KR101469177B1 - A method for managing digital output module of simulator for nuclear power generation protection system - Google Patents

Abstract

Provided is a method for managing a digital output module of a nuclear power plant protection system simulator, by a processor module, comprises the following steps: detecting an abnormality of the digital output module; displaying an error state through a lamp and recording error information in a first register if the abnormality of the digital output module is detected; storing operation result data in an internal memory if the operation result of a user application program is a digital output value; and outputting the operation result data stored in the internal memory through the digital output module if replacement of the digital output module is detected. According to the present invention, it is possible to easily detect the abnormality of the digital output module, and rapidly replace the digital output module when the abnormality occurs. Thus, there is no risk that operation of the simulator will stop, and a power plant protection system can be precisely copied.

Description

TECHNICAL FIELD [0001] The present invention relates to a method of managing a digital output module of a nuclear power generation protection system simulator,

The present invention relates to a nuclear power generation protection system simulator, and more particularly, to a method for monitoring and managing a state of a digital output module that outputs a digital value calculated by a controller.

Nuclear power generation generates huge heat by using nuclear fission and drives the turbine by using the heat, which is higher in initial construction cost than other power generation methods. However, since the fuel cost is much lower, the long life It is advantageous that the cost of power generation is the lowest through the period.

However, in the above-mentioned nuclear power generation, radioactive materials are emitted while being fission, and when exposed to such radioactivity, there is a risk of mutation or cancer.

The plant protection system functions to protect the nuclear power plant in a safe state and to prevent the radiation and radioactive material from leaking to the outside, even if an accident occurs in the nuclear power plant. Therefore, the plant protection system plays a most important role in the safety and reliability of the nuclear power plant.

Therefore, the plant protection system performs periodic soundness test for safety related functions periodically in accordance with the periodic soundness test period (usually 31 days) specified in the Operational Manual. Typically, during a periodic soundness test, one of the multiple channels (four channels) is bypassed and the test for the bypassed channel is performed. When one channel test is completed, the bypass mode is canceled and the test for the other channel is also performed .

In addition to the health testing of these plant protection systems, it is also important to train the operation of these protection systems as power plant managers can cause large accidents if they misunderstand the plant protection system.

To do this, workers are trained in the complete operation of the protection system through the protection system simulator, which simulates the nuclear power generation protection system, for safer operation of the power plant.

Such a protection system simulator is often implemented through a controller such as a PLC, and a plurality of input / output channel cards are detachably installed in the controller.

The digital output module is one of the input and output channel cards and outputs the digital result value calculated by the controller. Since the calculation result of the controller has many digital values, it is important to maintain the integrity of the digital output module due to its high frequency of use.

However, in the past, the integrity evaluation of such a digital output module has not been properly performed.

In addition, when an error occurs in the digital output module, the controller must be powered off and replaced with a new digital output module, which causes the operation to be temporarily stopped.

A technique has been proposed in which a digital output module can be replaced without stopping the controller operation in the event of a digital output module malfunction. However, they have a separate module replacement signal line (Korean Patent No. 0651761) There is a problem that the detachable structure of the input / output module must be changed (Korean Utility Model No. 0183069).

Korea Patent No. 1073342 Korea Patent No. 0651761 Korean Registered Utility Model No. 0183069

SUMMARY OF THE INVENTION The present invention has been made in order to solve the above problems, and it is an object of the present invention to provide a digital output module which can easily replace the digital output module without stopping the controller operation in the event of a digital output module malfunction, .

According to an aspect of the present invention, there is provided a method for managing a digital output module of a nuclear power generation simulator by a processor module, the method comprising: detecting an abnormality of a digital output module; Evaluating the soundness of the digital output module when it is determined that the digital output module is normally mounted; Displaying an error state through a ramp and recording error information in a first register when an error in the digital output module is detected; Storing operation result data in an internal memory when the operation result of the user application program is a digital output value; And outputting operation result data stored in the internal memory through the digital output module when the replacement of the digital output module is detected, wherein the step of evaluating the integrity of the digital output module comprises: An evaluating step of evaluating the integrity of an output terminal of the processor module in a state in which the connection between the output modules is released; Evaluating the integrity of the output terminal of the digital output module while the connection between the processor module and the digital output module is connected; And evaluating the integrity of the process voltage input to the digital output module. The method for managing a digital output module of a nuclear power plant protection system simulator is provided.

delete

Here, it is possible to further include a step of digitizing the evaluation results of the evaluation steps 1 to 3, and then calculating a soundness index by averaging the evaluation result values or by calculating a weighted average value according to a predetermined weight.

