Breaker fail-safe system for a multi-channel electric power generating system

A nonvolatile fail-safe system providing protection from bus fault propagation for a multi-channel electric power generating system having a first generator unit connectable by a first breaker to a load distribution bus connectable by a second breaker to a tie bus with the tie bus connectable to at least one additional generator unit, comprising:

• a controller providing excitation control and protection for the first generator unit, position control for the first breaker via a first trip control signal and a first close control signal, and position control for the second breaker via a second trip control signal and a second close control signal;
• protection logic means for generating said second trip control signal when a bus fault is detected, opening the second breaker and isolating the load distribution bus from the tie bus thereby, said protection logic means thereafter generating a first excitation isolation control signal and said first trip control signal isolating the load distribution bus from the first generator unit upon sustained presence of the bus fault;
• a latching generator control relay electrically coupled in series with said controller, said generator control relay responsive to said excitation isolation control signal for isolating said excitation control from the first generator unit, de-energizing the first generator unit thereby;
• circuit means for monitoring the operational status of said controller, said monitoring means generating a breaker fail-safe control signal upon sensing controller operation outside acceptable parameters;
• and
• fail-safe logic means responsive to the position status of said generator control relay at the instant of issuance of said breaker fail-safe control signal for controlling the position of the second breaker upon failure of said controller.