System for manually or automatically transferring control between computers without power generation disturbance in an electric power plant or steam turbine operated by a multiple computer control system

Claim 2

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 3

A control system as set forth in claim 1 wherein said tracking control means includes at least some tracking controls which respond to input signals representing intermediately controlled variables and which control the operation of control elements to generate tracked control outputs in control loops to which input signals representing end controlled variables are applied during active and tracking control modes and from which the end controlled variables are controlled through the intermediately controlled variables.

Claim 4

A control system as set forth in claim 2 wherein said control elements include a plurality of first level boiler controls for controlling respective intermediate steam generator variables and said tracking controls are provided for said first level integrating type steam generator controls.

Claim 5

A control system as set forth in claim 2 wherein predetermined turbine control loops are provided and control output tracking is provided for the turbine control loops in said other computer by a back calculation based on input valve position signals.

Claim 6

A control system as set forth in claim 2 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 7

A control system as set forth in claim 1 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 8

A control system as set forth in claim 1 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 9

A control system as set forth in claim 1 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 10

A control system as set forth in claim 1 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 11

A control system as set forth in claim 9 wherein manual/automatic stations data is transmitted across said data link.

Claim 12

A control system as set forth in claim 9 wherein said tracking control means includes at least some tracking controls which respond to input signals representing intermediately controlled variables and which control the operation of control elements to generate tracked control outputs in control loops to which input signals representing end controlled variables are applied during active and tracking control modes and from which the end controlled variables are controlled through the intermediately controlled variables.

Claim 13

A control system as set forth in claim 11 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 14

A control system as set forth in claim 9 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 15

A control system as set forth in claim 9 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 16

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 17

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 18

A power plant as set forth in claim 15 wherein said tracking control means includes at least some tracking controls which respond to input signals representing intermediately controlled variables and which control the operation of control elements to generate tracked control outputs in control loops to which input signals representing end controlled variables are applied during active and tracking control modes and from which the end controlled variables are controlled through the intermediately controlled variables.

Claim 19

A power plant as set forth in claim 15 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 20

A power plant as set forth in claim 15 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 21

A power plant as set forth in claim 15 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 22

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 23

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 24

A turbine system as set forth in claim 20 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 25

A turbine system as set forth in claim 21 wherein said tracking control responding means responds to the valve position signals to generate a demand for turbine load in a load control loop thereby causing the generation of tracked valve position control outputs.

Claim 26

A turbine system as set forth in claim 22 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 27

A turbine system as set forth in claim 20 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 28

A turbine system as set forth in claim 24 wherein said tracking control means includes at least some tracking controls which respond to input signals representing intermediately controlled variables and which control the operation of control elements to generate tracked control outputs in control loops to which input signals representing end controlled variables are applied during active and tracking control modes and from which the end controlled variables are controlled through the intermediately controlled variables.

Claim 29

A turbine system as set forth in claim 20 wherein said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer.

Claim 30

A turbine as set forth in claim 20 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 31

A turbine as set forth in claim 20 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 32

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

Claim 33

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

Claim 34

A control system as set forth in claim 29 wherein a dead computer panel includes a plurality of switch elements operated by said computers to enable predetermined output circuits and provide for computer control in response to outputs from the computer in control.

Claim 35

A control system as set forth in claim 29 wherein said control capability signal generating means is operative to generate an output signal more frequently than the length of time it takes to close the turbine valves.

Claim 36

A control system as set forth in claim 31 wherein the control capability signal generating frequency is approximately once each half second.

Claim 37

A control system as set forth in claim 29 wherein said other computer includes means for generating a control capability signal, and means are provided for responding to the other computer control capability signal and inhibiting transfer to said other computer if it is unable to accept control.

Claim 38

A control system as set forth in claim 29 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 39

A control system as set forth in claim 29 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 40

A control system as set forth in claim 29 wherein said conforming means includes means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer.

Claim 41

A control system as set forth in claim 36 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 42

A control system as set forth in claim 37 wherein said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer.

Claim 43

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 44

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 45

A control system as set forth in claim 39 wherein a megawatt control loop is included and said megawatt control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 46

A control system as set forth in claim 39 wherein an impulse pressure control loop is included and said impulse pressure control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 47

A control system as set forth in claim 39 wherein each of said computers is structured to receive automatic dispatch load demand signals and the automatic dispatch mode is rejected from operation on transfer to said other computer if it had existed in said one computer.

