Control processes and machine protection on ASDEX Upgrade

Safe operation of ASDEX Upgrade is guaranteed by a conventional hierarchy of simple and robust hard-wired systems for personnel and machine protection featuring standardized switch-off procedures. Machine protection and handling of off-normal events is further enhanced and peak and lifetime stress minimized through the plasma control system. Based on a real-time process model supporting safety critical applications with data quality tagging, process self-monitoring, watchdog monitoring and alarm propagation, processes detect complex and critical failures and reliably perform case-sensitive counter measures. Intelligent real-time failure handling is done with hardware or software redundancy and performance degradation, or modification of reference values to continue or terminate discharges with reduced machine stress. Examples implemented so far on ASDEX Upgrade are given, such as recovery from measurement failures, switch-over of redundant actuators, handling of actuator limitations, detection of plasma instabilities, plasma state dependent soft landing, or handling of failed switch-off procedures through breakers disconnecting the machine from grid.