CN104133954A - Protection logic simulation device and dynamic verification system using protection logic simulation device - Google Patents

Abstract

The present invention provides a protection logic simulation device and a dynamic verification system using it, including: an input signal management module, a protection logic simulation module and an output signal management module, wherein the input signal management module is used to collect input signal data and send it to Protection logic simulation module; the protection logic simulation module is used to receive and read the data sent by the input signal management module, perform signal distribution, signal processing, fixed value comparison, logical coincidence, channel monitoring, post-accident monitoring and protection action calculation and simulation functions , and send the calculation result to the output signal management module; the output signal management module is used to receive the signal sent by the protection logic simulation module and output it as output signal data. The invention can simulate the function and/or performance of the high-temperature gas-cooled reactor digital protection logic device, and provides feasible technical means for dynamic verification of the high-temperature gas-cooled reactor main control room, interface debugging and verification between the protection logic device and other systems/equipment.

Description

A protection logic simulation device and a dynamic verification system using it

technical field

The invention relates to the technical field of nuclear reactors, in particular to a protection logic simulation device and a dynamic verification system using the same.

Background technique

The high-temperature gas-cooled reactor is an advanced reactor that uses coated particles without a metal cladding as fuel, graphite as a moderator, and helium as a coolant. The core outlet temperature is high. High-temperature gas-cooled reactors have the characteristics of inherent safety, wide utilization of thermal energy, high thermal efficiency, easy operation and management, great flexibility in fuel selection, and low fuel consumption. High-temperature gas-cooled reactors have good application prospects in small and medium-sized nuclear power plants, nuclear power plants in arid regions, nuclear energy coal gasification and liquefaction, and hydrogen production.

The high temperature gas-cooled reactor protection system is one of the important safety systems of the high temperature gas-cooled reactor, which is used to continuously monitor the protection variables determined according to the accident analysis (such as nuclear power, primary circuit pressure, core inlet and outlet temperature, primary circuit humidity, etc.), When the monitored protection variable or the derived calculation variable reaches or exceeds the set value, a protection trigger signal is automatically given to perform corresponding protection actions to prevent the state of the high temperature gas-cooled reactor from exceeding the specified safety limit, or within the design basis When an accident occurs, stop the expansion of the accident or mitigate the consequences caused by it.

The digitalization of the protection system of high temperature gas-cooled reactor is an irreversible trend in the era of rapid development of information technology, and it is inevitable that computer technology is applied to the protection system of high temperature reactor. The high temperature gas-cooled reactor digital protection system can obtain higher reliability, accuracy and stability than the analog protection system, and at the same time greatly improve the function of the reactor protection system.

However, the high-temperature gas-cooled reactor digital protection logic device is a huge and complex system, and there are signal interface relationships between it and the process measurement system, nuclear measurement system, emergency shutdown circuit breaker, and special safety facilities. Dynamic signal exchange with other structures or devices is required through interfaces. In the actual verification process of key technologies of HTGR, one or more HTGR digital protection systems are required to participate in verifying the correctness of the interface signals between systems. However, the digital protection system has a complex structure, takes up a large area of the plant, and is expensive; therefore, a simulation device is needed to simulate the role of the digital protection system in the actual high-temperature gas-cooled reactor during implementation. So far, there is still a lack of such a device capable of dynamically verifying and real-time debugging the correctness of the functions and interfaces of each main structure in a high-temperature gas-cooled reactor.

Contents of the invention

The invention provides a protection logic simulation device and a dynamic verification system using it to solve the technical problem in the prior art that the correctness of functions and interfaces of each main structure in a high temperature gas-cooled reactor cannot be dynamically verified and debugged in real time.

The present invention provides a protection logic simulation device, including: an input signal management module, a protection logic simulation module and an output signal management module, wherein:

The input signal management module is used to collect input signal data and send it to the protection logic simulation module;

The protection logic simulation module is used to receive and read the data sent by the input signal management module, perform signal distribution, signal processing, fixed value comparison, logic coincidence, channel monitoring, post-accident monitoring and protection action calculation and simulation functions, And send the calculation result to the output signal management module;

The output signal management module is used to receive the signal sent by the protection logic simulation module and output it as output signal data.