In the evaluation step 2, it is preferable that the output value of the digital output module is fed back to the digital output module, and the output value is compared with the feedback value of the output value, and the comparison result is stored in the second register.

If the process voltage detection setting time and the normal judgment range information are set by the user, the evaluation step 3 may be performed only when the process voltage deviates from the normal judgment range during the voltage detection set time set based on the set information, .

According to the present invention, it is possible to easily detect an abnormal state of a digital module and to quickly replace the abnormal state when an abnormal state is generated, so that there is no fear that the operation of the simulator will be stopped and a power plant protection system can be precisely simulated .

FIG. 1 is a diagram showing a schematic configuration of a nuclear power generation protection system simulator according to the present invention.
2 is a block diagram showing the detailed configuration of the processor module and the control relationship of the digital output module.
3 is a flowchart illustrating a process of replacing a digital output module according to anomaly detection of a digital output module.
FIG. 4 is a flowchart illustrating a process of evaluating the integrity of a digital output module.

The description of the present invention is merely an example for structural or functional explanation, and the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, the embodiments are to be construed as being variously embodied and having various forms, so that the scope of the present invention should be understood to include equivalents capable of realizing technical ideas. Also, the purpose or effect of the present invention should not be construed as limiting the scope of the present invention, since it does not mean that a specific embodiment should include all or only such effect.

FIG. 1 is a diagram showing a schematic configuration of a nuclear power generation protection system simulator according to the present invention.

As shown in FIG. 1, the nuclear power generation protection system simulator according to the present invention includes a first and a second test cabinets 100 and 200 for testing a nuclear power generation protection system, and a first and a second test cabinets 100 and 200, And a safety console 300 for monitoring the test state and providing test-related input information. At this time, the first and second test cabinets 200 and the safety console 300 perform AF 100 communication. Here, the AF100 communication is a system internal network, which is composed of a 1.5 Mbps serial transmission network.

The first test cabinet 100 includes a plurality of test programs for performing a test related to a protection system and includes two PPSs, that is, first and second PPSs (Plant Protection Systems 110 and 120) And a maintenance & test panel (MTP) terminal 130 for outputting test state information generated in the test cabinet 100 and performing various information input processing. At this time, the first and second PPSs 110 and 120 are configured in the same form, and when various input signals for testing are received, the test program corresponding to the input signal is driven to output the test state information. In addition, the MTP terminal 130 displays test status information including test input information, test program driven contents, and test result information.

In addition, the MTP terminal 130 provides various test input values for training the protection system function through the simulation system to the PPSs 110 and 120 in a digital form. That is, the MTP terminal 130 provides test input values corresponding to various input signals provided to the process measuring instrument, the extraneous neutron flux monitoring system, the remote stopper, and the core protection operator system. At this time, the MTP terminal 130 converts the analog test input value into a digital signal and provides it to each PPS. Also, in the actual power plant system, the power plant sensor input value is about 160, but in this simulation system, not all the input values are provided as the test input values, and the test input values are selected by the administrator so as to provide at least 20 test input values . At this time, the type of the test input value that can be input can be set based on the priority with the highest frequency that induces the generation of the trip signal, and the setting of the test input value type can be configured so that the trainee can arbitrarily change and set .

In addition, the MTP terminal 130 may set the test input values to be fixed, and may automatically change predetermined test input values at predetermined cycle intervals or at random according to the request of the trainee. Also, the MTP terminal 130 can select the test items based on the input signal of the trainee.

In addition, the second test cabinet 200 includes two redundant PPSs, that is, a third and a fourth PPS (Plant Protection System) 210 and 220, which are composed of a plurality of test programs for performing a test related to the protection system, And a cabinet display means (230) for displaying and outputting the cabinet display means (230). At this time, the third and fourth PPSs 210 and 220 are configured in the same manner as the first and second PPSs 110 and 120 provided in the first test cabinet 100.

The first to fourth PPSs 110, 120, 210 and 220 provided in the first and second test cabinets 100 and 200 are coupled in a ring form to perform High Speed Link (HSL) communication. The HSL communication is intended to speed up data transmission, and may be, for example, an optical fiber communication scheme.

The safety console 300 may further include a display unit 310 for displaying and outputting a test status, a setting input unit 320 for setting a test related system status, and a status display unit 330).

The display unit 310 includes first to fourth display units 310, 311, 312, 313 and 314 and is connected to the first to fourth PPSs 110, 120, 210, and 220 provided in the first and second test cabinets 100 and 200, And displays the test status information of the PPS.

