----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.

-01

WRITE UP ON ELECTRONIC PROTECTION SYSTEM (EPS) 2 OUT OF 3 (TURBINE PROTECTION) AND OVERSPEED TRIP SELECTION SYSTEM ( OTSS)

REFERENCE DOCUMENTS : 1. MPL For Steam Turbine Drg .No.41330098001(TAPP3/64110/5516/SCH) 2. OTSS and EPS logics Drg. No. 41330098502 (NPC drg. no. TAPP3/64110/5539/ED) 3. TURBINE TRIP SYSTEM DESCRIPTION Drg. No. 41330000483(NPC drg. no. TAPP3/64110/5663/DN)

01 00 REV

10.6.02 DATE

REVISED AS PER NPC COMMENTS FIRST ISSUE REMARKS

BS RANA BS RANA VK Sd/BSR Sd./- AALI Sd/PRPD. CHKD. APPD.

------------------------------------------------------------------------------------------ --Sheet no.-1of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01 A - Electronic Protection System (EPS) 2 out of 3 (Turbine Protection)
Table of Contents 1 2 3 3.1 4 5 5.1 5.2 6 7 Introduction Shaft Position Protection (Thrust bearing protection) (MAD 11 EZ 100) Low Vacuum Protection (Condenser) (MAG01EZ110/120) Bypass Valve Actuation Wheel Chamber Pressure Protection used for OTSS (MAA50EZ100) Description of the Electronic Protection Circuit Automatic Cyclic Functional Test Functional Description of the Two out of Three System Alarms Turbine Trip Actuation SH. NO. 2 3 4 4 4-5 5-6 5 5-6 6-7 7

B- Overspeed Trip Selection System (OTSS)

Table of contents 1 2 2.1 2.2 3 4 FIG1. FIG2. FIG3. General Function Valve position detection Wheel chamber pressure measurement Turbine trip Overspeed Trip selection system during test FUNCTIONAL DIAGRAM OTSS FUNCTIONAL DIAGRAM OTSS FUNCTIONAL DIAGRAM OTSS 8 8-9 9 9-10 10 10 11 12 13

------------------------------------------------------------------------------------------ --Sheet no.-2of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01 A - Electronic Protection System (EPS) 2 out of 3 (Turbine Protection)
1 Introduction

This system is realised as a part of Procontrol system. Turbine-generators are monitored and controlled by means of various electronic systems. This system automatically trips the turbine-generator without operator intervention before serious damage can occur as a result of a detected fault in any monitored mechanical system. The main purpose of this electronic turbine protection system is to detect problems or failures in their early stage so as to minimize damage, repair costs and outages of generating units. This is achieved largely by automatic tripping of turbine-generators on a timely basis, this relieving the operating personnel of the decision as to when and what action must be taken to protect faulted machines of their auxiliary systems. The electronic turbine protection system contains low vacuum protection circuit (2 out of 3) shaft position protection circuit (2 out of 3) wheel chamber pressure protection (2 out of 3)

These protection circuits are of 3 channel design with a 2 out of 3 logic cofiguration. The criteria are measured by analog transmitters, compared with the trip value and trip turbine if the 2 out of 3 condition is fulfilled. 2. Shaft Position Protection (Thrust Bearing Protection) (MAD11EZ100) The shaft position protection system acts as a protection against axial displacement of rotating turbine parts relative to stationary parts. A too big axial displacement of the turbine shaft may be caused by excessive wear of thrust bearing pads. In the event, the axial displacement of the shaft exceeds the limits set during erection, the turbine is tripped. This protection measures the axial displacement in both directions (+,-) using three redundant inductive half bridge type shaft position sensors. These measuring signals are directed to a protection system designed in 2 out of 3 configuration.