Further, the device also includes:

The input signal synchronization module is respectively connected with the input signal management module and the protection logic simulation module, and is used for synchronizing the input signal data between the input signal management module and the protection logic simulation module.

Further, the device also includes:

The output signal synchronization module is respectively connected with the protection logic simulation module and the output signal management module, and is used for synchronizing the output signal data between the protection logic simulation module and the output signal management module.

Further, the input signal management module is also used for:

According to the user or system configuration, select the source of the input signal data, and dynamically collect the input signal data from the input signal data source in real time, and perform signal conversion and/or communication data packet analysis on the input signal data.

Further, the output signal management module is also used for:

Carry out signal transformation and/or communication data packet encapsulation on the output signal data, and select the output mode of the output signal data for output according to the user or system configuration.

Further, the protection logic simulation module includes: one or more signal isolation units, signal processing units, logic coincidence units, post-accident monitoring units, channel monitoring units and safety drive units, wherein:

The signal isolation unit is used to distribute the input signal data, change one input signal data into one or more input signal data, and send the distributed input signal data to its corresponding signal processing unit and accident rear monitoring unit;

The signal processing unit is divided into two types: one is signal processing unit X, and the other is signal processing unit Y;

The logical coincidence unit is divided into two types: one is a logical coincidence unit X, and the other is a logical coincidence unit Y;

The signal processing unit X is used to perform range conversion, calculation of protection monitoring variables and fixed value comparison signal processing on the signal data input to the unit, and send the processing results and the accident alarm variables generated by the fixed value comparison to its corresponding Channel monitoring unit and logical coincidence unit X;

The signal processing unit Y is used to perform range conversion and protection monitoring variable calculation signal processing on the signal data input to the unit, and send the processing results to its corresponding channel monitoring unit and logical coincidence unit Y;

The logic coincidence unit X is used to process the signal data input to the unit, and performs the logic coincidence operation of the first-level two-out-of-four voting for the accident alarm variable from the signal processing unit X according to the set logic, generates a protection action trigger signal, and converts the signal The data processing result and the protection action trigger signal are sent to the corresponding channel monitoring unit, and the protection action trigger signal is sent to the safety drive unit;

The logical coincidence unit Y is used to process the signal data input to the unit, and performs the logical coincidence operation of the first-level two-out-of-four voting on the accident alarm variable from the signal processing unit Y according to the set logic, generates a protection action trigger signal, and converts the signal The data processing result and the protection action trigger signal are sent to the corresponding channel monitoring unit, and the protection action trigger signal is sent to the safety drive unit;

The post-accident monitoring unit is used to receive the input signal data, perform range conversion calculation on the input signal data, and send the calculation result to the corresponding channel monitoring unit;

The channel monitoring unit is used to receive the input signal data, the processing result of the signal processing unit, the processing result of the logical coincidence unit, the protection action trigger signal, and the calculation result of the post-accident monitoring unit, and execute the permission and/or block logic operations, classify and package the above data, and output the results to the signal isolation unit and external display device;

The safety driving unit is used to receive the input signal data and the protection action trigger signal sent by the logic coincidence unit, and perform the logic coincidence operation of the second-level two-out-of-four voting according to the set logic to generate an interlock signal and a protection action. Trigger drive signal and protection action indication signal and output.

On the other hand, the present invention also provides a dynamic verification system, including the protection logic simulation device described in any one of the above items.

Further, the system also includes: a process simulation model, a main control room, a backup shutdown point, an alarm system, a gateway, and a reactor power control system, which are respectively connected to the protection logic simulation device, wherein:

The process simulation model is used to provide post-accident and protection monitoring variables as input signal data to the protection logic simulation device, and receive protection action data in the output signal data from the protection logic simulation device;

The main control room is used to provide protection-related operation button signals as input signal data to the protection logic simulation device, and receive corresponding channel monitoring signals and protection-related indication signals in the output signal data from the protection logic simulation device;

The backup shutdown point is used to provide the protective action operation button as input signal data to the protection logic simulation device, and receive the corresponding channel monitoring signal in the output signal data from the protection logic simulation device;

