[go: up one dir, main page]

WO1993006537A1 - Systeme de surveillance - Google Patents

Systeme de surveillance Download PDF

Info

Publication number
WO1993006537A1
WO1993006537A1 PCT/GB1992/001516 GB9201516W WO9306537A1 WO 1993006537 A1 WO1993006537 A1 WO 1993006537A1 GB 9201516 W GB9201516 W GB 9201516W WO 9306537 A1 WO9306537 A1 WO 9306537A1
Authority
WO
WIPO (PCT)
Prior art keywords
signals
pattern
array
bit
memory unit
Prior art date
Application number
PCT/GB1992/001516
Other languages
English (en)
Inventor
Bryan Fast
Original Assignee
United Kingdom Atomic Energy Authority
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by United Kingdom Atomic Energy Authority filed Critical United Kingdom Atomic Energy Authority
Priority to EP92917488A priority Critical patent/EP0604461A1/fr
Publication of WO1993006537A1 publication Critical patent/WO1993006537A1/fr
Priority to GB9402559A priority patent/GB2274929B/en

Links

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00—Testing or monitoring of control systems or parts thereof
    • G05B23/02—Electric testing or monitoring
    • G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0218—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults
    • G05B23/0256—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults injecting test signals and analyzing monitored process response, e.g. injecting the test signal while interrupting the normal operation of the monitored system; superimposing the test signal onto a control signal during normal operation of the monitored system

