Safety level evaluation method and device for pressure boundary equipment, equipment and medium

Abstract

The embodiment of the invention provides a safety level evaluation method and device for pressure boundary equipment, the equipment and a medium, and belongs to the technical field of nuclear power safety. The method comprises the following steps: firstly, acquiring equipment type information and equipment attribute information of the pressure boundary equipment, and then selecting a target function judgment criterion matched with the equipment type information from at least one preset candidate function judgment criterion; performing attribute analysis on the equipment attribute information according to a target function judgment criterion to determine first judgment information; acquiring accident frequency incremental data of the pressure boundary equipment in response to the fact that the first judgment information reflects that the equipment attribute information does not conform to a target function judgment criterion, determining second judgment information according to the accident frequency incremental data and a preset accident risk judgment criterion, and finally determining the pressure boundary equipment according to the second judgment information. And determining the safety level of the pressure boundary equipment. The resource scheduling efficiency of the nuclear power plant can be improved.

Description

Technical Field

[0001] The present application relates to the technical field of nuclear power safety, and particularly to a method and device, equipment and medium for evaluating the safety level of pressure boundary equipment. Background Art

[0002] Currently, a probabilistic safety assessment (PSA) model can be used to evaluate the safety level of nuclear power plant structures, systems, and components (SSC). However, the application scope of the probabilistic safety analysis model cannot cover all types of pressure boundary equipment. If the resource management strategy of a nuclear power plant is formulated based on the safety level assessment results obtained by traditional methods, the resource management strategy will lack comprehensiveness and accuracy due to the limitations of the probabilistic safety analysis model, ultimately resulting in low resource scheduling efficiency of the nuclear power plant. Therefore, how to improve the resource scheduling efficiency of a nuclear power plant has become an urgent technical problem to be solved. Summary of the Invention

[0003] The main purpose of the embodiments of the present application is to propose a method and device, equipment and medium for evaluating the safety level of pressure boundary equipment, aiming to improve the resource scheduling efficiency of a nuclear power plant.

[0004] To achieve the above object, a first aspect of the embodiments of the present application proposes a method for evaluating the safety level of pressure boundary equipment, the method comprising:

[0005] Obtaining the equipment type information and equipment attribute information of the pressure boundary equipment;

[0006] Selecting a target function determination criterion that matches the equipment type information from at least one preset candidate function determination criterion;

[0007] Performing attribute analysis on the equipment attribute information according to the target function determination criterion to determine first determination information;

[0008] In response to the first determination information indicating that the equipment attribute information does not conform to the target function determination criterion, obtaining the accident frequency increment data of the pressure boundary equipment;

[0009] Determining second determination information according to the accident frequency increment data and a preset accident risk determination criterion;

[0010] Determining the safety level of the pressure boundary equipment according to the second determination information.

[0011] In some embodiments, the performing attribute analysis on the equipment attribute information according to the target function determination criterion to determine first determination information includes:

[0012] If the device type information indicates that the pressure boundary device is a primary circuit pressure boundary device, extract the device function information and the location information of the pressure boundary device in the nuclear power plant to which it belongs from the device attribute information;

[0013] Perform a failure risk analysis based on the device function information and the location information of the pressure boundary device in the nuclear power plant to which it belongs to obtain failure risk information;

[0014] Determine the first determination information based on the failure risk information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, and the target function determination criterion.

[0015] In some embodiments, the parsing of the device attribute information according to the target function determination criterion to determine the first determination information includes:

[0016] If the device type information indicates that the pressure boundary device is not a primary circuit pressure boundary device, extract the device function information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, and the device size information from the device attribute information;

[0017] Perform a failure risk analysis based on the device function information and the location information of the pressure boundary device in the nuclear power plant to which it belongs to obtain failure risk information;

[0018] Determine the first determination information based on the failure risk information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, the device size information, and the target function determination criterion.

[0019] In some embodiments, the determining of the second determination information according to the accident frequency increment data and a preset accident risk determination criterion includes:

[0020] Determine a target frequency threshold according to the accident risk determination criterion;

[0021] Perform a numerical comparison based on the target frequency threshold and the accident frequency increment data to determine the second determination information.

[0022] In some embodiments, the performing of the numerical comparison based on the target frequency threshold and the accident frequency increment data to determine the second determination information includes:

[0023] If the accident frequency increment data is greater than the target frequency threshold, generate a high safety importance level mark for the pressure boundary device to determine the second determination information according to the high safety importance level mark;

[0024] If the accident frequency increment data is less than or equal to the target frequency threshold, mark the pressure boundary device as a low safety importance level to determine the second determination information according to the mark of the low safety importance level.

[0025] In some embodiments, the target frequency threshold includes a first frequency threshold, a second frequency threshold, and a third frequency threshold, where the first frequency threshold is greater than the second frequency threshold; the numerical comparison of the accident frequency increment data with the target frequency threshold to determine the second determination information includes:

[0026] If the accident frequency increment data is less than or equal to the first frequency threshold, or the accident frequency increment data is greater than or equal to the second frequency threshold, obtain auxiliary conditional probability data;

[0027] Obtain intermediate probability data according to the auxiliary conditional probability data and the accident frequency increment data;

[0028] If the intermediate probability data is greater than the third frequency threshold, mark the pressure boundary device as a high safety importance level to determine the second determination information according to the mark of the high safety importance level;

[0029] If the intermediate probability is less than or equal to the third frequency threshold, mark the pressure boundary device as a low safety importance level to determine the second determination information according to the mark of the low safety importance level.

[0030] In some embodiments, after parsing the device attribute information according to the target function determination criterion to determine the first determination information, the method further includes:

[0031] In response to the first determination information indicating that the device attribute information conforms to the target function determination criterion, determine that the safety level of the pressure boundary device is a high safety importance level.

