You are on page 1of 13

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.

-01

WRITE UP ON ELECTRONIC PROTECTION SYSTEM (EPS) 2 OUT OF 3 (TURBINE PROTECTION) AND OVERSPEED TRIP SELECTION SYSTEM ( OTSS)

REFERENCE DOCUMENTS : 1. MPL For Steam Turbine Drg .No.41330098001(TAPP3/64110/5516/SCH) 2. OTSS and EPS logics Drg. No. 41330098502 (NPC drg. no. TAPP3/64110/5539/ED) 3. TURBINE TRIP SYSTEM DESCRIPTION Drg. No. 41330000483(NPC drg. no. TAPP3/64110/5663/DN)

01 00 REV

10.6.02 DATE

REVISED AS PER NPC COMMENTS FIRST ISSUE REMARKS

BS RANA BS RANA VK Sd/BSR Sd./- AALI Sd/PRPD. CHKD. APPD.

------------------------------------------------------------------------------------------ --Sheet no.-1of-13------------

STE,BHEL, Hardwar

1 2.Electronic Protection System (EPS) 2 out of 3 (Turbine Protection) Table of Contents 1 2 3 3.1 5. General Function Valve position detection Wheel chamber pressure measurement Turbine trip Overspeed Trip selection system during test FUNCTIONAL DIAGRAM OTSS FUNCTIONAL DIAGRAM OTSS FUNCTIONAL DIAGRAM OTSS 8 8-9 9 9-10 10 10 11 12 13 -----------------------------------------------------------------------------------------.-01 A .2 6 7 Introduction Shaft Position Protection (Thrust bearing protection) (MAD 11 EZ 100) Low Vacuum Protection (Condenser) (MAG01EZ110/120) Bypass Valve Actuation Wheel Chamber Pressure Protection used for OTSS (MAA50EZ100) Description of the Electronic Protection Circuit Automatic Cyclic Functional Test Functional Description of the Two out of Three System Alarms Turbine Trip Actuation SH.Overspeed Trip Selection System (OTSS) Table of contents 1 2 2. NO.--Sheet no. FIG2.4-13300-00-479---Rev no.1 4 5 5.-2of-13------------ STE.2 3 4 FIG1.BHEL. Hardwar . FIG3.----------TAPP3/64110/5660/DN---------------------. 2 3 4 4 4-5 5-6 5 5-6 6-7 7 B.

A too big axial displacement of the turbine shaft may be caused by excessive wear of thrust bearing pads. The electronic turbine protection system contains low vacuum protection circuit (2 out of 3) shaft position protection circuit (2 out of 3) wheel chamber pressure protection (2 out of 3) These protection circuits are of 3 channel design with a 2 out of 3 logic cofiguration.BHEL. This protection measures the axial displacement in both directions (+.----------TAPP3/64110/5660/DN---------------------. In the event. The main purpose of this electronic turbine protection system is to detect problems or failures in their early stage so as to minimize damage. Turbine-generators are monitored and controlled by means of various electronic systems.-3of-13------------ STE.-) using three redundant inductive half bridge type shaft position sensors.4-13300-00-479---Rev no. compared with the trip value and trip turbine if the 2 out of 3 condition is fulfilled. These measuring signals are directed to a protection system designed in 2 out of 3 configuration. Shaft Position Protection (Thrust Bearing Protection) (MAD11EZ100) The shaft position protection system acts as a protection against axial displacement of rotating turbine parts relative to stationary parts. This system automatically trips the turbine-generator without operator intervention before serious damage can occur as a result of a detected fault in any monitored mechanical system. 2. the axial displacement of the shaft exceeds the limits set during erection. repair costs and outages of generating units. This is achieved largely by automatic tripping of turbine-generators on a timely basis.-01 A . -----------------------------------------------------------------------------------------. the turbine is tripped. The criteria are measured by analog transmitters. Hardwar . this relieving the operating personnel of the decision as to when and what action must be taken to protect faulted machines of their auxiliary systems.Electronic Protection System (EPS) 2 out of 3 (Turbine Protection) 1 Introduction This system is realised as a part of Procontrol system.--Sheet no.

