A dual-unit switching device and method for a full-range simulator of a sodium-cooled fast reactor

Abstract

This invention specifically relates to a dual-unit switching device and method for a full-range sodium-cooled fast reactor simulator, belonging to the field of nuclear power simulation. The device includes: a first-unit simulation server group for running a first-unit simulation environment based on human-computer interaction commands; a second-unit simulation server group for running a second-unit simulation environment based on human-computer interaction commands; a shared human-computer interaction device group for sending human-computer interaction commands to either the first-unit or second-unit simulation server group; and a network switcher module for automatically switching the connection between the first-unit simulation server group, the second-unit simulation server group, and the shared human-computer interaction device group based on network switching commands. The method utilizes the device for dual-unit switching in a full-range sodium-cooled fast reactor simulator. This invention achieves rapid and stable switching of the dual-unit simulation environment for sodium-cooled fast reactors, meeting the timeliness requirements in training scenarios.

Description

Technical Field

[0001] This invention relates to the field of nuclear power simulation technology, and in particular to a dual-unit switching device and method for a full-range sodium-cooled fast reactor simulator based on network switching technology. Background Technology

[0002] Sodium-cooled fast reactors, as the fourth-generation advanced reactor type with the fastest research and development progress and closest to commercial application, place extremely high demands on the professional skills of operators for safe and stable operation.

[0003] The sodium-cooled demonstration fast reactor project, a major project featuring fourth-generation nuclear power technology, has been applied to nuclear power generation. The full-range simulator, as a critical path device for the first nuclear power plant project, is of great significance for operator training and assessment. It also provides an important verification tool for nuclear power unit design optimization and operational procedure improvement, making it a crucial link in the complete nuclear power equipment supply chain.

[0004] The existing full-range simulator for the sodium-cooled fast reactor demonstration project is a nuclear power unit simulation training system developed based on the complete design data of the sodium-cooled fast reactor unit 1. This simulator possesses full-condition and full-process simulation capabilities for the sodium-cooled fast reactor unit 1 and has been successfully applied to core scenarios such as the initial operator training, on-the-job skills enhancement, and qualification certification examinations, laying a solid talent foundation for the safe and stable operation of the unit. With the advancement of the sodium-cooled fast reactor project, the sodium-cooled fast reactor unit 2 has officially entered the commissioning phase and is about to be operational, necessitating the fulfillment of corresponding professional training needs for operators. However, the sodium-cooled fast reactor unit 2 underwent targeted optimization and upgrades based on the operating experience of unit 1 during the design phase, resulting in 293 design-differentiated optimization items. These optimization items involve key aspects such as core system parameters, equipment control logic, and operational procedures, causing the existing full-range simulator developed based on the sodium-cooled fast reactor unit 1 to be unable to accurately reproduce the actual operating characteristics and scenarios of the sodium-cooled fast reactor unit 2. If the existing full-range simulator of the sodium-cooled demonstration fast reactor Unit 1 is used to conduct operator training for sodium-cooled demonstration fast reactor Unit 2, there will be a problem that the training content does not match the actual unit. Not only will it be difficult to achieve the expected training effect, but it may also have a potential impact on the subsequent commissioning and operation safety of the unit, and will not meet the professional training needs of operators of sodium-cooled demonstration fast reactor Unit 2.

[0005] To address these issues, the conventional approach is to build a separate full-range simulator for the sodium-cooled demonstration fast reactor Unit 2. However, building a complete simulator requires a huge investment in hardware and software, has a long construction period, is costly, and results in significant duplication and waste of hardware resources. Therefore, how to achieve simulation of the two sodium-cooled demonstration fast reactors (Units 1 and 2) with design differences using a single simulator system while minimizing hardware increments, and how to efficiently and reliably switch between the two simulation environments, has become a pressing technical challenge. Summary of the Invention

[0006] The purpose of this invention is to address the challenges posed by the design differences between the No. 1 and No. 2 units of the sodium-cooled demonstration fast reactor. The full-range simulator designed for the No. 1 unit struggles to accommodate the differentiated training needs of both units. Conversely, building a separate simulator for the No. 2 unit requires significant hardware and software investment, resulting in long construction periods, high costs, and redundant hardware resource configuration and waste. This invention provides a dual-unit switching device and method for a full-range sodium-cooled fast reactor simulator based on network switching technology. The aim is to achieve compatibility and support for the two differentiated simulation environments of the No. 1 and No. 2 units with a single physical device, through upgrades and modifications to existing simulators, with minimal hardware cost. This enables rapid and stable switching between the two simulation environments, meeting the timeliness requirements of training scenarios. It also maximizes the reuse of existing human-machine interface hardware in the main control room, significantly reducing hardware investment costs; simplifies the switching operation process, reduces maintenance complexity, and improves the overall reliability and flexibility of the system.

[0007] To achieve the above objectives, the present invention provides the following technical solution: A dual-unit switching device for a full-range simulator of a sodium-cooled fast reactor based on network switching technology includes: The No. 1 unit simulation server group is used to run a simulation environment built based on the design data of the No. 1 unit according to human-computer interaction instructions; The No. 2 unit simulation server group is used to run a simulation environment based on the design data of the second unit, which has design differences from the first unit simulation server group, according to human-computer interaction instructions. A shared human-computer interaction equipment group is used to send human-computer interaction commands to either the No. 1 unit simulation server group or the No. 2 unit simulation server group. The network switcher module is used to automatically switch the connection between the first unit simulation server group, the second unit simulation server group and the shared human-computer interaction device group according to the network switching command.

[0008] As one possible implementation method, the No. 1 unit simulation server group includes the No. 1 unit DCS Layer 2 server, the No. 1 unit DCS Layer 1 server, the No. 1 unit security-level DCS server, the No. 1 unit model server, and the No. 1 unit panel equipment. The DCS Layer 2 server of Unit 1 is connected to the DCS Layer 1 server of Unit 1 through the L1 switch and the L2 switch of Unit 1. The DCS Layer 1 server of Unit 1 is connected to the model server of Unit 1 through the LO / L1 switch of Unit 1. The model server of Unit 1 is connected to the security-level DCS server of Unit 1 through the L0 switch of Unit 1. The panel equipment of Unit 1 is connected to the model server of Unit 1.

[0009] As one possible implementation method, the Unit 2 simulation server group includes the Unit 2 DCS Layer 2 server, the Unit 2 DCS Layer 1 server, the Unit 2 security-level DCS server, the Unit 2 model server, and the Unit 2 panel equipment. The second-level DCS server of Unit 2 is connected to the first-level DCS server of Unit 2 through the L1 and L2 switches of Unit 2. The first-level DCS server of Unit 2 is connected to the model server of Unit 2 through the LO / L1 switches of Unit 2. The model server of Unit 2 is connected to the security-level DCS server of Unit 2 through the L0 switch of Unit 2. The panel equipment of Unit 2 is connected to the model server of Unit 2. The panel equipment of Unit 2 is a digital panel equipment.

