Functional module online upgrading method and device of nuclear security level DCS (Distributed Control System)

Abstract

The invention relates to the technical field of nuclear security level DCS (Distributed Control System), and discloses a method and a device for online upgrading a functional module of a nuclear security level DCS system. The engineer station completes downloading of the downloading file based on the private network, the main control module receives and verifies the integrity and correctness of the downloading file and then distributes the downloading file to the function module, and the function module receives and verifies the integrity and correctness of the downloading file and then automatically executes updating. Therefore, the remote online upgrading operation of the functional module of the nuclear security level DCS system is realized, and the maintenance efficiency of the nuclear security level DCS system is improved.

Description

Technical Field

[0001] This invention relates to the field of nuclear safety-grade DCS technology, and in particular to a method and apparatus for online upgrading of functional modules of a nuclear safety-grade DCS system. Background Technology

[0002] The nuclear power plant-specific safety-grade control system (DCS) provides monitoring functions for deviations from normal operating conditions of the nuclear power plant, while driving corresponding safety functions to safely shut down the nuclear power plant and maintain a safe state, thereby ensuring the safety of the reactor, nuclear power plant equipment, personnel and environment in the event of an accident.

[0003] In nuclear power plants, safety-grade instrumentation and control systems employ a distributed architecture. Complex data acquisition, transmission, and control functions are implemented through different functional modules, which are then connected via a dedicated communication network. These modules work together to complete specific operations through data interaction. Safety-grade instrumentation and control systems are typically large in scale and contain numerous functional modules.

[0004] The current method for upgrading the functional modules of nuclear safety-grade DCS systems involves maintenance engineers performing upgrades on-site through the module's own maintenance interface, which presents difficulties in maintenance and upgrades. Therefore, there is an urgent need to propose a method to address the challenges of upgrading and maintaining nuclear safety-grade DCS systems due to their numerous and dispersed functional modules, thereby improving maintenance efficiency. Summary of the Invention

[0005] This invention provides a method and apparatus for online upgrading of functional modules of a nuclear safety-grade DCS system. The engineer station downloads the downloaded file based on a dedicated network. After receiving and verifying the integrity and correctness of the downloaded file, the main control module distributes the downloaded file to the functional modules. After receiving and verifying the integrity and correctness of the downloaded file, the functional modules automatically execute the update, thereby realizing the remote online upgrading of functional modules of the nuclear safety-grade DCS system and improving the maintenance efficiency of the nuclear safety-grade DCS system.

[0006] The present invention adopts the following technical solution:

[0007] In a first aspect, the present invention provides an online upgrade method for functional modules of a nuclear safety-grade DCS system, the method being applied to a nuclear safety-grade DCS system;

[0008] A nuclear safety-grade DCS system includes at least an engineering workstation and a field control station, which are connected via a dedicated network. Each field control station includes at least a main control module and multiple functional modules, which are also connected via a dedicated network.

[0009] The methods include:

[0010] The engineer station provides an information list of multiple functional modules. In response to the maintenance engineer's selection results based on the information list, the corresponding download file is loaded and a download command is sent to the main control module.

[0011] After receiving the download command and pausing the current tasks of the main control module and each functional module, the main control module sends a start command to the engineering station.

[0012] After receiving the start command, the engineer station sends the downloaded file and its corresponding address information to the main control module, so that the main control module can cache the downloaded file and its corresponding address information after the downloaded file passes the verification once.

[0013] The main control module sends the downloaded file to the corresponding functional module based on the address information, so that the functional module can upgrade after the second verification of the downloaded file passes.

[0014] The functional module sends the upgrade result to the main control module, so that the main control module can send the distribution completion message to the engineer station.

[0015] Secondly, the present invention provides an online upgrade device for functional modules of a nuclear safety-grade DCS system, the device being deployed in the nuclear safety-grade DCS system;

[0016] A nuclear safety-grade DCS system includes at least an engineering workstation and a field control station, which are connected via a dedicated network. Each field control station includes at least a main control module and multiple functional modules, which are also connected via a dedicated network.

[0017] The device includes: a download software unit deployed on the engineering station, a distribution unit deployed on the main control module, and multiple upgrade units deployed on multiple functional modules respectively;

[0018] The download software unit provides a list of information for multiple functional modules. In response to the maintenance engineer's selection results based on the information list, it loads the corresponding download file and sends a download instruction to the distribution unit.

[0019] After receiving the download instruction and pausing the current transactions of the main control module and each functional module, the distribution unit sends a start instruction to the download software unit.

[0020] After receiving the startup command, the software download unit sends the download file and its corresponding address information to the distribution unit.

[0021] After the downloaded file passes the verification once, the distribution unit caches the downloaded file and its corresponding address information, and sends the downloaded file to the corresponding upgrade unit according to the address information;

[0022] After the downloaded file passes the second verification, the upgrade unit performs the upgrade and sends the upgrade result to the distribution unit.

