CN111399915B - Main control guiding system and method applied to nuclear power plant safety level DCS - Google Patents

Main control guiding system and method applied to nuclear power plant safety level DCS Download PDF

Info

Publication number
CN111399915B
CN111399915B CN201911377143.3A CN201911377143A CN111399915B CN 111399915 B CN111399915 B CN 111399915B CN 201911377143 A CN201911377143 A CN 201911377143A CN 111399915 B CN111399915 B CN 111399915B
Authority
CN
China
Prior art keywords
module
initialization
internal
data
master control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911377143.3A
Other languages
Chinese (zh)
Other versions
CN111399915A (en
Inventor
韩文兴
杨斐
马权
罗琦
刘国海
钟科
余波
蒋维
王远兵
吴志强
刘宏春
周继翔
肖鹏
刘明星
严浩
章雨
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CHINA NUCLEAR CONTROL SYSTEM ENGINEERING Co.,Ltd.
Original Assignee
China Nuclear Control System Engineering Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Nuclear Control System Engineering Co ltd filed Critical China Nuclear Control System Engineering Co ltd
Priority to CN201911377143.3A priority Critical patent/CN111399915B/en
Publication of CN111399915A publication Critical patent/CN111399915A/en
Application granted granted Critical
Publication of CN111399915B publication Critical patent/CN111399915B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/4401Bootstrapping
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0602Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062Securing storage systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0628Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0638Organizing or formatting or addressing of data
    • G06F3/0644Management of space entities, e.g. partitions, extents, pools
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0668Interfaces specially adapted for storage systems adopting a particular infrastructure
    • G06F3/0671In-line storage system
    • G06F3/0673Single storage device
    • G06F3/0679Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Human Computer Interaction (AREA)
  • Computer Security & Cryptography (AREA)
  • Testing And Monitoring For Control Systems (AREA)
  • Stored Programmes (AREA)

Abstract

The invention discloses a master control guidance system applied to a nuclear power plant security level DCS, which comprises: the internal initialization module is used for initializing an internal register of a main chip in the main control module, initializing an internal RAM and completing the test of the internal module; the external initialization module is used for initializing a peripheral module of the main chip; the safety precaution module partitions the memory; the safety precaution module is also used for establishing a mapping relation between the identification mark and the downloading data type; the downloading module is used for downloading the data of the engineer station to the main control module. The invention also discloses a master control guiding method applied to the nuclear power plant safety level DCS system. The invention is applied to the master control guidance system and the master control guidance method of the nuclear power plant security level DCS system, and realizes security level software isolation and deep defense of non-security level data.

