CN114506756B

CN114506756B - Target system function safety grading method, device, equipment and storage medium

Info

Publication number: CN114506756B
Application number: CN202210065947.5A
Authority: CN
Inventors: 杨崇俊; 王强; 陈本瑶; 周娟; 吴琳琳
Original assignee: Huzhou Special Equipment Testing And Research Institute; China Jiliang University
Current assignee: Huzhou Special Equipment Testing And Research Institute; China Jiliang University
Priority date: 2022-01-20
Filing date: 2022-01-20
Publication date: 2024-05-28
Anticipated expiration: 2042-01-20
Also published as: CN114506756A

Abstract

The embodiment of the application provides a target system function safety grading method, device, equipment and storage medium. Wherein the method comprises the following steps: acquiring probability level of each subsystem in the target system; determining a first probability of the target system according to the probability level of each subsystem in the target system; determining a probability of occurrence of an intermediate event of the target system based on a false attempt; determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system; acquiring the probability f _{Allow for} of different systems in a first time period; determining a risk reduction factor rrf=f/f _{Allow for} according to the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time; and determining the safety integrity level of the target system according to the risk reduction factor.

Description

Target system function safety grading method, device, equipment and storage medium

Technical Field

The present application relates to the field of public security, and relates to, but is not limited to, a method, apparatus, device, and storage medium for functional security grading of a target system.

Background

With the rapid development of urban construction, public safety is becoming more and more important. If the number of elevators is increased, the structure of the elevators is gradually complicated, and in various accidents of the elevators, the elevator door system occupies the largest fault proportion, and the danger to people is also larger, so that the search for an effective and reliable elevator door system safety evaluation method has important significance.

In recent years, functional safety is widely applied in fields of chemical industry, petroleum, electronic equipment and the like by a reasonable technical idea, a scientific evaluation system and an optimized management method, and in the existing functional safety research, although the risk level is quantitatively represented by using a hierarchical-fuzzy method, the risk standard deviation of the functional safety, which is acceptable in the risk distance, is not considered. Therefore, the application introduces the viewpoint of functional safety into the target system, can accurately calculate the risk reduction factor of the target system, and quantitatively determine the safety integrity level of the target system.

Disclosure of Invention

In view of this, the embodiments of the present application provide a method, an apparatus, a device, and a storage medium for secure grading of target system functions.

The technical scheme of the embodiment of the application is realized as follows:

In a first aspect, an embodiment of the present application provides a method for securely grading a target system, where the method includes: acquiring probability level of each subsystem in the target system; determining a first probability of the target system according to the probability level of each subsystem in the target system; determining a probability of occurrence of an intermediate event of the target system based on a false attempt; determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system; acquiring the probability f _{Allow for} of different systems in a first time period; determining a risk reduction factor rrf=f/f _{Allow for} according to the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time; and determining the safety integrity level of the target system according to the risk reduction factor.

In a second aspect, an embodiment of the present application provides a target system security grading device, including: the first acquisition module is used for acquiring the probability level of each subsystem in the target system; the first determining module is used for determining a first probability of the target system according to the probability level of each subsystem in the target system; a second acquisition module for determining a probability of occurrence of an intermediate event of the target system based on a false attempt; the second determining module is used for determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system; a third obtaining module, configured to obtain probabilities f _{Allow for} of different systems in a first period of time; a third determining module, configured to determine a risk reduction factor rrf=f/f _{Allow for}, where the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time; and a fourth determining module, configured to determine a security integrity level of the target system according to the risk reduction factor.

In a third aspect, an embodiment of the present application provides a target system security grading device, including: the system comprises a memory and a processor, wherein the memory stores a computer program which can be run on the processor, and the processor realizes the steps in the method when executing the computer program.

In a fourth aspect, embodiments of the present application provide a computer readable storage medium having stored thereon a computer program which, when executed by a processor, performs steps in the above method.

From the above, in the embodiment of the present application, the viewpoint of functional safety is introduced into the target system, and the safety integrity level of the target system is quantitatively determined, which is more accurate than the conventional qualitative method; the problem that the reliability data of the target system is difficult to acquire can be more reasonably solved, so that the analysis result is more objective; according to the probability f _{Allow for} of different systems in the first time period, the risk reduction factor of the target system can be accurately calculated, and the required safety protection measures can be determined; optimization suggestions may be added based on the security integrity level of the target system.

Drawings

For a clearer description of the technical solutions of the embodiments of the present application, the drawings that are needed in the description of the embodiments will be briefly introduced below, it being obvious that the drawings in the description below are only some embodiments of the present application, and that other drawings can be obtained according to these drawings without inventive effort for a person skilled in the art, wherein:

FIG. 1 is a schematic flow chart of a target system security grading method according to an embodiment of the present application;

fig. 2 is a reliability block diagram of an elevator door system provided by an embodiment of the present application;

FIG. 3 is a schematic diagram of a Markov state transition diagram according to an embodiment of the present application;

fig. 4a is a graph showing the influence of different maintenance rates of the elevator car door system and landing door system on the steady-state availability of the system according to the embodiment of the present application;

fig. 4b is a graph of the influence of different failure rates of the elevator car door system and the landing door system on the steady-state availability of the system according to the embodiment of the present application;

fig. 5a is a schematic diagram of a triangular membership function of an elevator door system fault level according to an embodiment of the present application;

fig. 5b is a schematic diagram of a triangular membership function of an elevator door system maintenance level according to an embodiment of the present application;

Fig. 6 is a schematic diagram of a composition structure of a security grading device of a target system according to an embodiment of the present application.

Detailed Description

For the purpose of making the objects, technical solutions and advantages of the embodiments of the present application more apparent, the technical solutions of the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application, and it is apparent that the described embodiments are some embodiments of the present application, but not all embodiments of the present application. The following examples are illustrative of the application and are not intended to limit the scope of the application. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.

In the following description, reference is made to "some embodiments" which describe a subset of all possible embodiments, but it is to be understood that "some embodiments" can be the same subset or different subsets of all possible embodiments and can be combined with one another without conflict.

It should be noted that the term "first\second\third" related to the embodiments of the present application is merely to distinguish similar objects, and does not represent a specific order for the objects, it being understood that the "first\second\third" may interchange a specific order or sequencing, where allowed, so that the embodiments of the present application described herein can be implemented in an order other than illustrated or described herein.

It will be understood by those skilled in the art that all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which embodiments of the application belong unless defined otherwise. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the prior art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.

Before describing embodiments of the present application in further detail, the terms and terminology involved in the embodiments of the present application will be described, and the terms and terminology involved in the embodiments of the present application are suitable for the following explanation:

The Delphi method, also called expert investigation, was carried out by the United states Rand company in 1946 and is essentially a feedback anonymous query method, the general flow of which is to sort, generalize and count the ideas of the experts on the questions to be predicted, anonymously feed back the ideas to the experts, solicit the ideas again, centralize and feed back again until the consensus ideas are obtained.

Fig. 1 is a schematic flow chart of a target system security grading method according to an embodiment of the present application, where, as shown in fig. 1, the method at least includes the following steps:

step S110, the probability level of each subsystem in the target system is obtained.

In some embodiments, the target system may be an elevator door system; the subsystem can be at least one of a door machine controller, a motor, a car door synchronous transmission device and a car door executing mechanism in the car door system, and at least one of a linkage device, a landing door synchronous transmission device, a landing door self-closing device and a landing door executing mechanism in the landing door system; the probability level may be a fault probability level, a maintenance probability level.