[0023] The distribution unit sends a distribution completion message to the download software unit.

[0024] In the above-mentioned scheme implemented by the online upgrade method and device for functional modules of the nuclear safety-grade DCS system, the engineer station downloads the download file based on a dedicated network. After receiving and verifying the integrity and correctness of the download file, the main control module distributes the download file to the functional modules. After receiving and verifying the integrity and correctness of the download file, the functional modules automatically perform the update, thereby realizing the remote online upgrade operation of the functional modules of the nuclear safety-grade DCS system and improving the maintenance efficiency of the nuclear safety-grade DCS system. Attached Figure Description

[0025] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0026] Figure 1 This is a schematic diagram of the structure of a nuclear safety-grade DCS system in one embodiment of the present invention;

[0027] Figure 2 This is a flowchart illustrating an online upgrade method for functional modules of a nuclear safety-grade DCS system according to an embodiment of the present invention.

[0028] Figure 3 This is a flowchart illustrating an online upgrade method for functional modules of a nuclear safety-grade DCS system according to another embodiment of the present invention.

[0029] Figure 4 This is a flowchart illustrating the online upgrade method for functional modules of a nuclear safety-grade DCS system in another embodiment of the present invention.

[0030] Figure 5 This is a flowchart illustrating the online upgrade method for functional modules of a nuclear safety-grade DCS system in another embodiment of the present invention;

[0031] Figure 6 This is a schematic diagram of the structure of an online upgrade device for functional modules of a nuclear safety-grade DCS system according to an embodiment of the present invention;

[0032] Figure 7 This is a schematic diagram of the structure of a computer device according to an embodiment of the present invention. Detailed Implementation

[0033] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0034] First, the structure of a nuclear safety-grade DCS system will be described. Please refer to [link / reference needed]. Figure 1 As shown, Figure 1 This is a schematic diagram of the structure of a nuclear safety-grade DCS system provided in an embodiment of the present invention.

[0035] according to Figure 1 As shown, a nuclear safety-grade DCS system includes at least an engineering station and a field control station. The engineering station and the field control station are connected via a dedicated network. The field control station includes at least a main control module and multiple functional modules. The main control module and the multiple functional modules are connected via a dedicated network.

[0036] exist Figure 1 The nuclear safety-grade DCS system shown may include, in addition to engineering workstations and field control stations, transmission stations, gateway stations, and safety display stations. The online upgrade method for the functional modules of the nuclear safety-grade DCS system proposed in this invention is applied to the engineering workstations and field control stations; therefore, the transmission stations, gateway stations, and safety display stations will not be described in detail.

[0037] exist Figure 1 In the nuclear safety-grade DCS system shown, the field control station includes a main chassis and an expansion chassis. The main chassis includes a main control module, a main I / O module, and a communication module, while the expansion chassis includes functional modules and extended I / O modules. The online upgrade method for functional modules of the nuclear safety-grade DCS system proposed in this invention is applied to the main control module and the terminal functional modules; therefore, the main I / O module, communication module, and extended I / O module will not be described in detail.

[0038] exist Figure 1 In the nuclear safety-grade DCS system architecture shown, the existing method for upgrading functional modules of a nuclear safety-grade DCS system involves maintenance engineers performing upgrades on-site through the module's own maintenance interface, which is highly inefficient. Therefore, this invention deploys a download software unit in the engineer's workstation. This unit downloads files via a dedicated network. The main control module receives and verifies the integrity and correctness of the downloaded files before distributing them to the functional modules. The functional modules then receive and verify the integrity and correctness of the downloaded files and automatically execute updates. This enables remote online upgrades of functional modules in the nuclear safety-grade DCS system, greatly simplifying the upgrade and maintenance work for maintenance engineers and improving the maintenance efficiency of the nuclear safety-grade DCS system.

[0039] exist Figure 1 For the nuclear safety-grade DCS system architecture shown, please refer to [link / reference]. Figure 2 As shown, Figure 2 This is a flowchart illustrating the online upgrade method for functional modules of a nuclear safety-grade DCS system provided in an embodiment of the present invention. For simplicity and clarity, this embodiment describes a scenario with one download file corresponding to one functional module. Scenarios involving multiple download files and / or one download file corresponding to multiple functional modules will be described in subsequent embodiments.

[0040] according to Figure 2 As shown, the online upgrade method for functional modules of a nuclear safety-grade DCS system includes the following steps:

[0041] In step S210, the engineer station provides an information list of multiple functional modules, and in response to the maintenance engineer's selection result based on the information list, loads the corresponding download file and sends a download command to the main control module.

[0042] The engineering workstation can deploy download software units to realize the corresponding functions of the engineering workstation, the main control module can deploy distribution units to realize the corresponding functions of the main control module, and multiple functional modules can deploy upgrade units to realize the corresponding functions of the functional modules.

[0043] Based on the downloaded software units, the engineering workstation can display a list of information for multiple functional modules to maintenance engineers. This list may include, but is not limited to, the address, status, and type information for each functional module. Address information can indicate the distribution of functional modules, status information can indicate their online status, and type information can indicate their attributes.

[0044] After the maintenance engineer selects the functional modules to be upgraded from the information list based on the maintenance and upgrade requirements, the software download unit loads the corresponding download files. Once the software download unit has loaded the download files, it issues a download command to the distribution unit.

[0045] When the maintenance engineer prepares the download file, the correspondence between the download file and the functional module has already been determined, that is, which download file can be used to update which functional module. Therefore, once the maintenance engineer selects the functional module that needs to be upgraded, the download software unit can load the corresponding download file.

[0046] In some alternative implementations, prior to the step of the engineering station providing a list of information for multiple functional modules, the method further includes: each functional module periodically sending information to the engineering station; wherein the information includes at least: address information and status information for each functional module.

[0047] Each upgrade unit proactively and periodically sends information to the download software unit, including at least the address and status information of each functional module. Because the download software unit periodically receives the address information, it can provide a path for subsequently sending download files to the upgrade unit via the distribution unit. Because the download software unit periodically receives the status information, it can provide maintenance engineers with prompts regarding whether functional modules need to be updated.

[0048] In step S220, after receiving the download instruction and pausing the current transactions of the main control module and each functional module, the main control module sends a start instruction to the engineer station.

[0049] After receiving the download instruction, the distribution unit pauses the current transaction of the main control module and puts it into online distribution mode. Simultaneously, it instructs each functional module to pause its current transaction and enter online upgrade mode. Once the main control module and each functional module are in online distribution and upgrade mode, the distribution unit sends a start instruction to the download software unit, notifying it that the download can begin downloading.

[0050] In some optional implementations, the main control module receives the download instruction and suspends the current transactions of the main control module and each functional module, including: after receiving the download instruction, the main control module suspends its main control transactions and enters the online distribution mode; the main control module sends an interruption message to each functional module so that each functional module interrupts its functional transactions and enters the online upgrade mode; after entering the online upgrade mode, each functional module feeds back the mode switching result to the main control module.

[0051] Upon receiving the download instruction, the distribution unit causes the main control unit to enter online distribution mode. Online distribution mode controls the main control module to suspend its ongoing main control tasks and simultaneously sends interrupt information to all upgrade units. Each upgrade unit, based on the interrupt information, causes its corresponding functional module to enter online upgrade mode. Online upgrade mode controls the functional module to suspend its ongoing functional tasks to prevent abnormalities caused by response timeouts.

[0052] After each functional module enters the online upgrade mode, each upgrade unit reports the mode switching result to the distribution unit. The distribution unit then sends a start command to the software installation unit based on the mode switching results and its own mode switching status.

[0053] In step S230, after receiving the start command, the engineering station sends the downloaded file and its corresponding address information to the main control module, so that the main control module caches the downloaded file and its corresponding address information after the downloaded file passes the verification once.

[0054] After receiving the startup command, the download software unit sends the download file and its corresponding address information to the distribution unit via the dedicated network of the nuclear safety-grade DCS system. The distribution unit performs data integrity and correctness verification locally. After the verification is successful, it stores the complete and correct download file and its corresponding address information in the local memory of the main control module.

[0055] In some optional implementations, after receiving the startup command, the engineering station sends the downloaded file and its corresponding address information to the main control module. This includes: after receiving the startup command, the engineering station sends the address information to the main control module; the engineering station encapsulates the downloaded file into multiple data packets of a fixed length; wherein each data packet includes at least: the position number of each data packet in the downloaded file, the downloaded file fragment included in each data packet, and the CRC check value of each data packet; the engineering station sends each data packet to the main control module in the order of its position number, so that the main control module verifies the position number and CRC check value of each data packet after receiving it.

[0056] In some optional implementations, the main control module caches the downloaded file and its corresponding address information after the downloaded file passes the initial verification. This includes: if the first receiving sequence number of the main control module is equal to the position sequence number of a data packet and the CRC check value of the data packet is correct, then the data packet passes the verification, the main control module caches the data packet and sends an acknowledgment message to the engineer station so that the engineer station can continue to send the next data packet; if the first receiving sequence number of the main control module is not equal to the position sequence number of a data packet or the CRC check value of the data packet is incorrect, then the data packet fails the verification, the main control module sends a reload instruction for the data packet corresponding to the first receiving sequence number to the engineer station so that the engineer station can resend the data packet corresponding to the first receiving sequence number.

[0057] The download software unit sends the address information to the distribution unit in accordance with the communication rules of the dedicated network of the nuclear safety-grade DCS system.

[0058] The download software unit encapsulates the download file into multiple data packets of fixed length. For each data packet, the encapsulation content includes: the position sequence number of the current data packet in the download file, a partial download file fragment of the current data packet, and the CRC check value of the current data packet.