[0032] To achieve the above object, a second aspect of the embodiments of the present application provides a safety level evaluation device for a pressure boundary device, the device includes:

[0033] A first acquisition module, configured to acquire device type information and device attribute information of a pressure boundary device;

[0034] A criterion selection module, configured to select a target function determination criterion that matches the device type information from at least one preset candidate function determination criterion;

[0035] A first determination module, configured to perform attribute parsing on the device attribute information according to the target function determination criterion to determine first determination information;

[0036] A second acquisition module, configured to acquire accident frequency increment data of the pressure boundary device in response to the first determination information indicating that the device attribute information does not conform to the target function determination criterion;

[0037] A second determination module, configured to determine second determination information according to the accident frequency increment data and a preset accident risk determination criterion;

[0038] A safety level determination module, configured to determine the safety level of the pressure boundary device according to the second determination information.

[0039] To achieve the above object, a third aspect of the embodiments of the present application provides an electronic device, including a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, the method described in the first aspect above is implemented.

[0040] To achieve the above object, a fourth aspect of the embodiments of the present application provides a computer-readable storage medium storing a computer program, and when the computer program is executed by a processor, the method described in the first aspect above is implemented.

[0041] The safety level assessment method and device, electronic device, and storage medium for a pressure boundary device proposed in the present application first obtain the device type information and device attribute information of the pressure boundary device, then select a matching target function determination criterion from the preset candidate function determination criteria according to the device type information, and parse and judge the device attribute information of the pressure boundary device based on the target function determination criterion to obtain first determination information. Then, according to the specific representation meaning of the first determination information, the need for safety level assessment based on accident frequency increment data is determined, and then an accident risk determination criterion is introduced. The second determination information of the pressure boundary device is determined according to the accident frequency increment data and the accident risk determination criterion, and then the safety level of the pressure boundary device is determined according to the second determination information. Compared with the probabilistic safety analysis model method in the prior art, the method of the embodiments of the present application does not limit the specific type of the pressure boundary device, can cover all types of pressure boundary devices, improves the comprehensiveness and accuracy of safety classification, provides a fine and scientific reliable basis for the formulation of the resource management strategy of the nuclear power plant, thereby improving the comprehensiveness and accuracy of the resource management strategy of the nuclear power plant, and finally improving the resource scheduling effect of the nuclear power plant. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 is a flowchart of the safety level assessment method for a pressure boundary device provided by an embodiment of the present application;

[0043] Figure 2 is Figure 1An alternative flowchart of step S103 in

[0044] Figure 3 is Figure 1 Another alternative flowchart of step S103 in

[0045] Figure 4 is Figure 1 The flowchart of step S105 in

[0046] Figure 5 is Figure 4 An alternative flowchart of step S402 in

[0047] Figure 6 is Figure 4 Another alternative flowchart of step S402 in

[0048] Figure 7 It is a schematic structural diagram of a safety level evaluation device for a pressure boundary device provided by an embodiment of the present application;

[0049] Figure 8 It is a schematic hardware structure diagram of an electronic device provided by an embodiment of the present application. Detailed implementation manners

[0050] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0051] It should be noted that although functional module division is performed in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order from the module division in the device or the order in the flowchart. Terms such as "first", "second", etc. in the description, claims and the above-mentioned drawings are used to distinguish similar objects and do not necessarily need to describe a specific order or sequence.

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the technical field to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0053] First, several nouns involved in the present application are analyzed:

[0054] Reactor Coolant Pressure Boundary (RCPB) equipment: It refers to all the key equipment and pipelines in the primary side cooling system of a nuclear power plant that bear and control pressure. These equipment are in direct contact with the reactor coolant, and their main functions are to maintain the tightness, pressure-bearing capacity, and safety of the reactor coolant system to prevent the leakage of high-temperature and high-pressure coolant. RCPB equipment includes reactor pressure vessels, coolant pumps, the primary side part of the steam generator (SG), pressure compensators, and the primary side coolant pipelines and related valves, etc.

[0055] Secondary side pressure boundary: It refers to all the pressure-bearing equipment and pipeline systems in the secondary side cooling system of a nuclear power plant. The main components of the secondary side pressure boundary equipment include the secondary side part of the steam generator, steam pipelines, steam turbines, condensers, and feedwater systems, etc. Although these equipment are not in direct contact with the reactor coolant, they play a key role in transferring heat from the primary side system to the secondary side, thereby driving the steam turbine to generate electricity. During the operation of a nuclear power plant, the secondary side coolant usually undergoes heat exchange through the steam generator, thereby transferring the heat of the primary side coolant to the secondary side water and converting it into high-temperature and high-pressure steam.

[0056] Large Early Release (LER): It refers to the situation where a large amount of radioactive substances leak from the reactor system into the environment in a short period at the initial stage of a severe accident in a nuclear power plant. This situation is usually one of the most dangerous scenarios in a nuclear power plant accident and can pose a significant radiation threat to the environment and the public in a short period. The design and safety measures of a nuclear power plant usually pay special attention to preventing the occurrence of large early releases.

[0057] Probabilistic Safety Assessment (PSA): It is a quantitative risk assessment method used in nuclear power plants and other high-risk industrial fields. It aims to evaluate the probability and potential consequences of a severe accident in a facility by analyzing and calculating the impacts of factors such as equipment failures, system malfunctions, and external events on the overall system safety.

[0058] High Safety Significant (HSS): It is a measure of the impact of a device or system on the overall safety of a nuclear power plant. When a device is determined to be High Safety Significant, it indicates that the device or system plays a key role in system safety. If these devices fail, it may lead to serious safety consequences. For example, the failure of these devices will significantly increase the Core Damage Frequency (CDF) or the Large Early Release Frequency (LERF), so it is crucial for the safe operation of the nuclear power plant.

