[go: up one dir, main page]

TWI407452B - Digital instrument control software failure simulation test device - Google Patents

Digital instrument control software failure simulation test device Download PDF

Info

Publication number
TWI407452B
TWI407452B TW096117668A TW96117668A TWI407452B TW I407452 B TWI407452 B TW I407452B TW 096117668 A TW096117668 A TW 096117668A TW 96117668 A TW96117668 A TW 96117668A TW I407452 B TWI407452 B TW I407452B
Authority
TW
Taiwan
Prior art keywords
control
simulation
power plant
software
failure
Prior art date
Application number
TW096117668A
Other languages
Chinese (zh)
Other versions
TW200847188A (en
Original Assignee
Atomic Energy Council
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Atomic Energy Council filed Critical Atomic Energy Council
Priority to TW096117668A priority Critical patent/TWI407452B/en
Publication of TW200847188A publication Critical patent/TW200847188A/en
Application granted granted Critical
Publication of TWI407452B publication Critical patent/TWI407452B/en

Links

Classifications

    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02EREDUCTION OF GREENHOUSE GAS [GHG] EMISSIONS, RELATED TO ENERGY GENERATION, TRANSMISSION OR DISTRIBUTION
    • Y02E30/00Energy generation of nuclear origin
    • Y02E30/30Nuclear fission reactors

Landscapes

  • Testing And Monitoring For Control Systems (AREA)

Abstract

A failure simulation testing device of digital instrumentation and control comprises at least one program-simulated power plant process device, one high-pressure water injection controller for actual control or logic simulation control, and an operation interface device which is provided for operator to observe the high-pressured stove core irrigation control device and a special security instrumental control. The data between the program-simulated power plant process device and the high-pressured stove core irrigation control device are exchanged by a hardware input and output module and a deterministic network communication interface to provide software security analysis and to deduce new failure modes.

Description

數位儀控軟體失效模擬測試裝置 Digital instrument control software failure simulation test device

本發明係有關於一種數位儀控軟體失效模擬測試之裝置,尤指一種可提供軟體安全分析和推演衍生相關新失效模式之應用。 The invention relates to a device for testing the failure test of a digital instrument control software, in particular to an application which can provide a new failure mode related to software security analysis and derivation.

一般在電廠中高壓爐心注水控制裝置之反應爐一旦發生假想之管路破口等狀況,於導致爐水流失意外事故時,其緊急爐心冷卻系統便會自動啟動,其中該高壓爐心注水控制裝置因為其系統設計之出口壓力較高,因此在反應爐壓力尚未降低之情況下,即可迅速由冷凝水儲存槽或抑壓池取水補入該反應爐,隨後並配合自動洩壓裝置及低壓灌水系統補水維持爐心水位,確保爐心核燃料可以得到足夠之冷卻,以避免核燃料過熱受損。此係為控制該高壓爐心注水控制裝置理想之運作。 Generally, in the reaction furnace of the high-pressure furnace core water injection control device in the power plant, once the imaginary pipeline breaks, etc., the emergency core cooling system will automatically start when the furnace water loss accident occurs, wherein the high-pressure furnace core water injection Because the control device has a high outlet pressure for the system design, the reactor can be quickly taken in from the condensate storage tank or the suppression tank without any reduction in the pressure of the reactor, and then combined with the automatic pressure relief device and The low-pressure irrigation system hydrates to maintain the core water level, ensuring that the core fuel can be cooled enough to avoid damage to the nuclear fuel. This is the ideal operation to control the high pressure furnace heart water injection control device.

通常,由習知之測試裝置在發展測試程式時,若裝置在發生故障時,其考量因素未考量可能會發生之損害擴散性且缺乏周延性與完整性之對策,又亦或不恰當之考量等,即無法精準反映出對於核能安全與管制風險所應具有之相關因應措施及減緩事件後果之條件與程序,通常在於會影響核能安全與管制風險之因素,除考量損傷遭破壞之程度外,還必須考量其破壞 可能之擴散性。因此由習知之測試裝置在經過該些複雜因素之整合考量,顯見對於核能安全與管制風險處理之考量因素無法完整呈現判斷結果及實際需求。故,一般習用者係無法符合使用者於實際使用時之所需。 Generally, when a test device is developed by a conventional test device, if the device is in a failure, the considerations of the device may not be considered, and the countermeasures may be impaired, which may impair the spreadability and lack of durability and integrity, or inappropriate considerations, etc. That is, it cannot accurately reflect the conditions and procedures for the related countermeasures and the consequences of mitigating the incidents of nuclear safety and control risks, usually the factors that affect the safety of nuclear energy and the risks of regulation, in addition to the extent of damage damage, Must consider its damage Possible spread. Therefore, the integration of these complex factors by the conventional test device shows that the judgment factors and actual needs cannot be fully presented for the consideration of nuclear energy safety and regulatory risk management. Therefore, the general practitioners cannot meet the needs of the user in actual use.

