JP2010039714A - Valve controller of petrochemical plant - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a valve controller of a petrochemical plant capable of monitoring the control state of a valve while quickly and appropriately controlling the valve and of outputting information required for external equipment while accommodated in an explosion proof structure. <P>SOLUTION: In this valve controller, a control part 20 which feedback-controls the opening of the valve based on a valve opening value input from an opening sensor and a valve control instruction value input from a main controller, and a display part 40 which comprises storage parts 44, 46 storing control information by the control part 20 and an optical communication interface 43 are accommodated in the explosion proof structure. The display part 40 outputs the control information to an information collecting device 70 through the optical communication interface while constituted so that the control information obtained via a shared memory CM connected to the control part 20 by LAN is stored in the storage part and accommodated in the explosion proof structure. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a valve control device for controlling a valve incorporated in a petrochemical plant such as an FCC device or an RFCC device for petroleum refining.

  In a petrochemical plant, there is a risk of an explosion or the like due to an error in the control of the controlled fluid, and once the operation is stopped due to an abnormality in the equipment, it takes time to check the equipment to resume the operation. High reliability is required for the valves and valve control devices used.

  Usually, in preparation for leakage of flammable gas or the like, a valve control device that may generate a spark is housed in an explosion-proof structure.

  Patent Document 1 has an electric motor driving body for controlling a valve and an electronic control unit for controlling the operation of an actuator included in the housing, and for remotely operating the electronic control unit from outside the housing by electronic setting means. An interface port is provided through a housing proximate to the electronic control unit, and an electronic setting means is applied for transmitting a coded signal for setting the electronic control unit via the interface port, and setting the actuator Has been proposed that can be implemented without physical access to the housing.

According to Patent Document 1, for example, by performing infrared communication through an interface port, the electronic control unit and the external electronic setting means can communicate with each other while maintaining an explosion-proof structure by the housing. .
Japanese Patent Publication No.7-111653

  Usually, a microcomputer is incorporated in the valve control device. When controlling a valve at high speed via a hydraulic servo mechanism in order to control a large valve, the microcomputer controls a plurality of control commands from the main controller, and oil pressure, oil temperature, valve opening, etc. Based on the sensor input, a predetermined control calculation is executed, and as a result, it is detected whether the operating state of each load is appropriate while properly controlling the oil pump, servo valve, etc. It is necessary to repeatedly execute a plurality of jobs such as prompt notification if there are, at a predetermined control cycle.

  For such a valve control device, the control state of the device is confirmed at the time of failure or maintenance of the device, and the control state of the device is stored in the valve control device in order to perform appropriate repair based on the result. It is considered that a memory is provided and the contents are read from an external device.

  At that time, it is preferable to install an optical communication interface such as an infrared communication interface in order to connect an external device in a state where the valve control device is housed in the explosion-proof structure, but such complicated processing is executed. If the microcomputer is further burdened with infrared communication processing, the control cycle becomes longer, and it is difficult to quickly control the valve to the target opening.

  The present invention has been made in view of the above-described conventional problems. While controlling a valve quickly and appropriately, the control state is monitored and the external device is accommodated in an explosion-proof structure. An object of the present invention is to provide a valve control device of a petrochemical plant capable of outputting necessary information.

  In order to achieve the above-mentioned object, the first characteristic configuration of the valve control device of the petrochemical plant according to the present invention is an opening degree for detecting the opening degree of the valve as described in claim 1 of the claims. Based on the valve opening value input from the sensor and the control command value of the valve input from the main controller, a control unit that controls the hydraulic mechanism and feedback-controls the valve opening, and the control unit An optical communication interface that can be connected to an information collecting device for storing control information stored in the explosion-proof structure and reading the control information stored in the storage unit in the state of being accommodated in the explosion-proof structure. There is in point.

  According to the above configuration, the control information stored in the storage unit can be read into the information collection device via the optical communication interface without passing through the control unit in a safe state in which the explosion-proof state of the valve control unit is maintained. It becomes like this.

  According to the second feature configuration, in addition to the first feature configuration described above, a first storage area that stores the control information in a ring buffer format in the storage unit, and the control A first storage element having a second storage area for storing control information for a predetermined time immediately before the occurrence of the alarm information stored in the first storage area when the alarm information is included in the information; There is in point.

  Since it is unknown when the information collecting apparatus is connected, it is necessary to mount a memory having a sufficient storage capacity in order to store the control information in preparation for it. However, increasing the capacity increases the cost. Therefore, by writing control information in the first buffer area in the form of a ring buffer and providing the second memory area with a first memory element that stores control information for a predetermined time immediately before the occurrence of alarm information, at least the ring buffer It is possible to output the latest control information until overwriting and the control information that contributes to the estimation of the cause of the alarm information generation to the information collecting apparatus.

