FPGA (Field Programmable Gate Array)-based undisturbed incremental downloading method and system for nuclear security level control station

Abstract

The invention discloses a nuclear security level control station undisturbed increment downloading method and system based on an FPGA, and relates to the field of control station undisturbed increment downloading design, and the method comprises the steps: receiving a new version configuration through an engineer station, generating an increment downloading package through the engineer station, and executing increment downloading, the maintenance interface module receives the increment lower package and analyzes the increment lower package to obtain a destination address; updating configuration information of the maintenance interface module, the controller, the input class module and the output class module according to the destination address; the method comprises the following steps: performing incremental downloading on a target module, sending secondary confirmation through an engineer station when the new version configuration of a controller is correctly executed, and executing master-slave switching, execution according to the new version configuration and bus output after the engineer station sends the secondary confirmation, thereby realizing upgrading or incremental downloading of the nuclear industrial control station. On-line increment downloading can be carried out without disturbing output, and operation is carried out according to new configuration after increment downloading is completed.

Description

Technical Field

[0001] The present application relates to the field of non-intrusive incremental download design of control stations, and in particular to a non-intrusive incremental download method and system for a nuclear safety-level control station based on FPGA. Background Art

[0002] In the field of nuclear industry control, high requirements are placed on system safety and reliability. The controllers of the Harmony system and Dragon Scale system are all set to redundant configuration. The difference is that Dragon Core is based on Field Programmable Gate Array (FPGA) technology, while the other two systems are based on CPU technology.

[0003] When the control station is to be upgraded or incrementally downloaded, the entire control station must be stopped, which will cause the output to fail completely, which is an unacceptable situation for the nuclear power plant. At the same time, how to ensure that the output is not disturbed and the nuclear power plant is executed in a safe state during this process is a problem that needs to be faced and solved. The Harmony system controls the slave in download mode, and then uses the engineer station to download the slave first. After the application data and variable force of the host are synchronized, the master-slave switch is triggered; then the original host is controlled in download mode and downloaded through the engineer station. After synchronizing the application data and variable force state of the new configuration of the original slave, the master-slave switch is switched to complete the upgrade process of the entire controller. The Dragon Scale system has not yet implemented a solution and can only be upgraded after bypass during the overhaul of the nuclear power plant.

[0004] The redundant controller is based on the parallel processing capability of FPGA technology. The acquisition and import, redundant operation synchronization, data export and the time slot reception and transmission on the bus communication are all executed in parallel within the same processing cycle, thus Short processing cycle and fast response time are the significant advantages of FPGA technology. The redundant controller can automatically synchronize the configuration of the powered-up controller at power-up, and can automatically synchronize application data and variable force status at each processing cycle. Summary of the invention

[0005] The purpose of the present application is to provide a method and system for non-intrusive incremental downloading of a nuclear safety-level control station based on FPGA. By adopting FPGA technology, it is possible to realize the upgrade or incremental downloading of a nuclear industrial control station, and to perform online incremental downloading without disturbance output, and to operate according to the new configuration after the incremental downloading is completed.

[0006] To achieve the above objectives, this application provides the following solutions.

[0007] In a first aspect, the present application provides a method for non-intrusive incremental downloading of a nuclear safety-level control station based on FPGA, comprising the following steps.

[0008] In response to the upgrade request or incremental download request of the control station, a new version configuration is received from the engineer station; the control station includes a maintenance interface module, a controller, an input module and an output module.

[0009] Generate an incremental download package through the engineering station and perform incremental download.

[0010] The incremental downloading package is received through the maintenance interface module of the control station, and the incremental downloading package is parsed to obtain the destination address.

[0011] According to the destination address, the maintenance interface module is used to determine whether it is the incremental data of the maintenance interface module, and a first judgment result is obtained; if the first judgment result is yes, the incremental download package is stored in the maintenance interface module, and the configuration information of the maintenance interface module is updated; if the first judgment result is no, the incremental download package is forwarded to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, the configuration information is updated.

[0012] The target module is incrementally downloaded, and when the new version of the controller configuration is correctly executed, a secondary confirmation is sent through the engineer station; after the engineer station sends the secondary confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version configuration of the updated master card and the new version of the application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version configuration is executed and the bus is output.