In the embodiment of the application, an elevator in a certain district in H city is selected as a case and is marked as an A ladder, and an expert scores the fault probability of each subsystem F _in in the A ladder to obtain an A ladder system fault probability grade evaluation table, as shown in table 1; the expert scored the maintenance probability for each subsystem F _in in the a ladder to obtain an a ladder system maintenance probability rating table, as shown in table 2.

Table 1A ladder system failure probability level assessment table

Subsystem	Expert 1	Expert 2	Expert 3	Expert 4
					F₁₁	4	6	7	6
F₁₂	6	5	5	4
					F₁₃	6	8	6	7
F₁₄	7	8	8	6
					F₂₁	9	8	7	8
F₂₂	5	4	6	4
					F₂₃	3	5	4	3
F₂₄	7	7	8	6

Table 2A ladder system maintenance probability level assessment table

Subsystem	Expert 1	Expert 2	Expert 3	Expert 4
					F₁₁	5	7	4	6
F₁₂	4	5	5	6
					F₁₃	3	4	3	4
F₁₄	3	3	4	5
					F₂₁	2	3	3	4
F₂₂	2	3	3	3
					F₂₃	3	2	2	3
F₂₄	4	3	4	5

Wherein, include in the sedan-chair door system: door machine controller F ₁₁, motor F ₁₂, sedan-chair door synchro-transmission F ₁₃, sedan-chair door actuating mechanism F ₁₄ include in the landing door system: linkage F ₂₁, landing door synchronous transmission F ₂₂, landing door self-closing device F ₂₃ and landing door actuating mechanism F ₂₄.

Step S120, determining a first probability of the target system according to the probability level of each subsystem in the target system.

In some embodiments, the target system includes at least two intermediate systems, each of the intermediate systems includes at least two subsystems, and correspondingly, in step S120, determining a first probability of the target system according to a probability level of each of the subsystems includes: step S121, determining a first probability of each subsystem according to the probability level of the corresponding subsystem in the target system; step S122, determining a first probability of the corresponding intermediate system based on a reliability series system formula according to the first probability of each subsystem included in each intermediate system; step S123, determining the first probability of the target system according to the first probabilities of the at least two intermediate systems.

The first probability of the subsystem can be a fault probability and a maintenance probability of the subsystem; the first probability of the intermediate system can be the failure rate and the maintenance rate of the intermediate system; the first probability of the target system may be a failure rate of the target system; the intermediate system may be a car door system, a landing door system.

Taking an A-ladder elevator door system as an example, taking the A-ladder elevator door system as a target system, and taking a car door system and a landing door system as intermediate systems of the A-ladder elevator door system; the car door system includes: door machine controller, motor, sedan-chair door synchro-transmission, sedan-chair door actuating mechanism, layer door system includes: linkage, synchronous transmission of landing door, landing door self-closing device and landing door actuating mechanism.

Correspondingly, according to the failure probability level of each subsystem F _in in the A ladder, determining the failure rate of the whole elevator door system of the A ladder comprises the following steps: based on the failure probability level of each subsystem F _in in the a ladder obtained by the expert in table 1, the failure probability of each subsystem F _in in the a ladder is calculated, as shown in table 3.

Table 3A failure probabilities for ladder system

Electric ladder system	Failure rate/h ^-1	Electric ladder system	Failure rate/h ^-1
				F₁₁	1.311×10^-4	F₂₁	1.1×10^-3
F₁₂	2.9431×10^-5	F₂₂	2.408×10^-5
				F₁₃	3.5852×10^-4	F₂₃	7.7055×10^-6
F₁₄	5.7078×10^-4	F₂₄	4.4057×10^-4

And calculating the failure rate of the elevator car door system A and the landing door system according to the reliability series system formula, wherein the calculation result is shown in table 5. And further calculating the failure rate of the whole elevator door system of the A ladder to be 2.66 multiplied by 10 ^-3 according to the failure rate of the elevator door system and the landing door system according to the reliability series system formula.

The maintenance rates of the car door system and the landing door system can also be calculated according to the step S121 and the step S122, and the maintenance probability of each subsystem F _in in the a ladder is calculated based on the maintenance probability level of each subsystem F _in in the a ladder of the expert obtained in table 2, as shown in table 4.

Table 4A maintenance probabilities for ladder system

Electric ladder system	Failure rate/h ^-1	Electric ladder system	Failure rate/h ^-1
				F₁₁	0.0287	F₂₁	0.0738
F₁₂	0.0344	F₂₂	0.0763
				F₁₃	0.0550	F₂₃	0.0925
F₁₄	0.0513	F₂₄	0.0488

And (5) calculating the maintenance rates of the elevator car door system A and the landing door system according to the reliability series system formula. The failure rate and maintenance rate calculation results of the door system and landing door system of the a ladder are shown in table 5.

Table 5 failure and repair rates of the system

System and method for controlling a system	Failure rate/h ^-1	Maintenance rate/h ^-1
			Car door	1.09×10^-3	0.048
Landing door	1.57×10^-3	0.064

Step S130, determining occurrence probability of intermediate event of the target system based on false seeking.

In some embodiments, the hypothesis method includes a fault hypothesis analysis method, and the intermediate event of the target system includes one of the following scenarios: the probability that someone takes an elevator down the building and multiple people go up the elevator, and no one reminds of the elevator failure and happens to meet the elevator failure.

In the embodiment of the application, the specific probability of the occurrence of the elevator door system accident is calculated according to a fault hypothesis analysis method, and the following scene is assumed: a person takes the ladder a to go downstairs, and the probability of causing the middle event to occur is 0.2.

Step S140, determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system.

In some embodiments, the target system first probability x the probability of occurrence of an event in the target system = target system second probability f.

In the embodiment of the application, according to the calculation method, the specific probability of the occurrence of the pinch accident of the elevator door of the elevator a at this time is f=0.2×2.66×10 ^-3＝5.32×10^-4.

In step S150, the probabilities f _{Allow for} of the different systems in the first period are obtained.

In some embodiments, the obtaining the probability f _{Allow for} of the different systems over the first period of time includes: determining the number of the different systems and the number of deaths of the different systems during the first period of time; determining the order of mortality of the different systems according to the number of the different systems and the number of deaths of the different systems in the first time period; the probability f _{Allow for} of the different system over the first time period is determined based on the order of mortality of the different system.

In the embodiment of the application, the number of elevators and the number of dead elevators in China in recent ten years are counted, and particularly, the number of the dead elevators in China is shown in a table 6, the order of magnitude of the dead rate of the elevators in China can be known to be 10 ^-5～10^-6 according to the table 6, namely, the acceptable standard of the elevators in China can be obtained to be 10 ^-5～10^-6, and the f _{Allow for} value is further obtained to be 10 ^-5.

Table 6 statistics of number of elevators and death population in our country over the last decade

Year of year	Number of elevators/ten thousand elevators	Death number/person	Mortality rate of
				2011	201.06	30	1.5×10^-5
2012	245.33	20	8.2×10^-6
				2013	300.93	57	1.9×10^-5
2014	359.85	48	1.3×10^-5
				2015	425.96	63	1.5×10^-5
2016	493.69	41	8.3×10^-6
				2017	562.70	41	7.3×10^-6
2018	627.83	22	3.5×10^-6
				2019	709.75	29	4.1×10^-6
2020	786.55	19	2.4×10^-6

Step S160, determining a risk reduction factor rrf=f/f _{Allow for} according to the second probability f of the target system and the probability f _{Allow for} of the different system in the first period.