Claim 48

A control system as set forth in claim 39 wherein said conforming means further includes means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 49

A control system as set forth in claim 39 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 50

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 51

A plant for generating electric power comprising at least a steam generator and a steam turbine and a control system, a plurality of throttle and governor valves for directing steam from said steam generator to said turbine, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for controlling the position of said governor and throttle valves, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops, means for coupling the control outputs of each computer to said valve position controlling means and other controllable elements of said steam generator and said steam turbine, means for sensing predetermined control system malfunctions, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 52

A power plant as set forth in claim 45 wherein a megawatt control loop is included and said megawatt control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 53

A power plant as set forth in claim 45 wherein an impulse pressure control loop is included and said impulse pressure control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 54

A power plant as set forth in claim 45 wherein each of said computers is structured to receive automatic dispatch load demand signals and the automatic dispatch mode is rejected from operation on transfer to said other computer if it had existed in said one computer.

Claim 55

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including the status of predetermined manual/automatic stations for each of at least some preselected ones of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 56

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including the status of predetermined manual/automatic stations for each of at least some preselected ones of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 57

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including the status of predetermined modes for at least some of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 58

A control system for an electric power plant having at least one steam turbine and a steam generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical control elements which generate control outputs as a function of input signals in various control loops to operate controllable elements of said steam generator and throttle and governor valves of said steam turbine, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including the status of predetermined modes for at least some of the control loops, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 59

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 60

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 61

A turbine as set forth in claim 51 wherein a megawatt control loop is included and said megawatt control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 62

A turbine as set forth in claim 51 wherein an impulse pressure control loop is included and said impulse pressure control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 63

A turbine as set forth in claim 51 wherein each of said computers is structured to receive automatic dispatch load demand signals and the automatic dispatch mode is rejected from operation on transfer to said other computer if it had existed in said one computer.

Claim 64

A turbine as set forth in claim 51 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 65

A turbine as set forth in claim 51 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 66

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including a RATE variable operative as a load rate in a turbine load control loop, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 67

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, and said status data including a RATE variable operative as a load rate in a turbine load control loop, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 68

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including turbine valve position limit variables, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 69

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including turbine valve position limit variables, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 70

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals and representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including the state of a mode variable representing turbine sequential or single valve operation, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 71

A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals and representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted data, said status data including the state of a mode variable representing turbine sequential or single valve operation, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 72

A steam turbine system operative to receive motive steam and drive and electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including a first group of data employed in initializing said other computer to a standby status and at least a second group of data employed in updating said other computer in real time when it is on standby, said second data group including at least two data subgroups having different frequencies of transmittal over said data link, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 73

A steam turbine system operative to receive motive steam and drive and electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said status data including a first group of data employed in initializing said other computer to a standby status and at least a second group of data employed in updating said other computer in real time when it is on standby, said second data group including at least two data subgroups having different frequencies of transmittal over said data link, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 74

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 75

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 76

A turbine control system as set forth in claim 61 wherein said tracking control means includes means for responding to at least some input signals representing intermediately controlled variables and for generating demand representations of higher level or end controlled variables which when applied to control elements in control loops directed to the control of such higher level or end controlled variables cause the generation of tracked control outputs.

Claim 77

A turbine control system as set forth in claim 62 wherein said tracking control responding means responds to valve position signals to generate a demand for turbine load in a load control loop thereby causing the generation of tracked valve position control outputs.

Claim 78

A turbine control system as set forth in claim 61 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 79

A turbine control system as set forth in claim 61 wherein said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer.

Claim 80

A turbine control system as set forth in claim 61 wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 81

A turbine control system as set forth in claim 61 wherein said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

Claim 82

A turbine control system as set forth in claim 67 wherein said structure conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, said executing means including means for applying a signal to said other computer when a malfunction is detected, said other computer including means for generating an output which enables coupling of its control outputs to the controllable process elements, and said other computer including means for bumplessly transferring control loops from the tracking mode to an automatic mode in a hierarchical manner from the lowest control to the highest control level to the extent that such loops are designated for automatic control.

Claim 83

A turbine control system as set forth in claim 67 wherein said control capability signal generating means is operative to generate an output signal more frequently than the length of time it takes to close the turbine valves.

Claim 84

A control system for a large stream turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction. -- .