The alarm system is used to receive the accident alarm signal in the output signal data from the protection logic simulation device;

The gateway is used to receive the corresponding channel monitoring signal in the output signal data from the protection logic simulation device;

The reactor power control system is used for receiving the allowable rod control input signal in the output signal data from the protection logic simulation device.

further,

The protection monitoring variables include source range nuclear power, intermediate range nuclear power, power range nuclear power, temperature at the hot end of helium in the primary circuit, temperature at the cold end of helium in the primary circuit, pressure in the primary circuit, pressure in the secondary circuit, flowmeter pressure in the primary circuit One or more of differential pressure, secondary loop flowmeter differential pressure, and primary loop humidity;

And/or, the protection-related operation button signals include an emergency shutdown button, a primary circuit isolation button, an evaporator emergency discharge button, a shutdown circuit breaker reset button, a source range nuclear power high lockout button, and an intermediate range nuclear power high lockout button , one or more of the power range and nuclear power high lock buttons;

And/or, the protection action data includes one or more of the driving signal of the shutdown circuit breaker driving device, the primary circuit isolation driving signal, the evaporator emergency discharge start driving signal, the closing of the nuclear testing high voltage signal, and the opening of the nuclear testing high voltage signal ;

And/or, the channel monitoring signal includes one or more of protection monitoring variables and their derived variables, fixed value comparison results, logical coincidence results, post-accident monitoring variables, and equipment status information.

The present invention can perform real-time dynamic signal exchange with the system/equipment with interface relationship or its simulation model, and can fully simulate the dynamic verification system of the function and/or performance of the high temperature gas-cooled reactor digital protection logic device, thereby providing a high-temperature gas-cooled reactor Dynamic verification in the main control room, interface debugging and verification between the protection logic device and other systems/equipment provide feasible technical means.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Figure 1 is a schematic structural diagram of the digital protection system for a high temperature gas-cooled reactor;

Fig. 2 is a schematic structural diagram of a protection logic simulation device in an embodiment of the present invention;

Fig. 3 is a schematic structural diagram of a protection logic simulation device in an embodiment of the present invention;

Fig. 4 is a schematic structural diagram of a protection logic simulation module in an embodiment of the present invention;

Fig. 5 is a schematic structural diagram of a dynamic verification system in an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solution and advantages of this embodiment clearer, the technical solution in this embodiment will be clearly and completely described below in conjunction with the accompanying drawings in this embodiment. Obviously, the described embodiment is the embodiment of the present invention. Some, but not all, embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The high-temperature gas-cooled reactor digital protection system usually adopts a four-channel redundancy and two-level "out of four" voting structure, and adopts local coincidence (that is, "out of four" voting for four redundant monitoring signals of the same protection variable) logic to reduce the probability of misoperation and improve its maintainability. The structure of digital protection system for HTGR is shown in Fig. 1.

In order to achieve the diversity of protection functions, firstly, the redundant protection variables of each hypothetical initiating event can be divided into two groups x and y through the signal isolation device, and two independent signal processing devices and logical coincidence devices are set up for x and y, respectively. The two groups of protection variables x and y are processed, and the logical coincidence results output independent emergency shutdown trigger signals and special trigger signals respectively. These two parts of the circuit constitute two subsystems x and y that are independent of each other. The x and y subsystems have the same hardware design but run different software. They process different protection variables, apply different signal processing algorithms, and execute independently Protection function to reduce the potential danger of common cause failure.

The high temperature gas-cooled reactor digital protection system in Figure 1 is composed of four redundant channels (or columns) A, B, C, and D, and the signal processing device of each channel and the logical coincidence device of each logical column are further divided into x and y two parts, the signal processing device of the protection system includes eight parts Ax, Ay, Bx, By, Cx, Cy, Dx, Dy, and the logical coincidence device also includes Ax, Ay, Bx, By, Cx, Cy, Dx, Dy eight parts. Each logical coincidence device receives the output results of the signal processing device of the four redundant channels of the subsystem, respectively performs "two out of four" logic operations on each protection variable, and then performs "two out of four" results for each protection variable OR" operation to generate the emergency shutdown trigger signal of the logical coincidence device or the driving signal of the special safety device.

