METHOD FOR DOWNLOAD OF SEQUENTIAL FUNCTION CHARTS TO A TRIPLE MODULE REDUNDANT CONTROL SYSTEM

• US 20100262263A1
• Filed: 04/14/2009
• Published: 10/14/2010
• Est. Priority Date: 04/14/2009
• Status: Active Grant

• Current Assignee: GE Infrastructure Technology, LLC (General Electric Company)
• Original Assignee: General Electric Company
• Inventors: Chong, Justin, Karaffa, John Michael
• Granted Patent: US 8,121,707 B2
• Time in Patent Office: Days
• US Class Current: 700/19
• CPC Class Codes: G05B 19/0428 Safety, monitoring G05B19/0423 takes precedence
• CPC Class Codes: G05B 2219/24185 After repair, update redundant system during non critical periods
• CPC Class Codes: G05B 2219/24187 Redundant processors run identical programs
• CPC Class Codes: G05B 9/03 with multiple-channel loop, i.e. redundant control systems

Abstract

Embodiments of the present invention include systems and methods for an online load of logic to a triple module redundant (TMR) control system using a cascading switch and designated controller. Application code having SFC logic may be first downloaded to a designated controller of the TMR system. After download to the designated controller, the other controllers of TMR system may be updated in a cascading (circular) pattern. After updating the second controller with the updated logic, the designated controller may provide correct state information to the second controller.

Claims

1. A method, comprising

downloading application code to a first controller of a triple module redundant (TMR) system of three controllers, wherein a first controller comprises a designated controller configured to provide state information to a second controller and a third controller;

downloading the application code to the second controller after downloading to the first controller; and

sending state information from the first controller to the second controller.

2. The method of claim 1, comprising downloading the application code to the third controller after downloading to the second controller.

3. The method of claim 2, comprising sending state information from the first controller to the third controller after downloading to the third controller.

4. The method of claim 1, comprising switching the designated controller from the first controller to the second controller or the third controller after downloading to the first controller.

5. The method of claim 4, comprising downloading the application code to the switched designated controller.

6. The method of claim 1, comprising performing voting between the three controllers.

7. The method of claim 1, wherein the application code comprises Sequential Function Chart (SFC) logic.

8. The method of claim 7, comprising resetting the first controller downloading to the first controller.

9. A system comprising:

a triple module redundant (TMR) control system comprising three controllers; and

a tangible machine-readable medium comprising code adapted to;

determine a designated controller of the control system;

update the designated controller with application code during an online load;

update a second controller of the control system with the application code during the online load after updating the designated controller, wherein the second controller receives state information from the designated controller;

update a third controller of the control system with the application code during the online load after updating the designated controller and the second controller.

10. The system of claim 9, wherein the application code comprises Sequential Function Chart (SFC) logic.

11. The system of claim 9, wherein the code is further adapted to determine a new designated controller after updating the designated controller with the application controller.

12. The system of claim 11, wherein the code is further adapted to update the new designated controller with the application code.

13. The system of claim 9, comprising a turbine, a power generator, and/or combination thereof coupled to the control system.

14. The system of claim 9, comprising a computer configured to provide the application code to the control system, wherein the computer comprises the tangible machine-readable medium.

15. The system of claim 9, wherein the third controller receives state information from the designated controller after voting among the three controllers.

16. A system, comprising:

a triple module redundant control (TMR) system comprising a first controller, a second controller, and a third controller, wherein the first controller comprises a designated controller configured to provide state information to the second controller and the third controller, wherein the first controller receives updated application code before the second controller and the third controller such that the first controller comprises an updated state based on the updated application code before the second controller and the third controller receive the updated application code.

17. The system of claim 16, wherein the second controller receives the updated state from the first controller.

18. The system of claim 17, wherein the TMR system comprises a state-voting system, such that the first controller and second controller outvote the third controller to the updated state.

19. The system of claim 16, wherein the updated application code comprises Sequential Function Chart (SFC) logic.

20. The system of claim 16, wherein the TMR system is coupled to a turbine system.