Instrument control system network reliability verification method and device

Abstract

The invention discloses an instrument control system network reliability verification method and device. The method comprises the following steps: constructing a formalized model and network topology information according to an instrument control system; constructing a verification model according to the formalized model and the network topology information; performing verification analysis on the parameter information and the network topology information according to a verification model; according to the method, on the basis of actual construction of the instrument control system, the formalized model and network topology information are accurately constructed, the formalized model can present complex system behaviors and attributes in a mathematics and logic mode, the relation and interaction logic between all parts of the system are clearly described, and the system performance is improved. Potential design defects and problems are fully displayed; the network topology information visually displays the network structure of the system, including key information such as the connection relation of the equipment and the communication path, and provides visual reference for the establishment of a verification model.

Description

Technical Field

[0001] The present invention relates to the field of instrumentation and control system reliability, and in particular to a method and device for verifying the reliability of an instrumentation and control system network. Background Art

[0002] Currently, nuclear power plant instrumentation and control (DCS) systems primarily utilize fully digital systems, significantly improving the safety, reliability, and economic efficiency of nuclear power plant operations. However, compared to traditional analog systems, digital I&C systems utilize a large number of microprocessors, supporting software, and I / O cards, all based on computer network technology. This increases network complexity and introduces network reliability issues.

[0003] Compared with similar systems in traditional thermal power plants, the DCS system of a nuclear power plant has the characteristics of more data collection points and large network communication volume. At the same time, the DCS system of a nuclear power plant has higher requirements for network communication reliability, including the reliability of inter-station communication between control stations and operator stations, as well as the reliability of data communication between stations and servers. Network communication reliability is directly related to the overall reliability of the system.

[0004] The traditional method for verifying DCS network design is to build a specific DCS environment and evaluate network reliability on a real system. This method has the following disadvantages:

[0005] (1) Problems are exposed late. Network connectivity reliability verification depends on system implementation, making it difficult to discover problems in the early design stage.

[0006] (2) The verification cost is high. Complete verification depends on the construction of a complete set of instrumentation and control environment, which is usually difficult to achieve before leaving the factory. As a compromise, most can only conduct partial scale verification under the condition of building only a small number of equipment.

[0007] (3) The verification content lacks flexibility. It is difficult to generate any type of equipment failure at any time on real instrumentation and control equipment. The evaluation of network connectivity reliability is limited by objective conditions and is difficult to expand.

[0008] With the development of modern network technology, network communication research methods are constantly evolving, and the verification of DCS network designs is no longer limited to real-world network environments. Conventional network communication research methods, such as simulation, while effective, fail to fully reveal potential issues in network design, particularly in meeting the high reliability requirements of nuclear power plant DCS networks. Therefore, network verification and formal verification techniques have emerged as key tools to address this challenge.

[0009] Network verification uses rigorous mathematical methods to infer all possible network behaviors based on the network's configuration or forwarding state. These behaviors are then compared with the intended behavior to verify that the intended behavior is correctly implemented. Formal verification, a core technology for network verification, is built on solid mathematical foundations such as mathematical logic and automata theory. It not only detects errors in the system but also ensures their absence through rigorous mathematical proof, making it a powerful complement to traditional testing methods. While formal methods have limitations in some areas, such as high development costs, they provide a high degree of assurance of system correctness, leading to their widespread application in high-risk domains.

[0010] Currently, typical formal verification techniques include model checking and theorem proving. Model checking methods are highly automated and fast, enabling them to detect errors in the early stages of DCS network design and guide DCS network design modifications by reproducing counterexamples. While theorem proving methods can effectively avoid state explosion and path explosion, they rely heavily on the user's understanding of the system and mathematical experience, making them complex to use and lacking scalability.

[0011] Patent document CN104298593B discloses a reliability verification method for SOA systems based on complex network theory. The method includes analyzing the structural and functional characteristics of the SOA system, obtaining relevant topological information required for system modeling, and establishing a topological model. Furthermore, network visualization technology is used to generate a topological diagram of the network. Based on complex network theory, statistical analysis is performed on the basic static topological properties of the established reliability model, including node in-degree distribution, node out-degree distribution, and software sharing analysis. Based on the established system topology, a cascading failure model for the SOA system is established based on complex network theory to obtain a system reliability model. A simulation experiment scheme suitable for SOA system reliability verification is designed, and a reliability simulation experiment for the SOA system is completed. Vulnerability analysis and reliability calculation are performed on the system, a list of key software with a significant impact on system reliability is generated, and the causes are analyzed. A quantitative reliability assessment result of the system is also generated, providing a basis for the design, planning, management, and optimized control of high-reliability systems. However, this method does not address the problem that reliability verification of instrumentation and control system networks is generally not performed according to standardized methods during the design process. Once a network failure occurs, it will lead to abnormal control system functions and loss of functionality.

