Patent EP-3316261-A1 (EP)
Inventor: Kishkin Vladimir Lvovich
IPC: G21C7/36
Filed: 2016-06-10
Abstract: The invention relates to automatics and computer engineering, and can be used in I&C systems of nuclear power plants (NPP) for constructing control safety systems (CSS) of NPP. 
     Technical result of the invention includes reduction of inputs for monitoring and automatic control of general NPP equipment from the side of the safety and normal operation systems owing to normal operation features integrated in safety channels, enhancement of safety system reliability and protection against common cause failures by means of constructing safety features and normal operation features based on different software & hardware platforms, extension of CSS diagnostic capabilities owing to implementation by a normal operation automation controller of additional functions of evaluating safety channel operation using NPP state-of-health data received by the controller from the process and from the automation controllers of safety channels, extension of CSS diagnostic capabilities owing to equipment state-of-health control features integrated into CSS generating special fault signals, and their input, processing and transmission by the normal operation automation controller to the upper level of the normal operation system control. 
     Technical result is achieved by the fact that in the control safety system of a nuclear plant, which contains multiple identical safety channels, each channel includes process signal I/O stations IOS 1-n , actuation mechanism priority control stations PCS 1-m  connected with the main control room MCR and emergency control room ECR, safety features automation controller (SF AC), safety feature I/O bus SF IOB for data exchange between SF AC and IOS/PCS stations, and is cross-connected with other safety channels by means of duplex optical fiber communication paths; the IOS station contains modules of communication with the process MCP 1-k  and communication module - converter of communication interfaces CIC of SF IOB bus; the PCS station contains actuation mechanism priority control modules PCM 1-e  and communication modules: voting communication module VCM and voting module VM of SF IOB bus; the automation controller SF AC contains safety feature automation processor module SF APM and communication modules - branching modules BM-4 1-p  of SF IOB bus; automation controllers SF AC of all safety channels are connected to the normal operation system via redundant bus EN; each safety channel additionally contains normal operation automation controllers AC 1-s  that are connected with IOS 1-n  stations and PCS 1-m  stations via redundant buses ENL of normal operation built based on switched Ethernet interface, radial structure of net switch connection and specific data-level communications protocol, and with the normal operation system via redundant bus EN of normal operation built based on switched Ethernet interface, ring structure of net switch connection and specific data-level communications protocol; normal operation automation processors AC, means of AC communication with MCP and PCM modules integrated into IOS and PCS stations, and normal operation software & hardware built in MCP and PCM modules are built based on different hardware & software platforms; IOS and PCS stations, SF AC controller, and power supply and communications equipment of the safety system contain built-in self-testing and self-monitoring means that generate at special outputs binary signals of state of the respective equipment 'operative/inoperative' coming to NO AC, where signals are processed and transmitted to the upper level of the normal operation system control via EN bus. In IOS station, communication module CIC of SF IOB bus via separate SF IOB communication lines is connected with automation controller SF AC of safety channel and with each MCP 1-k  module of this station. Each IOS station contains two redundant interface modules IMN of normal operation connected to normal operation automation controller NO AC via redundant bus ENL; an individual normal operation processor is built in each MCP 1-k  module, which is connected with each of the 2 IMN modules via separate line of a serial duplex 'point-to-point'-type interface of the normal operation bus NO IOB. In each safety channel, PCS stations are combined into groups of N stations, a number of PCS stations is determined by a number of safety channels; the first station of the group PCS 1  via SF IOB communication line is connected with SF AC controller of its safety channel, other stations PCS 2-N  of the group are connected with SF AC controllers of the other safety channels 2-N; communication module VCM of each station PCS is connected with communication module of voting according to '2 out of N' majority algorithm VM of its PCS station and communication modules VM of other PCS stations of the group; communication module VM of each PCS station is connected via SF IOB communication lines with priority control modules PCM 1-e  of this station. Each PCS station contains two redundant interface modules IMN of normal operation connected to normal operation automation controller NO AC via redundant bus ENL; an individual normal operation processor is built in each PCM 1-e  module, which is connected with each of the 2 IMN modules via separate line of serial duplex 'point-to-point'-type interface of the normal operation bus NO IOB.