Linear accelerator magnet interlocking safety control system based on EPICS

Abstract

The invention discloses a linear accelerator magnet interlocking safety control system based on EPICS, and belongs to the technical field of accelerator safety control, the linear accelerator magnet interlocking safety control system comprises an IOC cluster and an interlocking logic module which are connected in sequence, and the IOC cluster is further connected with a real-time monitoring and data archiving module; key parameters of linear accelerator magnet interlocking are obtained through an IOC cluster, hierarchical judgment is carried out through an interlocking logic module according to the key parameters, linear accelerator magnet interlocking is controlled according to a judgment result, and the key parameters are stored through a real-time monitoring and data archiving module. The problems that a traditional magnet interlocking system is high in response delay, poor in flexibility, high in maintenance cost and the like are solved, and the operation safety and reliability of the accelerator are remarkably improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of particle accelerator safety control, and in particular relates to a magnet interlock safety control system based on an EPICS architecture, which is suitable for the safety protection of magnet systems in large scientific devices such as linear accelerators and synchrotron radiation sources. Background Art

[0002] In a linear accelerator, magnets (such as quadrupole magnets and dipole magnets) are the core components of beam transmission and focusing, and their working status directly affects the stability of the accelerator and the quality of the beam. Traditional magnet interlocking systems are mostly implemented using hard-wired logic or programmable logic controllers (PLCs), which have the following problems: 1. High response delay: the physical signal transmission path of hard-wired logic is long, and the speed of fault signal transmission is limited; 2. Poor scalability: the interlocking logic is solidified in the hardware, and modifications require rewiring or programming, which is costly; 3. Weak monitoring capabilities: lack of real-time data and historical data recording and analysis functions, making it difficult to predict and trace faults; 4. Insufficient compatibility: It is difficult to efficiently coordinate with other subsystems of the accelerator (such as vacuum and radio frequency systems). Summary of the invention

[0003] In order to solve the above technical problems, the present invention proposes a linear accelerator magnet interlock safety control system based on EPICS to solve the above problems existing in the prior art.

[0004] To achieve the above object, the present invention provides a linear accelerator magnet interlock safety control system based on EPICS, comprising:

[0005] An IOC cluster and an interlocking logic module connected in sequence, wherein the IOC cluster is also connected to a real-time monitoring and data archiving module;

[0006] The key parameters of the linear accelerator magnet interlock are obtained through the IOC cluster, the interlocking logic module performs hierarchical judgment according to the key parameters, and the linear accelerator magnet interlock is controlled according to the judgment result, and the key parameters are stored through the real-time monitoring and data archiving module.

[0007] Optionally, the IOC cluster includes several IOC servers, and the different IOC servers are used to collect and process different key parameters, wherein the key parameters include magnet power status, cooling system parameters and vacuum system parameters, and the IOC servers perform external interaction through the CA protocol.

[0008] Optionally, the IOC server includes a primary server and a backup server, which are connected by a redundant communication network. The redundant communication network adopts a dual-network interface design, and data synchronization between the primary server and the backup server is performed through the UDP redundancy protocol.

[0009] Optionally, a dynamic interlock rule is set in the interlock logic module. The dynamic interlock rule is a hierarchical judgment rule, and the hierarchical judgment rule is used to obtain a corresponding response result according to key parameters.

[0010] Optionally, the dynamic interlock rule includes: when the magnet current exceeds the preset range but does not reach the threshold, only fault information is recorded; when the magnet current exceeds the threshold or the cooling water temperature exceeds the threshold, the magnet operating power is reduced or the magnet power supply is cut off; when the vacuum degree is lower than the safety value and the duration exceeds the threshold, the overall shutdown protection of the accelerator is triggered.

[0011] Optionally, the IOC cluster and the interlock logic module are also connected to a monitoring interface, which is used to display alarm information and key parameters.

[0012] Optionally, the interlock logic module is connected to a digital output module and a motion controller. The position of the magnet in the linear accelerator is adjusted through the motion controller to reduce the magnet operating power, and the corresponding signal is output through the digital output module to stop the magnet power supply or the accelerator start-stop device.