本發明之主要目的係在於,利用一硬體輸出入模組與一確定性網路通訊介面將資料透通於以電廠模擬裝置與高壓爐心注水控制裝置,以提供軟體安全分析和推演衍生相關新失效模式之應用。 The main purpose of the present invention is to provide a software security analysis and derivation derivative correlation by using a hardware input and output module and a deterministic network communication interface to transparently pass data to the power plant simulation device and the high pressure core water injection control device. The application of the new failure mode.

為達以上之目的,本發明係一種數位儀控軟體失效模擬測試之裝置,係至少包括有一以程式模擬之電廠模擬(Process)裝置、一包含有高壓爐心注水實體控制及軟體模擬控制(Control Logical Simulation)之控制裝置(Controller)及一提供操作者(Operator)觀察高壓爐心注水控制裝置與該控制裝置之操作介面裝置。藉此,利用該硬體輸出入模組與該確定性網路通訊介面將資料透通於該電廠模擬裝置與該高壓爐心注水控制裝置整合,以提供軟體安全分析和推演衍生相關新失效模式之應用。 In order to achieve the above purpose, the present invention is a digital instrument control software failure simulation test device, which comprises at least a program simulation power plant simulation device, a high pressure core water injection entity control and a software simulation control (Control) The controller of the Logical Simulation and an operator provide an operating interface device for observing the high pressure core water injection control device and the control device. Thereby, the hardware input and output module and the deterministic network communication interface are used to integrate data into the power plant simulation device and the high-pressure furnace water injection control device to provide a new failure mode related to software security analysis and derivation. Application.

請參閱『第1圖~第3圖』所示,係分別為本發明之系統結構示意圖、本發明之電廠模擬程式結構示 意圖及本發明之電廠模擬程式基本流程示意圖。如圖所示:本發明係一種數位儀控軟體失效模擬測試之裝置,至少包含有一電廠模擬(Process)裝置1、一控制裝置(Controller)2及一操作介面裝置3,藉此,以提供軟體安全分析及推演衍生相關新失效模式之應用。 Please refer to FIG. 1 to FIG. 3, which are schematic diagrams of the system structure of the present invention, and the power plant simulation program structure of the present invention. A schematic diagram of the basic flow of the power plant simulation program of the intention and the present invention. As shown in the figure: the present invention is a digital instrument control software failure simulation test device, comprising at least one power plant simulation device 1, a control device (Controller) 2 and an operation interface device 3, thereby providing software Security analysis and derivation are derived from the application of new failure modes.

該電廠模擬裝置1係以軟體發展之程式模擬,並進一步分為一系統處理類組11及一電廠模擬計算類組12,該系統處理類組11係包含有一整體模擬流程控制模組111、一介面處理模組112及一資料庫處理模組113;而該電廠模擬計算類組12則包含有一共用計算函數模組121、一模擬計算模組122及一報告(Report)記錄管理模組123。 The power plant simulation device 1 is simulated by a software development program, and further divided into a system processing group 11 and a power plant simulation computing group 12, the system processing group 11 includes an overall simulation flow control module 111, a The interface processing module 112 and the database processing module 113 include a shared computing function module 121, an analog computing module 122, and a report recording management module 123.

該控制裝置2係包含有一高壓爐心注水實體控制21及一軟體模擬控制(Control Logical Simulation)22。 The control device 2 includes a high pressure core water injection entity control 21 and a software control simulation 22 .

該操作介面裝置3係用以提供操作者(Operator)觀察高壓爐心注水控制裝置與該控制裝置之控制介面。 The operation interface device 3 is for providing an operator to observe the control interface of the high pressure core water injection control device and the control device.

