Configuration diagnosis system and method for nuclear power DCS application software in full-scope simulation environment

Abstract

The present application discloses a configuration diagnosis system and method for nuclear power DCS application software in a full-scope simulation environment. The system comprises an automatic test system, a virtual DCS system connected to the automatic test system, and a process simulation system connected to the virtual DCS system; the process simulation system is used for feeding back a simulation process signal to the virtual DCS system, and the simulation process signal represents process parameters and an operation state of an on-site controlled device to be controlled by nuclear power DCS application software to be tested; the virtual DCS system is used for running said nuclear power DCS application software, and said nuclear power DCS application software is used for executing, on the basis of the simulation process signal, a target test case provided by the automatic test system; and the automatic test system is used for obtaining and sending to the virtual DCS system the target test case for configuration diagnosis, and monitoring a target variable during the execution of the target test case by said nuclear power DCS application software, so as to obtain a configuration diagnosis result of said nuclear power DCS application software on the basis of the found variable value.

Description

Full-range simulation environment nuclear power DCS application software configuration diagnostic system and method

[0001] This application claims priority to Chinese Patent Application No. 202411641874.5, filed on November 18, 2024, with the invention title "Full-range Simulation Environment Nuclear Power DCS Application Software Configuration Diagnostic System and Method", the entire contents of which are incorporated herein by reference. Technical Field

[0002] This application relates to the field of DCS software configuration and diagnostic technology, and in particular to a full-range simulation environment nuclear power DCS application software configuration and diagnostic system and method. Background Technology

[0003] Distributed Control System (DCS) is a commonly used control system in industry. A DCS system consists of hardware and DCS software that runs on the hardware.

[0004] Currently, in the nuclear power field, the primary method used by equipment manufacturers to diagnose DCS software is to compare the design input files with the configuration logic outputs. However, this method fails to connect the DCS system to the controlled field devices, making it impossible to verify the closed-loop dynamic logic of the DCS software, which relies on the actions and states of these devices for interlocking control. Therefore, existing diagnostic methods cannot detect problems in these dynamic logic components, resulting in inaccurate diagnostic results. Consequently, once the DCS software passes diagnostics and enters the commissioning phase, numerous software configuration issues related to these dynamic logic components are exposed, impacting the development and use of the DCS system. Summary of the Invention

[0005] Therefore, this application discloses the following technical solution:

[0006] The first aspect of this application provides a full-range simulation environment nuclear power DCS application software configuration and diagnostic system, including: an automatic testing system, a virtual DCS system, and a process simulation system;

[0007] The automated testing system is connected to the virtual DCS system, and the virtual DCS system is connected to the process simulation system;

[0008] The process simulation system is used to feed back simulated process signals to the virtual DCS system. The simulated process signals characterize the process parameters and operating status of the field controlled equipment to be controlled by the nuclear power plant DCS application software under test.

[0009] The virtual DCS system is used to run the DCS application software of the nuclear power plant under test, and the DCS application software of the nuclear power plant under test is used to execute the target test cases provided by the automatic test system according to the simulated process signals.

[0010] The automated testing system is used to obtain and send target test cases for configuration diagnosis to the virtual DCS system, and monitor target variables during the execution of the target test cases by the nuclear power DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power DCS application software under test based on the monitored variable values.

[0011] Optionally, the virtual DCS system includes a non-security-grade virtual DCS subsystem and a security-grade virtual DCS subsystem;

[0012] The non-safety-grade virtual DCS subsystem is used to run the DCS application software of the nuclear power plant under test.

[0013] The security-grade virtual DCS subsystem is used to communicate with the process simulation system to verify whether the process simulation system is functioning properly.

[0014] Optionally, when the automatic testing system obtains the configuration diagnostic results of the tested nuclear power plant DCS application software based on the monitored variable values, it is specifically used for:

[0015] A test report is generated for the tested nuclear power plant DCS application software based on the monitored variable values. The test report serves as the configuration diagnostic result of the tested nuclear power plant DCS application software.

[0016] Optionally, when the automated testing system obtains the target test cases, it is specifically used for:

[0017] Determine the process system corresponding to the tested nuclear power DCS application software and the test program running by the automatic test system;

[0018] Based on the process system and the test program, the corresponding target test case is obtained from multiple optional test cases.

[0019] Optionally, the automated testing system is also used for:

[0020] Determine the target diagnostic level to which the tested nuclear power DCS application software belongs, wherein the target diagnostic level includes any one of equipment-level diagnostics, system-level diagnostics, and unit-level diagnostics;

[0021] When the automated testing system obtains the corresponding target test case from multiple optional test cases based on the process system and the test program, it is specifically used for:

[0022] Based on the process system and the test program, the target test case corresponding to the target diagnostic level is obtained from multiple optional test cases.

[0023] The second aspect of this application provides a method for configuring and diagnosing nuclear power DCS application software in a full-range simulation environment, which is applied to a nuclear power DCS application software configuration and diagnosis system in a full-range simulation environment. The system includes an automatic testing system, a virtual DCS system, and a process simulation system.

[0024] The method includes:

[0025] The automated testing system obtains and sends target test cases for configuration diagnostics to the virtual DCS system.

[0026] The virtual DCS system executes the target test cases provided by the automatic test system based on the simulated process signals through the DCS application software of the nuclear power plant under test. The simulated process signals are obtained from the process simulation system and represent the process parameters and operating status of the field controlled equipment to be controlled by the DCS application software of the nuclear power plant under test.

[0027] The automated testing system monitors target variables during the execution of the target test cases by the nuclear power plant DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power plant DCS application software under test based on the monitored variable values.

[0028] Optionally, the virtual DCS system includes a non-security-grade virtual DCS subsystem and a security-grade virtual DCS subsystem;

[0029] The method further includes:

[0030] The virtual DCS system communicates with the process simulation system based on the security-level virtual DCS subsystem to verify whether the process simulation system is functioning properly.

[0031] Optionally, the automatic testing system obtains the configuration diagnostic results of the tested nuclear power plant DCS application software based on the monitored variable values, including:

[0032] The automatic testing system generates a test report for the tested nuclear power plant DCS application software based on the monitored variable values. The test report serves as the configuration diagnostic result of the tested nuclear power plant DCS application software.

[0033] Optionally, the automated testing system obtains the target test cases, including:

[0034] Determine the process system corresponding to the tested nuclear power DCS application software and the test program running by the automatic test system;

[0035] Based on the process system and the test program, the corresponding target test case is obtained from multiple optional test cases.

[0036] Optional, also includes:

[0037] The automatic testing system determines the target diagnostic level of the tested nuclear power DCS application software, and the target diagnostic level includes any one of equipment-level diagnosis, system-level diagnosis, and unit-level diagnosis.

[0038] The step of obtaining the corresponding target test case from multiple optional test cases based on the process system and the test program includes:

[0039] Based on the process system and the test program, the target test case corresponding to the target diagnostic level is obtained from multiple optional test cases.

[0040] The beneficial effects of this solution are as follows: When testing nuclear power DCS application software, this solution provides the software under test with simulated process signals that characterize the process parameters and operating status of the controlled equipment on site through the process simulation system. This allows the software under test to be triggered to execute interlocking control logic based on the actions and status of the controlled equipment on site during testing, thereby verifying whether there are any problems with these interlocking control logics of the software under test. Therefore, compared with the existing technology, this solution can obtain more comprehensive and accurate configuration diagnosis results. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0042] Figure 1 is a schematic diagram of the structure of a full-range simulation environment nuclear power DCS application software configuration diagnostic system provided in an embodiment of this application;

[0043] Figure 2 is a schematic diagram of another full-range simulation environment nuclear power DCS application software configuration and diagnostic system provided in an embodiment of this application;

[0044] Figure 3 is a schematic diagram of a diagnostic verification process provided in an embodiment of this application;

[0045] Figure 4 is a schematic diagram of the composition of an automatic testing system provided in an embodiment of this application;

[0046] Figure 5 is a flowchart of a full-range simulation environment nuclear power DCS application software configuration diagnosis method provided in an embodiment of this application. Detailed Implementation

[0047] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0048] DCS software configuration diagnostics can be understood as testing the software components of a distributed control system (DCS) using various test cases to verify whether the DCS software has vulnerabilities and whether all functions can be used normally.

