Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

More documents

Recommendations

Info

66 Sample Safety-Shutdown ProgramsPartitioned ProcessesYou can achieve greater system availability if you can allocate modules toprocesses that do not affect each other. For example, you could have two processeswith:• Outputs for one process on one DO module• Outputs for another process on a second DO module• Inputs from a shared DI module▼To partition processes:1 Partition the safety-critical I/O modules into three function blocks:• SHARED_IO for the shared safety-critical I/O modules.• PROCESS_1_IO for safety-critical I/O modules that do not affect process 2.• PROCESS_2_IO for safety-critical I/O modules that do not affect process 1.2 Connect the function blocks as shown in the EX03_SHUTDOWN example onpage 67.! CAUTIONThe EX03_SHUTDOWN sample program does not handle detected field faults,rare combinations of faults detected as field faults, or output voter faults hidden byfield faults. The application program, not the TR_SHUTDOWN function block,must read the NO_FLD_FLTS module status or FLD_OK point status to providethe required application-specific action.Tricon Safety Considerations Guide
Sample Safety-Shutdown Programs 67Program EX03_SHUTDOWNSHAREDSHARED_IOEX03_SHARED_IOCITR_SHUTDOWNCOCICOIO_COOPERATIINGRELAY1_OKTMRIO_TMRTMRGE_DUALIO_GE_DUALDUALGE_SINGLEIO_GE_SINGLESINGLNO_VOTER_FLTSIO_NO_VOTER_FLTSZERO001ERRORIO_ERRORTIMER_RUNNINGT#1500hMAX_TIME_DUALTIME_LEFTT#3dT#400msMAX_TIME_SINGLEMAX_SCAN_TIMEALARM_PROGRAMMING_PERMITTEDALARM_REMOTE_ACCESSALARM_PROGRAMMING_PERMITTEDALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_RESPONSE_TIMEALARM_DISABLED_POINTSALARM_DISABLED_POINTSERROR002PROCESS_1PROCESS_1_IOEX03_PROCESS_1_IOCICORELAY1_OKTMRGE_DUALGE_SINGLENO_VOTER_FLTS003ERRORT#1500hT#3dT#400msTR_SHUTDOWNCICOIO_COOPERATIINGIO_TMRTMRIO_GE_DUALDUALIO_GE_SINGLESINGLIO_NO_VOTER_FLTSZEROIO_ERRORTIMER_RUNNINGMAX_TIME_DUALTIME_LEFTMAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTEDMAX_SCAN_TIMEALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_DISABLED_POINTSAND005PROCESS_1_OPERATINGIf PROCESS_1_OPERATING= FALSE, shut down process1 because the time indegraded mode exceeds thespecified limit for safetycriticalmodules that affectprocess 1.004ERRORPROCESS_2_IOEX03_PROCESS_2_IOCICORELAY1_OKTMRGE_DUALGE_SINGLENO_VOTER_FLTS005ERRORT#1500hT#3dT#400msPROCESS_2TR_SHUTDOWNCICOIO_COOPERATIINGIO_TMRTMRIO_GE_DUALDUALIO_GE_SINGLESINGLIO_NO_VOTER_FLTSZEROIO_ERRORTIMER_RUNNINGMAX_TIME_DUALTIME_LEFTMAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTEDMAX_SCAN_TIMEALARM_REMOTE_ACCESSALARM_RESPONSE_TIMEALARM_DISABLED_POINTSAND006PROCESS_2_OPERATINGIf PROCESS_2_OPERATING= FALSE, shut down process2 because the time indegraded mode exceeds thespecified limit for safetycriticalmodules that affectprocess 2.006ERRORChapter 4Application Development
Page 1 and 2:
TriconVersion 9Safety Consideration
Page 3:
AcknowledgementTriconex acknowledge
Page 6 and 7:
viRelated DocumentsRelated Document
Page 8 and 9:
