Instrument control simulation system and method and device for testing configuration logic

Abstract

The invention provides an instrument control simulation system and a configuration logic test method and device.The method comprises the steps that first configuration logic and second configuration logic are obtained, the first configuration logic is used for indicating to output a first control instruction set to a simulation server under a preset working condition, and the second configuration logic is used for indicating to output a second control instruction set to the simulation server; the second configuration logic is used for indicating to output a second control instruction set to the simulation server under a preset working condition; loading the first configuration logic to the first controller, and loading the second configuration logic to the second controller; and operating the first controller and the second controller under a preset working condition to obtain a first test result output by the simulation server. The overall functionality and correctness of the instrument control system are verified to the maximum extent, the accuracy of a test result is improved, and then the safety of the instrument control system is improved.

Description

Technical Field

[0001] The present disclosure relates to the field of nuclear power, and particularly to a test method and device for an instrument control simulation system and configuration logic. Background Art

[0002] The safety of a nuclear power plant depends on the design concept, comprehensive design, construction level, management level of the nuclear power plant, and the quality of the nuclear power plant equipment. However, it is too idealistic to ensure the complete safety of nuclear power equipment. Therefore, an instrument control and protection system (DCS) is used to control and protect the equipment of the power station and monitor the impact of internal / external events on the nuclear power plant, which can ensure that the nuclear power plant is within the safety limit.

[0003] In order to ensure the quality of the instrument control and protection system, factory tests are required. Generally, simulation technology is used to verify and study the instrument control and protection system. However, most of the existing testing methods are to test each single function in the instrument control and protection system one by one, and this method will have testing blind spots, affecting the testing effect. Summary of the Invention

[0004] The technical problem to be solved by the present disclosure is to overcome the defect that testing each single function in the instrument control and protection system one by one in the prior art affects the testing effect, and to provide a test method and device for an instrument control simulation system and configuration logic.

[0005] The present disclosure solves the above technical problem through the following technical solutions:

[0006] In a first aspect, the present disclosure provides a test method for configuration logic, which is applied to an instrument control simulation system. The instrument control simulation system includes a simulation server loaded with a nuclear power plant simulation model, a first controller, and a second controller. The first controller is a controller in the instrument control and protection system, and both the first controller and the second controller are communicatively connected to the simulation server;

[0007] The method includes:

[0008] Obtain a first configuration logic and a second configuration logic. The first configuration logic is used to indicate to output a first set of control instructions to the simulation server under a preset working condition, and the second configuration logic is used to indicate to output a second set of control instructions to the simulation server under the preset working condition;

[0009] Load the first configuration logic onto the first controller and the second configuration logic onto the second controller;

[0010] Under the preset working condition, run the first controller and the second controller to obtain a first test result output by the simulation server.

[0011] Optionally, the method further includes:

[0012] Load the first configuration logic into the second controller;

[0013] Under a preset working condition, run the second controller to obtain a second test result output by the simulation server.

[0014] Optionally, the method further includes:

[0015] Compare the first test result with the second test result;

[0016] Adjust the first configuration logic based on the comparison result.

[0017] Optionally, after running the first controller and the second controller under a preset working condition to obtain a first test result output by the simulation server, the method further includes:

[0018] Adjust the first configuration logic and the second configuration logic according to the first test result.

[0019] Optionally, adjusting the first configuration logic and the second configuration logic according to the first test result includes:

[0020] Construct an adjustment algorithm, which is obtained by fitting the relationship between historical first test results, historical first configuration logic, and historical second configuration logic;

[0021] Input the first test result into the adjustment algorithm to obtain the adjusted first configuration logic and the adjusted second configuration logic.

[0022] Optionally, the first configuration logic is NSSS control logic;

[0023] And / or, the second configuration logic is a non-safety-class control logic other than NSSS control logic.