[0059] The download software unit sends data packets to the distribution unit sequentially according to the position sequence number of each data packet in the download file.

[0060] Each time the distribution unit receives a data packet, it verifies the sequence number and CRC check value of the currently received data packet.

[0061] If the first received sequence number of the distribution unit is equal to the position sequence number (for example, the first received sequence number of the distribution unit is 5, and the position sequence number of the data packet is 5), and the CRC check value is correct, then the currently received data packet passes the verification. Alternatively, if the position sequence number of the data packet currently received by the distribution unit is 1 greater than the position sequence number of the previously received data packet (for example, the position sequence number of the currently received data packet is 6, and the position sequence number of the previously received data packet is 5), and the CRC check value is correct, then the currently received data packet passes the verification.

[0062] For received data packets that pass verification, the distribution unit caches them in the main control module's local memory and sends an acknowledgment message to the download software unit, informing it to continue sending the next data packet.

[0063] If the first received sequence number of the distribution unit is not equal to the position sequence number (for example, the first received sequence number of the distribution unit is 5 and the position sequence number of the data packet is 6), or if the CRC check value is incorrect, the currently received data packet will fail verification. Alternatively, if the position sequence number of the currently received data packet is not increased by 1 compared to the position sequence number of the previously received data packet (for example, the position sequence number of the currently received data packet is 6 and the position sequence number of the previously received data packet is 4), the currently received data packet will fail verification.

[0064] For received data packets that fail verification, the distribution unit sends a reload instruction to the download software unit for the data packet corresponding to the first received sequence number, instructing the download software unit to resend the data packet corresponding to the first received sequence number. For example, if the distribution unit's first received sequence number is 5 and the data packet's position sequence number is 6, the distribution unit sends a reload instruction to the download software unit for the data packet with position sequence number 5, instructing the download software unit to resend the data packet with position sequence number 5.

[0065] After the distribution unit verifies each data packet successfully through the above steps, the download software unit successfully downloads the download file to the distribution unit.

[0066] In step S240, the main control module sends the downloaded file to the corresponding functional module according to the address information, so that the functional module can upgrade after the downloaded file passes the second verification.

[0067] After caching the downloaded file and its corresponding address information, the distribution unit sends the downloaded file to the upgrade unit via the dedicated network of the nuclear safety-grade DCS system, based on the address information. The upgrade unit performs data integrity and correctness verification locally, and performs the upgrade using the complete and correct downloaded file after the verification passes.

[0068] In some optional implementations, the main control module sends the downloaded file to the corresponding functional module according to the address information, including: the main control module sends each data packet to the functional module in the order of its position number according to the address information, so that the functional module verifies the position number and CRC check value of each data packet after receiving it.

[0069] In some optional implementations, the functional module performs an upgrade after the downloaded file passes secondary verification, including: if the second receiving sequence number of the functional module is equal to the position sequence number of a data packet and the CRC check value of a data packet is correct, then a data packet passes verification, the functional module buffers a data packet and sends an acknowledgment character to the main control module so that the main control module can continue to send the next data packet; if the second receiving sequence number of the functional module is not equal to the position sequence number of a data packet or the CRC check value of a data packet is incorrect, then a data packet fails verification, the functional module sends a retransmission instruction for the data packet corresponding to the second receiving sequence number to the main control module so that the main control module can retransmit the data packet corresponding to the second receiving sequence number; when the functional module verifies each data packet, it restores each buffered data packet to the downloaded file and uses the downloaded file for upgrade.

[0070] The distribution unit sends data packets to the upgrade unit sequentially according to the position sequence number of each data packet in the download file.

[0071] Each time the upgrade unit receives a data packet, it verifies the position sequence number and CRC check value of the currently received data packet.

[0072] If the second received sequence number of the upgrade unit equals the position sequence number (for example, the second received sequence number of the upgrade unit is 5, and the position sequence number of the data packet is 5), and the CRC check value is correct, then the currently received data packet passes the verification. Alternatively, if the position sequence number of the currently received data packet is 1 greater than the position sequence number of the previously received data packet (for example, the position sequence number of the currently received data packet is 6, and the position sequence number of the previously received data packet is 5), and the CRC check value is correct, then the currently received data packet passes the verification.

[0073] For received data packets that pass verification, the upgrade unit caches them in the local memory of the functional module and sends an acknowledgment character to the distribution unit, informing the distribution unit to continue sending the next data packet.

[0074] If the second received sequence number of the upgrade unit is not equal to the position sequence number (for example, the second received sequence number of the upgrade unit is 5 and the position sequence number of the data packet is 6), or if the CRC check value is incorrect, the currently received data packet will fail verification. Alternatively, if the position sequence number of the currently received data packet is not increased by 1 compared to the position sequence number of the previously received data packet (for example, the position sequence number of the currently received data packet is 6 and the position sequence number of the previously received data packet is 4), the currently received data packet will fail verification.