該電廠模擬裝置1與該控制裝置2之溝通介面係由硬體輸出入模組40a、40b以硬接線42及網際網路通訊協定(TCP/IP)43連接,而該控制裝置2與該操作介面裝置3則係由確定性網路通訊介面5連 結。 The communication interface between the power plant simulation device 1 and the control device 2 is connected by a hardware input/output module 40a, 40b with a hard wire 42 and a network communication protocol (TCP/IP) 43, and the control device 2 and the operation Interface device 3 is connected by deterministic network communication interface 5 Knot.

其中,上述新失效模式係指在考量損傷遭破壞之程度外,尚考量其破壞可能之擴散性,包含軟體共因失效、軟體需求不一致性、軟體設計與實做異常、以及軟體功能失效,俾以藉由此等損害擴散性之考量而更精確瞭解各新之失效模式對核能安全之影響,進而建立核能安全與管制風險所應具有之相關因應措施及減緩事件後果之條件與程序方法,以提供周延性與完整性之對策。 Among them, the above new failure mode refers to the extent of damage damage, including the possible commonality of software failure, software inconsistency, software design and implementation, and software function failure. To better understand the impact of each new failure mode on nuclear safety by taking into account such damage damage, and to establish the relevant measures and procedural methods for mitigating the consequences of nuclear energy safety and control risks, Provide countermeasures for perimeter and integrity.

請進一步參閱『第4圖』所示,係本發明之實體結構示意圖。如圖所示:本發明之數位儀控軟體失效模擬測試之裝置,於系統上共有兩個機櫃,分別為高壓爐心注水實體控制機櫃21a,該實體控制機櫃21a係放置高壓爐心注水控制相關之控制設備;另一機櫃4則為放置硬體輸出入模組之溝通介面41a、41b與電廠模擬裝置1,而最外部之操作介面裝置3則為人機介面(Man-machine Interface)控制模擬(Control Simulation)。 Please refer to FIG. 4 for further description of the physical structure of the present invention. As shown in the figure: the digital instrument control software failure simulation test device of the present invention has two cabinets on the system, which are respectively a high pressure furnace core water injection entity control cabinet 21a, and the entity control cabinet 21a is placed with a high pressure furnace core water injection control. The control device; the other cabinet 4 is a communication interface 41a, 41b for placing the hardware input and output module and the power plant simulation device 1, and the outermost operation interface device 3 is a man-machine interface control simulation. (Control Simulation).

藉由該硬體輸出入模組之動態連結函式庫(DLL)與該電廠模擬裝置1結合,可以讀寫硬體輸出入點之資料,達到電廠模擬裝置1與部分軟體模擬控制22之連結。 The dynamic connection library (DLL) of the hardware input and output module is combined with the power plant simulation device 1 to read and write data of the hardware input and output points, and the connection between the power plant simulation device 1 and a part of the software simulation control 22 is achieved. .

當本發明於程式模擬時,係先經由以程式模擬之 電廠模擬裝置1,分為兩路徑,分別為啟動時程式第一次執行路徑13a及程式開始執行路徑13b,程式在啟動後,進行步驟14、15會從該資料庫處理模組113裡載入相關之基本參數,由此載入之資料進行步驟16供程式進行第一次之基本計算。待計算完後會進行步驟17開啟程式之版本宣告及操作介面,如此即完成該程式第一次執行路徑13a,而該程式開始執行路徑13b於進行步驟18時,就等操作者(Operator)輸入指命或下狀況模擬,此時程式流程不會再重頭開始,而係集中在中間計算部分。此中間計算部分除了含基本之理論計算模式外,另於該步驟16中尚包含控制系統之邏輯判斷,於步驟19執行模擬時,程式會以500毫秒(msec)為一個計算依據,每一次計算完後,會再加上500毫秒,以做為下一個時間點依據。待程式停止後,則會進行步驟20自動詢問使用者要不要儲存計算結果。 When the present invention is simulated in a program, it is first simulated by a program. The power plant simulation device 1 is divided into two paths, which are the first execution path 13a and the program start execution path 13b of the startup program. After the program is started, the steps 14 and 15 are loaded from the database processing module 113. The relevant basic parameters, the data thus loaded, are carried out in step 16 for the program to perform the first basic calculation. After the calculation is completed, the version declaration and the operation interface of the program are opened in step 17, so that the program first executes the path 13a, and the program starts the execution path 13b. When the step 18 is performed, the operator is input. The life cycle or the next situation simulation, the program flow will not start again, but concentrated in the middle calculation part. In addition to the basic theoretical calculation mode, the intermediate calculation part also includes the logic judgment of the control system in the step 16. When the simulation is performed in the step 19, the program calculates the basis by 500 milliseconds (msec), and each calculation is performed. After that, it will add 500 milliseconds as the basis for the next time. After the program stops, step 20 will be automatically asked to ask the user whether to save the calculation result.

