background image

8

Digital Bus Reliability

In addition to the variety of classic Mark VIe I/O modules, additional I/O modules are available for digital busses such as
F

OUNDATION

Fieldbus™, PROFIBUS

®

, HART

®

, and CANopen

®

. These modules share a common design with other I/O

modules consisting of a local processor that communicates on the IONET to switches and then to the controllers. Similarly,
they share a common ControlST* software suite with ToolboxST* configuration and diagnostic tools. It is beyond the scope
of this paper to review the redundancy options for each specific digital bus. However, some basic principles are provided for
reference.

8.1

F

OUNDATION

Fieldbus

For reliability, two linking devices (I/O modules) can be connected with a RS-232C null modem cable to form one logical
linking device (a redundant set) in a primary / secondary configuration. Both linking devices are connected to the same H1
field devices and IONET. If the primary device were to fail, the secondary device would provide a backup. The original
primary could then be replaced and automatically reconfigured to match the new primary device.

For a typical application with redundant controllers, there is a primary controller (the designated controller) and a secondary
controller. Therefore, the primary linking device is the one connected to the primary controller. Less common are applications
with a single controller and redundant linking devices. In this scenario, the first linking device to be powered becomes the
primary.

8.2

PROFIBUS DP-V0 and DP-V1, Class 1 Masters

The I/O module can be configured for three types of redundancy:

One I/O module with one I/O network

One I/O module with dual I/O networks

HotBackup I/O modules with dual I/O networks

The active master communicates with the slaves while the backup master is in standby mode. The backup is ready to
automatically switchover in less than 200 ms if any of the following conditions occur:

All master/slave communication is lost

Master/controller communication is lost on both I/O

The master is powered down

8.3

HART Communications

Highway Addressable Remote Transducer (HART) communications provide diagnostics and remote communications to smart
field devices with standard 4-20 mA wiring. Each I/O module can communicate with dual redundant IONET switches.

8.4

CANopen Communications

The protocol specifications are developed and maintained by the Controller Area Network (CAN) in Automation standards
organization comprising. Each I/O module can communicate with dual redundant IONET switch.

Instruction Guide

GEI-100728A

17

Public Information

Summary of Contents for Mark VIe

Page 1: ...nt contains non sensitive information approved for public disclosure GE may have patents or pending patent applications covering subject matter in this document The furnishing of this document does no...

Page 2: ...Controller 7 5 I O Network Redundancy 7 6 I O Redundancy 8 6 1 Dual Redundancy 8 6 2 Triple Modular Redundancy 11 7 Tripping Reliability 15 8 Digital Bus Reliability 17 8 1 FOUNDATION Fieldbus 17 8 2...

Page 3: ...ting the process Field components for example sensors actuators and wiring cause over half of forced outages Therefore redundancy of field components is an important consideration in the overall contr...

Page 4: ...one component is out voted by the other two In the case of three lube oil pressure switches the protective system performs a simple logical vote with no need to predict in advance a probable failure m...

Page 5: ...ing Blocks Controller 3 IONET Ports 2 Control Network Ports 1 COM Port IONET Switch I O Module I O Pack Local Processor Data Acquisition Terminal Block Typical Mark VIe Architecture Instruction Guide...

Page 6: ...ther the controllers are redundant or non redundant But they can be supplied in redundant pairs too if required Additional redundancy options are available Internal Power Converters Create 28V dc for...

Page 7: ...board rack or mounted inside the rack with communication on the backplane The I O network consists of active electronics at both ends and multiple failure modes so its redundancy is just as important...

Page 8: ...at the I O pack level Therefore replacement of I O has minimal impact on monitoring and control of the overall control system An extension of this is to add a third sensor whose value can be voted in...

Page 9: ...ovides recovery data 4 Receives external commands 5 Creates process alarms Data outputs from dual redundant controllers are normally implemented with each controller sending its signal to its switch a...

Page 10: ...ollers IONET switches and Ethernet ports on a common I O pack which controls a relay driver and a relay Level 2 also provides dual redundant controllers and IONET switches but extends the redundancy t...

Page 11: ...ed or transmitted individually Fanned inputs are transmitted on the IONET with three I O packs on the I O module Therefore a failure of an I O pack does not inhibit any controller from seeing all of t...

Page 12: ...les 3 Less IONET switches Non critical data that is being used for non essential monitoring is usually implemented without redundancy Redundant and non redundant I O coexists in most control systems T...

Page 13: ...nt sharing circuit Analog Voting occurs with a3 coil servo Extended Voting at Field Device Example 3 Coil Servo Valve Actuator Typical nuclear configuration Valve Regulator Valve Ref Valve Regulator V...

Page 14: ...Requirements for no single point failures must be evaluated on a case by case basis to determine the best way to approach this from the system level The preceding figure displays a variation of outpu...

Page 15: ...responding I O control protect and monitor the turbine Primary protection includes a full set of all trip functions and backup protection includes a small subset of the protection functions to backup...

Page 16: ...control valves and de energize the trip solenoids from the primary side Another example the backup protection monitors communications from each controller so it can be configured to initiate a trip o...

Page 17: ...the designated controller and a secondary controller Therefore the primary linking device is the one connected to the primary controller Less common are applications with a single controller and redun...

Page 18: ...al Controllers Supplies Switches Simplex Non redundant Dual with Redundant I O Full Triple Redundant Dual Redundant Triple Relative Contributions to Reliability and MTBFO Adding redundancy to the elec...

Page 19: ...Public Information...

Reviews: