Safety display and control integrated system of nuclear power station

Abstract

The invention discloses a safety display and control integrated system of a nuclear power station, which relates to the field of safety level control of the nuclear power station and comprises an FPGA module, an MCU module and a CPLD module. The FPGA module is connected with the MCU module; the FPGA module and the MCU module are both connected with the CPLD module; the FPGA module is used for collecting and transmitting ring network data; the MCU module is used for display control and communication processing; the CPLD module is used for diagnosing the running state of the FPGA module and the running state of the MCU module; the MCU module comprises a display core and a communication core; the display core is used for running a GUI graphic function; the communication core is used for operating communication, control and recording functions. The safety display unit which is safe, stable and reliable in operation is provided for a nuclear power station safety level control system.

Description

Technical Field

[0001] The present application relates to the field of safety level control of nuclear power plants, and in particular to an integrated safety display and control system for nuclear power plants. Background Art

[0002] With the increasing number of power generation equipment and electricity consumption in nuclear power plants year by year, people have higher and higher requirements for the automation and safety display of control systems. The real-time and safe display of equipment information and the safe, highly reliable and fast response processing requirements of human-computer interaction information have become one of the important elements of automation and safe operation of nuclear power control systems.

[0003] The existing nuclear power plant control system automation and safety display mainly use control software built on embedded operating systems in the industrial control field, and program control is based on data interaction and information transmission between communication protocols and display devices. This method has a large amount of communication, low efficiency, and the control depends on the security of the embedded system itself. Once there are systemic defects, it will greatly increase the difficulty of handling, and may even cause accidents due to defects. Summary of the invention

[0004] The purpose of this application is to provide an integrated safety display and control system for a nuclear power plant, so as to provide a safety display unit that operates safely, stably and reliably for the safety-level control system of the nuclear power plant.

[0005] To achieve the above objectives, this application provides the following solutions:

[0006] The present application provides a safety display and control integrated system for a nuclear power plant, comprising: an FPGA module, an MCU module and a CPLD module; the FPGA module is connected to the MCU module; the FPGA module and the MCU module are both connected to the CPLD module;

[0007] The FPGA module is used to collect and transmit ring network data; the MCU module is used for display control and communication processing; the CPLD module is used to diagnose the operating status of the FPGA module and the MCU module;

[0008] The MCU module includes a display core and a communication core; the display core is used to run GUI graphic functions; the communication core is used to run communication, control and recording functions.

[0009] Optionally, a bus or shared memory data exchange method is used between the FPGA module, the MCU module and the CPLD module.

[0010] Optionally, the display core and the communication core perform mutual diagnosis based on the same external crystal oscillator source and counter.

[0011] Optionally, the FPGA module is connected to the display core and the communication core respectively; the FPGA module is also used to perform synchronous operation diagnosis of the display core and the communication core according to the synchronization pulse output by the display core and the synchronization pulse output by the communication core.

[0012] Optionally, it includes a state switching process, a system diagnosis process, and a display control and communication data processing process.

[0013] Optionally, the state switching process includes:

[0014] The integrated safety display and control system of the nuclear power plant is powered on and started, and the boot module of the communication core starts the boot process;

[0015] The guiding module switches the mode based on the state of the mode switch; the modes include operation mode, maintenance mode and download mode;

[0016] When in the operation mode, the integrated safety display and control system of the nuclear power plant enters a normal operation state, the communication core starts the communication function of the operation mode, and the display core performs display work;

[0017] When in maintenance mode, the integrated safety display and control system of the nuclear power plant performs maintenance work;

[0018] When in the download mode, the communication core starts the communication function of the download mode;

[0019] In operation mode or maintenance mode, when the integrated safety display and control system of the nuclear power plant operates abnormally, fault processing is triggered, and the fault processing module of the communication core performs fault diagnosis and data recording, resets the mode after diagnosis, and restarts the boot module.

[0020] Optionally, the system diagnosis process includes self-diagnosis of the display core of the MCU module, self-diagnosis of the communication core of the MCU module, self-diagnosis of the FPGA module, synchronous mutual diagnosis of the display core and communication core of the MCU module, synchronous periodic diagnosis of the display core and communication core of the MCU module by the FPGA module, and operation diagnosis of the MCU module and the FPGA module by the CPLD module.

