ABB Safety

Triguard 2TMR Safety Products

T R I G U A R D S C 3 0 0 E

2

ADNOCAGIPAMECArabian Industrial FibersAzot – RussiaBechtelBP/AMOCOBritish Nuclear FuelsCegelecChiyodaConocoCrescent PetroleumDowEcopetrolElf EnterpriseEPA – Taiwan Exxon/MobilFoster WheelerGas Authority IndiaGazpromHanwha ChemicalHuntsman ChemicalsHyundai Petrochemical IOCL – IndiaKBRKNPCMadras Refinery

McDermottPacific Gas & ElectricPemexPetrobrasPetrokemyaPetrominPetronas GasQatar GasQGPCRalph M ParsonsSaipemSARAS – ItalySarawak ShellSaudi AramcoSnamprogettiSouthern PetrochemicalTechnipTechnipgeoproductionTecnimontThai AromaticsTorch EnergyTotalToyo Engineering CoUK Atomic EnergyUS SteelWestlake Group

ABBTMR Safety and Control

August Systems, founded in 1978, was the worldwide pioneer in the development of Triple Modular Redundant(TMR) processing for real time, fault tolerant control. August Systems became an ABB company in 1997 addingTMR technology to the well established Dual Redundant Safety systems developed within ABB. The newbusiness group of ABB Safety has been established to offer a broad range of safety solutions to industry.

The Triguard SC300E products are available as engineered systems from ABB or products for integration bythird party system integrators and OEMs, enabling the technology to be made available to a wide range ofcustomers and applications.

The ABB Triguard SC300E is theevolution of 20 years of combinedvendor and customer experienceintegrated into the design of theultimate TMR product. Building on aproven platform, the Triguard SC300Ecombines features that will maintainexcellence well into the future.

Today ABB is a global supplier withkey operating bases in North America,Europe, Middle East and Asia Pacific.The Company has successfullysupplied TMR products and systems tomeet an ever increasing diverse rangeof applications, including:

3

C o n t e n t s

SC300E Features and Benefits 4 – 5

SC300E Product Description 6 – 13

SC300E Software Description 14 – 15

T r i g u a r d S C 3 0 0 E

International Standards 16

Global Support 17

Product Summary 18

Product Specifications 19

• Safety Shutdown• Electrical Stability and Load Control• Process Shutdown• Reactor Control• Emergency Shutdown• Critical Batch Processing• Sequence and Interlock Control• Fire & Gas Protection and Detection• Critical Process Control• Burner Management and Control• Turbine and Compressor Control• Wellhead/Sub-Sea Control• Unmanned Installations• FPSOs

SC300E TMR Architecture

Highest AvailabilityThe Triguard SC300E achieves thehighest possible TMR availability(99.999%) by maximising the Mean Time To Failure (MTTF) anddecreasing the Mean Time To Repair(MTTR).

Modern low power integratedtechnology allows the TMRarchitecture to be cost effective for an increasing range of high integrityapplications.

Simple to Use, Operate and MaintainThe Triguard SC300E TMR productfunctions as a single set of hardwareand software. The three processorsand triplicated I/O circuitry aretransparent to the user. Purchasing aTriguard SC300E system will provide:

• Lowest Life Cycle Cost• The Maximum Safety and

Availability• The Highest Level of Safety and

On-Line Maintenance

Fail Safe OperationFailure modes of the processors,input/output circuitry, control programand watchdog timer circuits aremanaged so that circuits will default toa predetermined safe state.

Highest Speed of Response By using advanced processortechnology, whilst maintaining thestability of the original core software,Triguard SC300E delivers anunrivalled scan time resolution of 10ms.

T R I G U A R D S C 3 0 0 E

• Fewer unscheduled stoppages highest availability, fault tolerant electronics with transient immunity and 3–2–0 or 3–2–1–0 voting

• Security for plant, product and people fail-safe operation at all levels provides plant, product and personnel with the highest security

• Quality datasequence of event and extensive diagnostics keep the operator informed

FIELDTERMINATION

FIELDTERMINATION

MICROCONTROLLER

A

PROCESSORA

PROCESSORB

PROCESSORC

MICROCONTROLLER

B

MICROCONTROLLER

C

MICROCONTROLLER

A

MICROCONTROLLER

B6 ELEMENT

2003VOTER

MICROCONTROLLER

C

INPUT MODULE

READ ONLY LINKS

READ ONLY LINKS

READ ONLY LINKS

READ ONLY LINKS

LOOPBACK

READ ONLY LINKS

READ ONLY LINKS

HOT REPAIR MODULE HOT REPAIR MODULE

OUTPUT MODULE

4

P r o d u c t F a m i l yThe ABB Triguard SC300E TMR product family gives unrivalled performance in areas of reliability, availability, test coverage,diagnostics and simplicity of operation. Advances in technology and improved production methods add cost benefits thatgive significant price/performance advantages.

