《BS-IEC-61227-2008.pdf》由会员分享，可在线阅读，更多相关《BS-IEC-61227-2008.pdf（22页珍藏版）》请在三一文库上搜索。
1、BRITISH STANDARD BS IEC 61227:2008 Nuclear power plants Control rooms Operator controls ICS 27.120.20 ? Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or networkin
2、g permitted without license from IHS -,-,- BS IEC 61227:2008 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 June 2008 BSI 2008 ISBN 978 0 580 55528 2 National foreword This British Standard is the UK implementation of IEC 61227:2008. It s
3、upersedes BS 7517:1995 which is withdrawn. The UK participation in its preparation was entrusted to Technical Committee NCE/8, Reactor instrumentation. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all
4、the necessary provisions of a contract. Users are responsible for its correct application. Compliance with a British Standard cannot confer immunity from legal obligations. Amendments/corrigenda issued since publication DateComments Copyright British Standards Institution Provided by IHS under licen
5、se with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or networking permitted without license from IHS -,-,- IEC 61227 Edition 2.0 2008-04 INTERNATIONAL STANDARD NORME INTERNATIONALE Nuclear power plants Control rooms Operator controls C
6、entrales nuclaires de puissance Salles de commande Commandes oprateurs Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or networking permitted without license from
7、IHS -,-,- CONTENTS 0H INTRODUCTION. 1H 3 1 Scope. 2H 5 2 Normative references . 3H 5 3 Terms and definitions . 4H 5 4 Design principles 5H 6 4.1 Basic concepts 6 66 4.2 Types of HMI. 7 77 4.2.1 Discrete controls . 8H 7 4.2.2 Soft controls 9H 7 4.3 Selection of control system. 8 0H 8 5 Design require
8、ments . 9 1 1 5.1 Individual controls and indicators . 9 99 9 12H 5.1.1 Control board layout . 9 13H 5.1.2 Positioning of groups. 14H 10 5.1.3 Device layout. 15H 10 5.1.4 Uniformity of orientation 16H 11 5.1.5 Mimic diagrams . 17H 11 5.1.6 Coding. 18H 12 5.1.7 Protection against mal-operation of con
9、trol devices. 19H 13 5.1.8 Compatibility with VDU formats 20H 13 5.2 Soft controls 21H 14 5.2.1 Display devices . 22H 14 5.2.2 Selection displays 23H 15 5.2.3 Input Fields . 24H 15 5.2.4 Input formats . 25H 15 5.2.5 User-System Interaction 26H 15 5.3 Special requirements for touch panels. 27H 16 Ann
10、ex A (informative) Examples for the arrangement of discrete controls 28H 18 BS IEC 61227:2008 2 Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or networking permit
11、ted without license from IHS -,-,- INTRODUCTION a) Technical background, main issues and organisation of this standard This IEC standard specifically focuses on operator controls. It is intended that this standard be used by operators of NPPs (utilities), systems evaluators and by licensors. b) Situ
12、ation of the current standard in the structure of IEC SC 45A standard series IEC 61227 is the third level IEC SC 45A document tackling the generic issue of operator controls. IEC 61227 is to be read in association with IEC 60964 and IEC 61772. IEC 60964 is the appropriate IEC SC 45A chapeau document
13、 for control rooms which provides guidance on control room design and which references IEC 61227. IEC 61772 establishes requirements for the application of VDU (Visual Display Units). For more details on the structure of IEC SC 45A standard series, see item d) of this introduction. c) Recommendation
14、s and limitations regarding the application of this standard It is important to note that this standard establishes no additional functional requirements for safety systems. To ensure that this standard will continue to be relevant in future years, the emphasis has been placed on issues of principle
15、, rather than specific technologies. d) Description of the structure of the IEC SC 45A standard series and relationships with other IEC documents and other bodies documents (IAEA, ISO) The top-level document of the IEC SC 45A standard series is IEC 61513. It provides general requirements for I b) so
16、ft controls. The groups have the following characteristics, and the task analysis described in 4.3 is used to determine the most appropriate type to use. 4.2.1 Discrete controls Dedicated controls have the disadvantage of being present even when not wanted, thus increasing the size of the whole cont
17、rol desk and providing “clutter“ when other controls are in use. Dedicated controls are particularly suitable for controls in constant use, for example electrical output, or those whose immediate accessibility and reliability are of prime importance, for example an emergency trip button. Requirement
18、s for their layout are described in 5.1.1. Multiplexed controls, a sub-set of discrete controls, use a single control for the same function on several equipments, thus reducing the number of controls on the desk or panel so that they can be made smaller and the controls can be brought closer to the
19、operator. However, the operator has to make a selection, so the number of operations is increased and the chances of error and the operator response time may be increased. Multiplexed controls shall be designed with good feedback to the operator for the function selected, to permit error recovery. T
20、hey are particularly suitable for the control of seldom- used systems that are not required in a hurry, for example, tank filling, and for systems where the consequences of error are not serious and where time is available for correction in the event of error. 4.2.2 Soft controls These controls are
21、a type of multiplexed system where they can have different functions at different times. Typically, soft controls are implemented using one (or two) VDUs together with a pointing device (such as mouse, track ball light pen or touch capability), or a combination of a VDU with a set of dedicated contr
22、ols. Control actions are performed in the following way: selection of the object to be controlled using the pointing device; presentation of the command options on the VDU as menu items or icons, e.g. in a pop- up-window or on a separate VDU; selection and activation of the command option to be exec
23、uted, again using the pointing device. These systems have many of the characteristics of conventional multiplexed systems, but make it possible to assemble controls related to specific tasks and not offer the operator controls that are invalid or inappropriate to that task, so guiding the operator t
24、o correct BS IEC 61227:2008 7 Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or networking permitted without license from IHS -,-,- actions. All information requir
25、ed by the operator to perform the correct control action shall be presented to him when required, either on the touch screen or on a related adjacent format. Selection error rates could be high if the system is not well-designed and, as a hierarchical selection of several formats may be required to
26、recall the control set required, the process of selection of a control not already on display may be relatively lengthy. However, it may be possible to use a single format with changed windows for several control actions. It is often difficult to optimise the position of the VDU for both monitoring
27、and touching and two screens may be required. Off-screen pointing devices (e.g. track ball and light pen) are an alternative solution. Soft controls can be particularly useful where the task is under the control of the operator. For using soft controls, suitable consideration shall be needed to sati
28、sfy HMI requirements. For example: software switch selection time, human error rate in selecting the switches, or system response time. The VDU can display the mimic diagram of the system with the information required by the operator, who will identify the concerned item in the computer, and use a t
29、ouch panel, soft control switch, or pointing device to achieve the desired effect. For more information on the requirements for soft controls interfaces, see 5.2. 4.3 Selection of control system The process to select and specify a control system should start from the consideration of the available t
30、echnologies on the market and of the available feed-back from the plants. This process shall clearly distinguish between the selection of the “main control system” and the selection of the proper control type for every plant component / plant function. It is also to be considered that, for common ca
31、use failure reasons, two different control systems could be selected to perform the same function. A task analysis is required as a fundamental part of the control room design and this shall be documented in a manner that indicates the requirements for the controls in terms of: a) frequency of use;
32、b) grouping, and relationship with other controls; c) speed of access required (when not already in use); d) reliability; e) acceptability of common cause faults; f) importance of consequences of erroneous selection; g) complexity of system controlled; h) type of information display proposed (VDU or
33、 dedicated instruments); i) type of control equipment proposed; j) categorization of control functions by their importance to safety; k) operating procedures (e.g., normal, testing, emergency). Bearing in mind the characteristics of the types of control system identified in 4.2, the designer shall s
34、elect the most appropriate interface for each control and develop the design following the requirements of 5.1. The proposed design shall then be validated in accordance with the method given in IEC 60964 and detailed in IEC 61771. In the design and validation, it is important that all relevant inpu
35、ts to the HMI design are taken into account. These will include contributions from the: BS IEC 61227:2008 8 Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale, 08/14/2008 21:56:58 MDTNo reproduction or netwo
36、rking permitted without license from IHS -,-,- a) plant designer; b) control system equipment designer; c) information system designer; d) safety and reliability specialist; e) topic specialist (e.g. radiation protection specialist, chemist, etc.); f) operations staff; maintenance staff; g) existing
37、 design criteria (in the case of refits or extension); h) human factors specialist. In practice, detailed interface design depends upon thorough task analysis. Representative operators should be consulted in the selection and development of formats and control actions. It is highly recommended that
38、live tests are conducted using a simulator. Post-commissioning operations will also provide much valuable information on design adequacy. However, the adaptability of the user population and the constraints generated by operating factors will restrict such feedback to those items which create signif
39、icant operating or maintenance problems rather than subjective detail. 5 Design requirements 5.1 Individual controls and indicators There are three main types of displays and control element combinations to be considered: a) individual indicators and controls; b) VDU and individual controls, and c)
40、VDU only. Individual indicators and controls shall be laid out as described below, and they shall be positioned close to VDU giving related information. VDU layout is covered in IEC 61772 (see also 5.1.8). 5.1.1 Control board layout Formal rules for the layout of control and indication devices on de
41、sk and panel surfaces are described in IEC 60964 as a distributed set of requirements associated with components. Layout of control panels and desks with individual controls and individual indicators shall follow a consistent design concept. It is not possible to postulate unique design rules which
42、will meet every possible design and operational circumstance. Certain rules will require conditional application depending on the exact balance of objectives for any given part of the operator interface. The priority given to the various principles will be situation dependent. The order given below
43、has been found to cope with the majority of applications. The primary classification of control and indication devices on a desk or panel is based on who has responsibility for use of the device. (Where more than one user requires a piece of information, consideration shall be given to duplication o
44、f displays.) Considered in conjunction with function and frequency of use, this will determine the general location for a device. Control room layout will determine the controls and indication functions allocated to the desk or panel. The layout of devices shall follow a logical sequence. The most g
45、eneral sequence is that of the plant, i.e. mimic diagram of the plant, but other sequences such as sequence of use should be considered. BS IEC 61227:2008 9 Copyright British Standards Institution Provided by IHS under license with BSI - Uncontrolled Copy Licensee=Boeing Co/5910770001 Not for Resale
46、, 08/14/2008 21:56:58 MDTNo reproduction or networking permitted without license from IHS -,-,- Within a given structure (either desk or panel), control devices shall be arranged to form functional groups irrespective of the nature of the information presented. A functional group should be specified
47、 in terms of the achievement of a given function or process operation. For certain plant items, for example pumps, the “functional“ grouping may equate to a group of mechanical plant components. The groupings shall take account of “systems“ as a series of plant components which are linked in some fu
48、nctional way e.g. a piped or ducted fluid system, electrically connected system, or a set of components which are installed to achieve or maintain a defined plant function, for example, primary and secondary shut-down devices. (These two sets of plant devices may be functionally independent but are provided to achieve the same end result, i.e. subcritically.) Panel layout of one group shall be done consistent with the layout of adjacent functional groups. T