JP3151240B2 - Alarm processing method and device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an alarm processing method and apparatus for monitoring plant operation, and more particularly to an alarm processing method and apparatus suitable for suppressing secondary alarms.

[0002]

2. Description of the Related Art In a large plant such as a nuclear power plant, various systems are provided for safe and stable operation of the plant. The alarm processing system
One of them is an important system as a means for displaying a plant state when a plant is abnormal. For example, in a nuclear power plant, when a failure occurs in the plant, the alarm processing system may output hundreds of warnings depending on the degree of the failure. Even when such a large number of alarms are generated, the operator determines which alarm is the most important at that time.

In such a case, if it is possible to provide an alarm processing system which determines and displays a truly important alarm and does not display a secondary alarm (that is, suppresses a secondary alarm), The operator can easily grasp the state of the plant, and the alarm processing system is very useful for the operator.

For example, in the prior art described in Japanese Patent Application Laid-Open No. 64-12395, knowledge on the attribute of an alarm, knowledge on the cause of the alarm and the importance of the alarm are stored in a knowledge base, and an alarm is generated. At times, the causal relationship of the generated alarm is searched from this knowledge base to determine the important alarm.

Further, in the prior art described in Japanese Patent Application Laid-Open No. 63-282505, when an abnormality occurs in a plant, the event is identified, an alarm corresponding to the event is generated, and an operation corresponding to the event is performed. The law is guided to plant operators.

[0006]

The above-mentioned JP-A-64-12
According to the prior art described in Japanese Patent Publication No. 395,
Critical alerts are being searched for by inference mechanisms. As described above, when the inference mechanism is operated to determine an important alert, the processing time is long, and after the alert is issued, the important alert is not output immediately, and a time of about several tens seconds to several minutes elapses. After that, an important warning is output. Such a time delay is not desirable because the operator needs to grasp the plant state immediately after the alarm is generated.
Further, in this conventional example, the importance of the alarm is predetermined, but since this importance may vary depending on the state of the plant, there is a problem that the importance cannot be predetermined for all alarms. .

In the prior art described in Japanese Patent Application Laid-Open No. 63-282505, a cause event is specified, and a warning other than a warning corresponding to the cause event is suppressed as a secondary warning. But,
What the initiating event is usually determined by shutting down the plant in which the abnormality occurred and by subsequent investigation,
It is difficult to identify the initiating event when an abnormality occurs. Of course, if an initiating event can be specified when an abnormality occurs and an alarm corresponding to it can be generated, an extremely excellent alarm processing system will be obtained. It takes time,
There is a problem that it is not practical.

It is an object of the present invention to provide an alarm processing method and an alarm processing method for quickly outputting important information when an abnormality occurs in a plant and suppressing a secondary alarm.

[0009]

The object of the present invention is to respond to an alarm.
In addition, whether or not the alarm is an already suppressed alarm is determined as already suppressed / not suppressed.
As the flag, the reason why the alarm should be suppressed is the reason for suppression.
The relationship between the alarm and the order of occurrence of the suppression reason is determined by the judgment condition.
In the state that each is managed as a case,
Alarms are sequentially processed as alarms of interest
Therefore, the suppressed / unsuppressed flag corresponding to the noticed alarm is not suppressed.
Is in a controlled state, and the reason for suppressing the notice
Assuming that the alarm has occurred, determine the corresponding alert
If the order of occurrence is in accordance with the condition, respond to the notice
The suppressed / unsuppressed flag of
While the extraction of the noticed alert as an important alert is suppressed,
Is not in the order of occurrence according to the above judgment condition,
The information of interest is extracted and displayed as an important alert
Is achieved by Also, as for the device configuration,
In addition, whether or not the alarm is an already suppressed alarm is determined as already suppressed / not suppressed.
As the flag, the reason why the alarm should be suppressed is the reason for suppression.
The relationship between the alarm and the order of occurrence of the suppression reason is determined by the judgment condition.
Management and storage means for managing and storing
The alarms that occur in the alarm are sequentially processed as alerts of interest
When performing, the already suppressed / unsuppressed flag corresponding to the noticed alarm
Is in the unsuppressed state, and the reason for suppressing the attention alert
On the assumption that the alarm has actually occurred
In the case of the occurrence order relationship according to the judgment condition of
Set the suppressed / unsuppressed flag corresponding to the report to the suppressed state.
Above, while suppressing extraction of the noticed alarm as an important alarm
Then, if there is no occurrence order relationship according to the above judgment condition,
Is a processing / judgment method for extracting the information of interest as an important alert.
And the important alarms extracted by the processing / judgment means are displayed.
This is achieved by including the display means shown .