[0010] As one possible approach, the shared human-computer interaction device group includes a first non-safety level operator workstation, a safe level operator workstation, and a second non-safety level operator workstation. The first non-safety level operator workstation, the second non-safety level operator workstation, and the safety level operator workstation are all equipped with adaptively modified DCS server client software. This client software stores the network address mapping tables of the DCS servers of Unit 1 and Unit 2, and is configured to skip the configuration compilation and release process and directly load the pre-stored solidified configuration image file on the target server after detecting a network connection to the target server.

[0011] As one possible implementation method, the network switch module includes a first network switch, a second network switch, a third network switch, a fourth network switch, and a fifth network switch disposed between the No. 1 unit simulation server group, the No. 2 unit simulation server group, and the shared human-machine interaction equipment group; the first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are all provided with a first port, a second port, and a third port; The first port of the first network switch is connected to the security-level operator workstation via a security-level switch, the second port is connected to the security-level DCS server of Unit 1, and the third port is connected to the security-level DCS server of Unit 2. The first port of the second network switch is connected to the second non-security level operator workstation through the first L2 switch of the shared equipment. The second port is connected to the second-level DCS layer 2 server and the second-level DCS layer 1 server of the second unit through the second unit L1 switch and the second unit L2 switch, respectively. The third port is connected to the first port of the third network switch. The second port of the third network switch is connected to the first non-security level operator workstation through the shared equipment second L2 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first port of the fourth network switch is connected to the second non-security level operator workstation through the first L1 switch of the shared equipment. The second port is connected to the second-level DCS server of the second unit and the first-level DCS server of the second unit through the second unit LI switch and the second unit L2 switch, respectively. The third port is connected to the first port of the fifth network switch. The second port of the fifth network switch is connected to the first non-security level operator workstation through the shared equipment second L1 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are all pure hardware network switching devices, which include a physical layer switch matrix or a relay group for performing end-to-end conduction or disconnection operations at the physical layer. The network switcher module has a built-in network status detection unit, network switching execution unit, buffer unit, and power management unit; The network status detection unit is used to detect the status of the network link between the shared human-machine interaction device group and the current unit's DCS server; the network switching execution unit is used to confirm that the network link between the shared human-machine interaction device group and the current unit's DCS server is connected normally and that data transmission is completed, and then automatically disconnects the network link corresponding to the current unit; the caching unit is used to cache the data of the network status detection unit and the network status execution unit; the power management unit is used to provide operating power; each unit realizes data interaction and collaborative control through an internal bus, and the whole adopts a modular packaging design.

[0012] As one feasible approach, the simulation operation process for Unit 1 and Unit 2 is as follows: Non-safety level equipment operation commands input by the operator at the first or second non-safety level operator workstation are sent to the respective unit's model server via the DCS Layer 2 server and DCS Layer 1 server, respectively, for execution, thus achieving non-safety level simulation operation for their respective units. Safety level equipment operation commands input by the operator at the safety level operator workstation are sent to the respective unit's model server via the respective unit's safety level DCS server for execution, thus achieving safety level simulation operation for their respective units. When the first or second non-safety level operator workstation malfunctions and cannot operate, the non-safety level equipment operation commands input by the operator at the respective unit's control panel are directly sent to the respective unit's model server for execution, thus achieving non-safety level simulation operation for their respective units. When the safety level operator workstation malfunctions and cannot operate, the safety level equipment operation commands input by the operator at the respective unit's control panel are directly sent to the respective unit's model server for execution, thus achieving safety level simulation operation for their respective units. Through network switching via the network switcher module, it is possible to achieve independent simulation operation of Unit 1, independent simulation operation of Unit 2, and simultaneous simulation operation of Unit 1 and Unit 2.

[0013] The present invention also provides a method for switching between two units in a full-range sodium-cooled fast reactor simulator, which uses the above-mentioned dual-unit switching device for the full-range sodium-cooled fast reactor simulator and includes the following steps: S1: Keep both the Unit 1 simulation server group and the Unit 2 simulation server group online and running independently of their respective simulation models and control logic. S2: Adapt the interfaces of the shared human-machine interface group to enable it to recognize and connect to the No. 1 unit simulation server group and the No. 2 unit simulation server group. After the connection is established, skip the configuration compilation and release process and directly load the pre-fixed configuration data of the corresponding unit. S3: The shared human-machine interface group triggers a network switching trigger command, indicating a switch from the currently connected unit simulation server group to the target unit simulation server group. S4: Each switch in the network switcher module responds to the network switching trigger command, disconnecting the network connection with the current unit simulation server group at the physical layer and establishing a network connection with the target unit simulation server group. S5: After detecting the network change, the shared human-machine interface group automatically rebuilds the network session with the target unit simulation server group, loads the pre-fixed configuration data of the target unit, and restores normal monitoring and operation functions.

[0014] As one possible implementation method, S2 specifically includes the following steps: In the DCS server client software of the shared human-computer interaction equipment group, configure a mapping table containing the addresses of the DCS server of Unit 1 and the DCS server of Unit 2. Modify the network session management module of the DCS server client software so that when a network connection or reconnection event is detected, it directly requests and loads the pre-stored, compiled, and solidified configuration image file from the currently connected DCS server, without having to execute the configuration data compilation and publishing process.

[0015] As one possible implementation method, S4 specifically includes the following steps: After receiving a network switching trigger command, the network switcher module detects the communication status of the currently connected link through its internal network status detection unit. After confirming that a safe switch is possible, the internal physical layer switch matrix or relay group is driven by the internal network switching execution unit to disconnect the connection between the current end and the target end within a predetermined time, and then connect the connection between the target end and the target end.

[0016] As one possible approach, during S4 execution, the simulation data interaction between the Unit 1 model server and the Unit 1 DCS server in the Unit 1 simulation server group, and between the Unit 2 model server and the Unit 2 DCS server in the Unit 2 simulation server group, remains continuous and is not affected by network switching operations.

[0017] As one possible approach, the dual-unit switching method for the full-range sodium-cooled fast reactor simulator also includes a redundancy switching application step: when a failure occurs in the simulation server group of Unit 1 or some servers in the simulation server group of Unit 2, a network switching command is triggered to switch the shared human-computer interaction equipment group to the corresponding server in the simulation server group of another unit, so as to ensure the continuity of simulation training services.

