System for manually or automatically transferring control between computers without power generation disturbance in an electric power plant or steam turbine operated by a multiple computer control system

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including the status of predetermined manual/automatic stations for each of at least some preselected ones of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including the status of predetermined modes for at least some of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including a RATE variable operative as a load rate in a turbine load control loop, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including turbine valve position limit variables, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals and representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including the state of a mode variable representing turbine sequential or single valve operation, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A steam turbine system operative to receive motive steam and drive and electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including a first group of data employed in initializing said other computer to a standby status and at least a second group of data employed in updating said other computer in real time when it is on standby, said second data group including at least two data subgroups having different frequencies of transmittal over said data link, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for a large stream turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction. -- .

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

A control system for an electric power plant having at least one stream turbine and a stream generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said stream turbine, means for coupling the input signals to both of said computers, each of said computers, having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said structure conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, said executing means including means for applying a signal to said other computer when a malfunction is detected, said other computer including means for generating an output which enables coupling of its control outputs to the controllable process elements, and said other computer including means for bumplessly transferring control loops from the tracking mode to an automatic mode in a hierarchical manner from the lowest control to the highest control level to the extent that such loops are designated for automatic control.

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computers substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer.