An evaluation method of fault-tolerance for digital plant protection system in nuclear power plants