[0012] Patent document CN105469317B discloses a reliability analysis method for a power communication network, including using a matrix method to describe the service topology of the power communication network; generating a link failure matrix when the network service topology fails; analyzing the impact range of the failed link by determining whether a service channel exists; determining the key components of the system and obtaining a failure set of key components; optimizing the failure set of key components to obtain a minimum load service channel. However, this method does not address the problem that the reliability of the instrumentation and control system network is generally not verified according to standardized methods during the design process. Once a network failure occurs, it will lead to abnormalities and loss of function of the control system.

[0013] In summary, the above two existing patents do not solve the problem that the reliability of the instrumentation and control system network is generally not verified according to standardized methods during the design process. Once a network failure occurs, it will lead to abnormalities and loss of function of the control system. Summary of the Invention

[0014] Based on the above technical problems, the present invention proposes a method and device for verifying the reliability of the instrumentation and control system network to solve the problem that the instrumentation and control system network is generally not verified for reliability according to standardized methods during the design process. Once a network failure occurs, it will cause abnormalities and loss of function of the control system.

[0015] To achieve the above object, the present invention proposes a method for verifying the reliability of an instrumentation and control system network.

[0016] A method for verifying the reliability of an instrumentation and control system network, comprising:

[0017] Obtain network topology information based on the instrumentation and control system, and construct a formal model template based on the protocol;

[0018] Constructing a verification model according to the formalized model template and the network topology information;

[0019] Verification analysis is performed on the parameter information and the network topology information according to the verification model.

[0020] Furthermore, network topology information is obtained according to the instrumentation and control system, and a formal model template is constructed according to the protocol, including:

[0021] Acquire the interaction logic of at least one protocol in the instrumentation and control system, and construct the formal model template according to the interaction logic of the protocol;

[0022] The structural hierarchy in the instrumentation and control system and the corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and the network topology information is obtained.

[0023] Furthermore, obtaining the interaction logic of at least one protocol in the instrumentation and control system includes:

[0024] The interaction logic includes one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion.

[0025] Furthermore, constructing the formalized model template according to the interaction logic of the protocol includes:

[0026] During the operation of the instrumentation and control system, the implementation details of the protocol are identified, the interaction logic is retained, and a reusable formal model template is constructed.

[0027] Furthermore, identifying a constraint condition of at least one of the components includes:

[0028] The constraint conditions include the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

[0029] Furthermore, constructing a verification model according to the formalized model template and the network topology information includes:

[0030] The data of the instrumentation and control system is collected, the functions and performance indicators that need to be verified are determined, and a verification model is constructed according to the formalized model template and the network topology information.

[0031] Furthermore, constructing a verification model according to the formalized model template and the network topology information, and constructing a verification model according to the formalized model template and the network topology information includes:

[0032] The framework of the verification model is created according to the formalized model template, the environment is initialized, network nodes and connection links are created, interfaces are configured, and the verification model is constructed according to a combination of network topology information.

[0033] Furthermore, constructing a verification model according to the formalized model template and the network topology information includes:

[0034] The verification model includes a function verification model and a performance verification model.

[0035] Furthermore, verification analysis is performed on the parameter information and the network topology information according to the verification model, including:

[0036] Input parameter information, construct a network topology diagram according to the network topology information and the parameter information, perform functional verification and what-if functional verification on the network topology diagram according to the functional verification model template, and save the network topology information, the result of the functional verification and the result of the what-if functional verification.

[0037] Furthermore, the functional verification includes:

[0038] The functional verification model is used to verify the reachability between any two points, forwarding loops, forwarding black holes, data frame forwarding isolation and / or device equivalence.

[0039] Furthermore, the what if function verification includes:

[0040] In the event of failure of more than one link or more than one node, the reachability, forwarding loop, forwarding black hole, data frame forwarding isolation and / or device equivalence between any two points can be verified through the what-if functional verification model.

[0041] Furthermore, verification analysis is performed on the parameter information and the network topology information according to the verification model, including:

[0042] Perform performance verification and what-if performance verification on the network topology diagram according to the performance verification model, and save the network topology information, the results of the performance verification and the results of the what-if performance verification.

