Device for nuclear power plant reactor protection and monitoring system

Through modular design and dynamic memory allocation optimization, the compatibility, scalability, reliability, and real-time performance issues of the reactor protection system have been resolved, enabling the reactor protection system to operate efficiently, safely, and flexibly.

CN121523997APending Publication Date: 2026-02-13SANMEN NUCLEAR POWER CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202511519229.0
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-10-23
Publication Date
2026-02-13

AI Technical Summary

Technical Problem

Existing reactor protection systems suffer from poor compatibility, insufficient scalability, low reliability, and high maintenance costs due to customized hardware, and their poor real-time performance affects the long-term stable operation and technological iteration capabilities of the system.

Method used

The system employs a modular design for its working mode management module, power monitoring and control module, and memory dynamic allocation and management module. Through modular design, it achieves full-cycle monitoring of power status, optimizes memory resource utilization efficiency, provides ISA/PCI bus, serial port, and USB interface, supports dual-system switching, is compatible with Windows XP and QNX Realtime OS, and enables plug-and-play functionality and efficient data processing.

Benefits of technology

It reduces supply chain risks and maintenance costs, improves system reliability and real-time performance, enhances scalability, ensures rapid response to critical signals, and improves the safety and flexibility of the reactor protection system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121523997A_ABST
    Figure CN121523997A_ABST
Patent Text Reader

Abstract

The invention belongs to the technical field of nuclear power plant reactor protection and monitoring, and aims to solve the problems of poor compatibility, insufficient expansibility, low reliability and high maintenance cost of an existing reactor protection system due to hardware customization. The invention discloses a device for a nuclear power plant reactor protection and monitoring system, which comprises a working mode management module, a power supply monitoring control module and a memory dynamic allocation and management module, and is characterized in that the working mode management module is used for switching function configuration according to a physical installation position and an application scene of the device; the working modes comprise an MTP mode and an OM working mode, the power supply monitoring control module is used for realizing full-period monitoring of a power supply state through modular design, and the memory dynamic allocation and management module is used for optimizing the memory resource use efficiency of a mainboard CPU in the OM working mode. According to the invention, monitoring, driving and testing functions are provided during unit operation, so that the reliability and safety of a reactor protection system are improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application belongs to the field of nuclear power plant reactor protection and monitoring technology, and particularly relates to a device for a nuclear power plant reactor protection and monitoring system. Background Technology

[0002] The reactor protection and safety monitoring system (PMS) is a safety-grade instrumentation and control system for nuclear power plants. It can prevent unsafe reactor operation during steady-state and transient power operation and undertakes many important functions such as emergency reactor shutdown, dedicated safety facility operation, and nuclear-grade data processing. It plays a crucial role in ensuring that the power plant reaches and maintains a safe shutdown state. Its operating platform is Common Q.

[0003] To facilitate monitoring and testing operations, the reactor protection and safety monitoring system requires a flat panel display system as the human-machine interface. The flat panel display system runs the QNX operating system, providing a graphical interface for online operation and testing.

[0004] Existing reactor protection systems mostly employ customized hardware architectures, which have the following drawbacks:

[0005] 1. High hardware dependence: This leads to supply chain constraints and high maintenance and upgrade costs;

[0006] 2. Insufficient scalability: Lack of standardized interfaces makes it difficult to flexibly integrate new modules;

[0007] 3. Reliability risks: High-power components rely on active heat dissipation, which increases the probability of failure, while dedicated storage devices are prone to aging and difficult to replace;

[0008] 4. Poor real-time performance: Due to the memory allocation method, high-priority tasks (such as emergency stop instructions) may be unable to obtain resources in time because memory is occupied by low-priority tasks (such as log recording), affecting the rapid response of protection signals; these defects restrict the long-term stable operation and technical iteration capabilities of the system. Summary of the Invention

[0009] The purpose of this application is to provide a device for a reactor protection and monitoring system in a nuclear power plant, which solves the problems of poor compatibility, insufficient scalability, low reliability and high maintenance costs caused by customized hardware in existing reactor protection systems.

[0010] To achieve the above objectives, this application provides the following technical solution:

[0011] A device for reactor protection and monitoring in a nuclear power plant, comprising:

[0012] The working mode management module is used to switch its function configuration according to the physical installation location and application scenario of the device. The working modes include MTP mode and OM working mode.

[0013] The power monitoring and control module is used to achieve full-cycle monitoring of power status through modular design;

[0014] The memory dynamic allocation and management module is used to optimize the efficiency of the motherboard CPU's memory resource utilization in OM working mode.

