Safety Considerations Guide for Triconex General ... - ICEWeb
Safety Considerations Guide for Triconex General ... - ICEWeb
Safety Considerations Guide for Triconex General ... - ICEWeb
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
56 Chapter 4 Application Development<br />
Defining Function Blocks<br />
You can create your own user-defined function blocks <strong>for</strong> a safety-critical module.<br />
Procedure<br />
1 Copy the example EX02_CRITICAL_IO in the TdTUV.pt2 sample project provided with<br />
the TriStation 1131 Developer’s Workbench.<br />
2 Edit the lines following the comment “Include here all safety-critical I/O modules.”<br />
Each line calls the safety-critical I/O (SCIO) function block <strong>for</strong> one safety-critical I/O<br />
module.<br />
Example<br />
(*****************************************************************)<br />
(* Include here all safety-critical I/O modules: *)<br />
SCIO( IOP:=1,SLOT:=1, APP:=DE_ENERGIZED, RELAY_OK:=FALSE ): (*DI*)<br />
SCIO( IOP:=1,SLOT:=2, APP:=RELAY, RELAY_OK:=RELAY1_OK); (*DO*)<br />
SCIO( IOP:=1,SLOT:=3, APP:=ENERGIZED, RELAY_OK:=FALSE ); (*DO*)<br />
(* IOP:=1,SLOT:=4, NOT CRITICAL) *) (*RO*)<br />
3 Enter the correct IOP number, SLOT number, APP (application), and RELAY_OK<br />
parameters <strong>for</strong> the safety-critical I/O module.<br />
Table 15<br />
Parameters <strong>for</strong> <strong>Safety</strong>-Critical Modules<br />
Application Type<br />
(App)<br />
RELAY<br />
(de-energized to trip<br />
with relay)<br />
RELAY<br />
(de-energized to trip<br />
with relay)<br />
Relay_OK<br />
Parameter<br />
True<br />
False<br />
Description<br />
A voter fault degrades the mode to dual.<br />
The relay provides a third channel <strong>for</strong><br />
shutdown so that if an output voter fails,<br />
two independent channels (relay and<br />
other output voter channel) remain that<br />
can de-energize the output.<br />
A voter fault degrades the mode to<br />
single. A non-voter fault degrades the<br />
mode to dual.<br />
DE-ENERGIZED<br />
(de-energized to trip<br />
with no relay)<br />
— A voter fault degrades the mode to<br />
single. A non-voter fault degrades the<br />
mode to dual.<br />
<strong>Safety</strong> <strong>Considerations</strong> <strong>Guide</strong> <strong>for</strong> <strong>Triconex</strong> <strong>General</strong> Purpose v2 Systems