[0013] Optionally, the dynamic interlock rule is written through SNL.

[0014] Optionally, the dynamic interlock rule also performs several parameter combination judgments according to key parameters.

[0015] Optionally, the distributed EPICS control system is connected to external devices through a hardware interface module. The external devices include the relevant systems for the magnet interlock of the linear accelerator and the devices equipped with the interlock logic module. The hardware interface module is an interface that supports different protocols.

[0016] Compared with the prior art, the present invention has the following advantages and technical effects:

[0017] 1. Improved stability: Based on the characteristics of the PLC, the system stability will be effectively improved;

[0018] 2. Reduced maintenance cost: The softwareization of the interlock logic shortens the system debugging cycle;

[0019] 3. Strong scalability: It supports seamless integration of third-party devices (such as cryogenic systems) through EPICS PV;

[0020] 4. Enhanced security: Both the false alarm rate and the missed alarm rate of failures can reach the IEC61508 SIL-2 safety level. Brief Description of the Drawings

[0021] The drawings forming a part of this application are used to provide a further understanding of this application. The illustrative embodiments of this application and their descriptions are used to explain this application and do not constitute an improper limitation of this application. In the drawings:

[0022] Figure 1 It is a schematic diagram of the overall system architecture of the embodiment of the present invention;

[0023] Figure 2 It is a system architecture diagram of the embodiment of the present invention;

[0024] Figure 3 It is a flowchart of interlock judgment of the embodiment of the present invention;

[0025] Figure 4 It is a redundant communication network topology diagram of the embodiment of the present invention; Detailed Embodiments

[0026] It should be noted that, without conflict, the embodiments in this application and the features in the embodiments can be combined with each other. The following will refer to the drawings and combine the embodiments to detail this application.

[0027] It should be noted that the steps shown in the flowchart of the drawings can be executed in a computer system such as a set of computer-executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order than here.

[0028] As a distributed control system framework, EPICS has been widely applied in the accelerator field, but there are still technical gaps in its deep integration in the magnet interlock safety control. Most of the existing EPICS solutions are limited to data monitoring and have not been optimized for the real-time and reliability requirements of magnet interlocks.

[0029] Such as Figure 1As shown in the figure, the present invention discloses a linear accelerator magnet interlock safety control system based on EPICS (Experimental Physics and Industrial Control System), belonging to the technical field of accelerator safety control. By constructing a distributed EPICS control system, combining real-time data acquisition, dynamic interlock logic judgment and fault classification processing mechanism, efficient and safe monitoring and rapid response of the linear accelerator magnet system are realized. The system adopts a modular design, realizes real-time communication between modules through the channel access CA (Channel Access) protocol of EPICS, and uses SNL (State Notation Language) to write dynamic interlock rules, supporting multi-level fault judgment (such as primary alarm, secondary power-off, emergency shutdown). At the same time, the system integrates data storage and historical data search functions, realizes long-term storage of fault data through EPICS Archiver Appliance, and supports fault traceability based on timestamps. In addition, the system adopts dual network port redundant communication and IOC hot backup technology to ensure that a single point of failure does not affect the overall operation. The present invention solves the problems of high response delay, poor flexibility and high maintenance cost of the traditional magnet interlock system, and significantly improves the safety and reliability of accelerator operation.

[0030] The present invention provides a linear accelerator magnet interlock safety control system based on EPICS, including the following:

[0031] As Figure 2 shown in the figure, the linear accelerator magnet interlock is controlled by a distributed EPICS control system, where the distributed EPICS control system includes an EPICS input / output controller IOC (Input Output Controller) cluster, an interlock logic module, and a real-time monitoring and data archiving module;

[0032] The key parameters of the magnet interlock system are collected in real time through the EPICS channel access CA protocol connected by the EPICS input / output controller IOC cluster, where the key parameters include magnet current, cooling water temperature and vacuum degree;

[0033] The dynamic interlock rules in the interlock logic module are written through SNL, and multi-level judgment of the faults of the magnet interlock system is carried out according to preset thresholds in the dynamic interlock rules;

[0034] The above multi-level judgment results trigger hierarchical response actions, where the hierarchical response actions include alarm recording, magnet power-off and emergency shutdown;

[0035] In the above distributed EPICS control system, the UDP (User Datagram Protocol) redundancy protocol and dual network interface design are introduced to ensure that the communication delay < 5 ms through the UDP (User Datagram Protocol) redundancy protocol and dual network interface design.