[0059] Low Safety Significant (LSS): It is a measure of the impact of a device or system on the overall safety of a nuclear power plant. When a device is determined to be Low Safety Significant, it indicates that the device or system has a relatively small impact on the overall safety of the nuclear power plant.

[0060] In the field of nuclear power safety, risk grading of equipment in nuclear power plants is to facilitate concentrating management focus and resources on truly important equipment to ensure the safety of nuclear power plants, while reducing management burdens and improving the economic efficiency of nuclear power plant operation. For example, the regulation "Risk-Informed Treatment of Structures, Systems, and Components (SSC) of Nuclear Power Plants" (10 CFR 50.69) promulgated by the Nuclear Regulatory Commission (NRC) in 2002 classifies nuclear power equipment into "safety-related" and "non-safety-related". In 2005, the Nuclear Energy Institute (NEI) issued the guideline NEI-00-04 "SSC Grading Guideline for 10 CFR 50.69", which further subdivides on the basis of the original "safety-related" and "non-safety-related" grading into: safety-related equipment with high risk importance; safety-related equipment with only low risk importance; non-safety-related equipment with high risk importance; and non-safety-related equipment with only low risk importance. The safety grading process recommended by NEI-00-04 is mainly based on the quantitative results of the Probabilistic Safety Assessment (PSA) model, and evaluates according to the risk importance of specific equipment. Most passive equipment usually has relatively high reliability and is not modeled in the PSA model. Therefore, the application scope of the probabilistic safety analysis model cannot cover all types of pressure boundary equipment. If the resource management strategy of the nuclear power plant is formulated based on the safety level assessment results obtained by traditional methods, the comprehensiveness and accuracy of the strategy will be insufficient due to the limitations of the probabilistic safety analysis model, ultimately affecting the resource scheduling efficiency of the nuclear power plant. Therefore, how to improve the resource scheduling efficiency of the nuclear power plant has become a technical problem to be solved urgently.

[0061] Based on this, the embodiments of the present application provide a safety level assessment method and device, equipment, and medium for pressure boundary equipment, aiming to improve the resource scheduling efficiency of nuclear power plants.

[0062] The safety level assessment method and device, electronic equipment, and storage medium for pressure boundary equipment provided by the embodiments of the present application are specifically described through the following embodiments. First, the safety level assessment method for pressure boundary equipment in the embodiments of the present application is described.

[0063] Embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is a theory, method, technology, and application system that uses digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use knowledge to obtain the best results.

[0064] The safety level assessment method for pressure boundary devices provided by embodiments of the present application relates to the field of nuclear power safety technology. The safety level assessment method for pressure boundary devices provided by embodiments of the present application can be applied to a terminal, a server, or software running on a terminal or a server. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server can be configured as an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application implementing the safety level assessment method for pressure boundary devices, etc., but is not limited to the above forms.

[0065] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multi-processor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, and so on. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in a distributed computing environment where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0066] Figure 1 is an optional flowchart of the safety level assessment method for pressure boundary devices provided by embodiments of the present application, Figure 1 The method in may include but is not limited to steps S101 to S106.

[0067] Step S101, obtain the device type information and device attribute information of the pressure boundary device.

[0068] Step S102: Select a target function determination criterion that matches the device type information from at least one preset candidate function determination criterion.

[0069] Step S103: Perform attribute analysis on the device attribute information according to the target function determination criterion to determine the first determination information.

[0070] Step S104: In response to the first determination information indicating that the device attribute information does not conform to the target function determination criterion, obtain the accident frequency increment data of the pressure boundary device.

[0071] Step S105: Determine the second determination information according to the accident frequency increment data and the preset accident risk determination criterion.

[0072] Step S106: Determine the safety level of the pressure boundary device according to the second determination information.

[0073] Steps S101 to S106 illustrated in the embodiments of the present application first obtain the device type information and device attribute information of the pressure boundary device, then select a matching target function determination criterion from the preset candidate function determination criteria according to the device type information, and perform analysis and judgment on the device attribute information of the pressure boundary device based on this target function determination criterion to obtain the first determination information. Then, according to the specific representation meaning of the first determination information, determine the need for safety level assessment based on the accident frequency increment data, and then introduce the accident risk determination criterion. Determine the second determination information for the pressure boundary device according to the accident frequency increment data and the accident risk determination criterion, and then determine the safety level of the pressure boundary device according to the second determination information. Compared with the probabilistic safety analysis model method in the prior art, the method of the embodiments of the present application does not limit the specific type of the pressure boundary device, can cover all types of pressure boundary devices, improves the comprehensiveness and accuracy of safety classification, provides a fine and scientific reliable basis for the formulation of the nuclear power plant resource management strategy, thereby improving the comprehensiveness and accuracy of the nuclear power plant resource management strategy, and ultimately improving the resource scheduling effect of the nuclear power plant.

[0074] In step S101 of some embodiments, in this embodiment, the device type information is classified according to the specific location of the device in the nuclear power plant to which it belongs. For example, if the pressure boundary device belongs to the primary loop system of the nuclear power plant, the device type information can be determined as the primary loop pressure boundary device. The device type information can also be non-primary loop pressure boundary devices. Further, the non-primary loop pressure boundary devices can include secondary side pressure boundary devices and other pressure boundary devices. In other embodiments, the device type information can be classified according to the device structure characteristics and the functions implemented, such as pumps, pipelines, containment vessels, and brackets, etc.

[0075] Device attribute information is data or information that describes the characteristics, status, and functions of a device, etc. It can be the device name, number, model, manufacturer, production date, installation location, etc. In addition to the above basic parameters, it can also be the design parameters and operating parameters of the device, such as pressure rating, temperature range, material specifications, structural dimensions, weight, number of welds, connection method, maximum operating pressure, temperature, flow rate, and power requirement, etc. It can be understood that the specific information composition of the device attribute information can be selected or combined according to the actual application requirements, and the embodiments of the present application do not strictly limit this.