[0010]

[Effect] Each of the currently generated alarms is sequentially regarded as a target alarm.
When the alarm processing is performed by the
The unsuppressed flag is in the unsuppressed state, and the alert of interest
Assuming that the reason for suppressing the response actually exists,
The order of occurrence according to the judgment condition for the notice alert
In this case, the suppressed / unsuppressed flag corresponding to
After being placed in the already suppressed state, the important
Extraction is suppressed, but the order of occurrence according to the above judgment conditions
If there is no relationship, the information of interest is extracted as an important alert
After that, it is displayed. This
Appropriate information is promptly provided to plant operators.
It can be shown.

[0011]

An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a configuration diagram of an alarm processing device according to an embodiment of the present invention. The alarm processing device according to the present embodiment, which monitors the state of the monitoring target 1 and issues an alarm when an abnormality occurs, includes an alarm determination unit. 2, an event determination unit 3, an important alarm determination unit 6, a display device 7, and an offline processing unit 11 connected to the important alarm determination unit 6 offline. The important information determining means 6 includes the causal relation determining means 4 and the causal relation storing means 5, and the offline processing means 11
It comprises a causal relationship information creating means 8, a suppression reason searching means 9, and a knowledge base 10.

The monitoring target 1 outputs monitoring signals 1A, 1B, 1C including a process signal, an equipment status signal, and the like, and the important alarm determining means 6 is an alarm determining means based on the monitoring signal 1A from the monitoring target 1. 2 output signal, monitoring target 1
And an output signal of the event determination means 3 based on the monitoring signal 1B from the monitoring target 1 and the monitoring signal 1C from the monitoring target 1. The causal relationship determining means 4 of the important alarm determining means 6 determines whether causal relationship information stored in advance in the causal relationship storage means 5 has been generated based on these input signals,
When it is determined that the suppression reason information indicated by the causal relationship information has occurred for the occurrence alarm, the occurrence alarm is suppressed based on the information, and the occurrence alarm not suppressed is output to the display means 7 as an important alarm. I do.

The causal relationship storage means 5 acquires causal relationship information created in advance by the causal relationship information creating means 8 of the offline processing means 11 and stores it. In other words, the offline processing unit 11 previously creates information as the suppression reason for each alarm item, and associates the alarm with the suppression reason on a one-to-one basis so that the causality determination unit 4 can easily determine the information. As the relation information, the causal relation storage means 5
And store it. For example, in the case of a nuclear power plant, there are about one thousand and several hundred alarm items, but since the systems constituting the plant are independent, alarms are basically generated independently for each system. Therefore, the causal relationship of the alarm is not established among all the alarms, but basically, the causal relationship of the alarm is established in the system. It is possible to create and store causal relationship information indicating the relationship.

In the offline processing means 11, first, the causal relationship information creating means 8 outputs an alarm item to the suppression reason searching means 9. The suppression reason searching means 9 searches the knowledge base 10 for suppression reason information on the designated alarm item, and outputs the result to the causal relation information creating means 8.
The causal relationship information creating unit 8 arranges the suppression reason information for each alarm item, and outputs it to the causal relationship storage unit 5 as causal relationship information indicating a causal relationship with the alarm. In this way, the causal relationship storage means 5 can store causal relationship information indicating a causal relationship with the alarm in advance. FIG. 7 is a configuration diagram of the causal relationship information stored in the causal relationship storage unit 5. As shown in FIG. 7, in the causal relationship information, the reason for suppression is defined for the alarm item in the form of a causal relationship table, and it is possible to determine whether or not the alert to be generated should be suppressed by a lookup method. ing.