------------------------------------------------------------------------------------------ --Sheet no.-3of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

3. Low Vacuum Protection (Condenser) (MAG01EZ110/120)

In condensing turbine the exhaust steam from the low-pressure cylinders is fed into condensers. The steam is condensed and the condensate is then forwarded by the condensate pumps to the feedwater tank. The reduction in volume which occurs during condensing process together with the extraction of air create a vacuum in the condenser. Air extraction is necessary in order to remove air in leakages and build-up a vacuum at startup. The condenser is watercooled to remove the latent heat of condensation. If none or only a part of the generated steam can be accepted by the turbine (e. g. start-up/load shedding) it is fed via the main steam bypass directly into the condensers. Overpressure with subsequent blowout of the rupture discs could occur in the condenser in events such as loss of circulating water supply or excessive air in leakage into the condenser. Turbine or bypass trip is initiated to protect against overpressure. Trip initiation causes the supply of steam to be interrupted there by preventing overpressures. The response level for turbine trip is selected so as to allow for the pressure rise caused of the steam still enclosed in turbine following closure of the stop and control valves. Initiation is therefore staggered so that turbine trip occurs first and bypass trip is only initiated if the pressure continues to rise. The pressure is measured for each condenser and transmitted along signal lines to three hydraulic-mechanical maximum value selection circuits. These maximum value selection circuits ensure that it is always the highest pressure which is transmitted to three pressure transducers. The analog values from the three pressure transducers are each fed to an analog signal conditioning module. 3.1 Bypass Valve Actuation

The three trip signals (2 out of 3 configuration) are processed in the logics for closure of the bypass stations. The signals from channels 1, 2 and 3 are fed directly to control interface of the trip solenoids. The signal from all channel are processed and then fed to the control interface of the trip solenoids. Energization of a trip solenoid depressurizes in the control fluid (bypass auxiliary fluid pressure). As a result bypass valve assembly cannot be opened as long as the energizing signal is present. 4 Wheel Chember Pressure Protection used for OTSS ( MAA50EZ100)

The wheel chamber pressure features 2 out of 3 configuration, which is used for interlock of the overspeed trip selection system ( refer write-up on OTSS). The pressure is measured by means three analog pressure transducers. The analog values from the transducers are then taken to input
------------------------------------------------------------------------------------------ --Sheet no.-4of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

module for conversion into bus signal . Each channel is tested for operability by cyclic scanning as explained in the description of 2 out of 3 protection circuit. 5 Discription of the Electronic Protection Circuit

The electronic turbine protection circuits are 2 out of 3 configuration featuring analog comparison and cyclic testing. Each channel is tested for operability by cyclic scanning. This test detects non-self-reporting failures. If a fault is detected in one channel, the 2 out of 3 system reverts to a 1 out of 2 configuration by means of a substitute initiation signal. Response of one further channel is then sufficient for trip actuation. A further failure in the circuit would turn the circuit into a one out of one logic. Deviations of the analog signals are detected by monitoring of the measured values. A defective channel is detected by means of a comparison circuits which generates a substitute initiation signal that causes the 2 out of 3 circuit to revert to 1 out of 2 configuration . 5.1 Automation Cyclical Functional Test

Analog values are compared continuously with one another by means of the evaluation logic (2 out of 3). A defective signal is detected by means of comparison and monitoring disturbance bit of the measured signal. This generates a substitution signal such that the circuit is reconfigured to 1 out of 2 logic. Further limit values are checked for proper function of the individual channel. First channel 1 of the circuit is tested and then channels 2 and 3 in succession. 5.2 Functional Description of two out of three System

The functional sequence of operation is described below with reference to one protection circuit. The limit values set on three limit value monitors are identical. The order in which the LVMS respond is of no significance. If the output signal of the transducer in channel 1 exceeds the limit set on LVM1, LVM1 respond. If LVM 2 or 3 responds as well, trip is actuated. The trip alarm XK96 is stored and can be acknowledged by means of pushbutton or the functional testing module. If, however, neither LVM 2 or LVM3 responds within the set period, a noncoincidence alarm is given and in parallel further cyclic testing of channel 1 inhibited.
------------------------------------------------------------------------------------------ --Sheet no.-5of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

Warning alarms are given by separate limit value monitors which are connected to one of the three analog input signals. This monitor is set sufficiently lower than the trip points. The EPS trip signals trip the turbine through turbine trip system while the generator is recommended to be subsequently disconnected from the grid by reverse power relay. 6. Alarm