High speed of response benefits thecustomer application which specifiesSequence of Events recording (SoE)without the cost of additionalequipment. It also enables TMR to beused for applications requiring highspeed advanced control.

Fault Tolerant Hardware andSoftwareThe system is designed to continue tooperate correctly with the presence ofa major component fault and iscapable of tolerating multiple, nonconcurrent faults.

Easy to Use Software –WindowsTM

TriBuildTM configuration andapplication programming andTriCommandTM Server(WONDERWARE© MMI interfacesoftware) are WindowsTM compliant,making the system easier to use forthe engineer and the operator. Forcustomers with existing ABB equipment“backward compatibility” is providedmaking upgrading or adding newfacilities economic to implement.

TriBuildTM and TriCommandTM Servercan be used with Windows NTTM.Features include:

• True multitasking capability• Strategies can be saved on-line

without halting the system operation• Ability to upload the configuration• Changes can be made on-line

without halting the system operation• Bumpless changeover of hot repair

modules• Comprehensive diagnostic displays

for ease of maintenance

Fault Tolerance andSelective RedundancyImprovements in the system to keep aprocess plant running safely withoutthe nuisance of false trips have beenachieved by full diagnostic coverageof all modules and selectiveredundancy.

Processors 3–2–1–0

Input/Output Circuits 3–2–1–0 or3–2–0

Importance of TransientImmunityComprehensive physical and electricalisolation combined with asynchronousprocessors and software votingensures the Triguard SC300E isimmune to transient errors.

Smallest Footprint Size The Triguard SC300E TMR offers ourcustomers the best utilisation ofavailable space. ABB have developed“plug and play” cabinet layoutconfigurations that offer pre-designedhardware for system applications.

Plug and socketed system cables makemarshalling and terminationinterconnection quick and easy toimplement.

5

SC300E Chassis

A single system may be as small asone chassis or as large as 15, giving amaximum of 9,500 I/O.

The system is designed to achieve thehighest possible reliability, safety andavailability and still provide economicadvantage. System availabilities inexcess of 99.999% can readily berealised, maximising the potentialuptime for a customers process plant.

All SC300E input and output modulesinterface to three isolated I/Ocommunication buses, each beingcontrolled by one of the threeprocessor modules.

Field input signals are filtered andsplit, via isolating circuits on the inputmodules, into three identical signalprocessing paths. Each path iscontrolled by a micro-controller to co-ordinate processing, testing and statusreporting to the respective processor.

Each processor communicates withits two neighbours via isolated, readonly, high speed links tosynchronise input, output anddiagnostic status information at leastonce every scan.

Commanded output status from theprocessors are received by an outputmodule which, using a 2oo3 hardwarevoter, sets the outputs to the field.Any discrepancy is detected by themicro-controllers and reported to theprocessors.

All input and output modules can beoptionally configured with a hot sparepartner module. This allows repairs tobe carried out without affecting theoperation of the system.

Triguard SC300E ChassisSystemThere are four basic types of chassis, allusing the same mechanics, eachproviding 10 slot positions for I/Omodules and redundant power supplies.

• The Main ChassisOne per system is required and isalways complete with two powersupply units, three processormodules, the chassis backplane withtriple bus systems and plug/socketsystem module connectors.

• An Extension ChassisUp to 14 chassis can be connectedto a main chassis to suit the capacity

master bus extender modules. Themaster chassis can service up to fourremote chassis.

• A Remote ChassisAlways equipped with two powersupply units and three fibre opticslave bus extender modules. A remote chassis can be sited up to2km away from a remote master.

T R I G U A R D S C 3 0 0 E

6

P r o d u c t H a r d w a r e a n d S o f t w a r eD e s c r i p t i o n

The ABB Triguard SC300E TMRproduct has a fully triplicated systemarchitecture from input module tooutput module. Each systemcomprises one or more identicalchassis housing the power supplies,processors, I/O and communicationsmodules as required by theapplication.

