JPS6093521A - Plant operation control board - Google Patents

Abstract

PURPOSE:To secure the safety of a plant even when erroneous operation is performed by comparing an operation switch signal with an operationswitch specifying signal and rejecting improper operation. CONSTITUTION:A plant signal from a plant is fetched in a plant operation guidance device 2 through a process input/output device 7 and the device 2 generates a proper operation operation guidance signal. A comparative collating device compares the operation switch output signal Qi sent from an operation switch board 1 through a process input/output device device 8 with the operation switch specifying signal Gi. When they coincide with each other, the operation switch output signal Ri from a switch board 1 is supplied to the plant 6 as an operation signal Ti with the coincidence signal S3i through a passing gate 9 and the device 7. When they do not coincide with each other, the signal S3i is not obtained and the plant 6 is never put in wrong operation.

Description

[Detailed Description of the Invention] [Field of Application of the Invention] The present invention relates to an operation control panel for monitoring and controlling a plant. Plant operation that is not controlled! It concerns the control panel.

[Background of the invention]

In general, in the operation of a plant, training for operators is important in order to prevent the operation of the plant from falling into a dangerous state due to operational errors or the like by the operators. By strengthening training, the plant is prevented from being operated incorrectly. on the other hand,
In response to this method, consideration is being given to reconsidering the operation control panel from the perspective of an interface between humans and machines, and reducing the possibility of misidentification by operators. In such a method, for example, the operating status of the plant is displayed on a color CRT screen to enhance the identification ability of the operating operator.

At this time, if a large amount of various information is displayed to support the driver's judgment, erroneous driving operations due to mistakes or the like can be reduced as much as possible.

However, since all of the above-mentioned methods only reduce the number of erroneous driving operations, it is clear that they cannot deal with the erroneous driving operation once it has occurred. Therefore, in order to ensure the safety of the plant even if some kind of erroneous operation is performed, it is necessary to check in advance whether the operation by the operator is appropriate.

[Purpose of the invention]

Therefore, it is an object of the present invention to ensure the safety of a plant even if an erroneous operation is performed, and to provide a plant that can be operated even if an inappropriate operation is performed. Provides an operation control panel.

[Summary of the invention]

For this purpose, in the present invention, when any driving operation is performed, it is checked whether the operation is appropriate or not, and if it is judged to be inappropriate, the operation is rejected. It is something. I still can't drive! Even if the vehicle is M, if some specific operation is performed, the driving operation is permitted.

[Embodiments of the invention]

Hereinafter, the invention will be explained with reference to FIGS. 1 to 6.

First, the operation switch in the plant operation control panel according to the present invention will be explained. Figure 1 conceptually shows an operation switch board in which operation switches are arranged in a predetermined manner. According to this, the operation switches A to P on the opening operation switch panel 1 from starting to stopping the plant are operated as necessary. Here, in a certain driving situation, at a time when operation switches C, G, J, and 0 are present,
Alternatively, it is necessary to operate the operation switch appropriately when a certain condition is met.Also, if the operation switch has a function to stop the plant instantly, in order to continue the operation of the plant, the operation switch CG, J , 0 must be operated, but erroneous operation of the operation switch K during this operation should be absolutely avoided in order to maintain the safety and operability of the plant. On the other hand, the operation switch needs to be operated if the entire system is in an emergency situation. However, operation switches C, G, and J
, 0 while checking the driving status and operation guidance displayed on a CRT or the like, there is a possibility that the operation switch K may be operated by mistake while operating them. In order to avoid such erroneous operations, for example, even if operation switches other than operation switches C, G, J, and 0 are operated under certain conditions or at certain times, the control information resulting from that operation will be lost to the plant. It is necessary to prevent it from being input.

In other words, if each operation switch is valid only when operated under certain predetermined conditions, erroneous operation of the operation switch will not affect the safety of the platform in any way. So it becomes.