For use with the Control Room Alarm System the following alarms are available : Pre-trip Alarms MAD12 CY004 MAG01 CP002 XK94 XK94

. TURB SHAFT DISPLACEMENT HIGH . CONDENSER VACUUM LOW Trip Alarms

. TURB AXIAL BRG PROT TRIPPED LOW VACUUM PROT (CONDENSER) TRIPPED (TURBINE TRIP) . LOW VACUUM PROT (CONDENSER) TRIPPED (BYPASS TRIP)

MAD12 EZ100 MAG01 EZ110 MAG01 EZ120

XK96 XK96 XK96

Protection Circuits Fault Alarms MAD12 EZ110 MAG01 EZ110 MAG01 EZ120 XK93 XK93 XK93

. TURB AXIAL BRG PROT FAULTED LOW VACUUM PROT (CONDENSER) FAULTED (TURBINE TRIP) . LOW VACUUM PROT (CONDENSER) FAULTED (BYPASS TRIP)

If an additional failure occurs in a further channel of a still disturbed protection circuit, the fault alarm signal present will be interrupted for a short period, thus allowing the control room alarm system to be triggered again by the reappearing fault signal. . TURB AXIAL BRG PROT DEAD . LOW VACUUM PROT (CONDENSER) DEAD (TURBINE TRIP) . LOW VACUUM PROT (CONDENSER) DEAD (BYPASS TRIP) MAD12 EZ100 MAG01 EZ110 MAG01 EZ120 XK99 XK99 XK99

------------------------------------------------------------------------------------------ --Sheet no.-6of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

A DEAD alarm is given when all three channels of a protection circuit are disturbed at the same time. . System Fault Alarm EPS CENTRAL UNIT FAULTED MAY01 EZ002 XK93

This alarm includes failures of the clock pulse generator for the cyclic functional test and wire breaks in the trip signal cables between the EPS and TTS cubicle. 7 Turbine Trip Actuation

The signals gated in the logic circuitry are output in the form of three 2 out of 3 gated trip signals. The signal paths including relays in the trip cabinet; are continuously monitored for wire break and short circuit by means of three CS012 monitored OR modules. Two channel trip actuation in 1 out of 2 configuration of the two remote trip solenoids is performed in trip cabinet.

------------------------------------------------------------------------------------------ --Sheet no.-7of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01 B - Overspeed Trip Selection System (OTSS)

1 General

After a load rejection, the main steam control valves must be closed by the time 5% overspeed has been reached, at the latest ( speed governor must be set for 5% droop). If this is not the case, or if the wheel-chamber pressure has not fallen below a preset limit valve by a specific point in time, a malfunction is present in the turbine control system ( including the main steam control valves) Since this malfunction will in any case lead to an overspeed trip, it is not necessary to wait for response by the overspeed trip mechanism at 115% + 0.5% overspeed, and turbine trip is initiated at approx. 6 % overspeed The maximum transient overspeed is thus reduced by the difference between the setpoint of the mechanical / hydraulic overspeed trip devices and the valve at which the overspeed trip selection system takes action. 2 Function

The overspeed trip selection system is a three - channel system . The elements of the system responsible for turbine trip are gated in a 2 -out -of 3 logic according to the closed - circuit principle. The system monitors the turbine speed, the position of the main steam control valves and wheel chamber pressure (to make allowance for valve leakage,) The system is described for channel 1. A disk with 120 magnets is mounted on the shaft. Three Hall probes with dedicated pulse converters generate three separate, identical output frequencies , which are supplied to the three channels. The output frequency is proportional to the turbine shaft speed. In each measuring cycle, 60 period of this frequency (at 3000 RPM) are counted by a control unit . During this time , pulses are passed from one frequency generator (100 KHz) to a counter. If the counter reading after 60 period is below a preset value, the turbine speed is too high. In the event of a deviation of this kind, a signal is formed for trip initiation. This signal is locked out in a 2-out-of-3 logic by the signal formed from the signals for the main steam control valve closed positions and from a signal for the wheel chamber pressure. This prevents turbine trip when there is an increase in speed while the valves are closed and the wheel chamber pressure is not too high.