FIG. 2 is a flowchart showing an alarm processing procedure of the alarm processing device shown in FIG. First, the important alarm judging means 6 takes in the input signals and judges whether or not there is an alarm generated in these signals. Causality determination means 4
Searches the causal relationship table (FIG. 7) stored in the causal relationship storage means 5 to detect information serving as a reason for suppression, and determines whether the information has occurred. When the information as the suppression reason has been generated, it is determined whether or not the generation order of the alarm and the suppression reason information has a predetermined relationship. If the order of occurrence is in a predetermined relationship, the occurrence alarm is suppressed based on the suppression reason information. That is, since the alarm is a secondary alarm, no display is output. If the order of occurrence does not satisfy the predetermined relationship, it is determined that the occurrence alarm is important information and is output as an alarm. If an alarm that has been suppressed and not output is to be processed again as a generated alarm in the next calculation process, the number of alarm suppression processes increases as the number of generated alarms increases, which is an obstacle to high-speed processing. Therefore, the alarm that has been suppressed once is flagged as "an alarm that has occurred in the past" so that it will not be treated as an alarm again until the suppression process is reset once. Thereby, if this flag is set in the occurrence alarm detection processing, it is not regarded as an occurrence alarm.

Further, when the suppression reason information for the occurrence alarm is not generated within a predetermined time, a message indicating that an abnormality has occurred in the corresponding device is created. For example, as a case where the interlock operation of the device works, an interlock that activates the device B by operating the device A is provided, and an alarm ANN-A indicating the operation of the device A and the device are provided. Alarm AN indicating operation of B
It is assumed that NB is set. In such a case, the device A
Since the device B operates as a result of the operation of the alarm ANN-A, the alarm ANN-B should necessarily be generated after the alarm ANN-A is generated. Therefore, the alarm ANN
-When the alarm A occurs, the alarm AN continues even after a certain period of time.
If NB does not occur, it is abnormal. Therefore, in such a case, a message indicating that the alarm ANN-B does not occur is output and displayed. This message is output to the display device 7 together with the important warning.

The determination as to whether or not information serving as a reason for suppression in FIG. 7 has occurred is determined based on the following criteria. (1) For the alarm signal, it is determined whether or not the specified alarm has occurred. (2) The device status signal and the process signal are determined based on whether or not the status of each designated signal is a predetermined value. (3) The event is determined based on whether or not the result obtained by the event determining means 3 is a designated event.

The flowchart of FIG. 2 will be described with reference to FIG. First, it is assumed that the alarm name ANN-3 is detected by the generated alarm detection process. In the causal relation table shown in FIG. 7, the alarm name ANN-1 is registered as the reason for suppressing the alarm name ANN-3. In the state where the alarm name ANN-3 is generated , the alarm name A
When NN-1 is generated, the alarm name ANN-3 is a secondary alarm generated by the generation of the alarm name ANN-1 as a cause alarm. Since unnecessary information is given to the operator, this information (alarm name ANN-3) is suppressed so as not to be output. Therefore, it is determined whether or not the cause alarm ANN-1 as the suppression reason has occurred. In this determination, if the alarm name ANN-1 has not occurred,
Next , it is monitored whether or not the alarm name ANN-1 occurs within a predetermined time. This monitoring is performed by a result generation monitoring counter. Here, suppose that the alarm ANN-1 is generated within a predetermined time.
Is generated, the alarm A is given by the alarm name ANN-1.
NN-3 does not need to output. According to the causal relation table shown in FIG. 7, the alarm ANN-1 further includes the alarm ANN-11, the device states ST-21-X, and ST-22.
X, process status PV-31-X, and event EV-41 determine whether suppression is possible. FIG. 7 shows that the alarm ANN-2 is suppressed by the occurrence of the alarm ANN-3.

Next, a method of creating the causal relation table shown in FIG. 7 will be described. FIG. 3 is an explanatory diagram of a specific creation process of the causal relation table. In FIG. 3, the knowledge of the alarm suppression reason information stored in the knowledge base 10 is represented by, for example, a frame configuration as shown in FIG. The reason why the knowledge is expressed by the frame configuration is that the description method is easy, and the addition or modification of the knowledge is easy.

The causal relationship information creating means 8 activates the suppression reason searching means 9 to acquire suppression reason information, and creates a causal relationship table shown in FIG. 7 based on this information. At this time, the search may be performed by designating the alarm name, but the alarm number is designated here because it is easier to perform the process if the predetermined alarm number is designated. The suppression reason searching means 9 searches the knowledge base 10 for alarm suppression reason information related to the alarm specified by the alarm number, and returns the result to the causal relation information creating means 8.

