Electric power plant having a multiple computer system for redundant control of turbine and steam generator operation

A plant for generating electric power comprising at least a steam generator and a steam turbine, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, and turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A turbine operative to drive a generator and produce electric power, said turbine comprising a rotor structure coupled to the generator and driven by motive fluid, means for controlling the flow of turbine motive fluid, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said flow controlling means of said turbine as a function of the input signals, means for sensing predetermined comtrol system malfunctions, means for coupling the outputs of one of said computers to operate said flow controlling means, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for a boiler comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said boiler, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said boiler as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the boiler controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the boiler from said one computer to said other computer substantially without disturbing the boiler process when said sensing means detects a control system malfunction.

A control system for operating a steam turbine which drives an electric generator and which includes a throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.