Each processor correlates andcorrects its memory image of thecurrent state of the system using asoftware vote, logging anydiscrepancies in the diagnostic table.Each processor then executes itsprogrammed application logic andsets its respective outputs to therequired state.

of the customer application.Extension chassis are alwayscomplete with two power supplyunits and three bus extendermodules.

• A Remote Master ChassisAlways equipped with two powersupply units and three fibre optic

each of the three processors to theI/O and communications modules.

The Triguard SC300E has an operatingsystem known as the Real Time TaskSupervisor (RTTS), which is installedin each of the three processors. Theoperating system has been proven bywell over 10 million operational hours.RTTS is transparent to the user, itcontrols the off-line/start-up and on-line continuous diagnostic andvoting functions, and provides a singleenvironment for the applicationprogramming.

On power up, comprehensivediagnostic routines check and validatethe correct operating parameters ofeach processor.

The Triguard SC300E operatingsystem, RTTS, will permit theprocessors to operate in a 3–2–1format allowing a system to continueto function with one healthyprocessor. A replaced processor willautomatically acquire the data itrequires to become operational fromthe on-line processor before going on-line.

Input/Output ModulesAll I/O module types share anelement of common design, providingcomponent rationalisation andimplementing distributed processing.

The three isolated TMR signal paths ofall input/output modules aresupervised by a micro-controllerswhich:

• Provides fault isolation• Co-ordinate signal processing• Provides diagnostics• Provides on-line to off-line

switching (hot repair)• Provides data validation routines• Provides data to the processor• Provides latent fault detection

A fault in one signal path cannot bepassed to another. I/O modules canbe fitted in any of the 10 slots in anychassis. “Hot Repair” is a customerconfigurable option on a per modulebasis. All modules are “keyed” toprevent improper installation.

7

Processor Module

ProcessorEach Triguard SC300E TMR systemcontains three processors. Eachprocessor operates asynchronously inparallel with the other two processormodules and receives power from theredundant power supply units in themain chassis. A triplicated bus systemon the chassis backplane connects

Key features of the processor modules:• Intel processor• Battery backed static RAM for

application logic• RAM Battery backup supply for six

months• 1 Mbyte of EPROM• Real time clock for data logging to

10ms resolution

Triguard SC300E Chassis System plus cablesand Termination Modules

100% triplicated to provide maximumavailability.

Each signal path conditions signalsindependently and provides fulloptical isolation between the field andthe SC300E. A fault on one signal pathcannot propagate to another.Automatic latent fault testing willdetect “stuck on” states.

Line monitored inputs can beimplemented using analogue inputmodules with line monitor terminationcards.

Each of the three micro-controllersoperate two isolated switches perchannel which together form a sixelement voting network.

Digital Input ModulesThe types of digital input modulesavailable are:

• 32 channel isolated24Vdc\120Vdc\120Vac TMR

• 64 channel isolated 24Vdc Simplex

All TMR digital input modules are

Digital Output ModulesThe types of digital output modulesavailable are:

• 32 channel – supervised 24VdcTMR*

• 16 channel – supervised120Vdc\120Vac TMR*

All TMR digital output modules areequipped with:

• Line monitoring circuits to confirmenergised field loop integrity

• Six element voting circuits formaximum safety and availability

• Automatic latent fault testing anddiagnostics with 100% coverage (TMR)

T R I G U A R D S C 3 0 0 E

8

P r o d u c t H a r d w a r e a n d S o f t w a r eD e s c r i p t i o n

ISOLATOR

ISOLATOR

ISOLATOR

ISOLATOR

ISOLATOR

ISOLATOR

SIGNALPROCESSING

SIGNALPROCESSING

DRIVER

SIGNALSTATUS LED

MICROCONTROLLE

R A

MICROCONTROLLER

B

MICROCONTROLLER

C

TEST

TEST

TEST

INPUTFILTER

SIGNALPROCESSING

Typical Digital Input Circuit

INPUTFILTER

INPUTFILTER

DRIVER

DRIVER

DRIVER

V/IMONITOR

V/I MONITOR

V/I MONITOROUTPUT

STATUS LED

MICROCONTROLLER

A

MICROCONTROLLER

B

MICROCONTROLLE

R C

SUPPLY +

SUPPLY –

OUTPUT

A A B C

B C

C

A B

Typical Digital Output Circuit

* Line monitoring of de-energised fieldloops may be achieved using alternativetermination cards.