[0043] Furthermore, the performance verification includes:

[0044] The data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0045] Furthermore, the what if performance verification includes:

[0046] In the event that one or more links or one or more nodes fail, the data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0047] Furthermore, it also includes:

[0048] A prototype network is constructed according to the network topology information, and a test device is used to perform data frame broadcasting, address learning, back-to-back and / or broadcast delay testing on the prototype network and record the results.

[0049] To achieve the above object, the present invention also proposes a network reliability verification device for an instrumentation and control system.

[0050] A network reliability verification device for an instrumentation and control system, characterized by comprising:

[0051] A first construction module is used to construct a formal model template and network topology information according to the instrumentation and control system;

[0052] A second construction module is configured to construct a verification model according to the formalized model template and the network topology information;

[0053] The verification test module is used to verify and analyze the parameter information and the network topology information according to the verification model.

[0054] Furthermore, the first building block is used to:

[0055] Acquire the interaction logic of at least one protocol in the instrumentation and control system, and construct the formal model template according to the interaction logic of the protocol;

[0056] The structural hierarchy in the instrumentation and control system and the corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and the network topology information is obtained.

[0057] Furthermore, the first building block is used to:

[0058] The interaction logic includes one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion.

[0059] Furthermore, the first building block is used to:

[0060] During the operation of the instrumentation and control system, the implementation details of the protocol are identified, the interaction logic is retained, and a reusable formal model template is constructed.

[0061] Furthermore, the first building block is used to:

[0062] The constraint conditions include the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

[0063] Furthermore, the second building block is used to:

[0064] The data of the instrumentation and control system is collected, the functions and performance indicators that need to be verified are determined, and a verification model is constructed according to the formalized model template and the network topology information.

[0065] Furthermore, the second building block is used to:

[0066] The framework of the verification model is created according to the formalized model template, the environment is initialized, network nodes and connection links are created, interfaces are configured, and the verification model is constructed according to a combination of network topology information.

[0067] Furthermore, the test module is used to:

[0068] The verification model includes a function verification model and a performance verification model.

[0069] Furthermore, the test module is used to:

[0070] Input parameter information, construct a network topology diagram according to the network topology information and the parameter information, perform functional verification and what-if functional verification on the network topology diagram according to the functional verification model template, and save the network topology information, the result of the functional verification and the result of the what-if functional verification.

[0071] Furthermore, the test module is used to:

[0072] The functional verification model is used to verify the reachability between any two points, forwarding loops, forwarding black holes, data frame forwarding isolation and / or device equivalence.

[0073] Furthermore, the test module is used to:

[0074] In the event of failure of more than one link or more than one node, the reachability, forwarding loop, forwarding black hole, data frame forwarding isolation and / or device equivalence between any two points can be verified through the what-if functional verification model.

[0075] Furthermore, the test module is used to:

[0076] Perform performance verification and what-if performance verification on the network topology diagram according to the performance verification model, and save the network topology information, the results of the performance verification and the results of the what-if performance verification.

[0077] Furthermore, the test module is used to:

[0078] The data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0079] Furthermore, the test module is used to:

[0080] In the event that one or more links or one or more nodes fail, the data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0081] Furthermore, the test module is used to:

[0082] A prototype network is constructed according to the network topology information, and a test device is used to perform data frame broadcasting, address learning, back-to-back and / or broadcast delay testing on the prototype network and record the results.

[0083] Based on the above technical solution, the present invention has at least the following beneficial effects:

[0084] 1. The present invention proposes a network reliability verification method and device for an instrumentation and control system, which provides strong support for the verification and analysis of the instrumentation and control system of a nuclear power plant by constructing a formal model template, network topology information, and a formal verification model. The verification model accurately constructs the formal model template and network topology information based on the actual construction of the instrumentation and control system. The formal model template can present complex system behaviors and properties in a mathematical and logical manner, clearly describing the relationship and interaction logic between various parts of the system, so that potential design defects and problems are fully displayed. The network topology information intuitively displays the network structure of the system, providing an intuitive reference for the construction of the verification model, which not only avoids the expensive repair costs caused by these problems being discovered after the system is deployed, but also effectively reduces the safety risks caused by design defects, providing a strong guarantee for the safe operation of the nuclear power plant.

[0085] 2. This invention proposes a method and apparatus for verifying the network reliability of an instrumentation and control system. Comprehensive testing covers functional verification, what-if functional verification, performance verification, and what-if performance verification, ensuring the reliability and stability of the system under various conditions. By testing the system's robustness under various fault and abnormal conditions, this invention enhances the system's ability to respond to emergencies, ensuring that critical operations of a nuclear power plant are not interrupted in the face of network failures. By applying model checking technology, this invention improves the reliability of network communications, which is crucial for the high-risk nuclear energy industry.

