Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

More documents

Recommendations

Info

60 Sample Safety-Shutdown ProgramsSome I/O Modules Safety-CriticalFor some applications, not all modules may be critical to a process. For example,an output module that interfaces to the status indicators on a local panel is usuallynot critical to a process.The EX02_SHUTDOWN sample program shows how to increase systemavailability by detecting the status of safety-critical modules.The user-definedfunction block CRITICAL_IO checks the safety-critical I/O modules. TheCRITICAL_IO Outputs are connected to the inputs of the CRITICAL_MODULESfunction block. (The sample program is an element of project ExTUV.pt2 found onthe TriStation CD. The default location of the project is C:\ProgramFiles\Triconex\TS1131\_Tricon\Examples.)When the output CRITICAL_MODULES_OPERATING is true, all criticalmodules are operating properly. The input MAX_TIME_DUAL specifies themaximum time allowed with two channels operating (with no connection defaultsto 40000 days). The input MAX_TIME_SINGLE Specifies the maximum timeallowed with one channel operating (3 days in the example).Note In typical applications, continued operation in dual mode is restricted to1500 hours (two months).Continued operation in single mode is restricted to 72 hours for SIL/AK5 and onehour for SIL/AK6 guidelines.When CRITICAL_MODULES_OPERATING is false, the time in degradedoperation exceeds the specified limits; therefore, the control program should shutdown the plant.! CAUTIONThe EX02_SHUTDOWN sample program does not handle detected field faults,rare combinations of faults detected as field faults, or output voter faults hidden byfield faults. The application program, not the TR_SHUTDOWN function block,must read the NO_FLD_FLTS module status or FLD_OK point status to providethe required application-specific action.Tricon Safety Considerations Guide
Sample Safety-Shutdown Programs 61Program EX02_SHUTDOWNCRITICAL_IOEX02_CRITICAL_IOCIRELAY1_OK001COTMRGE_DUALGE_SINGLENO_VOTER_FLTSERRORT#1500hT#3dT#400msCRITICAL_MODULESTR_SHUTDOWNCICOIO_COOPERATIINGIO_TMRTMRIO_GE_DUALDUALIO_GE_SINGLESINGLIO_NO_VOTER_FLTSZEROIO_ERRORTIMER_RUNNINGMAX_TIME_DUALTIME_LEFTMAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTEDMAX_SCAN_TIMEALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_DISABLED_POINTSERROR002CRITICAL_MODULES_OPERATINGALARM_PROGRAMMING_PERMITTEDALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_DISABLED_POINTSChapter 4Application Development
Page 1 and 2:
TriconVersion 9Safety Consideration
Page 3:
AcknowledgementTriconex acknowledge
Page 6 and 7:
viRelated DocumentsRelated Document
Page 8 and 9:
viiiHow to Contact TriconexHow to C
Page 10:
xTrainingFor Turbomachinery Systems
Page 13 and 14:
xiCONTENTSAbout This Guide ........
Page 15 and 16:
xiiiAnalog Input Module Alarms ....
Page 17 and 18:
CHAPTER 1Safety ConceptsThis chapte
Page 19 and 20:
Safety Overview 3Protection LayersT
Page 21 and 22:
Hazard and Risk Analysis 5Hazard an
Page 23 and 24:
Hazard and Risk Analysis 7Completio
Page 25 and 26: Hazard and Risk Analysis 9Equation
Page 27 and 28: Hazard and Risk Analysis 11Flowchar
Page 29 and 30: Hazard and Risk Analysis 13Some key
Page 31 and 32: Safety Standards 15Safety Standards
Page 33 and 34: Safety Standards 17Application-Spec
Page 35 and 36: CHAPTER 2Application GuidelinesThis
Page 37 and 38: General Guidelines 21• Under cert
Page 39 and 40: Guidelines for Tricon Controllers 2
Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
Page 55 and 56: System Diagnostics 39System Diagnos
Page 57 and 58: Operating Modes 41Operating ModesEa
Page 59 and 60: Module Diagnostics 43Module Diagnos
Page 61 and 62: Module Diagnostics 45Relay Output M
Page 63 and 64: Module Diagnostics 47System Attribu
Page 65 and 66: CHAPTER 4Application DevelopmentThi
Page 67 and 68: Important TriStation Commands 51Imp
Page 69 and 70: Setting Scan Time 53Setting Scan Ti
Page 71 and 72: Sample Safety-Shutdown Programs 55S
Page 73 and 74: Sample Safety-Shutdown Programs 57I
Page 75: Sample Safety-Shutdown Programs 59A
Page 79 and 80: Sample Safety-Shutdown Programs 63O
Page 81 and 82: Sample Safety-Shutdown Programs 65D
Page 83 and 84: Sample Safety-Shutdown Programs 67P
Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
Page 87 and 88: Data Transfer Time 71ParameterTS =S
Page 89 and 90: Examples of Peer-to-Peer Applicatio
Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
Page 99 and 100: TR_SHUTDOWN Function Block 83Parame
Page 101 and 102: TR_SHUTDOWN Function Block 85Relate
Page 103 and 104: TR_SHUTDOWN Function Block 87* Exam
Page 105 and 106: TR_SHUTDOWN Function Block 89TIMER_
Page 107 and 108: TR_VOTE_MODE Function Block 91Param
Page 109 and 110: TR_VOTE_MODE Function Block 93Appen
Page 111 and 112: APPENDIX BShutdown Function BlocksT
Page 113 and 114: TR_CRITICAL_IO Function Block 974 R
Page 115 and 116: TR_CRITICAL_IO Function Block 99Rel
Page 117 and 118: TR_CRITICAL_IO Function Block 101*
Page 119 and 120: TR_SHUTDOWN Function Block 103TR_SH
Page 121 and 122: TR_SHUTDOWN Function Block 105Param
Page 123 and 124: TR_SHUTDOWN Function Block 107Struc
Page 125 and 126: TR_SHUTDOWN Function Block 109IF CI
Page 127 and 128:
TR_VOTE_MODE Function Block 111TR_V
Page 129 and 130:
TR_VOTE_MODE Function Block 113Stru
Page 131 and 132:
Index 115IndexAactual scan time 53a
Page 133 and 134:
Index 117Modbus master functions 25
Page 135 and 136:
Index 119timescan 53TMR architectur
show all

Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

Create successful ePaper yourself

Delete template?

Save as template?