Definitions

  • This invention relates to a monitoring system for, and a method of monitoring, industrial plants or apparatus, and one application of the invention is in nuclear reactors for the detection of fault conditions.
  • a monitoring system is described in UK Patent GB 2 142 206 B in which a test signal generator generates signals which are superimposed on data signals from a plant in such a way as to create a recognisable pattern of acceptable and unacceptable signals (as long as the data signals themselves all lie within acceptable limits). Correct operation of the plant and of the monitoring system is assured as long as the expected pattern is received.
  • the received pattern represented as binary digits is compared to the expected pattern eight bits at a time, each bit (0 or 1) representing an acceptable or unacceptable received signal.
  • a dynamic output is generated by comparing the expected pattern to the received pattern (so it should match) , and then to the next received pattern.
  • An upper limit is placed on the frequency of the dynamic output by the time taken to receive all eight signals and to assess which are acceptable and which unacceptable.
  • a system for monitoring data signals from a plant or apparatus each data signal representing a parameter of the plant or apparatus, the system comprising, means for examining the data signals and for providing status signals representing whether each data signal represents an acceptable or an unacceptable state of the respective parameter; means for supplying test signals in such a way that the examining means produces a recognisable pattern of said status signals as long as the parameters remain in acceptable states; and a pattern recognition means arranged to receive the said status signals, to form an array of digits corresponding to a plurality of status signals and to compare the pattern of the array with a reference pattern, and to provide output signals representing the outcome of that comparison, the system also comprising a memory unit arranged to supply the reference pattern to the pattern recognition means, and means to cause the memory unit to supply a multiplicity of such reference patterns in succession for comparison with each said array, the succession of reference patterns being such that a desired sequence of output signals is provided by the pattern recognition means as long as the parameters remain in the acceptable states.
  • This technique of supplying the reference patterns enables a dynamic output of much higher frequency to be obtained, the upper limit to the frequency being set in practice by the storage capacity available in the memory unit.
  • a square wave output can be obtained at a frequency 256 times the rate at which new arrays are generated from the status signals, by arranging the memory unit to supply 256 successive reference patterns which are alternately the same as and different from the pattern of the array, for every different array.
  • the system of the invention can be arranged to generate any desired output bit code, by suitable programming of the memory unit.
  • the memory unit can supply a succession of reference patterns such that the output signal is a binary code suitable as one input to a pulse-coded logic (PCL) guardline.
  • PCL pulse-coded logic
  • a pulse-coded logic guardline system is described in an article by B. Fast, in “Science and Technology of fast reactor safety", BNES, London, 1986.
  • the system includes three PCL guardlines each of which includes its own pulse generator which is synchronised with those in the other guardlines, and which produces a respective repeating binary-coded pulse train A, B, or C.
  • the coded pulses are supplied to instruments monitoring parameters of a plant (there are three instruments for each parameter, each receiving one of the pulse trains A, B, or C), and if the instrument is un-tripped (i.e. the parameter has an acceptable value) then the received pulse train is distributed back to all three guardlines.
  • Each guardline votes on a two-out-of-three basis on the three coded pulse trains received from each instrument, giving a square-wave dynamic output as long as at least two of the pulse trains A, B, or C is received corresponding to each monitored parameter; the codes are however such that tripping of any one instrument can be identified, even though it does not trip the guardline itself.
  • a variety of different repeating binary codes are suitable as PCL pulse-train inputs, depending on the voting strategy adopted (e.g. 2-out-of-4, or 3-out-of-4) and on how long a pulse train is desired.
  • the voting strategy adopted e.g. 2-out-of-4, or 3-out-of-4
  • failure of any one instrument can be identified using six bits of code, but typically a ten-bit or sixteen-bit code would be used.
  • With an n-bit code it is apparent that the square-wave dynamic output from the guardline will be at a frequency n-times less than the frequency at which the binary code pulses are generated.
  • the present invention thus enables a monitoring system using pattern recognition to be coupled dynamically to PCL guardlines, and it enables that coupling to be performed at a much higher frequency that that at which arrays are generated from the status signals, so that in spite of the inevitable n—times frequency decrease in the PCL guardline the output from the guardline is still of satisfactorily high frequency.
  • Generating the PCL code in this way provides the further safety advantage that the code exists nowhere in the electronic circuitry forming the system, except at the output from the pattern recognition unit, and so the correct PCL code can only be generated by correct operation of the circuitry.
  • the PCL code is an n-bit code, and N such n-bit codes are provided by the pattern recognition means in succession for any one array (N and n are positive integers) ; the memory unit supplies reference patterns to the pattern recognition means at a frequency Nxn times the frequency at which new arrays are formed; the last bit of the PCL code corresponds to a mis-match between the array and the reference pattern; the reference pattern supplied by the memory unit in creating the last bit of the Nth code is the same as the next expected array (and so should be a mis-match) ; and the memory unit does not change its reference pattern as the next array is formed. Consequently the number of reference patterns stored by the memory unit is [(Nxn)-l] for each array of the pattern.
  • Figure 1 shows a block diagram of a monitoring system
  • FIG. 2 shows a block diagram of a plant protection system incorporating monitoring systems as in Figure 1;
  • Figures 3a, 3b and 3c show graphically sixteen-bit binary codes for a plant protection system as shown in Figure 2;
  • Figure 4 shows a block diagram of the pattern recognition unit of the monitoring system of Figure 1.
  • a monitoring system 10 for monitoring temperatures at sixteen locations in a core of a nuclear reactor has sixteen input terminals 12 (only four are shown) to which leads carrying data signals from sixteen temperature sensors (not shown) are connected.
  • Each input terminal 12 is connected to one input 14 of a respective two-input, signal adding-and-amplifying unit 16 (only four are shown) , the other input 18 of which is connected to a test signal generating system 22.
  • the output of each unit 16 is connected to a respective input of a sixteen input multiplexer 20, whose output is connected through an analogue-to-digital converter 24 to a signal analyser 30 arranged to provide an input to a pattern recognition unit 40 in response to a data request- signal from the unit 40.
  • the multiplexer 20 scans sequentially the signals it receives, which in the absence of signals from the test signal generating system 22 would correspond to the data signals representing the temperatures of the temperature sensors connected to the input terminals 12.
  • the signal analyser 30 identifies this polarity change as signifying the beginning of a new scan.
  • the signal received by the signal analyser 30 hence consists of a sequence of signals in digital form, each representing the temperature of one of the temperature sensors.
  • the signal analyser 30 is a computer which, from the signal from each sensor:
