CN109085817B

CN109085817B - Control method and system for off-line downloading of CPU (Central processing Unit) in joint debugging stage of nuclear power unit

Info

Publication number: CN109085817B
Application number: CN201811147553.4A
Authority: CN
Inventors: 廖良记; 刘朝鹏; 刘东亮; 林奕彬
Original assignee: China General Nuclear Power Corp; China Nuclear Power Engineering Co Ltd; CGN Power Co Ltd
Current assignee: China General Nuclear Power Corp; China Nuclear Power Engineering Co Ltd; CGN Power Co Ltd
Priority date: 2018-09-29
Filing date: 2018-09-29
Publication date: 2020-07-31
Anticipated expiration: 2038-09-29
Also published as: CN109085817A

Abstract

The invention discloses a control method for off-line downloading of a CPU (Central processing Unit) in a joint debugging stage of a nuclear power unit, which comprises the following steps of: under the thermal shutdown condition, detecting whether equipment influenced by a CPU to be downloaded needs to be isolated; if not, recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU; performing offline downloading on the CPU; and after the off-line downloading is finished, the CPU is restored to a normal working state, and the CPU logic and the interface signal are restored to an initial state. The invention also discloses a control system for off-line installation of the CPU in the joint debugging stage of the nuclear power unit. The invention can directly carry out off-line downloading of the CPU under the thermal shutdown condition, does not influence the normal operation of other areas, and improves the safety of the unit.

Description

Control method and system for off-line downloading of CPU (Central processing Unit) in joint debugging stage of nuclear power unit

Technical Field

The invention relates to the technical field of nuclear power stations, in particular to a control method and a control system for off-line installation of a Central Processing Unit (CPU) in a joint debugging stage of a nuclear power unit.

Background

The nuclear power station of the pressurized water reactor mainly comprises a pressurized water reactor, a loop system, a secondary loop system and the like, wherein the pressurized water reactor takes low-concentrated uranium as fuel, light water as coolant and moderator, and heat released by nuclear fission is taken out of the reactor by high-pressure water flowing through the primary loop system in the reactor and is transferred to water of the secondary loop in a steamer generator. The steam generated after the water is heated pushes the steam turbine, and the steam turbine drives the generator to generate electricity.

A known pressurized water reactor nuclear power station is provided with four subareas in total to meet the requirement of redundancy control and increase the safety of a unit, an electrical system and a process system of the pressurized water reactor nuclear power station distribute equipment and control signals in the four subareas according to functions, the four subareas maintain the safe operation of the nuclear power unit together, and a large amount of signal interaction and equipment interlocking control exist among the four subareas. The nuclear power station allows a partition to carry out normal maintenance and offline downloading work, and the downloading of a safety-level DCS (Distributed Control System) Control System is divided into full downloading and incremental downloading, wherein the full downloading refers to downloading of all CPUs (Central Processing units) and the incremental downloading refers to downloading of part of CPUs. The joint debugging or unit starting stage is generally incremental downloading, mainly comprises newly added signals, logic modification, IO input and output modification and the like, and the newly added cabinets, CPU address modification, network fixed period modification and service tree modification need to be completely downloaded and are not in the range.

In the prior art, when a nuclear power unit is in a hot stop working condition, if a design problem needs to be solved for off-line installation of a CPU, the nuclear power unit needs to be withdrawn to a cold stop state for fault cleaning. And after the fault is cleared, the CPU is operated to influence gradual power-on recovery of the equipment, and then the state of the unit is promoted to a hot stop working condition. However, since the thermal shutdown condition is followed by the cold shutdown condition and the state is then raised to the hot shutdown condition, a lot of time and resources are consumed, and meanwhile, due to the limitation of the design life of a primary circuit pressure vessel, the unit cannot bear too many state changes from the cold shutdown to the hot shutdown. And under the thermal shutdown condition, equipment overturn, logic change and set value change exist in the corresponding CPU offline downloading process, which can cause the misoperation of the partition and other partition equipment.

Disclosure of Invention

The invention provides a control method and a control system for off-line downloading of a CPU (Central processing Unit) in a joint debugging stage of a nuclear power unit, aiming at the problems in the prior art, and the control method and the control system can be used for directly downloading the CPU off-line under a thermal shutdown condition without influencing the normal operation of other areas and improving the safety of the unit.

The technical scheme provided by the invention for the technical problem is as follows:

on one hand, the invention provides a control method for off-line downloading of a CPU (Central processing Unit) in a joint debugging stage of a nuclear power unit, which comprises the following steps:

under the thermal shutdown condition, detecting whether equipment influenced by a CPU to be downloaded needs to be isolated;

if not, recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU;

performing offline downloading on the CPU;

and after the off-line downloading is finished, the CPU is restored to a normal working state, and the CPU logic and the interface signal are restored to an initial state.