[0075] For received data packets that fail verification, the upgrade unit sends a retransmission instruction to the distribution unit for the data packet corresponding to the second received sequence number, instructing the distribution unit to retransmit the data packet corresponding to the second received sequence number. For example, if the upgrade unit's second received sequence number is 5 and the data packet's position sequence number is 6, the upgrade unit sends a retransmission instruction to the distribution unit for the data packet with position sequence number 5, instructing the distribution unit to retransmit the data packet with position sequence number 5.

[0076] After the upgrade unit verifies each data packet successfully through the above steps, the distribution unit successfully distributes the download file to the upgrade unit. The upgrade unit then restores each cached data packet to a download file and uses the download file to perform the upgrade.

[0077] In step S250, the functional module sends the upgrade result to the main control module, so that the main control module sends the distribution completion message to the engineer station.

[0078] After the upgrade unit performs the upgrade using the downloaded file, it sends the upgrade result to the distribution unit. The distribution unit then sends a distribution completion message to the download software unit based on the upgrade result, informing the download software unit that the online upgrade task has ended.

[0079] Depend on Figure 2 As shown in the diagram, the online upgrade method for functional modules of the nuclear safety-grade DCS system provided in this embodiment involves deploying a download software unit on the engineer's workstation. This download software unit downloads the files via a dedicated network. The main control module receives and verifies the integrity and correctness of the downloaded files before distributing them to the functional modules. The functional modules then receive and verify the integrity and correctness of the downloaded files and automatically execute updates. This enables remote online upgrades of the functional modules of the nuclear safety-grade DCS system, greatly simplifying the upgrade and maintenance work for maintenance engineers and improving the maintenance efficiency of the nuclear safety-grade DCS system.

[0080] exist Figure 1 For the nuclear safety-grade DCS system architecture shown, please refer to [link / reference]. Figure 3 As shown, Figure 3This is another schematic flowchart illustrating the online upgrade method for functional modules of a nuclear safety-grade DCS system provided in an embodiment of the present invention. In some cases, a single download file can be used to upgrade multiple functional modules of the same type. Therefore, this embodiment describes the case where one download file corresponds to multiple functional modules.

[0081] according to Figure 3 As shown, the online upgrade method for functional modules of a nuclear safety-grade DCS system includes the following steps:

[0082] In step S310, the engineer station provides an information list of multiple functional modules, loads the corresponding download file based on the multiple selection results of the information list, and sends a download command to the main control module.

[0083] In step S320, after receiving the download instruction and pausing the current transactions of the main control module and each functional module, the main control module sends a start instruction to the engineer station.

[0084] In step S330, after receiving the start command, the engineering station sends the downloaded file and its corresponding multiple address information to the main control module, so that the main control module caches the downloaded file and its corresponding multiple address information after the downloaded file passes the verification once.

[0085] In step S340, the main control module sends the downloaded file to a functional module based on an address, so that the functional module performs an upgrade after the downloaded file passes the second verification and sends the upgrade result back to the main control module, so that the main control module sends the downloaded file to the next functional module based on the next address.

[0086] In step S350, after receiving the upgrade results from each functional module, the main control module generates a distribution completion message and sends it to the engineer station.

[0087] exist Figure 1 For the nuclear safety-grade DCS system architecture shown, please refer to [link / reference]. Figure 4 As shown, Figure 4 This is another schematic diagram of the online upgrade method for functional modules of a nuclear safety-grade DCS system provided in this embodiment of the invention. In some cases, multiple download files can be used to upgrade different types of functional modules, and one download file can be used to upgrade one functional module. Therefore, this embodiment describes the case of multiple download files and one download file corresponding to one functional module.

[0088] according to Figure 4 As shown, the online upgrade method for functional modules of a nuclear safety-grade DCS system includes the following steps:

[0089] In step S410, the engineer station provides an information list of multiple functional modules, loads multiple corresponding download files based on the multiple selection results of the information list by the maintenance engineer, and sends a download command to the main control module.

[0090] In step S420, after receiving the download instruction and pausing the current transactions of the main control module and each functional module, the main control module sends a start instruction to the engineer station.

[0091] In step S430, after receiving the start command, the engineering station sends a download file and its corresponding address information to the main control module, so that the main control module caches a download file and its corresponding address information after the download file passes the verification once.

[0092] In step S440, the main control module sends a download file to the corresponding functional module based on the address information, so that the functional module can perform an upgrade after the download file passes the second verification and report the upgrade result back to the main control module.

[0093] In step S450, the main control module sends a distribution completion message to the engineer station based on the upgrade result fed back by the functional module, so that the engineer station sends the next download file and its corresponding address information to the main control module.