[0015] In some embodiments, the physical memory block is divided into fixed-size units by a memory dynamic allocation and management module. Each unit contains a header of information and is managed by a pointer linked list. When a thread of the ISA or PCI interface requests memory, the system allocates a free block to store the data. After the task is completed, the block is released back to the linked list, realizing data sharing between tasks.

[0016] In some embodiments, a shared region is created for multiple processes that need to exchange data frequently through a memory dynamic allocation and management module, and each process can directly access the region through virtual address mapping.

[0017] In some embodiments, memory fragmentation is handled by a memory dynamic allocation and management module. When shared memory is exhausted, the system traverses the pointer list, merges adjacent free blocks or migrates allocated blocks to release contiguous space.

[0018] In some embodiments, incremental storage space is allocated through the memory dynamic allocation and management module. If the dynamic memory is still insufficient, the memory dynamic allocation and management module scans the free area in the range of A0000h to BFFFFh to temporarily store excess data packets as temporary storage space, which is released after the task is completed.

[0019] In some embodiments, the monitoring process of the power monitoring and control module includes:

[0020] Power-on self-test: During startup, compares the voltage and impedance of each circuit with the preset range, and triggers an alarm if an abnormality is found;

[0021] Operation monitoring: Periodically read the voltage, current, and temperature parameters of the power module, and calculate the mean and standard deviation to determine whether the limits are exceeded, while performing trend analysis;

[0022] Data verification and calibration: Read the check code of the power module RAM and compare it with the value calculated by the motherboard; if they are inconsistent, calibrate the data in the next cycle using the actual sampled value.

[0023] In some embodiments, the apparatus further includes:

[0024] The power module converts AC input into multiple DC outputs. It ensures power supply stability and anti-interference capability through filter capacitors, fuses and EMC design, while supporting power-on self-test and real-time monitoring.

[0025] The motherboard module integrates the ISA / PCI bus, serial port, and USB interface, and performs calculations on input data, dynamically allocates memory, and switches between dual systems.

[0026] The expansion board module is used for data acquisition and control of input and output signals, and connects to the AC160AF100 security network for security-level communication via the communication interface module.

[0027] An extended Ethernet card module is used for non-secure external communication via Ethernet to fiber optic cable.

[0028] Optical drive and mechanical hard drive are used to load software, load / store setpoints and tuning constants, store status information, connect to the motherboard via a custom IDE cable, and support data verification to ensure integrity.

[0029] In some embodiments, the motherboard module includes:

[0030] The main CPU unit integrates the CPU, southbridge, and northbridge chips with BIOS Flash on a single chip. It has a clock speed of 800MHz and supports floating-point operations, DDR2 memory, and multiple interfaces.

[0031] Memory Management Unit: Manages the D0000h-DFFFFh memory space through a dynamic allocation mechanism, supports shared memory, fragmented processing and task priority scheduling, and optimizes real-time data processing efficiency;

[0032] Bus interface unit: Provides ISA bus, PCI bus, IDE bus and serial / PS2 / USB / VGA interfaces to realize electrical connection and data interaction with expansion boards, storage devices and peripherals;

[0033] Power monitoring unit: Used to monitor the voltage, current and temperature parameters of multiple DC power supplies in real time through the ADC input port, and combined with the check code mechanism to ensure power supply stability;

[0034] Dual-system support unit: Compatible with both Windows XP and QNX Realtime OS, switching function permissions according to the working mode to ensure operational security and flexibility.

[0035] In some embodiments, the extended Ethernet card module includes:

[0036] The Ethernet chip unit uses two 82551ER Ethernet chips based on the PCI bus to implement Ethernet data transmission and reception functions.

[0037] The photoelectric conversion board unit is used to achieve bidirectional direct conversion between the motherboard's TX / RX electrical signals and the ST fiber optic interface optical signals through differential signals;

[0038] The optical interface unit integrates two ST fiber optic interfaces for optical signal transmission in non-security-grade external communication.

[0039] In some embodiments, when monitoring each power supply, the voltage output by each power supply module is reduced to a range suitable for the ADC input by a voltage divider circuit and connected to the ADC input port of the motherboard for monitoring, mainly including power-on self-test and monitoring during operation.

[0040] Compared with the prior art, the device for reactor protection and monitoring systems in nuclear power plants provided in this application has the following advantages:

[0041] This application is used for the human-machine interface and upper-level communication interface of the reactor protection cabinet, and provides monitoring, driving and testing functions during unit operation to improve the reliability and safety of the reactor protection system.