Further, the detecting whether the device affected by the CPU to be downloaded needs to be isolated specifically includes:

detecting whether the equipment influenced by the CPU input signal needs to be isolated;

if not, detecting whether the equipment influenced by the CPU hard-wired signal needs to be isolated;

if not, the equipment influenced by the CPU is judged not to be isolated.

Further, the detecting whether the device affected by the CPU input signal needs to be isolated specifically includes:

detecting whether the CPU input signal failure can cause unit logic degradation;

if not, the equipment influenced by the CPU input signal is judged not to be isolated.

Further, the detecting whether the device affected by the CPU hard-wired signal needs to be isolated specifically includes:

detecting whether the CPU hard-wired signal fails to trigger unit misoperation;

if not, the equipment influenced by the CPU hard-wired signal is judged not to need to be isolated.

Further, the initial state of the CPU logic includes an initial state of a trigger, an initial state of a setting value, and an initial state of a parameter in the CPU logic.

Further, the interface signals affected by the CPU include network signals and hard-wired signals affected by the CPU.

Further, after the offline uninstallation is completed, restoring the CPU to a normal operating state, and restoring the CPU logic and the interface signal to an initial state specifically includes:

after the off-line downloading is finished, the CPU is restored to a normal working state;

checking the current state of the CPU logic, and restoring the logic with changed state to the initial state;

checking the current state of the interface signal, and restoring the interface signal with the changed state to the initial state.

Further, the checking the current state of the CPU logic and restoring the logic with a changed state to the initial state specifically includes:

checking the state of a trigger in the CPU logic at present, and comparing the state with the recorded initial state of the trigger; if not, restoring the state of the trigger to the initial state;

checking the current set value state in the CPU logic, and comparing the current set value state with the recorded set value initial state; if not, restoring the set value state to the initial state;

checking the current parameter state in the CPU logic, and comparing the current parameter state with the recorded parameter initial state; and if the parameter states are not consistent, restoring the parameter states to the initial states.

Further, the checking the current state of the interface signal and restoring the state-changed interface signal to the initial state specifically includes:

checking the state of the network signal influenced by the CPU at present, and comparing the state with the recorded initial state of the network signal; if the network signals are inconsistent, the state of the network signals is restored to the initial state;

checking the state of the hard-wired signal influenced by the CPU at present, and comparing the state with the recorded initial state of the hard-wired signal; and if the hard-wired signals are inconsistent, restoring the state of the hard-wired signals to the initial state.

On the other hand, the invention provides a control system for offline downloading of a CPU (Central processing Unit) in a joint debugging stage of a nuclear power generating unit, which can realize all the processes of the control method for offline downloading of the CPU in the joint debugging stage of the nuclear power generating unit, and the system comprises the following steps:

the detection module is used for detecting whether equipment influenced by a CPU to be downloaded needs to be isolated or not under the thermal shutdown condition;

the recording module is used for recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU when the equipment influenced by the CPU does not need to be isolated;

the downloading module is used for downloading the CPU in an off-line manner;

and the recovery module is used for recovering the CPU to a normal working state and recovering the CPU logic and the interface signal to an initial state after the off-line downloading is finished.

The technical scheme provided by the embodiment of the invention has the following beneficial effects:

when the CPU offline downloading is required to be carried out on the design change under the thermal shutdown condition of the nuclear power unit, whether equipment influenced by the CPU to be downloaded needs to be isolated or not is detected, if the isolation is not required, the initial state of an interface signal influenced by the CPU logic and the CPU is recorded, and the recorded state is gradually recovered after the downloading is completed, so that the offline downloading is directly carried out under the thermal shutdown condition, the influence on the normal operation of other equipment not influenced by the CPU and other three areas is avoided, the nuclear power unit is stabilized under the thermal shutdown condition, the downloading efficiency is effectively improved, the unit resources are saved, and the safety of the unit is improved.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic flow chart of a control method for offline CPU downloading in a joint debugging stage of a nuclear power generating unit according to an embodiment of the present invention;

fig. 2 is a schematic structural diagram of a control system installed in a nuclear power plant during a joint debugging phase of a CPU offline according to an embodiment of the present invention.

