Schneider Tricon ™ V9-v11 Systems High Fault Tolerant Programmable Logic and Process Controllers

Schneider Tricon ™  V9-v11 Systems High Fault Tolerant Programmable Logic and Process Controllers

Overview of System Core

Product positioning: Tricon v9-v11 is a high tolerance error controller under Schneider Electric, designed specifically for safety critical applications. Its core advantage is fault tolerance, which can maintain error free control in the event of component hard or transient faults.

Core architecture: Triple Modular Redundancy (TMR) is adopted, with three independent channels executing control programs in parallel. Digital inputs and outputs are subject to majority voting through hardware/software mechanisms, while analog inputs are selected using median selection to ensure data integrity.

Key features: Supports online installation and maintenance, remote I/O expansion (up to 12 kilometers through SRXM module), enhanced diagnostic monitoring, and multi protocol communication interconnection.

International certification: Passed multiple certifications such as CSA in Canada, FM in the United States, T Ü V Rheinland in Germany, and the Nuclear Regulatory Commission (NRC) in the United States, and meets standards such as IEC 61508 (SIL 1-3) and ATEX Zone 2.

Hardware Components and Configuration

Component type, key models/parameters, core functions

The main chassis 8110 (supporting 6 sets of I/O modules) and 8120E (enhanced, supporting UCM modules) accommodate the main processor, power module, and provide I/O expansion bus

Expansion chassis 8111 (8 sets of I/O modules), 8121 (low density, supporting HART modules) to expand I/O capacity, with a distance of ≤ 30 meters from the main chassis

Remote chassis RXM 8112 supports remote I/O expansion, up to 12 kilometers away

Main processors (MP) 3006/3007 (v9.0-9.5), 3008 (v9.6-10. x), 3009 (v11. x) execute control programs, manage I/O and communication, TriBus speed up to 1000 Mbps

The power module 8310 (120 VAC/DC), 8311 (24 VDC), and 8312 (230 VAC) are designed with dual redundancy. A single module can support the entire chassis load and output 6.5 VDC

The I/O module supports analog input (3700A/3703E), digital output (3604E/3625), thermocouple input (3708E), and supports analog input (0-10 VDC/4-20 mA), digital input (24-115 VAC/DC), pulse signal acquisition and output

Communication modules TCM (supporting Ethernet/Modbus), UCM (compatible with Foxboro Evo), and HART modules (2770H/2870H) enable communication with DCS systems and external devices, and support OPC and GPS time synchronization

Working principle and fault-tolerant mechanism

Redundant workflow: Three main processor channels independently execute control programs, synchronize data through TriBus, perform "2/3 voting" on digital input and output, and take the median of analog input to ensure that faulty channel data does not affect the final result.

Fault tolerance: When a single channel hardware fails, the other two channels automatically take over the function, and the faulty module can be replaced online without interrupting the controlled process; The power module and communication link both support redundant configuration.

Data processing: The input module microprocessor filters signals and diagnoses faults, the output module verifies output status and diagnoses wiring issues, and the main processor achieves data synchronization and error correction through TriBus.

Core functions and technical specifications

Hardware scalability

Chassis extension: up to 15, main chassis+extension chassis+remote chassis combination

I/O Capacity: Analog input/output up to 1024/512 points, digital input/output up to 2048 points, pulse input up to 80 points

Remote Expansion: Supports remote I/O connections up to 12 kilometers through RXM/SRXM modules

Communication and Interconnection

Supported protocols: Modbus (RTU/ASCII), TSAA, HART, TCP/IP, SNTP, etc

Interconnected systems: Foxboro I/A Series/Evo, Honeywell TDC-3000/UCN and other DCS

Communication speed: TriBus (4-1000 Mbps), I/O bus (375 Kbps), Ethernet (10/100 Mbps)

Diagnosis and maintenance

Diagnostic tool: EnDM software integration, real-time monitoring of hardware status, communication links, and program operation

Status indication: Each module is equipped with PASS/AULT/CTIVE indicator lights, supporting fault location

Online maintenance: The module is hot swappable and can be replaced without interrupting the on-site I/O signal

environmental adaptability

Working temperature: 0-60 ℃, storage temperature: -40-75 ℃

Humidity: 5% -95% (without condensation)

Corrosion grade: Class G3 (compliant with ISA S71.04 standard)

Vibration shock: 1 G (8.4-150 Hz), 15 G (6-11 ms)

Applicable scenarios and authentication

Typical Applications

Safety Instrumented System (SIS): Emergency Shutdown Interlock for Chemical and Petroleum Refining

Nuclear power applications: 1E level nuclear safety related controls

Marine environment: Ship automation certified by BV classification society

Other: Fire gas detection, semiconductor manufacturing safety control

Key certification

Electrical safety: CSA C22.2 No. 61010-1, UL 61010-1

Functional safety: T Ü V Rheinland IEC 61508 (SIL 1-3)

Hazardous environment: ATEX Zone 2, Class I Division 2