At this time, the display unit 310 performs AF100 communication with any one representative display unit, e.g., the first display unit 311, with the first and second test cabinets 100 and 200 to perform communication with the first to fourth PPSs 100, 120, And provides test state information provided from the first and second test cabinets 100 and 200 to the second to fourth display units 312, 313 and 314 through the internal communication network, respectively. That is, the second to fourth display units 312, 313, and 314 display test status information corresponding to the PPS of the test status information provided through the first display unit 311. This is to minimize signal processing in the first and second test cabinets 100 and 200 to optimize its hardware size.

In addition, the setting input unit 320 is coupled to the first to fourth PPSs 110, 120, 210, and 220, and is configured with a plurality of switches. The first to fourth PPSs 110, 120, 210, to provide. For example, a manual trip switch for manually generating a trip signal, and a reset switch for delaying generation of a trip signal for a specific test item.

The status display unit 330 is coupled to the first to fourth PPSs 110, 120, 210, and 220 and is configured as a lamp. The status display unit 330 displays the current status based on status information provided from the first to fourth PPSs 110, 120, do. For example, a watchdog status display lamp and an Rx Trip status display lamp.

The first to fourth PPSs 110, 120, 210, and 220 provided in the first and second test cabinets 100 and 200 are configured in the form of a plurality of channel cards as shown in FIG. 1, And is configured to perform interchannel communication through HSL (High Speed Link).

The first to fourth PPSs 110, 120, 210, and 220 operate a test program for testing a nuclear power generation protection system corresponding to an input signal, and generate a trip signal for stopping the reactor based on the program operation result And generates a power plant shutdown signal according to the type of the trip signal.

2 is a block diagram showing the detailed configuration of the processor module and the control relationship of the digital output module.

As described above, the PPS is configured in the form of a plurality of channel cards, and each channel card includes a processor module and a plurality of input / output modules. FIG. 2 shows only the processor module 10 and the digital output module 20 which are related to the present invention among the configurations of the PPS.

2, the processor module 10 according to the present invention includes an input terminal 11 and an output terminal 14 for processing input and output of data, a power input unit 12 for inputting power, An internal memory 13, first and second registers 15 and 16, and a control unit 17.

The internal memory 13 is for storing the operation result of the user application program until the digital output module 20 is replaced when an error occurs in the digital output module 20. [

The first register 15 stores error information when the digital output module 20 detects an abnormality and the second register 16 feeds back the output value of the digital output module 20 to the digital output module 20 And compares the output value with the feedback value of the output value and stores the comparison result.

The control unit 27 performs arithmetic processing of a user application program for various tests corresponding to the reactor protection system test, and outputs test state information including a test result. In addition, the control unit 27 performs diagnosis such as abnormal state detection, replacement management, and integrity evaluation of the digital output module 20, which will be described in detail with reference to FIG. 3 and FIG.

3 is a flowchart illustrating a process of replacing a digital output module according to anomaly detection of a digital output module.

Referring to FIG. 3, the processor module 10 first detects whether the digital output module 20 is abnormal (S300). As described above, a plurality of input / output modules are mounted in the sub rack of the PPS, and the processor module 10 in the simulator controls the virtual plant through the user application program. When the operation result of the user application program is a digital output value, the processor module 10 outputs the output value through the digital output module 20. Each digital output module 20 is mounted in a sub rack, and the processor module 10 periodically confirms whether the digital output module 20 is mounted by self diagnosis.

When an abnormality of the digital output module 20 is detected, the processor module 10 displays an error state through a ramp and records error information in the first register 15 (S310).

The processor module 10 performs a user application program operation even when an error occurs in the digital output module 20. When the operation result of the user application program is a digital output value, the processor module 10 stores the operation result data in the internal memory 13, The output data stored in the memory 13 is continuously updated (S320).

The digital output module 20 in which the abnormality has occurred is removed and replaced with a normal module. At this time, the module is replaced while the power of the control device is maintained.

When the replacement of the digital output module 20 is detected, the calculation result data stored in the internal memory 13 is output through the replaced digital output module 20 at step S330.

That is, the output data of the internal memory 13 of the processor module 10 is updated to the replaced digital output module 20 so that the digital output module 20 performs normal operation. Therefore, during the operation of the processor module 10, The output result of the current operation is outputted even if the output module 20 is re-inserted. That is, in the present invention, control is continuously performed without turning off the power supply for module exchange during operation of the control device or stopping the user application program.

FIG. 4 is a flowchart illustrating a process of evaluating the integrity of a digital output module.