In the embodiment of the application, the specific probability f=5.32×10 ^-4,f_{Allow for}＝10^-5 of the accident, and the risk reduction factor rrf=f/f _{Allow for} =53.2.

Step S170, determining a security integrity level of the target system according to the risk reduction factor.

In some embodiments, determining the security integrity level of the target system by querying a second relationship table; the second relation table is used for representing the corresponding relation between risk reduction factors and safety integrity levels of different systems.

In the embodiment of the present application, according to the risk reduction factor rrf=f/f _{Allow for} =53.2, the table 7 indicates that the security integrity level required by the system is 1 level, and an additional security instrument system is required to reduce the risk. Wherein the second relationship table is shown in table 7.

TABLE 7 target failure volumes under Low-demand operation model

In some possible embodiments, step S121, the determining, according to the probability level of each subsystem in the target system, the first probability of the corresponding subsystem includes: step S1211 to step S1213, wherein:

Step S1211, inquiring a preset first relation table according to the probability level of each subsystem in the target system, and determining a repair parameter and a triangle fuzzy set of the corresponding subsystem; the first relation table is used for representing the corresponding relation between the probability level and the repair parameters and the triangular fuzzy set.

Here, the repair parameter may be the number of failures or the time taken for repair in a second period of time, wherein the first period of time is greater than the second period of time.

According to the embodiment of the application, according to the acquired fault probability level evaluation table of the ladder system of table 1A and the acquired maintenance probability level evaluation table of the ladder system of table 2A, the fault probability level table of the elevator door system of table 8 and the maintenance probability level table of the elevator door system of table 9 are respectively inquired.

Specifically, according to the fault probability level of expert to each subsystem F _in in the a ladder in table 1, the fault probability level table of the elevator door system in table 8 is queried, and the number of faults and the triangle fuzzy set in 1 year corresponding to the fault probability level of each subsystem F _in in the a ladder are determined.

Table 8 fault probability level table for elevator door system

Probability level	Number of failures within 1 year	Language variable	Triangle fuzzy set
				1	≤0.005	Very rarely is	(0，0，0.1)
2	0.01	Rare cases of rarity	(0，0.1，0.2)
				3	0.05	Relatively rare	(0.1，0.2，0.3)
4	0.1	Lower level	(0.2，0.3，0.45)
				5	0.5	Low and low	(0.3，0.45，0.55)
6	1	Often times	(0.45，0.55，0.7)
				7	5	Repeatedly occur	(0.55，0.7，0.8)
8	10	High height	(0.7，0.8，0.9)
				9	20	Is very high	(0.8，0.9，1)
10	≥30	Inevitably	(0.9，1，1)

Wherein the repair parameters are the number of faults within 1 year; the first time period is 2011-2020, as shown in Table 6; the second time period was 1 year, and the first time period was greater than the second time period as shown in table 8.

Similarly, according to the maintenance probability level of the expert on each subsystem F _in of the A ladder in the table 2, the maintenance probability level table of the elevator door system in the table 9 is inquired, and the time consumed by maintenance and the triangular fuzzy set corresponding to the maintenance probability level of each subsystem F _in of the A ladder are determined.

Table 9 elevator door system maintenance probability level

The repair parameter is time consumed by one time of repair.

Step S1212, determining the triangular blur probability of the corresponding subsystem according to the repair parameters of each subsystem and the corresponding triangular blur set.

In some embodiments, the j-th triangle blur probability of subsystem in the target system is determined by equation (1).

Wherein j is the j-th probability level of the subsystem in of the target system,The j-th triangle ambiguity probability of subsystem in the target system,/>A triangular fuzzy set corresponding to the jth probability level of the subsystem in of the target system; if the repair parameters corresponding to the jth probability level of the subsystem in of the target system are the number of faults in the second time period, lambda _m is determined by a formula (2); if the repair damage parameter corresponding to the jth probability level of the subsystem in the target system is time spent for one repair, lambda _m is determined by a formula (3).

In the embodiment of the application, the triangular fuzzy probability corresponding to the fault probability of each subsystem F _in is obtained according to the fault times and the triangular fuzzy set in 1 year corresponding to the fault probability level of each subsystem F _in of the ladder A. Specifically, if the failure probability level of the table lookup 1 expert 4 to the a ladder system F ₂₁ is 8, the triangle fuzzy set corresponding to the failure probability level 8 of the table lookup 8 is 0.7,0.8,0.9, and the number of failures in 1 year is 10, the triangle fuzzy set of the failure probability of the table lookup 1 expert 4 to the a ladder system F ₂₁ isAccording to formula (2)/>According to formula (1), calculating the triangular blur probability/>, of the failure probability of the subsystem F ₂₁, given by expert 4According to the method, the triangular fuzzy probabilities of the fault probabilities of the expert 1, the expert 2 and the expert 3 on the A ladder system F ₂₁ are calculated and obtained as/>, respectively

Similarly, according to the time spent by maintenance once and the triangle fuzzy set corresponding to the maintenance probability level of each subsystem F _in of the ladder A, the triangle fuzzy probability corresponding to the maintenance probability of each subsystem F _in is obtained. Specifically, if the maintenance probability level of the table lookup 2 expert 4 for the a ladder system F ₁₁ is 6, the triangle fuzzy set corresponding to the table lookup 9 maintenance probability level 6 is 0.7,0.9,1, the time spent for one maintenance is 50h, and the triangle fuzzy set of the maintenance probability of the expert 4 for the subsystem F ₁₁ isAccording to formula (3)/>According to formula (1), calculate the triangular blur probability/>, of the repair probability of expert 4 to subsystem F ₁₁ According to the method, the maintenance probability triangle fuzzy probabilities of the expert 1, the expert 2 and the expert 3 on the A ladder system F ₁₁ are calculated and obtained as/>, respectively

And step S1213, quantifying the triangular fuzzy probability of each subsystem according to the triangular fuzzy function theory to obtain a first probability of the corresponding subsystem.

Here, the first probability of a subsystem may be understood as an accurate probability corresponding to the triangular blur probability of the subsystem.

In some embodiments, quantifying a triangle blur probability for each subsystem in the target system; and (3) obtaining the triangular fuzzy probability of the subsystem in of the target system through a formula (4).

Wherein,For the left fuzzy region,/>Is the center of fuzzy aggregation,/>For the right fuzzy region,/>For the triangular fuzzy probability corresponding to the 1 st to j th probability grades in the subsystem in the target system,/>And the triangular fuzzy probability of the subsystem in the target system is obtained.

And (3) obtaining the first probability of the target system subsystem in through a formula (5), wherein P _in is the first probability of the target system subsystem in.

In the embodiment of the application, the calculation of the failure probability of each subsystem F _in is specifically that the triangle fuzzy probability of the failure probability of the expert 1 to expert 4 to the A ladder system F ₂₁ is thatThe triangular fuzzy probability of the failure probability of the A ladder subsystem F ₂₁ is obtained through an arithmetic average method, namely the triangular fuzzy probability of the failure probability of the A ladder subsystem F ₂₁ is calculated according to a formula (4), and the/> Wherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>Is the right fuzzy area; then the triangular fuzzy probability of the failure probability of the A ladder system F ₂₁ is converted into the failure probability by using a mean area method, namely the failure probability of the subsystem F ₂₁ is calculated according to a formula (5) to obtain/> Wherein P ₂₁ is the fault probability of the A ladder subsystem F ₂₁; and similarly, calculating the fault probability of each subsystem F _in of the ladder A, wherein the calculation result is shown in Table 3.