請參閱『第5圖~第9圖』所示,係分別為本發明之高壓爐心注水系統示意圖、本發明之高壓爐心注水系統操作介面裝置示意圖、第6圖中A之控制邏輯示意圖、本發明之P-0001B控制邏輯測試示意圖及本發明之操作介面裝置整合測式元件示意圖。如圖所示:該電廠模擬裝置1以程式模擬高壓爐心注水控制裝置,此裝置只提供B串與C串主要迴路之控制閥與 控制泵,包括MBV-0001B控制閥6a、MBV-0001C控制閥6b、P-0001B控制泵7a、P-0001C控制泵7b、MBV-0004B控制閥6c、MBV-0004C控制閥6d、MBV-0007B控制閥6e及MBV-0007C控制閥6f等。 Please refer to FIG. 5 to FIG. 9 respectively, which are respectively a schematic diagram of the high pressure furnace water injection system of the present invention, a schematic diagram of the operation interface device of the high pressure core water injection system of the present invention, and a control logic diagram of A in FIG. The schematic diagram of the P-0001B control logic test of the present invention and the schematic diagram of the integrated interface component of the operation interface device of the present invention. As shown in the figure: The power plant simulation device 1 simulates a high-pressure furnace core water injection control device, which only provides the control valves of the B-string and C-string main circuits. Control pump, including MBV-0001B control valve 6a, MBV-0001C control valve 6b, P-0001B control pump 7a, P-0001C control pump 7b, MBV-0004B control valve 6c, MBV-0004C control valve 6d, MBV-0007B control Valve 6e and MBV-0007C control valve 6f and the like.

今以實際高壓爐心注水控制裝置B串之操作介面裝置為例:以該P-0001B控制泵7a作為初期之開發與系統整合,並發展一套測試程式,由控制邏輯a區、控制邏輯b區、控制邏輯c區及控制邏輯d區,相對於控制邏輯測試程式,可透過網路通訊介面提供相對於控制邏輯a區之軟體輸入介面8a與讀取相對於控制邏輯b區之軟體輸出介面8b之資訊。並且,同樣可透過研華硬體輸出入模組提供相對於控制邏輯c區之硬體輸出介面8c與相對於控制邏輯d區之硬體輸入介面8d存取,以對硬體點作實際之設定與量測測試,進而測試實體建置於高壓爐心注水控制設備內之控制邏輯係否正確。 For example, the P-0001B control pump 7a is used as the initial development and system integration, and a test program is developed by the control logic a area and control logic b. The area, the control logic c area and the control logic d area can provide a software input interface 8a relative to the control logic a area and a software output interface relative to the control logic b area via the network communication interface with respect to the control logic test program. 8b information. Moreover, the hardware output interface 8c of the control logic c area and the hardware input interface 8d relative to the control logic d area can also be accessed through the Advantech hardware input and output module to actually set the hardware point. And the measurement test, and then test the control logic of the entity built into the high pressure furnace heart water injection control equipment is correct.

當本發明於整合測試時(如第1圖所示),係整合該電廠模擬裝置1、該控制裝置2及該操作介面裝置3各子系統做一整合測試。共分為兩迴路測試路徑,第一測試迴路9a為測試該操作介面裝置3、高壓注水實體控制21與電廠模擬裝置1之連結。第二測試迴路9b則為測試該操作介面裝置3、軟體模擬控制22與電廠模擬裝置1之整合。 When the present invention is used in the integration test (as shown in FIG. 1), the subsystems of the power plant simulation device 1, the control device 2, and the operation interface device 3 are integrated to perform an integration test. It is divided into two loop test paths, and the first test loop 9a is for testing the connection of the operation interface device 3, the high pressure water injection entity control 21 and the power plant simulation device 1. The second test circuit 9b is for testing the integration of the operating interface device 3, the software simulation control 22 and the power plant simulation device 1.