Analogue Input ModulesThe types of analogue input modulesavailable are:

• 32 channel isolated 0 to 5Vdc and 0to 10Vdc TMR(0 to 40mA and 0/4 to 20mA withburden resistor at the terminationcard)

Each analogue input signal pathcontains three identical circuits of:

• Isolation• Noise Filtering• Multiplexing• Amplification• Analogue to digital conversion

and each of the three circuits issupervised by a micro-controller.

The three circuits synchronouslymeasure the input signals, vote thedata and transmit the data to theprocessors.

The processors condition the inputsignal data, making any necessarycorrections, and then select the mid-value from the three sets of inputdata. This mid-value is then used bythe control program.

9

The output voting, testing, feedbackand diagnostics are co-ordinated by theTriguard SC300E operating system. Allmodules provide 2oo3 voted outputs.

Selective redundancy operating in3–2–1 or 3–2–0 modes is available,with selectable fall back to fail safe orretain last value states.

Thermocouple InputsThermocouple and resistancethermometer inputs are provided bythe use of third party transmitters orconverters mounted in the field orwithin the marshalling cabinets. Inputsfrom these devices are then handledby the standard TMR analogue inputmodules.

NOISE FILTER

NOISE FILTER

NOISE FILTER

MUX

MUX

A/D

A/D

A/D

AMP

AMP

AMP

MUX

1

32

1

32

1

32

SELECTVREF 1 VREF 2

VREF 1

VREF 1 VREF 2

VREF 2SELECT

SELECT

MICROCONTROLLER

A

MICROCONTROLLER B

MICROCONTROLLER

C

RANGE

RANGE

RANGE

Typical Analogue Input Circuit

T R I G U A R D S C 3 0 0 E

10

Analogue Output Modules• 4 channel – 12 bit resolution

4–20mA TMR

Each of the three Triguard SC300Eprocessors sends voted output voltagedata to the analogue output modules.The commands are received via the bus system by the three micro-controllers on each module.

Each micro-controller controls a digitalto analogue converter which drivestwo elements of the six elementoutput voting network. Each elementof the six element voter is an isolatedfield effect transistor operated withinits linear range. The final output of the field device is selected as the mid-value from the three circuits ofoutput data.

Feedback to each of the three micro-controllers provides continuouschecking for correctness. Diagnosticsdeclare any fault to the processors formaintenance information and action.

P r o d u c t H a r d w a r e a n d S o f t w a r eD e s c r i p t i o n

Typical Analogue Output Circuit

V MONITOR

D/A CONVERTER

D/A CONVERTER

D/A CONVERTER

V MONITOR

V MONITOR

MICROCONTROLLER A

MICROCONTROLLER B

MICROCONTROLLER C

V REF

MID VALUESELECTED

A

B C A B

C

A B C

a gear wheel for example, andaccumulates this data to an accuracyof +_0.01% over 20Hz to 20KHz.

Output values to 12 bit resolution canprovide voted and validated data tofield devices for control (see analogueoutput module for output circuitoperation).

Communications ModuleA four channel serial communicationsmodule is always fitted to a TriguardSC300E TMR system to allowcommunications to the engineeringworkstation and is installed in I/O slotnumber 10 of the main chassis. Allfour channels operate RS232\423 upto 19.2 kbits/sec and all fourcommunication ports are fully isolated.

The four channel communicationsmodule is directly addressed by thethree Triguard SC300E processors andcontains a micro-computer thatcontrols the four programmablemulti-protocol ports. Data receivedfrom the three processors is voted2oo3 providing correct data foronward transmission.

High speed networkconnectivity feature (to bereleased)Triguard may be interfaced to standardcommunications networks such asEthernet/TCP/IP using approvedgateway products.

DCS connectivity includes:• Yokogawa Electric, Elsag-Bailey,

Fisher Rosemount, ABB, Honeywelland Foxboro

11

Pulse Input Analogue OutputModule (PIANO)• 8 channel, 4 pulse input, 4 analogue

output TMR

The PIANO module contains fullytriplicated circuits. Each pulse inputpath receives input pulses, a valueequivalent to the number of teeth on

O/PDRIVERS

0–20mAO/P’s

PULSEI/P’s

MODULEPOWER HEALTH

CIRCUITRY

SYSTEM SUPPLY 1

I/O BUS A

I/O BUS B

I/O BUS C

HEALTH LED ONLINE LED’S

ONLINE/ OFFLINESWITCH

SYSTEM SUPPLY 2FIELD SUPPLY 1FIELD SUPPLY 2

ONLINECIRCUITRY

MODULE TYPEIDENTIFY

I/PFILTERS

TMRINTERFACE

(PULSE)

TMRINTERFACE

(ANALOGUE)

INDICATORS

MICROCONTROLLERA

WATCHDOG

WATCHDOG

WATCHDOG

MICROCONTROLLERB

MICROCONTROLLERC

COMMON INTERFACE CIRCUITRY

Typical Pulse Input Circuit

Serial Communication Module

done bumplessly without interruptingthe normal operation of the systemand process.