[0013] Optionally, when the target module is a controller, after the target module obtains the incremental data, it updates the configuration information, specifically including:

[0014] The slot 1 controller of the control station is placed in maintenance mode, and after receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package; the slot 1 controller is a slave card of the control station;

[0015] After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration of the slot 0 controller; the slot 0 controller is the main card of the control station;

[0016] After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration from the slot 0 controller, the slot 1 controller operates according to the new version configuration, and the bus does not output;

[0017] Switch to the 1-slot controller through the online monitoring of the engineer station, and monitor the running process of the new version configuration of the 1-slot controller;

[0018] Determine whether the new version configuration is executed correctly; if the new version configuration is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration is not executed correctly, the control engineer station modifies the configuration to obtain the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, and returns to the step of "putting the slot 1 controller of the control station into maintenance mode, and the slot 1 controller enters the download state after receiving the incremental download package, and completes the download of the incremental download package";

[0019] After receiving the reset frame, the slot 0 controller is reset and the bus stops outputting;

[0020] The slot 1 controller determines that the slot 0 is reset, automatically performs master-slave switching, and the slot 1 controller automatically switches to the updated master card and runs according to the new version configuration; through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 controller automatically synchronizes the new version configuration, as well as the application data and variable forced status under the new version;

[0021] After the 0-slot controller automatically synchronizes the new version of the configuration, the master-slave switch is executed. The 0-slot controller switches from the updated slave card to the master card, and the bus output operates normally according to the new version of the configuration. The 1-slot controller switches from the updated master card to the slave card, and the bus output operates normally according to the new version of the configuration.

[0022] Optionally, when the target module is an input module, after the target module obtains the incremental data, it updates the configuration information, specifically including:

[0023] In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the input class module, and the data packet is analyzed to determine whether it is an incremental download packet to obtain a second judgment result;

[0024] If the second judgment result is yes, the input class module stores the new version configuration in the external memory and updates the channel configuration information;

[0025] If the second judgment result is no, determining whether the data packet is an incremental completion packet to obtain a third judgment result;

[0026] If the third judgment result is yes, the input module collects data normally according to the new version configuration channel;

[0027] If the third judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0028] Optionally, when the target module is an output module, after the target module obtains the incremental data, it updates the configuration information, specifically including:

[0029] In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the output class module, and the data packet is analyzed to determine whether it is an incremental download packet, thereby obtaining a fourth determination result;

[0030] If the fourth judgment result is yes, the output class module stores the new version configuration in the external memory and updates the channel configuration information;

[0031] If the fourth judgment result is no, judging whether the data is an incremental completion packet, and obtaining a fifth judgment result;

[0032] If the fifth judgment result is yes, the output module is configured according to the new version, normally receives the data sent by the controller on the bus, and updates the channel output according to the bus data;

[0033] If the fifth judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0034] Optionally, forwarding the incremental download package to the target module through the maintenance interface module specifically includes: forwarding the incremental download package to the target module through the maintenance interface module in a broadcast manner.

[0035] In the second aspect, the present application provides a non-intrusive incremental download system for a nuclear safety-level control station based on FPGA, including a control station and an engineer station; the control station includes a maintenance interface module, a controller, an input module and an output module.

[0036] The engineer station is used to: modify the configuration to obtain a new version of the configuration; generate an incremental download package, and perform incremental download.

[0037] The maintenance interface module is used to: receive the incremental download package, and parse the incremental download package to obtain the destination address; according to the destination address, determine whether it is the incremental data of the maintenance interface module through the maintenance interface module to obtain a first judgment result; if the first judgment result is yes, store the incremental download package in the maintenance interface module, and update the configuration information of the maintenance interface module; if the first judgment result is no, forward the incremental download package to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, it updates the configuration information.

[0038] The engineer station is also used to: send a secondary confirmation when the new version of the controller configuration is correctly executed; when the engineer station sends the secondary confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version of the updated master card configuration and the new version of the application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version of the configuration is executed and the bus output is performed.

[0039] Optionally, the FPGA-based nuclear safety-level control station non-intrusive incremental download system further includes:

[0040] The slot 1 controller of the control station is placed in maintenance mode, and after receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package; the slot 1 controller is a slave card of the control station;

[0041] After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration of the slot 0 controller; the slot 0 controller is the main card of the control station;

[0042] After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration from the slot 0 controller, the slot 1 controller operates according to the new version configuration, and the bus does not output;

[0043] Switch to the 1-slot controller through the online monitoring of the engineer station, and monitor the running process of the new version configuration of the 1-slot controller;

[0044] Determine whether the new version configuration is executed correctly; if the new version configuration is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration is not executed correctly, the control engineer station modifies the configuration to obtain the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, and returns to the step of "putting the slot 1 controller of the control station into maintenance mode, and the slot 1 controller enters the download state after receiving the incremental download package, and completes the download of the incremental download package";

[0045] After receiving the reset frame, the slot 0 controller is reset and the bus stops outputting;

[0046] The slot 1 controller determines that the slot 0 is reset, automatically performs master-slave switching, and the slot 1 controller automatically switches to the updated master card and runs according to the new version configuration; through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 controller automatically synchronizes the new version configuration, as well as the application data and variable forced status under the new version;

[0047] After the 0-slot controller automatically synchronizes the new version of the configuration, the master-slave switch is executed. The 0-slot controller switches from the updated slave card to the master card, and the bus output operates normally according to the new version of the configuration. The 1-slot controller switches from the updated master card to the slave card, and the bus output operates normally according to the new version of the configuration.

