JP3573891B2 - Power system protection control system - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a protection control device for inputting an amount of electricity of a power system and converting it into digital data to perform protection control and control calculation of the power system, and in particular, a power system in which software executed on the device is changed. Related to protection control system.
[0002]
[Prior art]
The digital protection and control device realizes the characteristics of the device by inputting power system electric quantity and converting it from an analog quantity to a digital quantity, such as an input circuit, a microprocessor and other hardware such as a digital circuit, and a microprocessor. It is a device composed of software.
[0003]
FIG. 13 shows the basic configuration of the digital protection and control device. In FIG. 13, 1 indicates a power system, and 2 indicates a digital protection and control device. Each part of the digital protection control device is connected to a system bus 21. Various programs for causing the protection control device to function are stored in the ROM 22, which is a program storage unit.
[0004]
Various data are stored in the RAM 23. The program module extracted from the ROM 22 is executed by the CPU 25 as an arithmetic processing unit based on the amount of electricity input from the power system 1 via the input circuit 24, and the execution result is output from the external output circuit 26 to the power system. I do.
[0005]
The role of software incorporated in digital protection and control devices has been increasing year by year due to the sophistication and diversification of systems. Accompanying this, the number of software changes, as well as the total amount of software, is increasing. When the software of the digital protection controller is changed, the ROM of the program storage unit is replaced by the following procedure.
[0006]
First, when the creation of the new software is completed, the new software is written in the ROM incorporated in the device. Next, the operation of the power system in which the corresponding device is installed and the device is temporarily stopped.
[0007]
In this state, the ROM in which the new software is written is set in the device in exchange for the ROM in which the old software is written, and the device is operated. Further, after testing and confirming that the device operates without any abnormality, the device incorporating new software is actually operated by utilizing the power system.
[0008]
In this method, the new software must be converted to a form stored in ROM, the power system must be shut down to make the software change, the software change takes a lot of time, and the remote There is a problem that it is necessary to go to the office, and it is not easy to manage the history (management of software revision and version update) in the ROM incorporated in each device.
[0009]
[Problems to be solved by the invention]
Recently, a digital protection and control system has been proposed in which a digital protection and control device and a software storage device for storing software operating on the device are connected via a network, and the software of the digital protection and control device is changed via the network. Have been.
[0010]
FIG. 14 shows the basic configuration of the system. In the figure, reference numeral 7 denotes a program storage device for storing produced program modules, 2a and 2b denote digital protection control devices, respectively, which are connected by a communication network 8.
[0011]
The program module 71 stored in the program storage device 7 is transmitted by the transmission means 72 to the digital protection controller via the communication network 8. In the digital protection and control device, the program module received by the receiving means 21a is executed by the executing means 22a and externally output to the power system 1.
[0012]
In such a digital protection and control system, a plurality of remote digital protection and control devices can be stored simply by storing the produced software in a software storage device without stopping the operation of the power system and the digital protection and control devices. Software change was made possible.
[0013]
In this case, it is important to ensure safety and reliability when software is changed. That is, in the above system, the software of the digital protection control device for performing the protection control of the power system equipment is changed from a distant place in an unmanned state. Software needs to be changed.
[0014]
The present invention has been made to solve the above-described problems, and has as its object to provide a digital protection and control system in which software can be easily changed. In addition, the history management of software incorporated in each device is facilitated in order to flexibly respond to a change or addition of software accompanying a change in device specifications.
[0015]
[Means for Solving the Problems]
In order to achieve the above object, a power system protection control system according to claim 1 comprises a plurality of protection control devices for inputting a state quantity of a power system, converting the state data into digital data, and performing protection control of the power system, In a power system protection control system including a control device and a program storage device that is connected via a communication network and stores a program module operable on the control device, the program storage device requires a protection control device. based on the program specification, via the network, a program module sending means for sending the appropriate program for the specified protective control apparatus, with the protective control apparatus, a receiving means for receiving the program module, the program trial of a program module transmitted from the storage apparatus for providing a predetermined test input An input application unit, a test execution result determination unit that determines that an execution result of the program module by the test input is a predetermined result, and a test execution result determination unit that determines whether the execution result is good. A program module return means for returning the old program module being executed or, if not good, the new program module transmitted thereto to the program storage device or discarding the program result and returning the execution result; A program module executing means for switching to the received program module and executing the program module .