[0024] In a second aspect, an embodiment of the present disclosure provides a test device for configuration logic, which is applied to an instrument control simulation system. The instrument control simulation system includes a simulation server loaded with a nuclear power plant simulation model, a first controller, and a second controller. The first controller is a controller in the instrument control system, and both the first controller and the second controller are communicatively connected to the simulation server;

[0025] The device includes:

[0026] An acquisition module, configured to acquire a first configuration logic and a second configuration logic. The first configuration logic is used to indicate to output a first set of control instructions to the simulation server under a preset working condition, and the second configuration logic is used to indicate to output a second set of control instructions to the simulation server under a preset working condition;

[0027] A first loading module, configured to load the first configuration logic into the first controller and load the second configuration logic into the second controller;

[0028] The first output module is configured to run the first controller and the second controller under a preset working condition to obtain a first test result output by the simulation server.

[0029] In a third aspect, an I&C simulation system provided by an embodiment of the present disclosure includes a simulation server, a first controller, and a second controller. The first controller and the second controller are both communicatively connected to the simulation server;

[0030] The first controller is loaded with a first configuration logic, and the first configuration logic is configured to instruct to output a first set of control instructions under a preset working condition;

[0031] The second controller is loaded with a second configuration logic, and the second configuration logic is configured to instruct to output a second set of control instructions under a preset working condition;

[0032] A nuclear power plant simulation model is loaded on the simulation server. The nuclear power plant is configured to perform operations based on the first set of control instructions and the second set of control instructions to obtain a first test result.

[0033] Optionally, the nuclear power plant simulation model includes one or more of a reactor core physics model, a primary loop thermal-hydraulic model, a two-phase flow model, a containment model, a steam turbine model, a generator model, and an electrical model.

[0034] Optionally, the simulation server and the first controller are communicatively connected by means of hardwired I / O;

[0035] Optionally, the simulation server and the second controller are communicatively connected by means of virtual I / O.

[0036] The positive and progressive effects of the present disclosure are as follows:

[0037] By performing simulation tests on the first configuration logic and the second configuration logic loaded on the first controller and the second controller under a preset working condition, it is possible to verify the functional correctness of the first configuration logic and the second configuration logic in the I&C control system for the overall operation of the nuclear power plant unit and the transient trend correctness, and to verify the overall functionality and correctness of the I&C control system to the greatest extent, improve the accuracy of the test results, and further improve the safety of the I&C control system.

[0038] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 FIG. 1 is a first flowchart of a method for testing a configuration logic provided by an exemplary embodiment of the present disclosure;

[0040] Figure 2 The second process schematic diagram of a configuration logic testing method provided by an exemplary embodiment of the present disclosure;

[0041] Figure 3 The third process schematic diagram of a configuration logic testing method provided by an exemplary embodiment of the present disclosure;

[0042] Figure 4 The module schematic diagram of a configuration logic testing device provided by an exemplary embodiment of the present disclosure;

[0043] Figure 5 The first module schematic diagram of an instrument control simulation system provided by an exemplary embodiment of the present disclosure;

[0044] Figure 6 The second module schematic diagram of an instrument control simulation system provided by an exemplary embodiment of the present disclosure. Detailed implementation manners

[0045] Next, the technical solutions in the embodiments of the present disclosure will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present disclosure without creative efforts shall fall within the protection scope of the present disclosure.

[0046] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that such used data may be interchanged under appropriate circumstances so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or server including a series of steps or units does not necessarily have to be limited to those clearly listed steps or units, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0047] Before the description, the instrument control system is described as follows:

[0048] The instrument control system is also a distributed control system (DCS). The instrument control system is the core control platform of a modern nuclear power plant, characterized by high reliability, decentralized control and centralized management, and is widely used in power regulation of nuclear reactors, safety protection and monitoring of all station equipment of nuclear power plants.

