JPH0471201B2 - - Google Patents

Description

[Detailed description of the invention]

[Field of Application of the Invention] The present invention relates to an erroneous operation prevention device that prevents erroneous operations during the operation of plants such as thermal power plants, nuclear power plants, and large-scale chemical plants. [Prior art] Currently, in many plants such as thermal power plants, nuclear power plants, and chemical plants, it is possible to detect whether the operations performed by the operators are appropriate or should not be performed. There is no equipment to do so. Therefore, plant operators must always judge for themselves whether the manual operations they perform are appropriate for the operating conditions of the plant. If the operation performed by the operator is inappropriate, it will not be known until the operating state of the plant has changed in various ways. Therefore, if inappropriate operation is performed, it may lead to a serious accident that may impede the operation of the plant. [Object of the Invention] The present invention has been made in order to eliminate the drawbacks of the prior art described above, and an object of the present invention is to provide an erroneous operation prevention device that can prevent erroneous operations by an operator. [Summary of the Invention] The first aspect of the present invention is to store manual operations to be performed depending on the operating state of the plant in a proper operation database in correspondence with the operating state of the plant, and to record detection signals of the manual operations performed and the operation of the plant. The determination device searches the appropriate operation database based on the state detection signal, and if the manual operation performed is inappropriate, it displays a message to that effect, and disables the manual operation via the operation suppression device to prevent erroneous operation. It is designed to prevent this. Further, the second aspect of the present invention is to store manual operations that must not be performed depending on the operating state of the plant in an operation prevention database in correspondence with the operating state of the plant, and to have a determination device based on a detection signal of the operating state of the plant. The system is configured to search the operation prevention database and disable manual operations that should not be performed in the current operating state of the plant via the operation suppression device, thereby preventing erroneous operations. [Embodiment of the Invention] FIG. 1 is a block diagram of an embodiment of the erroneous operation prevention device according to the present invention. In FIG. 1, an operation detection signal 12 from a manual operation detection device 10 is inputted to a determination device 14 through a wiring 31. As shown in FIG. This manual operation detection device 10 detects whether or not a switch 30 provided on a control panel of a plant is manually operated. electromagnetic relay 3
8). When a current (operation detection signal 12) flows through the wiring 31, it is detected that the switch 30 has been operated. Reference numeral 16 denotes a plant state detection device that detects the operating state of the plant, and an operating state detection signal 18 is input to the determination device 14 . Judgment device 14
A proper operation database 20 and an operation prevention database 22 are connected to the . The proper operation database 20 and the operation prevention database 22 can be constructed using a storage device of a general computer, and have a condition section and a conclusion section. That is, the condition section of the appropriate operation database 20 stores various operating states of the plant, and the conclusion section stores appropriate operations to be performed corresponding to the operating states of the plant stored in the condition section. be. Furthermore, the condition section of the manipulation prevention database 22 stores the operating states of various plants, and the conclusion section contains information on how to prevent operations in accordance with the operating states of the plants stored in the condition section. It contains the necessary operations. A display device 24 is further connected to the determination device 14, and can display the occurrence of an erroneous operation using an erroneous operation detection signal 26. The occurrence of this erroneous operation can be indicated by an invalidation indicator lamp 32 paired with a switch 30 on the plant control panel 28, as shown in FIG. Further, when the determination device 14 detects the occurrence of an erroneous operation, it inputs an operation suppression signal 34 to an operation suppression device 36 in the manual device detection device 10, thereby making it possible to invalidate the erroneous operation. FIG. 3 shows an example of the manual operation detection device 10 including the operation suppressing device 36. As shown in FIG. The operation suppressing device 36 includes an electromagnetic relay 38 and an invalid indicator lamp 3.
It has 2. As shown in FIG. 3, a switch 3 is connected to the plant equipment via an electromagnetic relay 38.
0 is connected to the determination device 14 in parallel with the plant equipment. In addition, the electromagnetic coil 4 of the electromagnetic relay 38
0 is connected in series with the invalidation indicator lamp 32 and is excited by the operation suppression signal 34 from the determination device 14. The operation of the erroneous operation prevention device configured as described above will be explained by taking as an example a case where it is applied to erroneous operation prevention at a nuclear power plant. In a nuclear power plant, a plant operating state detection device 16 detects physical quantities of the plant such as the position of reactor water and reactor pressure, and the state of equipment such as a water supply system, and inputs the detected state signals to the determination device 14 as a state detection signal 18. Now, when the main steam isolation valve (MSIV) of the reactor was closed, the operating personnel were not able to activate the reactor isolation cooling system (RCIC) even though the turbine should have tripped.
Assume that you operate a switch to stop. This switch operation is detected by the manual operation detection device 10 and inputted as an operation detection signal 12 to the determination device 14. On the other hand, the plant operating state detection device 16
detects that the MSIV is closed and inputs it to the determination device 14 as an operating state detection signal 18. Upon receiving the operation detection signal 12 and the driving state detection signal 18, the determination device 14 determines the appropriate operation database 2.
0 and compares the contents of these databases with the detection signal to determine whether the detected manual operation is appropriate. A search of the appropriate operation database 20 based on the input signal to the determination device 14 is performed as follows.
The appropriate operation database 20 stores data in which a condition part and a conclusion part are made to correspond, for example, as shown in Table 1.

