CN111817900B - Standby emergency command system of nuclear power plant and main-standby switching method - Google Patents

Abstract

The invention discloses a backup emergency command system of a nuclear power plant, comprising: a backup communication link, which is used for data transmission; a main-standby communication control module, which is used for switching the main-standby mode of communication; It is used to collect unit operating condition data, environmental monitoring and meteorological observation data and simulator data; a backup emergency database, which is used to store the data collected by the backup on-site data acquisition module; the backup off-site data transmission module, which uses It is used to transmit the data in the standby emergency database to the off-site through the standby communication link; the standby emergency command software platform is used to manage and share the data in the standby emergency database, and perform status monitoring and control. Early warning; backup emergency expert software platform, which is used to assess the impact of the accident; emergency data registration module, which is used to supplement the data during the operation of the backup emergency command system to the main emergency command system after the main emergency command system is restored. command system.

Description

Standby emergency command system of nuclear power plant and method for switching between active and standby

technical field

The invention belongs to the field of nuclear accident emergency, and particularly relates to a method for switching a nuclear power plant emergency command system, a main emergency command system to a standby emergency command system, and a standby emergency command system to the main emergency command system.

Background technique

The nuclear power plant emergency command system is a collection of special networks, equipment and software for emergency command and response deployed in the emergency command and action center of the nuclear power plant.

According to the requirements of my country's nuclear safety-related standards and guidelines, the emergency command and action center of a nuclear power plant is mainly responsible for the main responsibilities and functions of emergency control (command), technical support, and operation support during emergency response. In order to meet the above requirements, as an important part of the emergency command and action center, the emergency command system can provide key functions of emergency preparedness and response such as data transmission, monitoring and early warning, real-time communication, accident deduction, command and dispatch, evaluation and decision-making.

In some extreme cases, such as accidents (fires, explosions, terrorist attacks, etc.), natural disasters (earthquakes, typhoons, etc.), man-made events (reinforcement and maintenance, etc.) The overall emergency command system is unavailable and cannot be restored in a short period of time. In response to such situations, it is necessary to establish a backup emergency command system in a backup facility outside the emergency command and action center. When the main system is unavailable, it can be quickly switched and run independently of the main system components. Minimal critical function of response and command.

SUMMARY OF THE INVENTION

In view of this, in order to overcome the defects of the prior art and achieve the above objects, the purpose of the present invention is to provide a backup emergency command system of a nuclear power plant, which can realize fast switching with the main emergency command system.

In order to achieve the above object, the present invention adopts the following technical scheme:

A backup emergency command system for a nuclear power plant, comprising:

Alternate communication links, which are used to transmit data;

an active-standby communication control module, which is used to switch the active-standby mode of communication;

A spare on-site data acquisition module, which is used to collect unit operating condition data, environmental monitoring and meteorological observation data, and simulator data;

The standby emergency database is used to store emergency business data and the data collected by the data collection module in the standby field; the emergency business data mainly refers to emergency-related personnel, organizations, resources, documents, orders, situations and other business types. Data is used to support various functions of the emergency software platform.

A backup off-site data transmission module, which is used to transmit the key safety data in the backup emergency database to off-site through the backup communication link; wherein the key safety data is collected by the backup on-site data collection module key subsets of data;

A backup emergency command software platform, which is used to manage and share the data in the backup emergency database, and perform state monitoring, early warning and emergency command;

A backup emergency expert software platform for assessing the impact of an accident;

The emergency data supplementary registration module is used for supplementary registration of the data during the operation of the standby emergency command system to the main emergency command system after the main emergency command system is restored.

According to a preferred implementation aspect of the present invention, the alternate communication link comprises:

Standby KNS system communication link, which is used to transmit unit operating condition data under standby conditions, the number of links is n, and n is the actual number of KNS systems;

A backup KRS system communication link, which is used to transmit environmental monitoring and meteorological observation data in a backup situation, and the number of links is 1;

The communication link of the standby simulator system, which is used to transmit the working condition data of the simulator in the standby condition, the number of links is m, and m is the actual number of simulators;

Alternate off-site data communication link for transmission of critical safety data off-site in backup situations.

KNS: Real-time Information Monitoring System for nuclear power plants;

KRS: Nuclear Power Plant Site Radiation and Meteorological Monitoring System (Site Radiation and Meteorological Monitoring).

According to a preferred implementation aspect of the present invention, the active and standby communication control modules include:

KNS communication control module, which is used to switch the active and standby modes of KNS communication;

KRS communication control module, which is used to switch the active and standby modes of KRS communication;

an emulator communication control module, which is used to switch the main and standby modes of the emulator communication;

The off-site communication control module is used to switch the master-standby mode of the off-site communication.

