Nuclear reactor power supply

Apparatus for supplying electrical power including a nuclear reactor, a plurality of components, connected to said reactor, for converting the thermal energy generated by said reactor into electrical power, a plurality of sensor assemblies, connected to said reactor and to certain of said components, for sensing the process parameters of said reactor and of said certain components, each of said sensor assemblies including a plurality of like sensor means, each sensor means for sensing the process parameter, which the sensor assembly of which said like sensor means is a part, is to sense, said each of said like sensor means producing signals measuring the process parameter sensed by said each of said sensor assemblies, a protection system including a plurality of like protection units, means connecting a like sensor means of each sensor assembly to a corresponding protection unit to impress on said protection unit the signal produced by said connected sensor means, protection apparatus, responsive to said protection system, to produce an apparatus-protection operation only when more than one of said protection units receive signals from their corresponding sensor means indicating faulty operation of said reactor and/or of said certain components whose process parameters are sensed by said corresponding sensor means, a control system, means connecting said control system in controlling relationship with said reactor and with at least some of said certain components, a plurality of separate communication channels, connected separately between each said protection unit and said control system, for transmitting to said control system signals, derived by each of said protection units from its corresponding sensor means, for actuating said control system to control said reactor and/or said components as aforesaid, and signal-selection means, interposed between said channels and said control system, for preventing transmission, to said control system from said protection means, of signals from a sensor means of a sensor assembly which signals differ significantly from signals from like sensor means of the same sensor assembly, and permitting the transmission to said control system of signals from the sensor means of said sensor assembly which do not differ significantly from signals from other sensor means of said sensor assembly, said signal selection means including means for determining the difference between each signal sensed by a sensor means of a sensor assembly and the signals sensed by the other sensor means of the same sensor assembly, and also including means responsive to said difference-determining means, for rejecting signals of said each sensor means which differ from signals from said other like sensor means of the same assembly by at least a predetermined magnitude, said predetermined magnitude being equal to twice the allowable variation of the signal sensed by said like sensor means.

The method of operating apparatus for supplying electrical power, said apparatus including a nuclear reactor and a plurality of components connected to said reactor for converting the thermal energy generated by said reactor into electrical power, said reactor and certain of said components having parameters depending on their operational processes, a protection system, protection apparatus, responsive to said protection system, for producing a protection operation when said process-dependent parameters indicate off-normal operation of said apparatus exceeding a predetermined margin, and a control system for controlling said apparatus responsive to the magnitude of said process-dependent parameters, the said method comprising producing sets each of a plurality of process signals, each set measuring one of said parameters, transmitting each of said sets of process signals to said protection system for separate processing by said protection system, causing said protection system to actuate said protective apparatus responsive only to more than one process signal of a set measuring a parameter indicating off-normal operation of the apparatus, separately deriving from said protection system each set of process signals measuring each of said parameters, determining the differences between each process signal of a set measuring a parameter so derived and the other process signals of the set so derived measuring the same parameter, suppressing any of said last-named derived process signals which differ for each set from the other of said last-named process signals of the same set by at least a predetermined magnitude which is equal to twice the allowable variation of the said derived process signals of said set, transmitting the remaining of said derived process signals of each set to said control system, and causing said control system, responsive to any derived process signal which it receives and which measures off-normal condition of a process within said margin, to control the reactor or component involved in said off-normal process so as to revert said process to normal condition.