  In the third feature configuration, as described in claim 3, in addition to the second feature configuration described above, the storage unit has a storage capacity larger than that of the first storage element. It is in the point provided with the detachable 2nd memory element in which the control information stored in the 1st memory area is memorized cumulatively.

  According to the above-described configuration, control information over the past is cumulatively stored in the second storage element. Further, for example, by storing the control information at a cycle longer than the storage cycle of the control information in the first storage element, it becomes possible to store control information for a longer period.

  In the fourth feature configuration, as described in claim 4, in addition to any of the first to third feature configurations described above, the storage unit and the light are displayed on the display unit that displays the control state of the valve. A communication interface, a shared memory connected to each of the display unit and the control unit via a LAN, the display unit storing the control information acquired via the shared memory in the storage unit, and the optical unit The control information is output to the information collecting apparatus via a communication interface.

  The valve control device is functionally separated into a control unit that controls the opening degree of the valve and a display unit that displays a control state of the valve by the control unit, and a shared memory provided in each of the display unit and the control unit is a LAN (for example, , CUnet (real-time distributed processing network)) connection enables data sharing. The control unit realizes a valve opening control function, and the display unit realizes a monitor display of control information and a control information output function to the information collection device. At this time, the control information grasped by the control unit is transmitted to the display unit via the shared memory, and the control information grasped by the display unit is transmitted to the control unit via the shared memory. The control information acquired by the display unit via the shared memory is stored in the storage unit, and is output to the information collection device via the optical communication interface. In other words, by separating the functions of the control unit and the control unit and reducing the load on the control unit, it is possible to control the valve quickly and appropriately at a predetermined cycle, and the display unit performs display control independent of the valve control cycle. Alternatively, the control information can be output to the information collecting device.

  In the fifth feature configuration, in addition to the fourth feature configuration described above, the display unit is configured to display control parameters transmitted from the information collection device via the optical communication interface. The information is distributed to the control unit via the shared memory, and the control unit feedback-controls the opening degree of the valve based on a control parameter obtained via the shared memory.

  According to the above-described configuration, the control unit can input a control parameter necessary for controlling the valve or detecting an abnormality from the information collecting apparatus. Control parameters input from the information collection device to the display unit are distributed to the control unit via the shared memory. In other words, when the display unit stores the control parameter in its own shared memory, the control unit is copied to its own shared memory because the control parameter is copied to the shared memory of the control unit via the LAN (for example, CUnet). Control parameters can be captured.

  As described above, according to the present invention, while controlling a valve quickly and appropriately, it is possible to monitor the control state and output necessary information to an external device while being accommodated in an explosion-proof structure. It has become possible to provide a valve control device for a possible petrochemical plant.

  Below, the valve control apparatus built in the FCC apparatus and RFCC apparatus for petroleum refining which are examples of a petrochemical plant is demonstrated. As shown in FIG. 1, a valve control device 1 is incorporated in a hydraulic unit U arranged in the vicinity of a valve V incorporated in a plant, and is a target opening degree with respect to the valve V inputted from a plant main control device CT. Based on the signal and the opening signal of the valve detected by the opening sensor S, the hydraulic mechanism VD is controlled to adjust the opening of the valve V, and the position signal indicating the opening state of the valve V to the main controller CT Is a control device that outputs.

  As shown in FIG. 2, the hydraulic unit U includes a hydraulic mechanism VD including a hydraulic pump, an accumulator, a servo valve for hydraulic control as an actuator, an explosion-proof casing C in which the control device 1 is accommodated, a casing An air unit AU for press-fitting explosion-proof air into C is provided.

  The control device 1 feedback-controls the opening degree of the valve V by controlling the hydraulic mechanism based on the valve opening degree value inputted from the opening degree sensor S and the control command value of the valve V inputted from the main controller CT. Control units 20 and 30, a storage unit that stores control information from the control units 20 and 30, and a display unit 40 that displays the control state of the valve V on the liquid crystal display panel based on the control information stored in the storage unit. ing.

  A transparent glass is disposed on the door of the casing C, and the screen of the liquid crystal display panel provided in the internal control device 1 is configured to be recognized from the outside. A plurality of explosion-proof switches SW1, SW2, SW3 are attached to the door.

  The switch SW1 is a rotary multi-contact switch or a push button switch, and the display screen of the liquid crystal display panel can be switched by rotating or pressing the switch SW1 while maintaining the explosion-proof state of the casing C. It is possible.

  Further, the switch SW2 is a push button type switch that serves as a control mode switching operation unit according to the present invention. By operating the switch SW2, the control device 1 can perform the local control mode and the remote control while maintaining the explosion-proof state of the casing C. Switch to mode.