------------------------------------------------------------------------------------------ --Sheet no.-8of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

For test purposes a test frequency (MAY20 EZ511 to 513 and MAY20 EZ521 to 523-XJOI ) is also applied to a monitoring module. This test frequency is made effective by cyclical test commands or by the ATT SG safety devices. During test the variable test frequency takes the place of the actual frequency related to the turbine speed . An automatic cyclical test acts on one channel at a time in sequence. The complete test cycle is approx . 8 min. The ATT test program acts on two channels at a time to fulfill the 2out-of-3 condition of the OTSS. (For further information about the ATT-test see description ATT SG Safety Devices. The channel is switched off if the actual turbine speed (MAY20 EZ511 to 513 - ZV08 ) exceeds the (adjustable) limit value of 106% . This limit value represents the overspeed trip point . During normal turbine operation (speed <106 % ) each channel provides 24 V DC, which will disappear when the channel is switched off (break current system). The outputs of the three channels OR-gated each with the signals "Main steam control valves closed (MAY 40 EC200 ZA01 and MAY40 EC200 ZA 02)" and "Wheel chamber pressure < 20 kg/cm2 (MAA50 EZ100ZK11/ZK21/ZK31)" and then connected to two solenoid valves each. These six solenoid valves are acting as the 2-out- of-3 selection circuit of the OTSS. 2.1 Valve Position Detection

For a proper function of the OTSS it is essential to generate a reliable and safe valve position signal. Because of the importance of the "CLOSED" signal and the difficult detection of closed position in a valve with mechanical stop, four binary position limit switches for each valve (MAA10 C002C/E/G/J XG01 and MAA20 CG002 C/E/G/J - XG02) are used and gated in a 3-out-of-4 logic configuration. These four position limit switches are monitored for noncoincidence. The signal of the 3-out-of-4 selection logic (MAY40 EC200 ZA01/ZA02) is also used as a check-back signal in the ATT SG HP valves and tested for proper function at regular intervals. 2.2 Wheel Chamber Pressure Measurement

Even if the 0 % position limit switches of main steam control valve respond, it is not guaranteed, that the valve is completely closed. In case of a considerable leakage especially at no-load the turbo generator is further accelerated. The wheel chamber pressure is measured by three transducers and then monitored for a special limit value (MAA50 EZ100:XT01/02/03). This limit value is < 20 kg/cm2. These three limit values are processed in 2-out-of-3 selection logic . In case of failure of 1 channel , the selection logic will be changed to 1 out of 2 and an alarm shall be generated .

------------------------------------------------------------------------------------------ --Sheet no.-9of-13------------

STE,BHEL, Hardwar

----------TAPP3/64110/5660/DN---------------------- 4-13300-00-479---Rev no.-01

If speed of turbine exceeds 106% and gated with either of wheel chamber pressure is higher than specified value and all HP ESV valves are not closed then trip signal is given(i.e. governing system is malfunctioning). 3 Turbine Trip

If, during normal operation, a fault occurs which is identified by the monitoring system, the relevant channel is announced to the defective and is switched off after a certain delay. The channel output is the de-energized. One of the coils in each of the two solenoid valves is therefore no longer energized. An alarm is initiated in the control room. If at this point another channel is switched off, the turbine is immediately tripped. In the event of a fault, the 2-out-of 3 is converted to a 1-out of-2 logic by the substitute signal. Each channel can be tested during shutdown as well as operation. The test cover all major functions. If a channel is being tested, the control unit blocks the output frequency from the Hall probes and begins counting the periods using the test frequency. This test frequency is 10 % higher than the normal output frequency which causes the channel to be switched off. This does not initiate turbine trip. Turbine trip is initiated if at least two channels (acting on four solenoid valves) are switched off (solenoid valves de-energized). 4 Overspeed Trip Selection System During Test

The overspeed trip selection system during test is of the same design and is used for overspeed protection during test of the OTSS operation. For further information see description ATT SG Safety Devices.

------------------------------------------------------------------------------------------ --Sheet no.-10of-13-----------

STE,BHEL, Hardwar