[0049] For example, the functions of the I&C control system include, but are not limited to, any one or more of power control, main feedwater control, main steam bypass control, steam generator and pressurizer level control. Currently, the main testing methods for the I&C control system mainly include the following types. One is the logical closed-loop verification of the I&C control system to test the logical functions. The other is the research on the design simulation platform to provide a logical verification tool for the closed-loop of the I&C control system. For example, an online pressurized water reactor core analysis model is used to automatically update and adjust the system periodically to analyze the pressurized water reactor core parameters. In actual applications, when abnormal conditions occur in a nuclear power plant, the I&C control system will run multiple functions simultaneously according to the actual situation of the nuclear power plant. For example, the coolant system control and the safety interlock and protection functions are run simultaneously to maintain the normal operation of the nuclear power plant.

[0050] Therefore, compared with the integrated test of multiple functions of the I&C control system, there are likely to be some test blind spots in the test of a single function of the I&C control system. For example, the PID (Proportional-Integral-Derivative) adjustment function cannot be dynamically closed-loop with simple analog feedback during the factory test stage, and there are issues related to the matching of the reactor and the machine. If there are uncorrected problems in these test blind spots, it will bring some unpredictable unexpected events during the use of the I&C control system, and in the worst case, it will cause unplanned shutdowns.

[0051] As a complex system, the I&C control system includes I / O (Input / Output) acquisition cards, controllers, networks, gateways, operating systems, databases, algorithms, servers, human-machine interface stations, etc. Among the above configurations of the I&C control system, the controller and the configuration logic loaded on the controller are the core of the I&C control system and are usually the key to the factory test of the I&C control system. Based on this, the following introduces a test method for configuration logic provided by an exemplary embodiment of the present disclosure.

[0052] Since the test of the configuration logic is generally carried out before it is downloaded to the nuclear power plant, for the convenience of testing, this embodiment builds an I&C simulation system for simulating the nuclear power plant and the I&C control system. The I&C simulation system simulates the nuclear power plant process through the nuclear power plant simulation model set in the simulation server and runs the configuration logic of the I&C control through the controller. The I&C simulation system includes a simulation server loaded with the nuclear power plant simulation model, a first controller and a second controller. The first controller is the controller in the I&C control system, and both the first controller and the second controller are communicatively connected to the simulation server.

[0053] Figure 1It is a schematic flowchart of a method for testing configuration logic provided by an embodiment of the present disclosure. This specification provides method operation steps such as in the embodiment or flowchart, but based on routine or non-creative labor, it may include more or fewer operation steps. The step order listed in the embodiment is only one way among the execution orders of numerous steps and does not represent the only execution order. When the actual system or server product executes, it can be executed in the order shown in the embodiment or the drawing, or executed in parallel (for example, in an environment of parallel processors or multi-threaded processing). Specifically, as Figure 1 shown, the method may include:

[0054] S101. Obtain a first configuration logic and a second configuration logic.

[0055] Among them, the first configuration logic is used to indicate to output a first set of control instructions to the simulation server under a preset working condition, and the second configuration logic is used to indicate to output a second set of control instructions to the simulation server under the preset working condition.

[0056] Regarding the setting of the preset working condition, usually the instrument control system is involved in the test under the normal operating condition to a certain extent before leaving the factory, but only testing under the normal operating condition is not sufficient. Therefore, the preset working condition is generally set when there are transient changes in the unit state of the nuclear power plant, such as shutdown transient conditions, reactor trip transient conditions, turbine synchronization transient, linear variable load transient, standby diesel generator load test, etc.

[0057] Regarding the configuration logic, the configuration logic is a set of pre-programmed rules and algorithms used to define the monitoring, control, and response strategies of equipment or processes. Its core purpose is to make real-time decisions and output instructions based on input signals to ensure the safe and stable operation of the system under normal, transient, or fault conditions. There is no special limitation on the division of the above first configuration logic and second configuration logic, and it is selected according to the actual scenario. In the actual application process, the unit failure and the action of the protection system will cause transient fluctuations in the parameters of the instrument control system. By sending a set of control instructions to the unit through the set configuration logic, the unit will finally be brought to a relatively stable state.

