No.：GFEDCBADraftedCheckedReviewedApprovedYangJiang 核電YangJiangNuclearPowerStation核電廠工程PYX17GSE005S40B45 TURBINEPROTECTIONSYSTEM(GSE)SYSTEMDESIGNABC× SHANGHAITURBINE containsproprietaryinformationownedbyShanghaiElectricPowerGenerationEquipmentCo,..ShanghaiTurbineWorks.Usethissolelyforthepurposegiven.Donotreproduce,discloseoruseotherwisewithoutwrittenconsentofShanghaiElectricPowerGenerationEquipment .ShanghaiTurbineNo.：COMPILING編制部門：自 編制：校對：審審定：： RATIFIED批ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE1ofNormalTurbineProtectionandTripTheturbineprotectionsystemisalwaysinservice.Allsensors,actuatorsandexternalsignalsareconnectedtotheturbineprotectionsystemandoffaults.Allautomationprocessorareloadedwiththerespectiveapplicationsoftware.Allcomponentsofthesystemareworkingwithoutfaults.Allpowersareavailable.Dependingontheactualstatusoftheturbinegeneratorntthefollowingoperationsmodesoftheturbineprotectionsystemareactive:Turbripisreset.Inthiscasenoturbripcriteriaareactive.Openingoftheturbineemergencystopandcontrolandvalvesispossible.Duringcertainntconditions,e.g.shutdown,run-uporrundown,individualprotectioncircuitsaredisabledtopreventunnecessaryalarmsandtripinitiations.Turbripisactive.Atleasturbripcriteriaisactive.Inthiscaseopeningoftheturbineemergencystopandcontrolvalvesisnotpossible.Atstandstilloftheturbinetheoverspeedprotectionsystemsaretrippedbythemonitoringoffailureoftheturbinespeedsensors.ForconservationorATTinthestandstilloftheturbhismonitoringisTestingoftheturbinevalvesduringcommissioningormaintenancebyturbinesystemistripped:Abouttwomaintenancekeyswitchesintheturbineprotectioncab theturbripsystem(allprotectioncircuitsandallothertripsignals)aredisabledand operationoftheturbinemainandinterceptemergencystopandcontrolvalvesisreleased.Onlytheturbripoftheoverspeedprotectionbythehardwiredpartisactive.ThisactivationofthetwomaintenancekeyswitchesisonlyallowtoShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE2ofshutdownoftheturbineandthemainpressureupstreamthemainvalvesisbelowminimum.Forsafetyreasonthelockingoftheturbripsystemisonlyactiveiftheturbinespeedisbelow0,5s-1andthemainpressureupstreamthemain valvesisbelowminimum.Start-uporoperationoftheturbinewithactivatedkeyswitchesisstrictlyforbiddenandhastobecontrolledbyadministrativemeans.HPStopTheHPStopValveActuatorisprovidedwithasolenoidvalvefornormalopen/closeoperation(ECS:GPV01/02/03/0411DR;KKS:MAA11/21/31/41AA011),receivingitssignalfromthesubgroupcontrolforstartupoftheST.Apositiontransducerattheactuator(ECS:GSE01/02/03/0451MM;KKS:MAA11/21/31/41CG051)givesitssignalforpositionmonitoring.Onefilter(ECS:GSE11/12/21/2241FF;KKS:MAC11/21/31/41AT021)ensuresaproperfunctioningofthesolenoidToopentheHPstopvalve,thesolenoidvalve(ECS:GPV01/02/03/0411DR)mustbede-energized.Simultaneously,thesolenoidvalvesGSE01/02/03/0413ELandGSE01/02/03/0414ELmustbeenergized.aseofaturbripthesolenoidvalve(ECS:GPV01/02/03/0411DR)mustbeenergizedandbothtripsolenoidvalves(ECS:GPV01/02/03/0413/14DR)arede-energized.De-energizingofoneorbothsolenoidvalvesleadstoopeningoftheadjacenthydrauliccartridgevalves(ECS:GSE01/02/03/0423/24VH)andsubsequenttofastclosingoftheHPValvebyspring.Instationaryoperation,theHPstopvalvesareinopenposition.Pressure,flowandtemperatureareinapredefinedrange.Pressureandtemperatureofthecontrolfluidfortheactuatorsareinapredefinedrange.LPStopToopentheLPStopValveinnormaloperation,thesolenoidvalve(ECS:GSE11