According to a preferred implementation aspect of the present invention, the backup in-field data acquisition module includes:

The standby unit operating condition data receiving module is used to receive the unit operating condition data sent by the upstream KNS system in real time through the standby KNS system communication link;

A backup environmental monitoring and meteorological observation data acquisition module, which is used to collect environmental monitoring and meteorological observation data in real time through the backup KRS system communication link;

The standby simulator data acquisition module is used for real-time acquisition of simulator data through the simulator system communication link.

According to a preferred implementation aspect of the present invention, the backup emergency expert software platform includes:

A spare core damage evaluation module, which is used to analyze and evaluate the damage state of the core in the event of an accident;

Backup source item analysis and calculation module, which is used to analyze and calculate the release source item of radioactive substances in the event of an accident;

A spare accident consequence evaluation module, which is used to simulate and predict the spatial and temporal distribution characteristics of radioactive substances in the surrounding environment and the dose impact on the public;

An auxiliary decision-making module for the standby operation intervention level, which is used to analyze and provide off-site public protection action suggestions based on the operation intervention level combined with environmental measurement data.

The invention also provides a method for switching the emergency command system of a nuclear power plant from the main to the standby. The switching method includes the following steps: the nuclear power plant sends a system switching instruction; records the switching time point T0; starts the standby emergency database; The control module switches to the standby mode: start the backup on-site data acquisition module; start the backup off-site data transmission module, and transmit data to the off-site in real time through the connected backup off-site data communication link; start the backup emergency command software platform, Start the standby emergency expert software platform; the standby emergency command system is completed.

According to a preferred implementation aspect of the present invention, the switching of the active and standby communication control modules to the standby mode includes the following steps: the KNS communication control module is switched to the standby mode, the communication link of the active KNS system is disconnected, and the communication link of the standby KNS system is connected ;The KRS communication control module is switched to the standby mode, the communication link of the main KRS system is disconnected, and the communication link of the standby KRS system is connected; the communication control module of the simulator is switched to the standby mode, and the communication link of the main simulator system is disconnected, The standby simulator communication link is connected; the off-site communication control module is switched to the standby mode, the main off-site communication link is disconnected, and the standby off-site data communication link is connected.

According to a preferred implementation aspect of the present invention, the activating the data collection module in the backup field includes the following steps: activating the backup unit working condition data receiving module, and receiving the unit working condition data sent upstream in real time through the connected backup KNS system communication link ;Start the standby environment monitoring and meteorological observation data acquisition module, and collect environmental monitoring and meteorological observation data in real time through the connected standby KRS system communication link; start the standby simulator data acquisition module, through the connected simulator system communication link Real-time collection of simulator data.

The present invention also provides a method for switching the emergency command system of a nuclear power plant from standby to main, the switching method comprising the steps of: the nuclear power plant issuing a system switching instruction; recording the switching time point T1; and starting the relevant modules of the main emergency command system; Switch the main and standby communication control modules to the main mode; the emergency data supplementary registration module supplements the data in the standby emergency database in the T0-T1 time period to the main emergency command system; the main emergency command system is switched over.

According to a preferred implementation aspect of the present invention, the switching of the active and standby communication control modules to the active mode includes the following steps: the KNS communication control module is switched to the active mode, the standby KNS system communication link is disconnected, and the KNS system communication main link is connected; The KRS communication control module switches to the main mode, the communication link of the backup KRS system is disconnected, and the main communication link of the KRS system is connected; the communication control module of the simulator switches to the main mode, the communication link of the backup simulator system is disconnected, and the simulation The main link of the computer system is connected; the off-site communication control module is switched to the active mode, the standby off-site communication link is disconnected, and the off-site communication main link is connected.

Due to adopting the above technical scheme, compared with the prior art, the present invention has the advantages of:

1) In the present invention, the standby emergency command system is independently arranged in the standby emergency facility, and can operate independently of the main emergency command system, and its operation is not affected by the state of the emergency command center and the main emergency command system;

2) The present invention effectively solves the problem of key data loss during system switching, and the emergency data registration module realizes data registration during the switching process, ensuring the integrity and consistency of key data.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings used in the description of the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without creative effort.

Fig. 1 is a logical schematic diagram of the main and standby architecture of the emergency command system of a nuclear power plant in an embodiment of the present invention;

2 is a schematic flowchart of a method for fast switching between active and standby in an emergency command system of a nuclear power plant according to an embodiment of the present invention; the left figure: switching from active to standby, and the right figure: switching from standby to active.