透過對P-0001B控制泵7a之操作測試,可涵蓋該第一測試迴路9a之路徑。透過對MBV-0007B控制閥6e操作測試與電廠模擬裝置1之電廠模擬程式傳回之乾井壓力與抑壓池水位信號,並顯示在該操作介面裝置3上之測試,可涵蓋該第二測試迴路9b之路徑(如第5圖及第9圖所示)。 The path of the first test circuit 9a can be covered by the operation test of the P-0001B control pump 7a. The test of the dry well pressure and the suppression tank water level signal transmitted back to the MBV-0007B control valve 6e operation test and the power plant simulation program of the power plant simulation device 1 and displayed on the operation interface device 3 may cover the second test The path of loop 9b (as shown in Figures 5 and 9).

該P-0001B控制泵7a於測試操作時先在該操作介面裝置3上按壓啟動按鍵,再於該電廠模擬裝置1內之高壓爐心注水控制裝置相對應之控制泵啟動,並可從該操作介面裝置3上反應啟動之結果。另,該MBV-0007B控制閥6e於測試操作時也係先在該操作介面裝置3上按壓啟動按鍵,再於該電廠模擬裝置1內之高壓爐心注水控制裝置相對應之控制閥啟動,並從該操作介面裝置3上反應啟動之結果。藉此,可知該電廠模擬裝置1與高壓爐心注水控制裝置之整合,並透過硬體輸出入模組與確定性網路通訊介面將資料透通於兩系統間,以提供軟體安全分析和推演衍生相關新失效模式之應用。 The P-0001B control pump 7a first presses the start button on the operation interface device 3 during the test operation, and then starts the control pump corresponding to the high pressure core water injection control device in the power plant simulation device 1, and can operate from the operation. The result of the reaction initiation on the interface device 3. In addition, the MBV-0007B control valve 6e also presses the start button on the operation interface device 3 during the test operation, and then starts the control valve corresponding to the high pressure core water injection control device in the power plant simulation device 1, and The result of the reaction initiation from the operation interface device 3. In this way, the integration of the power plant simulation device 1 and the high-pressure furnace core water injection control device is realized, and the data is transparently transmitted between the two systems through the hardware input and output module and the deterministic network communication interface to provide software security analysis and deduction. Derivatives related to the application of new failure modes.

綜上所述,本發明係一種數位儀控軟體失效模擬測試之裝置,可有效改善習用之種種缺點,利用硬體輸出入模組與確定性網路通訊介面將電廠模擬裝置與高壓爐心注水控制裝置整合,以提供軟體安全分析和推演衍生相關新失效模式之應用,進而使本發明之產 生能更進步、更實用、更符合使用者之所須,確已符合發明專利申請之要件,爰依法提出專利申請。 In summary, the present invention is a digital instrument control software failure simulation test device, which can effectively improve various shortcomings of the utility, and uses the hardware input and output module and the deterministic network communication interface to fill the power plant simulation device and the high pressure furnace core. Control device integration to provide applications for software safety analysis and derivation-derived new failure modes, thereby enabling the production of the present invention Health is more progressive, more practical, and more in line with the needs of users. It has indeed met the requirements of the invention patent application, and has filed a patent application according to law.

惟以上所述者,僅為本發明之較佳實施例而已,當不能以此限定本發明實施之範圍;故,凡依本發明申請專利範圍及發明說明書內容所作之簡單的等效變化與修飾,皆應仍屬本發明專利涵蓋之範圍內。 However, the above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto; therefore, the simple equivalent changes and modifications made in accordance with the scope of the present invention and the contents of the invention are modified. All should remain within the scope of the invention patent.