[0049] Currently, common methods for DCS software configuration diagnostics include: simulation diagnostics, emulation diagnostics, and physical simulation diagnostics. Simulation diagnostics refers to using third-party hardware and software (other than the original DCS) to simulate the control functions of the DCS for diagnostic purposes. Physical simulation diagnostics uses a real DCS to perform the simulation diagnostic task. Virtual diagnostics falls between simulation and physical simulation diagnostics; it generally uses the same software and logic algorithms as the original DCS, but does not include the actual DCS hardware, and performs logical operation diagnostics using ordinary computers or other hardware devices.

[0050] With the development of simulation technology, interfacing virtual DCS with simulation platforms and performing virtual DCS software configuration diagnostics based on process simulation has greater advantages. However, there is currently no method for constructing a full-range simulation environment for nuclear power DCS and performing configuration diagnostics on nuclear power DCS software based on this environment.

[0051] Furthermore, current virtual DCS testing systems do not enable automated batch testing based on simulation environments, resulting in low verification efficiency.

[0052] In addition, after the nuclear power DCS leaves the factory and enters the on-site commissioning phase, the following problems still exist:

[0053] First, the verification and commissioning schedule is tight. With the construction period remaining constant, the scale of new reactor types is constantly increasing. Furthermore, considering that the DCS factory testing phase cannot simulate the actual operating conditions of a power plant, and the limited testing environment cannot fully verify the DCS configuration logic, a large number of on-site DCS application software configuration problems will arise during the commissioning phase. The re-verification of the configuration logic after DCS functional verification and defect elimination will have a significant impact on the project schedule.

[0054] Second, the technical control and management are challenging, and the investment in DCS transformation and verification is substantial. When DCS configuration errors are discovered during commissioning, DCS transformation requires extensive isolation and re-verification of the process system. The discovery, transmission, technical management of configuration changes, version management, and transformation management of testing issues all require a significant investment of manpower on-site, and there are technical control and management risks involved.

[0055] Third, there are high safety risks. Problems left over from the design, manufacturing, and installation stages of the DCS may lead to equipment damage, personal injury, and other situations once the commissioning phase begins. The analysis, handling, and verification of these problems double the associated risks.

[0056] In light of the above, it is necessary to pre-verify the application software configuration in a virtual environment during on-site commissioning. This allows for the early detection of potential problems during the actual operation of the process system, thereby reducing DCS defects during the on-site commissioning phase, mitigating the safety risks associated with DCS defects, and shortening the on-site commissioning cycle.

[0057] To achieve the above effects, this application provides a full-range simulation environment nuclear power DCS application software configuration diagnostic system. Please refer to Figure 1, which is a schematic diagram of the system structure. The system may include: an automatic testing system 101, a virtual DCS system 102, and a process simulation system 103.

[0058] The automatic testing system 101 is connected to the virtual DCS system 102, and the virtual DCS system 102 is connected to the process simulation system 103.

[0059] The process simulation system 103 is used to feed back simulated process signals to the virtual DCS system 102. The simulated process signals characterize the process parameters and operating status of the field controlled equipment to be controlled by the nuclear power plant DCS application software under test.

[0060] On the other hand, the process simulation system 103 can also receive various equipment operation commands generated by the virtual DCS system 102 during the execution of target test cases for controlling the field controlled equipment. For example, it can receive equipment operation commands such as valves, actuators, and circuit breakers, and output corresponding simulated process signals based on these equipment operation commands to characterize the process parameters and operating status of the field controlled equipment after it runs based on the equipment operation commands.

[0061] As examples, the simulation process signals sent by the process simulation system 103 to the virtual DCS system 102 may include, but are not limited to, signals characterizing process parameters such as temperature, pressure, flow rate, and liquid level, signals characterizing the operating status of equipment such as valves, actuators, and circuit breakers, and equipment operation commands sent by the virtual DCS system 102 to the process simulation system, including but not limited to equipment operation commands for controlling the operation of equipment such as valves, actuators, and circuit breakers.