The operating system, RTTS, routinelyexecutes a hot repair task, checkingand validating that all configurationdata is correct, eg. correct I/Omodule, on-line/off-line hot repairfunctions.

There are three ways to replace anon-line I/O module:

• Module with no additional hotrepair slot – single slot hot repair

• Module has an unpopulated hotrepair partner slot – manual hotrepair

• Module with a populated hot repairpartner slot – hot repair

• 16 channel – analogue input• 4 channel – analogue output• 16 channel – digital output with line

monitoring• 4 channel – pulse input

DIN rail mounted termination cardsfor field wiring can be supplied as aneasy to fit method to route field cablesto the Triguard SC300E system I/Omodules, and distribute field wettingcurrent to each I/O point.

A termination card has an associatedsystem cable fitted with DINconnectors to provide the plug andsocket arrangement. Cable lengths canbe specified to suit the application.

Alternative cables with Elcoconnectors or free wires at the fieldend are available for third partymarshalling systems.

Power and fusing for the field circuitsare standard. Options are available tosuit all field configurations.

System cables from the TriguardSC300E are also available with freewire ends so that the system mayconnect to a separate cablemarshalling and power/fusing system.

T R I G U A R D S C 3 0 0 E

12

P r o d u c t H a r d w a r e a n d S o f t w a r eD e s c r i p t i o n

Hot Repair FacilityA quick repair procedure, once anyfault is revealed, is important in thetotal fault tolerant product strategy.

The hot repair facility achieves a quickand easy repair by the user and this is

All I/O modules can be programmedfor a hot repair facility. A wrong orfaulty module in an allocated hotrepair I/O slot will not be accepted.Hot repair slots are selected to benext to the system I/O residentmodule.

Field Termination CardsThe types of termination cardsavailable:

• 16 channel – digital input• 32 channel – digital input• 16 channel – digital output

2000mm high cabinets, and providefront and rear access. Front accessonly configurations are available.

System StructureA major benefit of the TriguardSC300E system is that it can be assmall as one chassis or as large as 15,giving a 9,500 total I/O capacity. TheTMR bus extender modules and cablesets are used to size the system to suitthe application. Interfacing to remoteTMR I/O chassis or gateway modulesto connect to DCS networks, can be provided to suit a combineddistributed safety and control strategy.

A customer who has a futurerequirement to add to an existingsystem will find the Triguard SC300Eeasy and economical to extend.

Forward and backward compatibilitymeans that users can readily intermixCS300 and Triguard SC300E systemsusing the same programming tools.Application logic written for a CS300system will run with minimummodification on the Triguard SC300E.

13

Cabinet LayoutsOptional cabinets to house theTriguard SC300E TMR control systemare industry standard 19” rackmounted configurations with a widthof 600mm and a depth of 800mm. Thelayouts shown are based on a standard

A fully distributed safety system,using the Triguard SC300E, can beconfigured by utilising a Safeway8000 bus structure and theTriguard peer to peer safetyapproved protocol.

Triguard SC300E System Architecture

MAIN CHASSIS

EXTENSIONCHASSIS 1

16-WAYTERMINATION

CARDS

161

161

Field Terminals

3 x Twin FibreOptic Cables

REMOTECHASSIS 14

EXTENSIONCHASSIS 13

Up to 2 km

Typical Triguard SC300E Cabinet Layouts

Triguard SC300E MAIN CHASSIS

EXTENSION CHASSIS

Field Power Supplies

FIELD POWER FUSINGAND DISTRIBUTION

FIELD MARSHALINGTERMINALS

TERMINATIONCARDS

TriBuildTM

TriBuild is an easy to use, menudriven, software package runningunder Windows NTTM. It is used forthe creation of system applicationlogic of the Triguard SC300E control system.

