Braun E16x442, Original Manual, Page: 7 / 73

I E16x442 Rev: 00 Page 7 of 73
1.3. System Applications and Explanation
Protection of rotating machinery such as turbines, expanders, compressors and motors with
safety requirements SIL2/ IEC61508 and/or API 670 versus Overspeed and other Critical Con-
ditions.
The E16x442 system incorporates one Test interface type E1691 and three Monitors (chan-
nels) A, B and C of type E1665 for the evaluation of speed signals and external trip signals.
The logic blocks for the evaluation of the external trip signals are named "Voter".
The logic results of the three channels are connected internally to form three 2oo3 trip circuits
I, II and III which are named "Trip-Lines".
The Trip-Lines can be connected to a 1oo2 or 2oo3 solenoid valve block.
A released trip status can be latched, this function is named "Trip-Lock".
Trip is released by shut down of the Trip Circuits (Trip-Lines) to the solenoid valve block if:

2oo3 monitors detect Overspeed condition

2oo3 sensor signals are detected as faulty by monitors

2oo3 monitors detect External Trip-Condition by their voters (1oo2, 2oo2, 2oo3 or 3oo3
logic selectable)
1.4. Key Features of System E16x442
Trip Release Function is SIL2/IEC61508 compliant as stand alone unit (without external
testing by DCS or by operator).
Total Response Time to Trip Condition : < 15 milliseconds
Maximum Safety at Maximum Availability by :

TMR (Triple Modular Redundancy) with three monitors E1665.

Triple speed measurement and evaluation by each monitor.

Variable overspeed setpoint depending on acceleration.

Monitoring versus Lowspeed as protection versus incorrect mounting or malfunction of
speed sensors.

Permanent monitoring of speed sensors.

Evaluation of external Trip-Condition signals by voters in each monitor. Response to sig-
nals selectable for each voter individually (logic function, low/high: trip, response time).

Each Trip Line (trip circuit) in 2oo3 technique.

Trip Lines I, II, III, IV, V, VI are formed by safety relays with force guided contact sets.

Trip-Line-Monitoring with Trip-Lock Function (selectable)

The outputs of the Trip Lines I, II and III are permanently monitored. If the Trip-Lock Func-
tion is engaged, a trip condition is detected and locked if 2oo3 trip lines are in trip condi-
tion.

By the (selectable) Trip-Lock Function a released trip is latched