[0016]
The power system protection control system according to claim 1, further comprising: a test input applying unit that applies a predetermined test input to the program module transmitted from the program storage device, thereby enabling a test execution of the program module. By providing a return means for returning an execution result of the program module by the input to the program storage device, the validity of the program module transmitted by the program storage device is known.
[0027]
BEST MODE FOR CARRYING OUT THE INVENTION
An embodiment of a digital protection and control system according to the present invention will be described below with reference to FIGS. FIG. 1 is a configuration diagram showing a first embodiment of a digital protection and control system. In FIG. 1, the same reference numerals are given to the same functional portions as in FIG. 14, and description thereof will be omitted. The feature of this embodiment is that the control device 27 is added to the digital protection and control device 2a to constitute the device 20. The control means 27 comprises a knot circuit 271 and an AND circuit 272, and inputs the signal 11 during software change and the external output signal 12 of the execution result of the program module from the digital protection controller 2a.
[0028]
In FIG. 1, a program module transmitted from a program storage device 7 is received and executed by a digital protection and control device 20 via a communication network 8. The communication network used in the present system has a form described in, for example, "Development of 1529 Digital Relay Remote Operation Monitoring System" in the 1996 IEEJ National Convention.
[0029]
The external output 13 of the digital protection controller is the result of software execution. In such a system, the digital protection controller automatically and automatically changes the software (receives the program module) unattended. It is necessary to lock the external output so that unnecessary signals are not output during reception of the program module.
[0030]
For this reason, the control means 27 is added in the present embodiment. In the digital protection control device, the external output signal is, for example, a circuit breaker control signal for giving a tripping or closing command to the circuit breaker. During reception of the program module, the entire execution process of the program becomes unstable, and there is a possibility that an unnecessary external output signal is externally output because the CPU may interpret an erroneous code.
[0031]
Therefore, as described above, the control means 27 is provided to prevent unnecessary output from being transmitted during reception of the program module. The operation will be described with reference to the time chart of FIG. In FIG. 2, the horizontal axis represents the passage of time. In normal times (T = 0 to t ₁ ), the external output signal and the software-in-change signal are logic 0, so that the external output of the device is logic 0. T = t _{1 to} t ₂ is the case where the external output signal becomes logic 1 as a result of the software operation.
[0032]
At this time, since the software is not being changed, the software changing signal 11 is at logic 0 and the output of the knot circuit 271 is at logic 1. Therefore, the output of the AND circuit 272 is at logic 1, and the device 20 outputs it externally.
[0033]
T = t _{3 to} t ₄ indicates a case where the software is being changed, and the output of the knot circuit 271 becomes logic 0 because the software changing signal becomes logic 1 even if the external output signal becomes logic 1 The output of 272 goes to logic zero, and the external output of the device is locked.
[0034]
FIG. 3 shows a specific configuration of a digital protection and control device for realizing such a digital protection and control system. In FIG. 3, what is newly added is a communication interface 28. Then, a program module operable on the digital protection control device such as a relay operation module and a monitoring module is transmitted from the program storage device 7.
[0035]
These program modules are received by the communication interface 28 via the communication network 8, sent to the RAM 23 from the system bus, and executed. Conventionally, all programs are stored in the ROM. However, according to the present embodiment, a program module to be changed and added is moved on the RAM 23. In this case, unnecessary output may occur, but this is prevented, and the program can be changed in a safe state.
[0036]
FIG. 4 is a block diagram showing a second embodiment of the digital protection and control device. 4, the same parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof will be omitted. In the present embodiment, two program storage areas 293 and 294 are provided, and the area switching means 29 switches between the receiving means 21a and the executing means 22a. That is, one of the program storage areas is selected and designated to the execution means by 229, and the execution means issues an execution instruction 296 to the designated program storage area.
[0037]
The program storage area to which the execution command has been issued is being executed, and the external output 13 is performed. Also, the area switching means issues a storage area designation command 291 to the receiving means 21a to the area to which no execution command has been issued (not being executed). The new program module transmitted via the communication network 8 is received by the receiving means 21a, and performs a program storing process by 297 in the area designated by the area switching means 29.
[0038]
When the reception is completed and the new program module is stored in the designated program storage area, the receiving means 21a issues a reception completion signal 295 to the area switching means. Upon receiving the reception completion signal, the area switching means issues an execution command to the area where the new program module is stored, and determines that the area is being executed.