[Table] The condition section shows the operating status of the plant.
The manual operation to be performed in response to the operating state indicated in the condition part is input in the conclusion part. Therefore, when the operating state detection signal indicating that the MSIV is closed and the operation detection signal that has stopped the RCIC are input to the determination device 14 as described above, the signals corresponding to the input signals are determined according to the flowchart shown in FIG. A search is made to see if the combination exists in the proper operation database 20 shown in Table 1. That is, the determination device 14 first calls the condition part and conclusion part of item number 1 shown in Table 1, and compares them with the input signal. Then, when the condition part and conclusion part of item number 1 do not match the input signal, item number 2 is called and compared with the input signal. In this way, the determination device 14 sequentially calls the condition part and the conclusion part in the appropriate operation database 20, and if the input signal matches the condition part and the conclusion part, it terminates the search and validates the performed manual operation. It is transmitted to the plant equipment as an object. On the other hand, if the determination device 14 does not match the input signal even after searching all the items in the proper operation database 20, the determination device 14 ends the search, issues an erroneous operation occurrence detection signal 26, and displays this on the display device 24. Next, erroneous operation is prevented as follows. The operating state of the plant is always input to the determination device 14 via the plant operating state detection device 16, as described above. The determination device 14 searches the operation prevention database 22 in accordance with the input operating state of the plant to find operations that should not be performed. The manipulation prevention database 22 stores combinations of condition parts and conclusion parts, as shown in Table 2, for example.

〔Effect of the invention〕

As explained above, according to the present invention, an operation by a plant operating worker is detected early, a vast amount of plant operating conditions held in a database and combinations of operations corresponding to the operating conditions are searched, and the operation is If it is appropriate for the situation, allow the operation, or disable operations that should not be performed depending on the plant operating condition, and display a sign to that effect to prevent incorrect operations by operating personnel. It is possible to prevent this and make it possible to recognize that an erroneous operation has occurred.

[Brief explanation of the drawing]

FIG. 1 is a block diagram of an embodiment of the erroneous operation prevention device according to the present invention, FIG. 2 is a perspective view of an embodiment of the control panel of the erroneous operation prevention device according to the embodiment of the present invention, and FIG. 3 is a block diagram of an embodiment of the erroneous operation prevention device according to the present invention. FIG. 4 is a flowchart of an embodiment of a search method for a proper operation database; FIG. 5 is a flowchart of an embodiment of a search method for a manipulation prevention database. 10...Manual operation detection device, 14...Determination device, 1
6... Plant operating state detection device, 20... Proper operation database, 22... Operation prevention database, 2
4...Display device, 30...Switch, 32...Disabled display lamp, 36...Operation suppressing device, 38...Electromagnetic relay.

Claims (1)

[Scope of Claims] 1. An operation detection device that detects manual operation, a plant state detection device that detects the operating state of the plant, and a detection signal of the operation detection device and a detection signal of the plant state detection device to determine proper operation. a determination device that searches a database and determines whether the manual operation is appropriate; an operation error display device that displays an error operation by a signal output from the determination device indicating the occurrence of an error operation; and an operation suppressing device that disables the manual operation by a signal to prevent erroneous operation. 2. A plant state detection device that detects the operating state of the plant, an operation prevention database that stores operations that should be prevented according to the operating state of the plant in correspondence with the operating state of the plant, and a detection signal of the plant state detection device. erroneous operation prevention, comprising: a determination device that searches the operation prevention database to determine operations that must not be performed; and an operation suppression device that disables operation of an operation that must not be performed based on an output signal of the determination device. Device.