[0086] 3. The present invention proposes a method and device for verifying the network reliability of an instrumentation and control system. Compared with traditional verification methods, this method reduces the need for setting up an actual DCS environment, allowing verification work to be performed in a more controllable simulation environment. The feedback provided by the present invention helps optimize network design and improve the overall performance of the network, thereby improving the operating efficiency of nuclear power plants. For nuclear power plant managers, the present invention provides scientific decision-making support, helping them make better decisions based on detailed test results, thereby improving the quality of decision-making. Finally, the software tool of the present invention is not only applicable to the nuclear energy industry, but can also be extended to other fields such as the thermal power industry. Currently, various industries are increasingly demanding digitalization and intelligence, and are paying more and more attention to the evaluation of network reliability. The software proposed in this patent is based on model detection technology, has strong versatility and high accuracy, and can perfectly meet the needs of various industries. In response to users' needs for rapid and accurate evaluation of network reliability, this software is characterized by stability and efficiency, has broad application prospects in multiple industries, and is expected to become an industry-standard network reliability verification tool. BRIEF DESCRIPTION OF THE DRAWINGS

[0087] The accompanying drawings, which constitute part of the present invention, are intended to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are intended to explain the present invention and do not constitute an undue limitation of the present invention. In the accompanying drawings:

[0088] Figure 1 A schematic diagram showing a flow chart of a method for verifying network reliability of an instrumentation and control system according to an embodiment is shown;

[0089] Figure 2 A schematic diagram of a function verification use case in a network reliability verification method for an instrumentation and control system according to an embodiment is shown;

[0090] Figure 3 A schematic diagram of a performance verification use case in a method for verifying network reliability of an instrumentation and control system according to an embodiment is shown;

[0091] Figure 4 A schematic diagram of a network reliability verification device for an instrumentation and control system according to an embodiment is shown. DETAILED DESCRIPTION

[0092] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present invention can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0093] The present invention is further described in detail below with reference to specific examples. These examples should not be construed as limiting the scope of protection claimed in the present invention.

[0094] Example

[0095] In order to solve the problem that the reliability verification of the instrumentation and control system network is generally not carried out according to standardized methods during the design process, once a network failure occurs, it will lead to abnormality and loss of function of the control system. The present invention proposes a method and device for verifying the reliability of the instrumentation and control system network.

[0096] To achieve the above object, the present invention further proposes a method for verifying the reliability of an instrumentation and control system network, comprising:

[0097] like Figure 1 A method for verifying the reliability of an instrumentation and control system network according to an embodiment of the present invention is shown in FIG. Figure 1 As shown in , the process mainly includes the following steps:

[0098] S1: Construct a formal model template and network topology information according to the instrumentation and control system.

[0099] Furthermore, the interaction logic of at least one protocol in the instrumentation and control system is obtained, and the formalized model template is constructed according to the interaction logic of the protocol.

[0100] Furthermore, during the operation of the instrumentation and control system, all implementation details of the instrumentation and control system are obtained. Among all the obtained implementation details, the interaction logic of the protocol is extracted using abstraction means to construct a reusable formal model template. The interaction logic of the protocol can be one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion; the interaction logic of each protocol included in the instrumentation and control system is extracted using abstraction means. If it is necessary to verify the reliability of a certain protocol of the instrumentation and control system, the interaction logic of this protocol is selected to construct a reusable formal model template; in other implementation methods, only the interaction logic of some protocols can be obtained as needed.

[0101] Specifically, taking the ERPS (Ethernet Ring Protection Switching) protocol protection reversal mechanism as an example, the processing process in the instrumentation and control system includes: Step 1, when the link between DeviceA and DeviceB fails, DeviceA and DeviceB detect the link failure, block the corresponding port on the faulty link, and refresh the FDB (Forwarding Database) table entry of the corresponding device; Step 2, DeviceA and DeviceB send out SF (Signal Failed) R-APS (Ring Auto Protection Switching) messages carrying local port link failure messages. That is, once the link failure is detected, DeviceA and DeviceB will send 3 identical R-APS messages in succession, and then continue to send them steadily at an interval of 5 seconds; Step 3, after other devices receive the SF R-APS messages sent by DeviceA and DeviceB, they all refresh the FDB table entries of the corresponding devices. When the device where the RPL Owner port is located receives the SF R-APS message, it releases the RPL Owner port and refreshes its own FDB table entry; Similarly, when the RPL After receiving the SF R-APS message, the device where the neighbor port is located releases the RPLNeighbour port and refreshes its own FDB table entry, allowing the two ports to resume receiving and sending user traffic, thus ensuring uninterrupted traffic. By extracting the core interaction logic of the ERPS protection reversal mechanism and ignoring the specific field details of the SF R-APS message, the core functions of the SF R-APS message to refresh the device FDB table entry and release the RPL Owner port and RPLNeighbour port are retained, thereby constructing a reusable formal model template.