[0062] The virtual DCS system 102 is used to run the DCS application software of the nuclear power plant under test, and the DCS application software of the nuclear power plant under test is used to execute the target test cases provided by the automatic test system 101 according to the simulated process signals.

[0063] The automatic testing system 101 is used to obtain and send target test cases for configuration diagnosis to the virtual DCS system 102, and monitor target variables during the execution of the target test cases by the nuclear power DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power DCS application software under test based on the monitored variable values.

[0064] The beneficial effects of this solution are as follows: When testing nuclear power DCS application software, this solution provides the software under test with simulated process signals that characterize the process parameters and operating status of the controlled equipment on site through the process simulation system 103. This allows the software under test to be triggered to execute interlocking control logic based on the actions and status of the controlled equipment on site during testing, thereby verifying whether there are any problems with these interlocking control logics of the software under test. Therefore, compared with the existing technology, this solution can obtain more comprehensive and accurate configuration diagnosis results.

[0065] This system allows DCS software configuration diagnostics to be performed in a virtual simulation environment based on a process simulation system. This facilitates the early detection of potential problems when the DCS software is actually applied to the process system, thereby reducing DCS software defects during the on-site commissioning phase, mitigating the safety risks associated with these defects, and shortening the on-site commissioning cycle. Furthermore, the diagnostic system in this embodiment can be used in the nuclear power DCS factory testing and factory acceptance testing phases, increasing the diversity and coverage of diagnostic testing methods. This enhances the comprehensiveness of the testing environment within the nuclear power DCS design and manufacturing plant, ultimately improving product quality.

[0066] Furthermore, in the diagnostic system of this embodiment, the automatic testing system can automatically send a large number of test cases to the virtual DCS system in sequence to obtain the corresponding test results. Thus, this solution can realize batch automatic testing based on the process simulation system, effectively improving verification efficiency.

[0067] In some optional embodiments, referring to Figure 2, the virtual DCS system 102 may include a non-security-level virtual DCS subsystem and a security-level virtual DCS subsystem.

[0068] The non-safety-grade virtual DCS subsystem is used to run the DCS application software of the nuclear power plant under test;

[0069] The security-grade virtual DCS subsystem is used to communicate with the process simulation system 103 to verify whether the process simulation system 103 is functioning properly.

[0070] As shown in Figure 2, in this embodiment, the non-security-level virtual DCS subsystem is the object under test. The non-security-level virtual DCS subsystem consists of an engineer station, a server, a network switch, an operator station, and a virtual control station. The connection relationship between the devices is shown in Figure 2.

[0071] The non-security-grade virtual DCS subsystem may include two network switches. One network switch (e.g., network switch 130.0.0.x shown in Figure 2) provides an MNET interface for the automated test system, thereby receiving target test cases sent by the automated test system. The other network switch (e.g., network switch 128.0.0.x shown in Figure 2) provides an interface for I / O signals and control commands for the process simulation system. Through this switch, the non-security-grade virtual DCS subsystem can receive simulated process signals from the process simulation system and can send equipment operation commands to the process simulation system to control the controlled equipment in the field.

[0072] In this embodiment, the security-grade virtual DCS subsystem can serve as a test system. The security-grade virtual DCS system may include engineering workstations, control simulators and terminals, security-grade virtual control stations, and other devices to realize the virtualization of the security-grade DCS system.

[0073] The security-grade virtual DCS subsystem also includes network switches, which are used to enable information exchange between devices such as engineering workstations, control simulators and terminals, and security-grade virtual control stations within the system. The security-grade virtual DCS subsystem can be connected to the process simulation system through the security-grade virtual control station.

[0074] In this embodiment, the safety-grade virtual DCS subsystem can be used to communicate with the process simulation system 103 to verify whether the process simulation system 103 is functioning properly. For example, when the non-safety-grade virtual DCS subsystem interacts with the process simulation system and finds that the process parameters and operating status fed back by the process simulation system are abnormal, the safety-grade virtual DCS subsystem can obtain these abnormal process parameters and operating status from the process simulation system, determine whether the abnormal process parameters and operating status are caused by the process simulation system, and if these abnormalities are not caused by the process simulation system, it can be considered that the DCS software running by the non-safety-grade virtual DCS subsystem has corresponding defects.

