US3829232A - System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine - Google Patents

System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine Download PDF

Info

Publication number
US3829232A
US3829232A US00189322A US18932271A US3829232A US 3829232 A US3829232 A US 3829232A US 00189322 A US00189322 A US 00189322A US 18932271 A US18932271 A US 18932271A US 3829232 A US3829232 A US 3829232A
Authority
US
United States
Prior art keywords
valves
dump
turbine
steam turbine
signals
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
US00189322A
Other languages
English (en)
Inventor
J Fieglein
M Csanady
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Westinghouse Electric Corp
Original Assignee
Westinghouse Electric Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to BE790020D priority Critical patent/BE790020A/fr
Application filed by Westinghouse Electric Corp filed Critical Westinghouse Electric Corp
Priority to US00189322A priority patent/US3829232A/en
Priority to CA152,719A priority patent/CA993508A/en
Priority to DE19722248042 priority patent/DE2248042A1/de
Priority to ZA727070A priority patent/ZA727070B/xx
Priority to AU47500/72A priority patent/AU480393B2/en
Priority to GB4612572A priority patent/GB1411814A/en
Priority to CH1478572A priority patent/CH547442A/xx
Priority to AT868372A priority patent/AT319977B/de
Priority to IT30461/72A priority patent/IT968942B/it
Priority to FR7236349A priority patent/FR2157478A5/fr
Priority to NL7213866A priority patent/NL7213866A/xx
Priority to JP72102392A priority patent/JPS5330122B2/ja
Application granted granted Critical
Publication of US3829232A publication Critical patent/US3829232A/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F01—MACHINES OR ENGINES IN GENERAL; ENGINE PLANTS IN GENERAL; STEAM ENGINES
    • F01K—STEAM ENGINE PLANTS; STEAM ACCUMULATORS; ENGINE PLANTS NOT OTHERWISE PROVIDED FOR; ENGINES USING SPECIAL WORKING FLUIDS OR CYCLES
    • F01K7/00—Steam engine plants characterised by the use of specific types of engine; Plants or engines characterised by their use of special steam systems, cycles or processes; Control means specially adapted for such systems, cycles or processes; Use of withdrawn or exhaust steam for feed-water heating
    • F01K7/16—Steam engine plants characterised by the use of specific types of engine; Plants or engines characterised by their use of special steam systems, cycles or processes; Control means specially adapted for such systems, cycles or processes; Use of withdrawn or exhaust steam for feed-water heating the engines being only of turbine type
    • F01K7/22—Steam engine plants characterised by the use of specific types of engine; Plants or engines characterised by their use of special steam systems, cycles or processes; Control means specially adapted for such systems, cycles or processes; Use of withdrawn or exhaust steam for feed-water heating the engines being only of turbine type the turbines having inter-stage steam heating
    • F01K7/24—Control or safety means specially adapted therefor
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F01—MACHINES OR ENGINES IN GENERAL; ENGINE PLANTS IN GENERAL; STEAM ENGINES
    • F01D—NON-POSITIVE DISPLACEMENT MACHINES OR ENGINES, e.g. STEAM TURBINES
    • F01D21/00—Shutting-down of machines or engines, e.g. in emergency; Regulating, controlling, or safety means not otherwise provided for
    • F01D21/02—Shutting-down responsive to overspeed

Definitions

  • Three turbine speed sensing transducers operating independently provide signals which are translated through three corresponding check circuits into related overspeed check signals.
  • the three resulting check signals relating to overspeed are translated through majority switching logic into two dump valve trip signals.
  • Each set of such trip signals operates one of the pair of dump valves on each steam control valve.
  • the dump valves and hydraulic oil tanks are carefully protected from damage and any malfunction.
  • the missiles produced thereby could weight from 50 pounds to several tons. These missiles emanating from the turbine, could pierce the reactor, pipes containing radioactive fluidsor steam, the control mechanism for the reactor, etc. The piercing of the reactor or vessels and piping containing radioactive fluids may possibly allow radiation to be dispersed.
  • the Atomic Energy Commission has recognized the potential hazards involved in turbine accidents and has therefore promulgated stringent regulations in the design and construction of any nuclear generating plant requiring that the possibility of any accident occurring will be virtually zero.
  • the regulations applicable to nuclear power plant construction are to be found in A.E.C. Regulations, Part 50, Appendix A.
  • the Atomic Energy Commission has promulgated the above-mentioned safety regulations for nuclear electric power generation plants because of the unique characteristics of nuclear reactors. Unlike fossil fuel reactors where the generation of steam can be terminated relatively quickly by cutting off the fuel supply to a steam generator, a nuclear reactor requires a complex and lengthy shutdown procedure. In order to stop the production of steam in a fossil plant, only the flow of boiler fuel such as gas, oil or coal need be stopped. The resulting shutdown and termination of the generation of steam can be completed in minutes. However, in the case of a nuclear reactor the shutdown procedure requires hours and tens of hours. Therefore, if a pipe or vessel carrying fluid is ruptured by a missile from the turbine, a hazardous condition caused by leaking material may continue for a long period of time until the reactor is shut down.
  • speed governor control systems of the prior art are operative in governing the speed of the turbine during operation. Therefore, these governor speed controls must be taken out of service in order to test their responsiveness to an overspeed condition.
  • a system which is independent of the conventional governor speed controls is required which can be checked without disrupting the operation of the conventional speed system.
  • the present invention overcomes the limitations and disadvantages of the prior art by providing a power generation system and method for generating electricity which has completely independent protection against turbine overspeed runaway and turbine missiles.
  • the independent overspeed protection system preferably includes means for dumping hydraulic fluid from the actuators of the various governor, interceptor, stop and throttle valves controlling the flow of steam to the turbine.
  • Each valve preferably has two independent systems for dumping the hydraulic fluid and accomplishing a very fast shutdown of the turbine. These two independent systems can therefore be tested individually while the electrical generating system is on-line.
  • the signals for operating each of the two independent dumping systems for each valve are derived from three independent turbine speed signals.
  • the three speed signals in three independent dual circuitry channels generate three independent electrical speed safe signals and three independent failure or signal discontinuity representing signals.
  • the three turbine speed safe signals are translated into a majority state signal indicating the mutual state of any of two out of the three speed signals.
  • the three failure signals are translated into a majority state signal of any of two out of three failure signals.
  • any one of three speed safe and three failure channels can be tested independently while the power generating system and protection circuitry are on line and without disrupting the operation of the system or circuitry. Any one speed channel can therefore fail or be under test without shutting down the system. As an added reliability feature, if one speed channel is under test, and another channel fails, the electrical generating system will be shut down since a test signal acts like a malfunction signal.
  • either channel of the two independent hydraulic dump channels can be tested while the power generating system and protection circuitry are on line without disrupting the operation of the system.
  • One independent dump channel can be tested while the generating system is at partial load without shutting down the entire system.
  • the present invention is designed to meet the reliability standards of the Atomic Energy Commission for protection system criteria of redundancy, separation and reliability. Any single component malfunction cannot cause a failure to trip the turbine unit during overspeed conditions. In addition, a loss of power will also trip the system.
  • the present invention utilizing two independent systems for dumping the hydraulic fluid which have proper ancillary equipment provide a marked improvement in the reliability of the system over an integral system.
  • a great improvement in reliability of the present invention is accomplished by positioning the dump valve and piping suchthat connections are made from the bottom and side of the hydraulic actuator.
  • Each hydraulic dump valve is protected by a special heavy steel casing on six sides.
  • a receiver tank for the dump hydraulic fluid is dimensioned and designed in such a way as to provide for leakage in the dump valves and for the greatest volume and load of fluid.
  • the spacing and positioning of the piping which dumps the hydraulic fluid is such as to decrease the probability of any failure in both hydraulic dump channels simultaneously.
  • FIG. 1 illustrates a nuclear electrical power generating system as defined by the present invention
  • FIG. 1A illustratesa more detailed application of the invention to a nuclear steam turbine system
  • FIG. 1B shows the independent turbine speed protection system
  • FIG. 3 is a chart which summarizes the states of the speed channel and the failure channel relays for various operating conditions of a typical system
  • FIG. 4 provides a relay mechanization and logic for one solenoid channel
  • FIGS. 4A and 48 provide specific relay mechanization for the two independent dump channels, respectively, to provide appropriate majority switching controls
  • FIG. 5 shows a section through a steam valve actuator to show the manner in which the dump valves of the preferred embodiment are employed in a typical application
  • FIGS. 6, 6A and 6B show views of the hydraulic dump system.
  • FIG. 1 where a nuclear reactor system and turbine are shown.
  • the nuclear reactor system and turbine 100 include a reactor 102 and a steam generator 103, which provides steam for a turbine 104. Steam from the steam generator 103 passes through a stop valve 106 and a governor valve 108 before flowing into the turbine 104.
  • the steam turbine 104 includes a highpressure turbine (HR) 110 and two low pressure sections (L.P.) 112 and 114 with an appropriate reheater 116 and reheater-stop valves 120 and interceptor valves 118 connected thereto.
  • the turbine system 1.04 drives a generator 122 which produces electricity.
  • a breaker 123 is connected between the generator 122 and a load, not shown.
  • a megawatt transducer 125 is connected to the generator 122.
  • the megawatt transducer 125 is connected to a controller which in this case includes a plant digital computer 131 having an output connected to throttle-stop valve actuators 130, control or governor valve actuators 132, reheater stop valve actuators 134 and interceptor valve actuators 136.
  • the reactor 102 in the present embodiment is of the pressurized water reactor type (P.W.R.).
  • Other reactor types such as a boiling water reactor, would fall within the scope of the invention.
  • a speed transducer 105 is coupled to the turbine shaft to sense the speed of the steam turbine 104.
  • An output signal from the speed transducer 105 is fed into an input of the controller and plant digital computer 131.
  • the plant controller and computer 131 provides turbine 104 is monitored by the speed transducer 105 and fed back to the controller and plant computer 131.
  • the throttlestop values 106 are variably positioned by the controller and plant computer 131 thereby allowing for speed control of the turbine system 104.
  • the throttle-stop valves 106 act as safety valves being either fully open or closed during synchronous operation.
  • the governor valves 108 modulate the flow of steam through the high pressure turbine 110.
  • the reheater stop valves 120 are either fully open or fully closed.
  • the interceptor valves 118 are usually fully open or fully closed, however, under certain conditions of operation they modulate the steam flow such as during turbine shutdown.
  • a pressure transducer 107 and the megawatt transducer 125 are used in the controller and plant computer 131 for computing positions of the throttlestop valves 106, the control or governor valves 108, the reheater stop valves 120 and the interceptor valves 118 needed to satisfy turbine load and/or speed demand.
  • the controller and plant computer 131 transmits signals indicative of the valve positions to the respective valve actuators 130, 132, 134 and 136.
  • the controller and plant computer 131 in the preferred embodiment is an analog computer.
  • the analog computer designated as an Electrohydraulic System is described in Westinghouse Electric Corp. Bulletin No. 139,132, file No. 1005M.
  • An Electrohydraulic System presently being used on Westinghouse Electric Corporation turbine systems is an example of an analog controller and (plant computer) usable in the present embodiment.
  • Computer or automatic control provides for much more efficient and rapid control of the turbine 104 than manual or partially automatic control could provide.
  • the controller and plant computer 131 would be a digital computer programmed to perform the function of the Electrohydraulic System.
  • the turbine may start accelerating out of control bursting the rotor and producing missiles which could destroy the reactor 102, the turbine 104, piping, the building and injuring personnel and resulting in leakage of radioactive materials.
  • an independent protection system 128 includes a speed transducer assembly 124 which is independent of the speed transducer 105 and which is also connected to a shaft 126 of the turbine 104.
  • the independent speed transducer assembly 124 and the v protection system 128 are independent of the controller and plant computer 131. If the controller and plant computer 131 or any system connected thereto should fail and an overspeed condition should result, missile generation will be prevented by the independent protection system 128.
  • An output of the independent speed transducer assembly 124 is connected to the independent overspeed protection system 128 which in turn controls the valve actuators 130, 132, 134 and 136.
  • the independent speed transducer 124 may be of the magnetic type such as described in US. Pat. Nos. 3,018,381 and 3,018,382 assigned to the assignee of the present invention.
  • the output signals of the three transducer parts 124-1, 124-2, 124-3 of the independent speed transducer assembly 124 (FIG. 1B) are applied to check circuits 138, and 142, respectivelyThe circuit details of the check circuits 138, 140 and 142 are shown in FIG. 2 and are described infra.
  • check circuits 138, 140 and 142 as well as their control logic, described infra can be implemented by a digital computer program.
  • the digital computer may be the same as the plant computer 131 thereby realizing considerable savings in hardward expenses; however, with a decrease in operating efficiency.
  • the check circuits 138, 140 and 142 compare the signal from the independent speed tranducers 124-1, 124-2 and '124-3, to a signal representing a predetermined value of speed to determine whether the speed of the turbine 104 is being maintained at a predetermined level.
  • Each of the check circuits 138, 140 and 142 generates two signals, one indicating a failure of the turbine 104 to maintain the predetermined angular velocity and another signal to indicate that the angular velocity is within the limits of the predetermined value.
  • the two signals not only is the turbine 104 monitored for overspeed but any abrupt change in the speed signal is monitored which could indicate a failure of the independent overspeed protection system 128 or a catastrophic failure of the turbine 104.
  • the output terminals of the check circuits 138, 140 and 142 are connected to control logic circuitry 144, to be described infra in reference to FIG. 4.
  • switching circuits or relays 146 through and including 168 are connected between the check circuits 138, 140 and 142 and the control logic circuitry 144.
  • the relays 146 and 148 are controlled by the check circuit 138; the relays 154 and 156 are controlled by the check circuit 140; and the relays 162 and 164 are controlled by the check circuit 142 to control paths in the control logic circuitry 144.
  • the relays 146, 148, 154, 156, 162 and 164 during the normal operation of the system with power on, are in the actuated or ON state.
  • the switching elements or relays 146, 148, 154, 156, 162 and 164 are called safe or overspeed signal channels.
  • the switching elements or relays 150, 152, 158, 160, 166 and 168 are connected to operate in an analogous fashion generating discontinuity or failure signals when a speed signal discontinuity has been determined.
  • the circuits connected to and including the relays 150, 152, 158, 160, 166 and 168 are called discontinuity or failure signal channels.
  • Each safe overspeed channel, e.g., including relays 146 and 148, and each discontinuity or failure channel, e.g., including relays and 152 comprise the two parts of the dual channel connected to and controlled by the check circuit 138.
  • an overspeed condition is signaled by the transducer assembly 124 and the overspeed relays 146 and 148 connected to check circuit 138, overspeed relays 154 and 156 connected to check circuit 140 and the overspeed relays 162 and 164 connected to the check circuit 142 drop out or enter the OFF state.
  • the failure or discontinuity detection relays 150, 152, 158, 160 and 168 are normally in the OFF state when no discontinuity or system failure condition exists. If the electronic systems are not operating properly, the relays 150, etc. are energized, or placed in the ON state, thereby indicating a signal failure or discontinuity.
  • an overspeed condition if signaled and the overspeed or safe relays 146, 148, 154, 156, 162 and 164 change or reverse state, thereby generating a signal indicating an overspeed condition.
  • the overspeed signal actuates the dump valves described infra which prevent turbine overspeed and the generation of turbine missiles.
  • the check circuits 140 and 142 also have the same internal circuitry.
  • a signal from the independent speed transducer 124-1 is applied to a frequency-to-voltage converter 200.
  • the output signal of the frequency-to-voltage converter 200 is ap plied to an overspeed comparator 210 and to a signal discontinuity comparator 200 and a delay circuit 222.
  • An output of the delay circuit 222 is connected to an input of the signal discontinuity comparator 220.
  • An output of the signal discontinuity comparator 220 is connected to an input of an inverting gate 225.
  • the frequency-to-voltage converter 200 is typically a monostable multivibrator triggered by the zero crossover of the input signal thereto from the AC. speed transducer 124-1.
  • the monostable multivibrator has a constant duration in the unstable state.
  • the output signal from the monostable multivibrator will therefore have a variation in duty cycle which will be proportional to the frequency of the input signal thereto.
  • the output signal from the monostable multivibrator is rectified and filtered thereby producing a DC. voltage output which is linearly proportional to the input frequency from transducer 124-1.
  • the signal discontinuity comparator 220, the delay circuit 222 and the inverting gate 225 and the power amplifier 227 are shown in greater detail in FIG. 2A.
  • the output signal from the frequency to voltage converter 200 is connected to an input 249 of amplifier 250 through an appropriate impedance circuit 252.
  • the output signal from the frequency-to-voltage converter 200 is connected to the delay circuit 222 where it is fed through appropriate impedance 252 and delayed for summation at the input 249 of the amplifier 250 with the original signal from the converter 200.
  • the delay circuit 222 in the preferred embodiment has a delay of 1.4 seconds.
  • the time constant of 1.4 seconds is chosen so that any normal changes in the speed signals of the turbine system will be filtered out. Only signal discontinuities and signals representing catastrophic failure will be passed through the signal discontinuity comparator 220. If the output signal from the frequency-to-voltage converter 200 which is proportional to turbine speed varies slowly, the output signal of the amplifier 250 will remain at zero. However, if the signal from the frequency to voltage converter 200 varies rapidly, the output signal of the amplifier 250 either swings positive or negative.
  • the output signal from the amplifier 250 is amplified by an amplifier 256 and the amplifier 227. When a signal appears at the output of the amplifier 227, either relay 258 or relay 260 will be energized through diode directed paths.
  • the frequency signal provided by the speed detector device 124-1 can be converted to a digital representation and then compared by means of a digital computer or other digital means to a suitable digital setpoint.
  • the setpoint of the overspeed comparator 210 may be tested by applying a variable voltage derived from a potentiometer 212, thereby determining whether or not the check circuit 138 functions properly in the release of the relays 146 and 148.
  • the power control of the relays 146 and 148 is handled by a noninverting gate 215, which includes an emitter follower transistor stage 216.
  • the transistor stage 216 is cut off from conduction in the event of an overspeed detection by the comparator 210, resulting in the dropping out of the relays 146 and 148.
  • the operation of the check circuits 138, and 142 may be tested to insure their proper operation under actual system overspeed conditions-without causing any disruption in generating system operation.
  • an overspeed signal or discontinuity signal together with the test signal will act as if two of the dual channels indicated overspeed or discontinuity signals thereby shutting down the electric generation system and preventing generation of missiles.
  • the very high reliability of the protection system 128 is maintained even under test conditions.
  • relays are referred to herein as providing suitable means for the switching logic of the invention, other devices such as solid state switching elements, logic gates, flip-flops or programmed computers may be used without departing from the spirit or practice of the invention.
  • the signal discontinuity comparator 220 is biased so that if the difference between the directly applied signal from the frequence-to-voltage converter 200 and the signal from the delay circuit 222 exceeds a predetermined value an electrical discontinuity condition is signaled.
  • Test buttons 230 and 232 test the signal discontinuity comparator 220 by applying voltages to the signal discontinuity comparator 220. If either test button 230 or 232 is depressed, the comparator 220 is designed such that a signal is transmitted which turns on or picks up the relays 150 and 152. However, because of the majority of two out of three logic, to be described in greater detail infra, the generating system is not shut down.
  • the majority logic is shown'in detail as implemented in a majority circuit 145, and the checking circuit output relays 146, 148, 154, 156, 162 and 164 are shown with respective contacts in each relay being 147', 149, 155, 157, 163 and 165.
  • the relay contact for relay 146 is the contact 147, etc.
  • the relay contacts in FIG. 4 are shown in their normally open deenergized position. In operation, the relays of FIG. 4 are energized and the contact closed. With all the relays energized, a voltage source at the input terminal 170 will be connected to an input terminal 173 of conventional AND gate 172, contained in the control logic box 144 in FIG. 1.
  • a conventional AND gate requires all inputs to be energized in order for an output signal to be maintained.
  • the check circuit 138 deenergizes the relays 146 and 148, the relay contacts 147 and 149 will open.
  • the voltage signal at the input terminal 173 of the AND gate 172 will still retain its former value because the relay contacts 157 and 165 remain closed.
  • the majority function is thereby performed since two of the three channels controlled by the check circuitry 138, 140 and 142 must indicate an overspeed condition. Therefore, the failure of only one channel will not trip the turbine system.
  • the check circuit 140 deenergizes the relays 154 and 156 connected thereto, the relay contacts 155 and 157 would also open. In this latter case, all three branches of the relay circuit 174 in FIG. 4 would be open, and the signal at an input of the AND gate 172 would be zero.
  • the other input 175 to AND gate 172 isconnected to relay switching logic of the checking circuit output relays 150, 152, 158, 160, 162 and 168 in an appropriate fashion in order to provide an input signal to the AND gate 172 as long as two out of the three check circuits 138, 140 and 142 provide the appropriate output signals.
  • the AND circuit 172 provides one of the inputs to one of the dump valves of each of the valve actuators 130L, 130R and 132, to be described in greater detail later herein. Therefore, one dump valve on each of the valve actuators 130, 132, 134 and 136 is tripped, draining hydraulic fluid from the valve actuators 130, 132, 134 and 136 and closing the valves to the turbine 104 thereby preventing a turbine runaway and the generation of missiles which could destroy the generation system 100.
  • a similar conventional AND circuit 176 is connected to a similar majority circuit 178 performing the same function for each of the other dump valves connected to each of the valve actuators 130, 132, 134 and 136.
  • the functions of the relays 146 through 168 may also be accompanied by solid state switching circuitry or by digital logic or a digital computer.
  • the function of the check circuits 138, 140 and 142 and the relays 146 through 168 may in alternative embodiments be included in the program of the plant digital computer, thus integrating the total system operation.
  • the majority logic circuity 145 associated with the valves 130 and 132 is shown in an alternative embodiment.
  • the relay contacts 147, 151, 155, 163 and 166 are shown connected in a series parallel combination thereby performing the operation of the AND gates 172 and 176 of FIG. 4.
  • the relay logic combination actuates two relays 401 for purposes of redundancy. Contacts 401a of the relay 401 are connected in series in order to minimize the possibility of 10 the welding shut of one relay contact from disabling the system.
  • a test relay 405 is provided which disconnects the coils of dump valve solenoids mounted on the valve actuators 130, 132, 134 and 136 and connects the indicator lights 407 to ground.
  • Pushbuttons 402 are provided in order to test the continuity and operation of the circuitry connected to the dump valve solenoids 50.
  • the indicating lights 407 are connected to the relay 405 in order that a continuous path for test purposes is provided for the pushbutton circuits 402 connected across the relay contacts 401a of the relays 401.
  • FIG. 4B there is shown an identical circuit 145 ⁇ ; for the other dump channel which actuates the second dump valve in each of the valve actuators 130, 132, 134 and 136.
  • FIG. 5 a schematic diagram of the dump valves 506 and 508, connected to a typical valve actuator such as one of the valve actuators 132, 134 and 136, is shown.
  • a valve actuator cylinder 500 with two ports 502 and 504 is also shown.
  • the ports 502 and 504 are connected by tubing 503 and 505 to the two dump valves 506 and 508.
  • the output side of the dump valves 506 and 508 are connected to a dump oil receiver 510.
  • Dump oil 514 is discharged through a vent 512.
  • the two outlets 502 and 504 for the hydraulic fluid 514 are connected on opposite sides of the baseof a typical value actuator 500.
  • the pipes 502 and 504 are connected on different sides of the actuator in order to minimize the probability of any missile crimping both lines simultaneously, and thereby making both channels of the dump system inoperative.
  • the pipes 502 and 504 are spaced a minimum of 18 inches apart in the run from the actuator 500 to the dump valves 506 and 508 also to reduce the probability of the pipes 502 and 504 being simultaneously crimped. By placing the pipes 502 and 504 a minimum of 18 inches apart, the probability of the two independent dump channels being made inoperative is reduced to a level which is acceptable under the Atomic Energy Commission Regulations, Part 50, Appendix A.
  • the dump valves 506 and 508 are connected to the dump oil receiver tank 510.
  • the dump oil receiver tank 510 is dimensioned such that the volume of the receiver tank 510 is five times the volume of any actuator 500 connected thereto.
  • the tank 510 is made from heavy steel in order to protect the dump valves 506 and 508 from being damaged by missiles.
  • Connections 520 and 522 from the dump valves 506 and 508 to the tank 510 are positioned such that the entire volume of oil from the actuator 500 connected thereto will be contained in the area of the tank under the connections 520 and 522 thereby reducing any back pressure to an absolute minimum.
  • a shield 524 which protects the dump valves 506 and 508 from missiles of the 6 possible sides.
  • a heavy separator plate 526 is placed in between the valves 506 and 508, thereby further reducing the probability of a simultaneous failure of both independent dump channels.
  • a blowout release disk 528 which ruptures at 100 psi, is provided.
  • the dump oil receiver tank 510 would fill.
  • the blowout release disk 528 would rupture.
  • a vent 532 is provided at the top of the tank 510.
  • the drain 530 is connected to a reservoir 534 which holds the hydraulic fluid for the electrohydraulic control system which actuates the stop valves 106, the governor valves 108, the interceptor valves 120, and the control valves 118, as shown in FIG. 1B.
  • a second drain 536 is provided from the dump oil receiver tank 510. In case the first drain 530 is crimped or plugged, the oil will drain from the second drain 536.
  • the dump valves 506 and 508 are of the pilot-piston pressure-operated type. Since the hydraulic valves 506 and 508 will be operated very seldom, sediment will precipitate from the hydraulic oil 514 and deposit around the critical surfaces and mating parts of any valve.
  • the pilot-piston pressure-operated valve was chosen over various other types of valves, such as for example, the spool valve, because of its very excellent seating characteristics, very powerful breaking forces and very fast opening time.
  • the valve in use in the preferred embodiment is an Atkomatic 8,404, manufactured by the Atkomatic Valve Company, Incorporated of Indianapolis, Indiana. With this valve in use, the pressure within the actuator 500 commences its decay within 12.5 to milliseconds after the solenoids 50 and 51 are electrically energized.
  • valves 106, 108, 118 and 120 are all closed as quickly as possible by the independent protection system 128.
  • the steam generated by the reactor and steam generator 103 as shown in FlG. 1A is vented to the atmosphere such as by a vent connected to a secondary steamline.
  • an overspeed protection system 123 is provided which is independent of the turbine system for normal speed control comprising the speed transducer 105 and the controller and plant computer 131. Taking over the control of the turbine 104 during overspeed conditions which could lead to a runaway and the destruction of an entire generation station, the overspeed protection system 123 obviates the shortcomings of the prior art.
  • the turbine 104 is provided with three independent speed transducers 124, which generate three independent speed signals. These three signals are then translated through the use of appropriate logic circuitry into two signals which actuate the dump valves and allow the rapid closing of the steam control valves thereby foreclosing the possibility of disastrous overspeed runaway. Because of the majority logic for sensing the three independent speed signals, any one speed or failure channel can be tested independently without disrupting the turbine system. Thus, the present invention provides a high degree of assurance that when the dump valves are actuated, an actual verified overspeed or signal failure has occurred which warrants such drastic action; and further makes the performance tests possible during short periods of time to determine whether of not the individual check circuits are operating properly.
  • An electric power generation system comprising:
  • a steam turbine system having at least one high pressure and at least one low pressure turbine, a generator rotated by the turbine, means for valving, said valving means regulating a flow of steam through said steam turbine system, means for actuating said means for valving, means for measuring the rotational velocity of said steam turbine system, means for independently measuring the rotational velocity of said steam turbine system, said independent measuring means including at least three measuring channel means, means for determining whether a predetermined number of said channel means have representations of turbine system conditions corresponding to predetermined conditions, means for deactivating said actuator means, a dump oil receiver tank, said means for deactivating comprising dump valve means with at least two dump valves spaced in a predetermined relationship one from the other for dumping hydraulic fluid of said actuating means into said dump oil receiver tank, and means for connecting said dump valves to said actuator means, said connecting means being spaced in a predetermined relationship one from the other whereby an extremely low probability of simultaneous damage to both of said dump valves and associated connecting means results.
  • protection means includes plates enclosing five of the six sides of said dump valve means and a separator plate between said dump valves.
  • a method for independently preventing overspeed in a steam turbine generating system resulting from partial or total load losses said steam turbine generating system comprising at least one high pressure turbine, at least one low pressure turbine; and control, interceptor and governor valves associated therewith, an electrical generator rotated by said turbines, a breaker connected between said generator and an electric load, actuators for actuating said valves, a first transducer for transducing the rotational velocity of said steam turbine into an electrical signal, a controller receiving signals from said first transducer and transmitting signals to said actuators for controlling the position of said actuators and said valves, second transducing means for independently transducing the rotational velocity of said steam turbine into an electrical signal, said second transducing means providing a plurality of independent speed signals, a speed channel being provided for each speed signal, a check circuit included in each signal channel, control logic connected to said signal channels, two dumping signal channels including two separate dump valves independently actuated and connected to said actuators for dumping hydraulic fluid contained in said actuators, said dump valves and pipes
  • transducing speed of said turbine into a plurality of independent electrical signals checking said signals against predetermined conditions; determining whether a predetermined number of said signals check against said predetermined conditions of the immediately preceding step; activating each of said dump valves upon determining whether a predetermined number of said signal channels do not correspond to said predetermined conditions;