[0058] Regarding the first set of control instructions, it includes but is not limited to the opening or closing of valves, the starting and stopping of pumps, the opening and closing of heaters, and rod movement, which are specifically selected according to the actual application scenario.

[0059] Regarding the second set of control instructions, it includes but is not limited to the opening or closing of valves, the starting and stopping of pumps, the opening and closing of heaters, and rod movement, which are specifically selected according to the actual application scenario.

[0060] In one embodiment, the first configuration logic is the NSSS (Nuclear Steam Supply System) control logic, and the second configuration logic is the non-safety-class control logic other than the NSSS control logic, such as rod control and rod position logic, conventional island control function logic, other control function logics of the nuclear island, main steam turbine control and diagnostic system logic, etc., and vice versa.

[0061] S102. Load the first configuration logic into the first controller and load the second configuration logic into the second controller.

[0062] Among them, the first controller is the controller actually used in the instrument control and protection system, and the second controller is a virtual controller built through simulation modeling technology. The functional form of the second controller can be set corresponding to the functional form of the first controller to share the functions in the simulation test, and it does not need to occupy the actual hardware carrier in the installation test, reducing the occupation and pressure of the first controller.

[0063] In one embodiment, if the first configuration logic is the NSSS (Nuclear Steam Supply System) control logic and the second configuration logic is the non-safety-class control logic other than the NSSS control logic, the first controller can adopt the controller actually used in the instrument control and protection system, while the second controller can use other controllers, such as a controller dedicated to simulation testing.

[0064] Test the NSSS control logic through the actually used controller and test other configuration logics through other controllers for mainly three reasons: First, the stability and reliability of the NSSS directly affect the unit operation efficiency, equipment life, etc. of the nuclear power plant. Therefore, the NSSS control logic has a greater impact on the entire nuclear power plant unit than other non-safety-class control logics. Second, loading the configuration logic into the controller actually put into use in the instrument control and protection system for testing can test the instrument control and protection system more comprehensively and accurately, obtaining more comprehensive test results. Third, only downloading the NSSS control logic to the actually used controller for testing is because if all non-safety-class control logics are downloaded to the actually used controller, it will occupy the supply hardware resources of the instrument control and protection system for a long time. Therefore, testing some other configuration logics with lower importance through other controllers can effectively share the pressure of the supply hardware resources of the instrument control and protection system.

[0065] S103. Run the first controller and the second controller under preset working conditions to obtain the first test result output by the simulation server.

[0066] Among them, the first test result can be the duration for each simulation model of the nuclear power plant to return to a stable state, but is not limited thereto. The first test result is applied to adjust the first configuration logic and the second configuration logic.

[0067] In one embodiment, the acceptance criteria for the first test result include but are not limited to: the plant parameters do not diverge, there is no reactor trip of the plant, there is no ESF (Engineered Safety Feature) actuation, the pressurizer safety valve does not open, the pressurizer electric heater is not exposed, the steam generator safety valve does not open, there is no steam discharge actuation, there is no frequent control rod movement, etc. It is necessary to check whether the responses in aspects such as the steam generator water level and pressure, the pressurizer liquid level and the primary loop pressure, and reactivity control meet the expectations and design requirements, and whether the performance index conditions of the quantifiable acceptance criteria of the nuclear power plant unit can reach a steady state within the controllable range ultimately. The unit faults and the protection system actions will cause transient fluctuations of the system parameters, and finally, the first controller and the second controller should bring the unit to a relatively stable state.

[0068] In one embodiment, the key to operating the first controller and the second controller under the preset working conditions in step S103 is to transplant the preset working conditions into the first controller and the second controller. Specifically, the preset working conditions can be installed into the first controller and the second controller in the form of command codes. The inheritability and transplantability of the preset working conditions solve the technical problems of the instrument control system manufacturers, such as the difficulty in establishing the initial state during closed-loop verification, low reproducibility, low test efficiency, and large reset workload.