[0039]
The operation of the present embodiment will be described with reference to the time chart of FIG. In the figure, the horizontal axis represents the passage of time. Reference numeral 30 denotes a program storage area for actually executing and outputting to the outside, and reference numeral 31 denotes a program storage area for receiving a new program module transmitted from the program storage device.
[0040]
T = 0 to T = the time of t _2, from the area switching means 29, the program area storing area 1 as the area for executing the program module, and the program storage area 2 husband as an area for receiving and storing program modules s Since it is designated, the program module in the program storage area 1 is executed and output to the outside.
[0041]
When the new program module is received when T = t ₁ , the new program module is stored in the designated program storage area 2.
[0042]
When the reception of a new program module to T = t ₂ is completed, the reception completion 295 to the area switching means 29 is informed, the area switching means in the program storage area 2 specified execution transferred to receive specification in the program storage area 1, the new The program storage area 2 in which the program modules are stored is executed and externally output.
[0043]
As a result, a new program module can be received during execution of a running program module, and the program can be transferred to the execution of a new program module after the software change is completed. I can do it. That is, even while the software is being changed, it is not necessary to lock the external output as shown in FIG. 1 , and the software can be safely changed.
[0044]
FIG. 6 is a configuration diagram showing the third embodiment. 6, the same parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof will be omitted. In FIG. 6, reference numeral 32 denotes a test input application unit, 33 denotes a test execution unit, 34 denotes a test execution result determination unit, and 35 denotes a program module return unit.
[0045]
The operation of each component will be described. The test input application unit 32 can execute a test by the test execution unit 33 by applying a predetermined test input to the received program module. The test execution result determining means 34 determines whether there is an expected test execution output for a predetermined test input. The program module returning means 35 returns the old program module to the program storage device when the judgment result of the test execution result judging means is good, and returns the received new program module as described above when the judgment result is not good. I do.
[0046]
The operation of the present embodiment will be described with reference to the flowchart of FIG. First, a new program module is received in S34. When the reception is completed, a predetermined test input is applied in S35, and when the output result of the test execution is determined to be good in S36, the original old program module is returned in S37, and the execution is switched to the new program module execution in S38.
[0047]
If the test execution result is determined to be defective in S36, the received new program module is returned to the program storage device in S39, and the process returns to the original program module execution process in S40.
[0048]
Taking the case where the operation module is updated as an example, the electric quantity data and the settling data that are expected to operate are input to the new program module that has received the data, and the output is a predetermined result. Validity can be confirmed.
[0049]
As described above, even when an erroneous program module is sent from the communication network, a function of checking the erroneous program module is provided, so that a safe digital protection and control system can be provided. In the above description, the same effect can be obtained by discarding the program module without returning it and returning the execution result.
[0050]
FIG. 8 is a configuration diagram showing the fourth embodiment. 8, the same parts as those in FIG. 1 are denoted by the same reference numerals, and description thereof will be omitted. In FIG. 8, an execution unit 41a for executing a program module and a test execution unit 42 for executing a test on the program module 41b are executed in parallel.
[0051]
For example, as shown in FIG. 9, this can be realized by providing a parallel execution unit 43 and performing switching processing between the execution unit and the test execution unit by the parallel execution unit. This embodiment will be described with reference to a time chart example in FIG. The abscissa indicated by 44 represents the passage of time, and the normal execution is performed every 45 constant periods P. In addition, one processing time of the normal execution requires 46 times Q.
[0052]
The execution period of the program module currently being executed is set at 49 and the test execution period of the new program module whose reception has been completed at the time of 47 and 48 is switched. The new program module is executed.
[0053]
As a result, the test execution of the new program module can be performed using the idle time of the processing during the execution of the software, and the operation of the new program module can be safely executed at the time of 50 without any interruption of the operation of the apparatus. Can be transferred.
[0054]
FIG. 11 is a configuration diagram showing an embodiment of the fifth digital protection and control system. In FIG. 11, the same parts as those in FIG. The program module 71 stored in the program storage device is selected by the history management means 52 for each digital type protection control device as required, and transmitted by the transmission means.
