Electric power plant having a multiple computer system for redundant control of turbine and steam generator operation

Claim 2

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 3

A plant control system as set forth in claim 1 wherein said input signal coupling means includes separate contact closure input systems for said computers commonly responsive to signals from said input signal generating means.

Claim 4

A plant control system as set forth in claim 1 wherein said output coupling means includes separate contact closure output systems for said computers and said executing means includes means for coupling contact closure outputs of said other computers to the turbine and uncoupling contact closure outputs of said one computer when a transfer is made.

Claim 5

A plant control system as set forth in claim 3 wherein said output coupling means further includes a single analog output system coupled to the turbine and shared by said computers and said executing means includes means for coupling said other computer to said analog output system and uncoupling said one computer from said analog output system when a transfer is made.

Claim 6

A plant system as set forth in claim 1 wherein only two computers are provided.

Claim 7

A turbine as set forth in claim 5 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 8

A plant control system as set forth in claim 1 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 9

A plant control system as set forth in claim 7 wherein an operator panel is provided with means for generating at least some of the latter input signals for control mode selection and control parameter selection purposes.

Claim 10

A plant control system as set forth in claim 1 wherein an operator panel is provided with means for generating at least some of the latter input signals for control mode selection and control parameter selection purposes.

Claim 11

A plant for generating electric power comprising at least a steam generator and a steam turbine, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 12

A plant for generating electric power comprising at least a steam generator and a steam turbine, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 13

An electric power plant as set forth in claim 10 wherein said input signal generating means includes separate contact closure input systems for said computers commonly responsive to signals from said input signal generating means and said output coupling means includes separate contact closure output systems for said computers and said executing means includes means for coupling contact closure outputs of said other computer to the turbine and uncoupling contact closure outputs of said one computer when a transfer is made.

Claim 14

A plant control system as set forth in claim 11 wherein each of said contact closure systems includes a steam generator contact closure subsystem and a separate turbine contact closure subsystem.

Claim 15

An electric power plant as set forth in claim 10 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 16

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, and turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 17

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, and turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 18

A steam turbine system as set forth in claim 14 wherein said input signal generating means includes separate contact closure input systems for said computers commonly responsive to signals from said input signal generating means.

Claim 19

A steam turbine systtem as set forth in claim 14 wherein said output coupling means includes separate contact closure output systems for said computers and said executing means includes means for couplin contact closure outputs of said other computer to the turbine and uncoupling contact closure outputs of said one computer when a transfer is made.

Claim 20

A steam turbine system as set forth in claim 16 wherein said output coupling means further includes a single analog output system coupled to the turbine and shared by said computers and said executing means includes means for coupling said other computer to said analog output system and uncoupling said one computer from said analog output system when a transfer is made.

Claim 21

A steam turbine system as set forth in claim 14 wherein only two computers are provided.

Claim 22

A steam turbine system as set forth in claim 14 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 23

A boiler control system as set forth in claim 19 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 24

A turbine operative to drive a generator and produce electric power, said turbine comprising a rotor structure coupled to the generator and driven by motive fluid, means for controlling the flow of turbine motive fluid, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said flow controlling means of said turbine as a function of the input signals, means for sensing predetermined comtrol system malfunctions, means for coupling the outputs of one of said computers to operate said flow controlling means, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 25

A turbine operative to drive a generator and produce electric power, said turbine comprising a rotor structure coupled to the generator and driven by motive fluid, means for controlling the flow of turbine motive fluid, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said flow controlling means of said turbine as a function of the input signals, means for sensing predetermined comtrol system malfunctions, means for coupling the outputs of one of said computers to operate said flow controlling means, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 26

A control system for a boiler comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said boiler, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said boiler as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the boiler controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the boiler from said one computer to said other computer substantially without disturbing the boiler process when said sensing means detects a control system malfunction.

Claim 27

A control system for a boiler comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said boiler, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said boiler as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the boiler controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the boiler from said one computer to said other computer substantially without disturbing the boiler process when said sensing means detects a control system malfunction.

Claim 28

A boiler control system as set forth in claim 22 wherein said input signal generating means includes separate contact closure input system for said computers commonly responsive to signals from said input signal generating means and said output coupling means includes separate contact closure output systems for said computers and said executing means includes means for coupling contact closure outputs of said other computer to the turbine and uncoupling contact closure outputs of said one computer when a transfer is made.

Claim 29

A boiler control system as set forth in claim 22 wherein an operator panel is provided with means for generating at least some of the latter input signals for control mode selection and control parameter selection purposes.

Claim 30

A control system for operating a steam turbine which drives an electric generator and which includes a throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 31

A control system for operating a steam turbine which drives an electric generator and which includes a throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, means for generating in said other computer representations of predetermined variables stored in said one computer and normally undetectable from the control outputs of said one computer and subject to change as a result of internal operations of said one computer or as a result of responses to input signals entered only into said one computer even though such signals normally are entered into both computers, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 32

A steam turbine control system as set forth in claim 25 wherein said structure conforming means and said representation generating means include means for linking data between said computers.

Claim 33

A steam turbine control system as set forth in claim 25 wherein said input signal coupling means includes separate contact closure input systems for said computers commonly responsive to signals from said input signal generating means.

Claim 34

A steam turbine control system as set forth in claim 25 wherein said output coupling means includes separate contact closure output systems for said computers and said executing means includes means for coupling contact closure outputs of said other computers to the turbine and uncoupling control closure outputs of said one computer when a transfer is made.

Claim 35

A steam turbine control system as set forth in claim 28 wherein said output coupling means further includes a single analog output system coupled to the turbine and shared by said computers and said executing means includes means for coupling said other computers to said analog output system and uncoupling said one computer from said analog output system when a transfer is made.

Claim 36

A steam turbine control system as set forth in claim 25 wherein only two computers are provided.

Claim 37

A steam turbine control system as set forth in claim 25 wherein an operator panel is provided with means for generating at least some of the latter input signals for control mode selection and control parameter selection purposes.

Claim 38

A steam turbine control system as set forth in claim 31 wherein said structure conforming means and said representation generating means include means for linking data between said computers.