The present invention relates to an electronic device managing the display of data on at least one display screen for controlling a nuclear power plant comprising at least one nuclear reactor.
The invention also provides a control system of the power plant.
The system includes a set of sensors and actuators associated with the (x) reactor (s) Nuclear (s), a plurality of electronic control units, each control unit being configured to perform at least one action from the acquisition a value measured by a corresponding sensor and the control of a corresponding actuator; and such an electronic device, the data being associated with the control units, e the electronic device being connected to the plurality of control units. control units and the one or more sensor (s) and / or actuator (s) are in accordance with several distinct classes of nuclear safety.
The invention also relates to a data display control method, implemented by such an electronic device.
The invention also relates to a computer program product comprising software instructions that, when implemented by a computer, implement such a display management process.
US 8,259,990 B2 discloses a steering system of a nuclear power plant, comprising safety equipment and non-safety equipment. Each safety equipment is an equipment capable of performing a function to immediately stop a nuclear reactor, and each non-safe equipment is equipment for performing start / normal judgment, monitoring and / or controlling operations.
The control system includes a display device for managing data associated with safety equipment and non-security, data associated with different equipment being at the display, superimposed on each other to get the displayed pages.
However, with such a control system, the display of the management of data associated with the safety equipment is not optimal.
The object of the invention is therefore to provide an electronic device and a displaying data management method for improving the security management data for controlling a nuclear power plant.
To this end, the invention relates to an electronic device managing the display of data on at least one display screen for controlling a nuclear power plant comprising at least one nuclear reactor, the data being derived from a plurality of electronic control units, each control unit being configured to perform at least one action from the acquisition of a value measured by a sensor and controlling an actuator, or the sensor (s) and / or actuator (s) being associated with the (x) reactor (s) nuclear (s), the control units and the one or more sensor (s) and / or actuator (s) being in accordance with several distinct classes of nuclear,

the electronic device being adapted to be connected to the plurality of control units, and comprising:

- a module assembly (s) e (s), design layer (s), the assembly being configured to create several separate layers, each layer containing information to be displayed for a respective security class associated with one or more steering unit in accordance with said security class, and

- generating electronic module configured to generate at least one data page to be displayed, each page being obtained by superposition of several separate layers.

Thus, the one or more design layer modules (s) are configured to create several separate layers, each layer containing information to be displayed for a respective security class, said information being associated with one or more control units in accordance with said class security.

Separating the information to be displayed via separate layers of a safety class to another then allows better management of safety data for controlling the nuclear power plant, avoiding a mixture of information between classes different security.

According to other advantageous aspects of the invention, the electronic device includes one or more of the following characteristics, taken individually or in all technically possible combinations:

- the electronic device comprises at least one design layer module (s) for each respective security class, layer creation module (s) being separated by a security class to another;

- the electronic device comprises a single generating module;

- the generation module is consistent with the class of the highest security among the various security classes;

- the generation module is configured to generate each page by superposing a layer associated with a higher security class over a layer associated with a lower security class for focus information of the highest security class case of conflict in the superposition of layers;

- the layers are created separated by a security class to another; and

- each nuclear safety class is a safety class according to a standard selected from the group consisting of: IEC 61513, the 61226 IEC standard, IAEA standard, the standard Nuclear Safety of the United States of America, the standard European nuclear safety, nuclear safety standard French N4, the Japanese nuclear safety standard, the standard of Korean nuclear safety, the standard of Russian nuclear safety, the standard of Swiss nuclear safety and British nuclear safety standard.

The separation also create layers of different safety class via independence associated creation of modules to better manage the production of screen pages containing information from electronic units to control various safety classes, and so ensure the information display of the highest safety class.

When the management device comprises several separate creation of modules, each configured to create a separate layer.

The invention also relates to a steering system of a nuclear power plant comprising at least one nuclear reactor, the system comprising:

- a set of sensors and actuators associated with the (x) reactor (s) Nuclear (s);

- a plurality of electronic control units, each control unit being configured to perform at least one action from the acquisition of a value measured by a corresponding sensor and the control of a corresponding actuator, control units and the or the sensor (s) and / or actuator (s) being in accordance with several distinct classes of nuclear safety; and

- an electronic device managing the display of data on at least one display screen, the data being associated with the control units, the electronic device being connected to the plurality of control units, the electronic device being such that defined above.