/12/21/2231DR)hastobede-energized.Itremainsinthispositionuntilitsreceivesaclosingsignal.Thetripsolenoidvalves(ECS:ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE3ofGSE11/12/21/2233/34EL)areenergized.Incaseofaturbinetripthesolenoidvalveremainsenergizedandbothtripsolenoidvalvesarede-energized.De-energizingofoneorbothsolenoidvalvesleadstoopeningoftheadjacenthydrauliccartridgevalvesandsubsequenttofastclosingoftheLPStopValvebyspring.Instationaryoperationoftheturbine,theLPvalvesarecompleyopen.Pressure,flowandtemperatureareinpredefinedrange.Pressureandtemperatureofthecontrolfluidareinthepredefinedrange.Noleakagesofcontrolfluidaredetected.ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE4ofParticularsteadyUnitIntheeventofaunittriptheTurbineController(STC)willremaindisarmeduntilsuchtimesasthehydraulicprotectioncircuitarereset.On-loadtestoftripAllofthetripsolenoidshaveanonloadtestcapabilitywhichareinitiatedfromtheMaontrolRoom.On-loadtestofthesolenoidsisperformedbytheSTCandisthereforefullydescribedinAutomaticturbinetester(ATT)inGRESystemDesign.HPandLPStopValves–OnLoadAllvalveshaveanonloadtestcapabilitywhichisinitiatedfromtheMainControlRoom.On-loadtestofthevalvesisperformedbytheSTCandisthereforefullydescribedinAutomaticturbester(ATT)inGRESystemDesign.ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE5ofParticulartransientTurbineProtectionandTripThefollowingparticulartransientoperationconditionsaresingledoublelossofpowerfailureoftripsolenoidSingleSinglefailureswithintheturbineprotectionsystemdonotinitiate DoubleThestandardizedstructureofthe2-out-of-3protectioncircuitsandthehardwaredesignludesafailuremodedesign,whereadoubleoronlyatriplefailureofredundantelements(measurementdevice,input/outputdeviceetc.)leadstoSTtrip.LossofpowerTheredundantpowersupplytotheturbineprotectionsystemensuresincaseofasinglepowersupplyfailurefurtheroperationoftheturbine.Lossofbothpowerswillinitiateaturbrip.Uponrecoveryofcabpowersupplytheapplicationsoftwarewillrestartautomatically.DuetopowersupplyfromtheDCsystemlossofsitepowerhasnoeffect.Failureoftripsolenoidvalves(pilotEaainorvalveisequippedwithtwopilotvalvesShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE6ofThemainvalveorinterceptvalveisclosedifoneofthebothpilotvalvesisLossofpowersupplytoapilotvalvecanbecausedFailureofapairofredundantoutputmodulesoftheturbripsystem.Thisisafailureoftworedundantelements.Inthiscasethefaultaffectsseveralpilotvalvesinparallelwhichwillcauseaturbrip.Interruptionofcabling(looseconnection,wireorcablebreak)topilotvalve:associatedmainvalveisclosed.Failureofpilotvalvesitself,associatedmainvalveisSetheCPR1000YangJiangturbinecomprises4mainvalvesnamelyHPvalvesand4interceptvalvesnamelyLPvalves,theeffectofoneorrectlyclosedvalveonturbinegeneratorntoperationduringsteadystateoperationisnegligible.Itshouldbenotedthatperformanceofautomaticvalvetestingwithonefaultyvalveisnotpossible.Maloperationofthemaintenancekeyswitchescanbecausedbythefollowingoperatormistakes.Onlyoneofthemaintenancekeyswitchesisactivated(switchedon)forvalvetesting.Thispreventsvalvetestingifanyprotectionsignalisactive.Ifoneorbothmaintenancekeyswitchesarenotdeactivated(switchedoff)priortoturbinestart-uportheyareactivatedduringturbineoperationthesafetyleveloftheturbineprotectionisreduced.Duetotheinterlockingwiththereleaseconditionsmain