Process Protection Software Structure and Design Philosophy

In the development of microprocessor-based systems that play a critical role in the operation of nuclear power plants, careful thought must be given to software design. To achieve the dual goals of system reliability and availability, the software must perform predictably at all times, be easily tested and verified, easily expanded to meet new customer or regulatory requirements, and easily adapted for each individual plant. The design criteria and development methods used in the development of the safety grade software for the Eagle 21TM Process Protection System are described.