Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

More documents

Recommendations

Info

46 Module DiagnosticsMain Processor and TriBusEach Main Processor (MP) Module uses memory data comparison between itselfand the other MPs to ensure that the control program executes correctly on eachscan. Each MP transfers its input point data to the other two MPs via the TriBusduring each scan. Each MP then votes the input data and provides voted data to thecontrol program. The results of the control program (outputs), including all internalvariables, are transferred by the TriBus. If a mis-compare is detected, specialalgorithms are used to isolate the faulting MP. The faulting MP enters the fail-safestate and is ignored by the remaining MPs. Background diagnostics test MPmemory and compare control program instructions and internal status.The integrity of the TriBus is continuously monitored and verified independentlyby each MP. All TriBus faults are detected within the scan associated with theTriBus transfer. Fault isolation hardware and firmware causes the MP with thefaulting TriBus to enter the fail-safe state.An independent watchdog ensures that the control program and diagnosticsexecute within 500 milliseconds seconds (the watchdog period). If an MP fails toexecute the scan, the watchdog forces the MP to the fail-safe state. The I/Oprocessor adds a sequential element to the MP watchdog. If an MP fails to reportthe proper sequence of execution, the I/O processor causes the MP to enter the failsafestate.External CommunicationLoss of external communication is not indicated by a system alarm. However,alarms can be generated by using:• Semaphore flags• System attributes! CAUTIONExternal communications are intended for transporting non-safety-critical data.The guidelines outlined in section “Using Serial Communication” on page 32should be followed in SIS applications.Semaphore FlagsEstablish a semaphore between a controller and an external device by using a timerfunction block to evaluate the changing state of semaphore flags.Tricon Safety Considerations Guide
Module Diagnostics 47System AttributesSystem attributes can be used to generate an alarm when a communication link islost.For more information about communication alarms, see the TriStation 1131Developer’s Guide for Tricon Systems. See also the following relevant manuals:• Advanced Communication Module User's Guide• Enhanced Intelligent Communication Modules User's Manual• Hiway Interface Module User's Guide• Network Communication Module User's Guide• Safety Manager Module User's Guide• Tricon DDE Server User's Guide• Tricon System Access Application Programmer's Reference• Tricon System Aliases Reference Manual• Tricon Planning & Installation Guide• TriStation 1131 Triconex LibrariesChapter 3Fault Management
Page 1 and 2:
TriconVersion 9Safety Consideration
Page 3:
AcknowledgementTriconex acknowledge
Page 6 and 7:
viRelated DocumentsRelated Document
Page 8 and 9:
viiiHow to Contact TriconexHow to C
Page 10:
xTrainingFor Turbomachinery Systems
Page 13 and 14: xiCONTENTSAbout This Guide ........
Page 15 and 16: xiiiAnalog Input Module Alarms ....
Page 17 and 18: CHAPTER 1Safety ConceptsThis chapte
Page 19 and 20: Safety Overview 3Protection LayersT
Page 21 and 22: Hazard and Risk Analysis 5Hazard an
Page 23 and 24: Hazard and Risk Analysis 7Completio
Page 25 and 26: Hazard and Risk Analysis 9Equation
Page 27 and 28: Hazard and Risk Analysis 11Flowchar
Page 29 and 30: Hazard and Risk Analysis 13Some key
Page 31 and 32: Safety Standards 15Safety Standards
Page 33 and 34: Safety Standards 17Application-Spec
Page 35 and 36: CHAPTER 2Application GuidelinesThis
Page 37 and 38: General Guidelines 21• Under cert
Page 39 and 40: Guidelines for Tricon Controllers 2
Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
Page 55 and 56: System Diagnostics 39System Diagnos
Page 57 and 58: Operating Modes 41Operating ModesEa
Page 59 and 60: Module Diagnostics 43Module Diagnos
Page 61: Module Diagnostics 45Relay Output M
Page 65 and 66: CHAPTER 4Application DevelopmentThi
Page 67 and 68: Important TriStation Commands 51Imp
Page 69 and 70: Setting Scan Time 53Setting Scan Ti
Page 71 and 72: Sample Safety-Shutdown Programs 55S
Page 73 and 74: Sample Safety-Shutdown Programs 57I
Page 75 and 76: Sample Safety-Shutdown Programs 59A
Page 77 and 78: Sample Safety-Shutdown Programs 61P
Page 79 and 80: Sample Safety-Shutdown Programs 63O
Page 81 and 82: Sample Safety-Shutdown Programs 65D
Page 83 and 84: Sample Safety-Shutdown Programs 67P
Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
Page 87 and 88: Data Transfer Time 71ParameterTS =S
Page 89 and 90: Examples of Peer-to-Peer Applicatio
Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
Page 99 and 100: TR_SHUTDOWN Function Block 83Parame
Page 101 and 102: TR_SHUTDOWN Function Block 85Relate
Page 103 and 104: TR_SHUTDOWN Function Block 87* Exam
Page 105 and 106: TR_SHUTDOWN Function Block 89TIMER_
Page 107 and 108: TR_VOTE_MODE Function Block 91Param
Page 109 and 110: TR_VOTE_MODE Function Block 93Appen
Page 111 and 112: APPENDIX BShutdown Function BlocksT
Page 113 and 114:
TR_CRITICAL_IO Function Block 974 R
Page 115 and 116:
TR_CRITICAL_IO Function Block 99Rel
Page 117 and 118:
TR_CRITICAL_IO Function Block 101*
Page 119 and 120:
TR_SHUTDOWN Function Block 103TR_SH
Page 121 and 122:
TR_SHUTDOWN Function Block 105Param
Page 123 and 124:
TR_SHUTDOWN Function Block 107Struc
Page 125 and 126:
TR_SHUTDOWN Function Block 109IF CI
Page 127 and 128:
TR_VOTE_MODE Function Block 111TR_V
Page 129 and 130:
TR_VOTE_MODE Function Block 113Stru
Page 131 and 132:
Index 115IndexAactual scan time 53a
Page 133 and 134:
Index 117Modbus master functions 25
Page 135 and 136:
Index 119timescan 53TMR architectur
show all

Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?