In the embodiment of FIG. 4, in order to evaluate the integrity of the digital output module more accurately, the evaluation procedure proceeds in three steps. When it is determined in FIG. 1 that the digital output module 20 is properly installed, ) May be performed in sequence.

4, the integrity evaluation of the digital output module 20 is performed by evaluating the integrity of the output terminal of the processor module 10 (S410) and evaluating the integrity of the output terminal of the digital output module 20 Evaluation step 2 (S420), and evaluation step 3 (S430) for evaluating the integrity of the process voltage.

In one embodiment of the present invention, after the evaluation results of these three evaluation steps are numerically expressed, the soundness index can be calculated by averaging the evaluation result values or by obtaining a weighted average value according to a predetermined weight. With such a soundness index, it is possible to estimate the probability of occurrence of an abnormality or approximate replacement timing even if there is no abnormality of the digital output module 20 at present, and it is possible to efficiently maintain and maintain the control device.

The evaluation 1 step S410 is a step of evaluating the integrity of the output terminal 24 of the processor module 10 in a state in which the connection between the processor module 10 and the digital output module 20 is released. In this step, a preset voltage or digital signal is applied to the corresponding channel of the output terminal 24 according to the input / output mode, and the voltage or signal measured in the corresponding channel is fed back to the processor module 10, It is possible to evaluate the soundness of the output terminal 24 of the output terminal 10.

Evaluation step 2 (S420) is a step of evaluating the integrity of the output terminal of the digital output module 20 in a state where the connection between the processor module 10 and the digital output module 20 is connected. In this step, the output value of the digital output module 20 is fed back to the processor module 10 and input to the digital output module 20. The feedback value of the output value is compared with the feedback value of the output value, And the processor module 10 can evaluate the integrity of the output terminal of the digital output module 20 through the comparison result.

In the evaluation step 2, a preset digital signal is applied to a corresponding channel (input channel, output channel) of the digital output module 20 in a form similar to that of the evaluation step 1, and the signal measured in the corresponding channel is fed back to the processor module 10 So that the soundness evaluation by the feedback of the output value is performed secondarily after the soundness evaluation of the method of comparing the two values is performed first.

If the process voltage detection set time and the normal judgment range information are set by the user in the evaluation step 3 (S430), the process voltage is monitored only during the set voltage detection set time based on the set information, The process voltage is judged to be abnormal.

The digital output module 20 operates by an external power source. If the process voltage, which is an external power source, fluctuates (unstable), the digital output module 20 may become a cause of operation failure of the digital output module 20. Conventionally, the normal process voltage range is fixed and the unstable state of the process voltage may be allowed depending on the time zone or the environment. However, in such a case, the abnormal process voltage may be determined. Accordingly, in the present invention, a user can set a process voltage detection time zone and a normal voltage range, thereby enabling flexible process voltage monitoring.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

10: Processor module 11: Input terminal
12: power input unit 13: internal memory
14: output terminal 15: first register
16: second register 17:
20: Digital output module

Claims (5)

A method for managing a digital output module of a nuclear power simulator by a processor module,
Detecting an abnormality of the digital output module;
Evaluating the soundness of the digital output module when it is determined that the digital output module is normally mounted;
Displaying an error state through a ramp and recording error information in a first register when an error in the digital output module is detected;
Storing operation result data in an internal memory when the operation result of the user application program is a digital output value;
And outputting operation result data stored in the internal memory through the digital output module when the replacement of the digital output module is detected,
The step of evaluating the integrity of the digital output module
An evaluating step of evaluating the integrity of an output terminal of the processor module in a state in which connection between the processor module and the digital output module is released;
Evaluating the integrity of the output terminal of the digital output module while the connection between the processor module and the digital output module is connected;
And evaluating the integrity of the process voltage input to the digital output module.
delete The method according to claim 1,
Further comprising a step of digitizing the evaluation results of the evaluation steps 1 to 3 and then calculating a soundness index by averaging the evaluation result values or by calculating a weighted average value according to a preset weight value, How to manage output modules.
The method according to claim 1,
Wherein the evaluation step (2) comprises feeding back the output value of the digital output module to the digital output module, comparing the output value with the feedback value of the output value, and storing the comparison result in the second register Method of managing digital output module of system simulator.
The method according to claim 1,
If the process voltage detection set time and the normal judgment range information are set by the user, the evaluation step 3 is determined as the process voltage abnormality only when the process voltage deviates from the normal judgment range during the set voltage detection set time based on the set information Wherein the digital output module management method of the nuclear power generation protection system simulator is performed.

Images