[0036] Specifically, the input / output controller IOC cluster includes multiple IOC servers, and different IOC servers are responsible for the real-time acquisition and preprocessing of the magnet power supply status, cooling system parameters, and vacuum system parameters respectively; each IOC server communicates with hardware devices (interlock logic module, data archiving module, and monitoring interface) through the CA protocol and supports dynamic loading of the interlock logic configuration file.

[0037] Among them, the IOC server includes an IOC main server and an IOC backup server. All IOC servers collect and process key parameters. Its main server is a server for real-time calculation, and the backup server is a backup server that can be switched and adjusted in time when the main server fails.

[0038] Specifically, as Figure 3 shown, the dynamic interlock rules in the interlock logic module include: first-level alarm: when the magnet current deviation exceeds 50 ppm but does not reach the threshold, only record the fault information; second-level power-off: when the magnet current exceeds 105% of the rated value or the cooling water temperature exceeds 40 °C, cut off the power supply of the magnet; third-level shutdown: when the vacuum degree is lower than the preset safety value and the duration exceeds 10 ms, trigger the overall shutdown protection of the accelerator.

[0039] Specifically, as Figure 4 shown, the redundant communication network adopts a dual network interface design, realizes data synchronization through the UDP redundancy protocol, and the communication link switching delay is less than 5 ms. The redundant communication network is used to transmit relevant data between the IOC main server and the backup server. Among them, in the redundant communication network, it is connected to the IOC server through the main switch to transmit relevant key parameters, and transmit the relevant parameters to the IOC main server, collect and store relevant data and process them in the main server. At the same time, the main switch transmits the data to the backup server through the backup switch. The backup switch, as a standby device, collects and stores relevant data and processes them. The main server and the backup server perform data synchronization for the data transmitted through the dual network interface through the protocol.

[0040] Specifically, the real-time monitoring and data archiving module includes a data archiving module and a monitoring interface. The data archiving module, based on the long-term storage function of fault data of EPICS ArchiverAppliance (the archiving system of EPICS), saves the original data 10 seconds before and after the fault is triggered. This module is mainly used for classifying, storing, and querying operation data. The monitoring interface integrates the Grafana visualization interface to display the status of the magnet system and the historical fault trend in real time.

[0041] Specifically, the execution operations of the interlock logic module for judging and hierarchically responding to execute actions according to the dynamic interlock rules include: Level 1 response: Synchronously push alarm information to the operator interface OPI (Operator Interface) and the mobile terminal. Level 2 response: Send a low-level power-off signal to the magnet power supply through the digital output DO (Digital Output) module. Level 3 response: Control the accelerator to perform an overall shutdown through the digital output module.

[0042] Specifically, the dynamic interlock rules in the interlock logic module support remote configuration. Cross-domain parameter modification is achieved through the TLS encryption channel of EPICS Gateway using a remote computing device, and the modification process does not require the system to be shut down.

[0043] Specifically, the distributed EPICS control system is also equipped with a fault recovery mechanism, which is implemented through a backup server and a data archiving module connected to the IOC server, i.e., the main server. When a fault in the IOC server is detected, it automatically switches to the hot backup server. After the fault is recovered, the data lost during the fault period is reconstructed through the EPICS database playback function.

[0044] Specifically, the trigger conditions in the dynamic interlock rules support multi-parameter combined judgment. On the other hand, when the cooling water flow rate is lower than 1 L / min and the water temperature exceeds 40 °C, the magnet current is restricted to 70% of the rated value; when the vacuum degree decline rate exceeds 1 mBar / s, a level 3 shutdown protection is directly triggered.