Detailed Description

In order to solve the technical problems of consuming a large amount of time and resources, reducing the safety of a unit and the like in the process of downloading the CPU in the prior art, the invention aims to provide a control method for downloading the CPU offline in the joint debugging stage of a nuclear power unit, which has the core idea that: when the CPU offline downloading is required to be carried out on the design change under the thermal shutdown condition of the nuclear power unit, whether equipment influenced by the CPU to be downloaded needs to be isolated or not is detected, if the isolation is not required, the initial state of an interface signal influenced by the CPU logic and the CPU is recorded, and the recorded state is gradually recovered after the downloading is completed, so that the offline downloading is directly carried out under the thermal shutdown condition, the influence on the normal operation of other equipment not influenced by the CPU and other three areas is avoided, the nuclear power unit is stabilized under the thermal shutdown condition, the downloading efficiency is effectively improved, the unit resources are saved, and the safety of the unit is improved.

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Example one

Referring to fig. 1, an embodiment of the present invention provides a control method for offline downloading of a CPU in a joint debugging stage of a nuclear power generating unit, where the method includes:

s1, detecting whether the equipment influenced by the CPU to be downloaded needs to be isolated under the thermal shutdown condition;

s2, if not, recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU;

s3, performing offline downloading of the CPU;

and S4, after off-line downloading is finished, restoring the CPU to a normal working state, and restoring the CPU logic and the interface signal to an initial state.

It should be noted that, in the off-line installation process of the CPU, the nuclear power unit is always stabilized in the thermal shutdown condition. Before a specific CPU is offline downloaded, whether the equipment influenced by the CPU needs to be isolated or not is detected, so that the offline downloading of the CPU cannot drive the equipment to malfunction, and the equipment influenced by the CPU does not need to be isolated through detection. In addition, the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU are recorded, and the state change after the installation is avoided. After the off-line downloading of the CPU is finished, checking that the CPU of the corresponding workstation works normally, developing general investigation on the state of the CPU logic and the state of an interface signal influenced by the CPU, and restoring the state of the CPU logic and the state of the interface signal to the initial state. In the embodiment, the off-line installation of the CPU is directly carried out under the thermal shutdown condition, and the influence on the normal operation of other equipment which is not influenced by the CPU and other three areas is avoided, so that the safety of the unit is improved. In addition, the hot shutdown condition is always stabilized in the CPU offline downloading period, the hot shutdown working condition and the cold shutdown working condition are not required to be converted back and forth, the downloading efficiency is improved, the unit resources are saved, and the service life of the unit is prolonged.

Further, in step S1, the detecting whether the device affected by the CPU to be downloaded needs to be isolated specifically includes:

if not, the equipment influenced by the CPU is judged not to be isolated.

It should be noted that the devices affected by the CPU generally include devices affected by CPU input signals and devices affected by CPU hard-wired signals. The method comprises the steps of firstly analyzing a CPU input signal, then analyzing a CPU hard-wired signal output, and judging that the equipment influenced by the CPU does not need to be isolated if the equipment influenced by the CPU input signal and the equipment influenced by the CPU hard-wired signal are detected not to be isolated.

Specifically, the detecting whether the device affected by the CPU input signal needs to be isolated specifically includes:

It should be noted that, the CPU input signal failure is caused during the CPU downloading, and therefore, the unit logic degradation caused by the input signal failure during the CPU downloading needs to be analyzed, for example, a partitioned APU0 (safety-level DCS analog processing unit) is taken as an example, as shown in table 1, by summarizing the input signals and analyzing the degradation condition of the input signals, wherein, for example, the device feedback DC L1439 JC1 affects the on-load function of the diesel engine after the corresponding partition is powered off, but the corresponding signals have redundancy in other CPUs and do not affect the on-load function of the diesel engine, the corresponding APU radiation monitoring system signal triggers an alarm in the downstream logic and logic according to the logic signal, the alarm is not triggered and the unit I0 is generated by the APU downloading, the RPR9301/2/3CC is only used for the PS maintenance function and does not affect the unit safety function, and through the above analysis, the partitioned 0 downloading input signals do not affect the unit.

TABLE 1

Specifically, the detecting whether the device affected by the CPU hard-wired signal needs to be isolated specifically includes:

detecting whether the CPU hard-wired signal fails to trigger unit misoperation;

It should be noted that, taking a partitioned (safety-level DCS logical processing unit) a L U A1-1&1-2 as an example, as shown in table 2, according to the table analysis, where the stack jump logic is known according to the typical wiring TH02-01, a L U A1-X and a L U A2-X are in an or relationship, so that the installation of a L U A1-1&1-2 will not cause the breaker of the corresponding partition to open and trigger the event of considering the unit I0, while for the dedicated logic, according to the fact that all the dedicated logic are in an or relationship, the installation of a L U A1-1&1-2 will not cause the dedicated logic of the partition to be unavailable and record the event of the unit I0, while for the platform maintenance function related to ST70/80/02, only for the PS maintenance function will not affect the unit safety function, and through the above analysis, the installation of a partition a L U A1-1&1-2 will not cause any offline output signal to affect the unit.