[0042] This device replaces the computing, communication, and storage functions that originally relied on dedicated chips with commercial off-the-shelf modules. The hardware is no longer tied to a single supplier, and spare parts are sourced from multiple sources. Later maintenance and upgrades only require replacing the corresponding standard modules, which significantly reduces supply chain risks and maintenance costs, and overcomes the high dependence and high cost problems brought about by traditional customized hardware.

[0043] Furthermore, by adopting a direct Ethernet-to-optical-to-conversion structure, the intermediate electrical port is eliminated, reducing conversion layers and the number of connectors, thus lowering signal attenuation and the probability of contact failure. This significantly improves the long-term operational stability of external non-security-grade communication. Expansion cards, Ethernet-to-optical-to-conversion modules, and power supply components all adhere to unified mechanical and electrical specifications, interfacing with the motherboard via pins or stacking. Adding new functions requires no modification to the original chassis or redesign of the baseboard; compliant functional modules can be directly inserted, achieving plug-and-play functionality. This solves the problem of insufficient scalability in older systems due to closed interfaces, hindering the integration of new technologies and protocols.

[0044] Furthermore, the motherboard dynamically partitions memory on demand and reserves a dedicated buffer for protection signals. High-priority tasks can write and read immediately. The memory management unit divides the address space into shared cache, common swap, and priority reserved area. Combined with a linked list dynamic allocation strategy, this ensures that protection tasks such as emergency heap stop always have an independent and immediately available buffer, which will not be occupied by background tasks such as logs and reports. This ensures that critical signals are written, verified, and sent in the shortest possible time, eliminating the response delay risk caused by fixed partition preemption in the old system and significantly improving real-time performance.

[0045] Furthermore, the power module performs online voltage, current and temperature monitoring for each output. Combined with impedance detection and check code comparison, it can promptly alarm or trigger automatic recovery when parameters deviate from the allowable range, preventing single power supply abnormalities from affecting the entire machine and improving the power supply safety margin of the entire instrumentation and control system.

[0046] Furthermore, the various functional boards are interconnected using a standard stacked bus, resulting in a high degree of component standardization. This allows for module replacement and functional expansion without system downtime, reducing maintenance costs and technology lock-in risks associated with customized hardware and facilitating subsequent system upgrades. Attached Figure Description

[0047] To more clearly illustrate the technical solution of this application, the accompanying drawings used in the technical description will be briefly introduced below.

[0048] Figure 1 The overall hardware structure diagram provided for this application;

[0049] Figure 2 The system architecture diagram provided in this application;

[0050] Figure 3 This is a schematic diagram of the motherboard resources provided in this application;

[0051] Figure 4 Resource diagram of the expansion board module provided in this application;

[0052] Figure 5 A schematic diagram of the Ethernet photoelectric conversion board provided in this application;

[0053] Figure 6 The power module structure diagram provided in this application;

[0054] Figure 7 The power monitoring flowchart provided for this application. Detailed Implementation

[0055] The following detailed description provides further details on specific implementation methods.

[0056] like Figures 1 to 7 As shown, this application provides a device for reactor protection and monitoring in a nuclear power plant, comprising:

[0057] The working mode management module is used to switch its function configuration according to the physical installation location of the device and the application scenario.

[0058] The power monitoring and control module is used to achieve full-cycle monitoring of power status through modular design; the power monitoring and control module performs voltage division sampling on the 5V, 12V, 24V and 3.3V power outputs and reads the voltage data through the ADC port;

[0059] The memory dynamic allocation and management module is used to optimize the memory resource utilization efficiency of the motherboard CPU in OM working mode. The memory dynamic allocation and management module allocates the memory space from D0000h to DFFFFh of the motherboard CPU as a shared area of ​​PCI interface and ISA interface, and dynamically allocates memory space according to the real-time data reception.

[0060] The power module converts AC input into multiple DC outputs. It ensures power supply stability and anti-interference capability through filter capacitors, fuses and EMC design, while supporting power-on self-test and real-time monitoring.

[0061] The motherboard module integrates the ISA / PCI bus, serial port, and USB interface, and performs calculations on input data, dynamically allocates memory, and switches between dual systems.

[0062] The expansion board module is used for data acquisition and control of input and output signals; it connects to the AC160AF100 security network for secure communication via the communication interface module.

[0063] An extended Ethernet card module is used for non-secure external communication via Ethernet to fiber optic cable; it converts Ethernet electrical signals to optical signals, improving the efficiency and reliability of non-secure external communication.

[0064] Optical drives and mechanical hard drives are used to load software, load / store setpoints and tuning constants, store other status information, and connect to the motherboard via a custom IDE cable, supporting data verification to ensure integrity.

