Data monitoring method and device
By using independent dynamic storage memory space in the field programmable gate array to acquire and send monitoring data, the functional failure problem caused by the embedded software itself is solved, and the isolation of variable monitoring and security functions is achieved, which improves the system security and reliability.
Patent Information
- Application Number
- CN202310002505.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-01-03
- Publication Date
- 2024-12-20
- Estimated Expiration
- 2043-01-03
AI Technical Summary
In the prior art, embedded software itself is used to read and send variable data, resulting in the failure of the variable monitoring function, affecting the normal execution of the security function, increasing the operating load of the CPU, and reducing the expansion space of the security function.
By using independent dynamic storage memory space in the field programmable gate array, the monitoring data is obtained and sent to the data analysis software using independent dynamic storage memory space, avoid interference with the embedded software running space, and use dual-port random access memory to send data to the data analysis software, and if necessary copy write data to maintain data consistency.
The variable monitoring function is completely isolated from the security function, which reduces the impact on embedded software, improves the security and reliability of the system, and avoids the interference of the variable monitoring function on the security function.
Smart Images
Figure CN115963793B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of nuclear power plant instrumentation control, and in particular to a data monitoring method and device. Background Art
[0002] The variable monitoring function of the embedded software of the nuclear safety-level distributed control system (DCS) refers to the reading, analysis and display of specific data in the embedded software through the maintenance tool software during the normal operation of the nuclear power plant reactor control and protection system, so as to timely understand the operating status, real-time parameters and data of the safety-level DCS system.
[0003] In the prior art, embedded software itself is usually used to read its variable data and send it to maintenance tool software to monitor the variable data.
[0004] Using the DCS embedded software itself to complete the reading and sending of software variables will inevitably affect the normal system functions of the embedded software. Since the software can only run as a whole in the CPU, if the variable monitoring function fails, it will affect the normal execution of the safety function. Summary of the invention
[0005] In view of this, an embodiment of the present application provides a data monitoring method and device, which aims to solve the problem in the prior art that when the variable monitoring function fails and the normal execution of the safety function is affected by using embedded software itself to monitor variable data.
[0006] In a first aspect, an embodiment of the present application provides a data monitoring method, which is applied to a field programmable gate array, and the method includes:
[0007] Get the command of monitoring data;
[0008] Based on the acquired instruction, the monitored data is acquired in a first dynamic storage memory space; the first dynamic storage memory space is independent of a second dynamic storage memory space; the second dynamic storage memory space is used to run embedded software;
[0009] The monitored data is sent to data analysis software.
[0010] Optionally, before acquiring the monitored data in the first dynamic storage memory space based on the acquired instruction, the method further includes:
[0011] Obtaining a write data instruction sent by the processor to the second dynamic storage memory space;
[0012] The data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
[0013] Optionally, if the field programmable gate array obtains the data write instruction sent by the processor to the second dynamic storage memory space while the field programmable gate array obtains the monitored data, then copying the data written into the second dynamic storage memory space to the first dynamic storage memory space specifically includes:
[0014] After the field programmable gate array acquires the monitored data, the data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
[0015] Optionally, sending the monitored data to data analysis software specifically includes:
[0016] The monitored data is sent to data analysis software using a dual-port random access memory.
[0017] Optionally, after sending the monitored data to data analysis software, the method further includes:
[0018] The data analysis software analyzes the monitored data;
[0019] When the monitored data is abnormal, an alarm of data abnormality is initiated.
[0020] In a second aspect, an embodiment of the present application provides a data monitoring device, which is applied to a field programmable gate array, and the device includes: a first acquisition module, a second acquisition module, and a sending module;
[0021] The first acquisition module is used to obtain instructions for monitoring data;
[0022] The second acquisition module is used to acquire the monitored data in the first dynamic storage memory space based on the acquired instruction; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run the embedded software;
[0023] The sending module is used to send the monitored data to the data analysis software.
[0024] Optionally, the device further includes a third acquisition module and a copy module;
[0025] Before acquiring the monitored data in the first dynamic storage memory space based on the acquisition instruction, the third acquisition module is used to acquire the write data instruction sent by the processor to the second dynamic storage memory space; the copy module is used to copy the data written into the second dynamic storage memory space to the first dynamic storage memory space.