Description

Main control guiding system and method applied to nuclear power plant safety level DCS
Technical Field
The invention relates to the field of safety-level equipment of a nuclear power plant, in particular to a master control guiding system and a master control guiding method applied to a safety-level DCS (distributed control system) of the nuclear power plant.
Background
A complete embedded system software is divided into 3 layers which are respectively a boot loader, an operating system kernel and a user application program. Bootloader (bootstrap software) is a small program executed before the kernel of the operating system runs, the Bootloader initializes main components of a system board such as a CPU, an SDRAM, a Flash, a serial port and the like, creates some information needed by the kernel and transmits the information to the kernel, brings the software and hardware environment of the system to a proper state, and finally calls the kernel of the operating system to realize the boot of the running of the kernel.
In the nuclear power plant security level DCS system, in order to reduce development cost, shorten development cycle, logic configuration is generally accomplished by engineer station, the platform configuration that master control module received engineer station and issued, user logic, user algorithm data are used for master control software normal operating, master control software belongs to the security level, engineer station belongs to non-security level, keep apart the design theory with the depth defense according to security level software, before master control safety function software operation, need to carry out the security level check to engineer station issue data, arrange the secure environment, guide the start-up of safety function software afterwards.
Meanwhile, according to relevant nuclear laws and regulations and specifications, a security level software memory must be controlled through technical means, and data out-of-range and unsafe read-write operation are prevented.
Disclosure of Invention
The invention aims to solve the technical problem that data issued from a non-security level to a security level system in the prior art lacks an effective prevention and control means, and aims to provide a master control guidance system and a master control guidance method applied to a security level DCS (distributed control system) of a nuclear power plant, so as to solve the problem.
The invention is realized by the following technical scheme:
be applied to master control bootstrap system of nuclear power plant security level DCS system, include: the system comprises a security function initialization module, a security protection module and a download module; the safety function initialization module comprises an internal initialization module and an external initialization module; the internal initialization module is used for initializing an internal register of a main chip in the main control module, initializing an internal RAM and completing the test of the internal module; the external initialization module is used for initializing a peripheral module of the main chip; the security module partitions the memory, and each memory partition corresponds to a different identification mark; the safety precaution module is also used for establishing a mapping relation between the identification mark and the downloading data type; the downloading module is used for downloading data of the engineer station to the main control module; when the master control module receives data sent by an engineer station, the safety function initialization module initializes the master control module; the downloading module downloads downloading data of an engineer station; and the safety precaution module carries out accuracy and safety verification on the downloaded data, classifies the data in the downloaded data according to the mapping relation and stores the data in the corresponding memory partition.
Further, the internal initialization module initializes an internal register of a main chip in the main control module, including setting a system clock and a memory, and clearing an abnormal state flag;
the internal initialization module initializes the internal RAM into all the initialized data segments;
the internal initialization module completes the test of the internal module and comprises a PBIST test executed on an external ram and an internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
Further, the initializing the peripheral module of the main chip by the external initialization module includes: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
Furthermore, the safety precaution module partitions the internal FLASH into an abnormal interruption calling area, an interruption vector table area, a BOOT program area, a user algorithm area to be downloaded and a platform safety function software area when the internal FLASH is partitioned.
Further, the download data includes platform configuration, user algorithm and user parameters.
The main control guiding method applied to the nuclear power plant safety level DCS system comprises the following steps:
when the master control module receives data issued by an engineer station, initializing the master control module; the initialization comprises internal initialization and external initialization; the internal initialization is to initialize an internal register of a main chip in the main control module, initialize an internal RAM and complete the test of the internal module; the external initialization is to initialize a peripheral module of the main chip;
downloading downloaded data of an engineer station, carrying out accuracy and security verification on the downloaded data, classifying the data in the downloaded data according to a mapping relation, and storing the data in a corresponding memory partition;
the mapping relation is established by the following steps:
partitioning the memory, wherein each memory partition corresponds to a different identification mark;
and establishing a mapping relation between the identification mark and the download data type.
Further, initializing an internal register of a main chip in the main control module comprises setting a system clock and a memory and clearing an abnormal state flag;
initializing an internal RAM to initialize all data segments;
completing testing of the internal module comprises performing PBIST testing on the external ram and the internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