TABLE 2

Further, in step S2, the initial states of the CPU logic include a trigger initial state, a setting value initial state, and a parameter initial state in the CPU logic; the interface signals affected by the CPU include network signals and hard-wired signals affected by the CPU.

Further, in step S4, after the offline uninstallation is completed, the restoring the CPU to a normal operating state and restoring the CPU logic and the interface signal to an initial state specifically includes:

Specifically, the checking the current state of the CPU logic and restoring the logic with a changed state to the initial state specifically includes:

It should be noted that the trigger state may be obtained according to a "trigger state" in the SST, the current trigger state is recorded by the maintenance software before a certain CPU is downloaded, the trigger state is recorded again after the CPU is downloaded, and the previous and subsequent states are compared, and the initial state is recovered by communicating with the operation for a case where the trigger state is inconsistent before and after the CPU is downloaded and a state different from other partitions. The memory cell front-back state ratio is shown in table 3.

Partitioning	CPU	ID	Function(s)	Name(s)	Extension	Current value	After lower mounting
								1	ALU A1‐1	1131	SP15 D1 E31	FFR001	M1	1
1	ALU B1‐1	1133	SP15 D1 E33	FFR001	M1		1
								1	ALU A2‐1	1132	SP15 D1 E32	FFR001	M1	1
1	ALU B2‐1	1134	SP15 D1 E34	FFR001	M1		1
								2	ALU A1‐1	1231	SP15 D2 E31	FFR001	M1	1
3	ALU A1‐1	1331	SP15 D3 E31	FFR001	M1		1
								4	ALU A1‐1	1431	SP15 D4 E31	FFR001	M1	1
2	ALU A2‐1	1232	SP15 D2 E32	FFR001	M1		1
								3	ALU A2‐1	1332	SP15 D3 E32	FFR001	M1	1
4	ALU A2‐1	1432	SP15 D4 E32	FFR001	M1		1
								2	ALU B1‐1	1233	SP15 D2 E33	FFR001	M1	1
3	ALU B1‐1	1333	SP15 D3 E33	FFR001	M1		1
								4	ALU B1‐1	1433	SP15 D4 E33	FFR001	M1	1
2	ALU B2‐1	1234	SP15 D2 E34	FFR001	M1		1
								3	ALU B2‐1	1334	SP15 D3 E34	FFR001	M1	1
4	ALU B2‐1	1434	SP15 D4 E34	FFR001	M1		1

TABLE 3

The set value state can be obtained according to a 'substitute value state' in the SST, the current set value state is recorded through maintenance software before a certain CPU is downloaded, the set value state is recorded again after the CPU is downloaded, the previous state and the next state are compared, and the initial state is recovered through communication with operation under the condition that the set value state is inconsistent before and after the CPU is downloaded and the state is different from other subareas. Table 4 shows the ratio of the before and after state of the set value.

TABLE 4

The parameter state can be obtained according to 'parameterization management' in the SST, the current parameter state is recorded through maintenance software before a certain CPU is downloaded, the parameter state is recorded again after the CPU is downloaded, the previous state and the next state are compared, and the initial state is recovered through communication with operation under the condition that the parameter state is inconsistent before and after the CPU is downloaded and the state is different from other partitions. The parameter front-back state pair ratio is shown in table 5.

Logical page number	Function block	Sub-parameters	Current value	After lower mounting
					SI11 D1 E09 21	PSE007‐R21	Value		1
SI11 D1 E09 07	MRC004‐R07	In2	8.56V
					SI11 D1 E09 14	PSE005‐R14	Value		1
SI11 D1 E09 03	MRC003‐R03	In2	8.54V
					SI11 D1 E09 13	PSE006‐R13	Value		1
SI11 D1 E09 06	PSE004‐R06	Value		1
					SI11 D1 E09 16	PSE004‐R16	Value		1
SI11 D1 E09 17	MRC003‐R17	In2	8.55V
					SI11 D1 E09 18	MRC002‐R18	In2	4.77V
SI11 D1 E09 10	MRC001‐R10	In2	9V

TABLE 5

Specifically, the checking the current state of the interface signal and restoring the state-changed interface signal to the initial state specifically includes:

It should be noted that the interface signals are PS and KCO interface signals, and are divided into network signals and hard-wired signals, where the list of hard-wired signals is shown in table 6.

