Dual turbine controller

Claim 1

In a control system effective to produce a control signal for controlling a turbine having a shaft rotating at a speed controllable by a position of a valve, said valve being responsive to said control signal, said control system including primary and secondary controllers; the control system including means for producing a speed command signal, a speed feedback signal and a valve position feedback signal, each of said controllers, comprising: means for producing a speed error signal proportional to a difference between said speed command and speed feedback signals; a valve command generator responsive to said speed error to produce a valve command signal; means for producing a valve drive signal in response to a difference between said valve command and valve position feedback signals; a comparison circuit receiving at least some of said speed feedback, speed error, valve command, valve position feedback and valve drive signals; means for communicating said, valve command, valve position feedback and valve drive signals in each one of said primary and secondary controllers to the comparison circuit in the other one thereof, the comparison circuit in each of said primary and secondary controllers being effective to detect differences between inputs from its own and from the other controller and, upon determining that said differences may indicate that its controller is bad, producing a one bad signal indicative of this fact; and, a system mathematical model responsive to at least some of inputs and outputs of said controller effective to predict correct responses of said controller to said inputs, said system mathematical model being effective to produce a controller bad signal when its controller produces outputs inconsistent with its inputs.