JP4521722B2 - Plant operation control system - Google Patents

Description

  The present invention relates to a plant operation control system that operates plant equipment, and more particularly to a transmission system that is required to transmit an operation signal without error, such as an operation for a safety system facility of a nuclear power plant. Is.

  Conventionally, there is a nuclear plant safety facility control device that eliminates the need for strict management and inspection at least for the normal operation function portion by separating the portion related to the normal operation function in the nuclear plant safety facility control device from the portion related to the safety function. . In this device, in the nuclear power plant safety facility control device that shares the normal operation function and the safety function of the nuclear power plant, the normal operation function control device that controls the normal operation function and the normal operation function control device are provided independently. Safety function control device that controls safety functions, and signal priority that receives output signals from normal function control devices and safety function control devices, and prioritizes output signals of safety function control devices and outputs them as control signals to nuclear power plants The apparatus is provided (refer patent document 1).

JP-A-7-167987 (Claim 1)

  In the prior art, when there is an output (Start or Stop) from the safety function control device, the operation signal from the safety function control device is always given priority, and when there is no output from the safety function control device, the normal operation function The logic is that the output from the control device is transmitted to the plant side. Therefore, when there is no output from the safety function control device, the output from the normal operation function control device is transmitted as it is, and this can be prevented when the normal operation function control device sends an error signal. I can't. In the case of a nuclear power plant controller, since the operation signal is transmitted only when the operation is performed instead of continuously outputting the operation signal, normally there is no output from the safety function control device. In the prior art, there is a possibility that the normal operation function control device may be adversely affected. In addition, when the control circuit is configured to always output any signal from the safety function control device, the operation cannot be performed from the normal operation function control device.

  The present invention has been made to solve the above-described problems. In a computerized plant operation control system, an error signal [operation signal] is transmitted by an ordinary monitoring operation processor (central control device) ( The object is to provide a plant operation control system that does not transmit).

  The present invention has been made in order to solve the above-described conventional problems, and each of the inventions described in the scope of the claims includes the following (1) to (5) as a plant operation control system and a central control device thereof, respectively. ) Are used.

(1) A first means includes a central control device that outputs an operation signal for plant equipment, and a first memory that stores the operation signal, and the storage includes the operation signal stored in the first memory. A first transmission control device for transmitting information via a transmission line; and a second memory having a structure similar to that of the first memory for receiving the storage information and storing the storage information via the transmission line A plant operation control system comprising: a second transmission control device including: an instrument control device that receives the operation signal from the second transmission control device and controls the plant equipment;
The central controller limits the number of operation signals that can be output to the first transmission controller for each calculation cycle to one, and
The storage information stored in the first and second memories is at least a front increment counter that is updated by a storage control unit every calculation cycle of the central control unit and an operator's operation. The operation signal counter updated by the storage control unit, the operation signal output from the central control unit and stored by the storage control unit when there was an operation of the operator, and the operation of the operator were absent In this case, after the update of the front increment counter, it is updated by the storage control unit every calculation cycle of the central control unit, and when there is an operation by an operator, the front increment counter, the operation signal counter, and A rear increment counter that is updated by the storage control unit every calculation period of the central control unit after the operation signal is updated; Characterized in that it has a.

  (2) In the plant operation control system according to the second means, in the first means, the stored information stored in the first and second memories includes the operation signal counter, the operation signal, It has the total value of.

  (3) The plant operation control system according to the third means is the previous operation from the central control device as the operation signal stored in the first and second memories in the first or second means. It has the operation signal output previously.

  (4) In the plant operation control system according to the fourth means, in any one of the first to third means, the stored information stored in the first and second memories is the first The increment counter is provided at the beginning and end of the memory area in which the storage information in the second memory is stored.

(5) The fifth means is any one of the first to fourth means ,
The screen ID number corresponding to the operation event reception process is compared with the screen ID number corresponding to the screen display process, and if they match, an operation signal is generated.

  The invention according to each claim described in the claims employs the means described in the above (1) to (5), and thus has the following effects.

  (1) Since the invention described in claim 1 employs the first means, the value of the operation signal counter increases by 2 or more even though the value of the increment counter has increased only by 1. If it is, it can be detected that an erroneous signal is transmitted due to a failure of the central control device, transmission control device or transmission path. In this way, it is possible to provide a plant operation control system that does not transmit (transmit) an error signal (operation signal) even by a regular monitoring operation processor (central control device).