Detailed ways

In order to make those skilled in the art better understand the technical solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described implementation Examples are only some of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1 Backup emergency command system of nuclear power plant

Referring to FIG. 1 , the active-standby architecture in this embodiment includes an active emergency command system and a backup emergency command system. Among them, the main emergency command system: the existing emergency command system and its communication link are used as the main system, and the main system is one of the components of the main and standby architecture, but its internal structure is conventional in the field. selection, which is also not part of the present invention.

Standby emergency command system: It is used to realize the minimum key functions of the emergency command system, and mainly includes the following structures:

1) Backup communication link: mainly includes

Standby KNS system communication link, which is used to transmit unit operating condition data under standby conditions, the number of links is n, and n is the actual number of KNS systems;

A backup KRS system communication link, which is used to transmit environmental monitoring and meteorological observation data in a backup situation, and the number of links is 1;

The communication link of the standby simulator system, which is used to transmit the working condition data of the simulator in the standby condition, the number of links is m, and m is the actual number of simulators;

Alternate off-site data communication links used to transmit critical safety data off-site in backup situations.

In practical applications, the above backup communication links are generally realized by a combination of communication cables (optical cables, pigtails, twisted pair wires, etc.) and network devices (switches, routers, firewalls, etc.).

2) Active and standby communication control module: mainly includes

KNS communication control module, which is used to switch the master-standby mode of KNS communication when the key state changes;

KRS communication control module, which is used to switch the active and standby modes of KRS communication when the key state changes;

The simulator communication control module, which is used to switch the main and standby modes of the simulator communication when the key state changes;

The off-site communication control module is used to switch the master-standby mode of the off-site communication when the key state changes.

In practical applications, the above active and standby communication control modules are generally implemented by a combination of software and hardware such as network equipment and communication control software.

3) Spare on-site data acquisition module: mainly includes

Standby unit operating condition data receiving module: it receives the unit operating condition data sent by the upstream KNS system in real time through the standby KNS system communication link;

Standby environmental monitoring and meteorological observation data acquisition module: it collects environmental monitoring and meteorological observation data in real time through the standby KRS system communication link;

Standby simulator data acquisition module: It collects simulator data in real time through the simulator system communication link.

In practical applications, the above backup in-field data acquisition modules are generally implemented by a combination of software and hardware such as network equipment, servers, and data receiving/acquisition software.

4) Backup off-site data transmission module: It transmits key safety data (including key unit operating condition data, environmental monitoring data, etc.) to off-site in real time through the backup off-site data communication link.

In practical applications, the backup off-site data transmission module is generally implemented by a combination of software and hardware such as network equipment, servers, and data transmission software.

5) Standby emergency database: It is used to store emergency data under standby conditions, including various working conditions, monitoring data and emergency business data collected in real time.

In practical applications, the standby emergency database is generally implemented by a combination of software and hardware such as network equipment, servers, and database management software.

6) Standby emergency command software platform: As the portal of the entire standby emergency command system, the standby emergency command platform provides the minimum key functions such as data management and sharing during emergency response, status monitoring and early warning, emergency information synthesis, system management and maintenance through the human-machine interface.

In a specific embodiment, the backup emergency command software platform is generally implemented by a combination of software and hardware such as network equipment, servers, emergency command software systems, and terminal peripherals.

7) Backup emergency expert software platform: mainly includes

Standby core damage evaluation module: it is used to analyze and evaluate the damage state of the core in the event of an accident;

Alternate source item analysis and calculation module: it is used to analyze and calculate the release source item of radioactive substances in the event of an accident;

Standby accident consequence evaluation module: it is used to simulate and predict the spatial and temporal distribution characteristics of radioactive substances in the surrounding environment and the dose impact on the public;

Standby operation intervention level auxiliary decision-making module: Based on the operation intervention level, combined with environmental measurement data analysis and suggestions for off-site public protection actions are given.

In practical applications, the standby emergency expert software platform is generally implemented by a combination of software and hardware such as network equipment, workstations, emergency expert software, and terminal peripherals.

8) Emergency data registration module: After the main system is restored, the key data during the operation of the standby system can be supplemented to the main system.

In a specific embodiment, the emergency data registration module is generally implemented by a combination of software and hardware such as a workstation and emergency data registration software.