[0055]
In the digital protection controller, the program module transmitted via the communication network is received and executed, and the execution result is returned. In the program storage device 9, the history management means 52 uses the data returned from each digital protection and control device connected to the communication network to store the program module history (device type, date of change) of each digital protection and control device. , Program module type, version, revision, etc.) are stored as history management data 53 and can be referred to from a display device 54 connected to the program storage device.
[0056]
This embodiment will be described with reference to a flowchart example of the program storage device of FIG. First, if necessary, a new program module is transmitted to the digital protection and control device in S55. Next, in step S56, the execution result is returned from the digital protection controller.
[0057]
At this time, if the old program module is sent in S57, it can be determined that the change of the software of the digital protection controller has been completed, so the history management data is updated and stored in S58. For this reason, it is possible to automatically change software of each digital protection control device and automatically save history management data.
[0058]
Note that the present invention is not limited to the power system, and a plurality of distributed control devices that take in a state quantity from a device to be controlled and control the device are connected to the distributed control device via a communication network. A distributed control system including a display / operation device (or a program storage device that stores a program module that can be operated on each distributed control device) that performs a display operation for operation monitoring of the operation and status of each distributed control device is also provided. It is feasible. In this case, in the above embodiment, the protection control device may be replaced with the distributed control.
[0059]
【The invention's effect】
As described above, according to the present invention, even if software is changed from a distant place in an unattended state, it can be safely performed without erroneous output to the power system. According to the first embodiment , since the external output is locked during the software change, the digital protection controller does not malfunction even if the power system is changed without stopping. Therefore, the software can be changed safely even during the operation of the power system. Further, according to the second embodiment of the present invention, since already performed the software changes while keeping executing software proven was running during power system operation can be safely and quickly to the software change It becomes. The third of the present invention, according to the fourth embodiment, the updated software from by running the test, it is possible to move the actual operation, the software of the digital protective control apparatus in a distant unattended Make changes safely and reliably. Further, according to the fifth embodiment of the present invention, since the management software history embedded in Dejijitaru protective control apparatus scattered throughout over the network, it is labor saving maintenance. Further, according to the sixth embodiment , the present invention can be applied not only to a protection control device but also to a distributed control device. As described above, the present invention can provide a system with improved economy and reliability.
[Brief description of the drawings]
FIG. 1 is a configuration diagram of a digital protection control system according to a first embodiment of the present invention.
FIG. 2 is a time chart for explaining the operation of FIG . 1;
FIG. 3 is a specific configuration diagram of a digital protection and control device realizing FIG . 1;
FIG. 4 is a configuration diagram of a digital protection control system according to a second embodiment of the present invention.
FIG. 5 is a time chart for explaining the operation of FIG . 4 ;
FIG. 6 is a configuration diagram of a digital protection control system according to a third embodiment of the present invention.
FIG. 7 is a flowchart showing processing contents of the embodiment of FIG . 6 ;
FIG. 8 is a configuration diagram of a digital protection and control system according to a fourth embodiment of the present invention.
FIG. 9 shows an example of the parallel execution means of FIG . 8 ;
FIG. 10 is a time chart of execution of a program module according to the embodiment of FIG . 8 ;
FIG. 11 is a configuration diagram of a digital protection and control system according to another embodiment of the present invention.
FIG. 12 is a flowchart showing processing contents of the program storage device according to the embodiment of FIG. 11;
FIG. 13 is a basic configuration diagram of a conventional digital protection and control device.
FIG. 14 is a basic configuration diagram of a digital type protection control system that has been recently proposed.

Claims (1)

A plurality of protection control devices for inputting a state quantity of a power system and converting the data into digital data to perform protection control of the power system, and a program module connected to the protection control device via a communication network and operable on the same device In a power system protection control system comprising a program storage device for storing the protection control device, the program storage device, based on the program specifications required by the protection control device, via the network, to the specified protection control device Program module transmitting means for transmitting a corresponding program, receiving means for receiving the program module in the protection control device, and test input applying means for applying a predetermined test input to the program module transmitted from the program storage device. Execution of the program module by the test input Test execution result determining means for determining that the result is a predetermined result, and transmitting the old program module which has been executed so far if the determination result of the test execution result determining means is good, or transmitting the old program module if it is not good A program module return means for returning the execution result by returning or discarding the new program module to the program storage device, and executing the program module for switching to the received program module and executing when the judgment result is good electric power system protective control system comprising the means.

Images