4 Wheel Chember Pressure Protection used for OTSS ( MAA50EZ100) The wheel chamber pressure features 2 out of 3 configuration. Overpressure with subsequent blowout of the rupture discs could occur in the condenser in events such as loss of circulating water supply or excessive air in leakage into the condenser. The reduction in volume which occurs during condensing process together with the extraction of air create a vacuum in the condenser. 2 and 3 are fed directly to control interface of the trip solenoids. Initiation is therefore staggered so that turbine trip occurs first and bypass trip is only initiated if the pressure continues to rise.4-13300-00-479---Rev no. g. The pressure is measured by means three analog pressure transducers. The pressure is measured for each condenser and transmitted along signal lines to three hydraulic-mechanical maximum value selection circuits. which is used for interlock of the overspeed trip selection system ( refer write-up on OTSS). Turbine or bypass trip is initiated to protect against overpressure. 3.1 Bypass Valve Actuation The three trip signals (2 out of 3 configuration) are processed in the logics for closure of the bypass stations. The analog values from the three pressure transducers are each fed to an analog signal conditioning module. If none or only a part of the generated steam can be accepted by the turbine (e.-01 3. The steam is condensed and the condensate is then forwarded by the condensate pumps to the feedwater tank. Air extraction is necessary in order to remove air in leakages and build-up a vacuum at startup.-4of-13------------ STE. The condenser is watercooled to remove the latent heat of condensation. Low Vacuum Protection (Condenser) (MAG01EZ110/120) In condensing turbine the exhaust steam from the low-pressure cylinders is fed into condensers. start-up/load shedding) it is fed via the main steam bypass directly into the condensers. These maximum value selection circuits ensure that it is always the highest pressure which is transmitted to three pressure transducers. The analog values from the transducers are then taken to input -----------------------------------------------------------------------------------------.--Sheet no. Energization of a trip solenoid depressurizes in the control fluid (bypass auxiliary fluid pressure). The signals from channels 1. Hardwar .----------TAPP3/64110/5660/DN---------------------. The response level for turbine trip is selected so as to allow for the pressure rise caused of the steam still enclosed in turbine following closure of the stop and control valves. The signal from all channel are processed and then fed to the control interface of the trip solenoids.BHEL. As a result bypass valve assembly cannot be opened as long as the energizing signal is present. Trip initiation causes the supply of steam to be interrupted there by preventing overpressures.

----------TAPP3/64110/5660/DN---------------------. If the output signal of the transducer in channel 1 exceeds the limit set on LVM1. trip is actuated. A further failure in the circuit would turn the circuit into a one out of one logic. a noncoincidence alarm is given and in parallel further cyclic testing of channel 1 inhibited. A defective signal is detected by means of comparison and monitoring disturbance bit of the measured signal. LVM1 respond. The limit values set on three limit value monitors are identical. 5 Discription of the Electronic Protection Circuit The electronic turbine protection circuits are 2 out of 3 configuration featuring analog comparison and cyclic testing. If a fault is detected in one channel. Each channel is tested for operability by cyclic scanning as explained in the description of 2 out of 3 protection circuit.--Sheet no. Response of one further channel is then sufficient for trip actuation. the 2 out of 3 system reverts to a 1 out of 2 configuration by means of a substitute initiation signal.2 Functional Description of two out of three System The functional sequence of operation is described below with reference to one protection circuit. A defective channel is detected by means of a comparison circuits which generates a substitute initiation signal that causes the 2 out of 3 circuit to revert to 1 out of 2 configuration .1 Automation Cyclical Functional Test Analog values are compared continuously with one another by means of the evaluation logic (2 out of 3).BHEL. however. If LVM 2 or 3 responds as well. The trip alarm XK96 is stored and can be acknowledged by means of pushbutton or the functional testing module. Deviations of the analog signals are detected by monitoring of the measured values. The order in which the LVMS respond is of no significance. This test detects non-self-reporting failures. First channel 1 of the circuit is tested and then channels 2 and 3 in succession. Each channel is tested for operability by cyclic scanning. If. 5. neither LVM 2 or LVM3 responds within the set period.-5of-13------------ STE. Hardwar . This generates a substitution signal such that the circuit is reconfigured to 1 out of 2 logic.4-13300-00-479---Rev no. 5.-01 module for conversion into bus signal . -----------------------------------------------------------------------------------------. Further limit values are checked for proper function of the individual channel.