[0075] A security-grade virtual DCS subsystem can have a maintenance protocol communication interface, thus serving as a companion system to undertake system communication functions.

[0076] An automated testing system mainly consists of testing hardware and corresponding testing software.

[0077] As shown in Figure 2, the test hardware of the automatic test system 101 may include a data server, a tester station, and a test communication station. The data server may be a TD-SVR, and the tester station may be a TD-TOPS.

[0078] The test communication station is used for communication with non-security-grade virtual subsystems.

[0079] Please refer to Figure 4. The software part of the automated testing system may include the test execution platform TD-Base system and the testing software TD_ACTs.

[0080] The data server can be used to run test service software, specifically IO management service, test communication service, data service and model gateway service.

[0081] The tester station can be used to run test service software and test client software, providing testers with a test interface and test applications through the aforementioned software.

[0082] Please refer to Figure 2. The process simulation system may include hardware devices such as a process model server, a floppy disk workstation, a development workstation, and a simulation management terminal. The process model server can run software products such as standard simulation models, GENUS software tools, and test-specific simulation tools.

[0083] In this embodiment, the automated test system and the non-safety-grade virtual DCS subsystem can be connected via the M-NET communication protocol to enable the automated test system to enforce and monitor L2-level variables of the non-safety-grade virtual DCS subsystem. Thus, the automated test system can monitor target variables in the tested nuclear power DCS application software within the non-safety-grade virtual DCS subsystem during the execution of target test cases, and obtain configuration diagnostic results of the tested nuclear power DCS application software based on the monitored variable values.

[0084] An automated testing system and a security-grade virtual DCS subsystem do not necessarily need to establish a data connection. However, for TD-Base-based automated testing systems, a maintenance protocol communication interface can be set up in the security-grade virtual DCS subsystem.

[0085] The architecture of the process simulation system can be consistent with that of a full-range nuclear power plant simulator, and the software portion of the process simulation system can be developed based on the GENUS simulation support platform. This platform is a highly integrated simulation development environment based on the Windows operating system, including various software required for model development, operation, maintenance and testing, database management, and test record compilation and management.

[0086] In this embodiment, when the automatic testing system 101 obtains the configuration diagnosis results of the tested nuclear power plant DCS application software based on the monitored variable values, it is specifically used for:

[0087] A test report is generated based on the monitored variable values ​​for the tested nuclear power plant DCS application software. The test report serves as the configuration diagnostic result for the tested nuclear power plant DCS application software.

[0088] Specifically, the automatic testing system 101 can compare the monitored variable values ​​with pre-set standard values ​​or standard value ranges to obtain corresponding comparison results. The comparison results can indicate whether the monitored variable values ​​are consistent with the standard values, or whether the monitored variable values ​​are within the standard value range.

[0089] Then, the automatic test system 101 can obtain a preset test report template, add the monitored variable values ​​and corresponding comparison results to the test report template to obtain a test report, and output the test report as a configuration diagnosis result.

[0090] In this embodiment, the automatic testing system can first establish multiple optional test cases for configuration diagnostic testing of DCS software in the following manner.

[0091] As shown in Figure 3, the automated testing system can obtain the nuclear power plant's system design manual as a basis, refer to the nuclear power plant's system commissioning outline and test procedures, analyze the functions of DCS-related process systems that can be verified in advance in the factory, and the operating conditions required for verification; at the same time, combined with the analysis of oversight issues on site, the testing methods are improved to form a testing method suitable for in-plant diagnostic verification of DCS software configuration; finally, based on the functions of DCS-related process systems, the operating conditions required for verification, and the testing method suitable for in-plant diagnostic verification of DCS software configuration, several optional test cases for conducting in-plant diagnostic verification of DCS software configuration are compiled.

[0092] After obtaining multiple optional test cases, as shown in Figure 3, the automated testing system 101 can obtain the target test case from the multiple optional test cases during testing in the following manner:

[0093] Determine the test procedures for the process system and automatic test system 101 corresponding to the DCS application software of the nuclear power plant under test;

[0094] Based on the process system and test procedures, the corresponding target test case is obtained from multiple optional test cases.