Example 2 The method for fast switching of emergency command of nuclear power plant from active to standby

As shown in Figure 2, based on the active-standby architecture in Embodiment 1, this embodiment provides a method for quickly switching the emergency command of a nuclear power plant from active to standby, which mainly includes the following steps:

1. The main emergency command system is unavailable as a whole, and cannot be restored in a short period of time. If the entry conditions for the activation of the backup system are met, the nuclear power plant issues a system switching command;

2. Record the switching time point T0;

3. Start the standby emergency database;

4. The main and standby communication control modules are switched to the standby mode, and the sub-steps are as follows:

4.1 The KNS communication control module is switched to the standby mode, the communication link of the main KNS system is disconnected, and the standby link is connected;

4.2 The KRS communication control module switches to the standby mode, the communication link of the main KRS system is disconnected, and the standby link is connected;

4.3 The communication control module of the simulator is switched to the standby mode, the communication link of the main simulator system is disconnected, and the standby link is connected;

4.4 The off-site communication control module switches to the standby mode, the main off-site communication link is disconnected, and the standby link is connected;

5. Start the standby in-field data acquisition module, and the sub-steps are as follows:

5.1 Start the standby unit working condition data receiving module, and receive the unit working condition data sent upstream in real time through the connected standby KNS system communication link;

5.2 Start the standby environmental monitoring and meteorological observation data collection module, and collect the environmental monitoring and meteorological observation data in real time through the connected standby KRS system communication link;

5.3 Start the standby simulator data acquisition module, and collect the simulator data in real time through the connected simulator system communication link;

6. Start the backup off-site data transmission module, and transmit key safety data off-site in real time through the connected backup off-site data communication link;

7. Start the backup emergency command software platform;

8. Start the backup emergency expert software platform;

9. The backup emergency command system has been activated.

Example 3 Method for fast switching of emergency command of nuclear power plant from standby to main

As shown in Figure 2, based on the active-standby architecture in Embodiment 1, this embodiment provides a method for quickly switching the emergency command of a nuclear power plant from standby to active, which mainly includes the following steps:

1. The main emergency command system is restored as a whole, and the nuclear power plant issues a system switching command;

2. Record the switching time point T1;

3. Start the relevant modules of the main emergency command system;

4. The main and standby communication control modules are switched to the standby mode, and the sub-steps are as follows:

4.1 The KNS communication control module is switched to the main mode, the communication link of the standby KNS system is disconnected, and the main link is connected;

4.2 The KRS communication control module is switched to the main mode, the communication link of the standby KRS system is disconnected, and the main link is connected;

4.3 The communication control module of the simulator is switched to the main mode, the communication link of the backup simulator system is disconnected, and the main link is connected;

4.4 The off-site communication control module is switched to the main mode, the standby off-site communication link is disconnected, and the main link is connected;

5. The emergency data supplementary registration module supplements the (T0, T1) time period data in the standby emergency database to the main emergency command system;

6. The switching of the main emergency command system is completed.

The main-standby structure and fast switching method of the nuclear power plant emergency command system in the present invention mainly have the following advantages:

1) The standby emergency command system described in the present invention is independently arranged in the standby emergency facility, and can operate independently of the main emergency command system, and its operation is not affected by the state of the emergency command center and the main emergency command system;

2) The switching method based on the main-standby architecture in the present invention is fast and convenient, and the system switching can be completed in a relatively short time (0.5 hours), which ensures the continuous and effective emergency response command capability of the nuclear power plant;

The present invention effectively solves the problem of key data loss during system switching, and the emergency data registration module realizes data registration during the switching process, ensuring the integrity and consistency of key data.

The above-mentioned embodiments are only intended to illustrate the technical concept and characteristics of the present invention, and the purpose is to enable those who are familiar with the art to understand the content of the present invention and implement accordingly, and cannot limit the protection scope of the present invention by this. All equivalent changes or modifications made according to the spirit of the present invention should be included within the protection scope of the present invention.

Claims (10)

1. A nuclear power plant standby emergency command system, comprising:

a backup communication link for transmitting data;

the master-slave communication control module is used for switching the master-slave mode of communication;

the standby field data acquisition module is used for acquiring unit working condition data, environment monitoring data, meteorological observation data and simulator data;

the standby emergency database is used for storing emergency service data and data acquired by the data acquisition module in the standby field;

the standby off-site data transmission module is used for transmitting the data in the standby emergency database to the off-site through the standby communication link;

the standby emergency command software platform is used for managing and sharing data in the standby emergency database, and performing state monitoring early warning and emergency command;

a standby emergency expert software platform for evaluating the impact caused by the accident;

and the emergency data registration module is used for registering the data of the standby emergency command system in the operation period to the main emergency command system after the main emergency command system is recovered.

2. The nuclear plant standby emergency command system of claim 1, wherein the standby communication link comprises:

the standby KNS system communication link is used for transmitting the unit working condition data under the standby condition, the number of the links is n, and n is the actual number of the KNS systems;

a standby KRS system communication link for transmitting environmental monitoring and meteorological observation data in a standby condition, wherein the number of the links is 1;

the standby simulator system communication link is used for transmitting simulator working condition data under a standby condition, the number of the links is m, and m is the actual number of the simulators;

a backup off-board data communication link for communicating critical security data off-board in a backup situation.