[0048] Optionally, the FPGA-based nuclear safety-level control station non-intrusive incremental download system further includes:

[0049] In the maintenance mode, the input class module receives the data packet forwarded by the maintenance interface module, analyzes and determines whether the data packet is an incremental download packet, and obtains a second determination result;

[0050] If the second judgment result is yes, the input class module stores the new version configuration in the external memory and updates the channel configuration information;

[0051] If the second judgment result is no, determining whether the data packet is an incremental completion packet to obtain a third judgment result;

[0052] If the third judgment result is yes, the input module collects data normally according to the new version configuration channel;

[0053] If the third judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0054] Optionally, the FPGA-based nuclear safety-level control station non-intrusive incremental download system further includes:

[0055] In the maintenance mode, the output class module receives the data packet forwarded by the maintenance interface module, analyzes and determines whether the data packet is an incremental download packet, and obtains a fourth determination result;

[0056] If the fourth judgment result is yes, the output class module stores the new version configuration in the external memory and updates the channel configuration information;

[0057] If the fourth judgment result is no, judging whether the data is an incremental completion packet, and obtaining a fifth judgment result;

[0058] If the fifth judgment result is yes, the output module is configured according to the new version, normally receives the data sent by the controller on the bus, and updates the channel output according to the bus data;

[0059] If the fifth judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0060] Optionally, the maintenance interface module forwards the incremental download package to the target module by broadcasting.

[0061] According to the specific embodiments provided in this application, this application discloses the following technical effects:

[0062] The present application provides a non-intrusive incremental downloading method and system for a nuclear safety-level control station based on FPGA, which receives a new version of configuration on an engineer station, generates an incremental downloading package through the engineer station, executes incremental downloading, receives the incremental downloading package through the maintenance interface module of the control station, and parses the incremental downloading package to obtain the destination address, and updates the configuration information of the maintenance interface module, controller, input class module and output class module according to the destination address; incremental downloading is performed on the target module, and when the new version of the controller configuration is correctly executed, a secondary confirmation is sent through the engineer station. After the engineer station sends the secondary confirmation, the controller in the control station automatically switches from master to slave, the master card switches to the updated slave card, the slave card switches to the updated master card, and the updated slave card automatically synchronizes the new version of the updated master card configuration and the new version of the application data and variable status information. After the updated slave card is initialized, the controller automatically switches from master to slave, the updated slave card switches to the master card, the updated master card switches to the slave card, and executes according to the new version of the configuration, and the bus outputs. The main control, logic operation and communication functions are realized through the hardware architecture based on FPGA technology. The stable operation of the system does not rely on the microprocessor and software. It can realize the upgrade or incremental download of nuclear industrial control stations, and can perform online incremental download without interference output, and run according to the new configuration after the incremental download is completed. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0064] Figure 1 A flowchart of a non-intrusive incremental download method for a nuclear safety-level control station based on FPGA provided in one embodiment of the present application;

[0065] Figure 2 A schematic diagram of a specific process of a non-intrusive incremental download method for a nuclear safety-level control station based on FPGA provided in an embodiment of the present application;

[0066] Figure 3 A schematic diagram of a controller non-disturbance incremental download process provided by an embodiment of the present application;

[0067] Figure 4 A schematic diagram of a non-intrusive incremental download process of an input module provided in an embodiment of the present application;

[0068] Figure 5A schematic diagram of a non-intrusive incremental download process of an output module provided in an embodiment of the present application;

[0069] Figure 6 A schematic diagram of an old version configuration V1 in a download mode or the last successful incremental download provided in an embodiment of the present application;

[0070] Figure 7 A schematic diagram of incrementally downloading a new version configuration V2 in a maintenance mode provided by an embodiment of the present application;

[0071] Figure 8 A schematic diagram of the structure of a non-intrusive incremental download system for a nuclear safety-level control station based on FPGA provided in one embodiment of the present application. DETAILED DESCRIPTION

[0072] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0073] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0074] In an exemplary embodiment, Figure 1 and Figure 2 As shown, a method for non-intrusive incremental downloading of a nuclear safety-level control station based on FPGA is provided, and the method includes the following steps 101 to 105.

[0075] Step 101: In response to an upgrade request or incremental download request from a control station, a new version configuration V2 is received from an engineer station; the control station includes a maintenance interface module, a controller, an input module, and an output module.

[0076] Step 102: Generate an incremental download package through the engineer station and perform incremental download.

[0077] Step 103: Receive the incremental downloading package through the maintenance interface module of the control station, and parse the incremental downloading package to obtain the destination address.

[0078] Step 104: According to the destination address, determine whether it is the incremental data of the maintenance interface module through the maintenance interface module to obtain a first judgment result; if the first judgment result is yes, store the incremental download package in the maintenance interface module, and update the configuration information of the maintenance interface module; if the first judgment result is no, forward the incremental download package to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, it updates the configuration information.