Further, initializing the peripheral module of the main chip includes: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
Furthermore, the internal FLASH is partitioned into an abnormal interrupt calling area, an interrupt vector table area, a BOOT program area, a user algorithm area to be downloaded and a platform security function software area.
Further, the download data includes platform configuration, user algorithm and user parameters.
Compared with the prior art, the invention has the following advantages and beneficial effects:
the master control guidance system and the master control guidance method applied to the nuclear power plant security level DCS system realize security level software isolation and depth defense of non-security level data by setting the modules and the steps, and simultaneously have good effect on safe operation of the data when being used on the master control modules of a plurality of security level DCS system projects, thereby achieving the purpose of expected design; according to the method, the downloading of the engineer station algorithm software, configuration and the like is completed based on address safety operation, the accuracy and safety verification is firstly carried out on the downloaded data classification before the downloading data enters the functional software, the preparation work of starting the safety functional software is completed, the calling and data interaction cannot be directly carried out between the guide software and the safety functional software, the guide software directly skips the first address of the safety functional software code to enter the safety functional software after the safety level verification is completed, and the independence between the safety functional software and the guide software is ensured.
Drawings
The accompanying drawings, which are included to provide a further understanding of the embodiments of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the principles of the invention. In the drawings:
FIG. 1 is a functional flow diagram of the present invention;
FIG. 2 is a flow chart of data interaction with an engineer station in an embodiment;
FIG. 3 is a flowchart illustrating a read-back data verification process according to an embodiment.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is further described in detail below with reference to examples and accompanying drawings, and the exemplary embodiments and descriptions thereof are only used for explaining the present invention and are not meant to limit the present invention.
Examples
As shown in fig. 1, the main control guidance system applied to the safety level DCS system of the nuclear power plant of the present invention includes: the system comprises a security function initialization module, a security protection module and a download module; the safety function initialization module comprises an internal initialization module and an external initialization module; the internal initialization module is used for initializing an internal register of a main chip in the main control module, initializing an internal RAM and completing the test of the internal module; the external initialization module is used for initializing a peripheral module of the main chip; the security module partitions the memory, and each memory partition corresponds to a different identification mark; the safety precaution module is also used for establishing a mapping relation between the identification mark and the downloading data type; the downloading module is used for downloading data of the engineer station to the main control module; when the master control module receives data sent by an engineer station, the safety function initialization module initializes the master control module; the downloading module downloads downloading data of an engineer station; and the safety precaution module carries out accuracy and safety verification on the downloaded data, classifies the data in the downloaded data according to the mapping relation and stores the data in the corresponding memory partition.
To further illustrate the working process of this embodiment, the internal initialization module initializes the internal register of the main chip in the main control module, including setting a system clock and a memory, and clearing an abnormal status flag;
the internal initialization module initializes the internal RAM into all the initialized data segments;
the internal initialization module completes the test of the internal module and comprises a PBIST test executed on an external ram and an internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
To further illustrate the working process of this embodiment, the initializing the peripheral module of the main chip by the external initialization module includes: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
To further explain the working process of this embodiment, the security module partitions the internal FLASH into an abort call area, an interrupt vector table area, a BOOT program area, a user algorithm area to be downloaded, and a platform security function software area when partitioning the memory.
To further illustrate the operation of this embodiment, the download data includes platform configuration, user algorithm, and user parameters.
The main control guiding method applied to the nuclear power plant safety level DCS system comprises the following steps:
when the master control module receives data issued by an engineer station, initializing the master control module; the initialization comprises internal initialization and external initialization; the internal initialization is to initialize an internal register of a main chip in the main control module, initialize an internal RAM and complete the test of the internal module; the external initialization is to initialize a peripheral module of the main chip;
downloading downloaded data of an engineer station, carrying out accuracy and security verification on the downloaded data, classifying the data in the downloaded data according to a mapping relation, and storing the data in a corresponding memory partition;
the mapping relation is established by the following steps:
partitioning the memory, wherein each memory partition corresponds to a different identification mark;
and establishing a mapping relation between the identification mark and the download data type.