  Further, the switch SW3 is a dial switch with a built-in variable resistor, which is a manual operation unit according to the present invention. By rotating the switch SW3 in the local control mode, the casing C is kept in an explosion-proof state, and the valve V The opening can be manually controlled.

  The control device 1 controls the valve opening value input from the opening sensor S that detects the opening of the valve V, the control command value of the valve V input from the main control device CT or the manual operation unit SW3, that is, the target opening. A control value for a servo valve that drives the valve V is calculated based on the degree signal, and a plurality of control units are provided for feedback control of the opening degree of the valve V based on the calculated control value.

  As shown in FIG. 3, the valve V to be controlled is a slide valve V that adjusts the flow path P to a predetermined opening according to the operation state of the plant, and is driven by pressure oil supplied via a servo valve. The valve body V1 is slid and driven through a valve rod V2 connected to the piston of the hydraulic cylinder SL. A pair of magnetostrictive opening sensors S (S1, S2) are incorporated between the piston and the valve stem V2 via a coupling, and the output of the opening sensor S is input to the control device 1. The valve V to be controlled is not limited to the slide valve V, and the same applies to other valves such as a plug valve and a butterfly valve.

  The magnetostrictive opening sensor S is a position of the magnet, that is, the position of the valve V, by measuring the propagation time of torsional strain generated by the magnet that moves in a non-contact manner on the sensor rod as the piston moves forward and backward. It is a sensor that measures the opening.

  As shown in FIG. 4, the control device 1 includes two control unit substrates 2 and 3, a display unit substrate 4, a terminal substrate 5, and the like, and each is connected by a single or a plurality of connectors. Two control units 20 and 30 according to the present invention are constituted by the two control unit substrates 2 and 3, respectively, and a display unit 40 is constituted by the display unit substrate 4.

  Various signals are inputted to and outputted from the main control device CT and the valve drive mechanism that is a control target in the control unit substrates 2 and 3 and the display unit substrate 4 via the terminal substrate 5.

  Specifically, the control command value of the valve V is input from the main control device CT to the control units 20 and 30 via the terminal board 5, and the position signal of the valve V is transmitted from the control units 20 and 30 to the main control device CT. Is output. Further, the valve opening values from the pair of opening sensors S are input via the terminal board 5, and control signals are output from the control units 20 and 30 to the servo valves.

  Further, the output of the switch SW2 as the control mode switching operation unit and the control command value from the switch SW3 as the manual operation unit are input to the control unit substrates 2 and 3 via the terminal substrate 5, and the output of the switch SW1. Is directly input to the display unit substrate 4.

  As shown in FIG. 6, each of the pair of control units 20 and 30 and the display unit 40 includes a CPU, a ROM that stores a control program executed by the CPU, and a RAM that is used as a working area. A microcomputer and peripheral circuits are mounted, and the control program is executed by the CPU, thereby realizing an intended valve control function and the like.

  Each of the control units 20 and 30 and the display unit 40 is provided with a shared memory CM that functions as a communication bus and is connected via a local network such as CUnet (registered trademark of Step Technica Co., Ltd.). Control information, control parameters, display data, and the like by 30 are shared via the shared memory CM.

  Each shared memory CM is divided into an area where the control information can be read and written by itself and an area where the writing of the control information is prohibited and the control information written by another control unit or the display unit can be read out via the local network. Predetermined cycle, for example, 10 msec. Information written in each shared memory in a cycle is copied to a corresponding area in another shared memory.

  That is, control information written in the writing area of the shared memory CM provided by the CPU of each of the control units 20 and 30 and the display unit 40 is copied to the reading area of each shared memory CM via the local network. Thus, it is configured such that communication of control information and the like can be performed without using the CPU.

  A color liquid crystal display unit 45 is incorporated in the display unit substrate 4, and the control state of the valve as shown in FIG. The monitor screen is displayed.

  The display unit board 4 is equipped with a battery backed-up several Mbytes of SRAM 44 as a first storage element, and control information by the control units 20 and 30 obtained via the shared memory CM is stored in a ring buffer format. It is comprised so that.

  More specifically, the SRAM 44 has a first storage area for storing the control information in a ring buffer format, and when the control information includes alarm information, the SRAM 44 stores the predetermined information immediately before the occurrence of the alarm information stored in the first storage area. A second storage area is provided for storing time control information until it is output to the information collecting apparatus via at least the optical communication interface.

  Furthermore, the SD memory 46 having several Gbytes (for example, 2 Gbytes) as a removable second storage element having a storage capacity larger than that of the SRAM 44 and cumulatively storing control information stored in the first storage area of the SRAM 44 is provided. I have.

