Analog card, driving system and nuclear power station instrument control system

Through analog card and drive system, the current signal is converted into voltage signal and compared with preset thresholds, the digital chip failure problem of the nuclear power plant drive system in extreme cases is solved, and stable operation and safe output are achieved under network attacks.

CN120540031APending Publication Date: 2025-08-26STATE NUCLEAR POWER AUTOMATION SYST ENGCO
View PDF 6 Cites 0 Cited by

Patent Information

Application Number
CN202510649754.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-05-20
Publication Date
2025-08-26

AI Technical Summary

Technical Problem

When existing nuclear power plant drive systems face extreme situations such as cyberattacks, there is a risk that digital chips will fail at the same time, affecting the overall security.

Method used

The analog card and driving system are used to convert the current signal into a voltage signal by using the signal conversion module, and the constant value comparison module is compared with the preset voltage threshold to output the driving signal. All devices use analog devices to avoid the impact of network attacks.

Benefits of technology

When the digital chip is attacked, the analog card can still operate stably, output driving signals, improve information security protection capabilities, and ensure the safety of nuclear power plants.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120540031A_ABST
    Figure CN120540031A_ABST
Patent Text Reader

Abstract

The invention provides an analog card, a driving system and a nuclear power station instrument control system. The analog card comprises a signal conversion module and a constant value comparison module. The first input end of the signal conversion module is connected with an external current signal, and the output end of the signal conversion module is connected with the first input end of the constant value comparison module; the signal conversion module is used for converting the external current signal into a voltage signal within a preset range and outputting the voltage signal to the constant value comparison module; and the constant value comparison module is used for receiving the voltage signal output by the signal conversion module, comparing the voltage signal with a preset voltage threshold, and outputting a driving signal when the voltage value of the voltage signal exceeds the preset voltage threshold. In the analog card, all devices are analog devices, a digital chip is abandoned, and the influence of network attacks can be effectively avoided.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to the field of instrumentation and control, and in particular to an analog card, a drive system, and an instrumentation and control system for a nuclear power plant. Background Art

[0002] The safe operation of nuclear power plants is highly dependent on the stability and diversity of their instrumentation and control systems. Currently, traditional nuclear power plant drive systems generally utilize control technologies based on digital chips such as FPGAs or CPUs. While these digital solutions offer significant advantages in control accuracy, configuration flexibility, and intelligent operation and maintenance, effectively improving nuclear power plant efficiency, they also carry the potential risk of single-point failures. This is particularly true in extreme operating conditions, such as cyberattacks and software failures, where all control systems relying on digital chips and network technologies could simultaneously fail, impacting the overall safety of the nuclear power plant. Summary of the Invention

[0003] The technical problem to be solved by the present disclosure is to overcome the defect in the existing technology that control systems relying on digital chips fail simultaneously when facing extreme situations such as network attacks, and to provide an analog card component, a drive system and a nuclear power plant instrumentation and control system.

[0004] The present disclosure solves the above technical problems through the following technical solutions:

[0005] In a first aspect, an analog card is provided, the analog card comprising a signal conversion module and a fixed value comparison module;

[0006] The first input terminal of the signal conversion module is connected to the external current signal, and the output terminal of the signal conversion module is connected to the first input terminal of the fixed value comparison module; the signal conversion module is used to convert the external current signal into a voltage signal within a preset range, and output the voltage signal to the fixed value comparison module;

[0007] The constant value comparison module is used to receive the voltage signal output by the signal conversion module, and compare the voltage signal with a preset voltage threshold, and output a driving signal in response to the voltage value of the voltage signal exceeding the preset voltage threshold.

[0008] Optionally, the analog card further includes an accuracy calibration module, a fixed value setting module, a first adjustment device and a second adjustment device;

[0009] The accuracy calibration module is connected to the first adjustment device, and the output end of the accuracy calibration module is connected to the second input end of the signal conversion module. By adjusting the first adjustment device, the accuracy calibration module adjusts the accuracy of the voltage signal and keeps the voltage signal within a preset range;

[0010] The fixed value setting module is connected to the second regulating device, the output end of the fixed value setting module is connected to the second input end of the fixed value comparison module, and the preset voltage threshold is set by regulating the second regulating device.

