Multiple computer system for operating a power plant turbine with manual backup capability

Claim 2

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 3

A control system as set forth in claim 1 wherein means are provided for generating operator manual/automatic mode select signals and means are provided for coupling the operator select signals to said computers and said manual control means to implement the operator mode selection signals.

Claim 4

A control system as set forth in claim 1 wherein means are provided for generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predeterMined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the turbine has not returned to automatic control, and means for transferring the control of the turbine from the computer coming into control to the turbine manual control if the timing circuit signal is generated.

Claim 5

A control system as set forth in claim 3 wherein means are provided for generating operator manual/automatic mode select signals and means are provided for coupling the operator select signals to said computers and said manual control means to implement the operator mode selection signals.

Claim 6

A control system as set forth in claim 3 wherein said other computer includes tracking controls for conforming predetermined ones of its control outputs to like outputs of said one computer, and the time delay is sufficient to allow the tracked control loops in said other computer to return to automatic control after a transfer to the other computer under normal operating conditions.

Claim 7

A control system as set forth in claim 1 wherein said structure conforming means includes an intercomputer data link and said malfunction sensing means detects data link malfunctions, and said computers include means for inhibiting a return to automatic computer control and instituting manual control when a computer transfer is initiated after a data link malfunction.

Claim 8

A plant for generating electric power comprising at least a steam generator and a steam turbine, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, and a control system having at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 9

A plant for generating electric power comprising at least a steam generator and a steam turbine, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, and a control system having at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 10

An electric power plant as set forth in claim 7 wherein means are provided for generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predetermined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the turbine has not returned to automatic control, and means for transferring the control of the turbine from the computer coming into control to the turbine manual control if the timing circuit signal is generated.

Claim 11

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric pOwer, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 12

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric pOwer, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 13

A steam turbine system as set forth in claim 9 wherein said structure conforming means includes an intercomputer data link and said malfunction sensing means detects data link malfunctions, and said computers include means for inhibiting a return to automatic computer control and instituting manual control when a computer transfer is initiated after a data link malfunction.

Claim 14

A steam turbine system as set forth in claim 9 wherein means are provided for generating operator manual/automatic mode select signals and means are provided for coupling the operator select signals to said computers and said manual control means to implement the operator mode selection signals.

Claim 15

A steam turbine system as set forth in claim 9 wherein means are provided for generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predetermined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the turbine has not returned to automatic control, and means for transferring the control of the turbine from the computer coming into control to the turbine manual control if the timing circuit signal is generated.

Claim 16

A steam turbine as set forth in claim 12 wherein said other computer includes tracking controls for conforming its predetermined ones of control outputs to like outputs of said one computer, and the time delay is sufficient to allow the tracked control loops in said other computer to return to automatic control after a transfer to the other computer under normal operating conditions.

Claim 17

A turbine operative to drive a generator and produce electric power, said turbine comprising a rotor structure coupled to the generator and driven by motive fluid, means for controlling the flow of turbine motive fluid, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating said flow controlling means of said turbine as a function of the input signals, means for sensing predetermined control system malfuNctions, means for coupling the outputs of one of said computers to operate said flow controlling means, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 18

A turbine operative to drive a generator and produce electric power, said turbine comprising a rotor structure coupled to the generator and driven by motive fluid, means for controlling the flow of turbine motive fluid, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said turbine, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating said flow controlling means of said turbine as a function of the input signals, means for sensing predetermined control system malfuNctions, means for coupling the outputs of one of said computers to operate said flow controlling means, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, means for manually controlling the steam generator controllable elements, means for manually controlling the steam turbine valves, and means for transferring control to said manual control means when both of said computers have malfunctioned.

Claim 19

A turbine as set forth in claim 14 wherein means are provided for generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predetermined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the turbine has not returned to automatic control, and means for transferring the control of the turbine from the computer coming into control to the turbine manual control if the timing circuit signal is generated.

Claim 22

A control system for a boiler comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said boiler, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating controllable elements of said boiler as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the boiler controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the boiler from said one computer to said other computer substantially without disturbing the boiler process when said sensing means detects a control system malfunction, means are provided fOr generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predetermined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the boiler has not returned to automatic control and means for transferring the control of the boiler from the computer coming into control to the boiler manual controls.

Claim 23

A control system for a boiler comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said boiler, means for coupling the input signals to both of said computers, each of said computers including substantially identical means for generating control outputs for operating controllable elements of said boiler as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the boiler controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the boiler from said one computer to said other computer substantially without disturbing the boiler process when said sensing means detects a control system malfunction, means are provided fOr generating a signal when the computer in control fails, a timing circuit is provided for generating a signal a predetermined amount of delay time after the computer fail signal is generated and a computer transfer has been initiated if the computer coming into control has not generated a signal indicating the transfer has been completed and the boiler has not returned to automatic control and means for transferring the control of the boiler from the computer coming into control to the boiler manual controls.