Hardwar . thus allowing the control room alarm system to be triggered again by the reappearing fault signal.4-13300-00-479---Rev no. LOW VACUUM PROT (CONDENSER) DEAD (TURBINE TRIP) . . The EPS trip signals trip the turbine through turbine trip system while the generator is recommended to be subsequently disconnected from the grid by reverse power relay. TURB SHAFT DISPLACEMENT HIGH . the fault alarm signal present will be interrupted for a short period.-6of-13------------ STE. LOW VACUUM PROT (CONDENSER) DEAD (BYPASS TRIP) MAD12 EZ100 MAG01 EZ110 MAG01 EZ120 XK99 XK99 XK99 -----------------------------------------------------------------------------------------.BHEL.----------TAPP3/64110/5660/DN---------------------. 6. LOW VACUUM PROT (CONDENSER) FAULTED (BYPASS TRIP) If an additional failure occurs in a further channel of a still disturbed protection circuit. TURB AXIAL BRG PROT FAULTED LOW VACUUM PROT (CONDENSER) FAULTED (TURBINE TRIP) . Alarm For use with the Control Room Alarm System the following alarms are available : Pre-trip Alarms MAD12 CY004 MAG01 CP002 XK94 XK94 . TURB AXIAL BRG PROT TRIPPED LOW VACUUM PROT (CONDENSER) TRIPPED (TURBINE TRIP) . CONDENSER VACUUM LOW Trip Alarms .--Sheet no. This monitor is set sufficiently lower than the trip points. TURB AXIAL BRG PROT DEAD . LOW VACUUM PROT (CONDENSER) TRIPPED (BYPASS TRIP) MAD12 EZ100 MAG01 EZ110 MAG01 EZ120 XK96 XK96 XK96 - Protection Circuits Fault Alarms MAD12 EZ110 MAG01 EZ110 MAG01 EZ120 XK93 XK93 XK93 .-01 Warning alarms are given by separate limit value monitors which are connected to one of the three analog input signals.

-7of-13------------ STE.----------TAPP3/64110/5660/DN---------------------. Hardwar . Two channel trip actuation in 1 out of 2 configuration of the two remote trip solenoids is performed in trip cabinet.-01 A DEAD alarm is given when all three channels of a protection circuit are disturbed at the same time. System Fault Alarm EPS CENTRAL UNIT FAULTED MAY01 EZ002 XK93 This alarm includes failures of the clock pulse generator for the cyclic functional test and wire breaks in the trip signal cables between the EPS and TTS cubicle. The signal paths including relays in the trip cabinet. 7 Turbine Trip Actuation The signals gated in the logic circuitry are output in the form of three 2 out of 3 gated trip signals. .4-13300-00-479---Rev no.BHEL. -----------------------------------------------------------------------------------------.--Sheet no. are continuously monitored for wire break and short circuit by means of three CS012 monitored OR modules.

the main steam control valves must be closed by the time 5% overspeed has been reached. it is not necessary to wait for response by the overspeed trip mechanism at 115% + 0.--Sheet no. The output frequency is proportional to the turbine shaft speed. the turbine speed is too high.channel system . which are supplied to the three channels.-8of-13------------ STE. pulses are passed from one frequency generator (100 KHz) to a counter. a signal is formed for trip initiation. at the latest ( speed governor must be set for 5% droop). A disk with 120 magnets is mounted on the shaft. Three Hall probes with dedicated pulse converters generate three separate.----------TAPP3/64110/5660/DN---------------------. the position of the main steam control valves and wheel chamber pressure (to make allowance for valve leakage.4-13300-00-479---Rev no. If this is not the case. 60 period of this frequency (at 3000 RPM) are counted by a control unit . or if the wheel-chamber pressure has not fallen below a preset limit valve by a specific point in time. 2 Function The overspeed trip selection system is a three . During this time . The system monitors the turbine speed. The elements of the system responsible for turbine trip are gated in a 2 -out -of 3 logic according to the closed . Hardwar . a malfunction is present in the turbine control system ( including the main steam control valves) Since this malfunction will in any case lead to an overspeed trip.-01 B .) The system is described for channel 1. identical output frequencies . and turbine trip is initiated at approx.BHEL. This prevents turbine trip when there is an increase in speed while the valves are closed and the wheel chamber pressure is not too high. This signal is locked out in a 2-out-of-3 logic by the signal formed from the signals for the main steam control valve closed positions and from a signal for the wheel chamber pressure.circuit principle. -----------------------------------------------------------------------------------------.5% overspeed. In each measuring cycle. If the counter reading after 60 period is below a preset value.Overspeed Trip Selection System (OTSS) 1 General After a load rejection. 6 % overspeed The maximum transient overspeed is thus reduced by the difference between the setpoint of the mechanical / hydraulic overspeed trip devices and the valve at which the overspeed trip selection system takes action. In the event of a deviation of this kind.