Claim 85

A control system for a large stream turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means for establishing a preselected state of at least some preselected control conditions in said other computer regardless of the state of those control conditions in said first computer, and means for executing a transfer in the control of the steam turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction. -- .

Claim 86

A turbine control system as set forth in claim 70 wherein a megawatt control loop is included and said megawatt control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 87

A turbine control system as set forth in claim 70 wherein an impulse pressure control loop is included and said impulse pressure control loop is rejected from service on transfer to said other computer if it had been in service in said one computer.

Claim 88

A turbine control system as set forth in claim 70 wherein each of said computers is structured to receive automatic dispatch load demand signals and the automatic dispatch mode is rejected from operation on transfer to said other computer if it had existed in said one computer.

Claim 89

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 90

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 91

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 92

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction.

Claim 93

A control system for an electric power plant having at least one stream turbine and a stream generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said stream turbine, means for coupling the input signals to both of said computers, each of said computers, having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said structure conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, said executing means including means for applying a signal to said other computer when a malfunction is detected, said other computer including means for generating an output which enables coupling of its control outputs to the controllable process elements, and said other computer including means for bumplessly transferring control loops from the tracking mode to an automatic mode in a hierarchical manner from the lowest control to the highest control level to the extent that such loops are designated for automatic control.

Claim 94

A control system for an electric power plant having at least one stream turbine and a stream generator, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for generating input signals representing predetermined process variables associated with said stream turbine, means for coupling the input signals to both of said computers, each of said computers, having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator and throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements and turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator and the turbine from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said structure conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer, said executing means including means for applying a signal to said other computer when a malfunction is detected, said other computer including means for generating an output which enables coupling of its control outputs to the controllable process elements, and said other computer including means for bumplessly transferring control loops from the tracking mode to an automatic mode in a hierarchical manner from the lowest control to the highest control level to the extent that such loops are designated for automatic control.

Claim 95

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 96

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 97

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 98

A control system for a large steam turbine operative to drive an electric generator and having a plurality of throttle and governor valves, said control system comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time, said conforming means including an intercomputer data link for transmitting predetermined status data from said one computer to said other computer, said data link including means for registering and transmitting to said other computer predetermined status data representing steam generator and turbine control conditions, said other computer including means for receiving transmitted status data, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur, wherein means are provided for inhibiting a retransfer to said one computer from said other computer within a predetermined stabilization time period after a transfer occurs.

Claim 99

A turbine control system as set forth in claim 78 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.

Claim 100

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computers substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

Claim 101

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computers substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said executing means including means included in said first computer for generating an output signal indicating capability of said first computer to maintain process control, an external dead computer circuit responsive to the control capability signal, means responsive to said malfunction sensing means to change the control capability signal and activate said dead computer circuit to cause a control transfer from the first computer on detection of a malfunction, and means for coupling said dead detector circuit to said other computer to activate it to a control status if it is on standby when a transfer is to occur.

Claim 102

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer.

Claim 103

A steam generator control system for an electric power plant comprising multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing predetermined process variables associated with said steam generator, means for coupling the input signals to both of said computers, each of said computers having means for controlling its sequential programmed operation and including substantially identical means for generating control outputs for operating controllable elements of said steam generator as a function of the input signals, means for sensing predetermined control system malfunctions, means for coupling the outputs of one of said computers to operate the steam generator controllable elements, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating control outputs in the other computer substantially equal to those from said one computer, and means for executing a transfer in the control of the steam generator from said one computer to said other computer substantially without disturbing the power generation when said sensing means detects a control system malfunction, said conforming means including means for responding to predetermined process input signals to control the operation of at least some of said computer control elements in a tracking mode and generate corresponding control outputs in said other computer substantially equal to those from said one computer.

Claim 104

A steam generator control as set forth in claim 81 wherein said conforming means further includes an intercomputer data link for transmitting predetermined status data from said one computer to said other computer.

Claim 105

A steam generator control system as set forth in claim 81 wherein said executing means including means for applying a signal to said other computer when a malfunction is detected, said other computer including means for generating an output which enables coupling of its control outputs to the controllable process elements, and said other computer including means for bumplessly transferring control loops from the tracking mode to an automatic mode in a hierarchical manner from the lowest control to the highest control level to the extent that such loops are designated for automatic control.

Claim 106

A steam generator control system as set forth in claim 81 wherein means are provided for generating operator computer select signals, and said executing means responds to said operator select generating means to transfer process control between computers on operator selection for a transfer.