The emergency shutdown trigger signal output by the logical coincidence device x and logical coincidence device y of each redundant column of the high temperature gas-cooled reactor digital protection system is "OR"ed to form a "column" shutdown driving signal, which will trigger two Tripping of the shutdown circuit breaker (for example, in Figure 1, the "column" logical coincidence device triggers the tripping of the shutdown circuit breakers A1 and A2, and the logical coincidence device of "column B" triggers the tripping of the shutdown circuit breakers B1 and B2, and so on) . The contacts of the eight shutdown circuit breakers are connected as shown in Figure 1 to realize the second-level "two out of four" logical coincidence operation of the digital protection system of the high temperature gas-cooled reactor.

The protection logic device in the high temperature gas-cooled reactor digital protection system consists of 18 cabinets, which are signal isolation cabinets A, B, C, and D containing signal isolation devices, protection logic cabinets Ax, Bx, Cx, Dx, protection logic cabinets Cabinets Ay, By, Cy, Dy, channel monitoring cabinets A, B, C, D, safety trigger cabinets A, B. Each protection logic cabinet x further includes a signal processing device x and a logic coincidence device x, and each protection logic cabinet y further includes a signal processing device y and a logic coincidence device y.

The above-mentioned high temperature gas-cooled reactor digital protection logic device is a huge and complex system, which is related to the process measurement system, nuclear measurement system, emergency shutdown circuit breaker, special safety facilities, distributed control (Distributed Control) in the high temperature gas-cooled reactor. System, DCS) alarm system, main control room, standby shutdown point, DCS gateway, reactor power control equipment, etc., all have signal interface relationships, and need to exchange dynamic signals with other systems/equipment through interfaces.

In order to verify the correctness of the functions and interfaces of the main structures in the high-temperature gas-cooled reactor, this embodiment first provides a protection logic simulation device, see Figure 2, including: input signal management module 201, protection logic simulation module 202 and output signal Management module 203, wherein:

The input signal management module 201 is used to collect input signal data and send it to the protection logic simulation module 202;

The protection logic simulation module 202 is used to receive and read the data sent by the input signal management module 201, perform signal distribution, fixed value comparison, logic coincidence, channel monitoring, post-accident monitoring and protection action calculation and simulation functions, and send the calculation results to to the output signal management module 203;

The output signal management module 203 is used to receive the signal sent by the protection logic simulation module 202 and output it as output signal data.

Wherein, the device of this embodiment may also include: an input signal synchronization module 301, as shown in FIG. The data synchronization of the input signal among them maintains the integrity of the data between the input signal management module 201 and the protection logic simulation module 202 .

In addition, the device may further include: an output signal synchronization module 302, which is respectively connected to the protection logic simulation module 202 and the output signal management module 203, for synchronizing the output signal data between the protection logic simulation module 202 and the output signal management module 203, Data integrity between the protection logic simulation module 202 and the output signal management module 203 is maintained.

Optionally, the input signal management module 201 may also be configured to: select an input signal data source according to user or system configuration, and dynamically collect input signal data from the input signal data source in real time, and perform signal processing on the input signal data. Transformation and/or communication packet parsing. The input signal management module 201 is responsible for managing the signal from the interface system/equipment or its simulation model (interface system/equipment includes process measurement system, nuclear measurement system, main control room, standby shutdown point) required by the protection logic simulation device, for The protection logic simulator 202 provides the necessary input signal data. The source of input signal data includes three optional ways: one is to obtain data in the form of communication data packets (such as through Ethernet, serial port, etc.); the other is to obtain data through analog and/or digital acquisition boards; the third is The data is obtained through the man-machine interface of the simulation system software.

Optionally, the output signal management module 203 can also be used for: performing signal transformation and/or communication data packet encapsulation on the output signal data, and selecting an output mode of the output signal data for output according to user or system configuration. The output signal management module 203 is responsible for managing the output signal generated by the protection logic simulation device 202 and sent to the interface system/equipment or its simulation model (the interface system/equipment includes shutdown circuit breakers, special safety facilities, DCS alarm system, main control room, standby shutdown stack point, DCS gateway, nuclear measurement system), and dynamically output the processed data to the output signal interface connected with other systems in real time. There are three optional ways to output the output signal: one is to use the communication data packet (such as through Ethernet, serial port, etc.) transmission mode; the other is to use the digital output board; way of the interface.