The signal of the 3-out-of-4 selection logic (MAY40 EC200 ZA01/ZA02) is also used as a check-back signal in the ATT SG HP valves and tested for proper function at regular intervals.-9of-13------------ STE. (For further information about the ATT-test see description ATT SG Safety Devices. The ATT test program acts on two channels at a time to fulfill the 2out-of-3 condition of the OTSS. four binary position limit switches for each valve (MAA10 C002C/E/G/J XG01 and MAA20 CG002 C/E/G/J . This limit value is < 20 kg/cm2. -----------------------------------------------------------------------------------------. The outputs of the three channels OR-gated each with the signals "Main steam control valves closed (MAY 40 EC200 ZA01 and MAY40 EC200 ZA 02)" and "Wheel chamber pressure < 20 kg/cm2 (MAA50 EZ100ZK11/ZK21/ZK31)" and then connected to two solenoid valves each.of-3 selection circuit of the OTSS. which will disappear when the channel is switched off (break current system). These six solenoid valves are acting as the 2-out. In case of failure of 1 channel .4-13300-00-479---Rev no. 2. The complete test cycle is approx . that the valve is completely closed. This test frequency is made effective by cyclical test commands or by the ATT SG safety devices. The wheel chamber pressure is measured by three transducers and then monitored for a special limit value (MAA50 EZ100:XT01/02/03).--Sheet no. This limit value represents the overspeed trip point .ZV08 ) exceeds the (adjustable) limit value of 106% .----------TAPP3/64110/5660/DN---------------------.-01 For test purposes a test frequency (MAY20 EZ511 to 513 and MAY20 EZ521 to 523-XJOI ) is also applied to a monitoring module. During test the variable test frequency takes the place of the actual frequency related to the turbine speed . These three limit values are processed in 2-out-of-3 selection logic . The channel is switched off if the actual turbine speed (MAY20 EZ511 to 513 .2 Wheel Chamber Pressure Measurement Even if the 0 % position limit switches of main steam control valve respond.XG02) are used and gated in a 3-out-of-4 logic configuration. An automatic cyclical test acts on one channel at a time in sequence. it is not guaranteed.1 Valve Position Detection For a proper function of the OTSS it is essential to generate a reliable and safe valve position signal. In case of a considerable leakage especially at no-load the turbo generator is further accelerated. Hardwar . Because of the importance of the "CLOSED" signal and the difficult detection of closed position in a valve with mechanical stop. 2. These four position limit switches are monitored for noncoincidence. 8 min. the selection logic will be changed to 1 out of 2 and an alarm shall be generated .BHEL. During normal turbine operation (speed <106 % ) each channel provides 24 V DC.

3 Turbine Trip If. Turbine trip is initiated if at least two channels (acting on four solenoid valves) are switched off (solenoid valves de-energized).e. An alarm is initiated in the control room. In the event of a fault.BHEL. the control unit blocks the output frequency from the Hall probes and begins counting the periods using the test frequency. One of the coils in each of the two solenoid valves is therefore no longer energized. Hardwar . -----------------------------------------------------------------------------------------. This does not initiate turbine trip. during normal operation. For further information see description ATT SG Safety Devices.--Sheet no. the turbine is immediately tripped.-01 If speed of turbine exceeds 106% and gated with either of wheel chamber pressure is higher than specified value and all HP ESV valves are not closed then trip signal is given(i. Each channel can be tested during shutdown as well as operation. The channel output is the de-energized.4-13300-00-479---Rev no. If at this point another channel is switched off.-10of-13----------- STE. governing system is malfunctioning).----------TAPP3/64110/5660/DN---------------------. the relevant channel is announced to the defective and is switched off after a certain delay. If a channel is being tested. This test frequency is 10 % higher than the normal output frequency which causes the channel to be switched off. a fault occurs which is identified by the monitoring system. 4 Overspeed Trip Selection System During Test The overspeed trip selection system during test is of the same design and is used for overspeed protection during test of the OTSS operation. The test cover all major functions. the 2-out-of 3 is converted to a 1-out of-2 logic by the substitute signal.