[0094] exist Figure 1 For the nuclear safety-grade DCS system architecture shown, please refer to [link / reference]. Figure 5 As shown, Figure 5 This is another flowchart illustrating the online upgrade method for functional modules of a nuclear safety-grade DCS system provided in this embodiment of the invention. In some cases, multiple download files can be used to upgrade different types of functional modules, and one download file can be used to upgrade multiple functional modules of the same type. Therefore, this embodiment describes the case where there are multiple download files and one download file corresponds to multiple functional modules.

[0095] according to Figure 5 As shown, the online upgrade method for functional modules of a nuclear safety-grade DCS system includes the following steps:

[0096] In step S510, the engineer station provides an information list of multiple functional modules, loads multiple corresponding download files based on the multiple selection results of the information list by the maintenance engineer, and sends a download command to the main control module.

[0097] In step S520, after receiving the download instruction and pausing the current transactions of the main control module and each functional module, the main control module sends a start instruction to the engineer station.

[0098] In step S530, after receiving the start command, the engineer station sends a download file and its corresponding multiple address information to the main control module, so that the main control module caches a download file and its corresponding multiple address information after the download file passes the verification once.

[0099] In step S540, the main control module sends a download file to a functional module based on an address, so that the functional module performs an upgrade after the download file passes a second verification and reports the upgrade result back to the main control module, so that the main control module sends a download file to the next functional module based on the next address.

[0100] In step S550, after the main control module receives the upgrade results from each functional module corresponding to a download file, it generates a distribution end message and sends it to the engineer station, so that the engineer station sends the next download file and its corresponding multiple address information to the main control module.

[0101] In other words, the present invention uses a method of sequentially distributing multiple address information and sequentially downloading multiple download files.

[0102] It should be understood that the order in which the steps are described in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0103] Please see Figure 6 As shown, Figure 6 This is a schematic diagram of the online upgrade device for functional modules of a nuclear safety-grade DCS system provided in an embodiment of the present invention. The device 600 is deployed in… Figure 1 The nuclear safety-grade DCS system shown. Device 600 includes: a download software unit 601 deployed on the engineering station, a distribution unit 602 deployed on the main control module, and multiple upgrade units 603 deployed on multiple functional modules respectively.

[0104] The download software unit 601 provides an information list of multiple functional modules, loads the corresponding download file based on the selection result of the information list by the maintenance engineer, and sends a download instruction to the distribution unit 602.

[0105] After receiving the download instruction and pausing the current transactions of the main control module and each functional module, the distribution unit 602 sends a start instruction to the download software unit 601.

[0106] After receiving the startup command, the download software unit 601 sends the download file and its corresponding address information to the distribution unit 602;

[0107] After the downloaded file passes the verification once, the distribution unit 602 caches the downloaded file and its corresponding address information, and sends the downloaded file to the corresponding upgrade unit 603 according to the address information;

[0108] After the downloaded file passes the secondary verification, the upgrade unit 603 performs the upgrade and sends the upgrade result to the distribution unit 602.

[0109] The distribution unit 602 sends the upgrade results to the download software unit 601.

[0110] In some alternative implementations, each upgrade unit 603 periodically sends information to the download software unit 601; wherein the information includes at least: address information and status information of each functional module.

[0111] In some optional implementations, after receiving the download instruction, the distribution unit 602 suspends the main control transaction, causing the main control module to enter the online distribution mode; the distribution unit 602 sends an interruption message to each upgrade unit 603, so that each functional module interrupts its functional transaction and enters the online upgrade mode; after each functional module enters the online upgrade mode, each upgrade unit 603 feeds back the mode switching result to the distribution unit 602.

[0112] In some optional implementations, after receiving the startup command, the download software unit 601 sends the address information to the distribution unit 602; the download software unit 601 encapsulates the download file into multiple data packets of a fixed length; wherein each data packet includes at least: the position number of each data packet in the download file, the download file fragment included in each data packet, and the CRC check value of each data packet; the download software unit 601 sends each data packet to the distribution unit 602 in the order of the position number, so that the distribution unit 602 verifies the position number and CRC check value of each data packet after receiving it.

[0113] In some optional implementations, if the first receiving sequence number of the distribution unit 602 is equal to the position sequence number of a data packet and the CRC check value of a data packet is correct, then a data packet passes the verification. The distribution unit 602 buffers a data packet and sends an acknowledgment message to the download software unit 601 so that the download software unit 601 can continue to send the next data packet. If the first receiving sequence number of the distribution unit 602 is not equal to the position sequence number of a data packet or the CRC check value of a data packet is incorrect, then a data packet fails the verification. The distribution unit 602 sends a reload instruction for the data packet corresponding to the first receiving sequence number to the download software unit 601 so that the download software unit 601 can resend the data packet corresponding to the first receiving sequence number.

[0114] In some optional implementations, the distribution unit 602 sends each data packet to the upgrade unit 603 in the order of its position number according to the address information, so that the upgrade unit 603 verifies the position number and CRC check value of each data packet after receiving it.