[0045] Specifically, in the distributed EPICS control system, data interaction is realized through EPICS process variables PV (Process Variable) and other subsystems of the accelerator (including the radio frequency system and the beam diagnostic system) to form a global interlock protection network.

[0046] Specifically, the distributed EPICS control system is connected to the magnet power supply, temperature sensors, and vacuum gauges through a hardware interface module to obtain relevant key parameters; at the same time, it is also connected to a digital output module and a motion controller that execute interlock actions.

[0047] Specifically, the hardware interface module supports Modbus TCP (Modbus Transmission Control Protocol) and OPC UA (OLE for Process Control Unified Architecture) protocols and is compatible with the data access of third-party devices.

[0048] In view of the above technical solution, the present invention proposes a linear accelerator magnet interlock safety control system based on EPICS. By constructing a distributed EPICS control system and combining real-time data acquisition, dynamic interlock logic judgment, and fault classification and handling mechanisms, efficient and safe monitoring and rapid response of the magnet system are realized.

[0049] The system core modules include:

[0050] 1. EPICS IOC (Input / Output Controller) cluster: Deploy multiple IOC servers, which are respectively responsible for the real-time acquisition and preprocessing of key parameters such as magnet power status, cooling water temperature, and vacuum degree;

[0051] 2. Interlock logic module: Use EPICS's SNL to write dynamic interlock rules, supporting multi-level fault judgment (such as primary alarm, secondary power-off, and emergency stop);

[0052] 3. Real-time monitoring and data archiving module: Realize the long-term storage of fault data through EPICS's Archiver Appliance and integrate the Grafana visualization interface;

[0053] 4. Fault recovery and redundancy mechanism: Set a primary server and a backup server in the IOC server. The primary server and the backup server adopt dual network interface redundancy communication and implement IOC hot backup technology through the backup server to ensure that a single point of failure does not affect the overall operation of the system.

[0054] Regarding the above technical solution, explain the technical principles in the relevant modules:

[0055] 1. Data acquisition and preprocessing

[0056] Regarding the IOC cluster in the distributed EPICS control system, it includes the following:

[0057] (1) Underlying communication protocol: The IOC cluster adopts EPICS's Channel Access CA protocol to achieve low-latency data transmission through UDP broadcast and supports multicast group multicast to optimize network load; among them, the CA protocol is mainly used for communication between the IOC server and the subsequent interlock logic module, monitoring interface, and data archiving module. During the data acquisition process, the IOC server communicates through, for example, the RS485 protocol.

[0058] (2) Hardware interface adaptation: The IOC cluster is compatible with a variety of hardware interface modules through EPICS device support modules (such as asyn, StreamDevice). The compatible hardware interface modules include Modbus TCP, OPC UA, and VME (VersaModule Eurocard), enabling real-time data acquisition from devices such as magnet power supplies, temperature sensors, and vacuum gauges.

[0059] (3) Data preprocessing: Filter (such as median filtering, moving average) and calibrate (such as current - magnetic field strength conversion) the raw data in the IOC server to reduce noise interference and improve data availability.

[0060] 2. Dynamic interlock logic implementation

[0061] For the interlock logic module in the distributed EPICS control system, it includes the following:

[0062] (1) SNL state machine design: Write interlock rules using EPICS' SNL, supporting multiple state transitions and conditional judgments. For example:

[0063] state NormalOperation { / / State: Normal operation

[0064] when (PV(MAG:PS1:Current) > 105) { / / When the current of power supply 1 exceeds 105A

[0065] issueCommand("PS1_OFF"); / / Execute the operation command to turn off power supply 1

[0066] transition to FaultState; / / System state switches to "Fault state"

[0067] }

[0068] when (PV(COOL:Temp) > 45 && PV(COOL:Flow) < 10) { / / When the temperature of the cooling system > 45 degrees and the coolant flow < 10 L / min

[0069] issueCommand("PS1_REDUCE"); / / Execute the command to reduce the load of power supply 1

[0070] transition to WarningState; / / System state switches to "Warning state"

[0071] }

[0072] }

[0073] (2) Multi - level interlock mechanism: Handle according to the severity of the fault:

[0074] 1) First - level alarm: When the magnet current deviation exceeds 50 ppm but does not reach the threshold, only record the fault information;

[0075] 2) Second - level power cut: When the magnet current exceeds 105% of the rated value or the cooling water temperature exceeds 40 °C, cut off the power supply to the magnet;

[0076] 3) Third - level shutdown: When the vacuum degree is lower than the preset safety value and lasts for an excessive time, trigger the overall shutdown protection of the accelerator.

