Tricon Triple-Modular Redundant Controller: TMR Architecture for Critical Process Safety

Network Communication Module (NCM): Supports IEEE 802.3 Ethernet with a running speed of 10Mbps, used to connect external hosts and Triconex dedicated applications.

Security Manager Module (SMM) and Hiway Interface Module (HIM): specifically designed for integration with Honeywell TDC 3000 DCS. SMM is directly mounted on the Universal Control Network (UCN), while HIM is connected through a data highway, making Tricon a secure node for Honeywell systems.

Advanced Communication Module (ACM): Used as an interface for Foxboro I/A Series DCS, mounted on Nodebus, achieving deep integration with Foxboro system.

2. Network Protocol and Security

Tricon supports multiple protocols, including Modbus master/slave, TCP/IP, UDP/IP, as well as Triconex's proprietary Peer to Peer and time synchronization protocols.

In terms of security, the communication system supports module level, medium level, and workstation level redundancy. By installing dual TCM or NCM and connecting dual network cables, the system can withstand cable breakage, port failures, and even module failures without losing communication connections. In addition, the write protection function can prevent external DCS or hosts from illegally modifying the Tricon security logic, ensuring the independence of the security system.

Software Engineering and Sequential Event Recording

Powerful hardware cannot do without excellent software support. The TriStation 1131 development workstation is the engineering core of the Tricon system and fully complies with the IEC 61131 international standard.

1. Programming environment and language

TriStation 1131 provides three programming languages: Function Block Diagram (FBD), Ladder Diagram (LD), and Structured Text (ST), which meet the programming habits of different engineers. In addition, Triconex offers the optional CEMPLE (Causal Matrix Programming Language Editor) for the widely used causal matrix in the process control industry. CEMPLE allows engineers to directly associate "causes" and "consequences" in a two-dimensional matrix and automatically convert them into functional block logic that complies with IEC standards, greatly reducing the risk of programming errors and improving development efficiency.

2. Sequential Event (SOE) capability

In accident analysis, it is crucial to determine the order in which accidents occurred. The Tricon controller has a powerful sequential event recording function built-in. During each scan, the main processor checks for specified discrete variable state changes (i.e. events), stamps them, and stores them in a buffer.

SOE software can collect event data from multiple networked Tricon controllers. Through Peer to Peer networks, the time synchronization error of all controllers can be controlled within ± 25 milliseconds. This high-precision time recording capability enables operators to accurately restore the on-site state at the time of the accident, analyze which sensor's false alarm caused the trip, or the delay problem in the control logic itself.

On site terminals and wiring options

To adapt to harsh on-site environments and complex wiring requirements, Tricon offers a diverse range of External Terminal Blocks (ETPs) and cable options.

1. External Terminal Board (ETP)

ETP is an electrically passive printed circuit board used to connect field wiring. It allows for disassembly or replacement of I/O modules without interfering with on-site wiring. Tricon offers standard terminal boards, basic terminal boards, non flammable terminal boards, and terminal boards with intermediate relays.

Non flammable terminal board: certified by T Ü V, suitable for Zone 2 and Class 1, Division 2 hazardous areas. Its internal circuit limits energy release, and even if the on-site wires are short circuited or disconnected, it will not ignite the surrounding atmosphere.

Relay terminal board: suitable for situations where the load current is greater than 2A or the voltage is higher than 115VAC, providing physical isolation and additional driving capability.

2. Fan out the cable

As a low-cost alternative, one end of the fan out cable is connected to the Tricon base plate, and the other end provides 50 dispersed numbered cables. Although it does not support analog signals, in digital I/O applications, it can effectively lead signal wiring out to the outside of the control cabinet, simplifying the wiring layout.

Environmental adaptability and certification standards

The design of the Tricon controller fully considers the harsh environment of industrial sites. Its operating temperature range can reach 0 ° C to 60 ° C, and it has anti vibration, anti impact, and high-level electromagnetic compatibility (EMC) capabilities, meeting CISPR 11 Class A standards.

In terms of safety certification, the Tricon v9 and v10 series have been certified by multiple international authoritative organizations, including T Ü V Rheinland, CSA, and FM. It complies with the IEC 61508 standard and can be used for emergency stop applications at SIL 1 to SIL 3 levels; It also complies with standards such as DIN V 19250 (AK 1-6), EN 54 (fire and gas detection), and NFPA 8501 (burner management). For nuclear industry applications, Tricon also meets the Class 1E equipment requirements of the US Nuclear Regulatory Commission (NRC). These certifications provide a solid compliance foundation for Tricon's global applications, particularly in the field of life safety.