[0065] In the operating mode management module, when the device is installed in the control cabinet, it is set to the maintenance and test panel (MTP) operating mode, in which tasks such as monitoring, modification, configuration and testing can be performed; when the device is installed in the main control room and is part of the reactor protection monitoring system (PMS), it is set to the operation monitoring (OM) operating mode. In this mode, the functions are limited and it is mainly used for information display, logic interlocking and reset operations and driving some equipment.

[0066] The specific implementation mechanism of the dynamic memory allocation and management module includes:

[0067] Shared memory space mechanism: Physical memory blocks are divided into fixed-size units. Each unit contains a header with information such as size and allocation status, and is managed through a linked list of pointers. When a thread using the ISA or PCI interface requests memory, the system allocates a free block to store the data. After the task is completed, the block is released back into the linked list, enabling data sharing between tasks.

[0068] Public memory area setting: A shared area is set up for multiple processes that need to exchange data frequently (such as switch quantity reading and host computer communication processes), and each process can directly access the area through virtual address mapping.

[0069] Memory fragmentation handling: When shared memory is exhausted, the system traverses the pointer list, merges adjacent free blocks or migrates allocated blocks (e.g., adjusts the list node pointers to consolidate fragments) to free up contiguous space.

[0070] Incremental storage space allocation: If dynamic memory is still insufficient, the module scans free areas in the range of A0000h to BFFFFh to temporarily store excess data packets, which will be released after the task is completed.

[0071] Task priority handling mechanism: Memory blocks are reserved according to task type (e.g., real-time control commands are high priority, and log recording is low priority) to ensure that high-priority tasks respond immediately.

[0072] The monitoring process of the power monitoring and control module includes:

[0073] Power-on self-test: During startup, compares the voltage and impedance of each circuit with the preset range (e.g., 23V–25V is allowed for 24VDC), and triggers an alarm if an abnormality is found.

[0074] Operation monitoring: Periodically read the voltage, current, and temperature parameters of the power module, and calculate the mean and standard deviation to determine whether the limits are exceeded; at the same time, perform trend analysis (if the error increases for three consecutive cycles, an alarm will be triggered).

[0075] Data verification and calibration: Read the check code of the power module RAM and compare it with the value calculated by the motherboard; if they are inconsistent, calibrate the data in the next cycle using the actual sampled value.

[0076] For example, the motherboard module includes:

[0077] The main CPU unit integrates the CPU, southbridge, northbridge chips and BIOS Flash on a single chip, with a clock speed of 800MHz, and supports floating-point operations (FPU), DDR2 memory and multiple interfaces.

[0078] Memory Management Unit: Manages the D0000h-DFFFFh memory space through a dynamic allocation mechanism, supports shared memory, fragmented processing and task priority scheduling, and optimizes real-time data processing efficiency;

[0079] Bus interface unit: Provides ISA bus, PCI bus, IDE bus and serial / PS2 / USB / VGA interfaces to realize electrical connection and data interaction with expansion boards, storage devices and peripherals;

[0080] Power monitoring unit: Used to monitor the voltage, current and temperature parameters of multiple DC power supplies in real time through the ADC input port, and combined with the check code mechanism to ensure power supply stability;

[0081] Dual-system support unit: compatible with both Windows XP and QNX Realtime OS, switching function permissions according to the working mode (MTP / OM) to ensure operational security and flexibility.

[0082] Specifically, the main CPU of the motherboard module may use a Vortex86DX. The Vortex86DX is a highly integrated, low-power processor that integrates the CPU, southbridge, northbridge chips, and BIOS Flash onto a single chip. The CPU chip has a clock speed of 800MHz, conforming to the next-generation SOC concept. It includes a floating-point unit (FPU), L1-32KB and L2-256KB cache memory, supports DDR2 memory, and includes 10 / 100M / bit Ethernet (with PHY), 4 USB 2.0 ports, 1 PATA / SD / MMC port, and 1 SATA port (with PHY). I / O includes 9 serial ports and a PS / 2 keyboard and mouse controller. It features 16-bit ISA and PCI Express interfaces required in the industrial control industry, supports general VGA output, and has 18 / 24-bit DVO support for LCD output, 12-bit TV-out / Capture-in, or HDMI. It operates from -40 to 85°C and has a fanless design.

[0083] like Figure 2 As shown, the device can run two operating systems: Windows XP Professional and QNX RealtimeOS, including Photon MicroGUI functionality. This device is used in both MTP and MCR process stations, and both include a CI527W AF100 interface card for high-speed network communication with the AF1000. The MTP device receives two digital signals: function enable and software load enable. The MTP device boots from flash memory and is used only for the graphical interface program. The OM device runs only QNX software. Each OM device drives a 19-inch FPD display.

