Event detection and exception handling strategies in the ASDEX Upgrade discharge control system

• Published in: Fusion engineering and design Vol. 88; no. 6-8; pp. 1069 - 1073
• Main Authors: Treutterer, W., Neu, G., Rapson, C., Raupp, G., Zasche, D., Zehetbauer, T.
• Format: Journal Article
• Language: English
• Published: Elsevier B.V 01.10.2013
• Subjects: Control systems; Discharge; Event detection; Exception handling; Failure; Plasmas; Protection; Real-time control; Schedules; Segments; State machines; System architecture; System architecture; Real-time control; Event detection; Exception handling; Protection
• ISSN: 0920-3796; 1873-7196
• DOI: 10.1016/j.fusengdes.2013.03.004

•Event detection and exception handling is integrated in control system architecture.•Pulse control with local exception handling and pulse supervision with central exception handling are strictly separated.•Local exception handling limits the effect of an exception to a minimal part of the controlled system.•Central Exception Handling solves problems requiring coordinated action of multiple control components. Thermonuclear plasmas are governed by nonlinear characteristics: plasma operation can be classified into scenarios with pronounced features like L and H-mode, ELMs or MHD activity. Transitions between them may be treated as events. Similarly, technical systems are also subject to events such as failure of measurement sensors, actuator saturation or violation of machine and plant operation limits. Such situations often are handled with a mixture of pulse abortion and iteratively improved pulse schedule reference programming. In case of protection-relevant events, however, the complexity of even a medium-sized device as ASDEX Upgrade requires a sophisticated and coordinated shutdown procedure rather than a simple stop of the pulse. The detection of events and their intelligent handling by the control system has been shown to be valuable also in terms of saving experiment time and cost. This paper outlines how ASDEX Upgrade's discharge control system (DCS) detects events and handles exceptions in two stages: locally and centrally. The goal of local exception handling is to limit the effect of an unexpected or asynchronous event to a minimal part of the controlled system. Thus, local exception handling facilitates robustness to failures but keeps the decision structures lean. A central state machine deals with exceptions requiring coordinated action of multiple control components. DCS implements the state machine by means of pulse schedule segments containing pre-programmed waveforms to define discharge goal and control methods within a time window. Segments also include conditions to define exceptions and associated segment branching instructions. Thus, the state machine logic can automatically adapt to plasma and plant state.