The invention also relates to a data display method for managing at least one display screen for controlling a nuclear power plant comprising at least one nuclear reactor, with data from a plurality

of electronic control units, each control unit being configured to perform at least one action from the acquisition of a value measured by a sensor and controlling an actuator, or the sensor (s) and / or actuator (s) being associated with the (x) reactor (s) nuclear (s), the control units and the one or more sensor (s) and / or actuator (s) being in accordance with several distinct classes of nuclear,

the method being implemented by an electronic device adapted to be connected to the plurality of control units, and comprising:

- creating, for each page to be displayed on at least one display screen, a number of separate layers, each layer containing information to be displayed for a respective security class associated with one or more control units in accordance with said class of safety, and

- generating at least one data page to be displayed, each page being obtained by superposition of several separate layers.

According to other advantageous aspects of the invention, the display management method includes one or more of the following characteristics, taken individually or in all technically possible combinations:

- when creating layers, the layers are created separated by a security class to another; and

- during the generation of page (s), a layer associated with a higher security class is superimposed over a layer associated with a lower security class for focus information of the highest security class case of conflict when overlaying layers.

The invention also relates to a computer program product comprising software instructions that, when implemented by a computer, implement a display management process, as defined above.

These features and advantages of the invention will become apparent from reading the description which follows, given by way of example, and with reference to the accompanying drawings, wherein:

- Figure 1 is a schematic representation of a system according to the invention, for driving a nuclear power plant, the system comprising a set of sensors and actuators, a plurality of sensors of the control electronics units and / or actuators, and an electronic device managing the display of data on a plurality of display screens,

- Figure 2 is a schematic representation of the steering system according to an alternative embodiment,

- Figure 3 is a flowchart of a method according to the invention, the display management data for controlling the nuclear power plant; and

- Figure 4 is a diagram showing the superposition of several separate layers for a page of data to display.

In Figure 1 is shown a system 10 for driving a nuclear power plant comprising at least one nuclear reactor, not shown.

The steering system 10 includes a set of sensors 12A, 12B, 12C and 14A actuators, 14B, 14C associated with the (x) reactor (s) Nuclear (s).

The steering system 10 includes a plurality of electronic units 16A steering, 16B, 16C, each control unit 16A, 16B, 16C is configured to perform at least one action from the acquisition of a value measured by a sensor 12A , 12B, 12C corresponding and controlling an actuator 14A, 14B, 14C corresponding.

The steering system 10 includes an electronic device 18 for managing the data display on at least one display 20, the data being associated with the control units, the electronic device 18 being connected to the plurality of units control 16A, 16B, 16C.

By "data associated with control units" means the data from the control units 16A, 16B, 16C and / or data transmitted to the control units 16A, 16B, 16C.

These data are for example measurements taken by the sensors 12A, 12B, 12C, and 16A are then derived from control units 16B, 16C; and / or the control commands to the actuators 14A, 14B, 14C, these data being then transmitted to the first control units 16A, 16B, 16C.

The steering system 10 includes, in addition to optional, a plurality of interface modules with the user, such as one or more display screens 20, a keyboard 22 and a pointing device (mouse, trackball, screen touch ...) 24, visible in Figure 1. In the example of Figure 1, the steering system 10 includes three display screens 20, and the display screen 20, keyboard 22 and pointing device 24 are connected directly to the management device 18.

The one or more sensor (s) 12A, 12B, 12C and / or actuator (s) 14A, 14B, 14C and 16A control units 16B, 16C are in accordance with several distinct classes of nuclear, each being in accordance with a class respective nuclear safety. Illustratively, each security class is associated a respective suffix letter "Α '' Β ',' C for sensor-based reference (s) 12A, 12B, 12C, actuator to (s) 14A, 14B, 14C and control units 16A, 16B, 16C.