[0102] Furthermore, a structural hierarchy in the instrumentation and control system and corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and network topology information is obtained.

[0103] Furthermore, based on the different structures into which the instrumentation and control system is divided and the components included in each layer of the structure, a preliminary network topology structure is established, and the constraints of each component are identified. The constraints may be the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port; based on the constraints, complete network topology information of the instrumentation and control system is established. In other embodiments, only the constraints of some components may be identified as needed.

[0104] Specifically, in this embodiment, the instrumentation and control system is divided into a first-layer control network and a second-layer operation network, wherein the first-layer control network includes instrumentation and control system components such as switches, communication servers, controllers, engineer stations, analysis stations, high-speed history servers, etc., and the second-layer operation network includes instrumentation and control system components such as switches, communication servers, computing servers, procedure servers, history servers, archive servers, operator stations, large screen stations, gateway stations, engineer stations, communication stations, printers, etc. According to various types of instrumentation and control system components, network topology information is preliminarily established in the network reliability verification device of the nuclear power plant instrumentation and control system; the functions of the first-layer control network switch can be divided into Ethernet ring protection switching function, address learning function, MAC address table matching function, data frame unicast function and data frame broadcast function. Therefore, it is necessary to add constraints such as the role of the Ethernet ring protection switching function, device ID, device IP address, device MAC address, etc. for the instrumentation and control system component on the basis of the preliminarily established network topology information, and embed the constraints into the instrumentation and control system network topology information.

[0105] S2: Constructing a verification model according to the formalized model template and the network topology information.

[0106] Furthermore, according to the formal model template of the protocol and the constructed network topology information of the instrumentation and control system, scripts are used to construct functional verification models respectively. The scripting language can be Python, Java or C.

[0107] Specifically, by analyzing the network topology information of the instrumentation and control system containing constraints, the constraints such as the role, device ID, device IP address, and device MAC address of the Ethernet ring protection switching function of the instrumentation and control system components are extracted. Through the mapping mechanism, the real device information is mapped into logical device information. Using Python language scripts and formal model templates, a functional verification model for SPIN verification is automatically constructed.

[0108] Specifically, by analyzing the network topology information of the instrumentation and control system containing constraints, the constraints such as the link data input, ERPS link data input, host link input, switch link input and verification data input of the instrumentation and control system network are extracted. Using Java language scripts and formal model templates, a performance verification model for self-developed engine verification is automatically constructed.

[0109] S3: Perform verification analysis on the parameter information and the network topology information according to the verification model.

[0110] Furthermore, function verification and what-if function verification are performed on the network topology information according to the function verification model, and performance verification and what-if performance verification are performed on the network topology information according to the performance verification model.

[0111] Furthermore, parameter information is input and the network topology diagram is constructed based on the network topology information and the parameter information. The parameter information includes ports, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

[0112] Furthermore, what if refers to the performance of network reliability attributes when k links or nodes fail. Whatif functional verification and what if performance verification refer to functional verification and performance verification when k links or nodes fail. By artificially setting potential fault conditions, it is further evaluated whether the nuclear power plant instrumentation and control system network can still meet the connectivity reliability attributes and performance reliability attributes when a fault occurs.

[0113] Specifically, if Figure 2 The figure shows a function verification use case diagram taking a layer of control network switches as an example. The links in the network topology information are set to normal operation. Through the function verification model, the reachability, forwarding loops, forwarding black holes, data frame forwarding isolation and device equivalence between any two points in the network are verified. The function verification results are displayed and saved. One link in the network topology information is set to fail. The reachability, forwarding loops, forwarding black holes, data frame forwarding isolation and device equivalence between any two points in the network are verified. The result of the what if function verification is saved. Figure 3 The figure shows a performance verification use case diagram using a first-layer control network switch as an example. The links in the network topology information are set to normal operation. The performance verification model is used to input the data required for performance verification. The network's data load, end-to-end delay, packet loss rate, and / or bandwidth are verified. The performance verification results are saved. Two links in the network topology information are set to failure. The network's data load, end-to-end delay, packet loss rate, and / or bandwidth are verified. The results of the what-if performance verification are displayed and saved.