To further explain the working process of the embodiment, initializing an internal register of a main chip in a main control module includes setting a system clock and a memory, and clearing an abnormal state flag;
initializing an internal RAM to initialize all data segments;
completing testing of the internal module comprises performing PBIST testing on the external ram and the internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
To further illustrate the working process of this embodiment, initializing the peripheral module of the main chip includes: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
To further explain the working process of this embodiment, the internal FLASH is partitioned into an abnormal interrupt calling area, an interrupt vector table area, a BOOT program area, a user algorithm area to be downloaded, and a platform security function software area.
To further illustrate the operation of this embodiment, the download data includes platform configuration, user algorithm, and user parameters.
The guidance of the embodiment is suitable for the nuclear power plant security level DCS, and comprises the functions of security function initialization, data downloading, memory address management and data security prevention, operating system kernel starting and the like.
To further illustrate the working process of this embodiment, the main flow of this embodiment is as follows:
1. secure function initialization
The method comprises the following steps of internal initialization and external initialization:
the internal initialization is responsible for initializing an internal register of the ARM core, clearing an abnormal state mark, setting a system clock, a memory and the like; initializing an internal RAM of the CPU, and initializing all data segments; completing the environment required by C language operation; performing PBIST testing on the external ram and the internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; enabling an ECC function; shut down interrupts, etc., as required by the encoding specification. The internal initialization is mainly completed in sys _ mpu.asm and sys _ core.asm in the assembly stage and is partially completed through a _ c _ int00 function in sys _ startup.c.
External initialization is responsible for initializing all peripheral modules of the RM48 processor that need to be used in preparation for program cycle execution. The method mainly comprises BSP initialization and display function module initialization, wherein the BSP initialization comprises function modules including RTI, I2C, SCI, ADC, EMIF, GIO, SPI and external SDRAM, and the display function module initialization comprises LED module initialization and LCD module initialization. After entering the boot software, is done by the bspInit function.
2. Memory management and data security protection
The boot software finishes downloading of engineer station algorithm software, configuration and the like based on address safety operation, strictly defines the data storage position, loads the data into a memory allocation table according to predefinition in safety function software, and declares memory partition through a precompiled instruction # pragma. After downloading is completed, before entering the functional software, accuracy and safety check must be carried out on the downloaded data classification, and preparation work of starting the safety functional software is completed.
The MEMORY management is completed in a FLASH MEMORY, a MEMORY space is distributed by adopting a MEMORY pseudo instruction, and an internal FLASH of the processor is divided into:
BOOT _ VECTORS, abort call zone;
a BOOT _ FLASH _ API, interrupt vector table;
BOOT _ FLASH0, BOOT program;
USER _ FLASH, USER algorithm to be downloaded;
NORMAL _ FLASH, platform Security function software.
The SRAM is divided into:
1)sector 0:
the FLASH function and the heap use a memory area;
2)sector 1
SRAM1;
3)sector 2
running and using a user algorithm, platform state information, platform configuration and other information;
4)sector 3
reserving;
5)extern 1
the external expansion SRAM1 is mainly used for communicating, receiving and sending data and various application layer data;
6)extern 2
and (6) reserving.
And loading various segments in the program into an address allocation table by adopting a SECTIONS pseudo instruction to finish the mapping relation.
The security control of the memory address is carried out in the above way, the main control module memory is divided in detail, and the memory domain names are defined for management, each domain stores the corresponding data, before the data is written into the memory, the address domain name must be determined, the data can be read and written by the right name, and the data is prevented from crossing the boundary and unsafe reading and writing operations.
3. Download function
The function of online downloading through the engineer station is provided, and the function is generated by the engineer station and comprises downloading of three data of platform configuration, user algorithm and user parameters. The NASBUS-CP secure downloading protocol is adopted, and 64-bit CRC is checked.
4. Starting the kernel of the operating system:
and finally, finishing starting by directly operating the kernel of the operating system with a fixed address, wherein a key function is as follows: ((void)) PF _ IMAGE _ DATA _ ADDRESS) (); wherein the definition of PF _ IMAGE _ DATA _ ADDRESS is according to a memory management scheme.
The data interaction with the engineer station, and the downloading process is shown in FIG. 2;
meanwhile, a function of verifying read-back data is provided, and a data interaction flow is shown in fig. 3: to further illustrate the operation of this embodiment, MEM usage is defined as follows:
Figure BDA0002341268530000071
Figure BDA0002341268530000081
Figure BDA0002341268530000091
in the safety function software, loading a memory allocation table according to the predefinition through a SECTION segment, wherein the shape of the memory allocation table is as follows:
PARA_DATA :{}>PARA_SRAM
and then, the instruction # pragma is compiled to declare the specified memory partition, which is as follows:
uint8_tg_userParameter[PARA_MAX_RAM_SIZE];
#pragma DATA_SECTION(g_userParameter,"PARA_DATA");
the global variable array g _ userParameter may be used to store the parameter data and protected, allowing a separate data check on a certain declared partition.
The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are merely exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (8)