[0084] like Figure 3 As shown, the motherboard module resource interfaces include: ISA bus, PCI bus, IDE bus, serial port*2, PS2*2, USB*2, and VGA output*2.

[0085] The extended Ethernet card module includes an Ethernet chip unit, a photoelectric conversion unit, and an optical interface unit. The extended Ethernet card module is used to connect the Ethernet electrical interface socket on the motherboard to a conversion board via a pin header, enabling direct conversion between Ethernet internal level signals and optical signals.

[0086] The Ethernet chip unit uses two 82551ER Ethernet chips based on the PCI bus to implement Ethernet data transmission and reception functions.

[0087] The photoelectric conversion board unit includes a signal transmission unit, a signal stabilization unit, and a power management unit. The signal transmission unit uses differential signaling to connect the TX / RX electrical signals sent from the motherboard to the optical signals from the ST fiber optic interface, eliminating the intermediate link of the RJ45 connector. The signal stabilization unit (resistors R1 / R5, capacitors C4-C7) improves signal anti-interference capability through level clamping and DC blocking coupling. The power management unit (U3 LDO regulator) converts the motherboard's 5V power supply to 3.3V, which is then filtered to power the photoelectric converter.

[0088] The optical interface unit integrates two ST fiber optic interfaces for optical signal transmission in non-security-grade external communication.

[0089] Each unit works together to achieve efficient and reliable photoelectric signal conversion and data transmission, reducing device failure rate. The expansion Ethernet card connects to the motherboard using a PC104+, integrating two PCI bus-based Ethernet chips (82551ER) and two ST optical interface modules to improve conversion efficiency and reduce failure rate.

[0090] The expansion Ethernet card module integrates two PCI bus-based Ethernet chips (82551ER) and two ST optical interface modules. The Ethernet interface provides access to external non-secure systems. The expansion board module includes three additional PCI slots on the top, connected to the FPGA via an ISA interface for acquisition and control of input / output signals; a CI527 communication interface module is inserted into the PCI expansion slots to access the AF100 network for secure communication.

[0091] The expansion module interface resources are allocated as follows: the CI527W communication interface module is inserted into the expansion slot to access the AC160AF100 network; the CI527W communication interface module completes the interface function between the single board and the AF100 network; each network card has two bus interfaces.

[0092] JP1 consists of two sets of Ethernet transmit and receive signal headers that plug into the motherboard. U1 is an optoelectronic converter responsible for converting the TX signal from the motherboard into an optical signal and sending it to the ST port optical fiber, and converting the optical signal received in the ST port optical fiber into an RX electrical signal and feeding it back to the motherboard.

[0093] Both TX and RX use differential signal transmission (RXP / RXN, TXP / TXN) to improve interference immunity.

[0094] All electrical signals are pulled up and down by resistors (e.g., R1 / R5) to ensure signal stability; the electrical signals are coupled to U1 through capacitors C4-C7 to block DC and resist low-frequency interference; U3 is an LDO power supply that converts the motherboard's 5V power supply to 3.3V for the converter, and the power supply is equipped with capacitors and inductors to improve output performance; the U2 photoelectric converter circuit is the same as U1.

[0095] Compared with the original equipment's three-stage conversion from internal level signal to Ethernet RJ45 to optical signal, this method reduces the intermediate RJ45 conversion stage, improving conversion efficiency, reducing device failure rate, and reducing connector failure rate.

[0096] The motherboard and expansion board are connected as follows: the motherboard module and expansion board module are electrically connected via the PC104+ bus; the motherboard module and expansion Ethernet card module are electrically connected via the PC104+ bus; and the motherboard module is electrically connected to the optical drive and hard disk drive via the IDE bus. The motherboard module is a motherboard with a PC104 interface, and its resource interfaces include ISA bus, PCI bus, IDE bus, two serial ports, two PS / 2 ports, two USB ports, and two VGA outputs.

[0097] The optical drive and hard disk drive use standard components for loading software, loading / storing setpoints and tuning constants, and storing other status information. Both the optical drive and hard disk drive use standard components and standard connection cables.

[0098] The CD drive is used to load new display software, load / store setpoints and tuning constants, and store other status information; the USB interface is used to connect the mouse and keyboard; the digital input / output module is used for inputting key lock switches and outputting signals.