[0069] In one embodiment, after step S103, when the first test result is different from the preset test result, the method further includes:

[0070] Adjusting the first configuration logic and the second configuration logic according to the first test result.

[0071] In some implementable manners, referring to Figure 2 , the adjustment of the first configuration logic and the second configuration logic specifically includes:

[0072] S201. Construct an adjustment algorithm.

[0073] The instrument control simulation system further includes a historical data server for collecting and storing historical data. The historical data server stores a database that comprehensively and completely reflects the whole process of the configuration logic test of the instrument control simulation system and the response of the simulation server.

[0074] Analyze the historical first test result, historical first configuration logic, and historical second configuration logic in the historical data server. Specifically, analyze the change trends and reasons among the historical first test result, historical first configuration logic, and historical second configuration logic, and then obtain an adjustment algorithm by fitting the relationships among the historical first test result, historical first configuration logic, and historical second configuration logic.

[0075] In addition, the adjustment algorithm includes, but is not limited to, machine learning models, deep learning models, multiple regression algorithms, least squares fitting algorithms, etc., which can be selected according to the actual situation.

[0076] S202. Input the first test result into the adjustment algorithm to obtain the adjusted first configuration logic and the adjusted second configuration logic.

[0077] In some implementable ways, the adjustment of the first configuration logic and the second configuration logic can also be centrally linked by the relevant personnel in the design, development, and test verification of the instrument control system to solve the situation where the first test result does not meet the preset test result.

[0078] In one embodiment, refer to Figure 3 , before step S103, the method further includes:

[0079] S301. Load the first configuration logic onto the second controller.

[0080] Among them, the first configuration logic is the NSSS (Nuclear Steam Supply System) control logic, the second configuration logic is the non-safety-level control logic other than the NSSS control logic, and the second controller can use a controller dedicated to simulation testing.

[0081] S302. Under the preset working conditions, run the second controller to obtain the second test result output by the simulation server.

[0082] Among them, the second test result is the duration for the simulation models of the nuclear power plant to return to the stable state, but it is not limited to this, and it is specifically selected according to the actual situation.

[0083] In one embodiment, the acceptance criteria for the second test result include, but are not limited to: the power plant parameters do not diverge, there is no power plant shutdown, there is no ESF (Engineered Safety Feature) actuation, the pressurizer safety valve does not open, the pressurizer electric heater is not exposed, the steam generator safety valve does not open, there is no steam discharge actuation, there is no frequent control rod movement, etc. It is necessary to check whether the responses in aspects such as the steam generator water level and pressure, the pressurizer liquid level and the primary loop pressure, and reactivity control meet the expectations and design requirements, and whether the performance index conditions of the quantifiable acceptance criteria of the nuclear power plant unit can reach a steady state within the controllable range ultimately. The unit faults and protection system actions will cause transient fluctuations in system parameters, and ultimately, the first controller and the second controller should bring the unit to a relatively stable state. In this embodiment, before installing the first configuration logic and the second configuration logic on the first controller and the second controller respectively for testing, the first configuration logic and the second configuration logic can also be installed on the second controller dedicated to simulation testing simultaneously for testing, so as to solve the problem of long-term occupation of the hardware supply resources of the I&C control system during the testing process. At the same time, by using the second controller dedicated to simulation testing to test the first configuration logic and the second configuration logic, some on-site commissioning tasks can be completed in advance. The second test result plays an auxiliary verification role in the preparation process of the on-site commissioning procedures, provides experience feedback for the on-site commissioning service; the second test result also gives a risk warning for the problems that are likely to occur.

[0084] In addition, this embodiment can also be implemented before step S103 to be verified in combination with the first test result, so that the test result is more accurate.

