EN 61227-2016 en Nuclear power plants - Control rooms - Operator controls.pdf

1、BRITISH STANDARDBS IEC 61227:2008Nuclear power plants Control rooms Operator controls ICS 27.120.20 BS EN 61227:2016BS EN 61227:2016ISBN 978 0 580 90213 0Amendments/corrigenda issued since publicationDate Comments30 April 2016 This corrigendum renumbers BS IEC 61227:2008 as BS EN 61227:2016This Brit

2、ish Standard was published under the authority of the Standards Policy and Strategy Committee on 30 June 2008 The British Standards Institution 2016. Published by BSI Standards Limited 2016National forewordThis British Standard is the UK implementation of EN 61227:2016. It is identical to IEC 61227:

3、2008. It supersedes BS IEC 61227:2008 which is withdrawn.The UK participation in its preparation was entrusted to Technical Committee NCE/8, Instrumentation, Control b) softcontrols. The groups have the following characteristics, and the task analysis described in 4.3 is used to determine the mostap

4、propriate type to use. 4.2.1 Discrete controls Dedicated controls have thedisadvantage of being present evenwhen not wanted, thusincreasing the size ofthe whole control desk and providing “clutter“ when othercontrols are inuse.Dedicated controlsare particularly suitable for controlsin constant use,

5、for example electricaloutput, or those whose immediate accessibility andreliability are ofprime importance,forexample an emergency trip button. Requirements for their layout are described in 5.1.1. Multiplexed controls, a sub-set of discrete controls, use a single control for the same function on se

6、veral equipments, thus reducing the number of controls on the desk or panel so thatthey can be made smaller and the controls can be brought closer to the operator. However,the operator hasto make a selection, so the number of operationsis increased and the chances of error andthe operatorresponsetim

7、e may be increased.Multiplexed controls shall be designed with good feedback to the operator for the functionselected, topermit error recovery. They are particularly suitable for the control of seldom-used systems that are not requiredin a hurry, for example, tank filling, and for systems wherethe c

8、onsequences of error are not serious and where time is available for correction in theevent oferror.4.2.2 Soft controls These controlsare a type of multiplexed system where they can have different functionsatdifferent times. Typically, soft controls are implemented using one (or two) VDUs togetherwi

9、th a pointing device (such as mouse, track ball light pen or touch capability), ora combination of a VDU with a set of dedicated controls. Control actions are performed in the following way: selection of the object to be controlled using the pointing device;presentation of the command options on the

10、 VDU as menu items or icons, e.g. in a pop-up-window or on a separate VDU;selection and activation ofthe command option to be executed, again usingthe pointing device. These systems have manyof the characteristics of conventional multiplexed systems, but make it possible to assemble controls related

11、 to specific tasks and not offer the operatorcontrols that are invalid or inappropriate to that task, so guiding the operator to correctBS IEC 61227:2008 7 BS EN 61227:2016IEC 61227:2008- 6 -actions. All information required by the operator to perform the correct control action shall bepresented to

12、him when required, either on the touch screen orona related adjacent format. Selection error rates could be high if the systemis not well-designed and, as a hierarchicalselection of several formats may be required to recall the control set required, the process ofselection of a control not alreadyon

13、 display may be relativelylengthy.However, it may be possible to usea single format with changed windows for several control actions.It is often difficult to optimise the position of the VDU forboth monitoring and touching andtwo screens may be required. Off-screen pointing devices (e.g. track ball

14、and light pen) are analternative solution.Soft controls canbe particularlyusefulwhere the task is under the control of the operator. Forusing soft controls, suitable consideration shall be needed to satisfy HMI requirements.Forexample: software switch selection time, human error rate in selecting th

15、e switches, orsystem response time. The VDU can display the mimic diagram of the system with the information required by the operator, who will identifythe concerned itemin the computer, and use a touch panel, soft control switch, orpointing device to achieve the desired effect. For more information

16、 on the requirements for soft controlsinterfaces, see 5.2.4.3 Selection of controlsystemThe process to selectand specify a control system should start from the consideration of theavailable technologies on the marketand of the available feed-back from theplants.This process shall clearly distinguish

17、 between the selection of the “main control system” and the selection of the proper control type for every plant component /plant function.It is also to be considered that, for common cause failure reasons, two different control systems could be selected to perform the same function. A task analysis

18、 is required as a fundamental part of the control room design and this shall bedocumented in a manner that indicates the requirements for the controlsinterms of:a) frequency of use; b) grouping, and relationship with othercontrols; c) speed of access required (when not already in use);d) reliability

19、e) acceptability of common cause faults;f) importance of consequences of erroneousselection;g) complexity of system controlled;h) type of information display proposed (VDUor dedicated instruments); i) type of control equipment proposed;j) categorization of control functions by theirimportance to sa

20、fety;k) operating procedures (e.g., normal, testing, emergency). Bearing in mind the characteristics of the types of control system identified in 4.2, thedesigner shall select themost appropriate interface for each control and develop the designfollowing the requirements of 5.1. The proposed design

21、shall then be validated in accordance with the method given inIEC 60964 and detailed in IEC 61771. In thedesignand validation, itis important that all relevant inputs to the HMI design are taken into account. These willinclude contributions from the:BS IEC 61227:2008 8 BS EN 61227:2016IEC 61227:2008

22、 7 -a) plant designer;b) control system equipment designer; c) information system designer; d) safety and reliability specialist; e) topic specialist (e.g. radiationprotection specialist, chemist,etc.);f) operations staff; maintenance staff;g) existing design criteria (in the case of refits or exte

23、nsion);h) human factors specialist.In practice, detailed interface design depends upon thorough task analysis. Representative operators should be consulted in the selection and development of formatsandcontrol actions.It is highlyrecommended thatlive testsare conducted using asimulator.Post-commissi

24、oning operations will also provide much valuable information on design adequacy. However, the adaptability of the user population and the constraints generated byoperating factorswill restrict such feedback tothose itemswhich create significant operatingor maintenance problems rather than subjective

25、 detail. 5 Design requirements5.1Individual controls and indicatorsThere arethree main types of displays andcontrol element combinations to be considered:a) individual indicatorsand controls;b) VDUand individual controls, andc) VDU only.Individualindicatorsand controls shall belaid outas described b

26、elow,and they shallbepositioned close to VDU giving related information. VDU layout is coveredin IEC61772 (see also 5.1.8).5.1.1Control board layout Formal rules for the layout ofcontrol and indication devices on deskand panel surfaces are described in IEC 60964 asa distributed set of requirements a

27、ssociated withcomponents. Layout ofcontrol panelsand desks with individualcontrols and individual indicatorsshallfollow a consistent design concept.It is not possible to postulate unique design rules which will meet every possible design and operational circumstance. Certain rules will require condi

28、tional application depending on theexact balance of objectives for any given part of the operator interface. The priority given to the various principleswill be situation dependent. The order given belowhas been found to cope with the majority of applications.The primary classification of control an

29、d indication devices on a desk or panel is based onwho has responsibility for use of the device. (Where more than one user requires a piece ofinformation, consideration shall be given to duplication ofdisplays.) Considered in conjunctionwith function and frequency of use, this will determine the gen

30、eral location for a device.Control room layout will determine the controls and indication functions allocated to the deskor panel. Thelayout of devices shall follow alogical sequence. The mostgeneral sequence isthat of the plant, i.e. mimic diagram of the plant, but other sequences such as sequence

31、ofuse shouldbe considered. BS IEC 61227:2008 9 BS EN 61227:2016IEC 61227:2008- 8 -Within a given structure (either desk or panel), control devices shall be arranged to formfunctional groups irrespective of the nature ofthe information presented. A functional groupshould be specified in terms of the

32、achievement of a given function orprocess operation. Forcertainplant items, for example pumps, the “functional“ grouping may equate to a group of mechanical plant components. The groupings shall take account of“systems“ asa seriesofplant components which arelinked in some functional way e.g.a piped

33、or ducted fluid system, electrically connected system, or a set of components whichare installed to achieveormaintain a defined plant function,for example, primary andsecondaryshut-down devices.(These two sets ofplant devices may be functionally independent but are provided to achievethe same end re

34、sult, i.e. subcritically.)Panel layoutof one groupshall be doneconsistent with thelayout of adjacent functionalgroups.The groups of controlsand indications so formed shall normally be laid out logicallyin thesequence of use, but if superimposed on a mimic,should be placed in appropriate positions in

35、 relation to the mimic.5.1.2Positioning of groups Theposition of a group within a desk or panel shall be optimizedtaking into account thefollowing factors:a) the order of use should followsome simple principle, such as left to right in start-up orpower raise, or following the order of energy flow fr

36、om source on the left to sink on theright. It shouldaccordwithaccepted population stereotypes; b) the ordershould not be biased in favourof infrequent operating conditions;c) the devices required forsafetyand normal minute-to-minute operation should be close tothe operators monitoring position, and

37、this factor may be an exceptionto the overall pattern derived from a); d) there may be displays which shall be visible from a numberof operating positions, such asan overview, or which require to beeasily and reliably located in a fault situation. If deskmounted they should be located in the near-ve

38、rtical surface in preference to the near-horizontal;e) where more than one functional group contains similar plant items, for example the mainboilers, the groupsshould be identically laidout and follow in an apha-numeric order.5.1.3 Device layoutWithin a group there shall be a detailed analysis ofth

39、e relationships between devices and thesequences ofuse, and the layout shall be optimized for the following factors:a) for those groups where thereis aunique sequence of use the devices shouldbearrangedleft to rightin sequence of use, taking intoaccount the general requirements for safetyand visibil

40、ity referred to in 5.1.2;b) controls should be placed below indications, or where not practicable, on the right of theindication. This does not apply to a control common to many devices, such as “lamp test“;c) wherethere is no unique sequence of use, devices should be arranged left to right inordero

41、f plant identification or energyflow.Component layouts shall not be “mirror-imaged“ (handed) unless this is justified by HFE (Human FactorsEngineering) specialist. Also the layout should not be compromised simply tosave space. A mimic layout may not permit theapplication of all these requirements. B

42、S IEC 61227:2008 10 BS EN 61227:2016IEC 61227:2008- 9 -5.1.4Uniformity of orientation Similarlooking controlelements or arrangements shall be operated in a similar manner andprovide similar choice selection.Control movements shall conform withpopulation stereotypes, but typical examples are given in

43、 Annex A.5.1.5 Mimic diagrams In cases where indication and control devices arearranged in a diagrammatic or schematic display (commonly referred to as a mimic diagram), theabove layout principles applyto the functional clusters of controls and displays, but there are a number of additionalconsidera

44、tions. The schematic should conform to a representational model of the plant that can be used by an operator. This will have been conditioned by the physicalappearance and layout of the plant,by the layout of controls and indications in the control room and local panels, and by the drawings most fre

45、quently used. All three factors shall be considered. As an example, if onlythe physical layout ofquadrantized plant around a reactor were taken into account, it wouldresult in adiagram of thesequadrants containing mirror-imaged elements. As a general rule,mirror imaging is undesirable and should be

46、avoided. Controls and indications should bepositioned to relate to the physical position of the related plant item.Corresponding information should be placedin the same relative position in all similarinstances. This is the approach taken on control desks, and so the elements showing thequadrants wo

47、uld be designed identically, beingdifferentiated by titles and labelling or colour.This standardized layout, forexample for a pumpset, facilitates recognition by the operator.Flow paths should be arranged to be as simple aspossible and generally should be left-to-right, and top-to-bottom. In the cas

48、e of a closed system, the designer shall judge whether aclockwise oranti- clockwise flow isappropriate, although the former is recommended.Direction of flow shall be consistent between diagrams. Usually,the most involved part or the most significant partofthe flowpath should be arranged to be left-t

49、o-right. Flowdirection should bemaintained withinfunctional plant areas.Certain physical aspects of a system shall be taken into account. For instance, in a systemwheregravity plays a significant part, for example a low-pressurewater system, the diagram should reflectthis in the position of vessels and pumps, etc. Similarly, large physical objectssuch as boilers and turbo-generators should be represented in a way which is consistent wit