Safety Considerations Guide for Triconex General ... - ICEWeb

More documents

Recommendations

Info

52 Chapter 4 Application Development Table 11 Parameter Alarm Output Parameter Operation in EX01_SHUTDOWN ALARM_PROGRAMMING_PERMITTED ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS Description To remind the operator to lock out programming changes after a download change, or for applications in which download changes are not allowed, connect the ALARM_PROGRAMMING_PERMITTED output to an alarm. For applications in which remote changes are not allowed, connect the ALARM_REMOTE_ACCESS output to an alarm. Total response time depends primarily on the actual scan time. To meet the required response time of the process, set the MAX_SCAN_TIME input to less than 50% of the required response time. When the actual scan time exceeds the MAX_SCAN_TIME value, the ALARM_RESPONSE_TIME output becomes true. A project should not contain disabled points unless there is a specific reason for disabling them, such as initial testing or maintenance. To remind an operator that some points are disabled, connect the ALARM_DISABLED_POINTS output to an alarm. Safety Considerations Guide for Triconex General Purpose v2 Systems
Sample Safety-Shutdown Programs 53 When Some I/O Modules Are Safety-Critical For some applications, not all modules may be critical to a process. For example, an output module that interfaces to the status indicators on a local panel is usually not critical to a process. The EX02_SHUTDOWN sample program shows how to increase system availability by detecting the status of safety-critical modules. The user-defined function block CRITICAL_IO checks the safety-critical I/O modules. The CRITICAL_IO outputs are connected to the inputs of the CRITICAL_MODULES function block. Note The sample program is an element of project TdTUV.pt2 included as part of the TriStation 1131 software installation. The default location of the project is C:\Documents and Settings\\My Documents\Triconex\TriStation 1131 4.x\Projects. When the output CRITICAL_MODULES_OPERATING is true, all critical modules are operating properly. The input MAX_TIME_DUAL specifies the maximum time allowed with two channels operating (with no connection, defaults to 40000 days). The input MAX_TIME_SINGLE specifies the maximum time allowed with one channel operating (three days in the example). Note In typical applications, the operating time restrictions in the table on page 22 should be followed. When CRITICAL_MODULES_OPERATING is false, the time in degraded operation exceeds the specified limits; therefore, the control program should shut down the plant. CAUTION EX02_SHUTDOWN does not handle detected field faults, rare combinations of faults detected as field faults, or output voter faults hidden by field faults. The application, not the SYS_SHUTDOWN function block, must read the NO_FLD_FLTS module status or FLD_OK point status to provide the required application-specific action. Program EX02_SHUTDOWN Figure 11 EX02_SHUTDOWN Sample Program Table 12 Parameter CI IO_CO IO_TMR IO_GE_DUAL IO_GE_SINGLE Input Parameters for SYS_SHUTDOWN Function Block in EX02_SHUTDOWN Description Control In If false, then CO is false—no change in the output value If true and ERROR_NUM is 0, then CO is true Critical I/O control out All critical I/O points are operating in triple modular redundant mode All critical I/O points are operating are operating in dual or TMR mode All critical I/O points are operating are operating in single, dual, or TMR mode Safety Considerations Guide for Triconex General Purpose v2 Systems
Page 1 and 2:
Triconex General Purpose v2 Systems
Page 3 and 4:
Contents Preface vii Summary of Sec
Page 5 and 6:
Contents v Partitioned Processes. .
Page 7 and 8:
Preface This guide provides informa
Page 9 and 10:
Preface ix • All other requests a
Page 11 and 12: 1 Safety Concepts Overview 2 Hazard
Page 13 and 14: Overview 3 Protection Layers Method
Page 15 and 16: Hazard and Risk Analysis 5 Hazard a
Page 17 and 18: Hazard and Risk Analysis 7 Sample S
Page 19 and 20: Hazard and Risk Analysis 9 Safety L
Page 21 and 22: Hazard and Risk Analysis 11 • Eac
Page 23 and 24: Safety Standards 13 CAN/CSA-C22.2 N
Page 25 and 26: 2 Application Guidelines Overview 1
Page 27 and 28: General Guidelines 17 General Guide
Page 29 and 30: Guidelines for Triconex Controllers
Page 41 and 42: 3 Fault Management Overview 32 Syst
Page 43 and 44: System Diagnostics 33 System Diagno
Page 45 and 46: Operating Modes 35 Operating Modes
Page 47 and 48: Module Diagnostics 37 Analog Output
Page 49 and 50: Module Diagnostics 39 Calculation f
Page 51 and 52: Module Diagnostics 41 External Comm
Page 53 and 54: 4 Application Development Developme
Page 55 and 56: Development Guidelines 45 Array Ind
Page 57 and 58: Setting Scan Time 47 application. T
Page 59 and 60: Sample Safety-Shutdown Programs 49
Page 61: Sample Safety-Shutdown Programs 51
Page 69 and 70: Alarm Usage 59 Alarm Usage To imple
Page 71 and 72: A Triconex Peer-to-Peer Communicati
Page 73 and 74: Data Transfer Time 63 Data Transfer
Page 75 and 76: Data Transfer Time 65 A typical dat
Page 77 and 78: Examples of Peer-to-Peer Applicatio
Page 79 and 80: B HART Communication Overview 70 HA
Page 81 and 82: HART Position Paper from TÜV Rhein
Page 89 and 90: C Safety-Critical Function Blocks O
Page 91 and 92: SYS_CRITICAL_IO 81 SYS_CRITICAL_IO
Page 93 and 94: SYS_CRITICAL_IO 83 Library Trident
Page 95 and 96: SYS_CRITICAL_IO 85 END_IF ; PREVIOU
Page 97 and 98: SYS_SHUTDOWN 87 Output Parameters (
Page 99 and 100: SYS_SHUTDOWN 89 * the safety system
Page 101 and 102: SYS_SHUTDOWN 91 ALARM_DISABLED_POIN
Page 103 and 104: SYS_VOTE_MODE 93 Example For shutdo
Page 105 and 106: Index A abbreviations, list of viii
Page 107 and 108: Index 97 N NFPA 85 12 O operating m
Page 110: Invensys Operations Management 5601
show all

Safety Considerations Guide for Triconex General ... - ICEWeb

Create successful ePaper yourself

Delete template?

Save as template?