Optionally, the protection logic simulation module 202 may include: one or more signal isolation units, signal processing units, logic coincidence units, post-accident monitoring units, channel monitoring units and safety drive units, wherein:

The signal isolation unit is used to distribute the input signal data, change one input signal data into one or more input signal data, and send the distributed input signal data to its corresponding signal processing unit and accident rear monitoring unit;

The signal processing unit is divided into two types: one is signal processing unit X, and the other is signal processing unit Y;

The logical coincidence unit is divided into two types: one is a logical coincidence unit X, and the other is a logical coincidence unit Y;

The signal processing unit X is used to perform range conversion, calculation of protection monitoring variables and fixed value comparison signal processing on the signal data input to the unit, and send the processing results and the accident alarm variables generated by the fixed value comparison to its corresponding Channel monitoring unit and logical coincidence unit X;

The signal processing unit Y is used to perform range conversion and protection monitoring variable calculation signal processing on the signal data input to the unit, and send the processing results to its corresponding channel monitoring unit and logical coincidence unit Y;

The logic coincidence unit X is used to process the signal data input to the unit, and performs the logic coincidence operation of the first-level two-out-of-four voting for the accident alarm variable from the signal processing unit X according to the set logic, generates a protection action trigger signal, and converts the signal The data processing result and the protection action trigger signal are sent to the corresponding channel monitoring unit, and the protection action trigger signal is sent to the safety drive unit;

The logical coincidence unit Y is used to process the signal data input to the unit, and performs the logical coincidence operation of the first-level two-out-of-four voting on the accident alarm variable from the signal processing unit Y according to the set logic, generates a protection action trigger signal, and converts the signal The data processing result and the protection action trigger signal are sent to the corresponding channel monitoring unit, and the protection action trigger signal is sent to the safety drive unit;

The post-accident monitoring unit is used to receive the input signal data, perform range conversion calculation on the input signal data, and send the calculation result to the corresponding channel monitoring unit;

The channel monitoring unit is used to receive the input signal data, the processing result of the signal processing unit, the processing result of the logical coincidence unit, the protection action trigger signal, and the calculation result of the post-accident monitoring unit, and execute the permission and/or block logic operations, classify and package the above data, and output the results to the signal isolation unit and external display device;

The safety driving unit is used to receive the input signal data and the protection action trigger signal sent by the logic coincidence unit, and perform the logic coincidence operation of the second-level two-out-of-four voting according to the set logic to generate an interlock signal and a protection action. Trigger drive signal and protection action indication signal and output.

Wherein, when the protection logic simulation module 202 adopts four-channel redundancy and two-stage two-out-of-four voting to perform logical coincidence operation on the input signal data, a structure including four protection channels and two logic columns as shown in FIG. 4 can be adopted to fulfill. Specifically, it includes signal isolation units A, B, C, D; signal processing units XA, XB, XC, XD, YA, YB, YC, YD; logical coincidence units XA, XB, XC, XD, YA, YB, YC , YD; post-accident monitoring units A, B; channel monitoring units A, B, C, D and safety drive units A, B. The protection logic simulation module 202 reads input parameters from the input signal management module 201 periodically (for example, once every 20 ms), and executes protection logic such as signal distribution, fixed value comparison, logical coincidence, channel monitoring, post-accident monitoring, and protection action calculation Simulation function, and send the calculation result data to the output signal management module 203. In the algorithms that perform fixed value comparison, logic coincidence, and channel monitoring, the influence of data quality bits on logic results is considered. When the analog signal data in the input signal is within the range of 4-20mA, the data quality is "good"; when it is not within the range of 4-20mA, the data quality is "bad". When the data quality is "bad", it will directly cause the protection variable or its derived protection variable to be in the triggered state. The quality bit of the signal is transmitted along with the data flow, and directly affects the subsequent calculation or information display.

This embodiment also provides a dynamic verification system, including the protection logic simulation device described in any one of the above items.