In the example of Figure 1, the one or more sensor (s) 12A, 12B, 12C and / or actuator (s) 14A, 14B, 14C and 16A control units 16B, 16C are in accordance with three safety classes separate the suffix 'A' corresponding by convention to the highest security class, the suffix letter "C corresponding to the lowest security class, and the suffix 'B' corresponding to the class of intermediate safety.

Each security class is associated with a degree of safety, and by definition the highest security class is that having the highest degree of safety. By analogy, the lowest security class are those having the degree of the lowest security.

Each nuclear safety class is, for example, a class of security according to a standard selected from the group consisting of: IEC 61513 standard, IEC 61226 standard, IAEA standard, the standard Nuclear Safety of the United States of America the standard of European nuclear safety, the French nuclear safety standard N4, the Japanese nuclear safety standard, the standard of Korean nuclear safety, the standard of Russian nuclear safety, the standard of Swiss nuclear safety and British nuclear safety standard .

For example, a table of correspondence between these nuclear safety standards is shown in Table 1 below.

Table 1

Each nuclear safety class is preferably a security class according to IEC 61513. The highest security class then the class is 1, and the lowest security class is class N, where N represents the number of classes involved. In other words, according to the IEC 61513 standard, class 1 is the one having the highest degree of safety, and Class N is that having the degree of the lowest security.

The one or more sensor (s) 12A, 12B, 12C and / or actuator (s) 14A, 14B, 14C and 16A control units 16B, 16C are known per se, for controlling the nuclear plant. The one or more sensor (s) 12A, 12B, 12C are, for example, for measuring a temperature sensor, a pressure, a flow, a quantity of liquid in a tank, a position. The actuator (s) 14A, 14B, 14C are, for example, pumps, valves, electric circuit breakers.

The management device 18 is configured to manage the display of data associated with the control units 16A, 16B, 16C.

In addition optional, the management device 18 is further configured to manage commands or actions from one or more operators, these commands or actions corresponding to entries made by the operator or operators using the interface modules , such as keyboard 22 and pointing device 24. These commands or actions are intended for example 16A steering units 16B, 16C to control the actuators 14A, 14B, 14C. Alternatively or additionally, these actions are intended to navigation between display pages of data or to query input.

The management device 18 includes a set 25 of module (s) e (s) 26A, 26B, 26C design layer (s) 28A, 28B, 28C, the assembly 25 is configured to create several separate layers 28A, 28B , 28C, each layer 28A, 28B, 28C containing information to be displayed for a respective security class associated with one or more control units 16A, 16B, 16C.

The management device 18 preferably comprises at least one design layer module (s) 26A, 26B, 26C for each respective security class. The layer creation module (s) 26A, 26B, 26C are, for example, separated by a security class to another. If applicable, for each safety class is associated with a respective suffix letter 'Α', 'Β', 'C 26A references, 26B, 26C on design layer modules, with the agreement described above, namely that the letter 'A' corresponds to the safest class' C corresponding to the least secure class and the letter 'B' corresponding to the class of intermediate safety.

The management device 18 includes a generation electronics module 30 configured to generate at least one page of data to display 32, each page 32 is obtained by superposition of several separate layers 28A, 28B, 28C.

The management device 18 preferably comprises a single generating module 30. The generating module 30 is then preferably according to the class of the highest security among different safety classes.

In addition Optionally, the management device 18 comprises one or more 34B splitters, 34C, each connected to several design layer modules (s) 26A, 26B, 26C and associated with a respective security class, as shown in Figure 2.

In addition optional again, the management device 18 comprises a data concentrator 36 connected between, on the one hand, the control units 16A, 16B, 16C, and on the other hand, the design layer modules (s) 26A , 26B, 26C, especially splitters 34B, 34C as appropriate. The data concentrator 36 includes one or more data concentration units 38A, 38B, 38C, each data concentration unit 38A, 38B, 38C is connected to one or more control units 16A, 16B, 16C and associated with a class respective safety.

According to further optional and in the example of FIG 2, the data concentrator 36 includes three data concentration units 38A, 38B, 38C, 38A the data concentration unit, associated with the class 1 according to IEC 61513, is connected to a control unit 16A and the creation module 26A layers, the unit of concentration of 38B data, associated with the class 2 according to the IEC 61513 standard, being connected between three control units 16B and the splitter 34B, and the data concentration unit 38C, associated with the class 3 according to the IEC 61513 standard, being connected between one control unit 16C and 34C distributor.

The management device 18 includes, for example, one or more unit (s) information processing apparatus formed (s) each (s) of a processor and a memory associated with the processor, not shown. Or the design layer modules (s) 26A, 26B, 26C and the generation module 30 are then for example in the form of software design layer (s), and respectively generating software, such software being able to be stored in the memory and be executed by the corresponding processor. In addition optional splitter 34B, 34C are also made in the form of distribution of software capable of being stored in the memory and be executed by the processor.

Alternatively, the design layer or modules (s) 26A, 26B, 26C and the generation module 30 are designed as logic components

programmable, such as FPGAs (English Field-Programmable Gate Array), or in the form of dedicated integrated circuits, such as ASIC (English application-specific integrated circuit).

Each layer 28A, 28B, 28C (the layer English) is also called layer, and contains information specific to a particular safety class. The layers created 28A, 28B, 28C are separated by a safety class to another. Layers 28A, 28B, 28C are defined in computer file format that contains graphic objects. Layers 28A, 28B, 28C can represent a dynamic state of the nuclear plant and to drive the central via operator actions.

The generation module 30 is preferably configured to generate each page 32 focusing information of the highest security class in case of conflict in the superposition of layers.

The generation module 30 is then configured to superimpose a layer 28A, 28B associated with a higher security class over a layer 28B, 28C associated with a lower security class. In the example of Figure 4, the layer 28C is thus superimposed on a background layer 39, the layer 28B is then superimposed on the result obtained by superposing the background layer 39 and layer 28C, and the layer 28A is finally superimposed the result obtained by superposing the background layer 39 and layers 28C, 28B.

In the example of Figure 1, the generation module 30 comprises a unit 40 of completion of each page 32 from or layers 28A, 28B, 28C provided by the assembly 25 of module (s) e (s) 26A, 26B, 26C, a unit 42 for managing display screen 20, a unit, not shown, management of the entries made by an operator via keyboard 22 and pointing device 24. and a library 44 of elements static representing basemaps 39 images. The library of static elements 44 includes, for example, characters and / or icons to be displayed on the screen 20, in addition to the information associated with the sensor (s) 12A, 12B, 12C and / or actuator (s) 14A, 14B 14C.

Each 34B distributor 34C is, for a respective security class, configured to distribute the information received from different design layer modules (s) 26A, 26B, 26C, which then creates in parallel across screens 20 multiple layers separate 28A, 28B, 28C for a given safety class.

Each data concentration unit 38A, 38B, 38C form a data gateway between, on the one hand, or the control units 16A, 16B, 16C to which it is connected, and on the other hand, the creation module layer (s) 26A, 26B, 26C, particularly 34B splitters, 34C if any, to which it is connected.

The operation of the management device 18 will now be explained with reference to Figure 3 showing a flowchart of the method according to the display data management invention for controlling the nuclear plant.

In an initial step 100, the management device 18, in particular all

module 25 (s), design layer (s) 26A, 26B, 26C, or, where appropriate splitter 34B, 34C, receives data to be displayed on the display or screen 20 of the hand units 16A steering, 16B, 16C, these data being themselves associated with the sensor (s) 12A, 12B, 12C and / or actuator (s) 14A, 14B, 14C.

In the next step 1 10, module of the assembly 25 (s), design layer (s)

26A, 26B, 26C created for each page to be displayed on the screens 20, several separate layers 28A, 28B, 28C, each 28A layer, 28B, 28C containing information to be displayed for a respective security class, such information having been received 16A or the steering units 16B, 16C in accordance with said security class.

During Inception 1 10 layers 28A, 28B, 28C, the created layers 28A, 28B,

28C are preferably separated by a security class to another.

Preferably, the management device 18 comprises at least one design layer module (s) 26A, 26B, 26C for each respective security class, the design layer modules (s) 26A, 26B, 26C are separated from a safety class to another.

