Triconex Tricon v9-v11 fault-tolerant control system: triple module redundant architecture and high availability design

3.1 Modbus and Ethernet Integration

Through TCM or EICM, Tricon can serve as a Modbus master or slave, compatible with Modbus interfaces from numerous suppliers' DCS such as ABB, Bailey, Fisher Rosemount, and Yokogawa. This integration method allows DCS to monitor the status of Tricon as the host, or allow Tricon to control Modbus slave devices (such as alarms, bypass switches on non critical PLCs) during non critical tasks.

NCM and TCM support IEEE 802.3 Ethernet protocol for higher bandwidth and open network requirements. This allows Tricon to connect to external host computers, operator workstations, and participate in OPC networks based on TCP-IP/UDP-IP protocols.

3.2 proprietary protocols and peer-to-peer networks

Triconex provides a proprietary protocol to optimize data exchange between security systems.

Peer to peer protocol: allows limited but critical process and security information to be exchanged between multiple Tricon controllers in a proprietary peer-to-peer network. This protocol is equal for every node in the network, and any node can initiate data transmission. This is very suitable for large factories that require sharing alarms or process status among multiple safety controllers.

Time synchronization protocol: used to maintain a unified and consistent time reference throughout the entire Tricon network or connected DCS. This is crucial for event analysis that requires precise time-series recording (SOE).

TriStation protocol: TriStation protocol is a master/slave protocol in which the host communicates with the slave via Ethernet.

TSAA: Allow external host applications (such as operating interfaces, data loggers) to interact with one or more Tricon controllers for reading and writing data through an open network.

3.3 Deep integration with DCS system

In addition to the universal Modbus and OPC, Tricon has achieved tight integration with mainstream DCS through dedicated modules.

Foxboro I/A series: Through ACM, Tricon serves as a secure node on the I/A series Nodebus, transmitting all Tricon alias data, diagnostic information, and system variables to the Foxboro operator workstation in a format familiar to Foxboro operators.

Honeywell TDC 3000: Connected to UCN through SMM or high-speed data through HIM, Tricon can transmit the processing results of critical I/O points to DCS, propagate alarms, and support peer-to-peer communication between DCS and Tricon.

3.4 Data Security and Redundancy Design

At the communication level, Tricon also adheres to its fault-tolerant philosophy. Module redundancy can be achieved by installing paired TCM, NCM, or ACM in the same logical slot and connecting their network nodes with two sets of cables. This design allows for communication continuity to be maintained in the event of cable breakage, intermittent connections, port failures, or module failures. External host redundancy can also be achieved by connecting a backup host on the network.

International certification and adaptability to harsh environments

The Tricon controller has obtained multiple international certifications to ensure its compliance and reliability worldwide. These certifications include:

CSA and FM certification: Compliant with electrical safety standards and approved for use in hazardous locations and general industrial environments.

T Ü V Certification: Compliant with IEC 61508 Functional Safety Standard (SIL 1-3), suitable for emergency safety shutdown, fire and gas detection, burner management, and other applications.

European Union CE Marking: Compliant with Electromagnetic Compatibility (EMC) and Low Voltage Equipment Directive.

In addition, the Tricon system has been tested and can operate in G3 level (harsh) environments that comply with the ISA S71.04 standard. This includes exposure testing of temperature, humidity, and corrosive gas mixtures, demonstrating their long-term durability under harsh industrial conditions. For marine environments, specific coating modules and Bureau Veritas certification ensure stable operation under high salt spray and vibration conditions.

Detailed explanation of main processor and bus system

5.1 Evolution of Main Processor: From Model 3006 to 3009

The Tricon v9-v11 series supports multiple generations of main processors, continuously improving performance and capacity:

Model 3006/3007: Supports v9.0 to v9.5. x systems, with a 32-bit central processing unit, SRAM capacity of 2MB or 1MB, and TriBus speed of 4 Mbps.

Model 3008: Supports v9.6 to v10. x systems, using Motorola processors, 16 MB DRAM, 32 KB SRAM, and TriBus speed increased to 25 Mbps.

Model 3009: Dedicated to v11. x systems, featuring a dual core processor, 256 MB DRAM, 2 MB SRAM, and equipped with SD card flash memory. When used in the 8120E rack, TriBus has a speed of up to 1000 Mbps and supports unified communication modules.

All main processors include independent I/O processors, communication processors, and TriBus FPGAs for data synchronization and voting. They are powered by dual power rails and have an RS-232 diagnostic port for technical analysis.

5.2 TriBus, I/O Bus, and Communication Bus

The Tricon backplane has etched a triple bus system: