Abstract: A method is provided of operating a reactor trip system, including: determining whether an automated shutdown of the nuclear plant has been demanded; energizing an interface relay to de-energize an undervoltage coil of a circuit breaker when the automated shutdown has been demanded; energizing an interface relay to energize a shunt trip coil of the first circuit breaker when the automated shutdown has been demanded; de-energizing the undervoltage coil when the manual shutdown has been demanded; energizing the shunt trip coil when the manual shutdown has been demanded; performing a check of a cyclical execution of processors in first and second divisions using separate watchdog timers in each division and determining whether watchdog timer signals have been de-energized in the first and second divisions; and de-energizing the undervoltage coil if the first and second watchdog timer signals have both been actuated.

Abstract: A safety system for a nuclear power plant includes first through fourth sensors; a first division, including a first calculation module that determines first and second calculation results based on signals from the first and second sensors, a first data-sharing module for sharing the first and second calculation results with a second division, and a first voting logic for generating a first safety demand signal based on the first through fourth calculation results; and the second division, including a second calculation module for determining the third and fourth calculation results based on signals from the third and fourth sensors, a second data-sharing module for sharing the third and fourth calculation results with the first division, and a second voting logic for generating a second safety demand signal based on the first, second, third, and fourth calculation results, wherein the first through fourth sensors each monitor the same plant parameters.

Abstract: A safety system for a nuclear power plant includes first through fourth sensors; a first division, including a first calculation module that determines first and second calculation results based on signals from the first and second sensors, a first data-sharing module for sharing the first and second calculation results with a second division, and a first voting logic for generating a first safety demand signal based on the first through fourth calculation results; and the second division, including a second calculation module for determining the third and fourth calculation results based on signals from the third and fourth sensors, a second data-sharing module for sharing the third and fourth calculation results with the first division, and a second voting logic for generating a second safety demand signal based on the first, second, third, and fourth calculation results, wherein the first through fourth sensors each monitor the same plant parameters.

Abstract: A wireless/automated method and system of synchronizing the speed and acceleration/deceleration of an unlimited number of preceding/trailing vehicles, to achieve ‘mechanical like’ coupling, comparable to railroad cars. This includes wireless transmitting of the speed and notification of acceleration/deceleration of a preceding vehicle to a trailing vehicle, automated response to the speed and acceleration/deceleration of a preceding vehicle by a trailing vehicle so that the trailing vehicle accelerates/decelerates in near simultaneous synchronization with the preceding vehicle, and alerting the driver to automated vehicle acceleration.

Abstract: A method for generating a validated measurement of a process parameter at a point in time by using a plurality of individual sensor inputs from a scan of said sensors at said point in time. The sensor inputs from said scan are stored and a first validation pass is initiated by computing an initial average of all stored sensor inputs. Each sensor input is deviation checked by comparing each input including a preset tolerance against the initial average input. If the first deviation check is unsatisfactory, the sensor which produced the unsatisfactory input is flagged as suspect. It is then determined whether at least two of the inputs have not been flagged as suspect and are therefore considered good inputs. If two or more inputs are good, a second validation pass is initiated by computing a second average of all the good sensor inputs, and deviation checking the good inputs by comparing each good input including a present tolerance against the second average.

Abstract: The content of and hierarchical access to three levels of display pages containing information on critical function monitoring and success path monitoring.

Abstract: The use of alarm indication on the overview (IPSO) display to initiate diagnosis of challenges to critical functions or unavailability of success paths, and further alarm-based guidance toward ultimate diagnosis.

Abstract: Through a localized compact workstation (104), the operator is offered all the monitoring, alarming and control functions which have been previously dispersed over many control panels located throughout the control room (100). The information display hierarchy is composed of an IPSO overview display (122), video display units (108) preferably based on CRT technology and qualified video display units (116) preferably based on solid state flat panel display technology. Associated with each display unit is an individual, independent control module to allow process and component control. One control module (112) supports non-safety control functions and avoids separate controllers for components and process control. Another control module (118) is a qualified system which supports safety system control functions and avoids separate controllers for component and process control.

Abstract: Indicating the priority of a spatially fixed, activated alarm tile on an alarm tile array by a shape coding at the tile, and preferably using the same shape coding wherever the same alarm condition is indicated elsewhere in the control room. The status of an alarm tile can change automatically or by operator acknowledgement, but tones and/or flashing cues continue to provide status information to the operator.

Abstract: Alarm acknowledgment can be made not only at the alarm tile array of a given console but via other touch sensitive alarm indications in the screen displays of the monitoring system at the same or other consoles; also, touching one tile can acknowledge multiple alarm sources.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: The invention provides integration of the automatic semiautomatic and manual modes on a single man-machine interface device (200,400), with the master control of a system parameter such as pressurizer level, which is responsive to at least two system components (charging pumps, letdown valves), each of which can adjust a different system variable. The setpoint for automatic master control, is selected and displayed (216) on the device, along with the current value (212) of the setpoint parameter (pressurizer level). In the semiautomatic master mode selectable by the operator on the device, either a setpoint (272) or an output demand (282) can be specified for one of the components (206), and the master controller will then adjust the other component (204) accordingly. When all subgroup controls are in the manual mode, the master controller is completely overridden by operator control of each component or subgroup.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: An advanced control room complex for a nuclear power plant, including a discrete indicator and alarm system (72) which is nuclear qualified for rapid response to changes in plant parameters and a component control system (64) which together provide a discrete monitoring and control capability at a panel (14-22, 26, 28) in the control room (10). A separate data processing system (70), which need not be nuclear qualified, provides integrated and overview information to the control room and to each panel, through CRTs (84) and a large, overhead integrated process status overview board (24). The discrete indicator and alarm system (72) and the data processing system (70) receive inputs from common plant sensors and validate the sensor outputs to arrive at a representative value of the parameter for use by the operator during both normal and accident conditions, thereby avoiding the need for him to assimilate data from each sensor individually.

Abstract: Apparatus and method are disclosed for continually generating data values (M) indicative of the time dependent waveform of the current (I.sub.C) in a control rod latch actuation circuit (28), during application of a pulsed drive voltage (30). A data value is selected that represents a value limit (M.sub.min) characteristic of the waveform during the time before the latch (14) has reached a critical position of interest. The most recently generated data value (M.sub.N) is compared to the value limit (M.sub.min), and a control signal (e.g., 74, 52, LH) is generated when the most recently generated data value (M.sub.N) exceeds the value limit (M.sub.min). The data values (M) preferably indicate the time derivative of the waveform (I.sub.C) at a plurality of predetermined times during application of the drive voltage.