The maintenance probability of each subsystem F _in is calculated by the method that the triangle fuzzy probability of the maintenance probability of the A ladder system F ₁₁ by the expert 1 to the expert 4 is specifically as followsThe triangular fuzzy probability of the maintenance probability of the A ladder subsystem F ₂₁ is obtained through an arithmetic average method, namely the triangular fuzzy probability of the maintenance probability of the A ladder subsystem F ₂₁ is calculated according to a formula (4), and the/>Wherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>Is the right fuzzy area; the triangular fuzzy probability of the maintenance probability of the A ladder system F ₁₁ is converted into the maintenance probability by using a mean area method, namely the maintenance probability of the subsystem F ₁₁ is calculated according to a formula (5) to obtain/>Wherein, P ₁₁ is the maintenance probability of the subsystem F ₁₁ of the A ladder, the maintenance probability of each subsystem F _in of the A ladder is calculated by the same method, and the calculation result is shown in Table 4.

In some embodiments, calculating the triangle blur probability for each subsystem may also be calculated by MATLAB software programming in combination with equation (1), equation (2), equation (3), and equation (4). For example, to calculate a triangular ambiguity probability corresponding to the maintenance probability of the A ladder system F ₁₁ For example, according to the time consumed by maintaining each subsystem F _in of the a ladder and the triangle ambiguity set of each subsystem of the a ladder, calculating the triangle ambiguity probability of each subsystem of the a ladder, as shown in the lookup table 2, the scoring results of expert 1, expert 2, expert 3 and expert 4 on F ₁₁ are respectively 5, 7,4 and 6, and performing MATLAB software programming on the scoring results: according to the triangle ambiguity set in table 9, ：A1＝[0,0,0.1],A2＝[0,0.1,0.3],A3＝[0.1,0.3,0.5],A4＝[0.3,0.5,0.7],A5＝[0.5,0.7,0.9],A6＝[0.7,0.9,1],A7＝[0.9,1,1]; is caused to take time once according to the repair in table 9, according to equation (3): b1 B2=1/1, b3=1/5, b4=1/10, b5=1/20, b6=1/50, b7=1/80; taking B1 as an example, wherein 1/0.5 represents that maintenance requires 0.5h at a time.

Calculating the triangular blur probability of F ₁₁ according to the formula (1) and the formula (4), wherein the triangular blur probability of F ₁₁ isWherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>For the right fuzzy region,/>And triangulating the fuzzy probability for the target system.

In some possible embodiments, when the security system required by the target system needs to be optimized, the method further includes step S180, step S190, and step S200.

Here, if the frequency of accidents occurring by the target system is found to be below an acceptable risk criterion, based on the safety integrity level of the target system, then the risk of the system is indicated to be acceptable without adding an additional safety instrumented system; if the accident frequency of the obtained elevator door system is above the acceptable risk standard, the current risk is unacceptable, and casualties and property loss are easily caused, and the safety system required by the target system can be optimized.

Taking an A-ladder elevator door system as an example, taking the A-ladder elevator door system as a target system, and taking a car door system and a landing door system as intermediate systems of the A-ladder elevator door system; the car door system includes: door machine controller F ₁₁, motor F ₁₂, sedan-chair door synchro-transmission F ₁₃, sedan-chair door actuating mechanism F ₁₄, layer door system includes: linkage F ₂₁, landing door synchronous transmission F ₂₂, landing door self-closing device F ₂₃ and landing door actuating mechanism F ₂₄.

Step S180, based on Markov theory, confirming steady-state availability of the at least two intermediate systems according to first probabilities of the at least two intermediate systems.

The reliability block diagram of the elevator door system is obtained according to the structural division of the elevator door system A, as shown in figure 2, a random process is definedThe random process has a total of 4 different states, state 0: the elevator car door system and the landing door system are in a normal state; state 2: the elevator car door system A is in a normal state, and the elevator landing door system A is in a fault state; state 3: the elevator car door system A is in a fault state, and the elevator landing door system A is in a normal state; state 4: the elevator car door system and the landing door system are in a fault state.

And (3) making a Markov state transition diagram of the A-ladder gate system according to the Markov theory, and obtaining a Markov state transition matrix Q of the A-ladder gate system in a formula (6) as shown in fig. 3.

Wherein lambda ₁ and lambda ₂ are failure rates of the elevator car door system and landing door system respectively; mu ₁ and mu ₂ are the maintenance rates of the A-stage door system and the landing door system, respectively, and the failure rates and maintenance rates of the A-stage door system and the landing door system are shown in Table 5.

Deriving a transient reliability calculation formula of the elevator door system, let P _i (t) be the probability that the system is in a state i (i=0, 1,2, 3) at the moment t, P _i(t)＝{P₀(t),P₁(t),P₂(t),P₃ (t) } be a state distribution vector of the system at the moment t, P _i ' (t) be the derivative of P _i (t), and vector P _i'(t)＝{P₀'(t),P₁'(t),P₂'(t),P₃ ' (t) } be a matrix formed by P _i ' (t). Equation (7) is derived from the state equation P _i(t)QP_i' (t) of the markov process, which is subjected to the laplace transform to obtain equation (8), where,And s is a variable obtained by the Laplace transformation of the T, which is a vector obtained by the Laplace transformation of P _i (t). Then, the inverse transformation is performed on the formula (8), so that P ₀(t)、P₁(t)、P₂ (t) and P ₃ (t) can be obtained (i.e., the probabilities that the t moment is in states 0, 1, 2, and 3).

/>

P ₀(t)、P₁(t)、P₂ (t) and P ₃ (t) can be obtained by the formula (8), when t approaches infinity, the transient availability of each state becomes steady-state availability, and the transient availability is represented by P _i (i=0, 1,2, 3), so that P= { P ₀,P₁,P₂,P₃ } is a distribution vector of steady-state probability. And (3) obtaining a steady state probability equation set of the elevator door system as a formula (9) according to a steady state equation P.Q=0 of the Markov process, and obtaining the steady state probability of each state of the system according to the formula (9).

And finally substituting the corresponding probabilities into reliability calculation formulas (7) and (8), and obtaining the influence of each subsystem of the elevator door system on the whole door system by utilizing MATLAB software to obtain the steady-state availability of the elevator door system and the landing door system as P ₁ = 0.9786 and P ₂ = 0.9764 respectively.

Step S190, comparing the steady-state availability of the at least two intermediate systems to obtain the minimum steady-state availability of the target system.

In the embodiment of the application, the steady-state availability of the landing door system is smaller than that of the car door system, namely the elevator door system is the minimum, by comparing the steady-state availability of the car door system P ₁ = 0.9786 and the steady-state availability of the landing door system P ₂ = 0.9764.

Step S200, outputting reminding information based on the minimum steady-state availability of the target system and the safety integrity level of the target system; the reminding information is used for reminding the increase of the safety of the target system.

In the embodiment of the application, according to the result of the query in the step S170, the risk level of the elevator door system of the elevator A does not reach the acceptable risk standard. Thus analyzing the effect of the maintenance rate and failure rate of the car and landing door systems on the steady state availability of the system, as shown in fig. 4a, 4b, wherein a=p0 is the steady state availability; from fig. 4a and 4b, it can be found that the landing door is easier to affect the whole system and is easier to cause casualties than the car door, so that a safety instrument system with the safety integrity level of 1 should be newly added on the landing door to take relative measures to reduce risks.