  The control information includes a control command value of the valve V input from the main controller CT, a valve opening value input from the opening sensor S, a control value for the servo valve, a thrust pressing pressure for the valve, and a thrust pulling pressure. , Measurement data such as pump pressure, accumulator pressure, oil temperature, oil liquid level, pump motor current, abnormality data detected as a result of self-diagnosis by the control units 20 and 30 based on these measurement data, control described later Abnormal data such as runaway of the sections 20 and 30 and cumulative operating data such as a cumulative working distance or a cumulative working time of a hydraulic cylinder or the like that drives the valve are included.

  In addition, the display unit substrate 4 communicates with a personal computer located at a remote place via a LAN, and transmits a control state displayed on the color liquid crystal display unit 45 to the personal computer. 42, an infrared interface 43 capable of communicating with a personal computer as an information collecting device in a state where the door of the explosion-proof casing C is closed without opening the door.

  When the display unit 40 writes various control parameters for initial setting input from the information collecting device via the infrared interface 43 to its own shared memory CM, the display unit 40 is distributed via the local network, and each control unit 20, The control parameter is copied to 30 shared memories CM.

  In the control parameter, a control right parameter that sets which of the two control units 20 and 30 has an initial control right, and a sensor selection that sets which of the doubled opening sensors S is initially selected Parameter, signal level with respect to the control command value of the valve V input from the main controller CT to the control units 20 and 30 (for example, current specifications that define the opening degree 0% to opening degree 100% from 4 mA to 20 mA, Voltage specification specified from 0V to 10V), signal level of the opening signal input from the opening sensor S, signal level and upper / lower limit values of thrust pressure of the hydraulic cylinder, output signal level to the servo valve, main controller CT The predetermined control parameters required for operating the system, such as the signal level of the position signal output to the control unit, the abnormality determination reference value of the opening sensor C detected by the control units 20 and 30, and the like. Data are included.

  As shown in FIG. 6, a control command value from the main control unit CT is input to the microcomputers 21 and 31 via the input signal processing units 26 and 36 in each of the control units 20 and 30, and the opening signal The output signals of the pair of opening sensors S1 and S2 are input to the microcomputers 21 and 31 via the processing units 22 and 32, respectively.

  The input signal processing units 26 and 36 and the opening degree signal processing units 22 and 32 include an isolation amplifier that electrically separates signals and an A / D converter that converts an analog output signal of the isolation amplifier into a digital signal. ing.

  In addition, the control values for the servo valves SV output from the microcomputers 21 and 31 are output to the control valves 20 and 30 to the servo valves SV via the servo output sections 23 and 33, respectively. The output position of the valve V to the main controller CT that has been output is configured to be output via the position signal output units 24 and 34.

  The servo output units 23 and 33 include a D / A converter that converts digital control value information into an analog signal, and a driver circuit that amplifies the output. The position signal output units 24 and 34 include an isolation circuit that electrically separates digital opening position information, and a D / A converter that converts the output of the isolation circuit into an analog signal.

  Each of the control units 20 and 30 includes a remote control mode for driving and controlling the valve V based on a control command value input from the remotely installed main control device CT by operating a switch SW2 as a control mode switching operation unit, The control mode can be switched to any one of the local control modes for driving and controlling the valve V based on a control command value input from a manual operation unit (switch SW3) installed in the vicinity.

  The control unit (in this case, the control unit 20) to which the control right is set based on the control parameters described above is the valve opening degree input from the opening degree sensors S1 and S2 in any control mode. Based on the valve opening value and the control command value of the opening sensor selected by the sensor selection parameter among the values, a digital PID calculation is performed to calculate a control value for the valve V, and an electromagnetic type is calculated based on the calculated control value. A control signal is output to the servo valve SV.

  Similarly, the standby control unit (in this case, the control unit 30) that does not have the control right also includes a sensor selection parameter of any one of the valve opening values input from the opening sensors S1 and S2. Based on the valve opening value of the opening sensor selected in step 1 and the control command value input from the main controller CT or the switch SW3, a digital PID calculation is performed to calculate a control value for the valve V, and the calculated control value Based on the control signal, a control signal is output to the servo valve SV.

  Then, each control part 20 and 30 selects the valve opening value from any one opening sensor based on the predetermined priority setting conditions set to each opening sensor S1, S2, Calculate the control value.

  Predetermined priority setting conditions include, in addition to the sensor selection parameters described above, whether or not a feedback loss occurs in which the valve opening value does not converge to a predetermined range corresponding to a control signal based on the control command value for a predetermined time. The occurrence of a reverse DEV value in which the state in which the deviation between the control command value and the valve opening value changes in the increasing direction continues for a predetermined time period. The feedback loss is an abnormality due to deterioration of the opening sensor, and the reverse DEV value is an abnormality due to incorrect wiring. These are detected by a signal determination unit 260 (see FIG. 7) described later.