[0018] Compared with the prior art, the present invention has the following beneficial technical effects: Significantly improved switching efficiency: By adapting the DCS server client software installed and running on the shared human-machine interface equipment group, combined with network switch hardware switching, the time-consuming process of recompiling and downloading DCS configuration data required when switching units in traditional solutions is eliminated. The switching process is simplified to "one-click trigger + rapid network hardware switchover," with network switching time reaching the millisecond level and overall service recovery time controlled within 5 minutes, greatly meeting the actual needs of rapid and frequent switching in nuclear power training scenarios.

[0019] Significantly reduced hardware costs: The network switching architecture, built using network switching technology, enables cross-unit sharing of core human-computer interaction equipment in the main control room. Compared to the solution of building a separate complete simulator for Unit 2, this invention only requires adding a simulation server group and a small amount of equipment for Unit 2, avoiding the duplication of large-scale, high-value human-computer interaction hardware, significantly reducing the total project cost, and achieving efficient resource reuse.

[0020] The system is stable, reliable, and easy to maintain: the network switch itself is a pure hardware switch, independent of operating systems and software, ensuring high reliability and strong anti-interference capabilities. The dual-unit simulation environment achieves physical network isolation, preventing mutual interference. The unified shared switching architecture simplifies the system topology, reduces the number of device nodes requiring maintenance, and lowers operational complexity and long-term maintenance costs. Simultaneously, software modifications make parameter updates and system troubleshooting more flexible, providing strong support for the long-term stable operation of the simulator. Attached Figure Description

[0021] Figure 1 This is a hardware topology diagram of a dual-unit switching device for a full-range simulator of a sodium-cooled fast reactor according to an embodiment of the present invention; Figure 2 This is a schematic diagram of the network switcher module structure of a dual-unit switching device for a full-range simulator of a sodium-cooled fast reactor according to an embodiment of the present invention.

[0022] Among them, OWP is a non-safety-level operator workstation, SVDU is a safety-level operator workstation, and BUP is a panel device. Detailed Implementation

[0023] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs; the terminology used herein in the specification of the application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application.

[0024] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0025] In the description of this invention, unless otherwise explicitly specified and limited, the terms "set," "install," "connect," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium. Those skilled in the art can understand the specific meaning of the above terms according to the specific circumstances.

[0026] The terms “first”, “second”, etc., are used merely to distinguish elements with similar properties, not to indicate or imply relative importance or a specific order.

[0027] The terms “include,” “comprising,” or any other variation thereof are intended to cover non-exclusive inclusion, which includes not only the elements listed but also other elements not expressly listed.

[0028] The technical solution of the present invention will be clearly and completely described below with reference to the accompanying drawings and specific embodiments.

[0029] This embodiment provides a dual-unit switching device and method for a full-range simulator of a sodium-cooled fast reactor based on network switching technology, which is used to realize the design of the full-range simulator of the second unit of the sodium-cooled demonstration fast reactor, and the switching of the full-range simulators of the first and second units of the sodium-cooled demonstration fast reactor.

[0030] The dual-unit switching device for the full-range sodium-cooled fast reactor simulator based on network switching technology described in this embodiment uses the existing simulator designed based on the sodium-cooled fast reactor Unit 1 as the basic platform. It constructs an independent simulation environment for the sodium-cooled fast reactor Unit 2 simulator by adding a DCS Layer 2 server, a DCS Layer 1 server, a safety-grade DCS server, digital control panel equipment, and a model server from the sodium-cooled fast reactor Unit 2 simulator. Interfaces are reserved for the non-safety-grade operator workstations, control panel equipment, and safety-grade operator workstations of the sodium-cooled fast reactor Unit 1 simulator. The dual-network independent architecture is built through network switching technology to realize the sodium-cooled fast reactor... The simulators for the sodium-cooled demonstration fast reactor (DFR) units 1 and 2 are shared. Dedicated network channels are constructed for each simulator, utilizing the isolation module inherent in network switching technology to define the physical boundaries of the two units' networks, preventing cross-unit data interference and ensuring the independence and stability of each simulation environment. The network switching logic adopts a trigger-based design, supporting both manual and automatic redundant switching modes. After a network switching command is issued, the network switching technology quickly completes network link switching, IP address mapping, and data session continuation. Based on this architecture, a switching scheme for the sodium-cooled demonstration fast reactor (DFR) units 1 and 2 based on network switching technology is designed. The hardware topology diagram is shown below. Figure 1 As shown; Based on this network switching scheme, the virtual machine interface of the DCS server client software running on the shared human-machine interface group of the simulator needs to be adapted. On the one hand, this will enable reliable communication between the DCS server and the newly added nuclear island ventilation and fire control system of the sodium-cooled demonstration fast reactor Unit 2; on the other hand, it will allow for the skipping of the configuration data download and release process, enabling rapid switching of the DCS server between the simulators of sodium-cooled demonstration fast reactor Units 1 and 2. At the same time, the two sets of simulators can share the non-safety-level operator workstation in the main control room, ultimately achieving flexible and efficient switching of the simulator between the simulation environments of sodium-cooled demonstration fast reactor Units 1 and 2. The solution adopts a dual-simulator parallel operation architecture. Under normal operating conditions, both simulators remain online and can quickly switch the target simulator environment via network according to actual needs. The network switching time is only 5 minutes, which greatly improves response efficiency. The solution can meet the core requirements of full-range simulator switching for the sodium-cooled demonstration fast reactor Units 1 and 2 with minimal cost by purchasing a small amount of equipment, thus balancing economy and practicality.