However, if the operation of the operation switch is effective only under certain conditions, problems may occur depending on the situation. For example, a control switch is operated in an emergency, but if the operation is not effective under certain circumstances, it is not desirable for maintaining the health of the entire system. In such a case, for example, if the operation switch K is operated multiple times in succession, the operation is valid.If a certain operation is performed, the operation is valid even under conditions other than the operation permissible conditions. It would be convenient to treat it as if it were something. When handling in this way, if you want to give priority to the operation switch depending on the urgency or priority operability, for example, if the operation switch is operated twice, and the other operation switch is operated three times or more, It is considered that the operation should be treated as valid. In this way, by treating the operation of the operation switch as valid even under conditions other than the operation permissible conditions, operation can be immediately adapted to emergency situations or sudden changes in the situation.

By the way, in an actual system, a plant operation control panel having the above-mentioned functions can be configured by associating the operation guidance No. 1d with the operation switches, and the correspondence between the predetermined plant operation procedures and the operation switches. If the operation switch is not one that needs to be operated at a certain time or under certain driving conditions, even if it is operated, the operation will be judged as an erroneous operation and should be treated as invalid. It is. If an erroneous operation is determined, measures such as lighting the lamp of the operation switch that should be operated, etc.
It is also easy to instruct the operator to perform the correct operation.

FIG. 2 conceptually shows the structure of a plant operation control panel with such functions. According to this, in the plant operation guidance device or operation sequence device 2, the operation switch or operation switch group to be operated at that time is specified based on various plant signals 4 from the plant and the time period. .

This operation switch designation signal is given to the ratio S++@combination device 3 and further to the operation switch panel 1, and in the operation switch panel 1, the operation switch to be operated is designated by selectively lighting the lamp of the operation switch. It is now possible to do so. On the other hand, the output signal of the operating switch operated on the operating switch panel 1 is compared with the operating switch designation signal by the comparison/verification device 3. When an operating switch that is to be operated with or without instructions is operated, an output signal from the operating switch is given to the plant as a control signal 5. Furthermore, if a switch other than the one that should be operated is operated, this fact will be known by the comparison/verification device 3, and its output signal will, in principle, be given to the plant as the control signal 5. That's why I leave it to you.

Now, the present invention will be specifically explained using an example of a driving guidance system in the event of an accident. FIG. 3 shows a block configuration of an example of a plant operation control panel according to the present invention together with a plant. In this figure, a plant signal P+ from a plant 6 is input to a plant operation guidance device 2 via a process input/output device 7. Based on the plant signal P+, the plant operation guidance device 2 determines the current state of the plant using, for example, a pre-stored OCT (cause-effect tree diagram) that describes the behavior of the plant in binary terms at the time of an accident.
After determining which position on T, appropriate driving guidance is generated. Further, the comparison and verification device 3 receives the operation switch output signal Q+ from the operation switch panel 1 via the process input/output device 8 and the operation switch designation signal GI from the plant operation guidance device 2.
By comparing the operation switch output signal Q,
It is determined whether or not the driving operation guidance is passed. If there is a match as a result of comparison,
The operation switch output signal R+ from the operation switch panel 1 with the coincidence signal S31 is given to the plant 6 as an operation signal (control signal) Ts via the operation passage gate 9 and the process input/output device 7. Further, if there is a mismatch, the coincidence signal 3H+ will not be obtained, and therefore the plant 6 will not be operated or controlled by erroneous operation of the operating switch.

In principle, the plant 6 will not be operated or controlled in this way if the operation switch is operated incorrectly, but
For example, when the operation switch is erroneously operated a predetermined number of times, the operation switch panel 1 outputs an operation prohibition release signal Bl in response to the erroneously operated operation switch. Since this operation prohibition release signal BI acts on the operation passage gate 9 in the same way as the coincidence signal 3H, the plant 6 is operated or controlled by the operation switch that is intentionally operated erroneously. Note that the CRTIO is only used as a display device.
Messages mI and m2 from the plant operation guidance device 2 and the comparison and verification device 3 are displayed. Further, the voice output device 11 selectively reads operation operation messages from the voice memory 12 based on the voice selection signal sI from the plant operation guidance device 2, and the messages are output as voices from the speaker 13 in large numbers. There is. Similarly, depending on the audio selection signal s2 from the comparison and verification device 3, the message resulting from the comparison and verification is outputted as audio from the speaker 13 more often.

The operation of the plant operation control panel constructed as described above will be explained as follows.