Apparatus for supplying electrical power including a nuclear reactor, a plurality of components, connected to said reactor, for converting the thermal energy generated by said reactor into electrical power, a plurality of sensor assemblies, connected to said reactor and to certain of said components, for sensing the process parameters of said reactor and of said certain components, each of said sensor assemblies including a plurality of like sensor means, each sensor means for sensing the process parameter which the sensor assembly of which said like sensor means is a part is to sense, said each of said like sensor means producing signals measuring the process parameter sensed by said each of said sensor assemblies, a protection system including a plurality of like protection units, means connecting a like sensor means of each sensor assembly to a corresponding protection unit to impress on said protection unit the signal produced by said connected sensor means, protection apparatus, responsive to said protection system, to produce an apparatus-protection operation only when more than one of said protection units receive signals from their corresponding sensor means indicating faulty operation of said reactor and/or of said certain components whose process parameters are sensed by said corresponding sensor means, a control system, said control system including a primary control channel and a backup control channel for connecting said control system in controlling relationship with said reactor and with at least some of said certain components, a plurality of separate communication channels, connected separately between each said protection unit and said control system, for transmitting to said control system signals, derived by each of said protection units from its corresponding sensor means, for actuating said control system to control said reactor and/or said components as aforesaid, and signal-selection means, interposed between said channels and said control system, for preventing transmission, to said control system from said protection means, of signals from a sensor means of a sensor assembly which signals differ significantly from signals from like sensor means of the same sensor assembly, and permitting the transmission to said control system of signals from the sensor means of said sensor assembly which signals do not differ significantly from signals from other sensor means of said sensor assembly, said signal-selection means including means for determining the difference between each signal sensed by a sensor means of a sensor assembly and the signals sensed by the other sensor means of the same sensor assembly, and also including means responsive to said difference-determining means, for rejecting signals of said each sensor means which signals differ from signals from said other like sensor means of the same assembly by at least a predetermined magnitude, said signal-selection means including a first signal-selection unit and a second like signal-selection unit, said first signal-selection unit being connected to said primary control channel to prevent and permit, as aforesaid, the transmission of signals from said sensor means to said primary control channel and said second selection unit being connected to said backup control channel to prevent and permit, as aforesaid, the transmission of signals from said sensor means to said backup control channel, test signal-generating means, means connecting said test-signal-generating means to said said channels, said connecting means including selective switching means for connecting said test-signal-generating means in test-signal-transmission relationship selectively with said first signal-selection unit and with the primary control channel or with said second signal-selection unit and with the backup control channel and for preventing the transmission of signals from said sensor assemblies through the selected first or second signal-selection unit, as the case may be, and means, interconnecting said test-signal-generating means and said primary and backup control channels, to prevent the transmission of controlling intelligence to said reactor and/or said components from the selected primary control channel or secondary control channel, as the case may be, during the transmission of a test signal.

The method of operating apparatus for supplying electrical power, said apparatus including a nuclear reactor and a plurality of components connected to said reactor for converting the thermal energy generated by said reactor into electrical power, said reactor and certain of said components having parameters depending on their operational processes, a protection system, protection apparatus, responsive to said protection system, for producing a protection operation when said process-dependent parameters indicate off-normal operation of said apparatus, and a control system for controlling said apparatus responsive to the magnitude of said process-dependent parameters, said control system having primary control channels and backup control channels, the said method comprising producing sets each of a plurality of process signals, each set measuring one of said parameters, transmitting each of said sets of process signals in its turn to said protection system for separate processing by said protection system, causing said protection system to actuate said protection apparatus responsive only to more than one process signal of a set measuring a parameter indicating off-normal operation of the apparatus beyond a margin, separately deriving from said protection system each set of process signals measuring each of said parameters, transmitting the sets of process signals so derived through a first signal channel and a second signal channel, for each said channel determining the differences between each process signal of a set measuring a parameter so derived and the other process signals of the set so derived measuring the same parameter, from each channel, suppressing any of said last-named derived process signals which differ from the other of said last-named process signals by a significant magnitude, passing the remaining of said derived process signals of each set transmitted through the first signal channel to the primary control channel, also passing the remaining of said derived process signals of each set transmitted through the second signal channel to the backup control channel, at intervals injecting test signals selectively into said first signal channel or said second signal, passing test signals selectively injected into said first signal channel only to said primary control channel and passing the test signals selectively injected into said second signal channel only to said backup control channel, during the passing of test signals disabling the selected primary control channel or selected backup control channel, as the case may be, from passing process signals, and causing said control system, or during test intervals the non-selected primary or backup control channel, as the case may be, responsive to any derived process signal which it receives and which measures off-normal condition of a process and/or a component not beyond said margin, to control the reactor or component involved in said off-normal process so as to revert said process to normal condition.

The method of controlling nuclear-reactor power-supply apparatus including a plurality of sensor assemblies for monitoring each of a plurality of process parameters of said apparatus, each of said assemblies including a plurality of like sensor means, the said method including the following steps:

• (a) during successive cycles deriving separate signals indicating the magnitude sensed by each sensor means of successive assemblies, for each assembly in its turn,
• (b) determining the average of the magnitudes of the signals sensed by said last-named sensor means of each assembly in its turn during each cycle,
• (c) comparing the magnitude of each signal sensed by said sensor means during said each cycle with the magnitudes of the other signals sensed by said sensor means from the same assembly during the same cycle,
• (d) on the observation that two signals depart in magnitude from the other signals by more than the allowable variation of the corresponding sensor means, determining which of said two signals departs by a greater magnitude from the average determined for the same sensor means during the previous cycle,
• (e) rejecting the signal of said two signals which departs most from said average, and
• (f) transmitting at least the other signals from which said two signals differ to control said apparatus.