[0031] The implementation process of the dual-unit switching device for the sodium-cooled fast reactor full-range simulator based on network switching technology described in this embodiment is as follows: S1: Sharing functions across a group of shared human-computer interaction devices A dual-unit shared architecture is designed for a group of shared human-computer interaction devices. The core relies on network switching technology to build an efficient switching mechanism, so that the switching process of the dual-unit simulator only needs to perform network switching operations, without the need to publish DCS simulation data configuration, thus achieving rapid switching between DCS servers of different units. Specifically, S1 includes the following steps: S1.1: First, modify the virtual machine interface of the DCS server client software adapted to the shared human-computer interaction device group to enable multiple units to share the shared human-computer interaction device group and simplify the DCS simulation data download and release process. S1.2: Upgrade the DCS server client software on the shared human-computer interaction device group; S1.3: During dual-unit switching, a network switching command is triggered through network switching technology. The network switcher module automatically disconnects the network interface of the currently connected unit's DCS server and simultaneously connects to the network interface of the target unit's DCS server. Since the DCS configuration data of the two units has been pre-fixed and stored in the corresponding servers, the switching process does not require reconfiguration, release and parameter debugging, which significantly shortens the switching time. At the same time, it ensures the stability and accuracy of the operation function of the shared human-machine interaction equipment group, and realizes the efficient sharing of the shared human-machine interaction equipment group in the scenario of sodium-cooled demonstration fast reactor Units 1 and 2. S2: Network switching function implementation The network switching function adopts the design logic of "one-click triggering + automatic network switching", which greatly simplifies the operation process and reduces the difficulty of operation for operators; When it is necessary to perform the switch operation from the No. 1 unit simulator to the No. 2 unit simulator, the operator does not need to perform complex network configuration adjustments or multi-device collaborative operations. He only needs to press the preset network switch button on the control console of the shared human-machine interaction equipment group to trigger the network switching command with one click. After the network switching command is issued, the network switcher module immediately starts its built-in network switching logic. First, it checks the status of the network link between the shared human-machine interaction device group and the current unit's DCS server. If the link connection is normal and the data transmission is completed, it automatically disconnects the network link corresponding to the current unit. Then, it quickly establishes a network connection between the shared human-machine interaction device group and the target unit's DCS server. Specifically, S2 includes the following steps: S2.1: Network Switching Command Trigger: The control console of the shared human-machine interface equipment group provides two switching options: "Unit 1 → Unit 2" and "Unit 2 → Unit 1". Operators can trigger the network switching command with one click by clicking the corresponding option. The network switcher is a device used for switching between different networks. It achieves complete physical isolation by separating different network servers and lines. Its hardware structure does not occupy the resources of the shared human-machine interface equipment group, does not require software loading, can quickly switch networks and prevent remote attacks, and supports more than 150,000 repeated switching without signal interference. S2.2: Automatic Network Link Switching: After receiving the network switching command, the network switcher module initiates its built-in network switching logic. First, it disconnects the currently connected DCS server network link through a port interruption mechanism, which takes ≤10ms. Then, it synchronously connects the target DCS server network link through a port connection mechanism, which takes ≤10ms. The entire switching process requires no manual intervention, achieving automatic and rapid network link switching. S2.3: Adaptation of the shared human-machine interface group after network switchover: Since the DCS configuration of the two units has been pre-stored on the corresponding servers, after the network switchover is completed, the DCS server client software of the shared human-machine interface group automatically identifies the DCS server of the target unit currently connected and loads the fixed configuration of the corresponding unit, without the need for reconfiguration, release, and parameter debugging. Operators can view the real-time operating data of the target unit and issue control commands through the interface of the shared human-machine interface group. The shared human-machine interface group automatically transmits the control commands to the DCS server of the target unit, realizing precise control of the target unit simulator.

[0032] The sodium-cooled fast reactor full-range simulator dual-unit switching device described in this embodiment includes a No. 1 unit simulation server group, a No. 2 unit simulation server group, a shared human-machine interaction device group, and a network switcher module; the network switcher module realizes network switching between the No. 1 unit simulation server group, the No. 2 unit simulation server group, and the shared human-machine interaction device group.

[0033] In this embodiment, the No. 1 unit simulation server group uses the core server of the No. 1 unit simulator to run the simulation environment built based on the No. 1 unit design data. It includes multiple No. 1 unit DCS layer 2 servers, multiple No. 1 unit DCS layer 1 servers, one No. 1 unit safety-level DCS server, one No. 1 unit model server, one No. 1 unit panel device, one No. 1 unit main engineer station, and one No. 1 unit extended engineer station. The DCS Layer 2 server of Unit 1 is connected to the DCS Layer 1 server of Unit 1 through the L1 switch and the L2 switch of Unit 1. The DCS Layer 1 server of Unit 1 is connected to the model server of Unit 1 through the LO / L1 switch of Unit 1. The model server of Unit 1 is connected to the security-level DCS server of Unit 1 through the L0 switch of Unit 1. The panel equipment of Unit 1 is connected to the model server of Unit 1. The main engineer station and the extended engineer station of Unit 1 are connected to the model server of Unit 1 through the DCS Layer 1 server and the LO / L1 switch of Unit 1, respectively. The Unit 2 simulation server group is a newly added independent simulation environment used to run a simulation environment built based on the design data of Unit 2, which has design differences from the Unit 1 simulation group. It includes multiple Unit 2 DCS Layer 2 servers, multiple Unit 2 DCS Layer 1 servers, one Unit 2 security-grade DCS server, one Unit 2 model server, one Unit 2 panel device, and one Unit 2 main engineer station. The Unit 2 DCS Layer 2 server is connected to the Unit 2 DCS Layer 1 server via the Unit 2 L1 switch and the Unit 2 L2 switch. The Unit 2 DCS Layer 1 server is connected to the Unit 2 model server via the Unit 2 LO / L1 switch. The Unit 2 model server is connected to the Unit 2 security-level DCS server via the Unit 2 L0 switch. The Unit 2 panel devices are connected to the Unit 2 model server. The Unit 2 main engineer station is connected to the Unit 2 model server via the Unit 2 DCS Layer 1 server and the Unit 2 LO / L1 switch. The Unit 2 panel devices are digital panel devices. The shared human-computer interaction equipment group includes multiple first-level non-safety operator workstations, multiple safe-level operator workstations, and multiple second-level non-safety operator workstations; The first non-safety level operator workstation, the second non-safety level operator workstation, and the safety level operator workstation are all equipped with adaptively modified DCS server client software. This client software stores the network address mapping tables of the DCS server of Unit 1 and the DCS server of Unit 2, and is configured to skip the configuration compilation and release process and directly load the pre-stored solidified configuration image file on the target server after detecting a network connection to the target server. The network switch module includes a first network switch, a second network switch, a third network switch, a fourth network switch, and a fifth network switch, which are installed between the No. 1 unit simulation server group, the No. 2 unit simulation server group, and the shared human-machine interaction equipment group. The first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are each equipped with a first port, a second port, and a third port; The first port of the first network switch is connected to the security-level operator workstation via a security-level switch, the second port is connected to the security-level DCS server of Unit 1, and the third port is connected to the security-level DCS server of Unit 2. The first port of the second network switch is connected to the second non-security level operator workstation through the first L2 switch of the shared equipment. The second port is connected to the second-level DCS layer 2 server and the second-level DCS layer 1 server of the second unit through the second unit L1 switch and the second unit L2 switch, respectively. The third port is connected to the first port of the third network switch. The second port of the third network switch is connected to the first non-security level operator workstation through the shared equipment second L2 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first port of the fourth network switch is connected to the second non-security level operator workstation through the first L1 switch of the shared equipment. The second port is connected to the second-level DCS server of the second unit and the first-level DCS server of the second unit through the second unit L1 switch and the second unit L2 switch, respectively. The third port is connected to the first port of the fifth network switch. The second port of the fifth network switch is connected to the first non-security level operator workstation through the shared equipment second L1 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are all pure hardware network switching devices, which include a physical layer switch matrix or a relay group for performing end-to-end conduction or disconnection operations at the physical layer. The network switcher module integrates a network status detection unit, a network switching execution unit, a caching unit, and a power management unit. The network status detection unit detects the status of the network link between the shared human-machine interface device group and the current unit's DCS server. The network switching execution unit automatically disconnects the network link corresponding to the current unit after confirming that the network link between the shared human-machine interface device group and the current unit's DCS server is connected normally and that data transmission is complete. The caching unit caches the data from the network status detection unit and the network status execution unit. The power management unit provides operating power. Each unit achieves data interaction and collaborative control through an internal high-speed bus. The module adopts a modular packaging design, featuring small size, high integration, and strong scalability, and can be directly embedded into various terminal devices or communication gateways.