In some possible embodiments, step S110 further includes: the target system is divided into at least two intermediate systems by means of a delta film.

Taking an A-ladder elevator door system as an example, taking the A-ladder elevator door system as a target system, and taking a car door system and a landing door system as intermediate systems of the A-ladder elevator door system; dividing the elevator door system structure of the A ladder into a car door system and a landing door system through a Delphi method; the car door system includes: door machine controller F ₁₁, motor F ₁₂, sedan-chair door synchro-transmission F ₁₃, sedan-chair door actuating mechanism F ₁₄, layer door system includes: linkage F ₂₁, landing door synchronous transmission F ₂₂, landing door self-closing device F ₂₃ and landing door actuating mechanism F ₂₄.

In some possible embodiments, the reliability series system formula includes formula (10) and formula (11):

Lambda _i＝λ_i1+…+λ_in equation (10);

where lambda _i is the failure rate and lambda _i1～λ_in is the failure rate of at least two of the subsystems.

Wherein μ _i is a maintenance rate, λ _i1～λ_in is a failure rate of at least two of the subsystems, and μ _i1～μ_in is a maintenance rate of at least two of the subsystems.

In the embodiment of the application, the car door system is in a serial connection mode, and the car door can normally run only under the condition that the door machine controller, the motor, the car door synchronous transmission device and the car door executing mechanism are normal; on the premise that the landing door self-closing device is normal, the linkage device is normal, the landing door synchronous transmission device is normal, the landing door executing mechanism is normal, the landing door can normally operate, and the process can be approximately seen as a serial connection mode; a block diagram of the reliability of the elevator door system is thus presented in fig. 2.

The reliability series system formula is formula (10) and formula (11).

Lambda _i＝λ_i1+…+λ_1n equation (10);

Wherein lambda _i is the failure rate, lambda _i1～λ_in is the failure rate of subsystem F _in, and the failure rates of the car door system and the landing door system of the A ladder are calculated through a reliability series system formula.

Wherein mu _i is maintenance rate, lambda _i1～λ_in is subsystem failure rate, and mu _i1～μ_in is subsystem maintenance rate.

And calculating the failure rate and maintenance rate of the car door system and the landing door system in the A-ladder door system according to the reliability series system formula, as shown in table 5.

In some possible embodiments, step S1211 further comprises: a first relationship table is defined. Defining a language variable by using a Delphi method, and determining a corresponding relation between the language variable and the triangular fuzzy set; probability grade division is carried out on the repair parameters according to the language variables, and the corresponding relation between the language variables, the repair parameters and the probability grade is obtained; and determining the corresponding relation among the probability level, the repair parameter, the linguistic variable and the triangular fuzzy set as the first relation table.

In the embodiment of the application, if a fault probability level table of an elevator door system is defined, language variables of fault times within 1 year of the elevator door system are defined by using a Delphi method, for 10 unavoidable language variables which are very rarely seen, a triangular fuzzy set is introduced, wherein the corresponding relation between each language variable and the triangular fuzzy set is that, if the triangular fuzzy set corresponding to 'very rare' is (0,0,0.1); dividing the number of faults within 1 year into 1-10 grades according to language variables, wherein if the probability grade 1 is that the number of faults within 1 year is less than or equal to 0.005, the corresponding language variable is 'very rare'; the corresponding relation between the failure times less than or equal to 0.005 in the grades 1 and 1 year, the 'very rare', the triangular fuzzy set is (0,0,0.1), and the defined elevator door system failure probability grade table is shown in the table 8.

If a maintenance probability level table of the elevator door system is defined, defining language variables of time consumed by one time of elevator door system maintenance by using a Delphi method, and introducing a triangular fuzzy set for 7 language variables which are very easy to very difficult, wherein the corresponding relation between each language variable and the triangular fuzzy set is that (0,0,0.1) is the triangular fuzzy set corresponding to 'very easy'; the time spent by maintenance is divided into 1-7 grades according to the language variable, for example, the probability grade 1 is that the time spent by maintenance is 0.5h, the corresponding language variable is 'very easy', the corresponding relation between the grade 1 and the time spent by maintenance is 0.5h, 'very easy', and the triangle fuzzy set is (0,0,0.1) is obtained, and the defined elevator door system maintenance probability grade table is shown in table 9.

In some possible embodiments, the trigonometric fuzzy function theory includes a decomposition theorem of a fuzzy function and an expansion principle, the decomposition theorem is used for connecting fuzzy mathematics and mathematics, and the expansion principle expands a common mathematical method into the fuzzy mathematics.

In some possible embodiments, the method further comprises: the method for constructing the triangular fuzzy function model of the different systems through the triangular fuzzy sets of the different systems comprises the following steps:

The triangle fuzzy set is as follows: Wherein/> In order to blur the center of the collection,For the left fuzzy region,/>For the right fuzzy region,/>Is membership degree; a model of the triangular blur function of the different system is determined by equation (12).

In the embodiment of the application, language variables of the number of faults of the elevator door system within 1 year are defined by using a Delphi method, the fault probability level is divided into 10 levels from rare to unavoidable, and in order to link the judgment result of the expert on the occurrence probability of the event with the fuzzy set, a triangular fuzzy set is introduced, wherein the corresponding relation between each language variable and the triangular fuzzy set is shown in a table 8. And obtaining a triangular membership function schematic diagram of the fault probability level of the elevator door system according to the linguistic variables and the triangular fuzzy set, as shown in fig. 5 a.

The language variables of the time spent for one time of maintenance of the elevator door system are defined by using the Delphi method, the maintenance probability level is classified into 7 levels from very easy to very difficult, and in order to relate the judgment result of the expert on the occurrence probability of the event with the fuzzy set, a triangular fuzzy set is introduced, wherein the corresponding relation between each language variable and the triangular fuzzy set is shown in a table 9. And obtaining a triangular membership function schematic diagram of the elevator door system maintenance probability level according to the linguistic variables and the triangular fuzzy set, as shown in fig. 5 b.

The above method is described below in connection with a specific embodiment, which, however, is to be noted as merely illustrative of the application and not to be construed as unduly limiting the application. An elevator in a district in H city is selected as a case and is marked as an A elevator, and the method comprises the following steps:

Step S310, the elevator door system is divided into a car door system and a landing door system by the delta method.

Wherein, the sedan-chair door system includes: door machine controller, motor, sedan-chair door synchro-transmission and sedan-chair door actuating mechanism, layer door system includes: linkage, layer door synchronous drive, layer door self-closing device and layer door actuating mechanism.

And step S320, constructing a triangle fuzzy function model of the fault level and the maintenance level.

The method for constructing the triangular fuzzy function model of the elevator door system comprises the following steps: first, let the fuzzy set of the possibility of the failure of a certain event f _i be: Wherein/> Is the center of fuzzy aggregation,/>For the left fuzzy region,/>For the right fuzzy region,/>Is the degree of membership. A trigonometric fuzzy function model of the elevator door system is determined from equation (12).

Step S330, define the linguistic variables and fuzzy sets of fault level and maintenance level.

