the operation of the machine simulating device that simulates a mechanical system such as a plant is monitored and controlled. Is done.

At this time, an error by the simulated operator during the operation of the man-machine system simulation device and data including data on detection of the error and its repair are collected by the data collection device.

Therefore, by analyzing and examining this data, it is examined whether or not the functions of the machine simulation device in various events are functioning sufficiently and accurately, and the designed man-machine system is evaluated with high efficiency and universality. Can help man-machine system design.

Furthermore, the use of an operator behavior simulator that simulates the behavior of the operator, including the occurrence and recovery of errors, makes it possible to clarify the conditions under which operators are likely to cause errors and the conditions for recovery, and improve reliability. This makes it possible to realize a man-machine system with high performance.

Embodiment An embodiment of the present invention will be described below with reference to FIGS.

FIG. 1 is a block diagram showing the overall configuration of the present invention.
The man-machine system design support device A of this embodiment is a machine simulation device 1 such as a plant simulator that simulates a mechanical system that is a plant such as a nuclear power plant, and a man-machine that monitors and controls the operation of the mechanical system such as the plant. A man-machine system simulation device 2 that simulates a system designed this time, an operator behavior simulation device 3 that simulates the behavior of an operator who operates the man-machine system, a machine simulation device 1 and an operator During the exchange of data with the behavior simulation device 3, the man-machine system simulation device 2
And a data collection device 2a for collecting data indicating how the device has operated.

The machine simulation device 1 is, for example, a plant simulator that simulates a nuclear power plant or the like. By operating an operation panel of a simulator console (not shown) by an operator, the machine simulation device 1 can set the initial state of the plant or generate various events. Then, various signals corresponding to the plant state are provided to the man-machine system simulation device 2.

The man-machine system simulation device 2 simulates a man-machine interface such as a control panel installed in a central control room of a nuclear power plant, for example, and also simulates a man-machine system newly designed this time. .

The operator behavior simulation device 3 operates in substantially the same manner as a human operator who drives the man-machine system,
While simulating an operation error, an operation for recovering the error is simulated.

That is, as shown in FIG. 2, the driver behavior simulating device includes a cognitive behavior simulating means 4 for simulating a cognitive behavior of an operator as an operator of the man-machine system, and a cognitive action for simulating an error of the driver by the cognitive behavior. Error simulation means 5;
Error recovery simulation means 6 for simulating the detection and recovery of this error.

Further, as shown in FIG.
Monitoring process simulating means 7 for simulating a human monitoring process as an operator of the man-machine system; diagnostic process simulating means 8 for simulating a process of diagnosing a plant state based on information from the monitoring process simulating means 7; On the basis of the countermeasure planning process simulating means 9 for simulating a process of formulating a countermeasure for restoring the plant state to normal based on the information from the diagnostic process simulating means, And a corresponding operation execution process simulating means 10 for simulating a process of executing the corresponding operation.

 Next, the operation of the present embodiment will be described.

The machine simulation device 1 can also simulate a chemical plant other than a nuclear power plant. Here, a case where the machine simulation device 1 simulates a nuclear power plant will be described.

In addition, it is assumed that the operator operates the operation panel of the simulator console (not shown) to cause the machine simulation device 1 to generate an event that all of the condensate pumps have failed.

Then, the machine simulation device 1 simulates a state in which the supply of water to the reactor is lost and the reactor is scrammed due to a low or low reactor water level. Also, a state in which the high pressure core spray system cannot be started is simulated.

The signal indicating the state of the nuclear power plant is supplied from the machine simulator 1 to the man-machine system simulator 2 and further to the monitoring process simulator 7 of the cognitive behavior simulator 4.

The monitoring process simulating means 7 monitors basic plant parameters such as the reactor water level and the reactor pressure, and the generated analyser and the like, and if any abnormalities occur in the plant state, the diagnosis process simulating means 8 Communicate to

The diagnostic process simulating means 8 diagnoses the plant condition as a total water loss based on the signal indicating the occurrence of an abnormality, the reactor water level signal, and the signal indicating the failure of all of the condensate pumps provided from the monitoring process simulating means 7. . This diagnosis result is provided to the countermeasure planning process simulation means 9.

The countermeasure planning process simulating means 9 drafts a countermeasure of manually starting the cooling system at the time of reactor isolation based on the diagnosis result of the total water supply loss sent from the diagnosing process simulating means 8 and the current reactor water level drop state. .

This result is transmitted to the corresponding operation execution process simulation means 10. In the response operation execution process simulation test 10, a manual start operation of the reactor isolation cooling system is performed through the man-machine system simulation unit 2 based on the countermeasure sent from the countermeasure planning process simulation unit 9.

Now, the plant state thus recovers. Here, the machine simulation device 1 causes an abnormality in the reactor isolation cooling system after a predetermined time, for example, 5 minutes, and stops water injection into the reactor.

In addition, the man-machine system simulator 2 causes the narrow-band reactor water level gauge to malfunction.

Normally, the abnormality of the cooling system at the time of isolation of the reactor is detected by the monitoring process simulating means 7 for the abnormality of the cooling system at the time of the isolation of the reactor. In the above, the recognition error can be simulated by the recognition error simulating means 5, and a state in which the operation state of the cooling system at the time of isolation of the reactor is not monitored is simulated.

This is realized by temporarily stopping the monitoring function of the operating state of the cooling system at the time of reactor isolation.