[0076] In step S102 of some embodiments, the candidate function determination criterion is a series of preset standards or conditions used to evaluate whether different types of pressure boundary devices meet specific requirements. Each device type may correspond to different requirements, so it is necessary to select a matching criterion from the candidate criteria according to the device type information for evaluation. The target function determination criterion refers to the criterion that matches the device type information among the candidate function determination criteria.

[0077] In some embodiments, the number of target function determination criteria obtained after screening can also be greater than 1. The candidate function determination criterion consists of multiple target function determination criteria, and the content details of the candidate function determination criterion will be further disclosed in the subsequent embodiments regarding the target function determination criterion.

[0078] In step S103 of some embodiments, the first determination information is used to represent whether the current pressure boundary device meets or does not meet the target function determination criterion. Next, the specific implementation process of step S103 will be introduced in combination with the following steps S201 to step S203 when the pressure boundary device is a primary loop pressure boundary device.

[0079] Please refer to Figure 2 , in some embodiments, step S103 may include but is not limited to steps S201 to S203:

[0080] Step S201, if the device type information indicates that the pressure boundary device is a primary loop pressure boundary device, extract the device function information from the device attribute information, and the location information of the pressure boundary device in the nuclear power plant to which it belongs.

[0081] Step S202, perform a failure risk analysis based on the device function information and the location information of the pressure boundary device in the nuclear power plant to which it belongs to obtain failure risk information.

[0082] Step S203, determine the first determination information based on the failure risk information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, and the target function determination criterion.

[0083] In step S201 of some embodiments, the device function information refers to the relevant data or attributes that describe the specific functions or roles achieved by the device in the nuclear power plant to which it belongs. In this embodiment, the location information of the pressure boundary device in the nuclear power plant to which it belongs may include the information of adjacent devices connected to the pressure boundary device.

[0084] Exemplarily, if the pressure boundary device is a coolant pipe in the primary loop, its device type information is a primary loop pressure boundary device, and the device function information and the location information of the device in the nuclear power plant to which it belongs are extracted. Further, the device function information may include the maximum pressure borne by the pipe, the flow rate, the corrosion resistance and sealing performance of the pipe material, the seismic resistance performance, and relevant function descriptions, etc. Among them, the relevant function description may be: The main function of the coolant pipe is to connect the various devices on the primary side and transport high-temperature and high-pressure coolant therein.

[0085] In step S202 of some embodiments, the failure risk information refers to the potential impact on the nuclear power plant evaluated based on the location and function of the pressure boundary device in the nuclear power plant. Exemplarily, for pump or valve devices located in the reactor cooling system, their failure may lead to nuclear power accidents such as cooling interruption, pressure imbalance, or radioactive substance leakage.

[0086] In some embodiments, the relevant function description can be input into a pre-trained language model to understand the function of the device, and then combined with the pre-stored nuclear power field knowledge base and location information to analyze the nuclear power plant accidents that may be caused by the pressure boundary device in the failure scenario, so as to obtain the failure risk information.

[0087] In step S203 of some embodiments, it should be noted that the reactor pressure vessel (RPV) in the nuclear power plant contains nuclear fuel assemblies, and nuclear fission reactions occur in the fuel assemblies and release a large amount of heat. After this heat is absorbed by the coolant, it is transferred to external devices through pipes. The outside of the reactor pressure vessel is covered with a highly sealed containment vessel, which is provided with penetrations, and the above-mentioned pipes are arranged in the penetrations. Two isolation valves are installed in the pipes, respectively on the inner and outer sides of the containment vessel, for controlling the flow of fluid and isolating the devices inside and outside the containment vessel.

[0088] In this embodiment, when the pressure boundary device is a primary circuit pressure boundary device, the content of the target function determination criterion is as follows: 1. When the pressure boundary device fails, the makeup water for the reactor coolant cannot be carried out normally, or makeup water is carried out by the standby makeup water system, or it causes the reactor to fail to shut down and cool orderly; 2. The pressure boundary device cannot be isolated from the Reactor Coolant System (RCS) through two valves; 3. It is located between the reactor pressure vessel and the outer isolation valve and has no less than a preset number of welds; 4. It is located between the reactor pressure vessel and the containment penetration and has no less than a preset number of welds. The preset number refers to the number of welds, and the application embodiment does not strictly limit the preset number.

[0089] If the pressure boundary device meets any one of the target function determination criteria, it is determined that the first determination information is: the device attribute information of the pressure boundary device meets the target function determination criteria.

[0090] Steps S201 to S203 illustrated in the embodiments of the present application perform a failure risk assessment on the primary circuit pressure boundary devices of the nuclear power plant through attribute information such as device type, function, and location, and combine specific target function determination criteria to finally obtain the first determination information on whether the device meets the nuclear safety requirements.

[0091] In some other embodiments, the pressure boundary device is a non-primary circuit pressure boundary device. Please refer to Figure 3 , step S103 may also include but is not limited to steps S301 to S303:

[0092] Step S301, if the device type information indicates that the pressure boundary device is a non-primary circuit pressure boundary device, extract the device function information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, and the device size information from the device attribute information.

[0093] Step S302, perform a failure risk analysis based on the device function information and the location information of the pressure boundary device in the nuclear power plant to which it belongs to obtain failure risk information.

[0094] Step S303, determine the first determination information based on the failure risk information, the location information of the pressure boundary device in the nuclear power plant to which it belongs, the device size information, and the target function determination criteria.

[0095] In step S301 of some embodiments, the non-primary circuit pressure boundary devices may include secondary side pressure boundary devices, water storage tanks, and equipment supports, etc. The device size information may include the volume, length, width, and pipe diameter of the device, etc., and is not limited thereto. The meanings of the device function information and the location information have been described in the embodiments of step S201 and will not be elaborated here.

