Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

More documents

Recommendations

Info

42 Operating ModesAlso, during each execution of the control program, each channel independentlyverifies the:• Integrity of the data path between the MPs• Proper voting of all input values• Proper evaluation of the control program• Calculated value of each output pointTricon Safety Considerations Guide
Module Diagnostics 43Module DiagnosticsEach system component detects and reports operational faults.Digital Input ModulesDigital Input Module points typically use a combination of comparison and forceto-valuediagnostics (FVD). Under system control, each channel is independentlycompared against the measured value of all channels. If a mismatch is found, analarm is set. Using the integral FVD capability, each point can be independentlyverified for its ability to accurately detect a transition to the opposite state. Achannel that has detected a fault on a digital input point votes that point to be deenergized.These diagnostics are executed independently by each channel, thusassuring nearly 100% fault coverage and fail-safe operation under all single-fault,and most common, multiple-fault scenarios.Digital Input Module AlarmsDigital Input Module faults are reported to the control program, and these alarmscan be used to increase availability during specific multiple fault conditions. Lossof logic power is reported to the control program.Digital Output ModulesDigital Output Modules use output voter diagnostics (OVD). Under systemcontrol, each output point is commanded sequentially to both the energized and deenergizedstates and the forced state is maintained until the value is detected by thesystem or a time-out occurs (500 microseconds, typical; 2 milliseconds, worstcase). Using the integral OVD capability, each point can be independently verifiedfor its ability to a transition to either state. The OVD is executed in TMR mode,thus assuring nearly 100% fault coverage and fail-safe operation under all singlefaultscenarios.Digital Output Module AlarmsDigital Output Module faults are reported to the control program and can be usedto increase availability during specific multiple fault conditions. Loss of fieldpower or logic power is reported to the control program.The inability of a Digital Output Module to control an output point is reported tothe control program as a Load/Fuse alarm. This condition can result from a loss ofChapter 3Fault Management
Page 1 and 2:
TriconVersion 9Safety Consideration
Page 3:
AcknowledgementTriconex acknowledge
Page 6 and 7:
viRelated DocumentsRelated Document
Page 8 and 9: viiiHow to Contact TriconexHow to C
Page 10: xTrainingFor Turbomachinery Systems
Page 13 and 14: xiCONTENTSAbout This Guide ........
Page 15 and 16: xiiiAnalog Input Module Alarms ....
Page 17 and 18: CHAPTER 1Safety ConceptsThis chapte
Page 19 and 20: Safety Overview 3Protection LayersT
Page 21 and 22: Hazard and Risk Analysis 5Hazard an
Page 23 and 24: Hazard and Risk Analysis 7Completio
Page 25 and 26: Hazard and Risk Analysis 9Equation
Page 27 and 28: Hazard and Risk Analysis 11Flowchar
Page 29 and 30: Hazard and Risk Analysis 13Some key
Page 31 and 32: Safety Standards 15Safety Standards
Page 33 and 34: Safety Standards 17Application-Spec
Page 35 and 36: CHAPTER 2Application GuidelinesThis
Page 37 and 38: General Guidelines 21• Under cert
Page 39 and 40: Guidelines for Tricon Controllers 2
Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
Page 55 and 56: System Diagnostics 39System Diagnos
Page 57: Operating Modes 41Operating ModesEa
Page 61 and 62: Module Diagnostics 45Relay Output M
Page 63 and 64: Module Diagnostics 47System Attribu
Page 65 and 66: CHAPTER 4Application DevelopmentThi
Page 67 and 68: Important TriStation Commands 51Imp
Page 69 and 70: Setting Scan Time 53Setting Scan Ti
Page 71 and 72: Sample Safety-Shutdown Programs 55S
Page 73 and 74: Sample Safety-Shutdown Programs 57I
Page 75 and 76: Sample Safety-Shutdown Programs 59A
Page 77 and 78: Sample Safety-Shutdown Programs 61P
Page 79 and 80: Sample Safety-Shutdown Programs 63O
Page 81 and 82: Sample Safety-Shutdown Programs 65D
Page 83 and 84: Sample Safety-Shutdown Programs 67P
Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
Page 87 and 88: Data Transfer Time 71ParameterTS =S
Page 89 and 90: Examples of Peer-to-Peer Applicatio
Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
Page 99 and 100: TR_SHUTDOWN Function Block 83Parame
Page 101 and 102: TR_SHUTDOWN Function Block 85Relate
Page 103 and 104: TR_SHUTDOWN Function Block 87* Exam
Page 105 and 106: TR_SHUTDOWN Function Block 89TIMER_
Page 107 and 108: TR_VOTE_MODE Function Block 91Param
Page 109 and 110:
TR_VOTE_MODE Function Block 93Appen
Page 111 and 112:
APPENDIX BShutdown Function BlocksT
Page 113 and 114:
TR_CRITICAL_IO Function Block 974 R
Page 115 and 116:
TR_CRITICAL_IO Function Block 99Rel
Page 117 and 118:
TR_CRITICAL_IO Function Block 101*
Page 119 and 120:
TR_SHUTDOWN Function Block 103TR_SH
Page 121 and 122:
TR_SHUTDOWN Function Block 105Param
Page 123 and 124:
TR_SHUTDOWN Function Block 107Struc
Page 125 and 126:
TR_SHUTDOWN Function Block 109IF CI
Page 127 and 128:
TR_VOTE_MODE Function Block 111TR_V
Page 129 and 130:
TR_VOTE_MODE Function Block 113Stru
Page 131 and 132:
Index 115IndexAactual scan time 53a
Page 133 and 134:
Index 117Modbus master functions 25
Page 135 and 136:
Index 119timescan 53TMR architectur
show all

Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?