[0085] In some implementable ways, the method further includes: comparing the first test result and the second test result, and adjusting the first configuration logic based on the comparison result.

[0086] Specifically, the duration for each simulation model of the nuclear power plant to return to a stable state being greater than or equal to a preset duration can be selected from the first test result and the second test result as the comparison result, and the preset duration can be selected according to the actual situation. The adjustment process can be Figure 2The illustrated embodiment is provided for reference only and will not be described in detail here. In this embodiment, by performing simulation tests on the first and second configuration logics loaded on the first and second controllers under preset operating conditions, the functional correctness and transient trend correctness of the first and second configuration logics in the instrumentation and control system for the overall operation of the nuclear power plant units can be verified, thereby maximizing the verification of the overall functionality and correctness of the instrumentation and control system, improving the accuracy of the test results, and thereby improving the safety of the instrumentation and control system. At the same time, by combining the actual controller used in the instrumentation and control system (i.e., the first controller) with the controller built using simulation technology (i.e., the second controller), a complete dynamic response boundary is established for the first and second configuration logics. The first and second configuration logics are then immersed in the simulation server to verify the functionality and performance of the first and second configuration logics and the screen.

[0087] An exemplary embodiment of the present disclosure also provides a configuration logic testing device, which is applied to an instrumentation and control simulation system. The instrumentation and control simulation system includes a simulation server loaded with a nuclear power plant simulation model, a first controller and a second controller, and the first controller and the second controller are both communicatively connected to the simulation server.

[0088] See also Figure 4 , the device comprises:

[0089] The acquisition module 41 is used to acquire a first configuration logic and a second configuration logic, wherein the first configuration logic is used to instruct the simulation server to output a first control instruction set under a preset working condition, and the second configuration logic is used to instruct the simulation server to output a second control instruction set under a preset working condition.

[0090] The first loading module 42 is configured to load the first configuration logic into the first controller and the second configuration logic into the second controller.

[0091] The first output module 43 is configured to operate the first controller and the second controller under a preset working condition to obtain a first test result output by the simulation server.

[0092] In one embodiment, the apparatus further comprises:

[0093] The second loading module is used to load the first configuration logic into the second controller.

[0094] The second output module is used to run the second controller under a preset working condition to obtain a second test result output by the simulation server.

[0095] In one embodiment, the apparatus further comprises:

[0096] The comparison module is used to compare the first test result with the second test result.

[0097] The first adjustment module is configured to adjust the first configuration logic based on the comparison result.

[0098] In one embodiment, the apparatus further includes:

[0099] The second adjustment module is configured to adjust the first configuration logic and the second configuration logic according to the first test result.

[0100] In one embodiment, the second adjustment module includes:

[0101] A construction unit configured to construct an adjustment algorithm, which is obtained by fitting the relationship between the historical first test result, the historical first configuration logic, and the historical second configuration logic;

[0102] An adjustment unit configured to input the first test result into the adjustment algorithm to obtain the adjusted first configuration logic and the adjusted second configuration logic. [[ID=I8]]

[0103] In one embodiment, the first configuration logic is the NSSS control logic.

[0104] In one embodiment, the second configuration logic is a non-safety-level control logic other than the NSSS control logic.

[0105] For the apparatus claims, reference may be made to the method claims, and the specific implementation process will not be elaborated herein.

[0106] An exemplary embodiment of the present disclosure provides an instrument control simulation system. Refer to Figure 5 , the system includes a simulation server 51, a first controller 52, and a second controller 53. The first controller 52 and the second controller 53 are both communicatively connected to the simulation server 51.

[0107] The first controller 52 is loaded with a first configuration logic, which is configured to indicate the output of a first set of control instructions under a preset working condition; the second controller 53 is loaded with a second configuration logic, which is configured to indicate the output of a second set of control instructions under a preset working condition; a nuclear power plant simulation model is loaded on the simulation server 51, and the nuclear power plant simulation model is configured to perform operations based on the first set of control instructions and the second set of control instructions to obtain a first test result.