[0095] In this embodiment, the process system corresponding to the tested nuclear power plant DCS application software can be understood as the process system to which the field-controlled equipment to be controlled by the tested nuclear power plant DCS application software belongs. For example, if an actuator controlled by the tested nuclear power plant DCS application software belongs to process system A, then process system A is the process system corresponding to the tested nuclear power plant DCS application software.

[0096] The test programs run by the automated test system 101 refer to the test programs that run on the data server of the automated test system when the target test cases are determined. The data server can run a variety of different test programs according to the operations of the tester station. The applicable test cases are also different depending on the test program being run.

[0097] In this embodiment, the automatic testing system can select several test cases related to the process system corresponding to the nuclear power DCS application software under test from multiple optional test cases. Then, it can further select test cases suitable for the currently running test program from these process system-related test cases. Finally, it can randomly select one test case from at least one of the selected process system-related test cases suitable for the currently running test program as the target test case and send it to the non-safety-level virtual DCS subsystem for testing. Alternatively, it can send each selected test case as the target test case to the non-safety-level virtual DCS subsystem for testing, thereby performing batch testing.

[0098] In some optional embodiments, the multiple optional test cases obtained by the automated testing system can also be divided into three levels according to the different objects under test. Specifically, these include equipment-level diagnostic test cases suitable for equipment-level diagnostics, system-level diagnostic test cases suitable for system-level diagnostics (i.e., single-system experiments), and unit-level diagnostic test cases suitable for unit-level diagnostics (i.e., multi-system or overall experiments).

[0099] Based on the above hierarchical division, the automated testing system can also:

[0100] Determine the target diagnostic level of the tested nuclear power plant DCS application software. The target diagnostic level includes any one of equipment-level diagnostics, system-level diagnostics, and unit-level diagnostics.

[0101] The DCS application software under test in a nuclear power plant can have multiple functions. In the steps described above, the target diagnostic level to which the DCS application software under test belongs can be understood as the level to which the function currently to be tested in the DCS application software belongs. For example, if the current requirement is to test the function of the DCS application software under test in controlling specific equipment, the level could be equipment-level diagnostics; if the current requirement is to test the function of the DCS application software under test in controlling a single process system, the level could be system-level diagnostics; and if the current requirement is to test the function of the DCS application software under test in controlling multiple process systems, the level could be unit-level diagnostics.

[0102] After determining the target diagnostic level, when the automated testing system 101 obtains the corresponding target test case from multiple optional test cases based on the process system and test procedures, it can be specifically used for:

[0103] Based on the process system and test procedures, the target test cases corresponding to the target diagnostic level are obtained from multiple optional test cases.

[0104] In other words, the automated testing system 101 can further select one or more test cases belonging to the target diagnostic level as target test cases from at least one test case that is relevant to the process system and applicable to the currently running test program.

[0105] In other words, if the target diagnostic level is device-level diagnosis, then device-level diagnostic test cases are selected as target test cases; if the target diagnostic level is system-level diagnosis, then system-level diagnostic test cases are selected as target test cases; and if the target diagnostic level is unit-level diagnosis, then unit-level diagnostic test cases are selected as target test cases.

[0106] One way to categorize test cases into different levels is as follows:

[0107] Identify the devices involved when the DCS software executes the test case, and determine the level of the test case based on the devices involved. For example, if the DCS software executes test case A and controls only a specific actuator, then test case A can be classified as a device-level diagnostic test case. If the DCS software executes test case B and controls multiple devices within a process system, such as actuators, valves, and fans within that process system, then test case B can be classified as a system-level diagnostic test case. If the DCS software executes test case C and controls multiple devices within multiple different process systems, such as actuators, valves, and fans within multiple different process systems, then test case C can be classified as a unit-level diagnostic test case.

[0108] The diagnostic system provided in this application also has the following beneficial effects:

[0109] Firstly, when performing DCS software diagnostics, the system in this solution can simulate the on-site DCS application software configuration problems that may occur when applying DCS software at the nuclear reactor site using the simulated process signals provided by the process simulation system. This allows the system to verify whether the DCS software can effectively address these problems, avoiding repeated verification during the on-site commissioning phase and effectively shortening the verification and commissioning period.

