13300 $0401 Rev. 03 WRITE UP ON TURBINE PROTECTION SYSTEM Project = Rihand, STP, Stage-Il (2X500MW) Package = Main Plant Turnkey Package Produc Steam Turbine NTPC arg, no.-1230-001-03HW-PVM-W-020 Revised as per MOM Dt. 1-2/7/02 and 5- 6/702 at BHEL, — oa_|Herduar 12.7.02_| BSR ask 260 | xe Ac 02 |NTPCcomments dtd. 6.3.02 incorpotrated. _ 6.4.02 | BS RANA __| BS RANA OL | Neonronatep =] 22.03.02 Sd/- Sd/- Sd/- 00 _| "30.01.02 | V.KUMAR__|_B.S.RANA | K.B.BATRA | Rev. REMARKS DATE | WORKED | CHECKED STE, BHEL , HARDWAR1.0 GENERAL : 2.0 The turbine protection system can be actuated by any of the following trip systems : -- Hydraulic trip system -- Electrical trip system Both the trip systems, when initiated, act on the hydraulic control system and cause trip oil pressure to collapse which in turn closes the Emergency stop valves, Interceptor valves and control valves. HYDRAULIC TRIP SYSTEM : The hydraulic trip system comprises of the following trip devices and actuation of any one of these devices trips the turbine, -- Overspeed trip device 1 -- Overspeed trip device 2 -- Vacuum trip device -- Hand trip lever 1 (local) -- Hand trip lever 2 (local) The mode of operation of these devices is separately covered in the description of hydraulic control (governing) system. . 3.1.1 Configuration : Two trip solenoids MAXS1AA001 & MAXS51QA002 are provided in the hydraulic circuit, which get trip signals from the electrical system. Actuation of any one solenoid is sufficient to trip the turbine. The electrical system is configured as a 2-channel system. Each channel is realized in a Processing Unit . Both the processor units are completely independent of each other and input modules, processor module and output modules reside on each. Each channel having two processors Unit with one processor in hot standby mode .Trip signals from sensors/field instruments are conditioned & distributed to both the channels (processor unit ) via hardwired modules Realisation of 2 out of 3 trip logic is carried out in the processor. On detection of a fault in any one of the input signals to a_ channel, the configuration for that channel changes from 2 out of 3. to 1 out of 2 and is annunciated . Further failure in a channel changes the configuration to 1 out of 1. Trip signal from each of the local buses acts on 3 relays in 2 out of 3 combination. Configuration of the system is shown in Fig. 1 on sheet7. Both the channels are tested periodically even while the turbine is running. Cyclic testing is done automatically at preset intervals and can be SH. NO. 2 OF 07-~ ,HARDWAR4 13300 $0 401- Rey. 03 blocked from the protection cabinet, if desired. The testing can also be initiated manually from the cabinet. Only one channel can be tested at a time. Online testing is done by simulating the trip signals and it determines faults in the input modules, processor modules, output modules or the trip relays. These faults can be acknowledged from the cabinet. Next cycle test can only be carried out after acknowledging of the fault. 3.1.2 Once initiated, the trip signal keeps the trip solenoids energised unless and until the following conditions are — fulfilled : i) Command signal from the individual trip initiating circuit ceases. ii) Both the ESVs are closed and trip oil pressure (sensed by any of the two pressure switches) is less than 2 Kg/Cm? : ( Disconnection relay 1) OR ( Disconnection relay 2) is made ON from reset program of ATT , SG : Safety devices . The protection system conforms to the following requirements : 3.1.3. The command signal appearing due to a fault sustains till i) the deviated parameter causing the fault returns to normal operating value or ii) all the related safety measures are successfully implemented. 3.1.4 The affected equipment should be reinstated by the operating personnel only after ascertaining the cause of the fault and Its elimination. 3.1.5 Once initiated, the fault command signal cannot be interrupted or reversed till all the related safety measures are successfully implemented. 3.1.6 Suitable signals are provided for annunciation of fault conditions in the control room, All fault conditions shall be annunciated independently and action of protection system and trip-out shall not hold annunciations for any subsequent faults. Under such conditions annunciation system must ensure positive identification of the first cause which initiated action of the protection system. 3.1.7 Hydraulic trip devices including the trip solenoids MAX51AA001 and MAXS51AA002 can be tested even during on- load with the help of Automatic Turbine Tester (ATT). During such testing both the trip channels are transferred to two separate trip solenoids (test) MAXS1AA201 & 202 which serve to trip the turbine if any actual trip condition arises during testing. STE, BHEL , HARDWAR3.2 TRIPPING CRITERIA : ‘The turbine trips automatically under any of the following conditions. The initiating signal in each case actuates both the channels. 3.2.1 Condenser Pressure protection : Two types of condenser pressure protection , one with fixed set point (FSP) and one with variable set point (VSP), are provided. The task of condenser pressure protection is to protect the condenser against @ non permissible pressure increase and the deterioration of vacuum. 3.2.1(a) Condenser pressure protection (fixed set point ) : This is a back up protection to the hydraulic low vacuum trip device mentioned in clause 2.0. To prevent operation of trip circuit during start-up, an interlock is provided. This interlock ensures that the trip circuit is enabled only, if the turbine speed is more than 240 RPM. The trip signal is initiated by three pressure transmitters in 2-out of -3 logic. 