  (2) Since the invention described in claim 2 employs the second means, in addition to the effect of the invention described in claim 1, in the first transmission control device on the receiving side, If the values do not match, it can be detected that the central control device on the transmission side, the first transmission control device or the transmission path is abnormal and the operation signal is an incorrect signal.

  (3) Since the invention described in claim 3 employs the above-mentioned third means, in addition to the effect of the invention described in claim 1 or 2, it was output from the central controller before the previous time. The operation signal can be stored, and the instrumentation control can be performed even if the timing at which the instrumentation controller reads the operation signal in the second memory is delayed from the timing at which the central controller writes the operation signal in the first memory. The apparatus can acquire the operation signal without omission.

  (4) Since the invention according to claim 4 employs the fourth means, in addition to the effect of the invention according to any one of claims 1 to 3, the first and last increments By comparing the counters, it can be confirmed that the central control device has not finished the predetermined calculation cycle processing (operation signal output processing), and the simultaneity of the information of the operation signals can be confirmed.

  (5) The invention according to claim 5 employs the fifth means, and checks the screen number between the operation event reception process and the screen display process within the central control unit. As a result, the soundness of the internal processing of the central control unit can be self-diagnosed, and an erroneous operation signal can be prevented from being transmitted to the plant equipment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
First, the plant operation control system which concerns on the 1st Embodiment of this invention is demonstrated based on FIG.1, FIG.2, FIG.3.
FIG. 1 is a configuration diagram showing a plant operation control system according to a first embodiment of the present invention, and FIG. 2 shows a central control device and a first transmission control device according to the first embodiment of the present invention. FIG. 3 is a block configuration diagram showing a second transmission control device to the instrumentation control device in the first embodiment of the present invention.

  As shown in FIG. 1, the plant operation control system according to the first embodiment of the present invention includes a central controller 10a that outputs an operation signal for operating plant equipment, and an operation from the central controller 10a. An instrumentation control device 20 that receives signals and outputs operation signals to various plant devices, a first transmission control device 11 that connects the central control device 10a and the transmission path 30, and an instrumentation control device 20 and transmission paths. The second transmission control device 21 is connected to the second transmission control device 21. In FIG. 1, for simplification of explanation, a system in which one central control device 10a and one instrumentation control device 20 are connected to each other is shown.

  The first transmission control device 11 connected to the central control device 10a includes a first memory 41 for storing a signal to be transmitted. In the first memory 41, the first transmission control device 11 is transmitted from the central control device 10a. First memory areas 42 to 47 are allocated as storage areas for storage information including operation signals. The second transmission control device 21 connected to the instrumentation control device 20 includes a second memory 51 for storing the transmitted signal. The second memory 51 includes the first transmission control device 20. Second memory areas 52 to 57 are allocated as storage areas for storage information including operation signals transmitted from the transmission control device 11. Note that the first memory 41 in the first transmission control device 11 and the second memory 51 in the second transmission control device 21 have the same storage structure (shared memory of the network device).

  The first transmission control device 11, the second transmission control device 21, and the transmission path 30 form a cyclic transmission network device, and between the central control device 10a and the instrumentation control device 20. When transmitting and receiving signals, the information stored in the first transmission control device 11, the first memory 41 in the second transmission control device 21, and the second memory 51 is periodically and sequentially transmitted through the transmission path 30. is doing.

  Next, as illustrated in FIG. 2, the central control device 10a includes an operation unit 101 that is operated by an operator, an operation signal generation unit 102a that generates an operation signal corresponding to the operation content from the operation unit 101, The operation signal output unit 103 is configured to output the operation signal generated by the operation signal generation unit 102a to the first transmission control device 11 at every cycle in which the central control device 10a performs calculation.

  The first transmission control device 11 includes a storage control unit 111 that controls storage of operation signals, a first memory 41 that stores signals transmitted and received between the central control device 10a and the instrumentation control device 20, and a predetermined transmission. A transmission unit 112 is provided that transmits the information stored in the first memory 41 to the instrumentation control device 20 shown in FIG.

  In the first memory 41, first memory areas 42 to 47 are allocated as storage areas for storage information including operation signals from the central controller 10a. That is, in the first front (first) increment counter memory area 42, an increment counter that is updated every period in which the central control device 10a performs an operation is stored in addition to the operation signal, and the first device number memory area 43 is stored. Stores the device number of the central control device 10a, and the first operation signal counter memory area 44 stores an operation signal counter that is counted each time a new operation signal is output from the central control device 10a. One operation signal memory area 45 stores operation signals (operation signals N, N-1, and N-2), and the first total value memory area 46 includes the first operation signal counter memory area 44 and the first operation signal counter memory area 44. Are stored in the first rear (last) increment counter memory area 47 in the first front ink. Similar increment counter and placement counter memory area 42 is stored.