[0108] In one embodiment, refer to Figure 5 , both the monitoring ring network A and the monitoring ring network B are internal networks of the instrument control simulation system, and are respectively high-speed industrial ring-shaped Ethernet networks composed of 10 Gigabit switches. The simulator network is mainly used for the simulation server 51 to transmit information to other devices. Data interaction between the simulator network and the monitoring ring network is performed through an interface server 54, and high-speed industrial Ethernet is used.

[0109] In one embodiment, as Figure 5 and Figure 6 shown, the I&C simulation system is described in detail. The I&C simulation system further includes an interface server 54, a historical data server 55, and a display terminal 56.

[0110] The nuclear power plant simulation model loaded in the simulation server 51 includes, but is not limited to, a nuclear power plant process model, a general component model, a protection and safety monitoring system (PMS) model, a diverse actuation system (DAS) model, etc. The nuclear power plant process model includes one or more of a reactor core physics model, a primary loop thermal-hydraulic model, a two-phase flow model, a containment model, a steam turbine model, a generator model, and an electrical model. The simulation server 51 receives the first control instruction set and / or the second control instruction set, and performs operations based on the nuclear power plant simulation model to obtain test results.

[0111] The first controller 52, as the operating carrier of the first configuration logic, manages and runs the first configuration logic, and is also the controller actually used in the I&C control system. Under preset working conditions such as running, pausing, backtracking, and reactor shutdown, it can send the first control instruction set to the simulation server 51 according to the preset first configuration logic.

[0112] The second controller 53, as the operating carrier of the second configuration logic, manages and runs the second configuration logic, and is also the controller actually used in the I&C control system. Under preset working conditions such as running, pausing, backtracking, and reactor shutdown, it can send the second control instruction set to the simulation server 51 according to the preset second configuration logic.

[0113] Specifically, the first configuration logic is the NSSS (Nuclear Steam Supply System) control logic, and the second configuration logic is the non-safety-class control logic other than the NSSS control logic, such as the rod control and rod position logic, the conventional island control function logic, the other control function logic of the nuclear island, the main steam turbine control and diagnostic system logic, etc.

[0114] The interface server 54 runs the real-time data communication between the first controller 52 or the second controller 53 and the simulation server 51, including the transfer of the first control instruction set, the second control instruction set, the first test result, and the second test result.

[0115] Specifically, between the first controller 52 and the simulation server 51, a hardwired I / O (input / output) interface is adopted. Based on the hardwired I / O established by the signal simulation and acquisition device, using interface software and various signal simulation and acquisition card components, it is wired to the first controller 52 through hardwiring, converting the engineering quantity data of the simulation into a measurement signal, and transmitting it to the I / O card component of the DCS cabinet through hardwiring. After the I / O card component completes A / D conversion, it transmits the input I / O data to the actual controller, and the output I / O data is vice versa.

[0116] Specifically, between the second controller 53 and the simulation server 51, a virtual I / O interface is adopted. Based on the API (Application Programming Interface) interface and the standard OPC DA (Object Linking and Embedding) protocol, the communication functions of input I / O and output I / O are realized.

[0117] The historical data server is used for the collection and storage of historical data, and the historical data is used to generate an adjustment algorithm for adjusting the configuration logic. Analyze the historical first test result, historical first configuration logic, and historical second configuration logic in the historical data server. Specifically, analyze the change trend and reasons among the historical first test result, historical first configuration logic, and historical second configuration logic, and then obtain the adjustment algorithm by fitting the relationship among the historical first test result, historical first configuration logic, and historical second configuration logic.

[0118] The display terminal enables the operator to view the current state of the system and perform relevant control actions. Among them, it provides the overall status information of the nuclear power plant operation, and the operator can quickly understand the overall information of the power plant through the large screen.