That is, if some kind of abnormality occurs in the plant, the plant signal PL will also indicate some kind of abnormality, but based on the plant signal P+, the plant operation guidance device 2 learns of the abnormal event and can prevent the expansion of the abnormality. A driving operation message m1 to prevent this is displayed on the CRTIO screen. At the same time, an operation message is notified to the operating operator in the form of voice from the gas speaker 13 using the voice selection signal s1. Therefore, the operator can first grasp the operation details audibly and then reconfirm the operation details visually. After confirming the operation details, the operating operator operates the operation switch according to the operation message, and the operation switch output signal R+ is sent to the comparison and verification device 3 via the process input/output device 8, and is output as the operation switch designation signal G from the plant operation guidance device 2. This is where it will be compared and verified with 凰. If it is determined that the operation switch to be operated has been operated correctly in this comparison and verification, the comparison and verification device 3 sends a coincidence signal S3+ and sends the operated operation switch output signal ratio i to the plant 6 via the operation passage gate 9. That's why we give. However, if it is determined that this is not the case, the coincidence signal S3I will not be obtained, and therefore the erroneously operated operation switch output signal will not be given to the plant 6. If the operation switch is operated incorrectly, the comparison and verification device 3 will notify you through the speaker 13 and display it on the CRTIO screen, so the operator will have to operate the operation switch again. It is.

By the way, it is also possible for the driver to perform a driving operation different from the operation message based on his or her judgment. For example, if an operation switch is erroneously operated a predetermined number of times, an operation prohibition release signal Bi is sent from the operation switch panel 1 corresponding to the operation switch.
is output, and even if the coincidence signal S3I does not exist, the operation switch output signal R+ is given to the plant 6 via the operation passage gate 9.

Next, the main parts in FIG. 3 will be explained.

FIG. 4 shows the configuration of the plant operation guidance device. According to this, the plant operation guidance device 2
consists of a plant behavior memory 41 and an operation guidance processing device 42. Among these, the plant behavior memory 41 represents behavior changes of various plant state quantities at the time of plant abnormality in binary logic of normal and abnormal, and is a CCT (CCT) for predicting the spread of an accident from the causal relationship of changes in each process state quantity. C
cause-effect relationship tree). The plant behavior memory 41 also stores operation items for preventing plant state variables from becoming abnormal, in a form attached to the CCT, as well as operation messages corresponding to abnormalities in plant state variables. It has become.

Still, the operation guidance processing device 42 configured as a process computer or the like periodically monitors where on the CCT the current plant state is located based on the plant signal P+. If any of the plant signals PL is determined to be abnormal by comparison with the corresponding threshold value P It in such a monitoring state, the corresponding position on the CCT is automatically determined, and the OCT is used to determine the corresponding position on the CCT. After predicting the spread of the current abnormality, the operation message m1 to avoid this is selected by referring to the table. At this time, the voice selection signal Sl corresponding to the operation message rn1 is also selected, but if the operation message is selected, this is the operation message. The operation switch designation signal GI as a signal is also determined automatically. FIG. 5 shows the process 70- in the operation guidance processing device, but no particular explanation is required regarding this.

The plant operation guidance device has been described above, but the comparison and verification device will now be explained. Its operation logic is shown in the table below.

table However, this logic will be explained in detail below.

First, the operation switch is operated correctly while the operation switch designation signal G1 is requesting operation (ON state).
When the operation switch output signal QI is in the ON state, the comparison and verification device 3 outputs a corresponding audio selection signal S2 so that the speaker 13 outputs audio to the effect that 6 operations are OK, and also sends a message to the CRTIO. As m2”
In order to display that the operation is OK', a corresponding message is output. The indication that "operation is OK" can be displayed in various forms, such as by changing the color of an operation message already displayed on the CRTIO screen. In addition, in this case, the operation switch output signal R+ is the operation signal T
Since it must be output as I to the plant 6, the coincidence signal 83+ is naturally placed in the operation permission signal state. Next, a case where the operation switch designation signal GI is in the operation request state but the operation switch is not operated will be described. In this case, the voice selection signal S2 is in a signal state in which the voice operation message is periodically repeated.
Also, a signal state is set to request that the driver perform an operation on the operation message displayed on the 1dcRTio screen as message in2. A request to perform an operation can be expressed, for example, by displaying a displayed operation message in a flicker state. Further, the coincidence signal S31 in this case may be placed in an operation-inhibited signal state, but since the operation switch has not yet been operated, it may be placed in any signal state.