This then allows a separation of classes of information from different security to be displayed. Data from a sensor 12A, 12B, 12C or 14A actuator, 14B, 14C in accordance with a particular security class are first transmitted to a control unit 16A, 16B, 16C in accordance with said given class, then the module design layer (s) 26A, 26B, 26C in accordance with said given class. In other words, the architecture of the control system 10 according to the invention ensures in this case that the data passes from the sensor 12A, 12B, 12C or 14A actuator, 14B, 14C to the design layer module (s ) 26A, 26B, 26C through elements which all conform to the same data safety class, which then improves the management of safety data.

In that the generation module 30 conforms to the highest security class among the various security classes then ensures a secure data processing even if the generation module 30 is unique and connected to the assembly 25 module (s), design layer (s) 26A, 26B, 26C. Indeed, the generation module 30 conforms with the highest security class is compatible and adapted to communicate with a design layer module (s) 26B, 26C in accordance with a class

safety with a lower degree of safety, while ensuring that this lower degree of safety will nevertheless be respected.

In the next step 120, the generation module 30 generates at least one page of data to display 32, each page 32 is obtained by superposition of several separate layers 28A, 28B, 28C.

When generating 120 page (s) 32, a 28A layer, 28B associated with a higher security class is preferably superimposed over a 28B layer, 28C associated with a lower security class, as shown in Figure 4.

This makes it possible to focus information of the highest security class, over those of a lower safety class, in case of recovery in the superposition of layers.

In Figure 4, the generation module 30 starts by generating a blank page 200 which is first superimposed the background map 39, also known as page background, the background layer 39 is, for example coming from the library 44 and stored in the memory, not shown, of the management device 18.

The generation module 30 then adds the 28C layer corresponding to the lowest security class, by superposition above the plane of base 39, then adds the 28B layer corresponding to the intermediate safety class by superposition above the 28C previously added layer.

Finally, the generation module 30 adds the layer 28A corresponding to the class of higher security by superposition above the previously added layer 28B to obtain the final page 32 to be displayed on the display screens or the corresponding 20 .

In other words, the separate layers 28A, 28B, 28C are included in ascending order of the degree of safety of the safety class to which they are associated, this increasing order being represented by the arrow F visible in Figure 4. Each layer 28A, 28B, 28C is then superimposed over the one or more layers 28B, 28C, or over the bottom 39, already considered.

The skilled person will understand that the information visible and displayed on the final page 32 generated by the generation module 30 is the information contained in the layer 28A corresponding to the class of the safest safety as well as those contained in a layer 28B, 28C corresponding to a lower safety class and that are not covered by an information layer of an 28A, 28B corresponding to a higher security class.

It will be understood that the electronic device 18 and the data display management method enhance the security management data for controlling nuclear power plant, allowing to separate the information to be displayed by layer A, 28B, 28C developed distinctly a safety class to another.

CLAIMS
1. An electronic device (18) for managing the display of data on at least one display screen (20) for controlling a nuclear power plant comprising at least one nuclear reactor, the data being derived from a plurality of units control electronics (16A, 16B, 16C), each control unit (16A, 16B, 160) being configured to perform at least one action from the acquisition of a value measured by a sensor (12A, 12B, 12C) and controlling an actuator (14A, 14B, 14C), the one or more sensor (s) (12A, 12B, 12C) and / or actuator (s) (14A, 14B, 14C) being associated with the (x) reactor ( s) nuclear (s), the control units (16A, 16B, 16C) and the one or more sensor (s) (12A, 12B, 120) and / or actuator (s) (14A, 14B, 140) being in accordance with several distinct classes of nuclear,
the electronic device (18) being adapted to be connected to the plurality of control units (16A, 16B, 160), and comprising:
- an assembly (25) of module (s) E (s) (26A, 26B, 260) design layer (s) (28A, 28B, 280), the assembly (25) being configured to create several separate layers (28A, 28B, 280), each layer (28A, 28B, 280) containing information to be displayed for a respective security class associated with one or more control units (16A, 16B, 160) in accordance with said safety class and
- generating electronic module (30) configured to generate at least one page (32) of data to display, each page (32) being obtained by superposition of several separate layers (28A, 28B, 280).