Key features of TriBuild:

• System Configurator – easy guidefor system build

• Ladder Annotator – adds notes tothe ladder logic

• Network Editor – on-line/off-lineediting of logic functions

• On-Line Help – reduces need torefer to printed manual

• Ladder Simulator – allows testingduring program development

• Built-In Compiler – for high leveluser functions

• Password Protection – selectiveaccess and protection

• Function Block Programming –using IEC 1131 standard function asapplicable to safety

These can be developed quickly andeffectively with the assistance ofsearch and replace, cut and paste anda standard library of logic symbols andprogramming functions. Completedcontrol programs can be loaded into aTriguard SC300E system and theexecution of the control program canbe monitored on-line with the TriBuildworkstation.

advanced fault tolerant controlapplications

• Application specific controlfunctions, eg auto-test routines, gasdetection calibration tables,advanced control

• System interrogation• Control and user changes with date

and time• Off-line configuration, simulation

and applications testing of thecontrol programs

The Triguard SC300E supports threemain application software packages,all are Windows compatible:• TriBuildTM for developing and

programming application logic• TriCommandTM a display and

control system workstation(WONDERWARE©)

• TriLogTM simple PC basedalarm/event logger

The TriBuild Workstation is connected to a Triguard SC300E TMR system viathe communications module.

TriBuild provides on and off-lineconfiguration, programming,documentation and testing functions.Programming uses both conventionalladder logic displays, function blockprogramming and structured networks.

TriBuildTM software provides:• A comprehensive library of

programming elements, eg logic,arithmetic, data conversion, timers,counters, block elements, bit shift,comparators, mid value select,NooM voting blocks

• An environment for users todevelop special functions, functionblocks, custom programs for

T R I G U A R D S C 3 0 0 E

14

S o f t w a r e

TMR Software Architecture

CPU/CPUCOMMUNICATIONS

FIELD I/OINTERFACE

SYSTEMSTART UP ANDDIAGNOSTICS

R.T.T.S.VOTED DATA

BASE

APPLICATIONLOGICAPPLICATION

COMMUNICATIONS

MESSAGEPROCESSING

WORKSTATIONINTERFACE

TRIBUILDWORKSTATION

DCS AND 3rd PARTY

OPERATOR STATIONAND SERIAL I/O

provides real time system control andmonitoring facilities. It can operate aspart of a Triguard SC300E system in asingle station configuration or asmultiple TriCommand stations fordistributed applications. TriCommandworkstations can be connected to a Triguard SC300E system via peerto peer, single, or dual serialcommunication links, networked viasingle or dual redundant LANs.

TriCommand is Windows NTTM

compliant. Standard off-the-shelfhardware makes customer ownershipand support easy to achieve.TriCommand workstations may beinstalled in the control room foroperator display and control or at aremote location where there may be aneed for local information and control.

TriCommand allows a user to startsmall and expand into an integratedenvironment providing a singleseamless network. Expansion is simpleand cost effective.

Key features of TriCommand:• A real time database of up to 32,000

points that can be mapped to fieldor virtual I/O points

• Dynamic Data Exchange (DDE)allowing TriCommand to pass datato other Windows applications, egExcelTM

• Supports a comprehensive range ofindustry standard protocols, such asTCP/IP via the DDE server library

• Can display an almost unlimitednumber of mimic pages

• Extensive alarm handlingcapabilities, including accept, reset,cross functions (for multiplesystems), zone hierarchy, first out,status, prioritising, displays,summaries

• Data logging, data archiving, datatrending

• Event status, event history, eventdisplay, event printing

• Fault diagnostics – communication,systems

• Advanced control – digital, analogue• Multi-level security access

The Graphical User Interface foroperators, engineers and managers isa multiple Windows display on asingle screen. Displays can howeverbe locked on full screen making theWindows feature unavailable.

Operators can choose different meansof navigating and interacting with thesystem, from full keyboard to arestricted pushbutton selection pad.Engineers can develop graphicaldisplays using a powerful displaybuilder which can be tailored to theneeds of the process operation.

TriLogTM

TriLog is a message logger, it isdesigned to monitor up to fourTriguard SC300E systems acceptingand storing sequence of event andalarm messages from each system. Ituses a dedicated PC with WindowsNTTM compliance. Windows areallocated to display time and datetogether with current and archivedinformation from each system.

15

TriBuild provides a secureenvironment to make programchanges on-line and withoutinterrupting the normal processoperations.