[0079] Step 105: Incrementally download the target module, and send a second confirmation through the engineer station when the new version of the controller configuration is correctly executed; after the engineer station sends the second confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version configuration of the updated master card and the new version of the application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version configuration is executed and the bus is output.

[0080] By implementing the above steps 101 to 105, the main control, logic operation and communication functions are realized through the hardware architecture based on FPGA technology. The stable operation of the system does not rely on the microprocessor and software. It can realize the upgrade or incremental download of the nuclear industry control station, and can perform online incremental download without interference output, and run according to the new configuration after the incremental download is completed.

[0081] In the distributed control system (DCS) system in the nuclear industry control field, when the system is running, the control station needs to be upgraded or incrementally downloaded. The user modifies the configuration according to the application, compiles it, and then performs the incremental download operation. After the incremental download is completed, the user monitors and confirms the correctness of the operation of the new version of the configuration V2 at the engineer station. If it is correct, the new version of the configuration V2 will be confirmed again to take effect. At the same time, during the entire incremental download process, the output module output of the control station maintains the valid value of the previous cycle, and the input data sent to the controller maintains the valid value of the previous cycle.

[0082] In step 101, after the system is powered on and running, in maintenance mode, the control station needs to be upgraded or incrementally downloaded. The user modifies the configuration according to application requirements on the engineer station and compiles successfully.

[0083] According to the destination address, the maintenance interface module determines whether it is the incremental data of this module. If so, it is stored in this module and the configuration information is updated; if it is other modules (controller, input module, output module), it is forwarded, and each target module updates the configuration information after obtaining the incremental data. Forwarding the incremental download package to the target module through the maintenance interface module specifically includes: forwarding the incremental download package to the target module through the maintenance interface module in a broadcast manner.

[0084] like Figure 3 As shown, when the target module is a controller, after the target module obtains the incremental data, the configuration information is updated, that is, the incremental download process of the controller specifically includes the following steps 201 to 209.

[0085] Step 201: The slot 1 controller of the control station is placed in maintenance mode. After receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package. The slot 1 controller is a slave card of the control station and operates the bus output normally.

[0086] Step 202: After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration V1 of the slot 0 controller, and performs synchronous data remapping; the slot 0 controller is the main card of the control station and operates the bus output normally.

[0087] Step 203: After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration V1 from the slot 0 controller, the slot 1 controller operates according to the new version configuration V2, and the bus does not output.

[0088] Step 204: The engineer station switches to the slot 1 controller through online monitoring to monitor the running process of the new version configuration V2 of the slot 1 controller.

[0089] Step 205: Determine whether the new version configuration V2 is executed correctly; if the new version configuration V2 is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration V2 is not executed correctly, it prompts "Incremental failure, please check the new configuration", then the control engineer station performs configuration modification, obtains the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, the controller receives the new incremental download package through the maintenance interface module, and returns to step 201, continuing the incremental download operation until the new version configuration is correctly executed.

[0090] Step 206: After receiving the reset frame, the slot 0 controller performs a reset and stops the bus output.

[0091] Step 207: the slot 1 controller determines that the slot 0 is reset, and automatically performs master-slave switching. The slot 1 controller automatically switches to the updated master card and runs according to the new version configuration V2, and the slot 0 controller switches to the updated slave card; through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 control station is controlled to automatically synchronize the new version configuration V2, as well as the application data and variable forced status under the new version.

[0092] Step 208: After the slot 0 controller automatically synchronizes the new version configuration V2, a master-slave switch is executed. The slot 0 controller switches from the updated slave card to the master card, and operates and outputs normally according to the new version configuration V2. The slot 1 controller switches from the updated master card to the slave card, and operates and outputs normally according to the new version configuration V2.

[0093] Step 209: Complete the non-disturbance incremental download of the controller.

[0094] like Figure 4 As shown, when the target module is an input module, after the target module obtains the incremental data, it updates the configuration information, specifically including the following steps 301 to 306:

[0095] Step 301: In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the input class module.

[0096] Step 302: Analyze and determine whether the data packet is an incremental download packet to obtain a second determination result; if the second determination result is yes, go to step 303; if the second determination result is no, go to step 304.

[0097] Step 303: The input class module stores the new version configuration V2 in the external memory and updates the channel configuration information; the channel is collected normally, but the bus output data is not updated. Not updating means that the bus output data maintains the last valid value and transmits it to the controller.

[0098] Step 304: Determine whether the data packet is an incremental completion packet, and obtain a third determination result; if the third determination result is yes, go to step 305; if the third determination result is no, go to step 306.

[0099] Step 305: The input class module collects data normally according to the new version configuration V2 channel, and the bus updates and sends the collected data in real time, that is, transmits it to the controller; the increment is completed.

[0100] Step 306: if the data packet is a maintenance data packet, the operation is performed according to the maintenance data packet, the channel is normally collected, and the bus is updated and sent in real time according to the collected data, that is, transmitted to the controller.