[0021] Optionally, the communication core self-diagnosis of the MCU module specifically includes:

[0022] In the operation mode, the safety display and control integrated system of the nuclear power plant is initialized;

[0023] Loading the startup information of the display core, waiting for the communication core and the display core to run synchronously, and entering a fixed cycle operation;

[0024] Receive the ring network variable data transmitted by the FPGA module, verify the integrity and correctness of the ring network variable data, perform address conversion on the ring network variable data, and write the ring network variable data after address conversion into a shared memory area;

[0025] Periodically sending the control operation variables in the verified ring network variable data to the FPGA module;

[0026] The communication core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis;

[0027] If the diagnosis is normal, the watchdog monitoring is performed and the watchdog waiting time is refreshed;

[0028] If the diagnosis is abnormal, the fault is handled and reported;

[0029] The operation ends and the next cycle is triggered.

[0030] Optionally, the display core self-diagnosis of the MCU module specifically includes:

[0031] In the operation mode, the safety display and control integrated system of the nuclear power plant is initialized;

[0032] Read configuration, load page display content, initialize data memory, and enter fixed cycle operation;

[0033] Receive input signals from the touch screen, read coordinates and provide control feedback;

[0034] Perform GUI drawing process processing, interface rendering calculation, video memory switching vertical synchronization design, and hardware acceleration call processing;

[0035] Read the real-time clock and detect physical key input;

[0036] The display core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis;

[0037] If the diagnosis is normal, data recording is performed;

[0038] If the diagnosis is abnormal, perform fault handling, fault recording and fault reporting;

[0039] The operation ends and the next cycle is triggered.

[0040] Optionally, the fixed period is 40 ms.

[0041] According to the specific embodiments provided in this application, this application discloses the following technical effects:

[0042] The present application provides an integrated safety display and control system for a nuclear power plant, including: an FPGA module, an MCU module and a CPLD module; the FPGA module is connected to the MCU module; the FPGA module and the MCU module are both connected to the CPLD module; the FPGA module is used to collect and transmit ring network data; the MCU module is used for display control and communication processing; the CPLD module is used to diagnose the operating status of the FPGA module and the MCU module; the MCU module includes a display core and a communication core; the display core is used to run GUI graphic functions; the communication core is used to run communication, control and recording functions. The present application provides a safe, stable and reliable safety display unit for the safety level control system of a nuclear power plant. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0044] Figure 1 A schematic diagram of the structure of a safety display and control integrated system for a nuclear power plant provided in one embodiment of the present application;

[0045] Figure 2 To show the core architecture diagram;

[0046] Figure 3 This is the architecture diagram of the communication core;

[0047] Figure 4 This is a schematic diagram of system mode switching;

[0048] Figure 5 This is a flow chart of periodic scheduling processing. DETAILED DESCRIPTION

[0049] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0050] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0051] Based on the relevant technology, this application provides an integrated safety display and control system for a nuclear power plant, which has been successfully applied in nuclear power plants.

[0052] In an exemplary embodiment, Figure 1 As shown, a safety display and control integrated system for a nuclear power plant is provided, comprising:

[0053] FPGA module, MCU module and CPLD module; the FPGA module is connected to the MCU module; the FPGA module and the MCU module are both connected to the CPLD module.

[0054] The FPGA module is used for collecting and transmitting ring network data; the MCU module is used for display control and communication processing; and the CPLD module is used for diagnosing the operating status of the FPGA module and the MCU module.

[0055] The MCU module includes a display core and a communication core; the display core is used to run GUI graphic functions; the communication core is used to run communication, control and recording functions.

[0056] In actual applications, an integrated and modular design approach is adopted. The FPGA module in the system is responsible for ring network data transmission, and the single-core dual-core MCU module is responsible for display control and communication processing. In software architecture design, a layered design scheme is adopted. The dual-core system architecture design is as follows: Figure 2 and Figure 3 An abstract description is given as shown, the algorithm module and the common processing module are encapsulated at the platform layer, and a unified calling interface is provided for the application layer.

[0057] As an optional implementation, a bus or shared memory data exchange method is used between the FPGA module, the MCU module and the CPLD module.

[0058] As an optional implementation manner, the display core and the communication core perform mutual diagnosis based on the same external crystal oscillator source and counter.

[0059] As an optional implementation, the FPGA module is connected to the display core and the communication core respectively; the FPGA module is also used to perform synchronous operation diagnosis of the display core and the communication core according to the synchronization pulse output by the display core and the synchronization pulse output by the communication core.

