Design of SIL-2 interlock function for tokamak fusion reactor

The ITER Gas Injection System (GIS) Regulates fueling and impurity gases during plasma discharges within the tokamak vacuum vessel. To implement ITER investment protection, the GIS requires capable of interlock function to shielding the gases from ITER vacuum chamber when Disruption Mitigation System (DMS) is triggered or an abnormality is detected, in order to prevent further damage caused by gas fueling. This paper presents the preliminary design of the interlock system for the ITER GIS per ITER plant interlock system design rules and guidelines. The design adopts a redundant and fault-tolerant architecture with fail-safe programmable logic controllers to achieve the required ITER’s target Interlock Integrity Level of SIL-2. The solutions here facilitate the integration with ITER instrumentation and control system, also establishing reference models for other large-scale control system platforms.