3.2.1(b) Condenser pressure protection (variable set point) For the protection with variable set point , the permissible condenser pressure is specified through a set point characteristic curve in each channel depending upon the LP inlet pressure . The setpoint is derived such that it is lower for lower mass flow through LP turbine. Difference of the actual pressure value minus pressure set point is continuously compared with a limit signal in each of the channels. If the differential pressure (Ap) exceeds the set limit a trip signal Is formed in each channel. The 3 trip signals are gated In 2V3 logic configuration, The trip signal is enabled with a release (> 240 RPM) 3.2.2 Lube oil pressure low The protection acts if the lube oil pressure before thrust bearing decreases to 1.2Kg/Cm? . The trip signal is initiated by three pressure switches in 2- out-of-3-logic. 3.2.3 Fire protection : The protection acts in the event of any of the following conditions : i) Fire protection switch either in control room or in machine hall operated. ii) Level in main oil tank falls to a very low value indicating substantial leakage of oil from the system. STE, BHEL , HARDWAR4 13300 50 401--- Rev. 03 The command signal under condition (ii) is initiated from three level transmitters in 2-out-of-3 logic configuration . The trip circuit shall switch on automatically if the oil level rises above ‘low level’ after turning gear operation. The command signal remains blocked till the turning gear oil supply valve is not closed. 3.2.4 HP Exhaust Temp. High : The HP exhaust steam temp. protection ckt. protects the exhaust section of the Turbine, the blading & extraction points against overheating. During startup/shutdown or load rejections, there can be long period during which steam turbines are operated at very low volumetric flows and relatively high back pressure i.e. the mech. Energy transmitted by the turbine shaft is converted to thermal energy, which in turn result in an increase in the temp. of both the exhaust steam and turbine components. This temp. Is required to be monitored to avoid any deformation in the casing or blades. The temp. is measured by means of three Thermocouples and protection criteria is derived in 2 out of 3 logics." 3.2.5. Axial Shift Very High : A too low axial displacement of the turbine shaft may cause damage to the turbine blades. This protection trips the turbine in case the axial shift of the shaft exceeds the limits set during erection . The axial shift is measured in both directions (+) using three proximity probes. These measured signals are fed to a protection ckt. designed in 2-out-of -3 logic for further realization. 3.2.6 HPT/IPT Top Bottom Temp. High Excessive large temp. differentials within turbine components cause heat stresses. The temp. differential between upper & lower parts of the turbine casing (HP and I? sections) is a measure of casing distortion. The casing temperatures of HP turbine are measured using three thermocouples are configured in 2 out of 3 logic. The casing temperatures of IP turbine are measured using two thermocouples also configured in 2 out of 3 logic by using the spare elements of the thermocouples. 3.2.7 Turbine trip switch operated : i) The protection acts when the turbine trip switch 1 & 2 in Console insert is operated manually. ii) The protection acts when the turbine trip switch 1 & 2 on Desk to be provided by other agency is operated manually. STE, BHEL , HARDWARRev. 03 3.2.8 Trip command initiated from ATRS, Trip command signal initiated from 'Shut-down' program of Turbine Sub- Group Control in ATRS. 3.2.9 Trip command from Gen. mechanical protection Trip command signal is initiated to trip the turbine from 2 out of 3 logic of gen. mechanical prot. processed in Generator Auxiliary Monitoring Panel . (Refer drg. no. LERAM701 titled logic diagram on Gen. mechanical Protection and document no, 4-152-00-01085 titled w/p on logic for Generator Auxiliary Control & Instrumentation). 3.2.10 Generator Protection OR Master fuel trip relay energised: In the event of generator faults under Class-B trip both the turbine trip channels are actuated to trip the turbine. In such a case the generator protection acts as mentioned at clause 4.0. In the event of generator faults under Class-A trip or in the event of boiler Master fuel trip relay energised, the command signal for turbine trip shall act simultaneously and independent of other equipment trip out sequence. Three contacts for each of these conditions are taken from respective areas and processed in 2 out of 3 logic. 4.0 Isolation of Generator from grid : 4.1 It is recommended to provide two identical and independent channels and each channel with separate reverse power relay for isolation of generator from grid, The generator breaker shall open if one or both the channels operate. Each channel shall be operated under any of the following conditions: i) Turbine has tripped and reverse power relay _has operated. The command signal shall be initiated with a delay of 3Seconds OR ii) Reverse power relay has operated. The command signal shall be initiated with a time delay of 10 seconds. 4,2 In addition gen. Breaker opening scheme identical to 4.1 but with Low Forward Power Relay shall be parallely used as shown in Turbine Trip System. STE, BHEL , HARDWARPROCESSING UNIT TEST CHECK-BACK SIGNALS 1 1 ' 1 input __ |pgocessinG | ouTPuT i TRIP SIGNALI|UT371/ MODULES |UNIT MODULES | juaa74 i = 1 ' ' l 1 | ' eveLic Test TRIP. SIGNALS Tle] 3 \ eVv3 RELAY TRIP | COMBINATION svi | PROCESSING UNIT TRIP. SIGNALEL 755 - UT 3717 TEST. CHECK-BACK Ua374 i input |processinc| output ST CHECK BAC 1 MODULES |UNIT MODULES CYCLIC TEST TRIP SIGNALS El2 | 2 2Va_ RELAY TRIE CHANNEL -2 COMBINATION sve TRIP SIGNAL GUT371/ ——Jus374 FIG. 1 PROTECTION SYSTEM CONFIGURATION MICROPROCESSOR BASED DOCNO. : 4-13300-50-401 , REV 03 SHEET NO 07 OF 07