[0096] In step S302 of some embodiments, the implementation logic of this step is the same as that of step S202, and will not be elaborated here.

[0097] In step S303 of some embodiments, specifically, in this embodiment, when the pressure boundary device is a secondary side pressure boundary device, the content of the target function determination criterion is: the position is in the 2-level part of the Steam Generator (SG), that is, the part of the steam generator that receives the heat transferred from the primary side and generates steam, or the diameter of the feed water pipe between the steam generator and the isolation valve outside the containment is greater than the nominal diameter of 4 inches.

[0098] When the pressure boundary device is other devices, the content of the target function determination criterion may include: 1. The diameter of the device located in the high-energy pipe break exclusion area is greater than the nominal diameter of 4 inches; 2. The device is the final heat sink flow path, and failure may cause the final heat sink function to be non-isolable, that is, the loss of the heat transfer function cannot be prevented through isolation measures; 3. The condensate storage tank for auxiliary feed water or emergency feed water does not have an independent redundant reliable water source; 4. The position is between the condensate storage tank in the Auxiliary Feedwater (AFW) system or Emergency Feedwater (EFW) system and the isolation valve inside the containment, and the diameter is greater than the nominal diameter of 4 inches; 5. Device failure may cause the loss of two trains; 6. The device is a heat exchanger, and when it fails, it may cause the reactor coolant to be directly connected to other systems or devices without passing through the primary containment during power operation or shutdown of the nuclear power plant, that is, the reactor coolant does not circulate inside the containment; 7. The device is a heat exchanger, and when it fails, it will cause the related system to fail accordingly; 8. The device is a device support (including device brackets, hangers and dampers), and the devices connected and combined with it belong to the high safety important level; 9. The device is connected to a high safety important device, and in three mutually perpendicular directions in space (for example, the X-axis direction, Y-axis direction and Z-axis direction in a three-dimensional space coordinate system), at least two supports are installed in each direction.

[0099] It should be noted that cooling systems, power supply systems, etc. in nuclear power plants usually adopt redundant design with at least two independent links (i.e., "trains"). Each train can independently meet the basic safety functions. Even if one train system fails, the other trains can still operate normally, thus preventing the occurrence of nuclear safety events. When both train systems fail, the nuclear power plant will not be able to maintain a safe state through normal cooling or power supply, which may lead to out-of-control core temperature or other serious consequences. This scenario is called the loss of two trains.

[0100] In some embodiments, if the current pressure boundary device is a device support, classification may not be performed in scenarios where no repair or replacement is required.

[0101] It should be noted that high safety importance level and low safety importance level are specific classifications of the safety levels of pressure boundary devices in the embodiments of the present application.

[0102] If the pressure boundary device meets any one of the target function determination criteria, determine the first determination information as: the device attribute information of the pressure boundary device meets the target function determination criteria.

[0103] Steps S301 to S303 illustrated in the embodiments of the present application, through information extraction, failure risk analysis, and target function determination for the characteristics of non-primary loop pressure boundary devices, and based on multi-dimensional information determination of device characteristics, risks that may be caused during failure, and device location, effectively improve the detail and accuracy of the safety assessment of non-primary loop pressure boundary devices in nuclear power plants.

[0104] After step S103 in some embodiments, in response to the first determination information indicating that the device attribute information meets the target function determination criteria, determine the safety level of the pressure boundary device as high safety importance level.

[0105] In step S104 of some embodiments, if the first determination information indicates that the device attribute information does not meet the target function determination criteria, the safety level of the pressure boundary device may be temporarily determined as low safety importance level, but further determination of the safety level of the pressure boundary device is still required based on the accident frequency increment data.

[0106] Furthermore, the accident frequency increment data refers to the increment of the change in the occurrence frequency of relevant accidents caused by the failure of the pressure boundary device. The relevant accidents may be core damage and early large release. Exemplarily, the accident frequency increment data may be that the failure of the pressure boundary device may cause an increase in the core damage frequency (CDF) of 1.0E-06 / year, which means that if the device fails, the probability of a core damage accident occurring each year will increase by 0.0001%. The accident frequency increment data may also be that the failure of the pressure boundary device may cause an increase in the large early release frequency (LERF) of 1E-07 / year, which means that if the device fails, the probability of an early large release accident occurring each year will increase by 0.00001%.

[0107] It can be understood that the accident frequency increment data can be obtained through channels such as PSA models, historical failure data, failure mode and effect analysis (FMEA), expert evaluations, and regular maintenance data.

[0108] It should be noted that in some other embodiments, if the current position of the pressure boundary device is between the isolation valve inside the containment and the container that can support multiple systems with different functions or the water inventory (such as the refueling water storage tank RWST and the containment sump), these pressure boundary devices can be directly marked as having a low safety significance level without further judgment based on probability data.

[0109] Please refer to Figure 4 , in some embodiments, step S105 may include but is not limited to steps S401 to S402:

[0110] Step S401, determining the target frequency threshold according to the accident risk determination criterion.

[0111] Step S402, performing a numerical comparison based on the target frequency threshold and the accident frequency increment data to determine the second determination information.

[0112] In step S401 of some embodiments, for a core damage accident, the target frequency threshold may be 1.0E-07 / year. For an early large release accident, the target frequency threshold may be 1.0E-08 / year. The numerical values of the above target frequency thresholds are only for illustrative purposes and do not represent a strict limitation of the numerical values of the target frequency thresholds in this embodiment.

[0113] In step S402 of some embodiments, the second determination information may include the numerical size comparison result between the accident frequency increment data and the target frequency threshold, the time point when the comparison result is generated, the device attribute information of the corresponding pressure boundary device, and the safety level marked for the pressure boundary device, etc. It is not limited to this. It can be understood that the first determination information and the second determination information can be stored in the database of the nuclear power plant in the form of storable data, or sent to the relevant management personnel of the nuclear power plant in the form of text data to provide a reference for the formulation of subsequent management strategies.