Next, the contents of these processes will be described. FIG. 5 is a flowchart showing the processing procedures of the causal relationship information creating unit 8 and the suppression reason searching unit 9 in association with each other. The causal relationship information creating means 8 is configured as shown in FIG.
As shown in (a), in step 1, the suppression reason searching means 9
, An alarm number to be searched is specified, and the suppression reason searching means 9 is activated in step 2. As a result, the suppression reason searching means 9
Outputs the suppression reason information in accordance with the processing shown in FIG. The causal relationship information creating means 8 fetches the suppression reason information output from the suppression reason searching means 9 in step 3. The above processing is performed for all alarm items, and a causal relation table shown in FIG. 7 is created.

Next, the processing of the suppression reason searching means 9 will be described using an example of knowledge shown in FIG. Note that FIG.
In the alarm AN001, the alarm number is “1”,
This indicates that the alarm serving as the suppression reason is AN005. The alarm AN005 indicates that the alarm number is “5”. First, when the alarm number 1 designated by the causal relationship information creating means 8 is fetched in step 1, the suppression reason searching means 9 searches all the frame names and detects the frame name AN001 having the alarm number "1". . Next, in step 2, it is detected whether or not the cause alarm, the result alarm, the upper alarm and the lower alarm which are the suppression reason information in the frame name AN001 exist. In this example, the cause alarm AN005 is detected. Here, the upper-level alarm and the lower-level alarm are alarms set in multiple stages for one process amount.
The upper level alert is the upper level alert. Cause alarm AN00
Since 5 indicates a frame name, in step 3, the classification number 5 of the cause alarm AN005 is detected and output as suppression reason information. In this example, there is only a cause alarm, but if there is another reason alarm, it is determined in step 4 and the same processing is performed. Step 3
, The state and the event of the suppression reason information are also detected, which correspond to the device state and the process state and the event shown in FIG.

As described above, all the suppression reason information for each alarm item is searched, and this is searched for by the suppression reason search means 9.
To the causal relationship information creating means 8. In particular, in step 1, all the frame names indicated by the alarm numbers are searched, so that even if a plurality of alarm suppression reason information are defined in a distributed manner for one alarm item, these alarms are not detected. It is possible to retrieve all the suppression reason information corresponding to one alarm item. Therefore, even if there is a plurality of suppression reason information for one alarm item, FIG.
As shown in (1), these can be arranged in association with alarm items. For this reason, even if the knowledge about the suppression reason information for the alarm item is added, all the alarm suppression reason information for the alarm item can be searched, including the added alarm suppression reason information.

FIG. 6 shows an example of the configuration of an alarm processing device according to another embodiment of the present invention. The difference from the embodiment of FIG. 1 is that the causal relationship information created by the causal relationship information creating unit 8 of the offline processing unit 11 is stored in the causal relationship storage unit 5 of the important alarm determination unit 6 by means 81, 82, 51 is added. In FIG. 6, the causal relationship information created by the causal relationship information creating unit 8 is
Thus, the information is stored in a portable information medium, for example, a floppy disk 81. This floppy disk 81
Takes the causal relation information stored in the floppy disk 81 by the converting means 51 and takes it to the causal relation storing means 5. Output. With this configuration, even if the offline unit 11 is installed in a physically different place from the important alarm determination unit 6, if the causal relationship information becomes new, this information is stored in the causal relationship storage unit 5 as necessary. And can be easily stored.
The portable information medium mentioned above includes floppy
In addition to a disk, a tape, a ROM / IC, an IC card, and the like can be considered.

In the above-described alarm processing device, when an alarm is generated, an alarm which can be suppressed with respect to the generated alarm is determined by a lookup method based on the causal relationship information from the causal relationship storage means, and the remaining generated alarms are determined. Since the display is performed, immediately after the alarm is generated, the secondary alarm can be suppressed and only the important alarm can be output. Furthermore, as alarm suppression reason information, by assigning an alarm, a device state, a process state, and an event as a suppression reason for each alarm item, an alarm generated as a secondary among the alarms generated according to the plant state is assigned. It can be suppressed efficiently. As a result, a truly important warning can be provided immediately after the occurrence of a warning in the event of a plant abnormality, so that the plant operator can easily grasp the plant state and perform proper plant operation.