Although the reactor water level decreases due to an abnormality in the cooling system at the time of reactor isolation and an abnormality in the high-pressure core spray system that has been set, the monitoring process simulation means 7 initially uses this reactor water level due to an abnormality in the narrow-band reactor water level meter. No drop is detected.

For the first time after the difference between the readings of the broadband reactor water gauge and the narrow-band reactor water gauge has widened, the monitoring process simulation means 7 has found that there are inconsistencies between the readings of multiple reactor water gauges. To the diagnostic process simulation means 8.

In the diagnostic process simulating means 8, the indication value of the narrow-band reactor water level gauge is fixed and does not change, and since the main steam isolation valve close signal has already been generated due to the decrease in the reactor water level, the narrow-band reactor water level Diagnose that the gauge is abnormal and that the reactor water level is actually dropping. This diagnosis result is sent to the countermeasure planning process simulation means 9.

An error is simulated by the error recovery simulating means 6 for a cognitive error which has not been monitored for the operating state of the reactor isolation cooling system simulated by the cognitive error simulating means 5.

That is, despite the fact that the water level gauge determined to be normal confirmed that the reactor water level dropped below level 2, the cooling system at the time of reactor isolation was not activated automatically, and the cooling system at the time of reactor isolation was not activated. Detect abnormalities.

In the countermeasure planning process simulating means 9 which has received the diagnosis result of the diagnostic process simulating means 8, taking into account that the reactor water level is low and the high pressure water injection system is inactive, the automatic pressure reducing system is activated to operate the low pressure core injection. Develop measures to overcome the situation by using water systems. This result is sent to the response operation execution process simulating means 10, and a specific response operation is performed.

As described above, when the man-machine system simulation device 2 operates, data during the operation is collected by the data collection device 2a. It is possible to easily evaluate whether or not the performed system function is sufficiently performed, and it is possible to efficiently support the design of the simulated man-machine system by the man-machine system simulator 2.

Therefore, according to the present embodiment, in the design of the man-machine system, it is possible to specifically simulate the influence on the cognitive behavior process of the driver who is the operator when an abnormality occurs in the man-machine system.

As a result, in designing a man-machine system, it is possible to evaluate how and what part of the man-machine system affects the reliability of the operator's cognitive behavior and, consequently, the safety and reliability of the nuclear power plant itself. Becomes

Further, since the man-machine system simulation device 2 is automatically operated by the operator behavior simulation device 3 which is a machine, it is possible to perform evaluation in a form having generality which is not affected by individual differences of human operators. Has an effect.

In addition, since the man-machine system can be evaluated in various plant states, the cost reduction effect that it is possible to significantly reduce the labor cost required to restrain a large number of people (operators) for a long time. Having.

Furthermore, by using the operator behavior simulation device 3 that simulates the behavior of the operator including the occurrence and recovery of the error, it is possible to clarify the conditions in which the error is likely to occur in the operator and the conditions for the recovery. This has the effect that a highly reliable man-machine system can be realized.

〔The invention's effect〕

As described above, according to the present invention, a man-machine system simulation device that simulates a designed man-machine system is operated by an operator behavior simulation device of a machine that simulates the behavior of an operator. It is possible to significantly reduce the cost and improve the reliability of the evaluation as compared with the case where the operator operates the system to evaluate whether the system sufficiently plays the intended machine. . Furthermore, the use of an operator behavior simulator that simulates the behavior of the operator, including the occurrence and recovery of errors, makes it possible to clarify the conditions under which operators are likely to cause errors and the conditions for recovery, and improve reliability. This makes it possible to realize a man-machine system with high performance.

[Brief description of the drawings]

FIG. 1 is a block diagram showing the overall configuration of an embodiment of a man-machine system design support apparatus according to the present invention, and FIG.
FIG. 3 is a block diagram showing the configuration of the operator behavior simulation device shown in FIG. 3, and FIG. 3 is a block diagram showing the configuration of the cognitive behavior simulation means shown in FIG. 1 ... machine simulation device, 2 ... man-machine system simulation device, 2a ... data collection device, 3 ... driver behavior simulation device, 4 ... cognitive behavior simulation device, 5 ... cognitive error simulation device, 6 ... ... Error recovery simulator, 7 ... Monitoring process simulator, 8 ... Diagnosis process simulator, 9 ... Countermeasure planning process simulator, 10 ... Corresponding operation execution process simulator, A ...
... Man-machine system design support equipment.

Claims (2)

(57) [Claims] 1. A machine simulator for simulating a mechanical system of a plant or the like to generate various events of the mechanical system, and a man-machine for simulating a man-machine system to be designed for monitoring and controlling the operation of the mechanical system. A system simulation device, an operator behavior simulation device that simulates the behavior of an operator when operating the man-machine system, and a data collection device that collects data during operation of the man-machine system simulation device, The operator behavior simulating device includes a cognitive behavior simulating unit that simulates a cognitive behavior of an operator when operating a man-machine system, a cognitive error simulating unit that simulates an operator error in the cognitive behavior, An error recovery simulation means for simulating the detection and recovery of a faulty error. 2. A cognitive behavior simulating means includes a monitoring process simulating means for simulating a monitoring process of an operator, and a diagnostic process for simulating a process of diagnosing an operating state of a mechanical system based on information from the monitoring process simulating means. Simulating means, a measure planning process simulating means for simulating a process of formulating a measure for returning the operating state of the mechanical system to a normal state based on information from the diagnostic process simulating means, and a measure planning process simulating means. 2. The man-machine system design support device according to claim 1, further comprising: a corresponding operation execution process simulating unit that simulates a process of performing a corresponding operation based on the drafted measure.