[0114] Please refer to Figure 5 , step S402 may include but is not limited to steps S501 to S502:

[0115] Step S501, if the accident frequency increment data is greater than the target frequency threshold, generating a high safety significance level mark for the pressure boundary device to determine the second determination information based on the high safety significance level mark.

[0116] Step S502, if the accident frequency increment data is less than or equal to the target frequency threshold, marking the pressure boundary device as having a low safety significance level to determine the second determination information based on the low safety significance level mark.

[0117] In step S501 of some embodiments, if the accident frequency increment data is greater than a preset target frequency threshold, it indicates that the failure of the pressure boundary device may significantly increase the accident frequency, constituting a relatively high safety risk. Therefore, a high safety importance level mark is generated for this device to indicate that this device has a relatively high priority in the safety management of the nuclear power plant.

[0118] In step S502 of some embodiments, if the accident frequency increment data is less than or equal to the target frequency threshold, it means that the failure of this device has a relatively small impact on the accident frequency, and it belongs to a low-risk device. Therefore, this device is marked as a low safety importance level to indicate that the failure of this device will not significantly increase the overall risk of the nuclear power plant, and thus a relatively low priority can be adopted for the subsequent management of this device.

[0119] Steps S501 to S502 illustrated in the embodiments of the present application reasonably classify the pressure boundary devices into a high safety importance level and a low safety importance level through the accurate evaluation of the accident frequency increment data, providing a scientific basis for optimizing the safety management strategy of the nuclear power plant.

[0120] In step S402 of some other embodiments, the target frequency threshold includes a first frequency threshold, a second frequency threshold, and a third frequency threshold, where the first frequency threshold is greater than the second frequency threshold. Please refer to Figure 6 , step S402 may also include but is not limited to steps S601 to S604:

[0121] Step S601, if the accident frequency increment data is less than or equal to the first frequency threshold, or the accident frequency increment data is greater than or equal to the second frequency threshold, then obtain the auxiliary conditional probability data.

[0122] Step S602, obtain the intermediate probability data according to the auxiliary conditional probability data and the accident frequency increment data.

[0123] Step S603, if the intermediate probability data is greater than the third frequency threshold, mark the pressure boundary device as a high safety importance level to determine the second determination information according to the high safety importance level mark.

[0124] Step S604, if the intermediate probability is less than or equal to the third frequency threshold, mark the pressure boundary device as a low safety importance level to determine the second determination information according to the low safety importance level mark.

[0125] In step S601 of some embodiments, for a core damage accident, the first frequency threshold may be 1E-06 / year, and the second frequency threshold may be 1E-08 / year. For an early large release accident, the first frequency threshold may be 1E-07 / year, and the second frequency threshold may be 1E-09 / year. The numerical values of the above first frequency threshold and second frequency threshold are only for illustrative purposes, and this embodiment does not strictly limit them.

[0126] When the accident frequency increment data falls within the range between the first frequency threshold and the second frequency threshold, it is necessary to consider the auxiliary conditional probability data for refined classification. For a core damage accident, the auxiliary conditional probability data refers to the Conditional Core Damage Probability (CCDP). For an early large release accident, the auxiliary conditional probability data is the Conditional Large Early Release Probability (CLERP).

[0127] In step S602 of some embodiments, the auxiliary conditional probability data and the accident frequency increment data are multiplied, and the product obtained is the intermediate probability data.

[0128] In step S603 of some embodiments, for a core damage accident, the third frequency threshold may be 1E-08 / year. For an early large release accident, the third frequency threshold may be 1E-09 / year.

[0129] It should be noted that in this embodiment, for each type of accident, although the numerical value of the third frequency threshold is the same as that of the second frequency threshold, it does not mean that this embodiment limits the second frequency threshold to be equal to the third frequency threshold.

[0130] In step S604 of some embodiments, if the intermediate probability data is less than or equal to the third frequency threshold, it indicates that the failure of the device has limited impact on the safety of the nuclear power plant. Therefore, the device is marked as a low safety importance level.

[0131] In some embodiments, if the accident frequency increment data is greater than the first frequency threshold, the pressure boundary device is marked as a high safety importance level. If the accident frequency increment data is less than or equal to the second frequency threshold, the pressure boundary device is marked as a low safety importance level.

[0132] In some embodiments, for pipes or equipment related to the initiating event groups of existing power plants, both the core damage frequency and the early large release frequency need to be considered. Pipes or equipment related to the initiating event groups of existing power plants include: the main feed water pipe inside the containment, the main steam pipe outside the containment, the nuclear power plant water system, and the primary circuit pressure boundary connection equipment that is not of the first safety class, etc. The initiating event groups of the power plant include: rupture of the main feed water pipe inside the containment, and rupture of the main steam pipe outside the containment, etc. For other pipes or equipment, only the core damage frequency needs to be considered to determine the second determination information.

[0133] Steps S601 to S604 illustrated in the embodiments of the present application first preliminarily screen out the equipment that needs further evaluation through the accident frequency increment data, and then refine the analysis of the equipment failure risk in combination with auxiliary conditional probability data such as the conditional core damage probability or the conditional early large release probability. Subsequently, classification management of high and low safety importance level markings is carried out on the equipment according to the intermediate probability data, ensuring that high-risk equipment can receive priority attention and more stringent safety measures, while low-risk equipment can simplify management, thereby realizing the reasonable allocation of resources and the improvement of management efficiency.

[0134] Steps S401 to S402 illustrated in the embodiments of the present application enable the nuclear power plant to quickly identify potential high-risk equipment and give priority to processing through the setting and preliminary comparison of the frequency threshold, while appropriate management strategies can be adopted for low-risk equipment, thereby effectively improving the efficiency and accuracy of equipment risk screening and providing reliable support for the safety management of the nuclear power plant.