TriCommandTM

TriCommand is a PC-based operatorworkstation, utilising Wonderware’sInTouchTM products. TriCommand

TRIBUILD Windows Workstation

Increased awareness of safety integraldesign has been brought about by theintroduction of international legislationIEC 61508. These standards requireformal assessment of hazards to takeplace and the use of certified systemsfor all hazardous processes.

Comprehensive product testing isperformed at board and system levelsincluding temperature and powercycling to eliminate infant mortalityfailures.

Rigorous control of any hardware orsoftware change is maintained andinternal and external audits areperformed at regular intervals toensure the highest quality of productprior to shipment.

Product pre-delivery quality assuranceincludes a 100% test to ensure productquality to the customer on delivery.

Third Party CertificationWith the ever increasing demand forindependent international certificationand end user specific approvals, ABB’s products meet the requirementsoutlined in the standards and guidelines as follows:

TUV Rheinland/Berlin Brandenburg(and Product Services)

Safety Related Applications – Requirement Class 5 and 6/VDE 0801Suitable up to Safety Integrity Level 3 (SIL 3)/IEC61508see http://www.tuvasi.com

European Union CE MarkLow voltage directiveEMC directive

USA/CanadaUL/C Industrial Control Equipment

GOSTRussian guidelines for safety related systems

IEC 61508Functional safety requirements toSafety Integrity Levels 1 to 3

NFPA 728501 and 8502

EN54

T R I G U A R D S C 3 0 0 E

16

I n t e r n a t i o n a l S t a n d a r d s

QualityABB quality system meets International Standards and is certified to the requirements of BS EN ISO 90011994, Certificate Number FM 1353 for safety systems and products. The certification for Quality Assurance atABB, covers all aspects of design, manufacturing, testing, software verification, software validation andservice activities.

Product Technical SupportABB operates a worldwide producttechnical support service for all OEM’sand System Integrators. Additionally,where required, ABB can provideinstallation supervision, commissioningand site acceptance testing.

Consultancy and ApplicationEngineering consultancy services aredesigned to provide assistance withthe assessment of reliability andavailability applied to the use andapplication of TMR Systems. Suppliersof systems are frequently requested toprovide:

• Markov modelling• Fault tree analysis• Failure mode effects and criticality

analysis• Reliability/availability calculations• Life cycle cost analysis• Functional design specifications• Engineering assessments

Application engineering support andassistance is available pre-sales andpost-sales, and includes advice on:

• Correct hardware configuration• Communications and interfacing• Programming

• Software/firmware upgrades• Remote diagnostics and problem

solving• Maintenance and operations

Spares and RepairsAll regions carry a quantity of productinventory to support the installedbase. Each region has sufficientTriguard SC300E equipment toperform customer demonstrations,hardware and software applicationtesting, and first line troubleshootingfor any product problem solving.

Spares and repairs policies can berecommended to provide customerswith the support necessary tomaximise the performance of theirTMR system, minimising life-cyclecost.

Recommendations may include:

• All spares held by the customers• Minimum spares held by customer,

guaranteed replacement times fromABB

• Planned maintenance contracts• Total support contracts by ABB• Emergency callouts

Product TrainingComprehensive training facilities andtraining courses are available and cancover every aspect of the maintenanceand application of TMR technology.

Courses are available for:

• OEM/Integrator Configurations• Project Design Engineers• Plant Technicians/Maintenance

Engineering• Operations Personnel• Management Teams

17

Support services can be obtained from any of the ABB WorldwideBusiness and Engineering Centres. The resources and expertise withinthe company can be channelled into any region as required to suit aparticular customer demand. Each region can support the following rangeof services:

G l o b a l S u p p o r t

Product Test Facility

Training Facility

T R I G U A R D S C 3 0 0 E

18

P r o d u c t S u m m a r y

Description Model

SC300E MAIN Chassis, complete with 3 processors and 2 PSUs

SC300E main chassis, 110/240Vac CXP 10A 11SC300E main chassis, 24Vdc CXP 10D 24

SC300E Extension I/O Chassis, complete with 3 bus extender modules and 2 PSUs

SC300E extension chassis – 110/240Vac CXB 10A 11SC300E extension chassis, 24Vdc CXB 10D 24

SC300E Remote I/O Chassis, complete with 3 fibre optic bus extender modules and 2 PSUs

SC300E master remote I/O chassis, 110/240Vac CXM 10A 11SC300E master remote I/O chassis, 24Vdc CXM 10D 24

SC300E slave remote I/O chassis, 110/240Vac CXS 10A 11SC300E slave remote I/O chassis, 24Vdc CXS 10D 24