  When each of the control units 20 and 30 determines that a feedback loss or a reverse DEV value has occurred in the opening sensor S selected by the sensor selection parameter, it switches to the other opening sensor S and opens the currently selected opening sensor S. The degree sensor information, the abnormality information of the opening sensor in which an abnormality has occurred, and the like are stored in its own shared memory CM.

  Information stored in each shared memory CM is written to the shared memory of the display unit 40 via the local network, and the display unit 40 monitors the color liquid crystal display unit 45 based on the contents of its own shared memory CM. The information is displayed and stored in the SRAM 44 and the SD memory 46.

  Further, for each opening sensor S, when the deviation of the DEV value, which is the deviation between the control command value and the valve opening value, exceeds the abnormality determination threshold, the opening sensor S is provided in the control device 1 without switching. Activate the alarm to sound.

  Note that various abnormality determination thresholds (signal level threshold, duration, etc.) for the opening sensor S and the like are set in advance by the personal computer 70 for maintenance and stored in each shared memory CM.

  When the control mode switching operation unit SW2 is switched, the control units 20 and 30 have a deviation between the control command value input from the manual operation unit SW3 and the control command value input from the main controller CT. Are provided with control mode switching control units 21a and 31a for determining whether or not to switch the control mode.

  When the control mode switching operation unit SW2 is operated in the remote control mode in which the valve V is controlled based on the control command value input from the main controller CT, the control mode switching control units 21a and 31a are manually operated. When the deviation between the control command value input from the unit SW3 and the control command value input from the main controller CT is within a predetermined range, preferably approximately equal, the control mode by the control units 20 and 30 is controlled locally. Switch to mode.

  When the control mode switching operation unit SW2 is operated in the local control mode in which the valve V is controlled based on the control command value input from the manual operation unit SW3, the control mode switching control units 21a and 31a are When the deviation between the control command value input from the main controller CT and the control command value input from the manual operation unit SW3 is within a predetermined range, preferably approximately equal, the control mode by the control units 20 and 30 is changed. Switch to remote control mode.

  Further, on the display unit 40, the manual operation unit SW3 is operated so that the deviation between the control command value input from the manual operation unit SW3 and the control command value input from the main controller CT converges within a predetermined range. The guidance display part 41a which guides so that it may do is provided.

  The guidance display unit 41a has a predetermined range of deviation between the control command value input from the manual operation unit SW3 and the control command value input from the main controller CT when the control mode switching operation unit SW2 is switched. When it is larger, a message prompting the manual operation is displayed on the display screen of the color liquid crystal display unit 45 so as to change the control command value input from the manual operation unit SW3 so that the deviation converges to a predetermined range. .

  When the control command value input from the manual operation unit SW3 is changed by a manual operation, the control mode switching control units 21a and 31a become substantially the same value as the control command value input from the main controller CT at that time. Alternatively, the control mode is switched when the control command value input from the main controller CT becomes substantially equal to the control command value input from the manual operation unit SW3.

  If the control mode is switched when the deviation between the control command value input from the manual operation unit SW3 and the control command value input from the main controller CT is large, there is a possibility that an appropriate plant operating state cannot be secured. Therefore, the control mode is switched on condition that the deviation converges to a predetermined range.

  For example, the operator operates the manual operation unit SW3 to set the control command value to a value close to the control command value input from the main controller CT, thereby maintaining an appropriate plant operating state. The control mode can be switched. Note that the predetermined range, which is the deviation convergence condition, is a value that is appropriately set depending on the target plant, and is not particularly limited.

  More specifically, as shown in FIG. 8, when each control unit 20, 30 detects an operation input from the control mode switching operation unit SW2 (S1), the control command value input from the manual operation unit SW3 at that time And a control command value input from the main control unit CT, and when it is determined that the deviation is larger than a predetermined range (S2), the control mode is switched to its own shared memory CM while maintaining the control mode. The request message display request data is written (S3).

  When the display unit 40 detects the display request data of the guidance message copied to its own shared memory CM, the display unit 40 displays a guidance message for prompting the operation of the manual operation unit SW3 on the display screen of the color liquid crystal display unit 45 (S4). The guidance message includes an operation direction instruction of the manual operation unit SW3 indicating whether to increase or decrease the opening of the valve.

  The screen is input from the control mode display unit for identifying whether the current control mode is the local control mode or the remote control mode, the control command value input from the manual operation unit SW3, and the main control unit CT. The deviation from the control command value is displayed together with the guidance message.