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • General Engineering & Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Control Of Turbines (AREA)
US00189322A 1971-10-14 1971-10-14 System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine Expired - Lifetime US3829232A (en)

Priority Applications (13)

Application Number Priority Date Filing Date Title
BE790020D BE790020A (fr) 1971-10-14 Systeme et methode pour faire fonctionner une turbine a vapeur avec protection independante de survitesse
US00189322A US3829232A (en) 1971-10-14 1971-10-14 System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
CA152,719A CA993508A (en) 1971-10-14 1972-09-28 Steam turbine with overspeed protection
DE19722248042 DE2248042A1 (de) 1971-10-14 1972-09-29 Schutzanordnung fuer hydraulikoelschnellablassventile an stellantrieben von dampfturbinen-ventilen
ZA727070A ZA727070B (en) 1971-10-14 1972-10-03 An improvement in or relating to system and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
GB4612572A GB1411814A (en) 1971-10-14 1972-10-06 System and method for operating a steam turbine with independent overspeed protection
AU47500/72A AU480393B2 (en) 1971-10-14 1972-10-06 Improvements in or relating to system and method for operating a steam turbine with independent overspeed protection
CH1478572A CH547442A (de) 1971-10-14 1972-10-10 Druckoel-stellantriebsvorrichtung fuer ein dampfturbinenventil mit schnellablassventilen.
AT868372A AT319977B (de) 1971-10-14 1972-10-10 Schutzanordnung für Hydrauliköl-Schnellablaßventile an Stellantrieben von Dampfturbinen-Ventilen
IT30461/72A IT968942B (it) 1971-10-14 1972-10-13 Impianto e metodo per azionare una turbina a vapore con protezione indipendente contro supervelocita
FR7236349A FR2157478A5 (fr) 1971-10-14 1972-10-13
NL7213866A NL7213866A (fr) 1971-10-14 1972-10-13
JP72102392A JPS5330122B2 (fr) 1971-10-14 1972-10-14

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US00189322A US3829232A (en) 1971-10-14 1971-10-14 System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine

Publications (1)

Publication Number Publication Date
US3829232A true US3829232A (en) 1974-08-13

Family

ID=22696820

Family Applications (1)

Application Number Title Priority Date Filing Date
US00189322A Expired - Lifetime US3829232A (en) 1971-10-14 1971-10-14 System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine

Country Status (11)

Country Link
US (1) US3829232A (fr)
AT (1) AT319977B (fr)
BE (1) BE790020A (fr)
CA (1) CA993508A (fr)
CH (1) CH547442A (fr)
DE (1) DE2248042A1 (fr)
FR (1) FR2157478A5 (fr)
GB (1) GB1411814A (fr)
IT (1) IT968942B (fr)
NL (1) NL7213866A (fr)
ZA (1) ZA727070B (fr)

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3891344A (en) * 1972-10-14 1975-06-24 Westinghouse Electric Corp Steam turbine system with digital computer position control having improved automatic-manual interaction
US3994623A (en) * 1975-02-11 1976-11-30 Compressor Controls Corporation Method and apparatus for controlling a dynamic compressor
US4217617A (en) * 1978-09-22 1980-08-12 General Electric Company Turbine trip circuit
US4245163A (en) * 1977-06-30 1981-01-13 Ateliers Des Charmilles S.A. Control installation for at least two hydraulic turbines
US4318093A (en) * 1980-02-25 1982-03-02 General Electric Company Logic circuit monitor
US4464577A (en) * 1982-06-18 1984-08-07 General Electric Company Turbine speed control
US20040181369A1 (en) * 2001-02-27 2004-09-16 Hitachi, Ltd. System for aiding the preparation of operation and maintenance plans for a power-generation installation
US20070013365A1 (en) * 2005-07-01 2007-01-18 Ics Triplex Technology Ltd. Turbo machinery speed monitor
CN110080837A (zh) * 2019-06-06 2019-08-02 东方电气自动控制工程有限公司 采用三取二逻辑表决的控制模块