[0060] In actual applications, the MCU module adopts a dual-core processing architecture, which can dedicate the GUI graphics function to the display core, and run the communication, control and recording functions on the communication core. The dual-core cycle scheduling time (fixed cycle) is controlled within 40ms, which greatly improves the system operation efficiency. Under the dual-core distributed processing software architecture, it can support the drawing of more complex graphics and the optimization design of the control drawing algorithm.

[0061] As a station-level product, the integrated safety display and control system of the nuclear power plant integrates display control and communication functions. It adopts an integrated design method. The single-board card adopts a three-core design of MCU module, FPGA module, and CPLD module. The modules use a bus or shared memory data interaction method. Compared with traditional products, the communication process is simplified, and the speed of data communication and configuration downloading is greatly improved, providing a design basis for the rapid processing of control, display and storage.

[0062] In terms of software security, the dual-core peripherals are used independently with clear functional divisions and run synchronously at a fixed cycle. The data sharing mechanism is designed with data integrity, correctness and access determinism. The mutual diagnosis between the dual cores is based on the same external crystal oscillator source and counter, and synchronous pulses are output to the FPGA module for synchronous operation diagnosis of the communication core and display core. The CPLD module is used to diagnose the operation of the MCU module and the FPGA module.

[0063] As an optional implementation, the integrated safety display and control system of a nuclear power plant includes a state switching process, a system diagnosis process, and a display control and communication data processing process.

[0064] In practical applications, system operations mainly include state switching and system diagnosis.

[0065] As an optional implementation, Figure 4 As shown, the state switching process includes:

[0066] The integrated safety display and control system of the nuclear power plant is powered on and started, and the boot module of the communication core starts the boot process.

[0067] The guiding module switches modes based on the state of the mode switch; the modes include operation mode, maintenance mode and download mode. The condition for switching modes is the system mode button, and the mode switching selection is performed according to the manual setting number.

[0068] When in operation mode, the integrated safety display and control system of the nuclear power plant enters normal operation state, the communication core starts the communication function of the operation mode, and the display core performs display work until the system state is manually switched or abnormal.

[0069] When the system operation mode is switched from the operation mode to the maintenance mode, the safety display and control integrated system of the nuclear power plant performs maintenance work. The maintenance mode can be switched directly after startup or the system can be manually switched in the operation mode.

[0070] When in the download mode, the communication core starts the communication function of the download mode to download the configuration data. The download mode can be switched directly after startup or the system can be manually switched in the running mode.

[0071] In operation mode or maintenance mode, when the integrated safety display and control system of the nuclear power plant operates abnormally, fault processing is triggered, and the fault processing module of the communication core performs fault diagnosis and data recording, resets the mode after diagnosis, and restarts the boot module.

[0072] A multi-core design scheme is adopted. The design of diagnostic content and diagnostic logic should more comprehensively ensure the certainty and correctness of system operation. The system diagnostic process includes self-diagnosis of the display core of the MCU module, self-diagnosis of the communication core of the MCU module, self-diagnosis of the FPGA module, synchronous mutual diagnosis of the display core and communication core of the MCU module, synchronous periodic diagnosis of the display core and communication core of the MCU module by the FPGA module, and operation diagnosis of the MCU module and the FPGA module by the CPLD module.

[0073] After the dual cores enter the fixed cycle operation mode, the specific implementation steps are as follows Figure 5 The communication core self-diagnosis of the MCU module specifically includes:

[0074] In the operation mode, the integrated safety display and control system of the nuclear power plant is initialized, and the hardware and communication peripherals are initialized.

[0075] The startup information of the display core is loaded, and the communication core and the display core are waited to run synchronously and enter a fixed cycle operation.

[0076] Receive the ring network variable data transmitted by the FPGA module, verify the integrity and correctness of the ring network variable data, perform address conversion on the ring network variable data, and write the ring network variable data after address conversion into a shared memory area.

[0077] The control operation variables in the verified ring network variable data are periodically sent to the FPGA module. That is, the ring network variable data is sent, and the control operation variables are periodically sent to the FPGA module.

[0078] The communication core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis.

[0079] Data storage management, recording of historical data and operation information.

[0080] If the diagnosis is normal, the watchdog monitoring is performed and the watchdog waiting time is refreshed. In actual applications, if the diagnosis is normal, the watchdog feeding operation is performed after the watchdog cycle is completed and the watchdog waiting time is refreshed.

[0081] If the diagnosis is abnormal, the fault is handled and reported.

[0082] The operation ends and the next cycle is triggered. The entire cycle is designed to complete all work within 40 milliseconds.

[0083] like Figure 5 As shown in the figure, the display core self-diagnosis of the MCU module specifically includes:

[0084] In the operation mode, the integrated safety display and control system of the nuclear power plant is initialized, and the hardware and display peripherals are initialized.

[0085] Read configuration, load page display content, initialize data memory, and enter fixed cycle operation.

[0086] Receive input signals from the touch screen, read coordinates and provide control feedback.

[0087] Perform GUI drawing process processing, interface rendering calculation, video memory switching vertical synchronization design and hardware acceleration call processing.

[0088] Read the real-time clock (RTC clock) and detect physical key input.

[0089] The display core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis;

[0090] If the diagnosis is normal, data recording is performed.

[0091] If the diagnosis is abnormal, perform fault handling, fault recording and fault reporting.

[0092] When the operation is completed, the next cycle process is triggered. The entire cycle is designed to complete all work within 40 milliseconds.

[0093] The following is a further explanation of the system operation logic of this application:

[0094] 1. After the system of the present application is powered on and started, the communication core encapsulates the boot module, loads it according to the mode, starts the display core, executes the power-on initialization process, loads the configuration information of the configuration page and enters periodic operation.

[0095] 2. The operating environment initialization is only executed once after each power-on startup. After the initialization is completed, the task management module starts to perform the initialization process of various tasks. The tasks in this system are different from the program execution units in the usual sense, but are the module division of program functions in this system.

[0096] 3. Both dual-core architectures adopt a layered approach. The platform layer is a common calling module. The driver layer and platform layer common modules of the two cores can be reused. The startup process has a sequence, and the cycle operation time is 40ms, maintaining synchronous operation.

[0097] 4. The fault handling module consists of a fault diagnosis unit, a fault recording unit and a fault handling unit. When it is determined that the fault handling conditions are met, fault handling is performed, including abnormal recovery and fault reporting of faulty peripherals.

[0098] 5. Enter the application processing process. The application processing includes the necessary information processing and data reception and transmission of the security display interface, as well as real-time refresh of the UI interface display, feedback from the touch screen and physical buttons, and fault diagnosis process for each cycle.

[0099] 1) The application processing is designed as a periodic loop processing. All processing processes are accurate to milliseconds. All task processing is designed to be completed within 40 milliseconds of the entire cycle and strictly follows the 40ms cycle.

[0100] 2) The fault handling design value of the periodic cycle will enter the fault process only after the self-diagnosis output results meet the fault handling conditions. Serious fault events trigger the loop exit.

[0101] 3) After the fault is processed, the loop is terminated and the mode switching judgment is entered. After the fault is processed, the mode is reset.

[0102] 4) Self-diagnosis alarm processing, sending alarm diagnosis information to the engineer station, and the cycle continues. The engineer station displays the detected anomalies on the terminal screen, and the operator manually analyzes and handles the anomalies.

[0103] 5) Operation monitoring design: CPLD monitors the operation of FPGA and MCU, FPGA monitors the operation status and operation cycle of the communication core. By monitoring the changes and time of the output pulses of the communication core, the operation correctness of the communication core is monitored. The communication core and display core related diagnostic synchronization operation time, the judgment accuracy can be accurate to millisecond level.

[0104] The advantages of the present invention compared with the related art are:

[0105] For safety-level display equipment in nuclear power plants, the decentralized mode greatly increases the process and complexity of information processing, reduces the safety of the equipment, affects the efficiency of display information processing, reduces the delay accuracy of time transmission and response, and may also lead to unreliable time due to frequent key operations. The safety-level display and control integrated system for nuclear power plants proposed in this application has display control, communication and logic functions completed by different cores, and each core uses a shared RAM or bus method. The software adopts a fixed-cycle uninterrupted operation design.

[0106] The display core is dedicated to running the secure display framework and makes full use of the core's built-in hardware 2D acceleration and image decoding functions. The independent dirty matrix and anti-aliasing algorithm design greatly reduces software complexity while ensuring drawing performance.

[0107] Secure communication is based on the design principles of determinism, reliability, and independence, reducing the risk of communication data errors and process errors.

[0108] The highly integrated design greatly simplifies the data flow, and improves the communication rate and download process efficiency.

[0109] Self-diagnosis is designed inside the chip and performs related supervision between each core to ensure the correctness of parameters, data, task operation and key peripherals during system operation.

[0110] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0111] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and core ideas of this application. At the same time, for those skilled in the art, according to the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting this application.