Optionally, the dynamic verification system may also include: a process simulation model, a main control room, an alternate shutdown point, an alarm system, a gateway, and a reactor power control system, etc., which are respectively connected to the protection logic simulation device, wherein:

The process simulation model is used to provide post-accident and protection monitoring variables as input signal data to the protection logic simulation device, and receive protection action data in the output signal data from the protection logic simulation device;

The main control room is used to provide protection-related operation button signals as input signal data to the protection logic simulation device, and receive corresponding channel monitoring signals and protection-related indication signals in the output signal data from the protection logic simulation device;

The backup shutdown point is used to provide the protection action operation button as input signal data to the protection logic simulation device, and receive the corresponding channel monitoring signal in the output signal data from the protection logic simulation device;

The alarm system is used for the self-protection logic simulation device to receive the accident alarm signal in the output signal data;

The gateway is used for the self-protection logic simulation device to receive the corresponding channel monitoring signal in the output signal data;

The reactor power control system is used for the self-protection logic simulation device to receive the allowable rod control input signal in the output signal data.

Among them, the process simulation model refers to the general name of the real-time dynamic model of the main process system of the high temperature gas-cooled reactor under full working conditions. The protection logic simulation device is respectively connected with the process simulation model, the main control room, the backup shutdown point, the alarm system and the gateway, and the reactor power control There is an interface relationship in the system, and signal exchange is required.

A specific implementation manner of the dynamic verification system in this embodiment is shown in FIG. 5 . The protection logic simulation device of this embodiment uses the input signal management module to obtain post-accident and protection monitoring variables from the process measurement system model and the nuclear measurement system model in the process simulation model in real time and dynamically through the Ethernet TCP/IP protocol according to the system configuration Data, such as source range nuclear power, intermediate range nuclear power, power range nuclear power, primary loop helium hot end temperature, primary loop helium cold end temperature, primary loop pressure, secondary loop pressure, primary loop flowmeter differential pressure, secondary Differential pressure of the loop flow meter, humidity of the primary loop, etc.; through the digital quantity acquisition board, the signals related to the protection operation buttons are obtained from the main console of the main control room, such as emergency shutdown button, primary loop isolation button, evaporator emergency discharge button, stop Stack circuit breaker reset button, source range nuclear power high lock button, intermediate range nuclear power high lock button, power range nuclear power high 1 lock button, etc.; obtain protection action operations from the operation console of the standby shutdown point through the digital quantity acquisition board button, such as an emergency shutdown button; and the acquired input signal is sent to the input signal synchronization module after processing.

After the protection logic simulation module in the protection logic simulation device of this embodiment obtains the latest protection monitoring variable data from the input signal synchronization module in a synchronous manner periodically, the simulation performs signal distribution, fixed value comparison, logic coincidence, channel monitoring, and post-accident Monitoring and protection action logic operation algorithm, and the protection logic calculation result data and channel monitoring result data are sent to the output signal synchronization module in a synchronous manner.

After the output signal synchronization module in the protection logic simulation device of the present invention processes the output data, according to the system configuration, the protection action data is dynamically sent to the process measurement system model and process measurement system model in the process simulation model through the Ethernet TCP/IP protocol in real time. The nuclear measurement system model, such as the driving signal of the shutdown circuit breaker driving device, the primary circuit isolation driving signal, the evaporator accident discharge start driving signal, the nuclear measurement high voltage signal is closed, the nuclear measurement high voltage signal is turned on, etc.; Signals, accident alarm signals, and allowable rod control input signals are sent to the main control room, DCS alarm system, and reactor power control system respectively; channel monitoring signals are sent to the safety display in the main control room and the safety display at the backup shutdown point through the Ethernet protocol , the gateway between the protection logic device and the DCS, the monitoring signals mainly include the protection monitoring variables collected by each channel and their derivation variables, the comparison results of the setting values of each channel, the logical coincidence results of each channel, the monitoring variables of each channel after accidents, equipment status, etc. information.

The protection logic simulation device of this embodiment provides a debugging means for the signal exchange with all interface systems/equipment or its simulation models, and the signal source can be selected as the human-machine interface of the simulation system software through system configuration, so as to verify the correctness of the interface signals Provide convenient technical means.