andturbinespeedtheturbineprotectionisnotdisabled.Awarningsignalisissuedonthealarmsequencedisy.Toensurethedesignedsafetyleveloftheturbineprotectionsystem,bothmaintenancekeyswitcheshavetobede-activated( ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE7ofHPStopTheterm"transientoperation"coversoperatingconditionsofthevalvesinwhichpressureandtemperaturevarywithtime.BecausetheHPvalveshaveanindirectfunctionalconnectiontotheST,thetransientoperationconditionsfortheSThavealsotobeconsideredfortheHPvalves,seethefollowinglist:start-upoftheturbinewithwarmingupofHPvalveshutdownoftheturbinewithcoolingdownofHPvalvevariationofloadbetweenminimum umturbATT(automaticturbThefollowingcriteriafortransientprocessparametersaretakenintoTheummassflowchangeduringfastclosingofthevalvesislimitedinordertominimizethepressuresurgeintheMSpi.Thereforeadefinedclosingtimeisadjustedattheactuators.TheumallowabletemperaturechangeintheHPvalvecasingsislimitedtokeepthetemperaturestressesinapredefinedrange.LPStopBecausetheLPvalveshaveanindirectfunctionalconnectiontotheST,thetransientoperationconditionsfortheSThavealsotobeconsideredfortheLPvalves.Theterm"transientoperation"coversoperatingconditionsoftheSTinwhichpressureandtemperaturemightvary.Followingtransientconditionarestart-upoftheshut-downofthevariationofloadbetweenminimum umloadrejectiontohouseloadandnoloadAutomatic esting DisturbanceofStopValveActuatorsandStopValvesFollowingmalfunctionoftheHPStopValvecanappear:ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE8ofFailure(de-energizing)oftripsolenoid(ECS:GSE01/02/03/0413EL,GSE01/02/03/0414EL;KKS:MAA11/21/31/41AA013/AA014)Failure(energizing)ofsolenoidFailure(de-energizing)ofposition(ECS:GSE01/02/03/0451MM;KKS:ThetripclosingtimeofallSTcontrolvalveswillbecheckedregularly.TheclosingtimemeasurementispartoftheATT(automaticturbester).Iftheripsolenoidvalvefailsinopenposition,thesimultaneousclosingoftheredundanttripsolenoidvalveensuressafeshutoffofthe.Anyleakagesofthecontrolfluidatthehydraulicactuatorwillbecollectedindrainpansbelowtheactuator.Leakagesensor(ECS:GME01/02/03/0411MN;KKS:MAA12/22/32/42CL011)areinstalledatthedrippans.Ifonestopvalveactuatorfails(failurede-energizing)dueFailure(de-energizing)oftripsolenoidvalves(ECS:GSE11/12/21/2233EL,GSE11/12/21/2234EL;KKS:MAC11/21/31/41AA013/AA014)Failure(energizing)ofsolenoidvalve(ECS:GSE11/12/21/2231DR;KKS:Theactuatorclosesthevalve.aseofclosureofoneormoreLPControlValvestheturbinewillbetripped.TheredundantdesignoftripsolenoidvalvesprovidesasafetytripoftheLPvalvesasethatoneofthesolenoidvalvesfails.ThetripclosingtimeofallSTstopvalveswillbecheckedregularly.TheclosingtimemeasurementispartoftheATT.Ifonevalveactuatorfailsbyexceedingthepermissibleclosingtimeitcanbeclosedly.Ifaftripastopvalvefailsinopenposition,thesimultaneousclosingoftheadjacentcontrolvalvewillensuresafeshutoffofthe ShanghaiElectricPowerGenerationEquipmentCo. ShanghaiElectricPowerGenerationEquipmentCo. SYSTEMDESIGNTURBINEPROTECTIONSYSTEMSheetPAGE9ofAnyleakageshydraulicvalveactuatorswillbecollectedindrainpansbelowtheactuators.Leakagesensorsareinstalledatthedrainpans.Theelectro-hydraulicactuatorsarearrangedhorizontally.Theactuatorconsistsofasingle-actionhydrauliccylinderwithspringreturnintheclosingdirectionofthevalve.InendpositionorificesdumpstheclosingmovementofthevalveTheLPvalveshaveanangularmovementof90°.TheBellevillespringpackprovidesfortherequisitesintheclosingdirection.Quickclosingoftheactuatoristriggeredby2solenoidvalvespilotino2/2-waycartridge