[0011] Optionally, the accuracy calibration module includes a first adjustable unit; the first adjustable unit is connected to the first adjustment device;

[0012] The first output resistance of the first adjustable unit is adjusted by adjusting the first adjusting device, and the voltage value of the voltage signal is adjusted according to the first output value.

[0013] Optionally, the fixed value setting module includes a second adjustable unit; the second adjustable unit is connected to the second adjusting device;

[0014] The second output value of the second adjustable unit is adjusted by adjusting the second adjusting device, and the preset voltage threshold is set according to the second output value.

[0015] Optionally, the analog card further includes a signal filtering module, a first signal indication module and a second signal indication module;

[0016] The input end of the signal filtering module is connected to the external current signal, and the output end of the signal filtering module is connected to the first input end of the signal conversion module;

[0017] The first signal indication module is connected to the output end of the signal conversion module, and the first signal indication module is used to display the value of the voltage signal;

[0018] The second signal indication module is connected to the output end of the fixed value comparison module, and the second signal indication module is used to represent the state of the output of the fixed value comparison module.

[0019] Optionally, the analog card further includes a channel bypass module;

[0020] The input end of the channel bypass module is connected to the switch, and the output end of the channel bypass module is connected to the third input end of the fixed value comparison module. The channel bypass module is used to control the fixed value comparison module to stop outputting the drive signal in response to the switch being closed.

[0021] In a second aspect, a drive system is provided, the drive system comprising a signal distributor, a display device, a first relay, and the analog card component according to the first aspect;

[0022] The signal distributor is used to convert the received current signal into a first current signal and a second current signal, and output the first current signal to the analog card component, and output the second current signal to the display device; the first current signal is the same as the second current signal;

[0023] The first relay is used to receive the first driving signal output by the analog card component, and output the first driving signal after signal isolation;

[0024] The display device is used to display the current value of the second current signal.

[0025] Optionally, the drive system further includes a signal transmitter;

[0026] The signal transmitter is used to receive a non-current signal input from the outside, convert the non-current signal into a current signal, and output the current signal to the signal distributor.

[0027] Optionally, the drive system further comprises a manual drive switch and a second relay;

[0028] The second relay is used to receive the second drive signal sent by the manual drive switch, and output the second drive signal after signal isolation.

[0029] In a third aspect, a nuclear power plant instrumentation and control system is provided, wherein the nuclear power plant instrumentation and control system includes the drive system as described in the second aspect.

[0030] On the basis of conforming to the common sense in this field, the above optional conditions can be arbitrarily combined to obtain the preferred embodiments of the present disclosure.

[0031] The positive progressive effect of the present disclosure is that: the current signal is converted into a voltage signal within a preset range through the signal conversion module, and the converted voltage signal is sent to the fixed value comparison module for comparison with the preset voltage threshold. When the voltage value of the voltage signal exceeds the preset voltage threshold, the fixed value comparison module will output a drive signal. In this analog card component, all devices use analog devices and digital chips are discarded, so it can effectively avoid the impact of network attacks. Even in the extreme case that the digital chip fails due to an attack, the analog card component can still operate stably and output drive signals normally to drive other devices, which significantly improves the information security protection capability. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 A schematic diagram of an analog card structure provided in Example 1 of the present disclosure;

[0033] Figure 2 A schematic diagram of an analog card application structure provided in Example 1 of the present disclosure;

[0034] Figure 3 A schematic diagram of the drive system structure provided in Example 2 of the present disclosure. DETAILED DESCRIPTION

[0035] The present disclosure is further illustrated below by way of examples, but the present disclosure is not limited to the scope of the examples.

[0036] In the embodiments of the present disclosure, prefixes such as "first" and "second" are used only to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. In the embodiments of the present disclosure, the use of prefixes such as ordinal numbers to distinguish description objects does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and no unnecessary limitations should be constituted due to the use of such prefixes. In addition, in the description of this embodiment, unless otherwise specified, the meaning of "plurality" is two or more.