[0101] like Figure 5As shown, when the target module is an output module, after the target module obtains the incremental data, it updates the configuration information, which specifically includes the following steps 401 to 406.

[0102] Step 401: In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the output module.

[0103] Step 402: Analyze and determine whether the data packet is an incremental download packet to obtain a fourth determination result; if the fourth determination result is yes, go to step 403; if the fourth determination result is no, go to step 404.

[0104] Step 403: The output class module stores the new version configuration V2 in the external memory and updates the channel configuration information; the data sent by the controller on the receiving bus is received normally, but the channel output remains unchanged, that is, the output has a calibration value in the previous cycle.

[0105] Step 404: Determine whether the data is an incremental completion package, and obtain a fifth determination result; if the fifth determination result is yes, go to step 405; if the fifth determination result is no, go to step 406.

[0106] Step 405: the output module receives data sent by the controller on the bus normally according to the new version configuration V2, and updates the channel output according to the bus data;

[0107] Step 406: If the data packet is a maintenance data packet, the operation is performed according to the maintenance data packet, the data sent by the controller on the bus is received normally, and the channel output is updated according to the bus data.

[0108] After the engineer station sends the second confirmation, the controller in slot 0 is reset and the new version configuration V2 in slot 1 and the application data and variable status information of V2 are automatically synchronized. After the initialization is completed, the master card is switched and the new version configuration V2 is executed and the bus is output. At this point, the non-intrusive incremental download of the entire control station is completed.

[0109] Combine the following Figure 6 and Figure 7 The non-intrusive incremental downloading method for a nuclear safety-level control station based on FPGA provided in this application is further explained.

[0110] The first step is to power on the system. In maintenance mode, the control station works normally according to the old version configuration V1. The control station includes 1 maintenance interface module, 2 controllers, 1 input module (DI module) (channel 1 enabled) and 1 output module (DO module) (channel 1 enabled). The algorithm logic DI is assigned to the DO output; the old version configuration V1 is as follows Figure 6 .

[0111] The engineer station communicates with the maintenance interface module through M-NET, the maintenance interface module, controller, input module / output module in the control station communicate through M-BUS, the redundant controller is synchronized through S-LINK, and the controller, input module / output module communicate through L-BUS.

[0112] In the second step, the user performs DI input redundancy processing according to the needs, that is, adding a DI module (channel 1 is enabled), executing the algorithm logic, assigning the two DIs to the DO output after passing through the AND gate, and compiling; the old version configuration V1 composition is as follows Figure 7 .

[0113] In the third step, the engineer station generates an incremental download package for the control station, including the migration list in the 1-slot controller, the mapping list with the old version, and the algorithm logic configuration; adds the incremental package for the 1st channel of the DI module, and performs incremental download.

[0114] In the fourth step, the maintenance interface module in the control station obtains the incremental data packet sent by the engineer station and parses the destination address.

[0115] Step 5: If it is an incremental download package of the 1-slot controller (slave card), incremental download is performed and the bus is not output; if it is an incremental download package of a newly added DI module, incremental download is performed.

[0116] Step 6: After all the incremental download packages of the control station generated by the engineer station are downloaded, an incremental completion package is sent.

[0117] Step 7: After receiving the incremental completion packet, the maintenance interface module broadcasts the incremental download completion packet.

[0118] In the eighth step, the controller in slot 1 receives the incremental download completion package, loads and initializes the new version configuration V2, and after completion, automatically synchronizes the application data and variable forced status of the old version configuration V1 in slot 0 according to the mapping list of the old version, and the bus does not output; the newly added DI module receives the incremental download completion package, loads the configuration, and after initialization, channel 1 collects DI data and sends it to the controller on the bus; all redundant controllers on the bus can receive it.

[0119] In the ninth step, the engineer switches the online monitoring to monitor the slot 1 controller to check whether the two DI variables are correct and whether the result after the logical AND of the two DI variables is correct; if not, the increment fails; if correct, the increment configuration is correct, and the engineer station can perform a second confirmation operation to send a reset frame to the slot 0 controller.

[0120] Step 10. After receiving the reset frame, the controller in slot 0 performs a reset (no heartbeat, no bus output). The controller in slot 1 determines that the card is not in place, automatically switches between the master and slave modes, and switches the slave mode to the master mode. The new version of configuration V2 is executed, and the bus is output, indicating that the new version of configuration V2 takes effect.

[0121] Step 11: After the reset of slot 0 controller is completed, the new version configuration V2 of slot 1 controller is automatically synchronized through the synchronization bus. After the initialization is completed, it is executed according to the new version configuration V2 and joins the bus for output. Slot 0 is switched to the master card again, and slot 1 is switched to the slave card.

[0122] At this point, the non-disturbance incremental download of the entire control station is completed.

[0123] The FPGA-based non-intrusive incremental download method for nuclear safety-level control stations provided in this application has high reliability, integrity, certainty, sustainability and economy:

[0124] Determinism: FPGA chips implement the security functions of trusted systems in the form of pure hardware circuits. The execution of hardware circuits is more certain than that of software and operating systems.

