Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com
Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com
62 Sample Safety-Shutdown ProgramsInput ParametersThe table below describes the input parameters for the TR_SHUTDOWN function block.ParameterCIIO_COIO_TMRIO_GE_DUALIO_GE_SINGLEIO_NO_VOTER_FLTSIO_ERRORMAX_TIME_DUALMAX_TIME_SINGLEMAX_SCAN_TIMEDescriptionControl inIf CI is false, then CO is false—no change in the output valueIf CI is true and ERROR_NUM is 0, then CO is trueCritical I/O control outAll critical I/O points are operating in triple modular redundant modeAll critical I/O points are operating are operating in dual or TMR modeAll critical I/O points are operating are operating in single, dual, or TMR modeIf true, then no voter faults exist on a critical I/O moduleIf false, then a voter fault exists on a critical I/O moduleError number—zero indicates no error. Non-zero indicates a programming orconfiguration errorMaximum time with only two channels operatingMaximum time with only one channel operating50% of the maximum response timeTricon Safety Considerations Guide
Sample Safety-Shutdown Programs 63Output ParametersThe table below describes the output parameters for the TR_SHUTDOWN function block.ParameterCOOPERATINGTMRDUALSINGLZEROTIMER_RUNNINGTIME_LEFTALARM_PROGRAMMING_PERMITTEDALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_DISABLED_POINTSERROR_NUMDescriptionControl outWhen OPERATING is true, all safety-critical modules areoperating properlyWhen OPERATING is false, the time in degraded operationexceeds the specified limits; therefore, the control programshould shut down the processSystem is operating in triple modular redundant modeAt least one safety-critical point is controlled by two channelsAt least one safety-critical point is controlled by one channelAt least one safety-critical point is not controlled by anychannelTime left to shutdown is decreasingTime remaining before shutdownTrue if application changes are permittedTrue if remote-host writes are enabledTrue if actual scan time is greater than MAX_SCAN_TIMETrue if one or more points are disabledError Number:0 = No error1 = Error in maximum time2 = I/O function block error—IO_ERROR is non-zero3 = Function block error—system status or MP StatusChapter 4Application Development
- Page 27 and 28: Hazard and Risk Analysis 11Flowchar
- Page 29 and 30: Hazard and Risk Analysis 13Some key
- Page 31 and 32: Safety Standards 15Safety Standards
- Page 33 and 34: Safety Standards 17Application-Spec
- Page 35 and 36: CHAPTER 2Application GuidelinesThis
- Page 37 and 38: General Guidelines 21• Under cert
- Page 39 and 40: Guidelines for Tricon Controllers 2
- Page 41 and 42: Guidelines for Tricon Controllers 2
- Page 43 and 44: Guidelines for Tricon Controllers 2
- Page 45 and 46: Guidelines for Tricon Controllers 2
- Page 47 and 48: Guidelines for Tricon Controllers 3
- Page 49 and 50: Guidelines for Tricon Controllers 3
- Page 51 and 52: Guidelines for Tricon Controllers 3
- Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
- Page 55 and 56: System Diagnostics 39System Diagnos
- Page 57 and 58: Operating Modes 41Operating ModesEa
- Page 59 and 60: Module Diagnostics 43Module Diagnos
- Page 61 and 62: Module Diagnostics 45Relay Output M
- Page 63 and 64: Module Diagnostics 47System Attribu
- Page 65 and 66: CHAPTER 4Application DevelopmentThi
- Page 67 and 68: Important TriStation Commands 51Imp
- Page 69 and 70: Setting Scan Time 53Setting Scan Ti
- Page 71 and 72: Sample Safety-Shutdown Programs 55S
- Page 73 and 74: Sample Safety-Shutdown Programs 57I
- Page 75 and 76: Sample Safety-Shutdown Programs 59A
- Page 77: Sample Safety-Shutdown Programs 61P
- Page 81 and 82: Sample Safety-Shutdown Programs 65D
- Page 83 and 84: Sample Safety-Shutdown Programs 67P
- Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
- Page 87 and 88: Data Transfer Time 71ParameterTS =S
- Page 89 and 90: Examples of Peer-to-Peer Applicatio
- Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
- Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
- Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
- Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
- Page 99 and 100: TR_SHUTDOWN Function Block 83Parame
- Page 101 and 102: TR_SHUTDOWN Function Block 85Relate
- Page 103 and 104: TR_SHUTDOWN Function Block 87* Exam
- Page 105 and 106: TR_SHUTDOWN Function Block 89TIMER_
- Page 107 and 108: TR_VOTE_MODE Function Block 91Param
- Page 109 and 110: TR_VOTE_MODE Function Block 93Appen
- Page 111 and 112: APPENDIX BShutdown Function BlocksT
- Page 113 and 114: TR_CRITICAL_IO Function Block 974 R
- Page 115 and 116: TR_CRITICAL_IO Function Block 99Rel
- Page 117 and 118: TR_CRITICAL_IO Function Block 101*
- Page 119 and 120: TR_SHUTDOWN Function Block 103TR_SH
- Page 121 and 122: TR_SHUTDOWN Function Block 105Param
- Page 123 and 124: TR_SHUTDOWN Function Block 107Struc
- Page 125 and 126: TR_SHUTDOWN Function Block 109IF CI
- Page 127 and 128: TR_VOTE_MODE Function Block 111TR_V
62 Sample <strong>Safety</strong>-Shutdown ProgramsInput ParametersThe table below describes the input parameters for the TR_SHUTDOWN function block.ParameterCIIO_COIO_TMRIO_GE_DUALIO_GE_SINGLEIO_NO_VOTER_FLTSIO_ERRORMAX_TIME_DUALMAX_TIME_SINGLEMAX_SCAN_TIMEDescriptionControl inIf CI is false, then CO is false—no change in the output valueIf CI is true and ERROR_NUM is 0, then CO is trueCritical I/O control outAll critical I/O points are operating in triple modular redundant modeAll critical I/O points are operating are operating in dual or TMR modeAll critical I/O points are operating are operating in single, dual, or TMR modeIf true, then no voter faults exist on a critical I/O moduleIf false, then a voter fault exists on a critical I/O moduleError number—zero indicates no error. Non-zero indicates a programming orconfiguration errorMaximum time with only two channels operatingMaximum time with only one channel operating50% of the maximum response time<strong>Tricon</strong> <strong>Safety</strong> <strong>Considerations</strong> <strong>Guide</strong>
Change language