[0115] In some optional implementations, if the second receiving sequence number of the upgrade unit 603 is equal to the position sequence number of a data packet and the CRC check value of the data packet is correct, then the data packet passes the verification. The upgrade unit 603 buffers a data packet and sends an acknowledgment character to the distribution unit 602, so that the distribution unit 602 continues to send the next data packet. If the second receiving sequence number of the upgrade unit 603 is not equal to the position sequence number of a data packet or the CRC check value of a data packet is incorrect, then the data packet fails the verification. The upgrade unit 603 sends a retransmission instruction for the data packet corresponding to the second receiving sequence number to the distribution unit 602, so that the distribution unit 602 retransmits the data packet corresponding to the second receiving sequence number. When the upgrade unit 603 verifies each data packet, it restores each buffered data packet to a download file and uses the download file for upgrading.

[0116] In some optional implementations, when a download file corresponds to multiple functional modules, the distribution unit 602 sends the download file to an upgrade unit 603 based on an address information; after the download file passes the second verification, the upgrade unit 603 performs an upgrade and sends the upgrade result back to the distribution unit 602, so that the distribution unit 602 sends the download file to the next upgrade unit 603 based on the next address information; after receiving the upgrade result from each upgrade unit 603, the distribution unit 602 generates a distribution end message and sends it to the download software unit 601.

[0117] In some optional implementations, when there are multiple download files, the download software unit 601 sends one download file and its corresponding address information to the distribution unit 602, so that the distribution unit 602 sends the download file to the corresponding upgrade unit 603 according to the address information, so that the upgrade unit 603 performs an upgrade; the distribution unit 602 sends a distribution end message to the download software unit 601 according to the upgrade result fed back by the upgrade unit 603, so that the download software unit 601 sends the next download file and its corresponding address information to the distribution unit 602.

[0118] Specific limitations regarding the online upgrade device for functional modules of a nuclear safety-grade DCS system can be found in the above-mentioned limitations on the online upgrade method for functional modules of a nuclear safety-grade DCS system, and will not be repeated here. Each unit in the aforementioned online upgrade device for functional modules of a nuclear safety-grade DCS system can be implemented entirely or partially through software, hardware, or a combination thereof. These units can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0119] In one embodiment, a computer device is provided, the internal structure of which can be shown as follows: Figure 7 As shown. The computer device includes a processor, memory, network interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile and / or volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The network interface is used for communication with external devices via a network connection. When the computer program is executed by the processor, it implements the functions or steps of an engineer station, main control module, or functional module in a nuclear safety-grade DCS system's online upgrade method for functional modules.

[0120] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When executed by a processor, the computer program implements the functions or steps of an engineer station, main control module, or functional module in an online upgrade method for functional modules of a nuclear safety-grade DCS system.

[0121] It should be noted that the functions or steps that can be implemented by the computer device or computer-readable storage medium described above can be referred to the relevant descriptions in the foregoing method embodiments. To avoid repetition, they will not be described one by one here.

[0122] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided by this invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and RAMbus dynamic RAM (RDRAM), etc.

[0123] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is used as an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0124] The above-described embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included within the protection scope of the present invention.

Claims

1. A method for online upgrading of functional modules of a nuclear safety-grade DCS system, characterized in that, The method is applied to nuclear safety grade DCS systems; The nuclear safety grade DCS system includes at least an engineering station and a field control station, which are connected via a dedicated network; the field control station includes at least a main control module and multiple functional modules, which are connected via a dedicated network. The method includes: The engineer station provides an information list of multiple functional modules, and in response to the maintenance engineer's selection result based on the information list, loads the corresponding download file and sends a download instruction to the main control module. After receiving the download instruction and pausing the current transactions of the main control module and each of the functional modules, the main control module sends a start instruction to the engineer station. After receiving the start command, the engineer station sends the downloaded file and its corresponding address information to the main control module, so that the main control module caches the downloaded file and its corresponding address information after the downloaded file passes the verification once. The main control module sends the downloaded file to the corresponding functional module according to the address information, so that the functional module can upgrade after the second verification of the downloaded file passes. The functional module sends the upgrade result to the main control module, so that the main control module sends a distribution completion message to the engineer station.

2. The method for online upgrading of functional modules of a nuclear safety-grade DCS system according to claim 1, characterized in that, Before the step of the engineering station providing an information list of multiple functional modules, the method further includes: Each of the functional modules periodically sends information to the engineering station; wherein the information includes at least: the address information and status information of each functional module.

3. The online upgrade method for functional modules of a nuclear safety-grade DCS system according to claim 1, characterized in that, The main control module receives the download instruction and pauses the current transactions of the main control module and each of the functional modules, including: After receiving the download instruction, the main control module pauses the main control transaction and enters the online distribution mode. The main control module sends an interruption message to each of the functional modules, so that each of the functional modules interrupts its functional transactions and enters an online upgrade mode. After each functional module enters the online upgrade mode, it sends the mode switching result back to the main control module.