[0125] Reliability: After the engineer station compiles and incrementally downloads, there is no need to manually reset the 1-slot controller. The new version of the 1-slot configuration V2 can be downloaded and the forced state of the original configuration application logic variables can be synchronized on the controller. After ensuring that the new version of the configuration V2 is executed correctly, a second manual confirmation operation is performed to ensure the safety and reliability of the system. The 0-slot controller automatically synchronizes the new version of the 1-slot configuration V2 of the 1-slot controller. The process is simple and reliable.

[0126] Sustainability and economy: FPGA logic code and register-level design compiled using hardware description language can be ported to new FPGA chips with only adaptive modifications, which can retain the investment in software design to the greatest extent.

[0127] Based on the same inventive concept, the embodiment of the present application also provides a FPGA-based nuclear safety-level control station non-disturbance incremental download system for implementing the FPGA-based nuclear safety-level control station non-disturbance incremental download method involved above. The implementation scheme for solving the problem provided by the system is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more FPGA-based nuclear safety-level control station non-disturbance incremental download system embodiments provided below can refer to the limitations of the FPGA-based nuclear safety-level control station non-disturbance incremental download method above, and will not be repeated here.

[0128] In an exemplary embodiment, Figure 8 As shown, a non-intrusive incremental download system for a nuclear safety-level control station based on FPGA is provided, including a control station and an engineer station; the control station includes a maintenance interface module, a controller, an input module and an output module.

[0129] The engineer station is used to: modify the configuration to obtain a new version of the configuration V2; generate an incremental download package, and perform incremental download.

[0130] The maintenance interface module is used to: receive the incremental download package, and parse the incremental download package to obtain the destination address; according to the destination address, determine whether it is the incremental data of the maintenance interface module through the maintenance interface module to obtain a first judgment result; if the first judgment result is yes, store the incremental download package in the maintenance interface module, and update the configuration information of the maintenance interface module; if the first judgment result is no, forward the incremental download package to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, it updates the configuration information.

[0131] The engineer station is also used to: send a secondary confirmation when the new version configuration V2 of the controller is correctly executed; when the engineer station sends the secondary confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version configuration of the updated master card and the new version of application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version configuration is executed and the bus output is performed.

[0132] As an optional implementation, the non-intrusive incremental download process of the controller is as follows:

[0133] The slot 1 controller of the control station is placed in maintenance mode, and after receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package; the slot 1 controller is a slave card of the control station;

[0134] After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration of the slot 0 controller; the slot 0 controller is the main card of the control station;

[0135] After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration from the slot 0 controller, the slot 1 controller runs according to the new version configuration V2, and the bus does not output;

[0136] Switch to the 1-slot controller through the online monitoring of the engineer station, and monitor the running process of the new version configuration V2 of the 1-slot controller;

[0137] Determine whether the new version configuration V2 is executed correctly; if the new version configuration V2 is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration V2 is not executed correctly, the control engineer station performs configuration modification to obtain the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, and returns to the step of "putting the slot 1 controller of the control station into maintenance mode, and the slot 1 controller enters the download state after receiving the incremental download package, and completes the download of the incremental download package";

[0138] After receiving the reset frame, the slot 0 controller is reset and the bus stops outputting;

[0139] The slot 1 controller determines that the slot 0 is reset, and automatically performs master-slave switching. The slot 1 controller automatically switches to the updated master card and runs according to the new version configuration V2. Through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 controller automatically synchronizes the new version configuration V2, as well as the application data and variable forced status under the new version.

[0140] After the slot 0 controller automatically synchronizes the new version of configuration V2, the master-slave switch is executed. The slot 0 controller switches from the updated slave card to the master card, and operates the bus output normally according to the new version of configuration V2. The slot 1 controller switches from the updated master card to the slave card, and operates the bus output normally according to the new version of configuration V2.

[0141] The FPGA-based nuclear safety-level control station non-intrusive incremental download system also includes: in maintenance mode, the input class module receives the data packet forwarded by the maintenance interface module, parses and determines whether the data packet is an incremental download packet, and obtains a second judgment result; if the second judgment result is yes, the input class module stores the new version configuration V2 in an external memory and updates the channel configuration information; if the second judgment result is no, it determines whether the data packet is an incremental completion packet to obtain a third judgment result; if the third judgment result is yes, the input class module collects normally according to the new version configuration V2 channel; if the third judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0142] The FPGA-based nuclear safety-level control station non-intrusive incremental download system also includes: in maintenance mode, the output class module receives the data packet forwarded by the maintenance interface module, parses and determines whether the data packet is an incremental download packet, and obtains a fourth judgment result; if the fourth judgment result is yes, the output class module stores the new version configuration V2 in an external memory and updates the channel configuration information; if the fourth judgment result is no, it determines whether the data is an incremental completion packet to obtain a fifth judgment result; if the fifth judgment result is yes, the output class module receives the data sent by the controller on the bus normally according to the new version configuration V2, and updates the channel output according to the bus data; if the fifth judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

[0143] The maintenance interface module forwards the incremental download package to the target module by broadcasting.

