Protection system for transferring turbine and steam generator operation to a backup mode especially adapted for multiple computer electric power plant control systems

摘要

An electric power plant including a steam generator and a steam turbine is operated by a control system including two redundant digital computers. Switching circuitry is provided for coupling one of the computers through interface equipment to the steam generator and the turbine and a generator according to programmed computer control. A data link is established between the computers to transfer manual/automatic status and other needed data from the control computer to the standby computer. A system is provided for detecting when certain hardware and software malfunctions have occurred and for responsively transferring control to the standby computer. The standby computer is tracked to the control computer so that control computer transfer can be made reliably without disturbing the electric power generation process. The detection system triggers computer transfers in the event malfunctions occur in input/output equipment including contact closure input and output systems and analog input and output systems. Computer transfers are also triggered on certain software malfunctions including tight loop operation and prescribed task errors. Certain other events such as a data link malfunction permit a computer transfer but limit the computer coming into control status to the manual mode.