[0034] In this embodiment, the simulation operation process for Unit 1 and Unit 2 is as follows: Non-safety level equipment operation commands input by the operator at the first non-safety level operator workstation or the second non-safety level operator workstation are sent to the model server of their respective units via the DCS Layer 2 server and DCS Layer 1 server, respectively, to achieve non-safety level simulation operation for their respective units. Safety level equipment operation commands input by the operator at the safety level operator workstation are sent to the model server of their respective units via the safety level DCS server, respectively, to achieve safety level simulation operation for their respective units. When the first non-safety level operator workstation or the second non-safety level operator workstation malfunctions and cannot operate, the non-safety level equipment operation commands input by the operator at the control panel of their respective units are directly sent to the model server of their respective units for execution, achieving non-safety level simulation operation for their respective units. When the safety level operator workstation malfunctions and cannot operate, the safety level equipment operation commands input by the operator at the control panel of their respective units are directly sent to the model server of their respective units for execution, achieving safety level simulation operation for their respective units. Through network switching via the network switcher module, it is possible to achieve independent simulation operation of Unit 1, independent simulation operation of Unit 2, and simultaneous simulation operation of Unit 1 and Unit 2.

[0035] In this embodiment, there are four ways for the device to achieve independent operation of Unit 1 simulation operation; The first method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 2, the second network switch from the second non-safety-level operator workstation, the third network switch from the first non-safety-level operator workstation, the fourth network switch from the second non-safety-level operator workstation, and the fourth network switch from the fifth network switch. The non-safety-level equipment operation commands input by the operator at the first non-safety-level operator workstation are sent to the Unit 1 model server via the fifth network switch, the Unit 1 DCS Layer 2 server, and the Unit 1 DCS Layer 1 server for execution, thus achieving non-safety-level simulation operation of Unit 1. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the Unit 1 model server via the Unit 1 safety-level DCS server for execution, achieving safety-level simulation operation of Unit 1. When the first non-safety-level operator workstation malfunctions and cannot operate, the non-safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, achieving non-safety-level simulation operation of Unit 1. Conversely, when the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, achieving safety-level simulation operation of Unit 1. The second method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 2, the second network switch from the second non-safety-level operator workstation, the second network switch from the third network switch, the fourth network switch from the second non-safety-level operator workstation, and the fifth network switch from the first non-safety-level operator workstation. The non-safety-level equipment operation commands input by the operator at the first non-safety-level operator workstation are sent to the Unit 1 model server via the third network switch, the Unit 1 DCS Layer 2 server, and the Unit 1 DCS Layer 1 server for execution, thus achieving non-safety-level simulation operation of Unit 1. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the Unit 1 model server via the Unit 1 safety-level DCS server for execution, achieving safety-level simulation operation of Unit 1. When the first non-safety-level operator workstation malfunctions and cannot operate, the non-safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, achieving non-safety-level simulation operation of Unit 1. Conversely, when the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, achieving safety-level simulation operation of Unit 1. The third method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 2, the second network switch from the second-level DCS server of Unit 2 and the first-level DCS server of Unit 2 respectively, the third network switch from the first non-safety-level operator workstation, the fourth network switch from the second non-safety-level operator workstation, and the fifth network switch from the first non-safety-level operator workstation. The non-safety-level equipment operation commands input by the operator at the second non-safety-level operator workstation are sent to the Unit 1 model server for execution via the second network switch, the third network switch, the second-level DCS server of Unit 1, and the first-level DCS server of Unit 1, thus realizing the operation of Unit 1. Non-safety level simulation operation of the unit: Safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the unit's model server via the unit's safety-level DCS server for execution, achieving non-safety level simulation operation of the unit. When the second non-safety level operator workstation malfunctions and cannot operate, the non-safety level equipment operation commands input by the operator at the unit's control panel are directly sent to the unit's model server for execution, achieving non-safety level simulation operation of the unit. Conversely, when the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the unit's control panel are directly sent to the unit's model server for execution, achieving safety-level simulation operation of the unit. The fourth method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 2, the second network switch from the second non-safety-level operator workstation, the third network switch from the first non-safety-level operator workstation, the fourth network switch from the second-level DCS server and the first-level DCS server of Unit 2 respectively, and the fifth network switch from the first non-safety-level operator workstation; the non-safety-level equipment operation commands input by the operator at the second non-safety-level operator workstation are sent to the Unit 1 model server for execution via the fourth network switch, the fifth network switch, the second-level DCS server of Unit 1, and the first-level DCS server of Unit 1, thus achieving one... Non-safety-level simulation operation of Unit 1; Safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the Unit 1 model server via the Unit 1 safety-level DCS server for execution, realizing the safety-level simulation operation of Unit 1; When the second non-safety-level operator workstation malfunctions and cannot operate, the non-safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, realizing the non-safety-level simulation operation of Unit 1; When the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the Unit 1 control panel are directly sent to the Unit 1 model server for execution, realizing the safety-level simulation operation of Unit 1.