[0099] like Figure 5 As shown, the rated input voltage of the power module is 220VAC, which passes through a fuse and a varistor before entering the EMC module. The fuse is a 250VAC / 3.5A slow-break type, matching the recommended value of the selected power module. The input EMC module uses FC-L03D2 to improve the overall EMC level. The 5V power module uses a 35WLD40-23B05R2, with a 3.3V power supply branched off from the secondary side using a K7803-500R3. Both 5V and 3.3V are used for motherboard power supply. The 12V power module uses a 40W LD40-23B12R2, which is used for monitor power supply. The 24V power module uses a 40W LD40-23B24R2, with a 12V power supply branched off from the secondary side using a K7812-1000R3. The 24V is used for power supply of the external AF100 opto-converter, and the 12V is used for chassis fan power supply.

[0100] Each power output is equipped with a filter capacitor to improve input quality. The through-hole capacitors are secured with adhesive to enhance shock and vibration resistance.

[0101] Each power output is equipped with a fuse, which can disconnect that output when a load is short-circuited, ensuring normal power supply to other power circuits.

[0102] The power module and other components are integrated on a single circuit board and supply power to the motherboard and peripheral leads via onboard connector terminals.

[0103] Specifically, this application can distinguish between different operating modes. When the device is installed in a control cabinet, it is referred to as a maintenance and test panel, operating in MTP (Maintenance and Test Panel) mode; when the device is installed in the main control room as part of the PMS (Physical Management System), it operates in OM (Operational Monitor) mode. Maintenance and testing functions are performed in MTP mode, enabling tasks such as monitoring, modification, configuration, and testing; while OM mode performs display functions, logic interlocking and resetting, and driving some devices.

[0104] This application enables dynamic allocation of motherboard memory. When the device is in OM (Operating Mode), the expansion board transmits switch signals to the motherboard via the ISA bus and obtains data from the security-grade AF100 network via the PCI interface connected to the CI527 communication board. At this time, the motherboard CPU receives the switch signals and network data. The motherboard memory allocation is shown in Table 1.

[0105] Table 1 Memory Allocation Table for Motherboard CPU

[0106]

[0107] To fully utilize the motherboard CPU's memory, D0000h-DFFFFh are designated as the memory space for the PCI and ISA interfaces. During actual operation, a dynamic memory allocation mode is implemented based on the data reception situation.

[0108] Work modes are categorized based on usage scenarios, including:

[0109] When installed in a control cabinet, it is set to Maintenance and Test Panel (MTP) mode, allowing monitoring, modification, configuration, and testing tasks to be performed; when installed in the main control room as part of a Protection Monitoring System (PMS), it is set to Operation Monitoring (OM) mode, restricting interface permissions to perform only display functions and logic latch / reset operations.

[0110] When the device is in OM working mode, the D0000h-DFFFFh memory space is divided into a shared memory area for PCI and ISA interfaces, and a dynamic memory allocation mode is implemented according to the data reception situation.

[0111] The dynamic memory allocation mode based on data reception includes:

[0112] Shared memory space mechanism: The memory block is divided into fixed-size units, each containing header information, and data sharing between tasks is achieved through a linked list of pointers;

[0113] Public memory area setting: A public memory area is set up for data exchange between multiple processes, and direct access between processes is achieved through virtual address mapping;

[0114] Memory fragmentation: When reserved memory is exhausted, adjacent free blocks are merged or memory blocks are migrated to free up contiguous space;

[0115] Incremental storage space allocation: Locate available memory areas within the range A0000h-BFFFFh to temporarily store excess data.

[0116] 1) Shared memory space mechanism

[0117] Initialize the physical memory space of the PCI and ISA interfaces, and divide the physical memory block D0000h-DFFFFh into several memory blocks of the same size to access data packets; each memory block has a header containing information such as the size and status of the memory block (allocated tasks / idle);

[0118] Physical memory space is managed through a linked list of pointers, with each memory block corresponding to one pointer;

[0119] When a memory block is allocated to a corresponding task for storage, the corresponding pointer points to that memory block. After use, the pointer is added to the free list. The storage space is different for each task type.

[0120] When the thread corresponding to the ISA interface or PCI interface requests several blocks of memory to store data, these memory blocks are released after the task is completed, so that they can be used by other tasks.

[0121] By using a shared memory mechanism, data from different task threads can be stored in the same memory area, which can efficiently realize data exchange and collaboration between tasks and avoid the overhead of data copying.

[0122] 2) Common memory area settings

[0123] If the network command received by the motherboard CPU from the PCI interface is to read certain switch data, a common area is allocated in the memory area. This area is visible to both the switch data reading and the data transmission back to the host computer, and either process can read or write data in this area.

