Safety Considerations Guide for Trident v2 Systems - TUV ...
Safety Considerations Guide for Trident v2 Systems - TUV ...
Safety Considerations Guide for Trident v2 Systems - TUV ...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
38 Chapter 3 Fault Management<br />
Also, during each execution of the control application, each channel independently verifies the:<br />
• Integrity of the data path between the MPs<br />
• Proper voting of all input values<br />
• Proper evaluation of the control application<br />
• Calculated value of each output point<br />
Module Diagnostics<br />
Each system component detects and reports operational faults.<br />
Analog Input (AI) Modules<br />
Analog input module points use<strong>for</strong>ce-to-value diagnostics (FVD). Under system control, each<br />
point is sequentially <strong>for</strong>ced to a test value. The <strong>for</strong>ced value is maintained until the value is<br />
detected by the system or a time-out occurs. Using the integral FVD capability, each point can<br />
be independently verified <strong>for</strong> its ability to accurately detect a transition to a different value,<br />
typically every 500 milliseconds. (For more in<strong>for</strong>mation on fault reporting time, see Calculation<br />
<strong>for</strong> Diagnostic Fault Reporting Time on page 41.) Using these diagnostics, each channel can be<br />
verified independently, thus assuring near 100 percent fault coverage and fail-safe operation<br />
under all single-fault scenarios, and most common multiple-fault scenarios.<br />
Analog Input Module Alarms<br />
Analog input module faults are reported to the control application. These alarms can be used to<br />
increase availability during specific multiple-fault conditions. Loss of field power or logic<br />
power is reported to the control application.<br />
Analog Input/Digital Input (AI/DI) Modules<br />
Analog input/digital input module points use<strong>for</strong>ce-to-value diagnostics (FVD). Under system<br />
control, each point is sequentially <strong>for</strong>ced to a test value. The <strong>for</strong>ced value is maintained until the<br />
value is detected by the system or a time-out occurs. Using the integral FVD capability, each<br />
point can be independently verified <strong>for</strong> its ability to accurately detect a transition to a different<br />
value, typically every 500 milliseconds. (For more in<strong>for</strong>mation on fault reporting time, see<br />
Calculation <strong>for</strong> Diagnostic Fault Reporting Time on page 41.) Using these diagnostics, each<br />
channel can be verified independently, thus assuring near 100 percent fault coverage and failsafe<br />
operation under all single-fault scenarios, and most common multiple-fault scenarios.<br />
Analog Input/Digital Input Module Alarms<br />
Analog input/digital input module faults are reported to the control application. These alarms<br />
can be used to increase availability during specific multiple-fault conditions. Loss of field power<br />
or logic power is reported to the control application.<br />
<strong>Safety</strong> <strong>Considerations</strong> <strong>Guide</strong> <strong>for</strong> <strong>Trident</strong> <strong>v2</strong> <strong>Systems</strong>