ICS Triplex T8193 Trusted Shield Module

user-configurable module providing overall system control and monitoring facilities and processes

input and output data received from a variety of analogue and digital Input / Output (I/O) modules

across a Trusted TMR Inter-Module Communications Bus.

The range of applications for the Trusted TMR Processor vary in integrity level and include fire and

gas control, emergency shutdown, monitoring and control, and turbine control.

Features:

• Triple Modular Redundant (TMR), fault tolerant (3-2-0) operation.

• Hardware Implemented Fault Tolerant (HIFT) architecture.

• Dedicated hardware and software test regimes which provide very fast fault recognition and

response times.

• Automatic fault handling without nuisance alarming.

• Time-stamped fault historian.

• Hot replacement (no need to re-load programs).

• Full suite of IEC 61131-3 programming languages.

• Front panel indicators that show module health and status.

• Front panel RS232 serial diagnostics port for system monitoring, configuration and

programming.

• IRIG-B002 and 122 time synchronisation signals (available on T8110B only).

• Active and Standby processor fault and failure contacts.

• Two RS422 / 485 configurable 2 or 4 wire connections (available on T8110B only).

• One RS485 2 wire connection (available on T8110B only).

• TϋV Certified IEC 61508 SIL 3.

Application

Module Configuration

The Trusted TMR Processor requires no hardware configuration.

Every Trusted System requires a System.INI configuration file. Details of how to design this

are given in PD-T8082 (Trusted Toolset Suite). The configuration has a Processor assigned to

the left slot of the Processor chassis by default. The System Configurator allows the

selection of options on ports, IRIG and system functions. The use of the System Configurator

is described in PD-T8082. The options are described below.

Updater Section

If Auto Protect Network Variables is selected, this configures the Trusted System to use a

reduced Modbus Protocol map. See product description PD-8151B (Trusted Communication

Interface Module) for further details.

Inter Group Delay equates to the Modbus update cycle. This is the minimum period

between successive Modbus update messages sent to each of the Communications

Interface Modules. The default value (as shown) is 50 ms which provides a compromise

between latency and performance. Adjustment is made in 32 integer ms increments, i.e. a

value of 33 will equal 64 ms as will 64.This may be increased or decreased as required,

however since only one update message is sent per application scan, and an application

scan may often be more than 50 ms, there is little benefit in adjusting this variable.

Security Section

The above display is also used to configure a password allowing the user to interrogate a

Trusted System using the Windows-based HyperTerminal facility or a similar terminal

program. The password is configured by selecting the New Password button and entering

the new password twice in the displayed dialogue box.

ICS2000 Section

This section only applies to Trusted Systems connected via a Trusted to ICS2000 Interface

Adapter to an ICS2000 system. This allows the data sources for the three mimic tables to be

selected. Please refer to your Trusted supplier for further information.