[0036] In this embodiment, there are four ways for the device to achieve independent operation of the simulated operation of Unit 2; The first method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 1, the second network switch from the second non-safety-level operator workstation, the third network switch from the first non-safety-level operator workstation, the fourth network switch from the second non-safety-level operator workstation, and the fifth network switch from the second non-safety-level operator workstation to the second-level DCS layer 2 server and the first-level DCS server of Unit 1, respectively. The non-safety-level equipment operation commands input by the operator at the first non-safety-level operator workstation are sent to the Unit 2 model server for execution via the fifth network switch, the fourth network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2, thus achieving the second... Non-safety-level simulation operation of Unit 2; Safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the Unit 2 model server via the Unit 2 safety-level DCS server for execution, realizing the safety-level simulation operation of Unit 2; When the first non-safety-level operator workstation malfunctions and cannot operate, the non-safety-level equipment operation commands input by the operator at the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the non-safety-level simulation operation of Unit 2; When the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the safety-level simulation operation of Unit 2; The second method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 1, the second network switch from the second non-safety-level operator workstation, the third network switch from the second layer-two DCS server and the first layer-one DCS server of Unit 1 respectively, the fourth network switch from the second non-safety-level operator workstation, and the fifth network switch from the first non-safety-level operator workstation. The non-safety-level equipment operation commands input by the operator at the first non-safety-level operator workstation are sent to the Unit 2 model server for execution via the third network switch, the second network switch, the second layer-two DCS server of Unit 2, and the first layer-one DCS server of Unit 2, thus achieving the second... Non-safety-level simulation operation of Unit 2; Safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the Unit 2 model server via the Unit 2 safety-level DCS server for execution, realizing the safety-level simulation operation of Unit 2; When the first non-safety-level operator workstation malfunctions and cannot operate, the non-safety-level equipment operation commands input by the operator at the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the non-safety-level simulation operation of Unit 2; When the safety-level operator workstation malfunctions and cannot operate, the safety-level equipment operation commands input by the operator at the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the safety-level simulation operation of Unit 2; The third method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 1, the second network switch from the third network switch, the third network switch from the first non-safety-level operator workstation, the fourth network switch from the second non-safety-level operator workstation, and the fifth network switch from the first non-safety-level operator workstation. The non-safety-level equipment operation commands input by the operator at the second non-safety-level operator workstation are sent to the Unit 2 model server via the second network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2 for execution, thus realizing the non-safety-level simulation operation of Unit 2. Safety-level equipment operation commands input by operators at the safety-level operator workstation are sent to the Unit 2 model server via the Unit 2 safety-level DCS server for execution, achieving non-safety-level simulation operation of Unit 2. When the second non-safety-level operator workstation malfunctions and becomes inoperable, non-safety-level equipment operation commands input by operators at the Unit 2 control panel are directly sent to the Unit 1 model server for execution, achieving non-safety-level simulation operation of Unit 2. Conversely, when the safety-level operator workstation malfunctions and becomes inoperable, safety-level equipment operation commands input by operators at the Unit 2 control panel are directly sent to the Unit 2 model server for execution, achieving safety-level simulation operation of Unit 2. The fourth method is as follows: Based on the network switching trigger command, the network switch module disconnects the first network switch from the safety-level DCS server of Unit 1, the second network switch from the second non-safety-level operator workstation, the third network switch from the first non-safety-level operator workstation, and the fifth network switch from the first non-safety-level operator workstation. The non-safety-level equipment operation commands input by the operator at the second non-safety-level operator workstation are sent to the Unit 2 model server via the fourth network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2 for execution, thus realizing the non-safety-level simulation operation of Unit 2. The operator then operates the equipment at the safety level. Safety-level equipment operation commands input by the operator's workstation are sent to the Unit 2 model server via the Unit 2 safety-level DCS server for execution, achieving safety-level simulation operation of Unit 2. When the second non-safety-level operator workstation malfunctions and cannot operate, non-safety-level equipment operation commands input by the operator on the Unit 2 control panel are directly sent to the Unit 2 model server for execution, achieving non-safety-level simulation operation of Unit 2. When the safety-level operator workstation malfunctions and cannot operate, safety-level equipment operation commands input by the operator on the Unit 2 control panel are directly sent to the Unit 2 model server for execution, achieving safety-level simulation operation of Unit 2.

[0037] In this embodiment, there are three ways for the device to simultaneously run the simulation operation of Unit 1 and Unit 2; The first method is as follows: the network switch module disconnects the connection between the second network switch and the third network switch, as well as the connection between the fourth network switch and the fifth network switch, according to the network switching trigger command. The non-safety level equipment operation commands input by the operator at the first non-safety level operator workstation are sent to the No. 1 unit model server for execution via the third or fifth network switch, the No. 1 unit DCS layer 2 server and the No. 1 unit DCS layer 1 server, thereby realizing the non-safety level simulation operation of the No. 1 unit. The non-safety level equipment operation commands input by the operator at the second non-safety level operator workstation are sent to the second unit model server for execution via the second or fourth network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2, thereby realizing the non-safety level simulation operation of Unit 2. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the model server of their respective units via the safety-level DCS server of their respective units for execution, thereby realizing the safety-level simulation operation of their respective units. When the first non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 1 control panel are directly sent to the Unit 1 model server for execution, realizing the non-safety level simulation operation of Unit 1; when the second non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the non-safety level simulation operation of Unit 2. When the safety-level operator workstation malfunctions and cannot work, the safety-level equipment operation commands input by the operators on the panel equipment of their respective units are directly sent to the model server of their respective units for execution, so as to realize the safety-level simulation operation of their respective units. The second method is as follows: the network switch module disconnects the second network switch from the second non-safety level operator workstation, the third network switch from the second layer server of DCS of Unit 1 and the first layer server of DCS of Unit 1 respectively, the fourth network switch from the second layer server of DCS of Unit 2 and the first layer server of DCS of Unit 2 respectively, and the fifth network switch from the first non-safety level operator workstation according to the network switch trigger command. The non-safety level equipment operation commands input by the operator at the first non-safety level operator workstation are sent to the No. 2 unit model server for execution via the third network switch, the second network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2, thereby realizing the non-safety level simulation operation of Unit 2. The non-safety level equipment operation commands input by the operator at the second non-safety level operator workstation are sent to the No. 1 unit model server for execution via the fourth network switch, the fifth network switch, the No. 1 unit DCS layer 2 server, and the No. 1 unit DCS layer 1 server, thereby realizing the non-safety level simulation operation of the No. 1 unit. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the model server of their respective units via the safety-level DCS server of their respective units for execution, thereby realizing the safety-level simulation operation of their respective units. When the first non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the non-safety level simulation operation of Unit 2; when the second non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 1 control panel are directly sent to the Unit 1 model server for execution, realizing the non-safety level simulation operation of Unit 1. When the safety-level operator workstation malfunctions and cannot work, the safety-level equipment operation commands input by the operators on the panel equipment of their respective units are directly sent to the model server of their respective units for execution, so as to realize the safety-level simulation operation of their respective units. The third method is as follows: The network switch module disconnects the second network switch from the second unit DCS layer 2 server and the second unit DCS layer 1 server respectively, the third network switch from the first non-safety level operator workstation, the fourth network switch from the second non-safety level operator workstation, and the fifth network switch from the first unit DCS layer 2 server and the first unit DCS layer 1 server respectively, according to the network switch trigger command. The non-safety level equipment operation commands input by the operator at the first non-safety level operator workstation are sent to the No. 2 unit model server for execution via the fifth network switch, the fourth network switch, the second-level DCS server of Unit 2, and the first-level DCS server of Unit 2, thereby realizing the non-safety level simulation operation of Unit 2. The non-safety level equipment operation commands input by the operator at the second non-safety level operator workstation are sent to the No. 1 unit model server for execution via the second network switch, the third network switch, the No. 1 unit DCS layer 2 server, and the No. 1 unit DCS layer 1 server, thereby realizing the non-safety level simulation operation of the No. 1 unit. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the model server of their respective units via the safety-level DCS server of their respective units for execution, thereby realizing the safety-level simulation operation of their respective units. When the first non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 2 control panel are directly sent to the Unit 2 model server for execution, realizing the non-safety level simulation operation of Unit 2; when the second non-safety level operator workstation malfunctions and becomes inoperable, the non-safety level equipment operation commands input by the operator on the Unit 1 control panel are directly sent to the Unit 1 model server for execution, realizing the non-safety level simulation operation of Unit 1. When a safety-level operator workstation malfunctions and becomes inoperable, the safety-level equipment operation commands input by the operator on the control panel of their respective unit are directly sent to the model server of their respective unit for execution, thereby achieving safety-level simulation operation of their respective unit.

