Safety Manager Safety Manual - Tuv-fs.com

More documents

Recommendations

Info

2 – Architectural principle and standards of Safety Manager The DMR architecture is realized with a non-redundant Controller. A non-redundant architecture contains only one QPP (see Figure 2 on page 10), which contains a redundant processor with 1oo2 voting between the processors and memory. Figure 2 Functional diagram: DMR architecture QPP Control Processor SD Watchdog SMOD Sensor xx yyy Input Module Processor Processor Output Module Input Interfaces Output Interfaces Final Element In IO configurations, each path is primarily controlled by the Control Processor and an independent switch (Secondary Means of De-energization, SMOD) which is controlled by an independent watchdog. Quadruple Modular Redundant (QMR) architecture Typical applications of a QMR architecture are: • process safeguarding applications for which continues operation is essential. The Quadruple Modular Redundant (QMR) architecture is based on 2oo4D voting, dual-processor technology in each QPP. This means that it is characterized by a ultimate level of self diagnostics and fault tolerance. The QMR architecture is realized with a redundant Controller. This redundant architecture contains two QPPs (see Figure 3 on page 11), which results in quadruple redundancy making it dual fault tolerant for safety. The 2oo4D voting is realized by combining 1oo2 voting of both CPUs and memory in each QPP, and 1oo2D voting between the two QPPs. Voting takes place on two levels: on a module level and between the QPPs. 10 Release 131, Issue 4.2
Figure 3 Functional diagram: QMR architecture QPP Control Processor 1 SD Watchdog Input Module Processor Processor SMOD Output Module Sensor xx yyy Input Module Processor Processor SMOD Output Module Quad Voter Watchdog Input Interfaces QPP Control Processor 2 Output Interfaces Final Element In redundant IO configurations, each path is controlled by one of the Control Processors and an independent switch (Secondary Means of De-energization, SMOD), which is controlled by the diagnostic software and an independent watchdog. Furthermore, each Control Processor is able to switch off the output channels of the other Control Processor. Watchdog architecture in mixed IO configurations In a system with combined redundant and non redundant IO 3 watchdog lines are active: • WD1 This is the Watchdog line dedicated for Control Processor 1. - De-energizes upon a safety related fault in Control Processor 1 or an output module of Control Processor 1. - When de-energized, Control Processor 1 and the related outputs are halted. • WD2 This is the Watchdog line dedicated for Control Processor 2. Safety Manager Safety Manual 11
Page 1 and 2: Safety Manager Safety Manual EP-SM.
Page 3 and 4: Tip This symbol is used for useful,
Page 5 and 6: Contents 1 The Safety Manual 1 Cont
Page 7 and 8: The Safety Manual 1 Content of Safe
Page 9 and 10: Basic skills and knowledge Basic sk
Page 11 and 12: Safety standards for Process & Equi
Page 13 and 14: Safety standards for Process & Equi
Page 15: Architectural principle and standar
Page 19 and 20: Certification Certification The adv
Page 21 and 22: Standards compliance Standards comp
Page 23 and 24: Standards compliance IEC 60068-2-30
Page 25 and 26: Safety Manager fault detection and
Page 27 and 28: Shutdown at assertion of Safety Man
Page 29 and 30: SM Controller faults Table 4 Contro
Page 31 and 32: SM Controller faults Table 7 Contro
Page 33 and 34: SM IO faults SM IO faults Tip: For
Page 35 and 36: SM IO faults Digital output faults
Page 37 and 38: SM IO faults Table 13 on page 31 sh
Page 39 and 40: SM IO faults . The input compare er
Page 41 and 42: Calculation errors Sometimes, howev
Page 43 and 44: Safety Manager special functions 4
Page 45 and 46: Unit shutdown outputs The unit shut
Page 47 and 48: On-line modification On-line modifi
Page 49 and 50: SafeNet communication The maximum r
Page 51 and 52: SafeNet communication System respon
Page 53 and 54: Special requirements for TUV-approv
Page 55 and 56: 12. To reduce the influence of dist
Page 57 and 58: F&G applications F&G applications F
Page 59 and 60: Fax Transmittal Fax Number: +31 (0)

Safety Manager Safety Manual - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?