[0110] Secondly, when DCS configuration errors are discovered during commissioning, on-site DCS modifications are necessary. These modifications require extensive isolation and re-verification of the process system, consuming significant resources and posing technical control and management risks. This solution, however, uses a process simulation system to simulate the on-site environment during the configuration diagnosis phase. This allows for a more comprehensive detection of potential DCS software configuration errors during the diagnosis phase, minimizing the likelihood of errors occurring during commissioning and reducing the technical control and management risks associated with on-site DCS modifications.

[0111] Thirdly, configuration errors in the DCS software during the equipment commissioning phase can easily lead to equipment damage and personal injury. This solution, however, uses a process simulation system to simulate the on-site environment during the configuration diagnosis phase, effectively preventing DCS configuration errors during commissioning and thus reducing the aforementioned safety risks.

[0112] This application also provides a method for configuring and diagnosing nuclear power DCS application software in a full-range simulation environment, which is applied to a nuclear power DCS application software configuration and diagnosis system in a full-range simulation environment. The system includes an automatic testing system, a virtual DCS system, and a process simulation system.

[0113] Please refer to Figure 5, which is a flowchart of the method. The method may include the following steps.

[0114] S501, the automated test system obtains and sends target test cases for configuration diagnostics to the virtual DCS system.

[0115] S502, the virtual DCS system executes the target test cases provided by the automatic test system based on the simulated process signals through the DCS application software of the nuclear power plant under test. The simulated process signals are obtained from the process simulation system and represent the process parameters and operating status of the field controlled equipment to be controlled by the DCS application software of the nuclear power plant under test.

[0116] S503, the automatic test system monitors the target variables during the execution of target test cases by the nuclear power plant DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power plant DCS application software under test based on the monitored variable values.

[0117] Optionally, the virtual DCS system includes a non-security-grade virtual DCS subsystem and a security-grade virtual DCS subsystem;

[0118] The method also includes:

[0119] The virtual DCS system communicates with the process simulation system based on a security-grade virtual DCS subsystem to verify whether the process simulation system is functioning correctly.

[0120] Optionally, the automated testing system obtains the configuration diagnostic results of the tested nuclear power plant DCS application software based on the monitored variable values, including:

[0121] The automated testing system generates a test report for the tested nuclear power plant DCS application software based on the monitored variable values. The test report serves as the configuration diagnostic result for the tested nuclear power plant DCS application software.

[0122] Optionally, the automated testing system obtains target test cases, including:

[0123] Determine the test procedures for the process system and automatic test system corresponding to the DCS application software of the nuclear power plant under test;

[0124] Based on the process system and test procedures, the corresponding target test case is obtained from multiple optional test cases.

[0125] Optional, also includes:

[0126] The automated testing system determines the target diagnostic level of the nuclear power plant DCS application software under test. The target diagnostic level includes any one of equipment-level diagnostics, system-level diagnostics, and unit-level diagnostics.

[0127] Based on the process system and test procedures, corresponding target test cases are obtained from multiple optional test cases, including:

[0128] Based on the process system and test procedures, the target test cases corresponding to the target diagnostic level are obtained from multiple optional test cases.

[0129] The full-range simulation environment nuclear power DCS application software configuration diagnosis method provided in this embodiment can be referred to the working principle of the full-range simulation environment nuclear power DCS application software configuration diagnosis system provided in any embodiment of this application, and will not be repeated here.

[0130] It should be noted that the various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0131] For ease of description, the above systems or devices are described separately by function, divided into various modules or units. Of course, in implementing this application, the functions of each unit can be implemented in one or more software and / or hardware.