Claims

1. A safety display and control integrated system for a nuclear power plant, characterized in that: include: FPGA module, MCU module and CPLD module; the FPGA module is connected to the MCU module; the FPGA module and the MCU module are both connected to the CPLD module; The FPGA module is used to collect and transmit ring network data; the MCU module is used for display control and communication processing; the CPLD module is used to diagnose the operating status of the FPGA module and the MCU module; The MCU module includes a display core and a communication core; the display core is used to run GUI graphic functions; the communication core is used to run communication, control and recording functions.

2. The integrated safety display and control system for a nuclear power plant according to claim 1, characterized in that: The FPGA module, the MCU module and the CPLD module use a bus or shared memory data exchange method.

3. The integrated safety display and control system for a nuclear power plant according to claim 1, characterized in that: The display core and the communication core perform mutual diagnosis based on the same external crystal oscillator source and counter.

4. The integrated safety display and control system for a nuclear power plant according to claim 1, characterized in that: The FPGA module is connected to the display core and the communication core respectively; the FPGA module is also used to perform synchronous operation diagnosis of the display core and the communication core according to the synchronous pulse output by the display core and the synchronous pulse output by the communication core.

5. The integrated safety display and control system for a nuclear power plant according to claim 1, characterized in that: It includes state switching process, system diagnosis process, display control and communication data processing process.

6. The integrated safety display and control system for a nuclear power plant according to claim 5, characterized in that: The state switching process includes: The integrated safety display and control system of the nuclear power plant is powered on and started, and the boot module of the communication core starts the boot process; The guiding module switches the mode based on the state of the mode switch; the modes include operation mode, maintenance mode and download mode; When in the operation mode, the integrated safety display and control system of the nuclear power plant enters a normal operation state, the communication core starts the communication function of the operation mode, and the display core performs display work; When in maintenance mode, the integrated safety display and control system of the nuclear power plant performs maintenance work; When in the download mode, the communication core starts the communication function of the download mode; In operation mode or maintenance mode, when the integrated safety display and control system of the nuclear power plant operates abnormally, fault processing is triggered, and the fault processing module of the communication core performs fault diagnosis and data recording, resets the mode after diagnosis, and restarts the boot module.

7. The integrated safety display and control system for a nuclear power plant according to claim 5, characterized in that: The system diagnosis process includes self-diagnosis of the display core of the MCU module, self-diagnosis of the communication core of the MCU module, self-diagnosis of the FPGA module, synchronous mutual diagnosis of the display core and communication core of the MCU module, synchronous periodic diagnosis of the display core and communication core of the MCU module by the FPGA module, and operation diagnosis of the MCU module and the FPGA module by the CPLD module.

8. The integrated safety display and control system for a nuclear power plant according to claim 7, characterized in that: The communication core self-diagnosis of the MCU module specifically includes: In the operation mode, the safety display and control integrated system of the nuclear power plant is initialized; Loading the startup information of the display core, waiting for the communication core and the display core to run synchronously, and entering a fixed cycle operation; Receive the ring network variable data transmitted by the FPGA module, verify the integrity and correctness of the ring network variable data, perform address conversion on the ring network variable data, and write the ring network variable data after address conversion into a shared memory area; Periodically sending the control operation variables in the verified ring network variable data to the FPGA module; The communication core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis; If the diagnosis is normal, the watchdog monitoring is performed and the watchdog waiting time is refreshed; If the diagnosis is abnormal, the fault is handled and reported; The operation ends and the next cycle is triggered.

9. The integrated safety display and control system for a nuclear power plant according to claim 7, characterized in that: The display core self-diagnosis of the MCU module specifically includes: In the operation mode, the safety display and control integrated system of the nuclear power plant is initialized; Read configuration, load page display content, initialize data memory, and enter fixed cycle operation; Receive input signals from the touch screen, read coordinates and provide control feedback; Perform GUI drawing process processing, interface rendering calculation, video memory switching vertical synchronization design, and hardware acceleration call processing; Read the real-time clock and detect physical key input; The display core performs periodic self-diagnosis; the diagnosis content includes CPU diagnosis, timer diagnosis, task scheduling time diagnosis, synchronization time diagnosis and key register content diagnosis; If the diagnosis is normal, data recording is performed; If the diagnosis is abnormal, perform fault handling, fault recording and fault reporting; The operation ends and the next cycle is triggered.

10. The integrated safety display and control system for a nuclear power plant according to claim 8 or 9, characterized in that: The fixed period is 40 ms.

Images