  • the test signal generating system 22 consists of a test signal generator 32 for producing a sequence of signals in digital form, and connected by a data link 42 to the signal analyser 30 for receiving the memory of the current values of the temperatures of the sensors.
  • the test signal generator 32 is connected through a digital-to- analogue converter 34 to the input of a sixteen output demultiplexer 36, the outputs of which are connected through respective sample-and-hold amplifiers 38 (only four of which are shown) to the inputs 18 of the units 16, each amplifier 38 being adapted to generate a steady signal corresponding to the most recent signal received from the demultiplexer 36 until it receives the next signal from the demultiplexer 36.
  • test signals are superimposed in analogue form on the data signals from the sensors by the signal adding-and-amplifying units 16.
  • Some of the signals produced by the test signal generator 32 are such as to cause the multiplexer 20 and hence the signal analyser 30 to receive a signal representing a temperature outside the acceptable limits, or representing a temperature corresponding to an unacceptable rate of change of temperature, while other signals from the test signal generator 32 have no such effect on the respective data signals.
  • the test signal generator 32 is programmed to calculate suitable values of test signals, utilising where necessary the temperature values received from the signal analyser 30 via the data link 42, so as to result in a desired test pattern of acceptable and unacceptable signals, i.e. to produce a desired sequence of "0" and "1" output signals from the signal analyser 30. The presence of the desired pattern is then detected by the pattern recognition unit 40.
  • test signal generator 32 and the demultiplexer 36 operate in phase, so that the test signals are supplied to the appropriate sample-and-hold amplifiers 38, and this is ensured by the use of timing signals provided by a timer 44. Timing signals from the timer 44 also control the multiplexer 20 so that the multiplexer 20 performs one scan of the inputs it receives for every scan of the demultiplexer 36.
  • the complete pattern of test signals is produced in eight scans of the multiplexer 20, the test signals being applied to the inputs 18 of a different selection of adding-and-amplifying units 16 on successive scans of the multiplexer 20.
  • the pattern is then repeated.
  • the sequence of output signals from the signal analyser 30 is shown in Table 1. It will be observed that with this pattern, each input is tested at least once; one input is tested twice, five are tested three times, five are tested four times, three are tested five times, and one is tested six times. (The hexadecimal equivalents of the first four sets of eight bits are given in brackets, the first bit in each set being the least significant (units) digit) .
  • a plant protection system 50 which includes three monitoring systems 10 as described above, and which differ only in the binary code output signals provided by the respective pattern recognition units 40, identified as codes A, B, and C. These binary code output signals are supplied as inputs to an interface unit 52 forming part of a pulse-coded logic guardline 54.
  • the guardline 54 also includes a pulse generator 56 which generates set and reset pulses, and a guardline monitor 58 which receives the set and reset pulses after their passage through the interface unit 52.
  • the pulse generator 56 also provides signals to synchronise operation of the monitoring systems 10).
  • the set pulses are propagated through the interface unit 52 as long as two out of three of the code signals A, B, and C are 1; the reset pulses are propagated through the interface unit as long as two out of three of the code signals A, B, and C are 0.
  • the PCL codes are ten-bit codes, as indicated in Table 2, in which TO to T9 are successive time intervals:
  • the guardline monitor 58 receives a set pulse 1 at time TO, and receives a reset pulse 1 at time T5, and consequently generates a square-wave dynamic output signal. If any single one of the codes is stuck at 0 this will affect the receipt of the set signal by the monitor 58 in time intervals Tl, T2 and/or T3 (so the identity of the failed code can be determined), while if any single one of the codes is stuck at 1 this will affect the receipt of the reset signal in the time intervals T6, T7 and/or T8 (so the identity of the failed code can be determined) .
  • a plant protection system 50 may include several interfaces 52 in series between the pulse generator 56 and the monitor 58, each with its respective monitoring systems 10.
  • a system 50 may also include a different number of monitoring systems 10, for example four instead of three, and the binary code signals might have a different number of bits, for example sixteen.
  • sixteen-bit codes are shown graphically as follows: codes A, B and C suitable for a two-out-of-three voting guardline (Figure 3a); codes A, B, C and D suitable for a three-out-of-four voting guardline ( Figure 3b); and codes A, B, C-and D suitable for a two-out-of-four voting guardline (Figure 3c).
  • the time intervals Tl to T6 enable any single code stuck at 0 to be identified; the intervals T9 to T14 enable a single code stuck at 1 to be identified.
  • the unit 40 receives from the signal analyser 30 signals representing the sequence of binary digits listed in Table 1, these signals being received eight bits at a time by an eight-bit comparator 60, every 16.4 milliseconds, in response to a data request signal from a control logic unit 62 to the signal analyser 30.
  • the control logic unit 62 receives timing signals from a clock unit 64, and sends a control pulse every 64 microseconds to a twelve-bit counter 66.
  • the output from the counter 66 is supplied to a programmable read-only memory 68, so that it sends a new eight-bit reference pattern to the comparator 60 every 64 microseconds.
  • the memory 68 is programmed so that the binary output code provided by the comparator 60 is (by way of example) the A code suitable as an input for a two-out-of-four PCL guardline, as shown in Figure 3c, that is to say 1011111101010100, each digit being of duration 64 microseconds.
  • the reference patterns are thus provided by the memory 68 to the comparator 60 at a frequency 256 times higher than that at which eight-bit arrays are received from the signal analyser 30, so the sixteen-bit code A of Figure 3c is generated sixteen times for each new eight-bit array from the signal analyser 30.
  • the control logic unit 62 does not send any signal to the counter 66 when it sends the next data request signal to the signal analyser 30, so that when the next eight-bit array is received the comparator 60 will indicate a match with its current reference pattern.
  • the pattern recognition unit 40 also includes a code checking unit 70 to which the output from the comparator 60 is supplied. The output is also supplied to an output veto gate 72 controlled by a dynamic latch 74, the latch 74 being controlled by the code checking unit 70. Every bit of the output PCL code is checked against a hard-wired code, and the phase of the code is also checked; if the output is not the expected code (i.e. code A of Figure 3c) then the gate 72 is closed and a trip warning indicator 76 is operated.
  • code checking unit 70 Every bit of the output PCL code is checked against a hard-wired code, and the phase of the code is also checked; if the output is not the expected code (i.e. code A of Figure 3c) then the gate 72 is closed and a trip warning indicator 76 is operated.
  • the pattern recognition unit 40 can be arranged to provide any desired PCL code by suitably programming the read-only memory 68, or indeed can be arranged to provide any other desired output code such as a high frequency square wave. Equally the frequency with which output code bits are provided may differ from that described above (once every 64 microseconds); this frequency can be changed by changing the frequency at which the control logic unit 62 supplies control pulses to the counter 66.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Testing And Monitoring For Control Systems (AREA)
  • Testing Or Calibration Of Command Recording Devices (AREA)

