Safety Considerations Guide for Trident v2 Systems - TUV ...

More documents

Recommendations

Info

22 Chapter 2 Application Guidelines Guidelines for Triconex Controllers This section provides information about industry guidelines that are specific to Triconex controllers when used as a PES in an SIS: • Safety-Critical Modules on page 22 • Safety-Shutdown on page 23 • Response Time and Scan Time on page 23 • Disabled Points Alarm on page 23 • Disabled Output Voter Diagnostic on page 23 • Download All at Completion of Project on page 23 • Modbus Master Functions on page 23 • Triconex Peer-to-Peer Communication on page 23 • SIL Capability 3 Guidelines on page 25 • Periodic Offline Test Interval Guidelines on page 26 • Project Change and Control on page 26 • Maintenance Overrides on page 27 • Safety Controller Boundary on page 30 Safety-Critical Modules It is recommended that only the following modules be used for safety-critical applications: • Main Processor Module • Communication Module (only when using protocols defined for safety-critical applications) • Analog Input Module • Analog Input/Digital Input Module • Analog Output Modules • Digital Input Modules • Digital Output Modules • Pulse Input Modules The Solid-State Relay Output Module is recommended for non-safety-critical points only. Safety Considerations Guide for Trident v2 Systems
Safety-Shutdown Guidelines for Triconex Controllers 23 A safety application should include a network that initiates a safe shutdown of the process being controlled when a controller operates in a degraded mode for a specified maximum time. The Triconex Library provides two function blocks to simplify programming a safety-shutdown application: SYS_SHUTDOWN and SYS_CRITICAL_IO. To see the Structured Text code for these function blocks, see Appendix C, Safety-Critical Function Blocks. For more information on safety-shutdown networks, see Sample Safety-Shutdown Programs on page 51. Response Time and Scan Time Scan time must be set below 50 percent of the required response time. If scan time is greater than 50 percent, an alarm should be available. Disabled Points Alarm A project should not contain disabled points unless there is a specific reason for disabling them, such as initial testing. An alarm should be available to alert the operator that a point is disabled. Disabled Output Voter Diagnostic For safety programs, disabling the Output Voter Diagnostics is not recommended; however, if it is required due to process interference concerns, it can be done if, and only if, the DO is proof tested every three to six months. Download All at Completion of Project When development and testing of a safety application is completed, use the Download All command on the Controller Panel to completely re-load the application to the controller. Modbus Master Functions Modbus Master functions are designed for use with non-critical I/O points only. These functions should not be used for safety-critical I/O points or for transferring safety-critical data using the MBREAD and MBWRITE functions. Triconex Peer-to-Peer Communication Triconex Peer-to-Peer communication enables Triconex controllers (also referred to as nodes) to send and receive information. You should use a redundant Peer-to-Peer network for safetycritical data. If a node sends critical data to another node that makes safety-related decisions, you must ensure that the application on the receiving node can determine whether it has received new data. Safety Considerations Guide for Trident v2 Systems
Page 1 and 2: Trident v2 Systems Safety Considera
Page 3 and 4: Contents Preface vii Summary of Sec
Page 5 and 6: Contents v Partitioned Processes. .
Page 7 and 8: Preface This guide provides informa
Page 9 and 10: • All other requests are handled
Page 11 and 12: 1 Safety Concepts Overview 2 Hazard
Page 13 and 14: Protection Layers Methods that prov
Page 15 and 16: Hazard and Risk Analysis Hazard and
Page 17 and 18: Sample SIL Calculation Hazard and R
Page 19 and 20: Safety Life Cycle Model Hazard and
Page 21 and 22: Hazard and Risk Analysis 11 • Eac
Page 23 and 24: CAN/CSA-C22.2 No. 61010-1-04 Safety
Page 25 and 26: 2 Application Guidelines Overview 1
Page 27 and 28: General Guidelines This section des
Page 29 and 30: General Guidelines 19 Safety Measur
Page 31: Emergency Shutdown Systems The safe
Page 35 and 36: Guidelines for Triconex Controllers
Page 43 and 44: 3 Fault Management Overview 34 Syst
Page 45 and 46: System Diagnostics System Diagnosti
Page 47 and 48: Operating Modes Each input or outpu
Page 49 and 50: Analog Output (AO) Modules Module D
Page 51 and 52: Calculation for Diagnostic Fault Re
Page 53 and 54: External Communication Module Diagn
Page 55 and 56: 4 Application Development Developme
Page 57 and 58: Array Index Errors Infinite Loops D
Page 59 and 60: Setting Scan Time 49 application. T
Page 61 and 62: Sample Safety-Shutdown Programs Sam
Page 63 and 64: Sample Safety-Shutdown Programs 53
Page 65 and 66: When Some I/O Modules Are Safety-Cr
Page 67 and 68: Sample Safety-Shutdown Programs 57
Page 69 and 70: Partitioned Processes Sample Safety
Page 71 and 72: Alarm Usage Alarm Usage 61 To imple
Page 73 and 74: A Triconex Peer-to-Peer Communicati
Page 75 and 76: Data Transfer Time Data Transfer Ti
Page 77 and 78: Data Transfer Time 67 A typical dat
Page 79 and 80: Examples of Peer-to-Peer Applicatio
Page 81 and 82: B HART Communication Overview 72 HA
Page 83 and 84:
2008-04-01 Automation, Software and
Page 85 and 86:
2008-04-01 HART Position Paper from
Page 87 and 88:
2008-04-01 A possible impact to the
Page 89 and 90:
2008-04-01 HART Position Paper from
Page 91 and 92:
C Safety-Critical Function Blocks O
Page 93 and 94:
SYS_CRITICAL_IO Accumulates the sta
Page 95 and 96:
Library Trident and Tri-GP (TRDLIB)
Page 97 and 98:
END_IF ; PREVIOUS_RESET := RESET ;
Page 99 and 100:
Output Parameters (continued) Name
Page 101 and 102:
SYS_SHUTDOWN 91 * the safety system
Page 103 and 104:
ALARM_DISABLED_POINTS := MPX.POINTS
Page 105 and 106:
Example For shutdown examples, see
Page 107 and 108:
A abbreviations, list of viii actua
Page 109 and 110:
message errors, external communicat
Page 112:
Invensys Operations Management 5601
show all

Safety Considerations Guide for Trident v2 Systems - TUV ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?