TABLE 6

Recording the current signal state before downloading, analyzing whether the downloading of a certain CPU influences the signal, enforcing the signal to be the current state in TEC4 (non-safety-level DCS logic configuration), confirming that the mandatory value is consistent with the current value in TEC4 after the downloading is finished, canceling the enforcement, and performing independent analysis and recovery work for inconsistent states by the same method, which is not described in detail.

When the CPU offline downloading is required to be carried out on the design change under the thermal shutdown condition of the nuclear power unit, whether the equipment influenced by the CPU to be downloaded needs to be isolated or not is detected, if the isolation is not required, the initial state of the CPU logic and the interface signal influenced by the CPU is recorded, and the recorded state is gradually recovered after the downloading is finished, so that the offline downloading is directly carried out under the thermal shutdown condition, the normal operation of other equipment and other three areas which are not influenced by the CPU is not influenced, the nuclear power unit is stabilized under the thermal shutdown condition, the downloading efficiency is effectively improved, the unit resources are saved, and the safety of the unit is improved.

Example two

The embodiment of the invention provides a control system for offline downloading of a CPU (central processing unit) in a joint debugging stage of a nuclear power generating unit, which can realize all the processes of the control method for offline downloading of the CPU in the joint debugging stage of the nuclear power generating unit, and the control system comprises the following steps:

the detection module 1 is used for detecting whether equipment influenced by a CPU to be downloaded needs to be isolated or not under the thermal shutdown condition;

the recording module 2 is used for recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU when the equipment influenced by the CPU does not need to be isolated;

the downloading module 3 is used for downloading the CPU in an off-line manner;

and the recovery module 4 is used for recovering the CPU to a normal working state and recovering the CPU logic and the interface signal to an initial state after the off-line downloading is finished.

In summary, the invention provides a control method and a system for offline downloading of a CPU in a joint debugging stage of a nuclear power generating unit, which have better practical effects: when a specific CPU is recovered to be installed off line, signals are isolated and the DCS states of all parts are recovered according to a specific sequence, so that the operation of the process systems and the unit states of the other three in-operation areas are not influenced; the off-line downloading of a certain specific CPU of the unit under the hot stop platform is effectively realized, the downloading efficiency is improved, the unit resources are saved, and the service life of the unit is prolonged.

The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that fall within the spirit and principle of the present invention are intended to be included therein.

Claims

1. A control method for off-line downloading of a CPU (Central processing Unit) in a joint debugging stage of a nuclear power unit is characterized by comprising the following steps of:

under the thermal shutdown condition, detecting whether equipment influenced by a CPU to be downloaded needs to be isolated; if not, recording the initial state of the CPU logic and the initial state of the interface signal influenced by the CPU;

performing offline downloading on the CPU;

after off-line downloading is finished, the CPU is restored to a normal working state, and the CPU logic and the interface signal are restored to an initial state;

the devices influenced by the CPU comprise devices influenced by CPU input signals and devices influenced by CPU hard-wired signals;

the detecting whether the device influenced by the CPU to be downloaded needs to be isolated specifically comprises:

if not, the equipment influenced by the CPU is judged not to be isolated.

2. The method for controlling the offline dismounting of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 1, wherein the detecting whether the device affected by the CPU input signal needs to be isolated specifically comprises:

3. The method for controlling the offline dismounting of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 2, wherein the detecting whether the device affected by the CPU hard-wired signal needs to be isolated specifically comprises:

detecting whether the CPU hard-wired signal fails to trigger unit misoperation;

4. The control method for the offline dismounting of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 3, wherein the initial state of the CPU logic includes an initial state of a trigger, an initial state of a setting value, and an initial state of a parameter in the CPU logic.

5. The method for controlling the offline dismounting of the CPU in the coherent phase of the nuclear power plant as claimed in claim 4, wherein the interface signals affected by the CPU include network signals and hard-wired signals affected by the CPU.

6. The method for controlling the offline dismounting of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 5, wherein the restoring the CPU to a normal operating state and restoring the CPU logic and the interface signal to an initial state after the offline dismounting is completed specifically comprises:

7. The method for controlling the offline downloading of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 6, wherein the checking of the current state of the CPU logic and the restoration of the state change logic to the initial state specifically comprises:

8. The method for controlling the offline dismounting of the CPU in the joint debugging phase of the nuclear power generating unit according to claim 7, wherein the checking the current state of the interface signal and restoring the state-changed interface signal to the initial state specifically comprises:

9. A system for realizing the control method for the off-line downloading of the CPU in the joint debugging stage of the nuclear power generating unit according to any one of claims 1 to 8, wherein the system comprises:

the downloading module is used for downloading the CPU in an off-line manner;