The method for defining the language variable and the fuzzy set of the fault level of the elevator door system and the language variable and the fuzzy set of the maintenance level of the elevator door system comprises the following steps: firstly, classifying the failure grades of the elevator door system into 10 grades from rare to unavoidable and the like by using a Delphi method on the basis of the structure classified in the step S310, and particularly, referring to a table 8; the maintenance grades are classified into 7 grades from very easy to very difficult, see in particular table 9. Then, according to step S320, triangular membership function diagrams of the failure level and the maintenance level of the elevator door system are respectively made, as shown in fig. 5a and 5 b.

Step S340, expert scoring is performed on each subsystem divided by the elevator door system in step S310 by using the linguistic variables in step S330, and the scoring results are shown in table 1 and table 2.

And S350, converting expert scoring results into corresponding probabilities according to the triangular fuzzy function theory. The expert scoring condition can be converted into a triangular fuzzy set through the decomposition theorem and the expansion principle of the fuzzy function.

A probability level corresponds to a lambda _m and the j-th expert may be given to the subsystem F _in for a fault level or maintenance level within one year as the corresponding fuzzy probability is expressed by equation (1). Lambda _m is determined by formula (2) or formula (3).

Wherein j is the j-th probability level of the subsystem in of the target system,The j-th triangle ambiguity probability of subsystem in the target system,/>And a triangular fuzzy set corresponding to the jth probability level of the subsystem in the target system.

The specific calculation includes: and obtaining the triangular fuzzy probability corresponding to the fault probability of each subsystem F _in according to the number of faults and the triangular fuzzy set in 1 year corresponding to the fault probability level of each subsystem F _in of the ladder A. Specifically, if the failure probability level of the table lookup 1 expert 4 to the a ladder system F ₂₁ is 8, the triangle fuzzy set corresponding to the failure probability level 8 of the table lookup 8 is 0.7,0.8,0.9, and the number of failures in 1 year is 10, the triangle fuzzy set of the failure probability of the table lookup 1 expert 4 to the a ladder system F ₂₁ isAccording to formula (2)/>According to formula (1), calculating the triangular blur probability/>, of the failure probability of the subsystem F ₂₁, given by expert 4According to the method, the triangular fuzzy probabilities of the fault probabilities of the expert 1, the expert 2 and the expert 3 on the A ladder system F ₂₁ are calculated and obtained as/>, respectively

The triangular blur probability can be quantized using the "arithmetic average method", specifically, equation (4).

And converting the fuzzy probability of each subsystem in the fault state or the maintenance state into the accurate probability by using a mean area method, and specifically adopting a formula (5).

Wherein P _in is the first probability of subsystem in the target system.

The specific calculation includes: the calculation of the failure probability of each subsystem F _in is specifically that the triangle fuzzy probability of the failure probability of the A ladder system F ₂₁ by the experts 1 to 4 is thatThe triangular fuzzy probability of the failure probability of the A ladder subsystem F ₂₁ is obtained through an arithmetic average method, namely the triangular fuzzy probability of the failure probability of the A ladder subsystem F ₂₁ is calculated according to a formula (4), and the/> Wherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>Is the right fuzzy area; then the triangular fuzzy probability of the failure probability of the A ladder system F ₂₁ is converted into the failure probability by using a mean area method, namely the failure probability of the subsystem F ₂₁ is calculated according to a formula (5) to obtain/> Wherein P ₂₁ is the fault probability of the A ladder subsystem F ₂₁; and similarly, calculating the fault probability of each subsystem F _in of the ladder A, wherein the calculation result is shown in Table 3.

When the failure rate and maintenance rate of each subsystem are obtained, the subsystems are mutually independent, and when any subsystem in the elevator door system fails, the failure of the whole system can be caused, so that the components can be regarded as a series system. The failure rate and maintenance rate of the car door and landing door system can be calculated according to the reliability series formula, and the failure rate and maintenance rate are shown in table 5. And further according to a reliability series system formula, calculating the failure rate of the whole door system to be 2.66 multiplied by 10 ^-3 according to the failure rates of the car door system and the landing door system.

Step S360 determines an elevator acceptance criterion by counting the magnitude of the elevator mortality in a region over the last decade.

In implementation, the number of elevators and the death number of the elevators in a certain area in the last ten years are counted, specifically, the order of magnitude of the death rate of the elevators in the area can be known to be 10 ^-5～10^-6 according to the table 6, namely, the acceptable standard of the elevators in the area can be obtained to be 10 ^-5～10^-6, and further, the f _{Allow for} value is obtained to be 10 ^-5.

Step S370, determining a specific probability of occurrence of an elevator door system accident by a fault hypothesis analysis method.

Calculating the specific probability of occurrence of the elevator door system accident according to a fault hypothesis analysis method, wherein the following scene is assumed: when a person takes an elevator down the floor and the probability of causing an intermediate event to occur is 0.2, the specific probability of causing a pinch event at the elevator door at this time is f=0.2×2.66×10 ^-3＝5.32×10^-4.

Step S380, determining the safety integrity level required by the elevator door system according to the risk reduction factor.

The level of safety integrity required by the system can be determined by comparing the specific probability of an elevator door system accident in step S370 with the acceptable risk criteria for the elevator in step S360.

If the accident frequency of the elevator door system is below the acceptable risk standard according to the safety integrity level required by the elevator door system, the risk of the system is acceptable without adding an additional safety instrument system; if the frequency of accidents occurring in the obtained elevator door system is above the acceptable risk standard, the current risk is not acceptable, and casualties and property loss are easily caused.

The risk reduction factor rrf=f/f _{Allow for} =53.2, i.e. an additional safety instrumented system is required to reduce the risk, and table 7 indicates that the system requires a level of safety integrity of level 1. There is a need for a safety instrumented system that is increased as determined.

Step S390, optimizing the newly added safety instrumented system.

Specifically, two intermediate systems of the elevator door system are analyzed by using a Markov theory, a reliability block diagram of the elevator door system is obtained according to structural division of the elevator door system A, and a random process is defined as shown in fig. 2The random process has a total of 4 different states, state 0: the elevator car door system and the landing door system are in a normal state; state 2: the elevator car door system A is in a normal state, and the elevator landing door system A is in a fault state; state 3: the elevator car door system A is in a fault state, and the elevator landing door system A is in a normal state; state 4: the elevator car door system and the landing door system are in a fault state.

Deriving a transient reliability calculation formula of the elevator door system, let P _i (t) be the probability that the system is in a state i (i=0, 1,2, 3) at the moment t, P _i(t)＝{P₀(t),P₁(t),P₂(t),P₃ (t) } be a state distribution vector of the system at the moment t, P _i ' (t) be the derivative of P _i (t), and vector P _i'(t)＝{P₀'(t),P₁'(t),P₂'(t),P₃ ' (t) } be a matrix formed by P _i ' (t). Equation (7) is derived from the state equation P _i(t)Q＝P_i' (t) of the markov process, which is subjected to the laplace transform to obtain equation (8), where,And s is a variable obtained by the Laplace transformation of the T, which is a vector obtained by the Laplace transformation of P _i (t). Then, the inverse transformation is performed on the formula (8), so that P ₀(t)、P₁(t)、P₂ (t) and P ₃ (t) can be obtained (i.e., the probabilities that the t moment is in states 0, 1, 2, and 3).

Comparing the steady state availability P ₁ = 0.9786 of the gate system with the steady state availability P ₂ = 0.9764 of the landing gate system, the steady state availability of the landing gate system is less than the gate system.