viiiHow to Contact TriconexHow to C
Page 10:
xTrainingFor Turbomachinery Systems
Page 13 and 14:
xiCONTENTSAbout This Guide ........
Page 15 and 16:
xiiiAnalog Input Module Alarms ....
Page 17 and 18:
CHAPTER 1Safety ConceptsThis chapte
Page 19 and 20:
Safety Overview 3Protection LayersT
Page 21 and 22:
Hazard and Risk Analysis 5Hazard an
Page 23 and 24:
Hazard and Risk Analysis 7Completio
Page 25 and 26:
Hazard and Risk Analysis 9Equation
Page 27 and 28:
Hazard and Risk Analysis 11Flowchar
Page 29 and 30:
Hazard and Risk Analysis 13Some key
Page 31 and 32: Safety Standards 15Safety Standards
Page 33 and 34: Safety Standards 17Application-Spec
Page 35 and 36: CHAPTER 2Application GuidelinesThis
Page 37 and 38: General Guidelines 21• Under cert
Page 39 and 40: Guidelines for Tricon Controllers 2
Page 53 and 54: CHAPTER 3Fault ManagementThis chapt
Page 55 and 56: System Diagnostics 39System Diagnos
Page 57 and 58: Operating Modes 41Operating ModesEa
Page 59 and 60: Module Diagnostics 43Module Diagnos
Page 61 and 62: Module Diagnostics 45Relay Output M
Page 63 and 64: Module Diagnostics 47System Attribu
Page 65 and 66: CHAPTER 4Application DevelopmentThi
Page 67 and 68: Important TriStation Commands 51Imp
Page 69 and 70: Setting Scan Time 53Setting Scan Ti
Page 71 and 72: Sample Safety-Shutdown Programs 55S
Page 73 and 74: Sample Safety-Shutdown Programs 57I
Page 75 and 76: Sample Safety-Shutdown Programs 59A
Page 77 and 78: Sample Safety-Shutdown Programs 61P
Page 79 and 80: Sample Safety-Shutdown Programs 63O
Page 81: Sample Safety-Shutdown Programs 65D
Page 85 and 86: APPENDIX APeer-to-Peer Communicatio
Page 87 and 88: Data Transfer Time 71ParameterTS =S
Page 89 and 90: Examples of Peer-to-Peer Applicatio
Page 91 and 92: TR_CRITICAL_IO Function Block 75TR_
Page 93 and 94: TR_CRITICAL_IO Function Block 77Par
Page 95 and 96: TR_CRITICAL_IO Function Block 79Str
Page 97 and 98: TR_CRITICAL_IO Function Block 81CO
Page 99 and 100: TR_SHUTDOWN Function Block 83Parame
Page 101 and 102: TR_SHUTDOWN Function Block 85Relate
Page 103 and 104: TR_SHUTDOWN Function Block 87* Exam
Page 105 and 106: TR_SHUTDOWN Function Block 89TIMER_
Page 107 and 108: TR_VOTE_MODE Function Block 91Param
Page 109 and 110: TR_VOTE_MODE Function Block 93Appen
Page 111 and 112: APPENDIX BShutdown Function BlocksT
Page 113 and 114: TR_CRITICAL_IO Function Block 974 R
Page 115 and 116: TR_CRITICAL_IO Function Block 99Rel
Page 117 and 118: TR_CRITICAL_IO Function Block 101*
Page 119 and 120: TR_SHUTDOWN Function Block 103TR_SH
Page 121 and 122: TR_SHUTDOWN Function Block 105Param
Page 123 and 124: TR_SHUTDOWN Function Block 107Struc
Page 125 and 126: TR_SHUTDOWN Function Block 109IF CI
Page 127 and 128: TR_VOTE_MODE Function Block 111TR_V
Page 129 and 130: TR_VOTE_MODE Function Block 113Stru
Page 131 and 132: Index 115IndexAactual scan time 53a
Page 133 and 134:
Index 117Modbus master functions 25
Page 135 and 136:
Index 119timescan 53TMR architectur
show all

Safety Considerations Guide, Tricon v9.0 - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?