1‧‧‧電廠模擬裝置 1‧‧‧Power plant simulation device

11‧‧‧系統處理類組 11‧‧‧System Processing Group

111‧‧‧整體模擬流程控制模組 111‧‧‧Overall simulation process control module

112‧‧‧介面處理模組 112‧‧‧Interface processing module

113‧‧‧資料庫處理模組 113‧‧‧Database Processing Module

12‧‧‧電廠模擬計算類組 12‧‧‧Power plant simulation calculation group

121‧‧‧共用計算函數模組 121‧‧‧Shared Computation Function Module

122‧‧‧模擬計算模組 122‧‧‧simulation calculation module

123‧‧‧報告記錄管理模組 123‧‧‧Report Record Management Module

13a‧‧‧第一次執行路徑 13a‧‧‧First execution path

13b‧‧‧程式開始執行路徑 13b‧‧‧Program start execution path

14~20‧‧‧步驟 14~20‧‧‧Steps

2‧‧‧控制裝置 2‧‧‧Control device

21‧‧‧高壓爐心注水實體控制 21‧‧‧High pressure hearth water injection entity control

21a‧‧‧高壓爐心注水實體控制機櫃 21a‧‧‧High pressure furnace heart water injection entity control cabinet

22‧‧‧軟體模擬控制 22‧‧‧Software simulation control

3‧‧‧操作介面裝置 3‧‧‧Operation interface device

4‧‧‧機櫃 4‧‧‧ cabinet

40a、40b‧‧‧硬體輸出入模組 40a, 40b‧‧‧ hardware input and output modules

41a、41b‧‧‧溝通介面 41a, 41b‧‧‧Communication interface

42‧‧‧硬接線 42‧‧‧ Hardwired

43‧‧‧網際網路通訊協定 43‧‧‧Internet Protocol

5‧‧‧確定性網路通訊介面 5‧‧‧Deterministic network communication interface

6a‧‧‧MBV-0001B控制閥 6a‧‧‧MBV-0001B control valve

6b‧‧‧MBV-0001C控制閥 6b‧‧‧MBV-0001C control valve

6c‧‧‧MBV-0004B控制閥 6c‧‧‧MBV-0004B control valve

6d‧‧‧MBV-0004C控制閥 6d‧‧‧MBV-0004C control valve

6e‧‧‧MBV-0007B控制閥 6e‧‧‧MBV-0007B control valve

6f‧‧‧MBV-0007C控制閥 6f‧‧‧MBV-0007C control valve

7a‧‧‧P-0001B控制泵 7a‧‧‧P-0001B control pump

7b‧‧‧P-0001C控制泵 7b‧‧‧P-0001C control pump

a、b、c、d區‧‧‧控制邏輯 a, b, c, d area ‧ ‧ control logic

8a‧‧‧軟體輸入介面 8a‧‧‧Software input interface

8b‧‧‧軟體輸出介面 8b‧‧‧Software output interface

8c‧‧‧硬體輸出介面 8c‧‧‧ hardware output interface

8d‧‧‧硬體輸入介面 8d‧‧‧ hardware input interface

9a‧‧‧第一測試迴路 9a‧‧‧First test loop

9b‧‧‧第二測試迴路 9b‧‧‧Second test loop

第1圖,係本發明之系統結構示意圖。 Fig. 1 is a schematic view showing the structure of the system of the present invention.

第2圖,係本發明之電廠模擬程式結構示意圖。 Fig. 2 is a schematic view showing the structure of a power plant simulation program of the present invention.

第3圖,係本發明之電廠模擬程式基本流程示意圖。 Figure 3 is a schematic diagram showing the basic flow of the power plant simulation program of the present invention.

第4圖,係本發明之實體結構示意圖。 Figure 4 is a schematic view of the physical structure of the present invention.

第5圖,係本發明之高壓爐心注水系統示意圖。 Figure 5 is a schematic view of the high pressure core water injection system of the present invention.

第6圖,係本發明之高壓爐心注水系統操作介面裝置示意圖。 Figure 6 is a schematic view of the operation interface device of the high pressure furnace core water injection system of the present invention.

第7圖,係第6圖中A之控制邏輯示意圖。 Figure 7 is a schematic diagram of the control logic of A in Figure 6.

第8圖,係本發明之P-0001B控制邏輯測試示意圖。 Figure 8 is a schematic diagram of the P-0001B control logic test of the present invention.

第9圖,係本發明之操作介面裝置整合測式元件示意圖。 Fig. 9 is a schematic view showing the integration of the measuring elements of the operation interface device of the present invention.