SC300E Input/Output Modules

Serial communications module, 4 port, RS232 MSR 04 XI

32 channel digital input module, 24Vdc MDI 32 BIS32 channel digital input module, 120Vac/dc MDI 32 FIS32 channel digital input module, line monitored, 24Vdc MDI 32 SNL64 channel digital input module, simplex, 24Vdc MDI 64 BNS

32 channel digital output module, line monitored, 24Vdc MDO 32 BNS16 channel digital output module, line monitored, 120Vac/dc MDO 16 FNS

32 channel analogue input module, isolated, 0/5Vdc MAI 32 LAD32 channel analogue input module, isolated, 0/10Vdc MAI 32 MAD

4 channel analogue output module, non isolated, 4/20mA MAO 04 NND

4 Channel pulse input/4 channel analogue output module (PIANO), 4/20mA MHB 44 IND

64 channel display driver, motherboard (single/dual) TM117–DMxM/B64 channel display driver, daughterboard (single) TM117–DMxD/B

Hot repair adaptor (set of two) THRBlanking plate ML

19

G e n e r a l P r o d u c t S p e c i f i c a t i o n s

Overall SizesAll Chassis Types 19” Rack Mounted x 398mm height x 474mm depthAll I/O Module Types 365.8mm high x 28mm width x 394mm depthAll Termination Cards Types DIN Rail mounted 162mm high x 110mm width x 56mm depthAll Power Supply Types 198mm high x 67mm width x 417mm depth

Approximate WeightsMain Chassis with two PSU’s and three Processors 16.8kg (37.0lb)Extension/Remote Chassis with two PSU’s and Three Extender Modules 17.1kg (37.7lb)Power Supply Module 2.3kg ( 5.1lb)

Processor Module 1.4kg ( 3.1lb)I/O Module 1.6kg ( 3.5lb)Communication Module 1.1kg ( 2.4lb)Termination Cards 310gm ( 0.7lb)Fully Populated Chassis 32.3kg (71.2lb)

Fabrication and Paint Finish Aluminium Chassis with Dusty Grey, Front PanelFinish (RAL 7037)

Environment SpecificationsOperating Temperature 0–60˚CStorage Temperature with Battery –30˚C to +75˚CRelative Humidity 5 to 95% Non-Condensing Vibration 1g at 5 to 500 Hz SinusoidalShock 20G for 12msElectro-static Discharge 8kV (IEC 801-4, level 3)

EMCImmunity EN50082-2Emissions EN50081-2

Power Supply ModulesNominal Input Voltage 24Vdc 120/240VacInput Voltage Range 20-36Vdc 92-132V & 192-276VacInput Power 200W Max 235W MaxOutput Power 150W Max 175W MaxOutputs 5.35V, 12Vdc 5.35V, 12VdcOutput Hold Up Time 20ms 20msFuse Ratings 10A 5AIsolation 2500Vdc 3750VacOutput Current 23A, 4A 23A, 4A

ABB is a global electrical engineering group which is active in manyareas associated with the generation, transmission, distribution anduse of electrical power. The ABB Group comprises 1,000 companiesin 140 countries.

ABB is one of the Worlds largest suppliers of industrial automation anddrive systems, products and services. The company uses its uniqueglobal resources to provide the highest level of customer value throughindustry-leading technology and cost effective, industry-specificapplication knowledge with uncompromising commitment to quality.

ABB is a leading supplier of fault tolerant TMR products and systemsfor emergency shut down, fire and gas and critical controlapplications.

Email: info@triguard.co.uk

008-5185-02(12/01)

ABB Industri LtdManor RoyalCrawleyWest SussexRH10 2PUK

Tel: +44 (0)1293 442135Fax: +44 (0)1293 442149

ABB Automation Inc.3010 Briarpark DriveHouston, Texas 77042USA

Tel: +1 713 821 8800Fax: +1 713 821 3510

ABB Automation LtdHoward RoadEaton SoconSt NeotsHuntingdonCambridgeshirePE19 3EU

Tel: +44 (0)1480 475321Fax: +44 (0)1480 217948

ABB Automation Pte Ltd539 Yishun Industrial Park ASingapore 768740

Tel: +65 756 7655Fax: +65 257 9839

ABB Industri ASHasleveien 50PO Box 6540 Rodeløkka0501 OsloNorway

Tel: +47 22 87 20 00Fax: +47 22 37 74 23