[0037] In the embodiments of the present disclosure, the collection, storage, use, processing, transmission, provision and disclosure of user personal information involved comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0038] Example 1

[0039] This embodiment provides an analog card, such as Figure 1 As shown, the analog card includes a signal conversion module 101 and a constant value comparison module 102; the first input end of the signal conversion module is connected to the external current signal 103, and the output end of the signal conversion module 101 is connected to the first input end of the constant value comparison module 102; the signal conversion module 101 is used to convert the external current signal 103 into a voltage signal within a preset range, and output the voltage signal to the constant value comparison module 102; the constant value comparison module 102 is used to receive the voltage signal output by the signal conversion module 101, and compare the voltage signal with a preset voltage threshold, and output a drive signal 104 in response to the voltage value of the voltage signal exceeding the preset voltage threshold.

[0040] In a specific implementation, the received external current signal can be converted into a voltage signal within a preset range through the signal conversion module, and the converted voltage signal can be output to the constant value comparison module. The constant value comparison module will compare the converted voltage signal with the preset voltage threshold. When the voltage value of the voltage signal exceeds the preset voltage threshold, it indicates that the corresponding key parameter has exceeded the set safety range. At this time, the constant value setting module will output a drive signal to trigger the alarm device or drive related safety facilities.

[0041] In a specific example, the signal conversion module can convert a 4-20 mA current signal into a 1-5 V voltage signal.

[0042] In an optional embodiment, the analog card also includes an accuracy calibration module, a fixed value setting module, a first adjustment device and a second adjustment device; the accuracy calibration module is connected to the first adjustment device, and the output end of the accuracy calibration module is connected to the second input end of the signal conversion module, and the accuracy calibration module adjusts the accuracy of the voltage signal and keeps the voltage signal within a preset range by adjusting the first adjustment device; the fixed value setting module is connected to the second adjustment device, and the output end of the fixed value setting module is connected to the second input end of the fixed value comparison module, and the preset voltage threshold is set by adjusting the second adjustment device.

[0043] In specific implementation, Figure 2 As shown, the first adjustment device of the precision calibration module 205 can dynamically adjust the accuracy of the conversion of the current signal into the voltage signal in the signal conversion module 201, ensuring that the converted voltage signal remains within a preset range. At the same time, the second adjustment device can also adaptively adjust the preset voltage threshold set in the fixed value setting module 206. By dynamically setting the preset voltage threshold, the output of the drive signal can be precisely controlled.

[0044] In an optional embodiment, the accuracy calibration module includes a first adjustable unit; the first adjustable unit is connected to the first adjustment device; the first output value of the first adjustable unit is adjusted by adjusting the first adjustment device, and the voltage value of the voltage signal is adjusted according to the first output value.

[0045] In the specific implementation, the core component of the precision calibration module is the first adjustable unit, which is closely connected to the first adjustment device. By adjusting the first adjustment device, the first output value of the first adjustable unit can be flexibly changed, thereby affecting the voltage value of the output voltage signal of the signal conversion module.

[0046] In another optional embodiment, the accuracy calibration module further includes hole measurement.

[0047] In a specific example, during use, in order to ensure that the signal conversion module can convert the current signal into a voltage signal within a preset range, it is necessary to regularly calibrate the accuracy calibration module. Specifically, input a standard 4mA current, and continuously adjust the first adjustment device of the accuracy calibration module. At the same time, use a multimeter to insert the measuring hole of the accuracy calibration module until the measured voltage value is 1V. Then input a standard 20mA current, and continuously adjust the first adjustment device of the accuracy calibration module until the measured voltage value of the multimeter is 5V. At this time, the accuracy calibration operation of the accuracy calibration module is completed.

[0048] In another specific example, the first adjustable unit may be a sliding rheostat, and the first adjusting device may be a knob. The resistance of the sliding rheostat can be adjusted by rotating the knob. The precision calibration module uses all analog devices, and even in the event of a fault condition such as a network attack, the voltage value of the converted voltage signal can still be accurately adjusted.

[0049] In another specific example, the first adjustable unit may be a variable capacitor, and the first adjusting device may be a knob, and the capacitance value of the variable capacitor can be adjusted by rotating the knob.

[0050] In another specific example, the first adjustable unit may be a variable inductor, and the first adjusting device may be a knob, and the inductance value of the variable inductor can be adjusted by rotating the knob.