2. An electronic device (18) according to claim 1, wherein the electronic device (18) comprises at least one design layer module (s) (26A, 26B, 260) for each respective security class, the creation module layer (s) (26A, 26B, 260) being separated by a security class to another.

3. An electronic device (18) according to claim 1 or 2, wherein the electronic device (18) comprises a single generating module (30).

4. An electronic device (18) according to any preceding claim, wherein the generation module (30) conforms to the class of the highest security among different safety classes.

5. An electronic device (18) according to any preceding claim, wherein the generation module (30) is configured to generate each page by superposing a layer (28A, 28B) associated with a higher security class par- above a layer (28B, 28C) associated with a lower safety class, to privilege information of the class of higher safety in case of conflict in the superposition of layers (28A, 28B, 28C).

6. An electronic device (18) according to any preceding claim, wherein the created layers (28A, 28B, 28C) are separated by a security class to another.

7. An electronic device (18) according to any preceding claim, wherein each nuclear safety class is a safety class according to a standard selected from the group consisting of: IEC 61513 standard, IEC 61226, the standard IAEA, nuclear safety standard of the United States of America, the European nuclear safety standard, the French nuclear safety standard N4, the Japanese nuclear safety standard, the standard of Korean nuclear safety, the Russian nuclear safety standard the standard of Swiss nuclear safety and British nuclear safety standard.

8. The system (10) for controlling a nuclear power plant comprising at least one nuclear reactor, the system (10) comprising:

- a set of sensors (12A, 12B, 12C) and actuators (14A, 14B, 14C) associated with the (x) reactor (s) Nuclear (s);

- a plurality of electronic control units (16A, 16B, 16C), each control unit (16A, 16B, 16C) being configured to perform at least one action from the acquisition of a value measured by a sensor (12A , 12B, 12C) and corresponding control of an actuator (14A, 14B, 14C) corresponding, the control units (16A, 16B, 16C) and the one or more sensor (s) (12A, 12B, 12C) and / or actuator (s) (14A, 14B, 14C) being in line with several separate classes of nuclear safety; and

- an electronic device (18) display management data on at least one display screen (20), the data being associated with the control units (16A, 16B, 16C), the electronic device (18) being connected to the plurality of control units (16A, 16B, 16C),

the electronic device (18) being as claimed in any preceding claim.

9. A method of managing the display of data on at least one display screen (20) for controlling a nuclear power plant comprising at least one nuclear reactor, the data being derived from a plurality of electronic units driving (16A, 16B, 16C), each control unit (16A, 16B, 16C) being configured to perform at least one action from the acquisition of a value measured by a sensor (12A, 12B, 12C) and the control an actuator (14A, 14B, 14C), the one or more sensor (s) (12A, 12B, 12C) and / or actuator (s) (14A, 14B, 14C) being associated with the (x) the reactor (s) nuclear (s), the control units (16A, 16B, 16C) and the one or more sensor (s) (12A, 12B, 12C) and / or actuator (s) (14A, 14B, 14C) being in accordance with several classes distinct nuclear,

the method being implemented by an electronic device (18) adapted to be connected to the plurality of control units (16A, 16B, 16C),

the method comprising:

- creating (1 10) for each page to be displayed on at least a display screen

(20), several separate layers (28A, 28B, 28C), each layer (28A, 28B, 28C) containing information to be displayed for a respective security class associated with one or more control units (16A, 16B, 16C) in accordance with said security class, and

- generating (120) at least one page of data to be displayed, each page being obtained by superposition of several separate layers (28A, 28B, 28C).

10. The method of claim 9, wherein, when creating layers (1 10), the created layers (28A, 28B, 28C) are separated by a security class to another.

January 1. The method of claim 9 or 10, wherein, when the page generation (s) (120), a layer (28A, 28B) associated with a higher security class is superimposed over a layer (28B, 28C ) associated with a lower safety class, to favor the information in the highest safety class in case of conflict in the superposition of layers (28A, 28B, 28C).

12. A computer program product comprising software instructions that, when implemented by a computer, implement a display management method according to any one of claims 9 to 1 of 1.