Abstract

On décrit un système de surveillance (10) destiné à examiner les signaux de données (12) envoyés par une installation ou un appareil et à produire des signaux d'état indiquant si chaque signal de données indique un état acceptable du paramètre correspondant. Des signaux d'essai (32) sont également fournis de telle sorte que la séquence de signaux d'état forme un motif reconnaissable. Une unité de reconnaissance de motif (40) permet de comparer des ensembles de signaux d'état à des motifs de référence contenus dans une unité de mémoire (68), plusieurs motifs de référence de ce type étant comparés successivement à chaque ensemble de façon à obtenir une séquence désirée de correspondance et de discordances. La séquence désirée peut envoyer un code d'entrée à un système (50) de protection de ligne de garde logique à impulsions codées.
PCT/GB1992/001516 1991-09-13 1992-08-17 Systeme de surveillance WO1993006537A1 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP92917488A EP0604461A1 (fr) 1991-09-13 1992-08-17 Systeme de surveillance
GB9402559A GB2274929B (en) 1991-09-13 1994-02-10 Monitoring system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
GB9119575.0 1991-09-13
GB919119575A GB9119575D0 (en) 1991-09-13 1991-09-13 Monitoring system

Publications (1)

Publication Number Publication Date
WO1993006537A1 true WO1993006537A1 (fr) 1993-04-01

Family

ID=10701359

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB1992/001516 WO1993006537A1 (fr) 1991-09-13 1992-08-17 Systeme de surveillance

Country Status (5)

Country Link
EP (1) EP0604461A1 (fr)
AU (1) AU2435292A (fr)
CA (1) CA2116338A1 (fr)
GB (2) GB9119575D0 (fr)
WO (1) WO1993006537A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5838561A (en) * 1996-04-29 1998-11-17 Pulp And Paper Research Institute Of Canada Automatic control loop monitoring and diagnostics
US6016465A (en) * 1995-07-10 2000-01-18 The Secretary Of State For Defence Sensor fault detection system
JP2000509178A (ja) * 1996-04-29 2000-07-18 パルプ アンド ペーパー リサーチ インスチチュート オブ カナダ 自動制御ループ監視および診断

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6898542B2 (en) * 2003-04-01 2005-05-24 Fisher-Rosemount Systems, Inc. On-line device testing block integrated into a process control/safety system
US7130703B2 (en) 2003-04-08 2006-10-31 Fisher-Rosemount Systems, Inc. Voter logic block including operational and maintenance overrides in a process control system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4099668A (en) * 1976-10-29 1978-07-11 Westinghouse Electric Corp. Monitoring circuit
GB2142206A (en) * 1983-06-24 1985-01-09 Atomic Energy Authority Uk Monitoring system
WO1989004519A1 (fr) * 1987-11-05 1989-05-18 Ampex Corporation Analyseur de signatures de circuits integres pour tester des circuits numeriques