[0038] This embodiment also provides a method for switching between two units in a full-range sodium-cooled fast reactor simulator, using the aforementioned dual-unit switching device for the full-range sodium-cooled fast reactor simulator, including the following steps: S1: Keep both the Unit 1 simulation server group and the Unit 2 simulation server group online and running independently of their respective simulation models and control logic. S2: Adapt the interfaces of the shared human-machine interface group to enable it to recognize and connect to the No. 1 unit simulation server group and the No. 2 unit simulation server group. After the connection is established, skip the configuration compilation and release process and directly load the pre-fixed configuration data of the corresponding unit. S3: The shared human-machine interface group triggers a network switching trigger command, indicating a switch from the currently connected unit simulation server group to the target unit simulation server group. S4: Each switch in the network switcher module responds to the network switching trigger command, disconnecting the network connection with the current unit simulation server group at the physical layer and establishing a network connection with the target unit simulation server group. S5: After detecting the network change, the shared human-machine interface group automatically rebuilds the network session with the target unit simulation server group, loads the pre-fixed configuration data of the target unit, and restores normal monitoring and operation functions.

[0039] In this embodiment, S2 specifically includes the following steps: In the DCS server client software of the shared human-computer interaction equipment group, configure a mapping table containing the addresses of the DCS server of Unit 1 and the DCS server of Unit 2. Modify the network session management module of the DCS server client software so that when a network connection or reconnection event is detected, it directly requests and loads the pre-stored, compiled, and solidified configuration image file from the currently connected DCS server, without having to execute the configuration data compilation and publishing process.

[0040] In this embodiment, S4 specifically includes the following steps: After receiving a network switching trigger command, the network switcher module detects the communication status of the currently connected link through its internal network status detection unit. After confirming that a safe switch is possible, the internal physical layer switch matrix or relay group is driven by the internal network switching execution unit to disconnect the connection between the current end and the target end within a predetermined time, and then connect the connection between the target end and the target end.

[0041] In this embodiment, during the execution of S4, the simulation data interaction between the No. 1 unit model server and the No. 1 unit DCS server in the No. 1 unit simulation server group, and between the No. 2 unit model server and the No. 2 unit DCS server in the No. 2 unit simulation server group, remains continuous and is not affected by network switching operations.

[0042] In this embodiment, the method further includes a redundancy switching application step: when some servers in the No. 1 unit simulation server group or the No. 2 unit simulation server group fail, the shared human-computer interaction device group is switched to the corresponding server in the other unit simulation server group by triggering a network switching command, so as to ensure the continuity of simulation training services.

[0043] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. A dual-unit switching device for a full-range sodium-cooled fast reactor simulator, characterized in that, include: The No. 1 unit simulation server group is used to run a simulation environment built based on the design data of the No. 1 unit according to human-computer interaction instructions; The No. 2 unit simulation server group is used to run a simulation environment based on the design data of the second unit, which has design differences from the first unit simulation server group, according to human-computer interaction instructions. A shared human-computer interaction equipment group is used to send human-computer interaction commands to either the No. 1 unit simulation server group or the No. 2 unit simulation server group. The network switcher module is used to automatically switch the connection between the first unit simulation server group, the second unit simulation server group and the shared human-computer interaction device group according to the network switching command.

2. The dual-unit switching device for the full-range sodium-cooled fast reactor simulator according to claim 1, characterized in that, The No. 1 unit simulation server group includes the No. 1 unit DCS Layer 2 server, the No. 1 unit DCS Layer 1 server, the No. 1 unit security-level DCS server, the No. 1 unit model server, and the No. 1 unit panel equipment. The DCS Layer 2 server of Unit 1 is connected to the DCS Layer 1 server of Unit 1 through the L1 switch and the L2 switch of Unit 1. The DCS Layer 1 server of Unit 1 is connected to the model server of Unit 1 through the LO / L1 switch of Unit 1. The model server of Unit 1 is connected to the security-level DCS server of Unit 1 through the L0 switch of Unit 1. The panel equipment of Unit 1 is connected to the model server of Unit 1. The Unit 2 simulation server group includes the Unit 2 DCS Layer 2 server, the Unit 2 DCS Layer 1 server, the Unit 2 security-level DCS server, the Unit 2 model server, and the Unit 2 panel equipment. The second-level DCS server of Unit 2 is connected to the first-level DCS server of Unit 2 through the L1 and L2 switches of Unit 2. The first-level DCS server of Unit 2 is connected to the model server of Unit 2 through the LO / L1 switches of Unit 2. The model server of Unit 2 is connected to the security-level DCS server of Unit 2 through the L0 switch of Unit 2. The panel equipment of Unit 2 is connected to the model server of Unit 2. The panel equipment of Unit 2 is a digital panel equipment.

3. The dual-unit switching device for the full-range sodium-cooled fast reactor simulator according to claim 2, characterized in that, The shared human-computer interaction equipment group includes a first non-safety level operator workstation, a safe level operator workstation, and a second non-safety level operator workstation; The first non-safety level operator workstation, the second non-safety level operator workstation, and the safety level operator workstation are all equipped with adaptively modified DCS server client software. This client software stores the network address mapping tables of the DCS servers of Unit 1 and Unit 2, and is configured to skip the configuration compilation and release process and directly load the pre-stored solidified configuration image file on the target server after detecting a network connection to the target server.