This embodiment provides a digital protection logic device that can dynamically exchange signals with the system/equipment or its simulation model that has an interface relationship in real time during the dynamic verification process of the high-temperature gas-cooled reactor main control room, and can completely simulate the high-temperature gas-cooled reactor digital protection logic device A dynamic verification system of function and/or performance, so as to provide feasible technical means for the dynamic verification of the main control room of the high temperature gas-cooled reactor, the interface debugging and verification between the protection logic device and other systems/equipment. The system of this embodiment can be basically consistent with the main control room of the high temperature gas-cooled reactor of the nuclear power plant in terms of equipment layout, operation and verification effect. It is based on the 1:1 verification platform of the main control room of the high temperature gas-cooled reactor and the dynamic simulation mathematical model of the whole plant of the high temperature gas-cooled reactor. The interface between them is formed. The system of this embodiment has very important engineering value, and can effectively solve the dynamic verification of the main control room and the backup shutdown point protection action related operations and indication buttons; it can provide dynamic information for the main control room and backup shutdown point safety display devices. Safety-related parameters; it can provide alarm-related parameters for the DCS alarm device to realize the dynamic display of the alarm signal on the analog display screen in the main control room; it can provide operating conditions for verifying the coordinated control method of the whole plant; it can provide assistance for the verification of operating procedures means; can provide a platform for partial training of power plant operators or other operation-related personnel; can display the main control room and operating status of the high temperature gas-cooled reactor; can verify the man-machine interface and human factors characteristics of the main control room; can verify the coordinated control of the whole plant method and performance etc.

In addition, this embodiment properly adjusts the signal interface module according to the type of the actual input and output signals, and can also be used for the development, debugging and functional performance verification of the integrated test device of the high temperature gas-cooled reactor digital protection system; How much and the type of the signal adjust the configuration of the system appropriately, and modify the mathematical model of the protection logic according to the actual reactor type. This simulation system can also be used for the dynamic verification of the main control room of other types of reactors.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (9)

1. a protection logical simulation device, is characterized in that, comprising: input signal administration module, protection logical simulation module and output signal administration module, wherein:

Described input signal administration module is used for Gather and input signal data, and is sent to described protection logical simulation module;

Described protection logical simulation module is for receiving and read the data that described input signal administration module sends, executive signal distribution, signal processing, definite value comparison, logic meet, copying is calculated in channel monitoring, post accident monitoring and protection action, and result of calculation is sent to output signal administration module;

Described output signal administration module is for receiving the signal that described protection logical simulation module sends and exporting as output signal data.

2. protection logical simulation device according to claim 1, is characterized in that, described device also comprises:

Input signal synchronization module, is connected with described protection logical simulation module with described input signal administration module respectively, for the input signal data between described input signal administration module and described protection logical simulation module is synchronous.

3. protection logical simulation device according to claim 1, is characterized in that, described device also comprises:

Output signal synchronization module, is connected with described output signal administration module with described protection logical simulation module respectively, for the output signal data between described protection logical simulation module and described output signal administration module is synchronous.

4. protection logical simulation device according to claim 1, is characterized in that, described input signal administration module also for:

According to user or system configuration, select input signal data source, and from the described input signal data Gather and input signal data real-time dynamicly of originating, described input signal data is carried out to signal conversion and/or communication data packet is resolved.

5. protection logical simulation device according to claim 1, is characterized in that, described output signal administration module also for:

Output signal data is carried out to signal conversion and/or communication data packet encapsulation, according to user or system configuration, select the way of output of output signal data to export.