[0077] 3. Real - time monitoring and data archiving

[0078] For the real - time monitoring and data archiving module in the distributed EPICS control system, it includes the following:

[0079] (1) Data storage: Achieve high - throughput data archiving (typical value > 10 kPV / s) through EPICSArchiverAppliance, and support the storage of raw data for 10 seconds before and after the fault;

[0080] (2) Visualization interface: Integrate Grafana as the monitoring front - end, support real - time curve display, historical data playback, and alarm information push;

[0081] (3) Fault traceability: Fault data indexing based on timestamps, support quickly locating the root cause of the fault (such as the correlation between the trigger time of magnet current mutation and the abnormal cooling water temperature).

[0082] 4. Redundancy and fault - tolerance mechanism

[0083] For the main server and backup server in the IOC server combined with the real - time monitoring and data archiving module, it includes the following:

[0084] (1) Dual - network - port redundant communication: The main server and backup server adopt the UDP redundant protocol (such as EPICS PVA) to achieve parallel transmission of dual network ports. When a single network port fails, it automatically switches, and the switching delay < 5 ms;

[0085] (2) IOC hot backup: Realize real - time synchronization of the main and backup servers through the redundant IOC mechanism of EPICS. When the main server fails, it automatically switches to the backup server, and the switching time < 50 ms;

[0086] (3) Fault recovery: After the fault is recovered, reconstruct the data lost during the fault through the EPICS database playback function to ensure data integrity.

[0087] For the above technical solutions, the following effects are achieved:

[0088] 1. Dynamic interlock logic: Using software-defined SNL scripts, the interlock rules can be dynamically loaded through configuration files without shutting down the system for modification.

[0089] 2. Multi-level response mechanism: Classify and handle according to the severity of the fault (e.g., only record the first-level alarm, trigger the magnet power supply to cut off for the second-level alarm, and perform an emergency shutdown for the third-level alarm).

[0090] 3. Distributed fault-tolerant design: The IOC cluster supports load balancing and automatic fault switching, and the communication link uses the UDP redundancy protocol to ensure real-time performance.

[0091] 4. Global collaborative interlock: Realize data interaction through EPICS process variables PV and other subsystems of the accelerator (such as vacuum and RF systems) to form a global interlock protection network. In the global interlock protection network, relevant acquisition data of other systems such as beam measurement and vacuum systems can also be collected through process variables PV, and abnormal judgments are made based on the collected data. After an abnormality is judged, system protection is triggered through the corresponding safety interlock content.

[0092] For the above technical solutions, the underlying principles that may be involved are explained in detail:

[0093] 1. Working mechanism of EPICS IOC

[0094] Data acquisition: The IOC communicates with the hardware interface module in the hardware device through the device support module (such as asyn), and converts the raw data in the hardware device into key parameters, namely EPICS process variables PV.

[0095] Data processing: Perform preprocessing such as filtering and calibration on the key parameters in the IOC server to reduce noise and improve data quality.

[0096] Data publishing: The IOC server connects to the interlock logic module, data archiving module, and monitoring interface through the CA protocol, and publishes the key parameters to the EPICS network through the CA protocol for use by other modules (such as the interlock logic module).

[0097] 2. Execution process of the SNL state machine

[0098] State initialization: Load the SNL script when the system starts, and initialize the state machine (such as the NormalOperation state).

[0099] Condition judgment: Trigger state transition (such as from NormalOperation to FaultState) according to preset conditions (such as magnet current > 105%).

[0100] Action execution: Execute preset actions (such as running with power cut off) during state transition.

