Instrument and control system of the nuclear power plant is a critical system for the sake of safety. The system’s availability is maintained by control interlocking. As for the interlocking model of the emergency shutdown subsystem, the shutdown rules, devices and signals are abstracted into the complex relationship of logic and sets. Thus the interlocking model is established and the theoretical and engineering significance of interlocking model is analyzed. Then the observable corrective software interlocking is proposed through the increas...