[0119] Although the specific implementation manners of the present disclosure have been described above, those skilled in the art should understand that this is only an example. The protection scope of the present disclosure is defined by the appended claims. Without departing from the principles and essence of the present disclosure, those skilled in the art can make various changes or modifications to these implementation manners, but these changes and modifications all fall within the protection scope of the present disclosure.

Claims

1. A test method for configuration logic, characterized in that Applied to an instrument control simulation system, the instrument control simulation system includes a simulation server loaded with a nuclear power plant simulation model, a first controller and a second controller. The first controller is a controller in the instrument control system, and both the first controller and the second controller are communicatively connected to the simulation server; The method includes: Obtain a first configuration logic and a second configuration logic. The first configuration logic is used to indicate outputting a first set of control instructions to the simulation server under a preset working condition, and the second configuration logic is used to indicate outputting a second set of control instructions to the simulation server under the preset working condition; Load the first configuration logic into the first controller and load the second configuration logic into the second controller; Under the preset working condition, run the first controller and the second controller to obtain a first test result output by the simulation server.

2. The test method according to claim 1, wherein The method further includes: Load the first configuration logic into the second controller; Under the preset working condition, run the second controller to obtain a second test result output by the simulation server.

3. The test method according to claim 2, characterized in that, The method further includes: Compare the first test result and the second test result; Adjust the first configuration logic based on the comparison result.

4. The test method according to claim 1, characterized in that After running the first controller and the second controller under the preset working condition to obtain the first test result output by the simulation server, the method further includes: Adjust the first configuration logic and the second configuration logic according to the first test result.

5. The test method according to claim 4, characterized in that, The adjusting the first configuration logic and the second configuration logic according to the first test result includes: Construct an adjustment algorithm, which is obtained by fitting the relationship between historical first test results, historical first configuration logics and historical second configuration logics; Input the first test result into the adjustment algorithm to obtain an adjusted first configuration logic and an adjusted second configuration logic.

6. The test method according to claim 1, characterized in that, The first configuration logic is NSSS control logic; And / or, the second configuration logic is non-safety-level control logic other than NSSS control logic.

7. A test device for configuration logic, characterized in that Applied to an instrument control simulation system, the instrument control simulation system includes a simulation server loaded with a nuclear power plant simulation model, a first controller and a second controller. The first controller and the second controller are both communicatively connected to the simulation server; The device includes: An acquisition module, configured to acquire a first configuration logic and a second configuration logic. The first configuration logic is used to indicate outputting a first set of control instructions to the simulation server under a preset working condition, and the second configuration logic is used to indicate outputting a second set of control instructions to the simulation server under the preset working condition; A first loading module, configured to load the first configuration logic into the first controller and load the second configuration logic into the second controller; A first output module, configured to run the first controller and the second controller under the preset working condition to obtain a first test result output by the simulation server.

8. An instrument control simulation system, characterized in that, The system includes a simulation server, a first controller, and a second controller, and both the first controller and the second controller are communicatively connected to the simulation server; The first controller is loaded with a first configuration logic, and the first configuration logic is used to indicate the output of a first set of control instructions under a preset working condition; The second controller is loaded with a second configuration logic, and the second configuration logic is used to indicate the output of a second set of control instructions under a preset working condition; A nuclear power plant simulation model is loaded on the simulation server, and the nuclear power plant is used to perform operations based on the first set of control instructions and the second set of control instructions to obtain a first test result.

9. The instrument control simulation system according to claim 8, wherein The nuclear power plant simulation model includes one or more of a reactor core physics model, a primary loop thermal-hydraulic model, a two-phase flow model, a containment model, a steam turbine model, a generator model, and an electrical model.

10. The instrument control simulation system according to claim 9, wherein The simulation server and the first controller are communicatively connected by means of hardwired I / O; And / or, the simulation server and the second controller are communicatively connected by means of virtual I / O.

Images