[0135] In step S106 of some embodiments, the safety level can be directly determined according to the markings of the high and low equipment levels in the second determination information. In other embodiments, the second determination information only includes the numerical comparison result of the accident frequency increment data and the target frequency threshold. The safety level of the pressure boundary equipment can be determined according to the comparison result, and the specific logic is the same as that of steps S501 to S502, or steps S601 to S604 above, which will not be elaborated here.

[0136] Please refer to Figure 7 , the embodiments of the present application also provide a safety level evaluation device for pressure boundary equipment, which can implement the above safety level evaluation method for pressure boundary equipment. The device includes:

[0137] A first acquisition module, configured to acquire the equipment type information and equipment attribute information of the pressure boundary equipment.

[0138] A criterion selection module, configured to select a target function determination criterion that matches the equipment type information from at least one preset candidate function determination criterion.

[0139] The first determination module is configured to perform attribute parsing on the device attribute information according to the target function determination criterion to determine the first determination information.

[0140] The second acquisition module is configured to, in response to the first determination information indicating that the device attribute information does not meet the target function determination criterion, acquire the accident frequency increment data of the pressure boundary device.

[0141] The second determination module is configured to determine the second determination information according to the accident frequency increment data and the preset accident risk determination criterion.

[0142] The safety level determination module is configured to determine the safety level of the pressure boundary device according to the second determination information.

[0143] The specific implementation manner of the safety level evaluation device of the pressure boundary device is basically the same as the specific embodiment of the above-mentioned safety level evaluation method of the pressure boundary device, and will not be elaborated herein.

[0144] An embodiment of the present application further provides an electronic device. The electronic device includes a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, the above-mentioned safety level evaluation method of the pressure boundary device is implemented. The electronic device can be any intelligent terminal including a tablet computer, a vehicle-mounted computer, etc.

[0145] Please refer to Figure 8 , Figure 8 which illustrates the hardware structure of an electronic device in another embodiment. The electronic device includes:

[0146] A processor 801, which can be implemented in a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, etc., and is configured to execute relevant programs to implement the technical solutions provided by the embodiments of the present application;

[0147] A memory 802, which can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM), etc. The memory 802 can store an operating system and other application programs. When implementing the technical solutions provided by the embodiments of this specification through software or firmware, the relevant program codes are stored in the memory 802 and are called by the processor 801 to execute the safety level evaluation method of the pressure boundary device of the embodiments of the present application;

[0148] An input / output interface 803, which is configured to implement information input and output;

[0149] A communication interface 804 for implementing communication interaction between this device and other devices, which can achieve communication through wired means (such as USB, network cable, etc.) or through wireless means (such as mobile network, WIFI, Bluetooth, etc.);

[0150] A bus 805 for transmitting information between various components of the device (such as a processor 801, a memory 802, an input / output interface 803, and a communication interface 804);

[0151] Among them, the processor 801, the memory 802, the input / output interface 803, and the communication interface 804 achieve communication connections with each other inside the device through the bus 805.

[0152] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the above-mentioned safety level assessment method for the pressure boundary device.

[0153] As a non-transitory computer-readable storage medium, the memory can be used to store non-transitory software programs and non-transitory computer-executable programs. In addition, the memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state storage devices. In some embodiments, the memory may optionally include a memory remotely set relative to the processor, and these remote memories can be connected to the processor through a network. Examples of the above-mentioned network include but are not limited to the Internet, an enterprise intranet, a local area network, a mobile communication network, and combinations thereof.

[0154] The safety level evaluation method of the pressure boundary device, the safety level evaluation device of the pressure boundary device, the electronic device and the storage medium provided by the embodiments of the present application first obtain the device type information and device attribute information of the pressure boundary device, then select the matching target function determination criterion from the preset candidate function determination criteria according to the device type information, and parse and judge the device attribute information of the pressure boundary device based on the target function determination criterion to obtain the first determination information. Then, according to the specific representation meaning of the first determination information, determine the need for safety level evaluation according to the accident frequency increment data, and then introduce the accident risk determination criterion. Determine the second determination information for the pressure boundary device according to the accident frequency increment data and the accident risk determination criterion, and then determine the safety level of the pressure boundary device according to the second determination information. Compared with the probabilistic safety analysis model method in the prior art, the method of the embodiments of the present application does not limit the specific type of the pressure boundary device, can cover all types of pressure boundary devices, improves the comprehensiveness and accuracy of safety classification, provides a fine and scientific reliable basis for the formulation of the resource management strategy of the nuclear power plant, thereby improving the comprehensiveness and accuracy of the resource management strategy of the nuclear power plant, and finally improving the resource scheduling effect of the nuclear power plant.

[0155] The embodiments described in the embodiments of the present application are for more clearly illustrating the technical solutions of the embodiments of the present application, and do not constitute a limitation to the technical solutions provided by the embodiments of the present application. Those skilled in the art know that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.

[0156] Those skilled in the art can understand that the technical solutions shown in the figures do not constitute a limitation to the embodiments of the present application, and may include more or fewer steps than shown in the figures, or combine some steps, or different steps.

[0157] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separated, that is, they may be located in one place, or may be distributed to multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0158] Those of ordinary skill in the art can understand that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices can be implemented as software, firmware, hardware and their appropriate combinations.