  As shown in FIG. 3, the second transmission control device 21 includes a receiving unit 121 that receives the memory information from the first transmission control device 11 shown in FIG. A second memory 51 for storing a signal to be transmitted and received between the first transmission control device 11 and the instrumentation control device 20.

  Second memory areas 52 to 57 are assigned to the second memory 51 as storage areas for storage information including operation signals transmitted from the first transmission control device 11. That is, in the second front increment counter memory area 52, in addition to the operation signal, an increment counter that is updated every period in which the central controller 10a performs an operation is stored. The device number of the control device 10 a is stored, and an operation signal counter that is counted each time a new operation signal is output is stored in the second operation signal counter memory area 54. Stores the operation signals (operation signals N, N-1, and N-2), and the second total value memory area 56 stores the total value of the values of the second operation signal counter memory areas 54 and 55. The second rear increment counter memory area 57 has an increment counter similar to the second front increment counter memory area 52. It is paid.

  Next, based on FIGS. 1-3, the operation | movement in the 1st Embodiment of this invention is demonstrated. When the operator operates the operation unit 101 of the central control apparatus 10a to operate the plant equipment, the operation signal generation unit 102a generates an operation signal corresponding to the operation content from the operation unit 101, and the operation signal output unit 103 Output to. The operation signal output unit 103 outputs the operation signal generated by the operation signal generation unit 102a to the first transmission control device 11 for each cycle calculated by the central control device 10a. Here, the number of operation signals that the central control apparatus 10a can output from the operation signal output unit 103 for each calculation period is limited to one.

  The storage control unit 111 of the first transmission control device 11 receives the information of the operation signal from the central control device 10a for each calculation cycle of the central control device 10a in each first memory area 42 in the first memory 41. ~ 47. That is, the storage control unit 111 sends a signal to the first transmission control device 11 from the central control device 10a for each cycle in which the central control device 10a performs an operation on the first front increment counter memory area 42. Stores an increment counter that is updated every time it is output. The first device number memory area 43 stores the device number of the central control device 10a, and the first operation signal counter memory area 44 is updated each time a new operation signal is output from the central control device 10a. The operation signal counter to be stored is stored.

  The storage control unit 111 stores the operation signal output from the operation signal output unit 103 in the first operation signal memory area 45. At this time, the number of operation signals output for each calculation cycle of the central controller 10a is limited to one. If there is a new operation signal N at that time, the operation signal N is used as the first operation signal. Store in the first memory area of the memory area 45. The first operation signal memory area 45 is provided with, for example, two buffer areas. The operation signal N-1 output last time is assigned to the second memory area from the beginning, and the operation signal of the previous operation is set to 3 from the beginning. The memory area is stored in the second memory area, and each time a new operation signal is sent, the memory area is sequentially shifted to the rear memory area.

  Further, the storage control unit 111 calculates the sum of the values of the operation signal counter in the first operation signal counter memory area 44 and the operation signal in the first operation signal memory area 45, and calculates the first total value memory area 46. In the first rear increment counter memory area 47, an increment counter having the same value as that of the first front increment counter memory area 42 is stored, and the cycle processing is finished.

  That is, the first transmission control device 11 updates the increment counter 42 every calculation cycle of the central control device 10a, and when there is an operation by the operator, the operation signal in the first operation signal counter memory area 44 is updated. The counter, the operation signal in the first operation signal memory area 45, and the total value in the first total value memory area 46 are updated, and the same increment counter is stored in the first rear increment counter memory area 47 at the end of the processing. To finish the cycle processing. Therefore, the first front increment counter memory area 42 and the first rear increment counter memory area 47 have the same value when the cycle calculation is finished, and the first front increment counter memory area 47 and the first front increment counter memory area 47 have the same value regardless of whether the operation signal is input. The unit increment counter memory area 42 and the first rear increment counter memory area 47 are updated. On the other hand, the first device number memory area 43 to the first total value memory area 46 are updated only when an operation is input.

  Information on the operation signal written in each of the first memory areas 42 to 47 of the first memory 41 is transmitted by the transmission unit 112 via the transmission path 30 to the second transmission control device 21 of the instrumentation control device 20. Are cyclically transmitted at a predetermined transmission timing. When the receiving unit 121 of the second transmission control device 21 receives the memory information from the central control device 10 a via the transmission path 30, the receiving unit 121 stores the memory information in the second memory areas 52 to 57 in the second memory 51. . Here, information corresponding to the first memory areas 42 to 47 of the first memory 41 is stored in the second memory areas 52 to 57 of the second memory 51.