[0114] Furthermore, a prototype network of the instrumentation and control system and reliability test cases are constructed according to actual needs and the network topology information, and reliability tests are performed on the prototype network. The reliability test cases include one or more of data frame broadcast, address learning, back-to-back and broadcast delay tests. Test equipment is used to construct specific data streams according to the reliability test cases, and the prototype network of the instrumentation and control system is evaluated. The evaluation content includes whether the specific data streams constructed according to the reliability test cases meet predefined reliability indicators, and reliability test records are saved.

[0115] To achieve the above object, the present invention further proposes a network reliability verification device for an instrumentation and control system, comprising:

[0116] like Figure 4FIG. 1 shows a schematic diagram of the network reliability verification device for the instrumentation and control system of the present invention. Figure 4 As shown, the device includes: a first construction module 41, a second construction module 42 and a verification test module 43. The functions of each module will be described in detail below.

[0117] A first construction module 41 is configured to obtain network topology information from the instrumentation and control system and construct a formal model template according to the protocol;

[0118] Furthermore, the first building module 41 is used to:

[0119] Acquire the interaction logic of at least one protocol in the instrumentation and control system, and construct the formal model template according to the interaction logic of the protocol;

[0120] The structural hierarchy in the instrumentation and control system and the corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and the network topology information is obtained.

[0121] Furthermore, the first building module 41 is used to:

[0122] The interaction logic includes one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion.

[0123] Furthermore, the first building module 41 is used to:

[0124] During the operation of the instrumentation and control system, the implementation details of the protocol are identified, the interaction logic is retained, and a reusable formal model template is constructed.

[0125] Furthermore, the first building module 41 is used to:

[0126] The constraint conditions include the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

[0127] A second construction module 42 is configured to construct a verification model according to the formalized model template and the network topology information;

[0128] Furthermore, the second building module 42 is used to:

[0129] The data of the instrumentation and control system is collected, the functions and performance indicators that need to be verified are determined, and a verification model is constructed according to the formalized model template and the network topology information.

[0130] Furthermore, the second building module 42 is used to:

[0131] The framework of the verification model is created according to the formalized model template, the environment is initialized, network nodes and connection links are created, interfaces are configured, and the verification model is constructed according to a combination of network topology information.

[0132] The verification test module 43 is used to verify and analyze the parameter information and the network topology information according to the verification model.

[0133] Furthermore, the verification test module 43 is used to:

[0134] The verification model includes a function verification model and a performance verification model.

[0135] Furthermore, the verification test module 43 is used to:

[0136] Input parameter information, construct a network topology diagram according to the network topology information and the parameter information, perform functional verification and what-if functional verification on the network topology diagram according to the functional verification model template, and save the network topology information, the result of the functional verification and the result of the what-if functional verification.

[0137] Furthermore, the verification test module 43 is used to:

[0138] The functional verification model is used to verify the reachability between any two points, forwarding loops, forwarding black holes, data frame forwarding isolation and / or device equivalence.

[0139] Furthermore, the verification test module 43 is used to:

[0140] In the event of failure of more than one link or more than one node, the reachability, forwarding loop, forwarding black hole, data frame forwarding isolation and / or device equivalence between any two points can be verified through the what-if functional verification model.

[0141] Furthermore, the verification test module 43 is used to:

[0142] Perform performance verification and what-if performance verification on the network topology diagram according to the performance verification model, and save the network topology information, the results of the performance verification and the results of the what-if performance verification.

[0143] Furthermore, the verification test module 43 is used to:

[0144] The data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0145] Furthermore, the verification test module 43 is used to:

[0146] In the event that one or more links or one or more nodes fail, the data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

[0147] Furthermore, the verification test module 43 is used to:

[0148] A prototype network is constructed according to the network topology information, and a test device is used to perform data frame broadcasting, address learning, back-to-back and / or broadcast delay testing on the prototype network and record the results.

[0149] In summary, it can be seen from the above description that the above embodiments of the present invention achieve the following technical effects:

[0150] 1. The present invention proposes a network reliability verification method and device for an instrumentation and control system, which provides strong support for the verification and analysis of the instrumentation and control system of a nuclear power plant by constructing a formal model template, network topology information, and a verification model. The verification model accurately constructs the formal model template and network topology information based on the actual construction of the instrumentation and control system. The formal model template can present complex system behaviors and properties in a mathematical and logical manner, clearly describing the relationship and interaction logic between various parts of the system, so that potential design defects and problems are fully displayed. The network topology information intuitively displays the network structure of the system, providing an intuitive reference for the construction of the verification model, which not only avoids the expensive repair costs caused by these problems being discovered after the system is deployed, but also effectively reduces the safety risks caused by design defects, providing a strong guarantee for the safe operation of the nuclear power plant.