  When the manual operation unit SW3 is operated by an operator who visually confirms the guidance message and the deviation and the deviation converges within a predetermined range, the display request data of the guidance message is deleted by the control units 20 and 30 (S2). At that time, the remote control mode is switched to the local control mode (S5, S6), or the local control mode is switched to the remote control mode (S5, S7).

  In the above flow, when the deviation between the control command value input from the manual operation unit SW3 and the control command value input from the main controller CT is larger than a predetermined range, the deviation is caused by the operation of the manual operation unit SW3. Although an example of convergence to the predetermined range has been described, the deviation may converge to the predetermined range due to a change in the control command value input from the main controller CT. In particular, when switching from the local control mode to the remote control mode is performed, the main control unit CT is configured to actively change the control command value by transmitting information to that effect to the main control unit CT. Is also possible. The main controller CT may be configured to output a control command value corresponding to the opening information of the valve 1 when the mode switching operation information is received.

  As shown in FIG. 7, the control unit 20 includes a relay circuit for switching whether or not to connect a control signal output to the servo valve to the servo valve SV, and a position signal signal output to the main control unit CT. Is provided with a switch circuit 250 (250a, 250b) that is a relay circuit for switching whether or not to connect the signal line to the signal line to the main control unit CT. The switch circuit 250 (250a, 250b) is turned off when it does not have the control right. The control unit 30 is similarly configured.

  Therefore, the drive current for the servo valve SV is output only from the control unit (20 or 30) having the control right, and the position signal of the valve V is output to the main control unit CT, so that no signal interference occurs. It is configured as follows.

  When an abnormality occurs in the control unit (20 or 30) having the control right, a control right transfer signal is output to the standby control unit (30 or 20), and the standby control unit (30 or 20) When the delivery signal is detected, the switch circuit 250 is turned on to continue the control of the valve.

  Hereinafter, the transfer of the control right will be described in detail by taking the control unit 20 in the remote control mode as an example, but the same applies to the local control mode, and the control unit 30 is also the same. The control unit 20 includes a plurality of abnormality detection units that detect its own abnormality. If the abnormality detection unit detects an abnormality of itself when it has the control right, the switch circuit 250 is turned off so as to cut off its control signal, and the control right is transferred to the other control unit 30 It is configured to output a signal. Further, at that time, the alarm unit provided in the control device 1 is activated to sound.

  As shown in FIG. 7, a hardware watchdog circuit 220 and software watchdog timer 210 are provided as an abnormality detection unit.

  The watchdog circuit 220 is reset by a watchdog pulse (hereinafter referred to as “WD pulse”) input at a predetermined cycle from the microcomputer 21 and outputs an abnormal signal when the counter circuit exceeds a predetermined value. If a malfunction such as runaway occurs in the CPU of the microcomputer 21 for some reason and the state where no WD pulse is input continues for a predetermined time, the counter circuit becomes larger than the predetermined value and an abnormal signal is output. The

  The watchdog timer 210 includes firmware having a counter that is automatically counted by an internal timer of the microcomputer 21 and a program that resets the value of the counter by software, and resetting by a program is performed for a predetermined time due to a runaway of the CPU or the like If not, an abnormal signal (a signal described as “overflow” in the figure) is output by the firmware.

  When an abnormal signal is input from either the watchdog circuit 220 or the watchdog timer 210, a watchdog error circuit 230 having a latch circuit that retains the state is provided. A control right delivery signal (in the figure, a signal described as “control CPU abnormality / normal”, which is a high level when normal and a low level when abnormality) is output.

  In FIG. 7, a signal described as “other control CPU abnormality / normal” is input to the microcomputer 21, and this signal is a signal from a watchdog error circuit provided in the other control unit 30.

  The switch circuit 250 described above is controlled by an output switching circuit 240 having an AND gate. That is, the switch circuit 250 is turned on when the high-level control switching signal output from the microcomputer 21 having the control right and the high-level control right delivery signal output from the watchdog error circuit 230 are input. When the control signal and the position signal are output and at least one of the control switching signal and the control right delivery signal is at a low level, the switch circuit 250 is turned off. Accordingly, the switch circuit 250 is turned off by the low-level control switching signal output from the waiting microcomputer 21 having no control right.

  Therefore, regardless of the output state of the own control signal, the abnormal signal output from either the watchdog circuit 220 or the watchdog timer 210 blocks the own control signal and the position signal, and the abnormal signal is controlled. It is output to another control unit 30 as a delivery signal.

  Further, as the abnormality detection unit, a signal determination unit 260 that is a functional block for detecting any abnormality of the opening sensor S, the servo valve SV, and the control command value based on a control program executed by the CPU is provided. .