Analyzing the influence of different maintenance rates and fault rates of the car door and the landing door on the steady-state availability of the system, as shown in fig. 4a and 4b, wherein a=p0 is the steady-state availability; according to fig. 4a and 4b, it can be found that landing doors are easier to influence the whole system than car doors, and are easier to cause casualties.

A safety instrumented system with a safety integrity level of 1 should be added to the landing door to take relative measures to reduce risk.

Based on the foregoing embodiments, the embodiments of the present application further provide a target system security grading device, where the device includes each module included, and each sub-module included in each module may be implemented by a processor in the target system; of course, the method can also be realized by a specific logic circuit; in an implementation, the Processor may be a central processing unit (Central Processing Unit, CPU), a microprocessor (Micro Processing Unit, MPU), a digital signal Processor (DIGITAL SIGNAL Processor, DSP), or a field programmable gate array (Field Programmable GATE ARRAY, FPGA), or the like.

Based on the foregoing embodiments, a target system security grading device according to an embodiment of the present application is further provided, as shown in fig. 6, where the device includes: a first obtaining module 61, configured to obtain a probability level of each subsystem in the target system; a first determining module 62, configured to determine a first probability of the target system according to a probability level of each subsystem in the target system; a second acquisition module 63 for determining the occurrence probability of an intermediate event of the target system based on a false try; a second determining module 64, configured to determine a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system; a third obtaining module 65, configured to obtain probabilities f _{Allow for} of different systems in the first period; a third determining module 66, configured to determine a risk reduction factor rrf=f/f _{Allow for}, where the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time; a fourth determination module 67 determines a security integrity level of the target system based on the risk reduction factor.

In some possible embodiments, the target system comprises at least two intermediate systems, each comprising at least two subsystems; the first determining module includes: the first determining sub-module is used for determining a first probability of each subsystem according to the probability level of the corresponding subsystem in the target system; the second determining submodule is used for determining the first probability of the corresponding intermediate system based on a reliability series system formula according to the first probability of each subsystem included in each intermediate system; and the third determining submodule is used for determining the first probability of the target system according to the first probabilities of the at least two intermediate systems.

In some possible embodiments, the first determining submodule includes: the first determining unit is used for inquiring a preset first relation table according to the probability level of each subsystem in the target system and determining a repair parameter and a triangular fuzzy set of the corresponding subsystem; the first relation table is used for representing the corresponding relation between the probability level and the repair parameters and between the probability level and the triangular fuzzy set; the second determining unit is used for determining the triangular fuzzy probability of the corresponding subsystem according to the repair parameters of each subsystem and the corresponding triangular fuzzy set; and the quantifying unit is used for quantifying the triangular fuzzy probability of each subsystem according to the triangular fuzzy function theory to obtain a first probability of the corresponding subsystem.

In some possible embodiments, the apparatus further comprises: a fifth determining module, configured to define a language variable by a delta film, and determine a correspondence between the language variable and the triangle fuzzy set; a sixth determining module, configured to perform probability level classification on the repair parameter according to the language variable, so as to obtain a correspondence between the language variable and the repair parameter as well as the probability level; and a seventh determining module, configured to determine a correspondence between the probability level, the modification parameter, the linguistic variable, and the triangle ambiguity set as the first relationship table.

In some possible embodiments, the second determining unit is configured to:

By passing through Determining the j-th triangle fuzzy probability of the subsystem in of the target system;

wherein j is the j-th probability level of the subsystem in of the target system, The j-th triangle ambiguity probability of subsystem in the target system,/>A triangular fuzzy set corresponding to the jth probability level of the subsystem in of the target system;

If the repair parameter corresponding to the jth probability level of the subsystem in of the target system is the number of faults in the second time period, then If the repair parameters corresponding to the jth probability level of the subsystem in of the target system are time spent for one repair, then/>

In some possible embodiments, the quantification unit is configured to:

By passing through Obtaining a triangular fuzzy probability of subsystem in of the target system, wherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>In order to form a right-hand side of the fuzzy region,For the triangular fuzzy probability corresponding to the 1 st to j th probability grades in the subsystem in the target system,/>The triangular fuzzy probability of the subsystem in of the target system is given;

By passing through And obtaining a first probability of the target system subsystem in, wherein P _in is the first probability of the target system subsystem in.

In some possible embodiments, the third acquisition module includes: an acquisition sub-module for determining the number of the different systems and the number of deaths of the different systems in the first period of time; a fourth determining submodule, configured to determine a mortality order of the different systems according to the number of the different systems and the number of deaths of the different systems in the first period; a fifth determination submodule is configured to determine a probability f _{Allow for} of the different system in the first time period based on the order of mortality of the different system.

In some possible embodiments, the fourth determining module is configured to determine the security integrity level of the target system by querying a second relationship table according to the risk reduction factor; wherein the second relation table is used for representing the corresponding relation between risk reduction factors and safety integrity levels of different systems.

In some possible embodiments, the apparatus further comprises: an eighth determining module, configured to determine a steady-state availability of the at least two intermediate systems according to a first probability of the at least two intermediate systems based on markov theory; a ninth determining module, configured to compare steady-state availability of the at least two intermediate systems to obtain a minimum steady-state availability of the target system; the output module is used for outputting reminding information based on the minimum steady-state availability of the target system and the safety integrity level of the target system; the reminding information is used for reminding the increase of the safety of the target system.

It should be noted here that: the description of the apparatus embodiments above is similar to that of the method embodiments above, with similar advantageous effects as the method embodiments. For technical details not disclosed in the embodiments of the apparatus of the present application, please refer to the description of the embodiments of the method of the present application.

It should be noted that, in the embodiment of the present application, if the method is implemented in the form of a software functional module, and sold or used as a separate product, the method may also be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application may be essentially or partly contributing to the related art, embodied in the form of a software product stored in a storage medium, including several instructions for causing a computer device to execute all or part of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read Only Memory (ROM), a magnetic disk, an optical disk, or other various media capable of storing program codes. Thus, embodiments of the application are not limited to any specific combination of hardware and software.

Accordingly, embodiments of the present application provide a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the methods provided in the above embodiments.

The embodiment of the application also provides a chip, which comprises a processor, wherein the processor can call and run a computer program from a memory to realize the steps in any method. The chip may also include a memory. Wherein the processor may call and run a computer program from the memory to implement the steps of any of the methods described above. The memory may be a separate device from the processor or may be integrated into the processor.

It should be noted here that: the description of the storage medium and apparatus embodiments above is similar to that of the method embodiments described above, with similar benefits as the method embodiments. For technical details not disclosed in the embodiments of the storage medium and the apparatus of the present application, please refer to the description of the method embodiments of the present application.

Correspondingly, the embodiment of the application also provides target system security grading equipment which is used for implementing the target system security grading method described in the embodiment of the method. The apparatus includes a computer storage medium storing a computer program comprising instructions executable by at least one processor that when executed by the at least one processor implement methods in embodiments of the present application.