[0051] In an optional embodiment, the constant value setting module includes a second adjustable unit; the second adjustable unit is connected to the second adjustment device; the second output value of the second adjustable unit is adjusted by adjusting the second adjustment device, and the preset voltage threshold is set according to the second output value.

[0052] In a specific implementation, the constant value setting module is used to set a preset voltage threshold, and the output value of the second adjustable unit is adjusted by the second adjustment device. Based on the change of the second output value, different preset voltage thresholds can be dynamically adjusted to adapt to different application scenarios.

[0053] In a specific example, the second adjustable unit can be a sliding rheostat, a variable capacitor or a variable inductor, and the second adjusting device can be a knob. By adjusting the knob, the resistance of the sliding rheostat, the capacitance of the variable capacitor, or the inductance of the variable inductor can be adjusted. While rotating the knob, a multimeter is inserted into the measuring hole of the constant value setting module to measure the voltage value in real time until the measured voltage value is equal to the preset voltage threshold. Manual adjustment based on the knob can ensure that the constant value setting module can still achieve dynamic setting of the preset voltage threshold when a fault such as a network attack occurs.

[0054] In an optional embodiment, the analog card also includes a signal filtering module, a first signal indication module and a second signal indication module; the input end of the signal filtering module is connected to the external current signal, and the output end of the signal filtering module is connected to the first input end of the signal conversion module; the first signal indication module is connected to the output end of the signal conversion module, and the first signal indication module is used to display the value of the voltage signal; the second signal indication module is connected to the output end of the fixed value comparison module, and the second signal indication module is used to characterize the state of the output of the fixed value comparison module.

[0055] In specific implementation, Figure 2 As shown, the signal filtering module 207 can perform signal filtering processing on the received external current signal 203 to eliminate ripples, the first signal indication module 208 can display the value of the voltage signal output by the signal conversion module in real time, and the operator can judge whether the current signal conversion module is in a normal working state based on the display value of the first signal indication module 208, and the second signal indication module 209 can display the output status of the current constant value comparison module drive signal in real time.

[0056] In an optional embodiment, the analog card also includes a channel bypass module; the input end of the channel bypass module is connected to the switch, and the output end of the channel bypass module is connected to the third input end of the fixed value comparison module, and the channel bypass module is used to control the fixed value comparison module to stop outputting the drive signal in response to the closure of the switch.

[0057] In specific implementation, Figure 2 As shown, the switch on the channel bypass module 210 can be used to control whether the fixed value comparison module enters the bypass state. When the switch is turned on, the fixed value comparison module will enter the bypass state. When the fixed value comparison module is in the bypass state, even if the voltage value of the voltage signal received by the fixed value comparison module exceeds the preset voltage threshold, the fixed value comparison module will not output a driving signal.

[0058] In a specific example, when testing an analog card, it is necessary to turn on the switch of the channel bypass module to put the constant value comparison module into the bypass state. At this time, no matter what situation occurs during the test, the constant value comparison module will not output a drive signal. This mechanism can effectively avoid false driving situations that may be caused by signal misjudgment during the test process, ensuring the stability and safety of the test process.

[0059] Example 2

[0060] This embodiment provides a driving system such as Figure 3As shown, the drive system includes a signal distributor, a display device, a first relay and the analog card component as described in Example 1; the signal distributor is used to convert the received current signal into a first current signal and a second current signal, and output the first current signal to the analog card component, and output the second current signal to the display device; the first current signal is the same as the second current signal; the first relay is used to receive the first drive signal output by the analog card component, and output the first drive signal after signal isolation; the display device is used to display the current value of the second current signal.

[0061] In specific implementation, Figure 3 As shown, the signal distributor 301 uses signal isolation technology to ensure that the current signal is not interfered with during transmission and can effectively avoid the impact of electromagnetic interference on the current signal transmission, thereby improving the stability of the system. The received current signal is divided into two identical current signals by the signal distributor 301: a first current signal and a second current signal. The first current signal will be output to the analog card 303, and the second current signal will be output to the display device 304, ensuring that the operator can check the system status at any time and make necessary interventions. After the analog card triggers the output drive signal, it will output the drive signal to the first relay 302, and the drive signal will be isolated by the first relay 302 before being output.

