Safety Considerations Guide for Trident v2 Systems - TUV ...

More documents

Recommendations

Info

60 Chapter 4 Application Development Program EX03_SHUTDOWN SHARED_IO EX03_SHARED_IO CI RELAY1_OK 001 T#3d T#400ms CO TMR GE_DUAL GE_SINGLE NO_VOTER_FLTS ERROR PROCESS_1_IO SHARED SYS_SHUTDOWN CI CO IO_CO OPERATIING IO_TMR TMR IO_GE_DUAL DUAL IO_GE_SINGLE SINGL IO_NO_VOTER_FLTS ZERO IO_ERROR TIMER_RUNNING MAX_TIME_DUAL TIME_LEFT MAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTED MAX_SCAN_TIME 002 ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS ERROR PROCESS_1 SYS_SHUTDOWN EX03_PROCESS_1_IO CI CO CI CO IO_CO OPERATIING RELAY1_OK TMR IO_TMR TMR GE_DUAL IO_GE_DUAL DUAL GE_SINGLE IO_GE_SINGLE SINGL NO_VOTER_FLTS IO_NO_VOTER_FLTS ZERO 003 ERROR IO_ERROR TIMER_RUNNING MAX_TIME_DUAL TIME_LEFT MAX_TIME_SINGLE T#3d MAX_SCAN_TIME T#400ms 004 ALARM_PROGRAMMING_PERMITTED ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS ERROR PROCESS_2_IO EX03_PROCESS_2_IO CI RELAY1_OK 005 CO TMR GE_DUAL GE_SINGLE NO_VOTER_FLTS ERROR T#3d T#400ms PROCESS_2 SYS_SHUTDOWN CI CO IO_CO OPERATIING IO_TMR TMR IO_GE_DUAL DUAL IO_GE_SINGLE SINGL IO_NO_VOTER_FLTS ZERO IO_ERROR TIMER_RUNNING MAX_TIME_DUAL TIME_LEFT MAX_TIME_SINGLE ALARM_PROGRAMMING_PERMITTED MAX_SCAN_TIME 006 ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS ERROR Figure 12 EX03_SHUTDOWN Sample Program Safety Considerations Guide for Trident v2 Systems ALARM_PROGRAMMING_PERMITTED ALARM_REMOTE_ACCESS ALARM_RESPONSE_TIME ALARM_DISABLED_POINTS AND 005 AND 006 PROCESS_1_ OPERATING If PROCESS_1_OPERATING = FALSE, shut down process 1 because the time in degraded mode exceeds the specified limit for safety-critical modules PROCESS_2_ OPERATING If PROCESS_2_OPERATING = FALSE, shut down process 2 because the time in degraded mode exceeds the specified limit for safety-critical modules
Alarm Usage Alarm Usage 61 To implement the guidelines, the alarms described below are provided with TriStation 1131 software. Programming Permitted Alarm To remind the operator to lock out programming changes after a download change, or for applications in which download changes are prohibited, connect the ALARM_PROGRAMMING_PERMITTED output to an alarm. Remote Access Alarm In applications for which remote changes are not allowed, connect the ALARM_REMOTE_ACCESS output to an alarm. Response Time Alarm Response time refers to the maximum time allocated for the controller to detect a change on an input point and to change the state of an output point. Response time is primarily determined by scan time (the rate at which the program is run), but is also affected by process time (how fast the process can react to a change). The response time of the controller must be equal to or faster than the process time. The scan time must be at least two times faster than the response time. To meet the required response time of the process, set the MAX_SCAN_TIME input to less than 50 percent of the required response time. When the actual scan time as measured by the firmware exceeds the MAX_SCAN_TIME value, the ALARM_RESPONSE_TIME output becomes true. Disabled Points Alarm A project should not contain disabled points unless there is a specific reason for disabling them, such as initial testing. An alarm is available to alert the operator that a point is disabled. Safety Considerations Guide for Trident v2 Systems
Page 1 and 2:
Trident v2 Systems Safety Considera
Page 3 and 4:
Contents Preface vii Summary of Sec
Page 5 and 6:
Contents v Partitioned Processes. .
Page 7 and 8:
Preface This guide provides informa
Page 9 and 10:
• All other requests are handled
Page 11 and 12:
1 Safety Concepts Overview 2 Hazard
Page 13 and 14:
Protection Layers Methods that prov
Page 15 and 16:
Hazard and Risk Analysis Hazard and
Page 17 and 18:
Sample SIL Calculation Hazard and R
Page 19 and 20: Safety Life Cycle Model Hazard and
Page 21 and 22: Hazard and Risk Analysis 11 • Eac
Page 23 and 24: CAN/CSA-C22.2 No. 61010-1-04 Safety
Page 25 and 26: 2 Application Guidelines Overview 1
Page 27 and 28: General Guidelines This section des
Page 29 and 30: General Guidelines 19 Safety Measur
Page 31 and 32: Emergency Shutdown Systems The safe
Page 33 and 34: Safety-Shutdown Guidelines for Tric
Page 35 and 36: Guidelines for Triconex Controllers
Page 43 and 44: 3 Fault Management Overview 34 Syst
Page 45 and 46: System Diagnostics System Diagnosti
Page 47 and 48: Operating Modes Each input or outpu
Page 49 and 50: Analog Output (AO) Modules Module D
Page 51 and 52: Calculation for Diagnostic Fault Re
Page 53 and 54: External Communication Module Diagn
Page 55 and 56: 4 Application Development Developme
Page 57 and 58: Array Index Errors Infinite Loops D
Page 59 and 60: Setting Scan Time 49 application. T
Page 61 and 62: Sample Safety-Shutdown Programs Sam
Page 63 and 64: Sample Safety-Shutdown Programs 53
Page 65 and 66: When Some I/O Modules Are Safety-Cr
Page 67 and 68: Sample Safety-Shutdown Programs 57
Page 69: Partitioned Processes Sample Safety
Page 73 and 74: A Triconex Peer-to-Peer Communicati
Page 75 and 76: Data Transfer Time Data Transfer Ti
Page 77 and 78: Data Transfer Time 67 A typical dat
Page 79 and 80: Examples of Peer-to-Peer Applicatio
Page 81 and 82: B HART Communication Overview 72 HA
Page 83 and 84: 2008-04-01 Automation, Software and
Page 85 and 86: 2008-04-01 HART Position Paper from
Page 87 and 88: 2008-04-01 A possible impact to the
Page 89 and 90: 2008-04-01 HART Position Paper from
Page 91 and 92: C Safety-Critical Function Blocks O
Page 93 and 94: SYS_CRITICAL_IO Accumulates the sta
Page 95 and 96: Library Trident and Tri-GP (TRDLIB)
Page 97 and 98: END_IF ; PREVIOUS_RESET := RESET ;
Page 99 and 100: Output Parameters (continued) Name
Page 101 and 102: SYS_SHUTDOWN 91 * the safety system
Page 103 and 104: ALARM_DISABLED_POINTS := MPX.POINTS
Page 105 and 106: Example For shutdown examples, see
Page 107 and 108: A abbreviations, list of viii actua
Page 109 and 110: message errors, external communicat
Page 112: Invensys Operations Management 5601
show all

Safety Considerations Guide for Trident v2 Systems - TUV ...

Create successful ePaper yourself

Delete template?

Save as template?