[0026]

According to the present invention, when an abnormality occurs during plant operation, the output of secondary alarms is suppressed, and only truly important information is quickly output to the plant operator. Since it can be presented, appropriate plant operation support can be provided in the event of an abnormality.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of an alarm processing device according to a first embodiment of the present invention.

FIG. 2 is a flowchart showing an alarm processing procedure in the alarm processing device of FIG. 1;

FIG. 3 is an explanatory diagram of creating a causal relationship table.

FIG. 4 is an explanatory diagram of a knowledge expression of suppression reason information.

FIG. 5 is a flowchart illustrating a causal relation table creation processing procedure;

FIG. 6 is a configuration diagram of an alarm processing device according to a second embodiment of the present invention.

FIG. 7 is a diagram showing a configuration of a causal relation table.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Monitoring target plant, 2 ... Warning judgment means, 3 ... Event judgment means, 4 ... Causal relation judgment means, 5 ... Causal relation storage means, 6 ... Important information judgment means, 7 ... Display device, 8 ... Causal relation information creation Means, 9: suppression reason searching means, 10: knowledge base, 11: off-line processing means.

Continuation of the front page (56) References JP-A-60-144807 (JP, A) JP-A-2-59900 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) G08B 19 / 00-25/00 G01D 21/00 G05B 23/02 301

Claims (4)

(57) [Claims] 1. A large number of alarms generated in a plant.
In addition, secondary alarms are suppressed and important alarms are displayed.
This is an alarm processing method that causes the alarm to be suppressed in response to the alarm.
Whether the alarm is a suppression alarm is set as an already-suppressed / unsuppressed flag.
The reason why the alarm should be suppressed is the reason for the suppression.
The order of occurrence of the above suppression reason
In a controlled state, each alarm that is actually occurring
When alarm processing is performed as the next attention alert,
The report suppression already suppressed / unsuppressed flag is in the unsuppressed state,
And that the reason for suppressing the attention alert has actually occurred.
The order of occurrence according to the judgment condition
In the case of an introductory relationship, whether or not the corresponding attention alert has been suppressed / not suppressed
The flag is set to the suppressed state, and the important alert
While the extraction as information is suppressed,
If the order of occurrence is not in the order of occurrence,
Alarm processing that is extracted and displayed as information
Method. 2. The system according to claim 1, wherein the noticed alarm is already suppressed.
The control / unsuppressed flag is in the unsuppressed state, and
The reason for the suppression of the information alert has not actually occurred, and
The above-mentioned reason for suppression still does not occur within a predetermined time after the occurrence.
Error message is created and displayed.
Warning processing method. 3. The system according to claim 3, wherein a plurality of alarms are generated within the plant.
In addition, secondary alarms are suppressed and important alarms are displayed.
An alarm processing device that causes an alarm to be suppressed in response to the alarm.
Whether the alarm is a suppression alarm is set as an already-suppressed / unsuppressed flag.
The reason why the alarm should be suppressed is the reason for the suppression.
The order of occurrence of the above suppression reason
Management and storage means for managing and storing, and alarms that are actually occurring
When each report performs an alarm process sequentially as an alert of interest,
The already suppressed / unsuppressed flag corresponding to the notice of interest is in the unsuppressed state.
And the reason for the suppression of the attention alert response has actually occurred.
On the assumption that
In the case of the occurrence order relationship, the suppression of the notice corresponding to the notice /
After setting the unsuppressed flag to the already suppressed state,
While suppressing extraction as an alarm required,
If the order of occurrence is not in the
Processing / judgment means for extracting as an alarm;
Display means for displaying the important alarms extracted by the steps.
Alarm processing device including at least . 4. The processing / judging means according to claim 3,
Within, the already suppressed / unsuppressed flag corresponding to the alert of interest is not suppressed
Status, and the reason for suppressing the notice
Has not been generated, and has not been
If the above suppression reason does not occur,
A means for creating a message is provided, and
The message processing device according to claim 1 , wherein the message is displayed on the display means .