Safety Considerations Guide for Triconex General ... - ICEWeb

More documents

Recommendations

Info

50 Chapter 4 Application Development Program EX01_SHUTDOWN CRITICAL_MODULES SYS_SHUTDOWN T#3d T#400ms CI CO IO_CO OPERATIING IO_TMR TMR IO_GE_DUAL DUAL IO_GE_SINGLE SINGL IO_NO_VOTER_FLTS ZERO IO_ERROR TIMER_RUNNING MAX_TIME_DUAL TIME_LEFT MAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTED MAX_SCAN_TIME ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS ERROR 001 CRITICAL_MODULES_OPERATING ALARM_PROGRAMMING_PERMITTED ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS Figure 10 EX01_SHUTDOWN Sample Program CO false indicates a programming error; for example, MAX_TIME_SINGLE greater than MAX_TIME_DUAL. The error number shows more detail. Table 9 Parameter CI IO_CO IO_TMR Input Parameters for SYS_SHUTDOWN Function Block in EX01_SHUTDOWN Description Do not connect when all I/O modules are system-critical Do not connect when all I/O modules are system-critical Do not connect when all I/O modules are system-critical IO_GE_DUAL IO_GE_SINGLE IO_NO_VOTER_FLTS IO_ERROR MAX_TIME_DUAL MAX_TIME_SINGLE MAX_SCAN_TIME Do not connect when all I/O modules are system-critical Do not connect when all I/O modules are system-critical Do not connect when all I/O modules are system-critical Do not connect when all I/O modules are system-critical Maximum time with only two channels operating Maximum time with only one channel operating 50% of the maximum response time Safety Considerations Guide for Triconex General Purpose v2 Systems
Sample Safety-Shutdown Programs 51 Table 10 Parameter CO OPERATING TMR DUAL SINGL ZERO TIMER_RUNNING TIME_LEFT Output Parameters for SYS_SHUTDOWN Function Block in EX01_SHUTDOWN ALARM_PROGRAMMING_PERMITTED ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS ERROR_NUM Description Control out When true, all safety-critical modules are operating properly When false, the time in degraded operation exceeds the specified limits; therefore, the control program should shut down the process System is operating in triple modular redundant mode At least one safety-critical point is controlled by two channels At least one safety-critical point is controlled by one channel At least one safety-critical point is not controlled by any channel Time left to shutdown is decreasing Time remaining before shutdown True if application changes are permitted True if remote-host writes are enabled True if actual scan time is greater than MAX_SCAN_TIME True if one or more points are disabled. Error Number: 0 = No error 1 = Error in maximum time 2 = I/O function block error. IO_ERROR is non-zero 3 = Function block error. System status or MP Status Safety Considerations Guide for Triconex General Purpose v2 Systems
Page 1 and 2:
Triconex General Purpose v2 Systems
Page 3 and 4:
Contents Preface vii Summary of Sec
Page 5 and 6:
Contents v Partitioned Processes. .
Page 7 and 8:
Preface This guide provides informa
Page 9 and 10: Preface ix • All other requests a
Page 11 and 12: 1 Safety Concepts Overview 2 Hazard
Page 13 and 14: Overview 3 Protection Layers Method
Page 15 and 16: Hazard and Risk Analysis 5 Hazard a
Page 17 and 18: Hazard and Risk Analysis 7 Sample S
Page 19 and 20: Hazard and Risk Analysis 9 Safety L
Page 21 and 22: Hazard and Risk Analysis 11 • Eac
Page 23 and 24: Safety Standards 13 CAN/CSA-C22.2 N
Page 25 and 26: 2 Application Guidelines Overview 1
Page 27 and 28: General Guidelines 17 General Guide
Page 29 and 30: Guidelines for Triconex Controllers
Page 41 and 42: 3 Fault Management Overview 32 Syst
Page 43 and 44: System Diagnostics 33 System Diagno
Page 45 and 46: Operating Modes 35 Operating Modes
Page 47 and 48: Module Diagnostics 37 Analog Output
Page 49 and 50: Module Diagnostics 39 Calculation f
Page 51 and 52: Module Diagnostics 41 External Comm
Page 53 and 54: 4 Application Development Developme
Page 55 and 56: Development Guidelines 45 Array Ind
Page 57 and 58: Setting Scan Time 47 application. T
Page 59: Sample Safety-Shutdown Programs 49
Page 63 and 64: Sample Safety-Shutdown Programs 53
Page 69 and 70: Alarm Usage 59 Alarm Usage To imple
Page 71 and 72: A Triconex Peer-to-Peer Communicati
Page 73 and 74: Data Transfer Time 63 Data Transfer
Page 75 and 76: Data Transfer Time 65 A typical dat
Page 77 and 78: Examples of Peer-to-Peer Applicatio
Page 79 and 80: B HART Communication Overview 70 HA
Page 81 and 82: HART Position Paper from TÜV Rhein
Page 89 and 90: C Safety-Critical Function Blocks O
Page 91 and 92: SYS_CRITICAL_IO 81 SYS_CRITICAL_IO
Page 93 and 94: SYS_CRITICAL_IO 83 Library Trident
Page 95 and 96: SYS_CRITICAL_IO 85 END_IF ; PREVIOU
Page 97 and 98: SYS_SHUTDOWN 87 Output Parameters (
Page 99 and 100: SYS_SHUTDOWN 89 * the safety system
Page 101 and 102: SYS_SHUTDOWN 91 ALARM_DISABLED_POIN
Page 103 and 104: SYS_VOTE_MODE 93 Example For shutdo
Page 105 and 106: Index A abbreviations, list of viii
Page 107 and 108: Index 97 N NFPA 85 12 O operating m
Page 110:
Invensys Operations Management 5601
show all

Safety Considerations Guide for Triconex General ... - ICEWeb

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?