[0026] Optionally, if the field programmable gate array obtains the write data instruction sent by the processor to the second dynamic storage memory space while the field programmable gate array obtains the monitored data, the copy module is specifically used to:
[0027] After the field programmable gate array acquires the monitored data, the data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
[0028] Optionally, the sending module is specifically used for:
[0029] The monitored data is sent to data analysis software using a dual-port random access memory.
[0030] Optionally, the device further includes an analysis module and an alarm module;
[0031] The analysis module is specifically used for: the data analysis software to analyze the monitored data;
[0032] The alarm module is specifically used to initiate an alarm of data abnormality when the monitored data is abnormal.
[0033] The present application provides a data monitoring method and device. When executing the method, the field programmable gate array first obtains the instruction of monitoring data; then based on the obtained instruction, the monitored data is obtained in the first dynamic storage memory space; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run embedded software; finally, the monitored data is sent to the data analysis software. In this way, the monitoring data is obtained in the first dynamic storage memory space based on the instruction of monitoring data through the field programmable gate array, and the monitoring data is sent to the data analysis software; because the first dynamic storage memory space is not a space for running embedded software, data monitoring and embedded software operation do not interfere with each other, overcoming the problem in the prior art that the variable data monitoring function fails when the embedded software itself is used to monitor the variable data, which affects the normal execution of the security function. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] In order to more clearly illustrate the technical solutions in this embodiment or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0035] Figure 1 A schematic diagram of a solution for realizing variable monitoring function of a nuclear safety-level DCS provided by the prior art;
[0036] Figure 2 A schematic diagram of another solution for realizing variable monitoring function of a nuclear safety-level DCS provided by the prior art;
[0037] Figure 3 A structural framework diagram of a solution for implementing a variable monitoring function provided in an embodiment of the present application;
[0038] Figure 4 A flow chart of a data monitoring method provided in an embodiment of the present application;
[0039] Figure 5 An FPGA logic implementation architecture diagram provided for an embodiment of the present application;
[0040] Figure 6 A schematic diagram of the control logic of a bus arbitration module in an FPGA provided in an embodiment of the present application;
[0041] Figure 7 A schematic diagram of the structure of a data monitoring device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0042] The variable monitoring function of the embedded software of the nuclear safety-level distributed control system (DCS) refers to the reading, analysis and display of specific data in the embedded software through the maintenance tool software during the normal operation of the nuclear power plant reactor control and protection system, so as to timely understand the operating status, real-time parameters and data of the safety-level DCS system.
[0043] In the prior art, embedded software itself is usually used to read its variable data and send it to maintenance tool software to monitor the variable data.
[0044] See also Figure 1 , Figure 1 A schematic diagram of a solution for realizing variable monitoring function of a nuclear safety-level DCS provided in the prior art. In this solution, the embedded software itself reads its variable data and directly sends it to the maintenance tool software to realize variable monitoring.
[0045] See also Figure 2 , Figure 2 Another scheme schematic diagram of a nuclear safety-level DCS implementing variable monitoring function provided in the prior art. In this scheme, the embedded software itself reads its variable data and realizes communication with the maintenance tool through a dedicated hardware board.
[0046] Both methods require the participation of the embedded software itself to realize the software variable monitoring function.
[0047] The above two solutions have the following shortcomings relative to the variable monitoring requirements of the nuclear power plant safety level:
[0048] On the one hand, using the DCS embedded system itself to complete the reading and sending of software variables will inevitably affect the normal system functions of the embedded software. Since the software can only run as a whole in the CPU, if the variable monitoring function fails, it will affect the normal execution of the safety function.
[0049] On the other hand, executing the variable monitoring function will increase the CPU's operating load, compress the expansion space of the safety function, and further reduce the CPU's operating efficiency.
[0050] In view of this, the present application proposes a solution for implementing a DCS software variable monitoring function that is independent of the safety function, so as to solve the interference of the variable monitoring function of the nuclear safety-level DCS software on the embedded software, realize the complete isolation of the variable monitoring function and the safety function, simplify the nuclear safety-level embedded software, and enable it to focus on executing safety-important control and protection functions, so as to improve the safety and reliability of the system.
[0051] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0052] First, let me introduce the structural framework of this application. Figure 3 , Figure 3 A structural framework diagram of an implementation scheme provided in an embodiment of the present application.
[0053] This solution is mainly composed of CPU, random access memory RAM, field programmable gate array FPGA and maintenance interface.