[0062] In a specific example, when the key parameters of the power plant (such as temperature, pressure, liquid level, etc.) exceed the set safety thresholds, the drive system will trigger the analog card to output a drive signal, thereby automatically triggering safety operations such as reactor shutdown, core water replenishment, and coolant pump shutdown.

[0063] In a specific example, if the received current signal comes from a pressure sensor, the current signal is converted into a corresponding pressure value and displayed on a display device. If the received current signal comes from a liquid level sensor, the current signal needs to be converted into a corresponding liquid level value and then displayed, thereby providing the operator with real-time reading indications of various key process parameters.

[0064] In an optional embodiment, the drive system further includes a signal transmitter; the signal transmitter is used to receive a non-current signal input from the outside, convert the non-current signal into a current signal, and output the current signal to the signal distributor.

[0065] In specific implementation, Figure 3As shown, when the external input signal is a non-current signal, it needs to be converted into a current signal by the signal transmitter 305 first, and then the converted current signal can be output to the signal distributor 301.

[0066] In a specific example, the current signal received by the signal distributor may be a current signal directly input from the outside, or may be a current signal generated after conversion by a signal transmitter.

[0067] In a specific example, when the external input signal is the signal output by a temperature sensor, the input signal of the temperature sensor needs to be input into a signal transmitter to convert the temperature signal into a current signal. Different types of temperature signals are first converted into standard 4~20mA current signals through the signal transmitter to ensure the accuracy and reliability of signal transmission.

[0068] In another specific example, when the external input signal is a pressure sensor or a liquid level sensor, since the output signals of the pressure sensor and the liquid level sensor are current signals, the output signals of the pressure sensor and the liquid level sensor can be directly input into the signal distributor.

[0069] In an optional embodiment, the drive system further includes a manual drive switch and a second relay; the second relay is used to receive a second drive signal sent by the manual drive switch, and output the second drive signal after signal isolation.

[0070] In specific implementation, Figure 3 As shown, workers determine whether manual actuation is necessary based on the engineering quantity displayed on the display device. This manual actuation function allows manual actuation switch 306 to directly output a second actuation signal, which is then isolated and output via second relay 307, thereby shutting down the reactor and activating related safety features. The provision of a manual actuation switch adds a safety measure to the actuation system, preventing failure of the automatic actuation function based on analog card components while still enabling shutdown and activation of related safety features. Providing a purely analog manual control function ensures that even if the automatic output actuation signal circuit of an analog device fails, the operator can still manually actuate related safety features.

[0071] In a specific example, an external input signal is simultaneously input into the lines of two drive systems. When the converted voltage signal exceeds the preset voltage threshold, two drive signals are output to implement redundant control, ensuring that the system can continue to operate when a module component fails, thereby ensuring the continuity and stability of the drive system.

[0072] In addition to the automatic drive function implemented by analog card components, the drive system also features a purely analog hard-wired manual drive function and an independent display. This allows operators to intervene promptly if the automatic drive function fails, thereby improving the drive system's safety response speed and operational reliability. All drive system components utilize analog hardware technology, effectively preventing the impact of cyberattacks on the drive system. This ensures that the drive system can still operate safety devices even if all digital chips are attacked, thereby enhancing the drive system's overall information security protection capabilities.

[0073] Example 3

[0074] This embodiment provides an instrumentation and control system for a nuclear power plant, which includes the drive system described in Example 2.

[0075] In specific implementation, the drive system is a vital instrumentation and control system in a nuclear power plant. When the key parameters of the power plant exceed the set range, the drive system outputs a drive signal, thereby triggering an emergency shutdown and driving related safety facilities.

[0076] When a cyber attack or other malfunction occurs in the nuclear power plant, causing all instrumentation and control systems using digital technology to fail, the nuclear power plant's instrumentation and control system can stably output corresponding drive signals through the drive system's own unique analog technology, ensuring that important safety facilities can be started in a timely manner or effectively driven and controlled, thereby ensuring the safe operation of the nuclear power plant.