  The instrumentation control device 20 reads out the second memory 51 of the second transmission control device 21 every calculation cycle of the instrumentation control device 20. Here, the instrumentation control device 20 checks the operation signal counter in the second operation signal counter memory area 54. If this is updated, the operation signal count value at the previous confirmation and the operation signal confirmed this time are confirmed. It is determined that a new operation signal has been written by the difference between the count values, and the corresponding new operation signal is read from the first operation signal memory area 45 in which the operation signal is stored. For example, in FIG. 3, when two operation signal counters in the second operation signal counter memory area 54 have been updated since the previous confirmation, the operation signal N and the operation signal N−1 from the second operation signal memory area 55 are displayed. Is read.

  As described above, according to the plant operation control system according to the first embodiment of the present invention, the central controller 10a can output only one operation signal to the first transmission controller 11 in each calculation cycle. Therefore, the value of the operation signal counter in the first operation signal counter memory area 44 is 2 even though the value of the increment counter in the first front increment counter memory area 42 has increased by only 1. If it has increased, it can be detected that an erroneous signal is transmitted due to a failure of the central control device 10a, the first transmission control device 11 or the transmission path 30.

  Further, in the first embodiment of the present invention, in the first transmission control device 11 of the central control device 10a, the value of the operation signal counter in the first operation signal counter memory area 44 and the first operation signal memory. Since the total value of the operation signals of the area 45 is calculated in advance and stored in the first total value memory area 46 for transmission, the second operation signal counter is received by the second transmission control device 21 on the receiving side. If the sum of the values in the memory area 54 and the second operation signal memory area 55 does not match the second total value memory area 56, the central controller 10a on the transmitting side, the first transmission controller 11 or It can be detected that the transmission line 30 is abnormal and the operation signal is an incorrect signal.

  In the first embodiment of the present invention, since the buffer areas are provided in the first operation signal memory area 45 and the second operation signal memory area 55, the central control device 10a outputs them before the previous time. The timing at which the instrumentation control device 20 reads the operation signal in the second memory 51 is delayed from the timing at which the central control device 10a writes the operation signal in the first memory 41. In addition, the instrumentation control device 20 can acquire the operation signal without omission.

  Furthermore, in the first embodiment of the present invention, since the increment counter is inserted at the beginning and the end of the operation signal information transmitted from the central controller 10a, the central controller 10a compares the two increment counters. It can be confirmed that the predetermined calculation cycle processing (operation signal output processing) has not been completed, and the simultaneity of the information of the operation signal can be confirmed.

Next, a plant operation control system according to a second embodiment of the present invention will be described with reference to FIGS.
FIG. 4 is a block diagram showing the configuration of the central control device of the plant operation control system in the second embodiment of the present invention, and FIG. 5 shows the internal processing of the central control device in the second embodiment of the present invention. It is a flowchart to show.
In the first embodiment of the present invention, a plant operation control system that detects a false signal by a transmission method of an operation signal between a transmission-side central control device and a reception-side instrumentation control device side and ensures reliability. As described above, in the second embodiment of the present invention, the possibility of an erroneous operation signal affecting the plant is further eliminated by increasing the reliability of the central controller on the transmission side.

  As illustrated in FIG. 4, the central control device 10b receives an operation event 101 for receiving an operation event of the plant equipment according to the operation content from the operation unit 101 and the operation unit 101 such as a touch panel or a keyboard operated by an operator. The processing unit 110, the operation signal generation unit 102b that generates an operation signal based on the operation event, the image processing unit 105 that controls the operation screen 104 monitored by the operator, and the operation generated by the operation signal generation unit 102b The operation signal output unit 103 outputs a signal to the first transmission control device 11 described in the first embodiment of the present invention.

As shown in FIG. 5, step S <b> 11 is a process for receiving an operation event, and the operation event reception processing unit 110 is operated by the plant device according to the operation content input by the operator operating the operation unit 101 such as a touch panel. The operation event of is accepted. At the same time, the operation event reception processing unit 110 reads the screen ID number (ID # 1) included in the operation event. Step S21 is a process in which the operation event reception processing unit 110 outputs the ID number (ID # 1) of the screen included in the operation event to the operation signal generation unit 102b.
Step S31 is a process of outputting the ID number (ID # 2) of the monitoring operation screen 104 currently displayed by the image processing unit 105 to the operation signal generating unit 102b.