Apparatus for supplying electrical power including a nuclear reactor, a plurality of components, connected to said reactor, for converting the thermal energy generated by said reactor into electrical power, a plurality of sensor assemblies, connected to said reactor and to certain of said components, for sensing the process parameters of said reactor and of said certain components, each of said sensor assemblies including a plurality of like sensor means for sensing the process parameter which the sensor assembly of which said like sensor means is a part, is to sense, each of said like sensor means producing signals measuring the parameter sensed by said each of said sensor assemblies, a protection system including a plurality of like protection units, means, connecting a like sensor means of each sensor assembly to a corresponding protection unit, to impress on said protection unit the signal produced by said connected sensor means, protection apparatus, responsive to said protection system to produce an apparatus-protection operation only when more than one of said protection units receive signals from their corresponding sensor means indicating faulty operation of said reactor and/or of said certain components whose process parameters are sensed by said corresponding sensor means, a control system, means connecting said control system in controlling relationship with said reactor and with at least some at said certain components, a plurality of separate channels connected separately to each said protection unit and to said control system, for transmitting, to said control system, signals derived by each of said protection units from its corresponding sensor means, for actuating said control system to control the processes of said reactor and/or said components as aforesaid on the indication by said signals impressed on said control system of off-normal operation of said reactor and/or said components, signals being transmitted from the sensor means, each in its turn, of sensor assemblies, each assembly in its turn, during successive transmitting cycles, each of said channels including optical means only to transmit the signals from its corresponding protection unit to said control system and to prevent electrical interaction between said protection units and said control system, and signal-selection means, interposed between said channels and said control system, operating by the comparison of each signal from the sensor means of a sensor assembly with the other signals from the sensor means of said assembly, each in its turn, and responsive to such comparison, preventing the transmission, to said control system from said protection units, of signals from a sensor means of a sensor assembly which signals differ significantly from signals from like sensor means of the same sensor assembly, the signals from each sensor means which do not differ significantly from signals from like sensor means of the same assembly being herein designated as "valid signals", the said signal-selection means including means for determining the differences between each signal sensed by each sensor means and the signals sensed by the other like sensor means of a sensor assembly during each said cycle, the said signal selection means also including means for comparing the signals sensed during a later cycle with the valid signals sensed during a preceding cycle in the event that the number of like sensor means, whose signals differ significantly from signals from other like sensor means, is equal to one-half of the total number of sensor means of the sensor assembly so that determination of which signals are valid is not practicable.

The method of operating apparatus for supplying electrical power, said apparatus including a nuclear reactor and a plurality of components connected to said reactor for converting the thermal energy generated by said reactor into electrical power, said reactor and certain of said components having parameters depending on their operational processes, a protection system, protection apparatus, responsive to said protection system, for producing a protection operation when said process-dependent parameters indicate off-normal operation of said apparatus exceeding a predetermined margin, and a control system for controlling said apparatus responsive to the magnitude of said process-dependent parameters, the said method comprising producing each of a plurality of process signals, each set measuring one of said parameters, transmitting each of said sets of process signals to said protection system for separate processing by said protection system, causing said protection system to actuate said protective apparatus responsive only to more than one process signal of a set measuring a parameter indicating off-normal operation of the apparatus exceeding said margin, separately deriving from said protection system each set of process signals measuring each of said parameters, during successive cycles determining for the parameters, each parameter in its turn, the differences between each process signal of a set measuring a parameter in its turn and each of the other process signals of the set measuring the same parameter to identify during each cycle which signals of a set differ from the other signals of said set by at least a predetermined magnitude which is equal to twice the allowable variation of the process signals for said set, said differing signals being herein designated as false signals and said other signals being herein designated as valid signals, entering the valid signals for each set derived during each cycle, where the number of signals of a set which, during any cycle, differ from other signals of said set by at least said predetermined magnitude is equal to one-half the number of signals in the set comparing the signals of said last-named set with the valid signals for the same parameter entered during the preceding cycle to determine which signals of said last-named set are valid and which are false, suppressing the signals of said last-named set determined to be false by the said comparison, transmitting to said control system the signals of said set determined to be valid to said control system, and causing said control system, responsive to any derived process signal which it receives and which measures off-normal condition of a process within said margin, to control the reactor or component involved in said off-normal process so as to revert said process to normal condition.