[0054] The CPU is responsible for running embedded software. SDRAM-Work is the second dynamic storage memory space, which is the running space of embedded software. All software-related instructions, codes and data are stored in SDRAM-Work. SDRAM-Shadow is the first dynamic storage memory space, which is a complete mirror of the second dynamic storage memory space SDRAM-Work. Its data content is consistent with SDRAM-Work.
[0055] FPGA is responsible for mapping the fetch instruction, read and store data operations sent by CPU to SDRAM to SDRAM-Work. For the write operation of CPU to SDRAM-Work, FPGA also stores the data in SDRAM-Shadow to achieve data consistency between the two SDRAMs. FPGA interacts with the maintenance tool software, receives variable monitoring instructions and their parameters, and sends the corresponding variable data from SDRAM-Shadow to the maintenance tool software.
[0056] This solution does not have any special requirements for embedded software and maintenance tool software.
[0057] See also Figure 4 , Figure 4 A flow chart of a data monitoring method provided in an embodiment of the present application, the method is applied to a field programmable gate array, comprising the following steps:
[0058] S401, obtaining an instruction for monitoring data.
[0059] The FPGA will monitor whether there is a request to monitor variable data. When a request to monitor variable data is detected, the FPGA will obtain an instruction to monitor the data.
[0060] S402: Based on the acquired instruction, acquire the monitored data in the first dynamic storage memory space; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run the embedded software.
[0061] FPGA obtains the instruction to monitor data, and obtains the monitored data in the first dynamic storage memory space SDRAM-Shadow; since the data in SDRAM-Shadow and SDRAM-Work are consistent, but they are two independent spaces. SDRAM-Work is used to run embedded software, and FPGA obtains the monitored data in SDRAM-Shadow, so that the monitoring variable data and the running of embedded software do not affect each other.
[0062] S403: Send the monitored data to data analysis software.
[0063] After the FPGA acquires the monitoring data, it sends the monitoring data to the data analysis software so that the data analysis software can analyze the variable data to determine whether there is any abnormality in the variable data.
[0064] The embodiment of the present application provides a data monitoring method. When executing the method, the field programmable gate array first obtains the instruction of monitoring data; then based on the obtained instruction, the monitored data is obtained in the first dynamic storage memory space; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run embedded software; finally, the monitored data is sent to the data analysis software. In this way, the monitoring data is obtained in the first dynamic storage memory space based on the instruction of monitoring data through the field programmable gate array, and the monitoring data is sent to the data analysis software; because the first dynamic storage memory space is not a space for running embedded software, data monitoring and embedded software operation do not interfere with each other, overcoming the problem in the prior art that the variable data monitoring function fails when the embedded software itself is used to monitor the variable data, which affects the normal execution of the security function.
[0065] Furthermore, in an optional embodiment of the present application, before acquiring the monitored data in the first dynamic storage memory space based on the acquired instruction, the FPGA will acquire the CPU's operation instruction to write data to the SDRAM-Work space, and the FPGA will simultaneously store the data in the SDRAM-Shadow space to achieve data consistency between the two SDRAMs. Thus, when the CPU runs the embedded software, the FPGA can acquire the monitored data in the first dynamic storage memory space without affecting the CPU running the embedded software.
[0066] Specifically, see Figure 5 , Figure 5 A diagram of an FPGA logic implementation architecture provided for an embodiment of the present application.
[0067] The specific implementation process includes the following:
[0068] The SDRAM-Work bus interface control module performs data read and write operations on the SDRAM-Work.
[0069] The SDRAM-Shadow bus interface control module performs data read and write operations on the SDRAM-Shadow.
[0070] SDRAM-Work, SDRAM-Shadow and CPU bus interface control modules implement communication functions according to bus timing and control signal requirements.
[0071] The maintenance communication interface control module realizes data communication between FPGA and maintenance tool software.
[0072] The dual-port RAM implements communication isolation between safety-critical functions and maintenance functions in the FPGA to prevent errors in maintenance tools from spreading to the FPGA side.
[0073] The variable monitoring instruction processing module reads the variable monitoring instructions and parameters from the dual-port RAM, parses the instructions, and converts them into data read operations on the SDRAM in combination with their parameters. After passing through the bus arbitration module, it obtains the corresponding variable data from the SDRAM-Shadow, and sends the obtained data to the maintenance tool software through the dual-port RAM and the maintenance communication interface control module.