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8321119B2 (en) 2008-07-10 2012-11-27 General Electric Company Methods and systems to facilitate over-speed protection
US8224552B2 (en) * 2008-07-10 2012-07-17 General Electric Company Methods and systems to facilitate over-speed protection
CN103850724B (zh) * 2012-11-29 2015-12-23 中广核工程有限公司 一种核电站实现汽轮机紧急停机的系统及方法
CN115126552B (zh) * 2022-07-26 2024-06-04 中国船舶集团有限公司第七〇四研究所 一种机外布置安全阀的通流阀组结构

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3891344A (en) * 1972-10-14 1975-06-24 Westinghouse Electric Corp Steam turbine system with digital computer position control having improved automatic-manual interaction
US3994623A (en) * 1975-02-11 1976-11-30 Compressor Controls Corporation Method and apparatus for controlling a dynamic compressor
US4245163A (en) * 1977-06-30 1981-01-13 Ateliers Des Charmilles S.A. Control installation for at least two hydraulic turbines
US4217617A (en) * 1978-09-22 1980-08-12 General Electric Company Turbine trip circuit
US4318093A (en) * 1980-02-25 1982-03-02 General Electric Company Logic circuit monitor
US4464577A (en) * 1982-06-18 1984-08-07 General Electric Company Turbine speed control
US20040181369A1 (en) * 2001-02-27 2004-09-16 Hitachi, Ltd. System for aiding the preparation of operation and maintenance plans for a power-generation installation
US6907381B2 (en) * 2001-02-27 2005-06-14 Hitachi, Ltd. System for aiding the preparation of operation and maintenance plans for a power-generation installation
US20050246068A1 (en) * 2001-02-27 2005-11-03 Hitachi, Ltd. System for aiding the preparation of operation and maintenance plans for a power generation installation
US7152005B2 (en) * 2001-02-27 2006-12-19 Hitachi, Ltd. System for aiding the preparation of operation and maintenance plans for a power generation installation
US20070013365A1 (en) * 2005-07-01 2007-01-18 Ics Triplex Technology Ltd. Turbo machinery speed monitor
US7355828B2 (en) * 2005-07-01 2008-04-08 Ics Triplex Technology Ltd Turbo machinery speed monitor
CN110080837A (zh) * 2019-06-06 2019-08-02 东方电气自动控制工程有限公司 采用三取二逻辑表决的控制模块
CN110080837B (zh) * 2019-06-06 2023-12-08 东方电气自动控制工程有限公司 采用三取二逻辑表决的控制模块

Also Published As

Publication number Publication date
IT968942B (it) 1974-03-20
NL7213866A (fr) 1973-04-17
BE790020A (fr) 1973-04-12
AU4750072A (en) 1974-04-11
GB1411814A (en) 1975-10-29
CH547442A (de) 1974-03-29
AT319977B (de) 1975-01-27
FR2157478A5 (fr) 1973-06-01
DE2248042A1 (de) 1973-04-19
ZA727070B (en) 1973-06-27
CA993508A (en) 1976-07-20

Similar Documents

Publication Publication Date Title
US3829232A (en) System and method for operating a steam turbine with dual hydraulic independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
US3643437A (en) Overspeed protection system for a steam turbine generator
US4007906A (en) Main steam isolation valve
EP3937188B1 (fr) Circuit de refroidissement avec soupape de dépressurisation
EP2192594B1 (fr) Système d'entraînement pour valve de sécurité
US3848138A (en) Method of effecting fast turbine valving for improvement of power system stability
US3826094A (en) System and method for operating a steam turbine with independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
US4113561A (en) Valve arrangement for a nuclear plant residual heat removal system
US3785148A (en) Electronic system and method for operating a steam turbine with independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
US3826095A (en) General system and method for operating a steam turbine with independent overspeed protection especially adapted for a nuclear reactor powered steam turbine
US4464577A (en) Turbine speed control
CA1095147A (fr) System de protection testable a composants de declenchement redondants
KR930011109B1 (ko) 급수 손실이 있을 경우에 초과압력을 막기 위해서 pwr을 제어하는 방법
Wang et al. Application of functional safety theories in furnace safety supervisory system
JPS61202190A (ja) 原子力発電用主蒸気隔離弁テスト装置
RU2825767C1 (ru) Способ защиты газотурбинного двигателя от раскрутки роторов при пожаре
JPS6229995Y2 (fr)
US3211957A (en) Protective device for a prime mover having an overspeed governor
US3683620A (en) Arrangement for protecting a steam treatment device against excess pressure
JPH036324B2 (fr)
Clark et al. Effects of aging and service wear on main steam isolation valves and valve operators
Guidance Revised NEI 97-04, Appendix B Guidance and Examples for Identifying 10 CFR 50.2 Design Bases
Weaver Reliable Overspeed Protection for Industrial Drive Turbines
Wilson et al. Evaluation of nuclear power plant availability
Solomon et al. HTGR core auxiliary cooling system availability and reliability