[0151] 2. This invention proposes a method and apparatus for verifying the network reliability of an instrumentation and control system. Comprehensive testing covers functional verification, what-if functional verification, performance verification, and what-if performance verification, ensuring the reliability and stability of the system under various conditions. By testing the system's robustness under various fault and abnormal conditions, this invention enhances the system's ability to respond to emergencies, ensuring that critical operations of a nuclear power plant are not interrupted in the face of network failures. By applying model checking technology, this invention improves the reliability of network communications, which is crucial for the high-risk nuclear energy industry.

[0152] 3. The present invention proposes a method and device for verifying the network reliability of an instrumentation and control system. Compared with traditional verification methods, this method reduces the need for setting up an actual DCS environment, allowing verification work to be performed in a more controllable simulation environment. The feedback provided by the present invention helps optimize network design and improve the overall performance of the network, thereby improving the operating efficiency of nuclear power plants. For nuclear power plant managers, the present invention provides scientific decision-making support, helping them make better decisions based on detailed test results, thereby improving the quality of decision-making. Finally, the software tool of the present invention is not only applicable to the nuclear energy industry, but can also be extended to other fields such as the thermal power industry. Currently, various industries are increasingly demanding digitalization and intelligence, and are paying more and more attention to the evaluation of network reliability. The software proposed in this patent is based on model detection technology, has strong versatility and high accuracy, and can perfectly meet the needs of various industries. In response to users' needs for rapid and accurate evaluation of network reliability, this software is characterized by stability and efficiency, has broad application prospects in multiple industries, and is expected to become an industry-standard network reliability verification tool.

[0153] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

[0154] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

[0155] The logic and / or steps represented in the flowchart or otherwise described herein may be considered, for example, as an ordered list of executable instructions for implementing logical functions, and may be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a system including a processor, or other system that can fetch and execute instructions from an instruction execution system, apparatus, or device).

[0156] It should be understood that various parts of the present invention can be implemented using hardware, software, firmware, or a combination thereof. In the above-described embodiments, multiple steps or methods can be implemented using software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented using hardware, as in another embodiment, any one of the following technologies known in the art or a combination thereof can be used: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application-specific integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0157] It should be noted that, in the description of this specification, the reference terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" mean that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

Claims

1. A method for verifying the reliability of an instrumentation and control system network, characterized in that: include: Obtain network topology information based on the instrumentation and control system, and construct a formal model template based on the protocol; Constructing a verification model according to the formalized model template and the network topology information; Verification analysis is performed on the parameter information and the network topology information according to the verification model.

2. The method according to claim 1, characterized in that Obtain network topology information based on the instrumentation and control system, and construct a formal model template based on the protocol, including: Acquire the interaction logic of at least one protocol in the instrumentation and control system, and construct the formal model template according to the interaction logic of the protocol; The structural hierarchy in the instrumentation and control system and the corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and the network topology information is obtained.

3. The method according to claim 2, characterized in that Obtaining the interaction logic of at least one protocol in the instrumentation and control system includes: The interaction logic includes one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion.

4. The method according to claim 2, characterized in that Constructing the formal model template according to the interaction logic of the protocol includes: During the operation of the instrumentation and control system, the implementation details of the protocol are identified, the interaction logic is retained, and a reusable formal model template is constructed.

5. The method according to claim 2, characterized in that: Identifying a constraint condition of at least one of the components, including: The constraint conditions include the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

6. The method according to claim 1, characterized in that Constructing a verification model according to the formalized model template and the network topology information, including: The data of the instrumentation and control system is collected, the functions and performance indicators that need to be verified are determined, and a verification model is constructed according to the formalized model template and the network topology information.

7. The method according to claim 6, characterized in that Constructing a verification model according to the formalized model template and the network topology information, including: The framework of the verification model is created according to the formalized model template, the environment is initialized, network nodes and connection links are created, interfaces are configured, and the verification model is constructed according to a combination of network topology information.

8. The method according to claim 1, characterized in that: Constructing a verification model according to the formalized model template and the network topology information, including: The verification model includes a function verification model and a performance verification model.

9. The method according to claim 8, characterized in that Verifying and analyzing the parameter information and the network topology information according to the verification model includes: Input parameter information, construct a network topology diagram according to the network topology information and the parameter information, perform functional verification and what-if functional verification on the network topology diagram according to the functional verification model template, and save the network topology information, the result of the functional verification and the result of the what-if functional verification.