[0077] While specific embodiments of the present disclosure have been described above, those skilled in the art will appreciate that these are merely illustrative and that the scope of protection of the present disclosure is defined by the appended claims. Those skilled in the art may make various changes or modifications to these embodiments without departing from the principles and essence of the present disclosure, and such changes and modifications are intended to fall within the scope of protection of the present disclosure.

Claims

1. An analog card, characterized in that: The analog card includes a signal conversion module and a fixed value comparison module; The first input terminal of the signal conversion module is connected to the external current signal, and the output terminal of the signal conversion module is connected to the first input terminal of the fixed value comparison module; the signal conversion module is used to convert the external current signal into a voltage signal within a preset range, and output the voltage signal to the fixed value comparison module; The constant value comparison module is used to receive the voltage signal output by the signal conversion module, and compare the voltage signal with a preset voltage threshold, and output a driving signal in response to the voltage value of the voltage signal exceeding the preset voltage threshold.

2. The analog card according to claim 1, wherein: The analog card also includes an accuracy calibration module, a fixed value setting module, a first adjustment device and a second adjustment device; The accuracy calibration module is connected to the first adjustment device, and the output end of the accuracy calibration module is connected to the second input end of the signal conversion module. By adjusting the first adjustment device, the accuracy calibration module adjusts the accuracy of the voltage signal and keeps the voltage signal within a preset range; The fixed value setting module is connected to the second regulating device, the output end of the fixed value setting module is connected to the second input end of the fixed value comparison module, and the preset voltage threshold is set by regulating the second regulating device.

3. The analog card according to claim 2, wherein: The accuracy calibration module includes a first adjustable unit; the first adjustable unit is connected to the first adjustment device; The first output value of the first adjustable unit is adjusted by adjusting the first adjusting device, and the voltage value of the voltage signal is adjusted according to the first output value.

4. The analog card according to claim 2, wherein: The fixed value setting module includes a second adjustable unit; the second adjustable unit is connected to the second adjustment device; The second output value of the second adjustable unit is adjusted by adjusting the second adjusting device, and the preset voltage threshold is set according to the second output value.

5. The analog card according to claim 1, wherein: The analog card further includes a signal filtering module, a first signal indication module and a second signal indication module; The input end of the signal filtering module is connected to the external current signal, and the output end of the signal filtering module is connected to the first input end of the signal conversion module; The first signal indication module is connected to the output end of the signal conversion module, and the first signal indication module is used to display the value of the voltage signal; The second signal indication module is connected to the output end of the fixed value comparison module, and the second signal indication module is used to represent the state of the output of the fixed value comparison module.

6. The analog card according to claim 1, wherein: The analog card also includes a channel bypass module; The input end of the channel bypass module is connected to the switch, and the output end of the channel bypass module is connected to the third input end of the fixed value comparison module. The channel bypass module is used to control the fixed value comparison module to stop outputting the drive signal in response to the switch being closed.

7. A drive system, characterized in that: The drive system comprises a signal distributor, a display device, a first relay, and an analog card according to any one of claims 1 to 6; The signal distributor is used to convert the received current signal into a first current signal and a second current signal, and output the first current signal to the analog card component, and output the second current signal to the display device; the first current signal is the same as the second current signal; The first relay is used to receive the first driving signal output by the analog card component, and output the first driving signal after signal isolation; The display device is used to display the current value of the second current signal.

8. The drive system according to claim 7, wherein: The drive system further includes a signal transmitter; The signal transmitter is used to receive a non-current signal input from the outside, convert the non-current signal into a current signal, and output the current signal to the signal distributor.

9. The drive system according to claim 7, wherein: The drive system also includes a manual drive switch and a second relay; The second relay is used to receive the second drive signal sent by the manual drive switch, and output the second drive signal after signal isolation.

10. A nuclear power plant instrumentation and control system, characterized in that: The nuclear power plant instrumentation and control system includes a drive system as described in any one of claims 7 to 9.

Citation Information

Patent Citations

  • Signal detection circuit, method and system

    CN102014017A

  • Motor controller over-current protection device, motor controller and electric car

    CN106911122A

  • Test simulator for reactor protection system

    CN119339979A

  • Current abnormity monitoring device, monitoring method and vehicle

    CN119611060A

  • Apparatus and method for inputting key signals to optical disk player using analog signal

    US20050206547A1