[0124] When other processes need to access data in the common area, they do so by mapping the common area memory to their respective virtual address spaces.

[0125] When a large amount of data needs to be exchanged between tasks, using shared memory can avoid frequent copying and communication overhead, thereby improving the overall performance of the system.

[0126] 3) Mechanism for handling memory exhaustion

[0127] When the reserved memory is exhausted, but the current process still needs more memory space, the required memory space is determined according to the current process. Then, memory fragmentation processing is performed within the reserved memory range, and the memory space in the range of A0000h to BFFFFh is polled to determine the incremental storage space.

[0128] The process of memory fragmentation is as follows:

[0129] a. Traverse the linked list starting from the head memory block, access each memory block one by one, and read its contents and pointers;

[0130] b. If there are non-adjacent free blocks, perform a migration operation on the memory blocks and adjust the pointers to the new locations. For example, point the next pointer of a memory block to another node in the linked list.

[0131] For example: Suppose we have a linked list: [A]->[B]->[C]->[D], where the memory blocks pointed to by A and C are allocated, and the memory blocks pointed to by B and D are free. If we want to move node B between C and D to make full use of the memory blocks B and D, the operation is as follows:

[0132] First, set the next pointer of A to C, i.e., A->C; second, set the next pointer of B to D, i.e., B->D; finally, set the next pointer of C to B, i.e., C->B.

[0133] In the new linked list, update the "next node" pointer of each node to ensure that the structure of the new linked list is the same as that of the original linked list.

[0134] In this application, the method for determining the incremental storage space is as follows: The data structure of the data packet to be received is determined based on the task type, and the number of bytes of memory space occupied is determined. The allocated and free regions from A0000h to BFFFFh are located, and the boundary of each block is determined based on its start and end addresses to obtain the usable memory region within that range. Newly received data packets are temporarily stored using the incremental storage space. This memory is released when the task processing ends or the data packet's usage period ends.

[0135] 4) Task priority handling mechanism

[0136] Based on the assigned tasks in the memory block header information, the task priorities are determined. During memory block initialization, a fixed number of memory blocks are reserved to handle high-priority tasks, ensuring they are not affected by other tasks. Once a task is completed, the memory is immediately released, and the block waits for the next high-priority task to finish, avoiding resource hoarding.

[0137] Medium-priority tasks typically involve the transfer of large amounts of data, and memory is released and cleared through periodic garbage collection.

[0138] Low-priority tasks, such as operation logs, do not have high real-time requirements and can extract relevant data through a common memory area to achieve memory reuse.

[0139] Prioritize the tasks receiving digital inputs and network commands. See Table 2 for details.

[0140] Table 2 Data Processing Priority Ranking Table

[0141]

[0142] This device implements power supply monitoring and control. The power supply module of this device uses a multi-modal design. When monitoring each power supply, the output voltage of each power supply module (5V, 12V, 24V and 3.3V) is reduced to a suitable range for ADC input (0-3.3V) through a voltage divider circuit and connected to the ADC input port of the main board for monitoring, mainly including power-on self-test and monitoring during operation.

[0143] Self-test: Upon power-up, the system compares the read voltage with the preset range value in real time, while simultaneously monitoring the impedance values ​​of each power supply rail on the motherboard. If the voltage deviates from the preset range (e.g., 23V to 25V for 24VDC, 11.5V to 12.5V for 12VDC, and 4.8V to 5.2V for 5VDC), or the impedance value is not within the preset range, the system will trigger an alarm. If an abnormality is detected in a power module, an automatic recovery mechanism will ensure the power supply operates normally.

[0144] like Figure 7As shown, the monitoring during operation is as follows: at regular intervals, the sampled voltage, current and temperature parameters are read from the memory of each power module, and it is determined whether the mean and standard deviation of the voltage and current parameters are within the preset range; if they are not within the preset range, it is determined whether the temperature parameter is higher than the preset temperature threshold.

[0145] In addition, the system compares the error over each preset time period to see if there is an increasing trend. If the error continues to increase over three consecutive measurement cycles, an alarm is triggered.

[0146] When the motherboard reads sampling information from the memory of each power module, it also reads the checksum from the module's RAM. Based on the data obtained by the motherboard and the verification rules, it calculates the actual checksum and compares it with the checksum stored in the module's RAM. If they do not match, the module data is determined to be incorrect. In the next preset cycle, the actual voltage and current values ​​are obtained through voltage and current sampling to calibrate the power module's values.

[0147] The above description is only a specific embodiment of this application, but the protection scope of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the protection scope of this application.