[0074] The bus arbitration module processes the access requests to the SDRAM according to the three bus interface control modules and the variable monitoring instruction processing module.
[0075] Furthermore, in an optional embodiment of the present application, if the FPGA obtains the write data instruction sent by the processor to the second dynamic storage memory space while the FPGA is obtaining the monitored data, it is necessary to copy the data written into the second dynamic storage memory space to the first dynamic storage memory space after the FPGA obtains the monitored data. For specific implementation logic, see Figure 6 , Figure 6 A schematic diagram of the control logic of a bus arbitration module in an FPGA provided in an embodiment of the present application.
[0076] The bus arbitration module in the FPGA monitors the status of each bus to determine whether there is a bus access request. If so, it further determines whether it is an operation of the CPU writing memory data. If so, it further determines whether the FPGA is reading data in the SDRAM-Shadow space, that is, it is acquiring monitoring data. If the FPGA is acquiring monitoring data, the CPU will first write data to the SDRAM-Work space; after the FPGA acquires the monitoring data, the data written to the SDRAM-Work space will be synchronized to the SDRAM-Shadow space.
[0077] If the bus arbitration module in the FPGA monitors a bus access request, but it is not an operation request for the CPU to write memory data, it further determines whether it is an operation to monitor variable data. If so, the FPGA obtains the monitored data in the SDRAM-Shadow space and sends the data to the maintenance tool software. If the bus request is an operation for the CPU to read memory data, the FPGA reads the data in the SDRAM-Work space and sends it to the CPU.
[0078] If the bus arbitration module in the FPGA does not monitor the bus access request, it further determines whether there is a cached CPU write memory operation. If so, it synchronizes the data in the SDRAM-Work space to the SDRAM-Shadow space according to the cached CPU write memory operation instruction. If not, it continues to monitor the status of each bus.
[0079] The bus arbitration module control logic in the above FPGA realizes that the CPU's write operation to SDRAM-Work has the highest priority and can interrupt the variable monitoring operation; the CPU's read SDRAM-Work operation and variable monitoring operation can be performed simultaneously without interfering with each other.
[0080] Furthermore, in an optional embodiment of the present application, a dual-port random access memory can be used to send the monitored data to the data analysis software. In this way, the dual-port RAM can be used to implement communication isolation between the safety-critical functions and the maintenance functions in the FPGA, so as to prevent the errors of the maintenance tools from affecting the side of the FPGA that executes the data operation operation.
[0081] Furthermore, in an optional embodiment of the present application, after the monitored data is sent to the data analysis software, the data analysis software analyzes the monitored data; when the monitored data is abnormal, an alarm of data abnormality is issued. In this way, the user can be prompted as soon as possible that the monitored data is abnormal, so that the abnormal data can be processed as soon as possible.
[0082] The above are some specific implementations of a data monitoring method provided in the embodiment of the present application. Based on this, the present application also provides a corresponding device. The device provided in the embodiment of the present application will be introduced from the perspective of functional modularization.
[0083] See also Figure 7 , Figure 7 A schematic diagram of the structure of a data monitoring device provided in an embodiment of the present application, the device is applied to FPGA, including: a first acquisition module 701, a second acquisition module 702, and a sending module 703;
[0084] The first acquisition module 701 is used to obtain an instruction for monitoring data;
[0085] The second acquisition module 702 is used to acquire the monitored data in the first dynamic storage memory space based on the acquired instruction; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run the embedded software;
[0086] The sending module 703 is used to send the monitored data to data analysis software.
[0087] The embodiment of the present application provides a data monitoring device. The device is used to execute a corresponding method. When executing the method, the field programmable gate array first obtains the instruction of monitoring data; then based on the obtained instruction, the monitored data is obtained in the first dynamic storage memory space; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run embedded software; finally, the monitored data is sent to the data analysis software. In this way, the monitoring data is obtained in the first dynamic storage memory space based on the instruction of monitoring data through the field programmable gate array, and the monitoring data is sent to the data analysis software; because the first dynamic storage memory space is not a space for running embedded software, data monitoring and embedded software operation do not interfere with each other, which overcomes the problem of affecting the normal execution of security functions when the variable data monitoring function fails due to the use of embedded software itself to monitor variable data in the prior art.