[0144] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0145] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and core ideas of this application. At the same time, for those skilled in the art, according to the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting this application.

Claims

1. A non-intrusive incremental download method for a nuclear safety-level control station based on FPGA, characterized in that: The FPGA-based non-intrusive incremental download method for a nuclear safety-level control station includes: In response to an upgrade request or incremental download request from a control station, a new version of configuration is received from an engineer station; the control station includes a maintenance interface module, a controller, an input module, and an output module; Generate an incremental download package through the engineer station and perform incremental download; Receiving the incremental downloading package through the maintenance interface module of the control station, and parsing the incremental downloading package to obtain a destination address; According to the destination address, the maintenance interface module is used to determine whether it is the incremental data of the maintenance interface module, and a first determination result is obtained; if the first determination result is yes, the incremental download package is stored in the maintenance interface module, and the configuration information of the maintenance interface module is updated; if the first determination result is no, the incremental download package is forwarded to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, the configuration information is updated; The target module is incrementally downloaded, and when the new version of the controller configuration is correctly executed, a secondary confirmation is sent through the engineer station; after the engineer station sends the secondary confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version configuration of the updated master card and the new version of the application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version configuration is executed and the bus is output.

2. The non-intrusive incremental download method for a nuclear safety-level control station based on FPGA according to claim 1 is characterized in that: When the target module is a controller, after obtaining the incremental data, the target module updates the configuration information, including: The slot 1 controller of the control station is placed in maintenance mode, and after receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package; the slot 1 controller is a slave card of the control station; After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration of the slot 0 controller; the slot 0 controller is the main card of the control station; After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration from the slot 0 controller, the slot 1 controller operates according to the new version configuration, and the bus does not output; Switch to the 1-slot controller through the online monitoring of the engineer station, and monitor the running process of the new version configuration of the 1-slot controller; Determine whether the new version configuration is executed correctly; if the new version configuration is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration is not executed correctly, the control engineer station performs configuration modification to obtain the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, and returns to the step of "putting the slot 1 controller of the control station into maintenance mode, and the slot 1 controller enters the download state after receiving the incremental download package, and completes the download of the incremental download package"; After receiving the reset frame, the slot 0 controller is reset and the bus stops outputting; The slot 1 controller determines that the slot 0 is reset, automatically performs master-slave switching, and the slot 1 controller automatically switches to the updated master card and runs according to the new version configuration; through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 controller automatically synchronizes the new version configuration, as well as the application data and variable forced status under the new version; After the 0-slot controller automatically synchronizes the new version of the configuration, the master-slave switch is executed. The 0-slot controller switches from the updated slave card to the master card, and the bus output operates normally according to the new version of the configuration. The 1-slot controller switches from the updated master card to the slave card, and the bus output operates normally according to the new version of the configuration.

3. The non-intrusive incremental download method for a nuclear safety-level control station based on FPGA according to claim 1 is characterized in that: When the target module is an input module, after obtaining the incremental data, the target module updates the configuration information, including: In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the input class module, and the data packet is analyzed to determine whether it is an incremental download packet to obtain a second judgment result; If the second judgment result is yes, the input class module stores the new version configuration in the external memory and updates the channel configuration information; If the second judgment result is no, determining whether the data packet is an incremental completion packet to obtain a third judgment result; If the third judgment result is yes, the input module collects data normally according to the new version configuration channel; If the third judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

4. The non-intrusive incremental download method for a nuclear safety-level control station based on FPGA according to claim 1 is characterized in that: When the target module is an output module, after obtaining the incremental data, the target module updates the configuration information, including: In the maintenance mode, the data packet forwarded by the maintenance interface module is received through the output class module, and the data packet is analyzed to determine whether it is an incremental download packet, thereby obtaining a fourth determination result; If the fourth judgment result is yes, the output class module stores the new version configuration in the external memory and updates the channel configuration information; If the fourth judgment result is no, judging whether the data is an incremental completion packet, and obtaining a fifth judgment result; If the fifth judgment result is yes, the output module is configured according to the new version, normally receives the data sent by the controller on the bus, and updates the channel output according to the bus data; If the fifth judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

5. The non-intrusive incremental download method for a nuclear safety-level control station based on FPGA according to claim 1 is characterized in that: Forwarding the incremental download package to the target module through the maintenance interface module specifically includes: The incremental download package is forwarded to the target module through the maintenance interface module in a broadcasting manner.

