Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

More documents

Recommendations

Info

32 Guidelines for Tricon ControllersMaintenance OverridesThree methods can be used to check safety-critical devices connected tocontrollers:• Special switches are connected to inputs to a controller that deactivate theactuators and sensors undergoing maintenance. The maintenance conditionis handled in the logic of the control program.• Sensors and actuators are electrically disconnected from a controller andmanually checked using special measures.• Serial communication to a controller activates the maintenance overridecondition. This method is useful when space is limited and the maintenanceconsole should be integrated with the operator display.Using Serial CommunicationFor maintenance overrides, two options for serial connection are available:• DCS connection using Modbus RTU protocol (or another approved serialprotocol)• TriStation PC connection, which requires additional, industry-standardsafety measures in a controller to prevent downloading a program changeduring maintenance intervals. For more information on TriStation, seesection “Alarm Usage” on page 68.Tricon Safety Considerations Guide
Guidelines for Tricon Controllers 33Design RequirementsThe following table describes design requirements for handling maintenanceoverrides when using serial communication.Design RequirementsControl program logic and thecontroller configuration determinewhether the desired signal can beoverridden.Control program logic and/orsystem configuration specifywhether simultaneous overriding inindependent parts of theapplication is acceptable.Controller activates the override.The operator should confirm theoverride condition.Direct overrides on inputs andoutputs are not allowed, but shouldbe checked and implemented inrelation to the application.Multiple overrides in a controllerare allowed as long as only oneoverride applies to each safetycriticalgroup. The controller alarmshould not be overridden.DCS warns the operator about anoverride condition. The operatorcontinues to receive warnings untilthe override is removed.A second way to remove themaintenance override conditionshould be availableIf urgent, a maintenance engineermay remove the override using ahard-wired switch.DCSProject Engineer,CommissionerProject EngineerOperator,Maintenance EngineerProject EngineerProject Engineer,CommissionerProject EngineerResponsible PersonTriStationProject Engineer,CommissionerProject Engineer,Type ApprovalMaintenance Engineer,Type ApprovalProject Engineer,Type ApprovalN/AMaintenance Engineer,Type ApprovalChapter 2Application Guidelines
Page 1 and 2: TriconVersion 9Safety Consideration
Page 3: AcknowledgementTriconex acknowledge
Page 6 and 7: viRelated DocumentsRelated Document
Page 8 and 9: viiiHow to Contact TriconexHow to C
Page 10: xTrainingFor Turbomachinery Systems
Page 13 and 14: xiCONTENTSAbout This Guide ........
Page 15 and 16: xiiiAnalog Input Module Alarms ....
Page 17 and 18: CHAPTER 1Safety ConceptsThis chapte
Page 19 and 20: Safety Overview 3Protection LayersT
Page 21 and 22: Hazard and Risk Analysis 5Hazard an
Page 23 and 24: Hazard and Risk Analysis 7Completio
Page 25 and 26: Hazard and Risk Analysis 9Equation
Page 27 and 28: Hazard and Risk Analysis 11Flowchar
Page 29 and 30: Hazard and Risk Analysis 13Some key
Page 31 and 32: Safety Standards 15Safety Standards
Page 33 and 34: Safety Standards 17Application-Spec
Page 35 and 36: CHAPTER 2Application GuidelinesThis
Page 37 and 38: General Guidelines 21• Under cert
Page 39 and 40: Guidelines for Tricon Controllers 2
Page 47: Guidelines for Tricon Controllers 3
Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
Page 55 and 56: System Diagnostics 39System Diagnos
Page 57 and 58: Operating Modes 41Operating ModesEa
Page 59 and 60: Module Diagnostics 43Module Diagnos
Page 61 and 62: Module Diagnostics 45Relay Output M
Page 63 and 64: Module Diagnostics 47System Attribu
Page 65 and 66: CHAPTER 4Application DevelopmentThi
Page 67 and 68: Important TriStation Commands 51Imp
Page 69 and 70: Setting Scan Time 53Setting Scan Ti
Page 71 and 72: Sample Safety-Shutdown Programs 55S
Page 73 and 74: Sample Safety-Shutdown Programs 57I
Page 75 and 76: Sample Safety-Shutdown Programs 59A
Page 77 and 78: Sample Safety-Shutdown Programs 61P
Page 79 and 80: Sample Safety-Shutdown Programs 63O
Page 81 and 82: Sample Safety-Shutdown Programs 65D
Page 83 and 84: Sample Safety-Shutdown Programs 67P
Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
Page 87 and 88: Data Transfer Time 71ParameterTS =S
Page 89 and 90: Examples of Peer-to-Peer Applicatio
Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
Page 99 and 100:
TR_SHUTDOWN Function Block 83Parame
Page 101 and 102:
TR_SHUTDOWN Function Block 85Relate
Page 103 and 104:
TR_SHUTDOWN Function Block 87* Exam
Page 105 and 106:
TR_SHUTDOWN Function Block 89TIMER_
Page 107 and 108:
TR_VOTE_MODE Function Block 91Param
Page 109 and 110:
TR_VOTE_MODE Function Block 93Appen
Page 111 and 112:
APPENDIX BShutdown Function BlocksT
Page 113 and 114:
TR_CRITICAL_IO Function Block 974 R
Page 115 and 116:
TR_CRITICAL_IO Function Block 99Rel
Page 117 and 118:
TR_CRITICAL_IO Function Block 101*
Page 119 and 120:
TR_SHUTDOWN Function Block 103TR_SH
Page 121 and 122:
TR_SHUTDOWN Function Block 105Param
Page 123 and 124:
TR_SHUTDOWN Function Block 107Struc
Page 125 and 126:
TR_SHUTDOWN Function Block 109IF CI
Page 127 and 128:
TR_VOTE_MODE Function Block 111TR_V
Page 129 and 130:
TR_VOTE_MODE Function Block 113Stru
Page 131 and 132:
Index 115IndexAactual scan time 53a
Page 133 and 134:
Index 117Modbus master functions 25
Page 135 and 136:
Index 119timescan 53TMR architectur
show all

Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

Create successful ePaper yourself

Delete template?

Save as template?