  The signal discriminating unit 260 includes an opening value of the valve V input from the opening sensor S, a control command value input from the main controller CT, a current value for the servo valve SV output based on the result of the PID calculation, For each of the position signals of the valve V output to the main controller CT, it is determined that there is an abnormality when a state exceeding any of the upper and lower limit abnormality determination thresholds stored in the shared memory CM continues for a predetermined time. The result is stored in the shared memory CM. The current value is configured such that the output value from the servo output unit 23 is monitored by the current detection unit shown in FIG.

  When any of the above-described abnormalities is detected by the signal discriminating unit 260, the CPU abnormal signal output at a high level from the microcomputer 21 at the normal time is switched to the low level, and the low-level CPU abnormal signal is changed to the watchdog error circuit 230. The control right delivery signal latched at the low level by the watchdog error circuit 230 is output to the waiting control unit 30. Note that when the CPU abnormality signal is switched to the low level, the operation of the watchdog circuit 220 is stopped.

  That is, when any abnormality is detected by the signal discriminating unit 260, the abnormality signal is output to block the own control signal and the position signal regardless of the output state of the own control signal and the position signal. Is output to another control unit as a control right delivery signal.

  In addition, an excessive difference between the control units 20 and 30 in the valve opening value and the control value based on each valve opening value based on the control information such as the valve opening value and the control value stored in the shared memory CM. When it is determined that there is a possibility that an error has occurred in one of the redundantly designed systems, control is continued, that is, an alarm is issued from the alarm unit without handing over the control right. Output to notify that there is a need for maintenance.

  When the above-described watchdog circuit 220, watchdog timer 210, watchdog error circuit 230 and their input / output signal ports assigned to the microcomputer 21 receive abnormal signals from the control units 20 and 30 having the control right. Control right acquisition circuits 25 and 35 for outputting a control right transfer signal to the other control units 30 and 20 are configured.

  When a low-level control right delivery signal (“other control CPU abnormality / normal” signal in FIG. 7) is input from the control right acquisition circuit 35 of the control unit 30 having the control right to the standby control unit 20, The control right is handed over to the control unit 20. The control unit 20 switches the control switching signal for the output switching circuit 240 from the low level to the high level, turns on the switch circuit 250, and continues the control on the valve V.

  As described above, not only the control unit having the control right but also the backup control unit not having the control right is input from the valve opening value input from the opening degree sensor and the main controller or the switch SW3. The control value of the actuator that drives the valve is calculated based on the control command value, and the control signal is output to the actuator based on the calculated control value. Therefore, even when the control right is switched, there is no response delay immediately. It becomes possible to continue control appropriately.

  Even when the abnormality is detected by the signal determination unit 260 of the control unit 20 having the control right and it is necessary to hand over the control right to the standby control unit 30, the signal determination unit 260 of the standby control unit 30 is required. If it is recognized based on the control information stored in the shared memory CM that the same abnormality is detected by the control signal, the servo current is determined so that the valve V is closed without determining the control right and handing over the control right. Perform a fail-safe operation that sets the value to zero.

  Further, even when an abnormality is detected by the signal determination unit 260 of the control unit 20 having the control right and the control right needs to be handed over to the control unit 30 that is on standby, it is input from the control unit 30 on standby. If the control right delivery signal is at a low level, that is, it can be determined that some abnormality has occurred, it is determined that the control is impossible, and the servo current value is set so that the valve V is closed without handing over the control right. Perform a fail-safe operation that sets to zero.

  Further, the signal determination unit 260 not only detects the abnormality for the above-mentioned control right delivery, but also the pressure of the pump constituting the hydraulic mechanism VD, the pressure of the accumulator, the ESD hydraulic pressure, the hydraulic fluid level, the thrust push of the hydraulic cylinder SL. Whether or not an abnormality has occurred in the pressure or the pulling pressure (detected by the pressure sensor) is determined based on the abnormality determination threshold or the determination time included in the control parameter stored in advance in the shared memory CM. The alarm unit is configured to operate when it is determined.

  Various information such as which control unit has acquired the control right, which opening sensor is selected for control, valve control state, various abnormal states described above, etc. It is displayed on the color liquid crystal display unit 45 provided in the display unit 40 via the shared memory CM, or displayed on the screen of the personal computer PC connected via the communication interface 42.

  Each of the control units 20 and 30 reads a control command value, an opening value from the opening sensor S, a PID control calculation process, and controls a servo valve at a preset control cycle (for example, 10 msec. Cycle). A series of processing such as output processing of signals and position signals, abnormality detection processing, and the like are repeatedly executed, and the result is stored in its own shared memory CM.

  By the local network connecting the shared memories CM, mutual data is read and written in substantially the same cycle as the above-described control cycle, and the data is shared with each other.