[0132] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0133] Finally, it should be noted that in this document, relational terms such as first, second, third, and fourth are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0134] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A full-range simulation environment nuclear power DCS application software configuration diagnosis system, characterized in that, include: Automated testing systems, virtual DCS systems, and process simulation systems; The automated testing system is connected to the virtual DCS system, and the virtual DCS system is connected to the process simulation system; The process simulation system is used to feed back simulated process signals to the virtual DCS system. The simulated process signals characterize the process parameters and operating status of the field controlled equipment to be controlled by the nuclear power plant DCS application software under test. The virtual DCS system is used to run the DCS application software of the nuclear power plant under test, and the DCS application software of the nuclear power plant under test is used to execute the target test cases provided by the automatic test system according to the simulated process signals. The automated testing system is used to obtain and send target test cases for configuration diagnosis to the virtual DCS system, and monitor target variables during the execution of the target test cases by the nuclear power DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power DCS application software under test based on the monitored variable values.

2. The system of claim 1, wherein, The virtual DCS system includes a non-security-level virtual DCS subsystem and a security-level virtual DCS subsystem; The non-safety-grade virtual DCS subsystem is used to run the DCS application software of the nuclear power plant under test. The security-grade virtual DCS subsystem is used to communicate with the process simulation system to verify whether the process simulation system is functioning properly.

3. The system of claim 1, wherein, When the automatic testing system obtains the configuration diagnostic results of the tested nuclear power plant DCS application software based on the monitored variable values, it is specifically used for: A test report is generated for the tested nuclear power plant DCS application software based on the monitored variable values. The test report serves as the configuration diagnostic result of the tested nuclear power plant DCS application software.

4. The system of claim 1, wherein, When the automated testing system obtains the target test cases, it is specifically used for: Determine the process system corresponding to the tested nuclear power DCS application software and the test program running by the automatic test system; Based on the process system and the test program, the corresponding target test case is obtained from multiple optional test cases.

5. The system of claim 4, wherein, The automated testing system is also used for: Determine the target diagnostic level to which the tested nuclear power DCS application software belongs, wherein the target diagnostic level includes any one of equipment-level diagnostics, system-level diagnostics, and unit-level diagnostics; When the automated testing system obtains the corresponding target test case from multiple optional test cases based on the process system and the test program, it is specifically used for: Based on the process system and the test program, the target test case corresponding to the target diagnostic level is obtained from multiple optional test cases.

6. A full-range simulation environment nuclear power DCS application software configuration diagnosis method, characterized in that, A configuration and diagnostic system for nuclear power DCS application software applied to a full-range simulation environment, the system comprising an automatic testing system, a virtual DCS system, and a process simulation system; The method includes: The automated testing system obtains and sends target test cases for configuration diagnostics to the virtual DCS system. The virtual DCS system executes the target test cases provided by the automatic test system based on the simulated process signals through the DCS application software of the nuclear power plant under test. The simulated process signals are obtained from the process simulation system and represent the process parameters and operating status of the field controlled equipment to be controlled by the DCS application software of the nuclear power plant under test. The automated testing system monitors target variables during the execution of the target test cases by the nuclear power plant DCS application software under test, so as to obtain the configuration diagnosis results of the nuclear power plant DCS application software under test based on the monitored variable values.

7. The method of claim 6, wherein, The virtual DCS system includes a non-security-level virtual DCS subsystem and a security-level virtual DCS subsystem; The method further includes: The virtual DCS system communicates with the process simulation system based on the security-level virtual DCS subsystem to verify whether the process simulation system is functioning properly.

8. The method of claim 6, wherein, The automated testing system obtains the configuration diagnostic results of the tested nuclear power plant DCS application software based on the monitored variable values, including: The automatic testing system generates a test report for the tested nuclear power plant DCS application software based on the monitored variable values. The test report serves as the configuration diagnostic result of the tested nuclear power plant DCS application software.

9. The method of claim 6, wherein, The automated testing system obtains target test cases, including: Determine the process system corresponding to the tested nuclear power DCS application software and the test program running by the automatic test system; Based on the process system and the test program, the corresponding target test case is obtained from multiple optional test cases.

10. The method of claim 9, wherein, Also includes: The automatic testing system determines the target diagnostic level of the tested nuclear power DCS application software, and the target diagnostic level includes any one of equipment-level diagnosis, system-level diagnosis, and unit-level diagnosis. The step of obtaining the corresponding target test case from multiple optional test cases based on the process system and the test program includes: Based on the process system and the test program, the target test case corresponding to the target diagnostic level is obtained from multiple optional test cases.

Images