[0088] Furthermore, in an optional embodiment of the present application, the device further includes a third acquisition module and a copy module;
[0089] Before acquiring the monitored data in the first dynamic storage memory space based on the acquisition instruction, the third acquisition module is used to acquire the write data instruction sent by the processor to the second dynamic storage memory space; the copy module is used to copy the data written into the second dynamic storage memory space to the first dynamic storage memory space.
[0090] Further, in an optional embodiment of the present application, if the field programmable gate array obtains the write data instruction sent by the processor to the second dynamic storage memory space while the field programmable gate array obtains the monitored data, the copy module is specifically used to:
[0091] After the field programmable gate array acquires the monitored data, the data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
[0092] Further, in an optional embodiment of the present application, the sending module 703 is specifically used for:
[0093] The monitored data is sent to data analysis software using a dual-port random access memory.
[0094] Furthermore, in an optional embodiment of the present application, the device further includes an analysis module and an alarm module;
[0095] The analysis module is specifically used for: the data analysis software to analyze the monitored data;
[0096] The alarm module is specifically used to initiate an alarm of data abnormality when the monitored data is abnormal.
[0097] The “first” and “second” in the names such as “first” and “second” mentioned in the embodiments of the present application are only used as name identifiers and do not represent the first or second in order.
[0098] Through the description of the above implementation methods, it can be known that those skilled in the art can clearly understand that all or part of the steps in the above-mentioned embodiment method can be implemented by means of software plus a general hardware platform. Based on such an understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a storage medium, such as a read-only memory (ROM) / RAM, a magnetic disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network communication device such as a router) to execute the methods described in each embodiment of the present application or some parts of the embodiments.
[0099] Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.
[0100] The above description is merely an exemplary embodiment of the present application and is not intended to limit the protection scope of the present application.
Claims
1. A data monitoring method, characterized in that: Applied to a field programmable gate array, the method comprises: Get the command of monitoring data; Based on the acquired instruction, the monitored data is acquired in a first dynamic storage memory space; the first dynamic storage memory space is independent of a second dynamic storage memory space; the second dynamic storage memory space is used to run embedded software; Sending the monitored data to data analysis software; Before acquiring the monitored data in the first dynamic storage memory space based on the acquired instruction, the method further includes: Obtaining a write data instruction sent by the processor to the second dynamic storage memory space; copying the data written into the second dynamic storage memory space to the first dynamic storage memory space; If the field programmable gate array obtains the data write instruction sent by the processor to the second dynamic storage memory space while the field programmable gate array obtains the monitored data, then copying the data written into the second dynamic storage memory space to the first dynamic storage memory space specifically includes: After the field programmable gate array acquires the monitored data, the data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
2. The method according to claim 1, characterized in that The sending of the monitored data to the data analysis software specifically includes: The monitored data is sent to data analysis software using a dual-port random access memory.
3. The method according to claim 1, characterized in that After sending the monitored data to the data analysis software, the method further includes: The data analysis software analyzes the monitored data; When the monitored data is abnormal, an alarm of data abnormality is initiated.
4. A data monitoring device, characterized in that: Applied to a field programmable gate array, the device comprises: a first acquisition module, a second acquisition module, and a sending module; The first acquisition module is used to obtain instructions for monitoring data; The second acquisition module is used to acquire the monitored data in the first dynamic storage memory space based on the acquired instruction; the first dynamic storage memory space is independent of the second dynamic storage memory space; the second dynamic storage memory space is used to run the embedded software; The sending module is used to send the monitored data to the data analysis software; The device also includes a third acquisition module and a copy module; Before acquiring the monitored data in the first dynamic storage memory space based on the acquired instruction, the third acquisition module is used to acquire the write data instruction sent by the processor to the second dynamic storage memory space; the copy module is used to copy the data written into the second dynamic storage memory space to the first dynamic storage memory space; If the field programmable gate array obtains the write data instruction sent by the processor to the second dynamic storage memory space while the field programmable gate array obtains the monitored data, the copy module is specifically used to: After the field programmable gate array acquires the monitored data, the data written into the second dynamic storage memory space is copied to the first dynamic storage memory space.
5. The device according to claim 4, characterized in that The sending module is specifically used for: The monitored data is sent to data analysis software using a dual-port random access memory.
6. The device according to claim 4, characterized in that The device also includes an analysis module and an alarm module; The analysis module is specifically used for: the data analysis software to analyze the monitored data; The alarm module is specifically used to: when the monitored data is abnormal, initiate an alarm of data abnormality.