Claims

1. A device for reactor protection and monitoring in nuclear power plants, characterized in that, include: The working mode management module is used to switch its function configuration according to the physical installation location and application scenario of the device. The working modes include MTP mode and OM working mode. The power monitoring and control module is used to achieve full-cycle monitoring of power status through modular design; The memory dynamic allocation and management module is used to optimize the efficiency of the motherboard CPU's memory resource utilization in OM working mode.

2. The device for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, The physical memory block is divided into fixed-size units by the memory dynamic allocation and management module. Each unit contains a header of information and is managed by a pointer linked list. When a thread using the ISA or PCI interface requests memory, the system allocates a free block to store the data. After the task is completed, the block is released back to the linked list, thus enabling data sharing between tasks.

3. The device for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, The memory dynamic allocation and management module creates a shared area for multiple processes that need to exchange data frequently, and enables each process to directly access this area through virtual address mapping.

4. The device for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, The system performs memory fragmentation through a dynamic memory allocation and management module. When shared memory is exhausted, the system traverses the pointer list, merges adjacent free blocks or migrates allocated blocks to release contiguous space.

5. The device for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, Incremental storage space is allocated through the memory dynamic allocation and management module. If the dynamic memory is still insufficient, the memory dynamic allocation and management module scans the free area in the range of A0000h to BFFFFh to temporarily store excess data packets as temporary storage space, which is released after the task is completed.

6. The apparatus for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, The monitoring process of the power monitoring and control module includes: Power-on self-test: During startup, compares the voltage and impedance of each circuit with the preset range, and triggers an alarm if an abnormality is found; Operation monitoring: Periodically read the voltage, current, and temperature parameters of the power module, and calculate the mean and standard deviation to determine whether the limits are exceeded, while performing trend analysis; Data verification and calibration: Read the check code of the power module RAM and compare it with the value calculated by the motherboard; if they are inconsistent, calibrate the data in the next cycle using the actual sampled value.

7. The device for reactor protection and monitoring in a nuclear power plant according to claim 1, characterized in that, The device also includes: The power module converts AC input into multiple DC outputs. It ensures power supply stability and anti-interference capability through filter capacitors, fuses and EMC design, while supporting power-on self-test and real-time monitoring. The motherboard module integrates the ISA / PCI bus, serial port, and USB interface, and performs calculations on input data, dynamically allocates memory, and switches between dual systems. The expansion board module is used for data acquisition and control of input and output signals, and connects to the AC160AF100 security network for security-level communication via the communication interface module. An extended Ethernet card module is used for non-secure external communication via Ethernet to fiber optic cable. Optical drive and mechanical hard drive are used to load software, load / store setpoints and tuning constants, store status information, connect to the motherboard via a custom IDE cable, and support data verification to ensure integrity.

8. The apparatus for reactor protection and monitoring in a nuclear power plant according to claim 7, characterized in that, The motherboard module includes: The main CPU unit integrates the CPU, southbridge, and northbridge chips with BIOS Flash on a single chip. It has a clock speed of 800MHz and supports floating-point operations, DDR2 memory, and multiple interfaces. Memory Management Unit: Manages the D0000h-DFFFFh memory space through a dynamic allocation mechanism, supports shared memory, fragmented processing and task priority scheduling, and optimizes real-time data processing efficiency; Bus interface unit: Provides ISA bus, PCI bus, IDE bus and serial / PS2 / USB / VGA interfaces to realize electrical connection and data interaction with expansion boards, storage devices and peripherals; Power monitoring unit: Used to monitor the voltage, current and temperature parameters of multiple DC power supplies in real time through the ADC input port, and combined with the check code mechanism to ensure power supply stability; Dual-system support unit: Compatible with both Windows XP and QNX Realtime OS, switching function permissions according to the working mode to ensure operational security and flexibility.

9. The apparatus for reactor protection and monitoring in a nuclear power plant according to claim 7, characterized in that, The extended Ethernet card module includes: The Ethernet chip unit uses two 82551ER Ethernet chips based on the PCI bus to implement Ethernet data transmission and reception functions. The photoelectric conversion board unit is used to achieve bidirectional direct conversion between the motherboard's TX / RX electrical signals and the ST fiber optic interface optical signals through differential signals; The optical interface unit integrates two ST fiber optic interfaces for optical signal transmission in non-security-grade external communication.

10. The apparatus for reactor protection and monitoring in a nuclear power plant according to claim 7, characterized in that, When monitoring each power supply, the voltage output by each power module is reduced to a range suitable for the ADC input through a voltage divider circuit and connected to the ADC input port of the motherboard for monitoring, mainly including power-on self-test and monitoring during operation.