4. The online upgrade method for functional modules of a nuclear safety-grade DCS system according to claim 1, characterized in that, After receiving the startup command, the engineer station sends the downloaded file and its corresponding address information to the main control module, including: After receiving the start command, the engineering station sends the address information to the main control module; The engineer station encapsulates the downloaded file into multiple data packets of fixed length; each data packet includes at least: the position number of each data packet in the downloaded file, the downloaded file fragment included in each data packet, and the CRC check value of each data packet; The engineering station sends each data packet to the main control module in sequence according to its position number, so that the main control module can verify the position number and CRC check value of each data packet after receiving it.

5. The online upgrade method for functional modules of a nuclear safety-grade DCS system according to claim 4, characterized in that, After the downloaded file passes the initial verification, the main control module caches the downloaded file and its corresponding address information, including: If the first receiving sequence number of the main control module is equal to the position sequence number of a data packet and the CRC check value of a data packet is correct, then a data packet passes the check. The main control module buffers a data packet and sends an acknowledgment message to the engineering station so that the engineering station can continue to send the next data packet. If the first received sequence number of the main control module is not equal to the position sequence number of a data packet or the CRC check value of a data packet is incorrect, then the data packet verification fails. The main control module sends a reload instruction for the data packet corresponding to the first received sequence number to the engineer station, so that the engineer station retransmits the data packet corresponding to the first received sequence number.

6. The method for online upgrading of functional modules of a nuclear safety-grade DCS system according to claim 4, characterized in that, The main control module sends the downloaded file to the corresponding functional module according to the address information, including: The main control module sends each data packet to the functional module in sequence according to the address information and the position number, so that the functional module can verify the position number and CRC check value of each data packet after receiving it.

7. The method for online upgrading of functional modules of a nuclear safety-grade DCS system according to claim 6, characterized in that, The functional modules are upgraded after the downloaded file passes secondary verification, including: If the second receiving sequence number of the functional module is equal to the position sequence number of a data packet and the CRC check value of a data packet is correct, then a data packet passes the check. The functional module buffers a data packet and sends an acknowledgment character to the main control module so that the main control module can continue to send the next data packet. If the second receiving sequence number of the functional module is not equal to the position sequence number of a data packet or the CRC check value of a data packet is incorrect, then the data packet fails the check. The functional module sends a retransmission instruction for the data packet corresponding to the second receiving sequence number to the main control module, so that the main control module retransmits the data packet corresponding to the second receiving sequence number. When the functional module verifies each data packet, it restores each cached data packet to a download file and uses the download file for upgrade.

8. The method for online upgrading of functional modules of a nuclear safety-grade DCS system according to claim 1, characterized in that, The method further includes: When a download file corresponds to multiple of the aforementioned functional modules; The main control module sends the downloaded file to one of the functional modules based on an address information; After the downloaded file passes the second verification, one of the functional modules is upgraded and the upgrade result is fed back to the main control module, so that the main control module can send the downloaded file to the next functional module according to the next address information; After receiving the upgrade results from each of the functional modules, the main control module generates a distribution end message and sends it to the engineer station.

9. The method for online upgrading of functional modules of a nuclear safety-grade DCS system according to claim 1, characterized in that, The method further includes: When there are multiple download files; The engineering station sends a downloaded file and its corresponding address information to the main control module, so that the main control module sends the downloaded file to the corresponding functional module according to the address information, so that the functional module can be upgraded. The main control module sends a distribution completion message to the engineer station based on the upgrade result fed back by the functional module, so that the engineer station sends the next download file and its corresponding address information to the main control module.

10. An online upgrade device for functional modules of a nuclear safety-grade DCS system, characterized in that, The device is deployed in a nuclear safety-grade DCS system; The nuclear safety grade DCS system includes at least an engineering station and a field control station, which are connected via a dedicated network; the field control station includes at least a main control module and multiple functional modules, which are connected via a dedicated network. The device includes: a download software unit deployed on the engineering station, a distribution unit deployed on the main control module, and multiple upgrade units deployed on multiple functional modules respectively; The download software unit provides an information list of multiple functional modules, and in response to the maintenance engineer's selection result based on the information list, loads the corresponding download file and sends a download instruction to the distribution unit. After receiving the download instruction and pausing the current transactions of the main control module and each of the functional modules, the distribution unit sends a start instruction to the download software unit. After receiving the startup command, the download software unit sends the download file and its corresponding address information to the distribution unit. After the downloaded file passes the verification once, the distribution unit caches the downloaded file and its corresponding address information, and sends the downloaded file to the corresponding upgrade unit according to the address information; The upgrade unit performs the upgrade after the downloaded file passes the second verification and sends the upgrade result to the distribution unit. The distribution unit sends a distribution completion message to the download software unit.

Images