3. The nuclear power plant standby emergency command system of claim 1, wherein the active-standby communication control module comprises:

the KNS communication control module is used for switching the main and standby modes of the KNS communication;

the KRS communication control module is used for switching the master/standby mode of KRS communication;

the simulator communication control module is used for switching the master and standby modes of simulator communication;

and the off-board communication control module is used for switching the main and standby modes of off-board communication.

4. The nuclear plant standby emergency command system of claim 2, wherein the standby onsite data acquisition module comprises:

the standby unit working condition data receiving module is used for receiving unit working condition data sent by an upstream KNS system in real time through a standby KNS system communication link;

the standby environment monitoring and meteorological observation data acquisition module is used for acquiring environment monitoring and meteorological observation data in real time through a standby KRS system communication link;

and the standby simulator data acquisition module is used for acquiring simulator data in real time through a simulator system communication link.

5. The nuclear plant standby emergency command system of claim 1, wherein the standby emergency expert software platform comprises:

the spare core damage evaluation module is used for analyzing and evaluating the damage state of the core under the accident condition;

the standby source item analyzing and calculating module is used for analyzing and calculating the release source items of the radioactive substances in the accident situation;

the standby accident consequence evaluation module is used for simulating and predicting the space and time distribution characteristics of the radioactive substances in the surrounding environment and the dose influence on the public;

and the standby operation intervention level assistant decision-making module is used for analyzing and giving out an off-site public protection action suggestion by combining the environment measurement data based on the operation intervention level.

6. A method for switching a nuclear power plant emergency command system from a main mode to a standby mode is characterized by comprising the following steps: the nuclear power plant sends a system switching instruction; recording a switching time point T0; starting a standby emergency database; switching the main and standby communication control modules to a standby mode: starting a data acquisition module in the standby field; starting a standby off-site data transmission module, and transmitting data to the off-site in real time through an accessed standby off-site data communication link; starting a standby emergency command software platform and a standby emergency expert software platform; and finishing the starting of the standby emergency command system.

7. The method for switching the nuclear power plant emergency command system from active mode to standby mode according to claim 6, wherein the switching of the active/standby communication control module to the standby mode includes the following steps: the KNS communication control module is switched to a standby mode, the main KNS system communication link is disconnected, and the standby KNS system communication link is accessed; the KRS communication control module is switched to a standby mode, the communication link of the main KRS system is disconnected, and the communication link of the standby KRS system is accessed; the simulator communication control module is switched to a standby mode, the main simulator system communication link is disconnected, and the standby simulator communication link is accessed; and the off-site communication control module is switched to a standby mode, the main off-site communication link is disconnected, and the standby off-site data communication link is accessed.

8. The method for switching from active to standby of an emergency command system of a nuclear power plant according to claim 6, wherein the activating the data collection module in the standby field comprises the steps of: starting a standby unit working condition data receiving module, and receiving unit working condition data sent by an upstream in real time through an accessed standby KNS system communication link; starting a standby environment monitoring and meteorological observation data acquisition module, and acquiring environment monitoring and meteorological observation data in real time through an accessed standby KRS system communication link; and starting a standby simulator data acquisition module, and acquiring simulator data in real time through the accessed simulator system communication link.

9. A method for switching a nuclear power plant emergency command system from standby to primary is characterized by comprising the following steps: the nuclear power plant sends a system switching instruction; recording a switching time point T1; starting a related module of the main emergency command system; switching the main and standby communication control modules to a main mode; the emergency data registration module is used for registering data in a standby emergency database in a time period of T0-T1 to the main emergency command system; the switching of the main emergency command system is completed; and T0 is the time point of switching the nuclear power plant emergency command system from the main mode to the standby mode.

10. The method for switching the emergency command system of the nuclear power plant from the standby mode to the active mode according to claim 9, wherein the switching of the active/standby communication control module to the active mode comprises the following steps: the KNS communication control module is switched to a main mode, a standby KNS system communication link is disconnected, and a KNS system communication main link is accessed; the KRS communication control module is switched to a main mode, a standby KRS system communication link is disconnected, and a KRS system communication main link is accessed; the communication control module of the simulator is switched to a main mode, the communication link of the standby simulator system is disconnected, and the main link of the simulator system is accessed; and the off-site communication control module is switched to a main mode, the standby off-site communication link is disconnected, and the off-site communication main link is accessed.

Images