1‧‧‧電廠模擬裝置 1‧‧‧Power plant simulation device

2‧‧‧控制裝置 2‧‧‧Control device

21‧‧‧高壓爐心注水實體控制 21‧‧‧High pressure hearth water injection entity control

22‧‧‧軟體模擬控制 22‧‧‧Software simulation control

3‧‧‧操作介面裝置 3‧‧‧Operation interface device

40a、40b‧‧‧硬體輸出入模組 40a, 40b‧‧‧ hardware input and output modules

42‧‧‧硬接線 42‧‧‧ Hardwired

43‧‧‧網際網路通訊協定 43‧‧‧Internet Protocol

5‧‧‧確定性網路通訊介面 5‧‧‧Deterministic network communication interface

9a‧‧‧第一測試迴路 9a‧‧‧First test loop

9b‧‧‧第二測試迴路 9b‧‧‧Second test loop

Claims (6)

一種數位儀控軟體失效模擬測試之裝置,係用以提供軟體安全分析與推演衍生相關新失效模式之應用,其包括:一電廠模擬(Process)裝置,該電廠模擬裝置係以程式為模擬基礎;一控制裝置(Controller),該控制裝置與該電廠模擬裝置連結係由一硬體輸出入模組以硬接線及網際網路通訊協定(TCP/IP)連接作為溝通介面;以及一操作介面裝置,該操作介面裝置與該控制裝置係由一確定性網路通訊介面連結,用以提供操作者(Operator)觀察高壓爐心注水控制裝置與該控制裝置之控制介面;其中,上述新失效模式係指在考量損傷遭破壞之程度外,尚考量其破壞可能之擴散性,包含軟體共因失效、軟體需求不一致性、軟體設計與實做異常、以及軟體功能失效,俾以藉由此等損害擴散性之考量而更精確瞭解各新之失效模式對核能安全之影響,進而建立核能安全與管制風險所應具有之相關因應措施及減緩事件後果之條件與程序方法,以提供周延性與完整性之對策。 A digital instrument control software failure simulation test device is provided for providing a software failure analysis and derivation derivative related new failure mode application, comprising: a power plant simulation (Process) device, the power plant simulation device is based on a program simulation; a control device (Controller) connected to the power plant simulation device by a hardware input and output module with a hardwired and Internet Protocol (TCP/IP) connection as a communication interface; and an operation interface device, The operating interface device and the control device are coupled by a deterministic network communication interface for providing an operator to observe the control interface of the high pressure core water injection control device and the control device; wherein the new failure mode means In addition to the extent of damage damage, the possible diffusion of damage is considered, including software common cause failure, software inconsistency, software design and implementation anomalies, and software function failure, so as to damage diffusion. Considering the impact of each new failure mode on nuclear safety, and establishing nuclear energy safety and regulatory risks Related to response measures should have procedures and conditions and methods mitigate the consequences of an event, to provide a solution and integrity of undistributed. 依申請專利範圍第1項所述之數位儀控軟體失效模擬測試之裝置,其中,該電廠模擬裝置係含有一系統處理類組,並分為一整體模擬流程控制模組、一介面處理模組及一資料庫處理模組。 The digital instrument control software failure simulation test device according to the first application of the patent scope, wherein the power plant simulation device comprises a system processing group, and is divided into an overall simulation process control module and an interface processing module. And a database processing module. 依申請專利範圍第1項所述之數位儀控軟體失效模擬測試之裝置,其中,該電廠模擬裝置係含有一電廠模擬計算類組,並分為一共用計算函數模組、一模擬計算模組及一報告(Report)記錄管理模組。 The digital instrument control software failure simulation test device according to the first application of the patent scope, wherein the power plant simulation device comprises a power plant simulation calculation group, and is divided into a shared calculation function module and an analog calculation module. And a report (Report) record management module. 依申請專利範圍第1項所述之數位儀控軟體失效模擬測試之裝置,其中,該控制裝置係包含有一高壓爐心注水實體控制及一軟體模擬控制(Control Logical Simulation)。 The digital instrument control software failure simulation test device according to claim 1 of the patent application scope, wherein the control device comprises a high pressure furnace core water injection entity control and a software control simulation (Control Logical Simulation). 依申請專利範圍第1項所述之數位儀控軟體失效模擬測試之裝置,其中,該數位儀控軟體失效模擬測試之裝置係包含一放置高壓爐心注水相關控制設備之高壓爐心注水實體控制機櫃、以及一放置該硬體輸出入模組之溝通介面與該電廠模擬裝置之機櫃。 The digital instrument control software failure simulation test device according to the first application of the patent scope, wherein the digital instrument control software failure simulation test device comprises a high pressure furnace core water injection entity control device for placing high pressure furnace heart water injection related control equipment. The cabinet, and a communication interface for placing the hardware input and output module with the cabinet of the power plant simulation device. 依申請專利範圍第1項所述之數位儀控軟體失效模擬測試之裝置,其中,該操作介面裝置係為人機介面(Man-machine Interface)控制模擬(Control Simulation)。 The digital instrumentation software failure simulation test device according to the first application of the patent scope, wherein the operation interface device is a Man-machine Interface control simulation.
TW096117668A 2007-05-17 2007-05-17 Digital instrument control software failure simulation test device TWI407452B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
TW096117668A TWI407452B (en) 2007-05-17 2007-05-17 Digital instrument control software failure simulation test device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
TW096117668A TWI407452B (en) 2007-05-17 2007-05-17 Digital instrument control software failure simulation test device