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4099668A (en) * 1976-10-29 1978-07-11 Westinghouse Electric Corp. Monitoring circuit
GB2142206A (en) * 1983-06-24 1985-01-09 Atomic Energy Authority Uk Monitoring system
WO1989004519A1 (fr) * 1987-11-05 1989-05-18 Ampex Corporation Analyseur de signatures de circuits integres pour tester des circuits numeriques

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
MICROELECTRONICS JOURNAL vol. 19, no. 4, August 1988, LUTON GB pages 57 - 69 S.L. HURST 'VLSI TESTING AND TESTABILITY CONSIDERATIONS: AN OVERVIEW' *

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6016465A (en) * 1995-07-10 2000-01-18 The Secretary Of State For Defence Sensor fault detection system
EP0838048B1 (fr) * 1995-07-10 2000-03-15 The Secretary Of State For Defence Procede de detection de defaillances de capteurs
US5838561A (en) * 1996-04-29 1998-11-17 Pulp And Paper Research Institute Of Canada Automatic control loop monitoring and diagnostics
JP2000509178A (ja) * 1996-04-29 2000-07-18 パルプ アンド ペーパー リサーチ インスチチュート オブ カナダ 自動制御ループ監視および診断
EP0907913B1 (fr) * 1996-04-29 2002-06-26 Pulp and Paper Research Institute of Canada Controle automatique de boucle de regulation et methode diagnostique

Also Published As

Publication number Publication date
EP0604461A1 (fr) 1994-07-06
CA2116338A1 (fr) 1993-04-01
GB2274929B (en) 1995-01-11
GB9119575D0 (en) 1991-10-23
AU2435292A (en) 1993-04-27
GB9402559D0 (en) 1994-02-10
GB2274929A (en) 1994-08-10

Similar Documents

Publication Publication Date Title
US4639882A (en) Monitoring system
US5446683A (en) Methods and apparatus for generating pseudo-random binary patterns
US4099668A (en) Monitoring circuit
RU2056693C1 (ru) Реле частоты или фазы
GB2070779A (en) Apparatus for testing digital electronic circuits
WO1993006537A1 (fr) Systeme de surveillance
US5297151A (en) Adjustable weighted random test pattern generator for logic circuits
GB2063021A (en) Monitoring apparatus
GB2142206A (en) Monitoring system
GB2220280A (en) A control system for industrial plant
US4730319A (en) Device for transforming the occurrence probability of logic vectors and for the generation of vector sequences with time variable probabilities
RU2132573C1 (ru) Кодоимпульсное передающее устройство
US3798424A (en) Industrial control system utilizing high speed digital computer
US5353289A (en) Fault judging device comprising a compression circuit for compressing output pattern signals of a circuit model
CA1076705A (fr) Systemes de traitement des donnees
US5144255A (en) Multiple synchronized agile pulse generator
RU2106677C1 (ru) Автоматизированная система контроля параметров электронных схем
GB2287617A (en) Plant monitoring system
SU1640630A1 (ru) Ультразвуковой дефектоскоп
SU1300456A1 (ru) Программируема логическа матрица
SU1700538A1 (ru) Система автоматического контрол параметров электронных схем
US5422644A (en) Hard-wired controlled/monitor
SU1015381A1 (ru) Генератор случайного процесса
RU1781682C (ru) Резервированна измерительна система
SU1381481A1 (ru) Программируема логическа матрица

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AT AU BB BG BR CA CH CS DE DK ES FI GB HU JP KP KR LK LU MG MN MW NL NO PL RO RU SD SE US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH DE DK ES FR GB GR IE IT LU MC NL SE BF BJ CF CG CI CM GA GN ML MR SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
EX32 Extension under rule 32 effected after completion of technical preparation for international publication
WWE Wipo information: entry into national phase

Ref document number: 1992917488

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 1994 196252

Country of ref document: US

Date of ref document: 19940215

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2116338

Country of ref document: CA

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

WWP Wipo information: published in national office

Ref document number: 1992917488

Country of ref document: EP

WWR Wipo information: refused in national office

Ref document number: 1992917488

Country of ref document: EP

WWW Wipo information: withdrawn in national office

Ref document number: 1992917488

Country of ref document: EP