10. The method according to claim 9, characterized in that: The functional verification includes: The functional verification model is used to verify the reachability between any two points, forwarding loops, forwarding black holes, data frame forwarding isolation and / or device equivalence.

11. The method according to claim 9, characterized in that: The what if function verification includes: In the event of failure of more than one link or more than one node, the reachability, forwarding loop, forwarding black hole, data frame forwarding isolation and / or device equivalence between any two points can be verified through the what-if functional verification model.

12. The method according to claim 9, characterized in that: Verifying and analyzing the parameter information and the network topology information according to the verification model includes: Perform performance verification and whatif performance verification on the network topology diagram according to the performance verification model, and save the network topology information, the performance verification result and the whatif performance verification result.

13. The method according to claim 12, characterized in that: The performance verification includes: The data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

14. The method according to claim 12, characterized in that: The what if performance verification includes: In the event that one or more links or one or more nodes fail, the data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

15. The method according to claim 1, wherein: Also includes: A prototype network is constructed according to the network topology information, and a test device is used to perform data frame broadcasting, address learning, back-to-back and / or broadcast delay testing on the prototype network and record the results.

16. A network reliability verification device for an instrumentation and control system, characterized in that: include: A first construction module is configured to obtain network topology information according to the instrumentation and control system and to construct a formal model template according to the protocol; A second construction module is configured to construct a verification model according to the formalized model template and the network topology information; The verification test module is used to verify and analyze the parameter information and the network topology information according to the verification model.

17. The device according to claim 16, characterized in that In the first building block: Acquire the interaction logic of at least one protocol in the instrumentation and control system, and construct the formal model template according to the interaction logic of the protocol; The structural hierarchy in the instrumentation and control system and the corresponding components in the structural hierarchy are obtained, a constraint condition of at least one of the components is identified, and the network topology information is obtained.

18. The device according to claim 17, characterized in that In the first building block: The interaction logic includes one or more of state management, synchronization mechanism, error detection and correction, flow control, congestion control, connection establishment and release, routing selection, exception handling, session management, resource allocation and protocol conversion.

19. The device according to claim 17, characterized in that In the first building block: During the operation of the instrumentation and control system, the implementation details of the protocol are identified, the interaction logic is retained, and a reusable formal model template is constructed.

20. The device according to claim 17, characterized in that In the first building block: The constraint conditions include the identity of the network device, the port number corresponding to each port, the link information corresponding to each port, the network address corresponding to each port and / or the physical address corresponding to each port.

21. The device according to claim 16, characterized in that In the second building block: The data of the instrumentation and control system is collected, the functions and performance indicators that need to be verified are determined, and a verification model is constructed according to the formalized model template and the network topology information.

22. The device according to claim 21, characterized in that In the second building block: The framework of the verification model is created according to the formalized model template, the environment is initialized, network nodes and connection links are created, interfaces are configured, and the verification model is constructed according to a combination of network topology information.

23. The device according to claim 16, characterized in that In the verification test module: The verification model includes a function verification model and a performance verification model.

24. The device according to claim 23, characterized in that In the verification test module: Input parameter information, construct a network topology diagram according to the network topology information and the parameter information, perform functional verification and what-if functional verification on the network topology diagram according to the functional verification model template, and save the network topology information, the result of the functional verification and the result of the what-if functional verification.

25. The device according to claim 24, characterized in that In the verification test module: The functional verification model is used to verify the reachability between any two points, forwarding loops, forwarding black holes, data frame forwarding isolation and / or device equivalence.

26. The device according to claim 24, characterized in that In the verification test module: In the event of failure of more than one link or more than one node, the reachability, forwarding loop, forwarding black hole, data frame forwarding isolation and / or device equivalence between any two points can be verified through the what-if functional verification model.

27. The device according to claim 24, characterized in that In the verification test module: Perform performance verification and whatif performance verification on the network topology diagram according to the performance verification model, and save the network topology information, the performance verification result and the whatif performance verification result.

28. The device according to claim 27, characterized in that In the verification test module: The data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

29. The device according to claim 27, characterized in that In the verification test module: In the event that one or more links or one or more nodes fail, the data load, end-to-end delay, packet loss rate and / or bandwidth are verified using the performance verification model.

30. The device according to claim 16, characterized in that In the verification test module: A prototype network is constructed according to the network topology information, and a test device is used to perform data frame broadcasting, address learning, back-to-back and / or broadcast delay testing on the prototype network and record the results.

Images