Further, if an operation is performed even though the operation switch designation signal GI does not request an operation, a message indicating that the operation has been erroneous will be displayed. The voice selection signal S2 is in a signal state requesting that a message to the effect of an erroneous operation be outputted as voice, and the message m2 is that the operation does not match the operation message displayed on the CRTIO screen. This results in a signal state in which an erroneous operation message should be displayed.

Since it is an erroneous operation, the coincidence signal 8g+ naturally results in the operation being prohibited.

Finally, we will explain the case where no operation has been performed when the operation switch designation signal GI does not request an operation. In this case, there is no need to perform any new display, and the coincidence signal Sg+ may be placed in a signal state that prohibits operation, but it is sufficient to place it in any signal state. The above-mentioned logical operation in the comparison and verification device is performed only when the plant operation guidance device determines that there is an abnormality in the plant. When the plant becomes abnormal, a comparison and verification start signal S4 is given to the comparison and verification device.A) When the plant is normal, the coincidence signal S31 is always in the operation permission state and the plant is activated by operating the operation switch. It can be controlled unconditionally.

Finally, the operation passage gate will be explained. FIG. 6 shows an example of the configuration. As can be seen from the previous explanation, the operation switch output signal 'fLIs match signal Sa+ and the operation prohibition release signal B+ correspond to the operation switch.
are obtained, and these signals are subjected to gate logic as shown in the figure using an OR gate 611 and an AND gate 62I corresponding to the operation switches. If at least one of the match signals 831% and the operation prohibition release signal BI is obtained, the operation switch≠output signal R+ is directly output from the AND gate 62t as the operation signal TI.

If we explain the generation mechanism of the operation prohibition release signal B+ with a delay, it will be possible to generate it easily by electrically counting the number of operation switches or by providing an operation prohibition release switch corresponding to the operation switch. It is.

〔Effect of the invention〕

As explained above, the present invention compares and checks the operation switch signal from the operation switch panel and the operation switch designation signal (guidance signal) from the operation guidance device, and detects whether the operation of the operation switch is inappropriate. In some cases, the plant is essentially uncontrolled. Therefore, the present invention has the effect of ensuring the safety of the plant even if an erroneous operation is performed.

[Brief explanation of the drawing]

FIG. 1 is a diagram conceptually showing an operation switch panel in which operation switches are arranged in a predetermined manner, FIG. 2 is a diagram conceptually showing the configuration of a plant operation control panel according to the present invention, and FIG.
Diagram showing the block configuration in the example along with the plant, 4th
The figure shows the configuration of the plant operation guidance device in that configuration, FIG. 5 shows the flow of the processing device in the plant operation guidance device, and FIG. FIG. 3 is a diagram showing the configuration. DESCRIPTION OF SYMBOLS 1... Operation switch board, 2... Plant operation guidance device (operation sequence device), 3... Comparison verification device, 9... Operation passage gate, 10... C-box T113
...Speaker. Agent Patent Attorney Masami Akimoto $ 1 / 3 83 Mouth 452) Figure 5

Claims (1)

[Claims] 1. A plant operation control panel for monitoring and controlling the plant, which is equipped with a plurality of operation switches for controlling the plant, and is capable of generating operation prohibition release signals in response to the switches; An operation guidance device that specifies the next operation switch to be operated based on which plant No. 1 of the plant, and a soft comparison between the operation switch designation signal from the guidance device and the operation switch output No. 16 from the operation switch panel. a comparison and verification device;
If either the matching result from the matching device or an operation prohibition release signal from the operation switch panel is obtained, the corresponding operation switch output signal from the operation switch panel is output to the plant as an operation signal. What is claimed is: 1. A plant operation control panel characterized by a structure comprising an operation pass gate that performs the operation, and means for displaying or notifying messages necessary for operation and comparison and verification results under control from the operation guidance device and the comparison and verification device.