Safety Considerations Guide for Triconex General ... - ICEWeb

32 Chapter 3 Fault Management
Overview
The Tri-GP controller has been designed from its inception with self-diagnostics as a primary
feature. Triple-Modular Redundant (TMR) architecture (shown in Figure 9) ensures fault
tolerance and provides error-free, uninterrupted control in the event of hard failures of
components or transient faults from internal or external sources.
Each I/O module houses the circuitry for three independent channels. Each channel on the
input modules reads the process data and passes that information to its respective main
processor. The three Main Processor (MP) modules communicate with each other using a
proprietary, high-speed bus system called the TriBus.
Extensive diagnostics on each channel, module, and functional circuit quickly detect and report
operational faults by means of indicators or alarms. This fault information is available to an
application. It is critical that an application properly manage fault information to avoid an
unnecessary shutdown of a process or plant.
This section discusses the methods for properly handling faults.
Input Module
Hot Spare
Output Module
Hot Spare
Input
Channel A
Channel A I/O Bus
Output
Channel A
MP A
(SX)
IOP A
(IOX)
Field
Input
Input
Channel B
Channel B IO/ Bus
MP B IOP B
(SX) (IOX)
TriBus & TriTime
Diagnostic Channel
Output
Channel B
Output Voter
Field
Output
Input
Channel C
Channel C I/O Bus
Output
Channel C
MP C
(SX)
IOP C
(IOX)
Figure 9
Typical Triconex Controller
Safety Considerations Guide for Triconex General Purpose v2 Systems