6. A non-intrusive incremental download system for nuclear safety-level control stations based on FPGA, characterized in that: The FPGA-based nuclear safety-level control station non-intrusive incremental download system includes a control station and an engineer station; the control station includes a maintenance interface module, a controller, an input module and an output module; The engineer station is used to: modify the configuration to obtain a new version of the configuration; generate an incremental download package and perform incremental download; The maintenance interface module is used to: receive the incremental download package, and parse the incremental download package to obtain a destination address; According to the destination address, the maintenance interface module is used to determine whether it is the incremental data of the maintenance interface module, and a first determination result is obtained; if the first determination result is yes, the incremental download package is stored in the maintenance interface module, and the configuration information of the maintenance interface module is updated; if the first determination result is no, the incremental download package is forwarded to the target module through the maintenance interface module; the target module is a controller, an input module or an output module, and after the target module obtains the incremental data of the incremental download package, the configuration information is updated; The engineer station is also used to: send a secondary confirmation when the new version of the controller configuration is correctly executed; when the engineer station sends the secondary confirmation, the controller in the control station automatically executes the master card switching, the master card is switched to the updated slave card, the slave card is switched to the updated master card, and the updated slave card automatically synchronizes the new version of the updated master card configuration and the new version of the application data and variable status information; after the updated slave card is initialized, the controller automatically executes the master-slave switching, the updated slave card is switched to the master card, the updated master card is switched to the slave card, and the new version of the configuration is executed and the bus output is performed.

7. The FPGA-based nuclear safety-level control station non-intrusive incremental download system according to claim 6 is characterized in that: The FPGA-based nuclear safety-level control station non-intrusive incremental download system also includes: The slot 1 controller of the control station is placed in maintenance mode, and after receiving the incremental download package, the slot 1 controller enters the download state and completes the download of the incremental download package; the slot 1 controller is a slave card of the control station; After the incremental download is completed, the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration of the slot 0 controller; the slot 0 controller is the main card of the control station; After the slot 1 controller automatically synchronizes the application data and variable force status of the old version configuration from the slot 0 controller, the slot 1 controller operates according to the new version configuration, and the bus does not output; Switch to the 1-slot controller through the online monitoring of the engineer station, and monitor the running process of the new version configuration of the 1-slot controller; Determine whether the new version configuration is executed correctly; if the new version configuration is executed correctly, the engineer station performs secondary confirmation and sends a reset frame to the slot 0 controller; if the new version configuration is not executed correctly, the control engineer station performs configuration modification to obtain the modified new version configuration, and generates a new incremental download package according to the modified new version configuration, replaces the incremental download package with the new incremental download package, and returns to the step of "putting the slot 1 controller of the control station into maintenance mode, and the slot 1 controller enters the download state after receiving the incremental download package, and completes the download of the incremental download package"; After receiving the reset frame, the slot 0 controller is reset and the bus stops outputting; The slot 1 controller determines that the slot 0 is reset, automatically performs master-slave switching, and the slot 1 controller automatically switches to the updated master card and runs according to the new version configuration; through the synchronization bus of the slot 0 controller and the slot 1 controller, the slot 0 controller automatically synchronizes the new version configuration, as well as the application data and variable forced status under the new version; After the 0-slot controller automatically synchronizes the new version of the configuration, the master-slave switch is executed. The 0-slot controller switches from the updated slave card to the master card, and the bus output operates normally according to the new version of the configuration. The 1-slot controller switches from the updated master card to the slave card, and the bus output operates normally according to the new version of the configuration.

8. The FPGA-based nuclear safety-level control station non-intrusive incremental download system according to claim 6 is characterized in that: The FPGA-based nuclear safety-level control station non-intrusive incremental download system also includes: In the maintenance mode, the input class module receives the data packet forwarded by the maintenance interface module, analyzes and determines whether the data packet is an incremental download packet, and obtains a second determination result; If the second judgment result is yes, the input class module stores the new version configuration in the external memory and updates the channel configuration information; If the second judgment result is no, determining whether the data packet is an incremental completion packet to obtain a third judgment result; If the third judgment result is yes, the input module collects data normally according to the new version configuration channel; If the third judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

9. The FPGA-based nuclear safety-level control station non-intrusive incremental download system according to claim 6 is characterized in that: The FPGA-based nuclear safety-level control station non-intrusive incremental download system also includes: In the maintenance mode, the output class module receives the data packet forwarded by the maintenance interface module, analyzes and determines whether the data packet is an incremental download packet, and obtains a fourth determination result; If the fourth judgment result is yes, the output class module stores the new version configuration in the external memory and updates the channel configuration information; If the fourth judgment result is no, judging whether the data is an incremental completion packet, and obtaining a fifth judgment result; If the fifth judgment result is yes, the output module is configured according to the new version, normally receives the data sent by the controller on the bus, and updates the channel output according to the bus data; If the fifth judgment result is no, the data packet is a maintenance data packet, and the operation is performed according to the maintenance data packet.

10. The FPGA-based nuclear safety-level control station non-intrusive incremental download system according to claim 6, characterized in that: The maintenance interface module forwards the incremental download package to the target module by broadcasting.

Images