[0101] 3. Implementation of Redundant Communication

[0102] Dual Network Interface Configuration: Each IOC server is configured with dual network interfaces, which are respectively connected to the primary and standby switches;

[0103] UDP Redundant Protocol: Dual network interface parallel transmission is achieved through the EPICSPVA (PVAccess) protocol, and automatic switching to the standby network interface occurs when a single network interface fails;

[0104] Data Synchronization: The primary and standby IOC servers achieve real-time data synchronization through the redundant IOC mechanism of EPICS to ensure that data is not lost during a fault switch.

[0105] 4. Fault Recovery Mechanism

[0106] Data Replay: After fault recovery, the data lost during the fault period is reconstructed through the EPICS database replay function;

[0107] System State Reconstruction: The system state (such as magnet current, cooling water temperature) is reconstructed based on the replay data to ensure that the system resumes normal operation.

[0108] The following provides relevant example demonstrations for the above technical solutions:

[0109] Example 1: Overcurrent Protection for Magnet

[0110] 1. Parameter Configuration: Define the magnet current PV (such as ˋMAG:PS1:Currentˋ) in the EPICS database, and set the interlock threshold to 105% of the rated value; Configure the SNL script to achieve current overlimit judgment and action triggering.

[0111] 2. Example of SNL Script:

[0112] state CheckCurrent{ # Define the system state as "Current Detection State";

[0113] when(PV(MAG:PS1:Current)>105){ # Monitoring condition: When the current of Power Supply 1 exceeds the safety threshold of 105A;

[0114] issueCommand("PS1_OFF"); # Execute emergency operation: Send the command to turn off Power Supply 1;

[0115] transition to FaultState; # Enter the preset fault handling process;

[0116] }

[0117] }

[0118] 3. Execute actions: After being triggered, output a low-level signal through the digital output (DO) module to cut off the power supply to the magnet; synchronously record fault information (such as trigger time, current value) and push an alarm to the operator interface (OPI).

[0119] Example 2: Fault linkage of the cooling system

[0120] 1. Multi-parameter interlock: When the water temperature > 40°C and the flow rate < 1 L / min, automatically reduce the magnet current to 70%; configure the EPICS database to achieve multi-parameter joint judgment.

[0121] 2. EPICS database design

[0122] ˋˋˋpython

[0123] record(ai,"COOL:Temp"){Record type: analog input

[0124] field(SCAN,"1second") # Scan period: Read sensor data once per second

[0125] }

[0126] record(calc,"COOL:Fault"){ # Record type: logic calculation module

[0127] field(CALC,"A>45&&B<10") # Logic expression: Trigger when the temperature > 45°C and the flow rate < 10 L / min

[0128] field(INPA,"COOL:Temp") # Input parameter A is bound to the temperature value

[0129] field(INPB,"COOL:Flow") # Input parameter B is bound to the flow rate value

[0130] }

[0131] 3. Execute actions: After being triggered, adjust the magnet position through the motion controller to reduce beam loss; record the cooling system data (such as water temperature, flow rate curve) 10 seconds before and after the fault.

[0132] Example 3: Data storage and historical data search

[0133] 1. Data storage configuration: Use EPICSArchiverAppliance as the data storage engine, configure high-throughput archiving; define the storage strategy for key PVs (such as storing the magnet current and cooling water temperature once per second, and increasing the storage frequency to 100 Hz when a fault is triggered).

[0134] 2. Historical data search: Realize historical data retrieval through the ChannelArchiver tool of EPICS, support query by conditions such as time range, PV name, etc.; Integrate Grafana as the visualization front-end, support the display of historical data curves and fault analysis.

[0135] 3. Fault tracing function: Index fault data based on timestamps to quickly locate the root cause of faults (such as the correlation between the trigger time of sudden change in magnet current and abnormal cooling water temperature); Provide a data export function, support exporting the original data 10 seconds before and after the fault in CSV (Comma-Separated Values) format.

[0136] Example 4: Remote management and dynamic configuration

[0137] 1. Remote management function: Dynamically modify the interlock threshold through the CSS (ControlSystemStudio) interface (such as adjusting the magnet current threshold from 105% to 110%); Use the EPICS Gateway to achieve data synchronization across security domains, support remote monitoring and configuration.