Publications (2)

Publication Number Publication Date
TW200847188A TW200847188A (en) 2008-12-01
TWI407452B true TWI407452B (en) 2013-09-01

Family

ID=44823457

Family Applications (1)

Application Number Title Priority Date Filing Date
TW096117668A TWI407452B (en) 2007-05-17 2007-05-17 Digital instrument control software failure simulation test device

Country Status (1)

Country Link
TW (1) TWI407452B (en)

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4064392A (en) * 1973-02-23 1977-12-20 Westinghouse Electric Corporation Engineered safeguards systems and method in nuclear power plant training simulator

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4064392A (en) * 1973-02-23 1977-12-20 Westinghouse Electric Corporation Engineered safeguards systems and method in nuclear power plant training simulator

Also Published As

Publication number Publication date
TW200847188A (en) 2008-12-01

Similar Documents

Publication Publication Date Title
Chang et al. Cognitive modeling and dynamic probabilistic simulation of operating crew response to complex system accidents: Part 5: Dynamic probabilistic simulation of the IDAC model
US20090106001A1 (en) Digital I&C software failure simulation test facility
CN114023477B (en) A computerized procedure system and control system for nuclear power plants
CN108255649A (en) A kind of Diagnosis Strategy Design method based on modeling and simulating Cooperative Analysis
CN102522128A (en) Method and system for testing configuration logic design of DCS (Distributed Control System) of nuclear power station
CN112489831A (en) Testing device for functional verification of steam generator accident discharge system
KR20110001566A (en) Human Accident Risk / Performance Impact Analysis System and Method Using Fault Tree and Turbine Cycle Simulation
CN112035996A (en) Equipment testability integrated design and evaluation system
CN109117314A (en) A kind of fool proof data back up method and system
TWI407452B (en) Digital instrument control software failure simulation test device
Catelani et al. Reliability assessment for complex systems: A new approach based on RBD models
CN116300806A (en) A temperature control program testing device for a fuel cell combined heat and power system
CN103578590B (en) Nuclear power station dead electricity accident analysis method and system
JP2009093317A (en) Digital control software fault simulation test equipment
CN104133954A (en) Protection logic simulation device and dynamic verification system using protection logic simulation device
Lin et al. Development of a thermal–hydraulic system code for simulators based on RELAP5 code
US20110060582A1 (en) Diversity and Defense-In-Depth Simulation Apparatus
CN118210297B (en) A performance testing method for PLC control systems
CN113806909B (en) Scenario selection method and device for nuclear power comprehensive scenario verification, nuclear power comprehensive scenario verification method and system
CN114718675B (en) A blast furnace TRT system simulation operation method
CN111627583B (en) Nuclear power plant symptom guide optimal recovery accident guide rule confirmation working condition selection method
CN121209463A (en) Simulation debugging device and method for reactor control and protection system
TW201101333A (en) An analysis simulator is used to improve safety of a nuclear power plant
CN119884810A (en) Instrument control equipment grading method and system based on DCS parallel system
CN117784698A (en) Automatic test method and device for diesel engine control logic