4. The dual-unit switching device for the full-range sodium-cooled fast reactor simulator according to claim 3, characterized in that, The network switch module includes a first network switch, a second network switch, a third network switch, a fourth network switch, and a fifth network switch, which are installed between the No. 1 unit simulation server group, the No. 2 unit simulation server group, and the shared human-machine interaction equipment group; the first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are each provided with a first port, a second port, and a third port. The first port of the first network switch is connected to the security-level operator workstation via a security-level switch, the second port is connected to the security-level DCS server of Unit 1, and the third port is connected to the security-level DCS server of Unit 2. The first port of the second network switch is connected to the second non-security level operator workstation through the first L2 switch of the shared equipment. The second port is connected to the second-level DCS layer 2 server and the second-level DCS layer 1 server of the second unit through the second unit L1 switch and the second unit L2 switch, respectively. The third port is connected to the first port of the third network switch. The second port of the third network switch is connected to the first non-security level operator workstation through the shared equipment second L2 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first port of the fourth network switch is connected to the second non-security level operator workstation through the first L1 switch of the shared equipment. The second port is connected to the second-level DCS server of the second unit and the first-level DCS server of the second unit through the second unit LI switch and the second unit L2 switch, respectively. The third port is connected to the first port of the fifth network switch. The second port of the fifth network switch is connected to the first non-security level operator workstation through the shared equipment second L1 switch, and the third port is connected to the first unit DCS layer 2 server and the first unit DCS layer 1 server through the first unit L1 switch and the first unit L2 switch, respectively. The first network switch, the second network switch, the third network switch, the fourth network switch, and the fifth network switch are all pure hardware network switching devices, which include a physical layer switch matrix or a relay group for performing end-to-end conduction or disconnection operations at the physical layer. The network switcher module has a built-in network status detection unit, network switching execution unit, buffer unit, and power management unit; The network status detection unit is used to detect the status of the network link between the shared human-machine interaction device group and the current unit's DCS server; the network switching execution unit is used to confirm that the network link between the shared human-machine interaction device group and the current unit's DCS server is connected normally and that data transmission is completed, and then automatically disconnects the network link corresponding to the current unit; the caching unit is used to cache the data of the network status detection unit and the network status execution unit; the power management unit is used to provide operating power; each unit realizes data interaction and collaborative control through an internal bus, and the whole adopts a modular packaging design.

5. The dual-unit switching device for the full-range sodium-cooled fast reactor simulator according to claim 4, characterized in that, The simulation operation process for both Unit 1 and Unit 2 is as follows: The non-safety level equipment operation commands input by the operator at the first non-safety level operator workstation or the second non-safety level operator workstation are sent to the model server of their respective units via the DCS second-level server and the DCS first-level server, respectively, to achieve non-safety level simulation operation of their respective units. The safety-level equipment operation commands input by the operator at the safety-level operator workstation are sent to the model server of their respective units via the safety-level DCS server of their respective units for execution, thereby realizing the safety-level simulation operation of their respective units. When the first non-safety level operator workstation or the second non-safety level operator workstation malfunctions and cannot work, the non-safety level equipment operation commands input by the operators on the panel equipment of their respective units are directly sent to the model server of their respective units for execution, so as to realize the non-safety level simulation operation of their respective units. When the safety-level operator workstation malfunctions and cannot work, the safety-level equipment operation commands input by the operators on the panel equipment of their respective units are directly sent to the model server of their respective units for execution, so as to realize the safety-level simulation operation of their respective units. Through network switching via the network switcher module, it is possible to achieve independent simulation operation of Unit 1, independent simulation operation of Unit 2, and simultaneous simulation operation of Unit 1 and Unit 2.

6. A method for switching between two units in a full-range simulator for a sodium-cooled fast reactor, characterized in that, The application of the sodium-cooled fast reactor full-range simulator dual-unit switching device according to any one of claims 1-5 includes the following steps: S1: Keep both the Unit 1 simulation server group and the Unit 2 simulation server group online and running independently of their respective simulation models and control logic. S2: Perform interface adaptation on the shared human-machine interaction device group to enable it to recognize and connect to the No. 1 unit simulation server group and the No. 2 unit simulation server group, and skip the configuration compilation and release process after the connection is established, directly loading the pre-fixed configuration data of the corresponding unit; S3: The shared human-machine interaction device group triggers a network switching trigger command, which indicates a switch from the currently connected unit simulation server group to the target unit simulation server group; S4: Each switch in the network switch module responds to the network switching trigger command by disconnecting the network connection with the current unit simulation server group at the physical layer and connecting the network connection with the target unit simulation server group. S5: After the shared human-computer interaction device group detects a network change, it automatically rebuilds the network session with the target unit simulation server group, loads the pre-fixed configuration data of the target unit, and restores normal monitoring and operation functions.

7. The method for switching between two units in a full-range sodium-cooled fast reactor simulator according to claim 6, characterized in that, S2 specifically includes the following steps: In the DCS server client software of the shared human-computer interaction equipment group, configure a mapping table containing the addresses of the DCS server of Unit 1 and the DCS server of Unit 2. Modify the network session management module of the DCS server client software so that when a network connection or reconnection event is detected, it directly requests and loads the pre-stored, compiled, and solidified configuration image file from the currently connected DCS server, without having to execute the configuration data compilation and publishing process.

8. The method for switching between two units in a full-range simulator of a sodium-cooled fast reactor according to claim 6, characterized in that, S4 specifically includes the following steps: After receiving a network switching trigger command, the network switcher module detects the communication status of the currently connected link through its internal network status detection unit. After confirming that a safe switch is possible, the internal physical layer switch matrix or relay group is driven by the internal network switching execution unit to disconnect the connection between the current end and the target end within a predetermined time, and then connect the connection between the target end and the target end.

9. The method for switching between two units in a full-range simulator of a sodium-cooled fast reactor according to claim 6, characterized in that, During the execution of S4, the simulation data interaction between the Unit 1 model server and the Unit 1 DCS server in the Unit 1 simulation server group, and between the Unit 2 model server and the Unit 2 DCS server in the Unit 2 simulation server group, remains continuous and is not affected by network switching operations.

10. The method for switching between two units in a full-range simulator of a sodium-cooled fast reactor according to claim 6, characterized in that, It also includes a redundancy switching application step: when some servers in the No. 1 unit simulation server group or the No. 2 unit simulation server group fail, the shared human-computer interaction equipment group is switched to the corresponding server in the other unit simulation server group by triggering a network switching command, so as to ensure the continuity of simulation training services.

Images