  The display unit 40 performs display processing based on the control information stored in the shared memory CM, and further displays preset control information in the SRAM 44 together with time information in a cycle longer than the above-described control cycle (for example, 1 second cycle). In addition to writing, the data is written to the SD memory 46. The SRAM 44 stores control information for about 4 hours in a ring buffer system, and the SD memory 46 stores control information for several years.

  As described above, the functions of the control units 20 and 30 that execute the control sequence for the valve V and the display unit 40 that displays the result are distributed via the shared memory CM. Display processing can be smoothly performed without causing a delay in control due to a load for display processing.

  The display unit 40 writes the above-described measurement data and abnormal data from the control units 20 and 30 to the first storage area of the SRAM 44 via the shared memory CM. When abnormal data occurs, the display unit 40 several minutes before the time of occurrence. Are read from the first storage area and written as freeze data in the second storage area.

  Furthermore, when abnormal data occurs, the display unit 40 displays abnormality occurrence information specifying the abnormality type on the color liquid crystal display unit 45 and sounds an alarm as necessary.

  When a maintenance personal computer 70 is connected via the infrared interface 43 when periodic inspection or some abnormality occurs, the display unit 40 is stored in the SRAM 44 in response to a request from the personal computer PC. The measured data and abnormality data read out are output to the personal computer PC.

  It should be noted that the optical communication using other wavelengths is not limited to the infrared interface 43 as long as it is an interface capable of communicating with the personal computer PC with the door closed without opening the casing C of the explosion-proof structure. It may be an interface. For example, an optical fiber may be interposed between the optical communication interface provided in the display unit and the coupler fixed to the door of the casing C so as to be connected to the personal computer PC via the optical fiber.

  That is, a control unit that feedback-controls the valve opening by controlling the hydraulic mechanism based on the valve opening value input from the opening sensor and the valve control command value input from the main control device; And an optical communication interface capable of connecting an information collecting device for reading control information stored in the storage unit in a state of being stored in the explosion-proof structure. The display unit for displaying the control status includes a storage unit and an optical communication interface, and includes a shared memory connected to the display unit and the control unit via a LAN, and stores the control information acquired by the display unit via the shared memory. And the control information is output to the information collecting device via the optical communication interface.

  The various embodiments described above are examples of the present invention, and specific circuit configurations and the like of each part can be appropriately changed and designed within the scope of the effects of the present invention.

Block diagram of a system incorporating a control device according to the present invention Illustration of hydraulic unit Illustration of valve, hydraulic cylinder, opening sensor Explanatory drawing of the board which constitutes the control device built in the hydraulic unit Illustration of the screen displayed on the color liquid crystal display unit by the display unit Functional block configuration diagram of two control units and display unit constituting the control device Configuration diagram of the main part of the control unit Flow chart showing control mode switching operation

Explanation of symbols

1: control device 20, 30: control unit 21a, 31a: control mode switching control unit 40: display unit 41a: guidance display unit 43: optical communication interface (infrared interface)
CT: Main controller S, S1, S1: Opening sensor SV: Actuator (servo valve)
SW2: Control mode switching operation unit SW3: Manual operation unit V: Valve VD: Hydraulic mechanism

Claims (5)

  Based on the valve opening value input from the opening sensor that detects the valve opening and the control command value of the valve input from the main controller, the hydraulic mechanism is controlled to feedback control the valve opening. And an information collecting device for reading the control information stored in the storage unit in a state in which the control unit is stored in the explosion-proof structure and the storage unit that stores the control information by the control unit is stored in the explosion-proof structure. A valve controller for a petrochemical plant equipped with a connectable optical communication interface.   A first storage area for storing the control information in a ring buffer format in the storage unit, and immediately before the occurrence of the alarm information stored in the first storage area when the control information includes alarm information The valve control device for a petrochemical plant according to claim 1, further comprising a first storage element including a second storage area for storing control information for a predetermined time.   The storage unit includes a removable second storage element having a storage capacity larger than that of the first storage element and cumulatively storing control information stored in the first storage area of the first storage element. The valve control device for a petrochemical plant according to claim 2.   The display unit for displaying the control state of the valve includes the storage unit and an optical communication interface, and includes a shared memory connected to each of the display unit and the control unit via a LAN, and the display unit passes through the shared memory. The valve control device for a petrochemical plant according to any one of claims 1 to 3, wherein the control information acquired in the step is stored in the storage unit, and the control information is output to the information collection device via the optical communication interface. .   The display unit distributes the control parameter transmitted from the information collection device via the optical communication interface to the control unit via the shared memory, and the control unit applies the control parameter obtained via the shared memory. The valve control device according to claim 4, wherein the opening degree of the valve is feedback controlled based on the feedback control.

Images