It should be noted here that: the above description of apparatus, computer storage media, chips, computer program products, computer program embodiments is similar to that of method embodiments described above, with similar advantageous effects as the method embodiments. For technical details not disclosed in the target system security grading device, the computer readable storage medium, the chip, the computer program product and the computer program embodiment of the present application, please refer to the description of the method embodiment of the present application. The above-described apparatus, chip or processor may include an integration of any one or more of the following: application SPECIFIC INTEGRATED Circuit (ASIC), digital signal Processor (DIGITAL SIGNAL Processor, DSP), digital signal processing device (DIGITAL SIGNAL Processing Device, DSPD), programmable logic device (Programmable Logic Device, PLD), field programmable gate array (Field Programmable GATE ARRAY, FPGA), central processing unit (Central Processing Unit, CPU), graphics Processor (Graphics Processing Unit, GPU), embedded neural network Processor (neural-network processing units, NPU), controller, microcontroller, microprocessor, programmable logic device, discrete gate or transistor logic device, discrete hardware components. Those of ordinary skill in the art will appreciate that: all or part of the steps for implementing the above method embodiments may be implemented by hardware related to program instructions, and the foregoing program may be stored in a computer storage medium, where the program, when executed, performs steps including the above method embodiments; and the aforementioned storage medium includes: various media capable of storing program codes, such as a mobile storage device, a read-only memory, a magnetic disk or an optical disk. Or the above-described integrated units of the application may be stored in a computer storage medium if implemented in the form of software functional modules and sold or used as separate products.

Based on such understanding, the technical solution of the embodiments of the present application may be embodied essentially or in a part contributing to the related art in the form of a software product stored in a storage medium, including several instructions for causing a computer device (which may be a personal computer, a server, etc.) to execute all or part of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a removable storage device, a ROM, a magnetic disk, or an optical disk.

It should be appreciated that reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present application. Thus, the appearances of the phrases "in one embodiment" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. It should be understood that, in various embodiments of the present application, the sequence numbers of the foregoing processes do not mean the order of execution, and the order of execution of the processes should be determined by the functions and internal logic thereof, and should not constitute any limitation on the implementation process of the embodiments of the present application. The foregoing embodiment numbers of the present application are merely for the purpose of description, and do not represent the advantages or disadvantages of the embodiments.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

In the several embodiments provided by the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above described device embodiments are only illustrative, e.g. the division of the units is only one logical function division, and there may be other divisions in practice, such as: multiple units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. In addition, the various components shown or discussed may be coupled or directly coupled or communicatively coupled to each other via some interface, whether indirectly coupled or communicatively coupled to devices or units, whether electrically, mechanically, or otherwise.

The units described above as separate components may or may not be physically separate, and components shown as units may or may not be physical units; can be located in one place or distributed to a plurality of network units; some or all of the units may be selected according to actual needs to achieve the purposes of the embodiment of the present application.

In addition, each functional unit in each embodiment of the present application may be integrated in one processing unit, or each unit may be separately used as one unit, or two or more units may be integrated in one unit; the integrated units may be implemented in hardware or in hardware plus software functional units.

Or the above-described integrated units of the application may be stored in a computer-readable storage medium if implemented in the form of software functional modules and sold or used as separate products. Based on such understanding, the technical solutions of the embodiments of the present application may be embodied essentially or in a part contributing to the related art in the form of a software product stored in a storage medium, including several instructions for causing an apparatus automatic test line to perform all or part of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a removable storage device, a ROM, a magnetic disk, or an optical disk.

The methods disclosed in the method embodiments provided by the application can be arbitrarily combined under the condition of no conflict to obtain a new method embodiment.

The features disclosed in the embodiments of the method or the apparatus provided by the application can be arbitrarily combined without conflict to obtain new embodiments of the method or the apparatus.

The foregoing is merely an embodiment of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily think about changes or substitutions within the technical scope of the present application, and the changes and substitutions are intended to be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A method of target system security grading, the method comprising:

Acquiring probability level of each subsystem in the target system;

determining a first probability of the target system according to the probability level of each subsystem in the target system;

Determining a probability of occurrence of an intermediate event of the target system based on a false attempt;

determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system;

acquiring the probability f _{Allow for} of different systems in a first time period;

Determining a risk reduction factor rrf=f/f _{Allow for} according to the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time;

determining a security integrity level of the target system according to the risk reduction factor;

the target system comprises at least two intermediate systems, each of which comprises at least two subsystems;

Correspondingly, the determining the first probability of the target system according to the probability level of each subsystem in the target system comprises: determining a first probability of each subsystem according to the probability level of the corresponding subsystem in the target system; determining a first probability of a corresponding intermediate system based on a reliability series system formula according to the first probability of each subsystem included in each intermediate system; determining a first probability of the target system according to the first probabilities of the at least two intermediate systems;

The determining the first probability of the corresponding subsystem according to the probability level of each subsystem in the target system comprises the following steps: inquiring a preset first relation table according to the probability level of each subsystem in the target system, and determining a repair parameter and a triangular fuzzy set of the corresponding subsystem; the first relation table is used for representing the corresponding relation between the probability level and the repair parameters and the triangular fuzzy set; determining the triangular fuzzy probability of the corresponding subsystem according to the repair parameters of each subsystem and the corresponding triangular fuzzy set; according to the triangle fuzzy function theory, quantifying the triangle fuzzy probability of each subsystem to obtain a first probability of the corresponding subsystem;

the determining the triangle fuzzy probability of the corresponding subsystem according to the repair parameters of each subsystem and the corresponding triangle fuzzy set comprises the following steps:

The quantifying processing is performed on the triangle fuzzy probability of each subsystem according to the triangle fuzzy function theory to obtain a first probability of the corresponding subsystem, including:

By passing through Obtaining a triangular fuzzy probability of subsystem in of the target system, wherein/>For the left fuzzy region,/>Is the center of fuzzy aggregation,/>For the right fuzzy region,/>For the triangular fuzzy probability corresponding to the 1 st to j th probability grades in the subsystem in the target system,/>The triangular fuzzy probability of the subsystem in of the target system is given;

2. The method of claim 1, wherein the obtaining the probabilities f _{Allow for} of the different systems over the first time period comprises:

determining the number of the different systems and the number of deaths of the different systems during the first period of time;

Determining the order of mortality of the different systems according to the number of the different systems and the number of deaths of the different systems in the first time period;

The probability f _{Allow for} of the different system over the first time period is determined based on the order of mortality of the different system.

3. The method according to claim 1, wherein the method further comprises:

Based on Markov theory, confirming steady-state availability of the at least two intermediate systems according to first probabilities of the at least two intermediate systems;

Comparing the steady-state availability of the at least two intermediate systems to obtain the minimum steady-state availability of the target system;

Outputting reminding information based on the minimum steady-state availability of the target system and the safety integrity level of the target system;

the reminding information is used for reminding the increase of the safety of the target system.

4. A target system security grading device for use in the steps of the target system security grading method according to any of claims 1-3, the device comprising:

the first acquisition module is used for acquiring the probability level of each subsystem in the target system;

The first determining module is used for determining a first probability of the target system according to the probability level of each subsystem in the target system;

a second acquisition module for determining a probability of occurrence of an intermediate event of the target system based on a false attempt;

the second determining module is used for determining a second probability f of the target system according to the first probability of the target system and the occurrence probability of the intermediate event of the target system;

a third obtaining module, configured to obtain probabilities f _{Allow for} of different systems in a first period of time;

A third determining module, configured to determine a risk reduction factor rrf=f/f _{Allow for}, where the second probability f of the target system and the probability f _{Allow for} of the different system in the first period of time;

And a fourth determining module, configured to determine a security integrity level of the target system according to the risk reduction factor.

5. A target system security grading device, comprising: a memory and a processor, the memory storing a computer program executable on the processor, the processor implementing the steps in the target system security grading method of any of claims 1 to 3 when the computer program is executed.

6. A computer readable storage medium having stored thereon a computer program, which when executed by a processor performs the steps of the target system security grading method according to any of claims 1 to 3.