6. protection logical simulation device according to claim 1; it is characterized in that; described protection logical simulation module comprises: one or more signal isolated locations, signal processing unit, logic meet unit, post accident monitoring unit, channel monitoring unit and safe driver element, wherein:

Described signal isolated location is for distributing described input signal data, Jiang Yi road input signal data becomes one or more input signal data, and the input signal data after distributing is sent to respectively to its corresponding signal processing unit and post accident monitoring unit;

Described signal processing unit is divided into two types: a class is signal processing unit X, and another kind of is signal processing unit Y;

Described logic meets unit and is divided into two types: a class is that logic meets unit X, another kind ofly meets unit Y for logic;

Described signal processing unit X is for carrying out to inputting the signal data of this unit that range conversion, monitoring for protection variable are calculated and definite value comparison signal is processed, and by result with the accident alarming variable that relatively generates through definite value is sent to respectively its corresponding channel monitoring unit and logic meets unit X;

Described signal processing unit Y is for carrying out range conversion and monitoring for protection variable and calculate signal and process inputting the signal data of this unit, and result is sent to respectively to its corresponding channel monitoring unit and logic meets unit Y;

Described logic meets unit X for the treatment of the signal data of this unit of input, according to setting logic, the accident alarming variable from signal processing unit X is carried out to the first order four and get two voting logic match operations, generate protection action triggers signal, the result of signal data and protection action triggers signal are sent to corresponding channel monitoring unit, and protection action triggers signal is sent to safe driver element;

Described logic meets unit Y for the treatment of the signal data of this unit of input, according to setting logic, the accident alarming variable from signal processing unit Y is carried out to the first order four and get two voting logic match operations, generate protection action triggers signal, the result of signal data and protection action triggers signal are sent to corresponding channel monitoring unit, and protection action triggers signal is sent to safe driver element;

Described post accident monitoring unit is used for receiving described input signal data, and described input signal data is carried out to range conversion calculating, and result of calculation is sent to corresponding channel monitoring unit;

Described channel monitoring unit is used for receiving the result of described input signal data, described signal processing unit, described logic meets the result of unit and protects action triggers signal, and the result of calculation of described post accident monitoring unit, carry out and allow and/or latching logic computing, above-mentioned data are sorted out to encapsulation, and export result to signal isolated location and exterior display device;

Described safe driver element meets for receiving described input signal data and described logic the protection action triggers signal that unit sends; and carry out the second level four and get two voting logic match operations according to setting logic, generate interlocking signal, protection action triggers drives signal and protection action indicator signal output.

7. a dynamic authentication system, is characterized in that, comprises the protection logical simulation device as described in any one in claim 1 to 6.

8. dynamic authentication system according to claim 7; it is characterized in that; described system also comprises: process simulation model, master-control room, backup shutdown point, warning system, gateway and reactor power control system, be connected with described protection logical simulation device respectively, wherein:

Described process simulation model for to described protection logical simulation device, provide after accident and monitoring for protection variable as input signal data, and receive the protection action data in output signal data from described protection logical simulation device;

Described master-control room protects associative operation button signal as input signal data for providing to described protection logical simulation device, and receives corresponding channel monitoring signal and the relevant indicator signal of protection in output signal data from described protection logical simulation device;

Described backup shutdown point protects motion action button as input signal data for providing to described protection logical simulation device, and receives corresponding channel monitoring signal in output signal data from described protection logical simulation device;

Described warning system is for receiving the accident alarming signal of output signal data from described protection logical simulation device;

Described gateway is for receiving the corresponding channel monitoring signal of output signal data from described protection logical simulation device;

Described reactor power control system drops into signal for receive the permission rod control of output signal data from described protection logical simulation device.

9. dynamic authentication system according to claim 8, is characterized in that:

Described monitoring for protection variable comprises one or more in source range core power, middle range core power, power range core power, a loop helium hot-side temperature, a loop helium cold junction temperature, a circuit pressure, secondary circuit pressure, a loop flowmeter pressure reduction, secondary circuit flowmeter pressure reduction, a loop humidity;

And/or described protection associative operation button signal comprises one or more in emergency shut-down button, a loop isolation button, evaporator dump button, shutdown reset of breaker button, the high latch buttons of source range core power, the high latch buttons of middle range core power, the high latch buttons of power range core power;

And/or described protection action data comprises that shutdown isolating switch drive unit drives signal, a loop isolation drive signal, evaporator dump to start to drive signal, closes closed kernel and surveys high-voltage signal, opens core and survey one or more in high-voltage signal;

And/or described channel monitoring signal comprises that monitoring for protection variable and derivation variable thereof, definite value comparative result, logic meet one or more in result, post accident monitoring variable, status information of equipment.