1. Be applied to master control bootstrap system of nuclear power plant security level DCS system, its characterized in that includes: the system comprises a security function initialization module, a security protection module and a download module; the safety function initialization module comprises an internal initialization module and an external initialization module; the internal initialization module is used for initializing an internal register of a main chip in the main control module, initializing an internal RAM and completing the test of the internal module; the external initialization module is used for initializing a peripheral module of the main chip; the security module partitions the memory, and each memory partition corresponds to a different identification mark; the safety precaution module is also used for establishing a mapping relation between the identification mark and the downloading data type; the downloading module is used for downloading data of the engineer station to the main control module; when the master control module receives data sent by an engineer station, the safety function initialization module initializes the master control module; the downloading module downloads downloading data of an engineer station; the safety precaution module carries out accuracy and safety verification on the downloaded data, classifies the data in the downloaded data according to the mapping relation and stores the data in the corresponding memory partition;
the safety precaution module divides the internal FLASH into an abnormal interruption calling area, an interruption vector table area, a BOOT program area, a user algorithm area to be downloaded and a platform safety function software area when the internal FLASH is divided into the areas.
2. The master control guidance system applied to the nuclear power plant safety level DCS system according to claim 1, wherein the internal initialization module initializes the internal register of the master chip in the master control module, including setting a system clock and a memory, and clearing an abnormal status flag; the internal initialization module initializes the internal RAM into all the initialized data segments; the internal initialization module completes the test of the internal module and comprises a PBIST test executed on an external ram and an internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
3. The master control booting system applied to a nuclear power plant security level DCS system of claim 1, wherein the external initialization module initializing the peripheral module of the master chip comprises: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
4. The master control guidance system applied to the nuclear power plant safety level DCS system according to claim 1, wherein the download data comprises platform configuration, user algorithm and user parameters.
5. The main control guiding method applied to the nuclear power plant safety level DCS is characterized by comprising the following steps of: when the master control module receives data issued by an engineer station, initializing the master control module; the initialization comprises internal initialization and external initialization; the internal initialization is to initialize an internal register of a main chip in the main control module, initialize an internal RAM and complete the test of the internal module; the external initialization is to initialize a peripheral module of the main chip; downloading downloaded data of an engineer station, carrying out accuracy and security verification on the downloaded data, classifying the data in the downloaded data according to a mapping relation, and storing the data in a corresponding memory partition; the mapping relation is established by the following steps: partitioning the memory, wherein each memory partition corresponds to a different identification mark; establishing a mapping relation between the identification mark and the downloading data type;
the internal FLASH is partitioned into an abnormal interrupt calling area, an interrupt vector table area, a BOOT program area, a user algorithm area to be downloaded and a platform safety function software area.
6. The master control booting method applied to the nuclear power plant security level DCS system according to claim 5, wherein initializing the internal register of the master chip in the master control module comprises setting a system clock and a memory, and clearing an abnormal status flag; initializing an internal RAM to initialize all data segments; completing testing of the internal module comprises performing PBIST testing on the external ram and the internal ram; performing external function diagnosis in an initialization stage; performing PSCON self-diagnosis; performing EFUSE self-diagnosis; performing a dual core comparison diagnostic; the ECC function is enabled.
7. The master control booting method applied to the nuclear power plant security level DCS system according to claim 5, wherein initializing the peripheral module of the master chip comprises: initializing a BSP initialization and display function module; the BSP initialization includes initialization of RTI, I2C, SCI, ADC, EMIF, GIO, SPI, and external SDRAM; the display function module initialization includes initialization of the LED module and the LCD module.
8. The master control booting method applied to the nuclear power plant safety level DCS system according to claim 5, wherein the download data includes platform configuration, user algorithm and user parameters.
CN201911377143.3A 2019-12-27 2019-12-27 Main control guiding system and method applied to nuclear power plant safety level DCS Active CN111399915B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911377143.3A CN111399915B (en) 2019-12-27 2019-12-27 Main control guiding system and method applied to nuclear power plant safety level DCS

