Assessment of the Reactor Trip System Dependability Two Markov Chains-based Cases =Оцінка надійності системи аварійного захисту реактора із викоритсанням моделей Маркова

Abstract

The diversity approach is commonly used to ensure dependability attributes of such critical computer-based systems as NPP I&C systems, including the Reactor Trip System. There are two basic problems emerging in this approach – the choice of product-process diversity kinds and assessment of multi-version systems dependability. This paper presents a study for dependability assessment of two architectures of a typical NPP I&C system, the Reactor Trip System: a diverse twochannel system with three parallel tracks on voting logic “2-outof-3” in each channel and a diverse three-channel system with two parallel tracks on voting logic “1-out-of-2” in each channel. The multi-fragmentation approach is proposed to provide a detailed description of RTS hardware-software interconnection. The resulting models are solved using a number of approachesand tools to verify the results. Obtained results can help to make informed decision between the observed RTS architectures.