[0138] 2. Example of dynamic configuration: Define configurable PVs (such as ˋMAG:PS1:Thresholdˋ) in the EPICS database, support modification during runtime; Dynamically load configuration parameters through SNL scripts to achieve real-time adjustment of interlock rules.

[0139] Example 5: Redundancy and fault tolerance mechanisms

[0140] 1. Dual network port redundancy configuration: Each IOC server is configured with dual network ports, which are respectively connected to the primary and standby switches; Realize parallel transmission of dual network ports through the UDP redundancy protocol, and automatically switch in case of single network port failure.

[0141] 2. Implementation of IOC hot backup: Configure primary and standby IOC servers, and achieve real-time data synchronization through the redundant IOC mechanism of EPICS; Automatically switch to the backup server in case of primary server failure.

[0142] 3. Fault recovery process: After fault recovery, reconstruct the data lost during the fault through the playback function of the EPICS database; Reconstruct the system state (such as magnet current, cooling water temperature) according to the playback data to ensure the system resumes normal operation.

[0143] Through the example demonstration of the above technical solutions, the present invention constructs a highly reliable and low-latency magnet safety control system by deeply integrating the EPICS framework and customized interlock logic, providing technical guarantee for the long-term stable operation of the linear accelerator. This system will be applied to the High Intensity Magnetic Field Experimental Facility of Anhui University.

[0144] The above are only the preferred specific embodiments of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present application should be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A linear accelerator magnet interlock safety control system based on EPICS, characterized in that: It includes an IOC cluster and an interlocking logic module connected in sequence, wherein the IOC cluster is also connected to a real-time monitoring and data archiving module; The key parameters of the linear accelerator magnet interlock are obtained through the IOC cluster, the interlocking logic module performs hierarchical judgment according to the key parameters, and the linear accelerator magnet interlock is controlled according to the judgment result, and the key parameters are stored through the real-time monitoring and data archiving module.

2. The method according to claim 1, characterized in that The IOC cluster includes several IOC servers, and the different IOC servers are used to collect and process different key parameters, wherein the key parameters include magnet power status, cooling system parameters and vacuum system parameters, and the IOC servers perform external interaction through the CA protocol.

3. The method according to claim 3, characterized in that: The IOC server includes a main server and a backup server, and the main server and the backup server are connected through a redundant communication network, wherein the redundant communication network adopts a dual network port design and synchronizes data between the main server and the backup server through a UDP redundant protocol.

4. The method according to claim 1, characterized in that: The interlocking logic module is provided with a dynamic interlocking rule, wherein the dynamic interlocking rule is a hierarchical judgment rule, wherein the hierarchical judgment rule is used to obtain a corresponding response result according to key parameters.

5. The method according to claim 1, characterized in that: The dynamic interlocking rules include: when the magnet current exceeds the preset range but does not reach the threshold, only the fault information is recorded; when the magnet current exceeds the threshold or the cooling water temperature exceeds the threshold, the magnet operating power is reduced or the magnet power supply is cut off; when the vacuum degree is lower than the safety value and the duration exceeds the threshold, the accelerator overall shutdown protection is triggered.

6. The method according to claim 1, characterized in that The IOC cluster and interlocking logic module are also connected to a monitoring interface, wherein the monitoring interface is used to display alarm information and key parameters.

7. The method according to claim 6, characterized in that The interlocking logic module is connected to a digital output module and a motion controller. The position of the magnet in the linear accelerator is adjusted by the motion controller to reduce the operating power of the magnet. The digital output module outputs a corresponding signal to stop the magnet power supply or the accelerator start-stop device.

8. The method according to claim 4, characterized in that The dynamic interlocking rules are written through SNL.

9. The method according to claim 1, characterized in that: The dynamic interlocking rule also makes several parameter combination judgments based on key parameters.

10. The method according to claim 1, characterized in that The distributed EPICS control system is connected to external devices through a hardware interface module, wherein the external devices include related systems of linear accelerator magnet interlocking and devices equipped with an interlocking logic module, and the hardware interface module is an interface that supports different protocols.

Images