  Further, step S41 is a process of checking the identity between ID # 1 and ID # 2 as the ID numbers in the operation signal generation unit 102b, and step S51 is a process in which ID # 1 and ID # 2 match. In this case, the operation signal is generated. Step S61 is a process of outputting an error when ID # 1 and ID # 2 do not match.

  Next, the operation of the plant operation control system according to the second embodiment of the present invention will be described. When the operator performs an operation using the monitoring operation screen 104, the plant equipment for performing the operation should be on the operation screen 104. Therefore, if the screen number being displayed is received from both the process for accepting the operation event based on the operation of the operator and the process for displaying the screen, they will be the same screen number. In step S21, the ID number of the screen included in the operation event is output as ID # 1, and in step S31, the ID number of the currently displayed screen is output from the screen control process and is output as ID # 2. In step S41, it is confirmed whether the processing inside the central control apparatus 10b is sound by comparing them. If the coincidence between ID # 1 and ID # 2 can be confirmed in step S41, the central control apparatus 10b is regarded as healthy and generates an operation signal in step S51. If ID # 1 and ID # 2 do not coincide with each other in step S41, it is considered that a part of the processing inside the central control apparatus 10b has failed, and an error is output in step S61.

  As described above, according to the plant operation control system according to the second embodiment of the present invention, the screen number is confirmed between the operation event process and the screen display process in the central controller 10b. As a result, the soundness of the internal processing of the central controller 10b can be self-diagnosed, and an erroneous operation signal can be prevented from being transmitted to the plant equipment.

It is a lineblock diagram showing the plant operation control system concerning a 1st embodiment of the present invention. It is a block block diagram which shows the central control apparatus and the 1st transmission control apparatus in the 1st Embodiment of this invention. It is a block block diagram which shows the 2nd transmission control apparatus to the instrumentation control apparatus in the 1st Embodiment of this invention. It is a block diagram which shows the structure of the central controller of the plant operation control system in the 2nd Embodiment of this invention. It is a flowchart which shows the internal process of the central control apparatus in the 2nd Embodiment of this invention.

Explanation of symbols

10a, 10b Central control device 11 First transmission control device 20 Instrumentation control device 21 Second transmission control device 30 Transmission path 41 First memory 51 Second memory 42 to 47 First memory areas 52 to 57 Second memory area 101 Operation unit 102a, 102b Operation signal generation unit 103 Operation signal output unit 104 Operation screen 105 Image processing unit 110 Operation event reception processing unit 111 Storage control unit 112 Transmission unit 121 Reception unit

Claims (5)

A central control device that outputs an operation signal for plant equipment, and a first memory that stores the operation signal, and transmits storage information including the operation signal stored in the first memory via a transmission path. A second transmission control device comprising: a first transmission control device; and a second memory that has the same structure as the first memory that receives the storage information via the transmission path and stores the storage information A plant operation control system comprising an instrumentation control device that receives the operation signal from a second transmission control device and controls the plant equipment,
The central controller limits the number of operation signals that can be output to the first transmission controller for each calculation cycle to one, and
The storage information stored in the first and second memories includes at least a front increment counter updated by a storage control unit in the first transmission control device at least every calculation cycle of the central control device. An operation signal counter that is updated by the storage control unit when there is an operator's operation every calculation cycle of the central control unit, and an operator's operation at every calculation cycle of the central control unit The operation signal output from the central control unit and stored by the storage control unit, and the storage for each calculation cycle of the central control unit after updating of the front increment counter when there is no operation by an operator When updated by the control unit and operated by an operator, the front increment counter, the operation signal counter and the operation signal are updated after the operation signal is updated. Plant operation control system comprising: the rear increment counter which is updated by the storage control unit in each calculation cycle of the central control device.   The plant operation control system according to claim 1, wherein the storage information stored in the first and second memories has a total value of the operation signal counter and the operation signal.   The plant operation according to claim 1 or 2, wherein the operation signal stored in the first and second memories includes an operation signal output before the previous time from the central control unit. Control system.   The storage information stored in the first and second memories has the increment counter at the beginning and end of the memory area in which the storage information in the first and second memories is stored. The plant operation control system according to any one of claims 1 to 3, wherein the plant operation control system is characterized. It said central control unit includes an operation event reception processing ID number of the screen corresponding to claim compares the ID number of the screen corresponding to the screen display processing, and generates an operation signal if they match 1 plant operation control system according to any one of claims 4.

Images