[0159] In the description of the present application and the above-mentioned drawings, terms such as "first", "second", "third", "fourth", etc. (if any) are used to distinguish similar objects and do not necessarily describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device comprising a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0160] It should be understood that in the present application, "at least one (item)" means one or more, and "a plurality" means two or more. "And / or" is used to describe the association relationship of associated objects and indicates that there can be three relationships. For example, "A and / or B" can mean: only A exists, only B exists, and both A and B exist at the same time. Among them, A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one (one) of the following" or its similar expression means any combination of these items, including any combination of single item (one) or plural items (ones). For example, at least one (one) of a, b, or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0161] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the above-mentioned division of units is only a logical function division, and there can be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed coupling or direct coupling or communication connection to each other can be through some interfaces, and the indirect coupling or communication connection of devices or units can be in electrical, mechanical or other forms.

[0162] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they can be located in one place or distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0163] In addition, in each embodiment of the present application, the functional units may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of a software functional unit.

[0164] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product. The computer software product is stored in a storage medium and includes multiple instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in each embodiment of the present application. The foregoing storage medium includes: various media that can store programs, such as USB flash drives, mobile hard disks, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical discs.

[0165] The preferred embodiments of the embodiments of the present application have been described above with reference to the accompanying drawings. This does not limit the scope of the rights of the embodiments of the present application. Any modifications, equivalent replacements, and improvements made by those skilled in the art without departing from the scope and essence of the embodiments of the present application shall be within the scope of the rights of the embodiments of the present application.

Claims

1. A method for evaluating the safety level of pressure boundary equipment, characterized in that: The method comprises: Obtain device type information and device attribute information of pressure boundary devices; Selecting a target function determination criterion matching the device type information from at least one preset candidate function determination criterion; Performing attribute analysis on the device attribute information according to the target function determination criterion to determine first determination information; In response to the first determination information reflecting that the device attribute information does not meet the target function determination criterion, acquiring the accident frequency increment data of the pressure boundary device; Determining second determination information according to the accident frequency increment data and a preset accident risk determination criterion; The safety level of the pressure boundary device is determined according to the second determination information.

2. The method according to claim 1, characterized in that The performing attribute parsing on the device attribute information according to the target function determination criterion to determine the first determination information includes: If the device type information indicates that the pressure boundary device is a primary-loop pressure boundary device, extracting device function information and location information of the pressure boundary device in the nuclear power plant to which it belongs from the device attribute information; Performing a fault risk analysis according to the equipment function information and the location information of the pressure boundary equipment in the nuclear power plant to which it belongs, to obtain fault risk information; The first determination information is determined according to the fault risk information, the location information of the pressure boundary equipment in the nuclear power plant to which it belongs, and the target function determination criterion.

3. The method according to claim 1, characterized in that The performing attribute parsing on the device attribute information according to the target function determination criterion to determine the first determination information includes: If the device type information indicates that the pressure boundary device is a non-primary circuit pressure boundary device, extracting device function information, location information of the pressure boundary device in the nuclear power plant to which it belongs, and device size information from the device attribute information; Performing a fault risk analysis according to the equipment function information and the location information of the pressure boundary equipment in the nuclear power plant to which it belongs, to obtain fault risk information; The first determination information is determined according to the fault risk information, the location information of the pressure boundary equipment in the nuclear power plant to which it belongs, the equipment size information, and the target function determination criterion.

4. The method according to claim 1, characterized in that: The determining of the second determination information according to the accident frequency increment data and a preset accident risk determination criterion includes: Determining a target frequency threshold according to the accident risk determination criterion; The second determination information is determined by performing a numerical comparison between the target frequency threshold and the accident frequency increment data.

5. The method according to claim 4, characterized in that The step of comparing the target frequency threshold with the accident frequency increment data to determine the second determination information includes: If the accident frequency increment data is greater than the target frequency threshold, a high safety importance level mark is generated for the pressure boundary device, so as to determine the second determination information according to the high safety importance level mark; If the accident frequency increment data is less than or equal to the target frequency threshold, the pressure boundary device is marked as a low safety importance level, so as to determine the second determination information according to the low safety importance level mark.

6. The method according to claim 4, characterized in that The target frequency threshold includes a first frequency threshold, a second frequency threshold and a third frequency threshold, wherein the first frequency threshold is greater than the second frequency threshold; and the step of comparing the target frequency threshold with the accident frequency increment data to determine the second determination information includes: If the accident frequency increment data is less than or equal to the first frequency threshold, or the accident frequency increment data is greater than or equal to the second frequency threshold, obtaining auxiliary condition probability data; Obtaining intermediate probability data according to the auxiliary condition probability data and the accident frequency increment data; If the intermediate probability data is greater than the third frequency threshold, marking the pressure boundary device as a high safety importance level, so as to determine the second determination information according to the high safety importance level mark; If the intermediate probability is less than or equal to the third frequency threshold, the pressure boundary device is marked as a low safety importance level, so as to determine the second determination information according to the low safety importance level mark.

7. The method according to any one of claims 1 to 6, characterized in that: After performing attribute parsing on the device attribute information according to the target function determination criterion to determine the first determination information, the method further includes: In response to the first determination information reflecting that the device attribute information meets the target function determination criterion, it is determined that the safety level of the pressure boundary device is a high safety importance level.

8. A safety level assessment device for pressure boundary equipment, characterized in that: The device comprises: A first acquisition module is used to acquire device type information and device attribute information of a pressure boundary device; A criterion selection module, used to select a target function determination criterion matching the device type information from at least one preset candidate function determination criterion; A first determination module, configured to perform attribute analysis on the device attribute information according to the target function determination criterion to determine first determination information; A second acquisition module is used to acquire the accident frequency increment data of the pressure boundary device in response to the first determination information reflecting that the device attribute information does not meet the target function determination criterion; A second determination module, used to determine second determination information according to the accident frequency increment data and a preset accident risk determination criterion; A security level determination module is used to determine the security level of the pressure boundary device according to the second determination information.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the safety level assessment method of the pressure boundary device according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method for evaluating the safety level of a pressure boundary device according to any one of claims 1 to 7 is implemented.

Images