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911377143.3A CN111399915B (en) 2019-12-27 2019-12-27 Main control guiding system and method applied to nuclear power plant safety level DCS

Publications (2)

Publication Number Publication Date
CN111399915A CN111399915A (en) 2020-07-10
CN111399915B true CN111399915B (en) 2022-03-22

Family

ID=71433968

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911377143.3A Active CN111399915B (en) 2019-12-27 2019-12-27 Main control guiding system and method applied to nuclear power plant safety level DCS

Country Status (1)

Country Link
CN (1) CN111399915B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101159650A (en) * 2007-11-29 2008-04-09 中控科技集团有限公司 Control system including FF protocol H1 network segment and interface arrangement and communication method
CN103995717A (en) * 2014-05-07 2014-08-20 南京国电南自电网自动化有限公司 Method for upgrading software in embedded device
CN109683941A (en) * 2018-12-27 2019-04-26 四川九洲空管科技有限责任公司 A kind of answering machine method for upgrading software based on single-chip on-line loaded
CN109743337A (en) * 2019-03-20 2019-05-10 中国核动力研究设计院 The lower dress means of communication in nuclear safe level DCS system based on Transmission Control Protocol
CN110413302A (en) * 2019-08-09 2019-11-05 山东大骋医疗科技有限公司 A kind of method for remote updating and system of CT equipment

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8424078B2 (en) * 2007-11-06 2013-04-16 International Business Machines Corporation Methodology for secure application partitioning enablement

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101159650A (en) * 2007-11-29 2008-04-09 中控科技集团有限公司 Control system including FF protocol H1 network segment and interface arrangement and communication method
CN103995717A (en) * 2014-05-07 2014-08-20 南京国电南自电网自动化有限公司 Method for upgrading software in embedded device
CN109683941A (en) * 2018-12-27 2019-04-26 四川九洲空管科技有限责任公司 A kind of answering machine method for upgrading software based on single-chip on-line loaded
CN109743337A (en) * 2019-03-20 2019-05-10 中国核动力研究设计院 The lower dress means of communication in nuclear safe level DCS system based on Transmission Control Protocol
CN110413302A (en) * 2019-08-09 2019-11-05 山东大骋医疗科技有限公司 A kind of method for remote updating and system of CT equipment

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"纵深防御和多样性策略在安全级数字化控制系统研发中的应用";肖鹏 等;《上海交通大学学报》;20181228;第14-19页 *

Also Published As

Publication number Publication date
CN111399915A (en) 2020-07-10

Similar Documents

Publication Publication Date Title
US8086839B2 (en) Authentication for resume boot path
US9471785B2 (en) Systems and methods for secure boot ROM patch
US8296528B2 (en) Methods and systems for microcode patching
KR100255549B1 (en) Apparatus and method using an id instruction to identity a computer microprocessor
CN100561437C (en) Be used for the method that is independent of chipset to system bios this locality and remote update and configuration
US20170220278A1 (en) Backing up firmware during initialization of device
CN101145107B (en) Maintaining early hardware configuration state
US7363544B2 (en) Program debug method and apparatus
US6594756B1 (en) Multi-processor system for selecting a processor which has successfully written it's ID into write-once register after system reset as the boot-strap processor
CN107567629A (en) Dynamic firmware module loader in credible performing environment container
US20220237144A1 (en) Baseboard management controller and construction method thereof
CN100437485C (en) System and method for configuring a computer system
US9600397B2 (en) Dynamic debugging method of a software module and corresponding device
US20070300054A1 (en) Universal BSP tool for porting on embedded systems and an application thereof
CN111399915B (en) Main control guiding system and method applied to nuclear power plant safety level DCS
KR20220027965A (en) Prevent firmware rollback
CN113672260B (en) Method for initializing CPU of processor
US7162743B1 (en) System and method of limiting access to protected hardware addresses and processor instructions
CN110941452B (en) Configuration method, BIOS chip and electronic equipment
US20060242351A1 (en) Method and apparatus for loading instructions into high memory
JP2007510221A (en) System for selectively enabling a device operating mode
CN108829603A (en) Data modification method when Android application operation
Gu et al. Power on and bootloader
US20240119139A1 (en) Securing critical data in a storage device of a computer system
US11204781B2 (en) Optimizing power, memory and load time of a computing system during image loading based on image segmentation

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right

Effective date of registration: 20201229

Address after: No.3, Hongda South Road, Beijing Economic and Technological Development Zone, Daxing District, Beijing

Applicant after: CHINA NUCLEAR CONTROL SYSTEM ENGINEERING Co.,Ltd.

Address before: No.328, Section 1, Changshun Avenue, Shuangliu District, Chengdu, Sichuan 610000

Applicant before: NUCLEAR POWER INSTITUTE OF CHINA

TA01 Transfer of patent application right
GR01 Patent grant
GR01 Patent grant