
(T3461A, 62A, 68A) DC Guarded Digital Output Modules
PD
-
6019
Mar
-
06
3
energized. This combination of series output switches and
independent drive signals produces fail
-
safe activation of the
load. Single failures can only affect one of the output drive
signals or switches. A single failure will result in either
continued correct control or a fail
-
safe output as shown in
Table
1
.
Table
1
. Output States After Switch Failure.
Continued correct control.
Automatic testing detects
stuck
-
on switch. If output is
subsequently commanded
off, output will turn off.
Fail
-
safe output. Automatic
testing detects stuck
-
off
switch.
Continued correct control.
Automatic testing detects
stuck
-
off switch. If output is
subsequently commanded
on, output will turn on.
Fail
-
safe output. Automatic
testing detects stuck
-
off
switch. If ou
tput is subse
-
quently commanded on,
output will remain off.
To achieve fault tolerance, two Guarded output modules are
used with their outputs connected in parallel. This
configuration provides for continued correct control even
when one output switch fails off (cases two and four in Table
1
). The module failure is automatically detected and the
module can be removed and replaced without interrupting
output control.
Testing and Diagnostics
The voter and I/O bus interface logic o
f the Guarded output
modules is automatically tested by the processor modules.
Discrepant data are sent through one of three legs of the I/O
Safetybus to determine whether the module’s voters are able
to outvote the incorrect data. A failure to return the correct
Comentarios a estos manuales