background image

7

Tripping Reliability

IO

N

e

t

C

ro

s

s-

T

ri

p

IO

N

e

t

C

ro

ss

-T

ri

p

IO

N

e

t

C

ro

s

s-

T

ri

p

IO

N

e

t

C

ro

s

s-

T

ri

p

Simpl ex

Non- Redun dant

Simp lex

Non- Red undan t

Dual Redu ndan t

Dual Red und ant

Con troll er

R

Contr ol
V al ves

Contr ol ler

R

Control

Valve s

Control ler

R

S

Con trol
Va lves

1/2

Contr oller

R

S

Co ntrol

Valves

1/2

Tr ip

Sole noid s

Tri p

Sol enoi ds

Trip

S olen oi ds

Tri p

Sole noid s

X

B ackup Tr ip

Protection

X

Y

2/3

Z

Backup Tr ip

Pr o tection

X

Backup Tr ip

Pr otectio n

X

Y

2/3

Z

Backup Tr ip

Pr o tection

R

AN D

Run

X

R

OR

Tri p

X

R

AND

Run

X
Y

MED

Z

R

OR

S

X

AND

Run

R

R

OR

S

X
Y

MED

Z

R

A ND

Run

R

OR

Tr ip

X
Y

MED

Z

OR

S

X

OR

Trip

OR

OR

S

X
Y

MED

Z

Trip

Protection Redundancy, Simplex and Dual Redundant Systems

Turbine control applications have primary and backup trip protection for tripping reliability. The controller and its
corresponding I/O control, protect, and monitor the turbine. Primary protection includes a full set of all trip functions, and
backup protection includes a small subset of the protection functions to backup the primary. Typical backup functions include
emergency overspeed protection, manual- emergency trip, and synch check protection for generator drives. Additional backup
functions can be added as required for specific applications or industry code requirements.

Backup protection is completely separate and independent from the primary protection, including separate power supplies,
processors, and I/O. In addition, the hardware and application software are sufficiently dissimilar from the primary to
dramatically reduce the probability of common mode failures between the primary and backup protection due to common
technology. Backup protection is frequently supplied as triple redundant regardless of the redundancy configuration of the
primary controllers.

Instruction Guide

GEI-100728A

15

Public Information

Содержание Mark VIe

Страница 1: ...nt contains non sensitive information approved for public disclosure GE may have patents or pending patent applications covering subject matter in this document The furnishing of this document does no...

Страница 2: ...Controller 7 5 I O Network Redundancy 7 6 I O Redundancy 8 6 1 Dual Redundancy 8 6 2 Triple Modular Redundancy 11 7 Tripping Reliability 15 8 Digital Bus Reliability 17 8 1 FOUNDATION Fieldbus 17 8 2...

Страница 3: ...ting the process Field components for example sensors actuators and wiring cause over half of forced outages Therefore redundancy of field components is an important consideration in the overall contr...

Страница 4: ...one component is out voted by the other two In the case of three lube oil pressure switches the protective system performs a simple logical vote with no need to predict in advance a probable failure m...

Страница 5: ...ing Blocks Controller 3 IONET Ports 2 Control Network Ports 1 COM Port IONET Switch I O Module I O Pack Local Processor Data Acquisition Terminal Block Typical Mark VIe Architecture Instruction Guide...

Страница 6: ...ther the controllers are redundant or non redundant But they can be supplied in redundant pairs too if required Additional redundancy options are available Internal Power Converters Create 28V dc for...

Страница 7: ...board rack or mounted inside the rack with communication on the backplane The I O network consists of active electronics at both ends and multiple failure modes so its redundancy is just as important...

Страница 8: ...at the I O pack level Therefore replacement of I O has minimal impact on monitoring and control of the overall control system An extension of this is to add a third sensor whose value can be voted in...

Страница 9: ...ovides recovery data 4 Receives external commands 5 Creates process alarms Data outputs from dual redundant controllers are normally implemented with each controller sending its signal to its switch a...

Страница 10: ...ollers IONET switches and Ethernet ports on a common I O pack which controls a relay driver and a relay Level 2 also provides dual redundant controllers and IONET switches but extends the redundancy t...

Страница 11: ...ed or transmitted individually Fanned inputs are transmitted on the IONET with three I O packs on the I O module Therefore a failure of an I O pack does not inhibit any controller from seeing all of t...

Страница 12: ...les 3 Less IONET switches Non critical data that is being used for non essential monitoring is usually implemented without redundancy Redundant and non redundant I O coexists in most control systems T...

Страница 13: ...nt sharing circuit Analog Voting occurs with a3 coil servo Extended Voting at Field Device Example 3 Coil Servo Valve Actuator Typical nuclear configuration Valve Regulator Valve Ref Valve Regulator V...

Страница 14: ...Requirements for no single point failures must be evaluated on a case by case basis to determine the best way to approach this from the system level The preceding figure displays a variation of outpu...

Страница 15: ...responding I O control protect and monitor the turbine Primary protection includes a full set of all trip functions and backup protection includes a small subset of the protection functions to backup...

Страница 16: ...control valves and de energize the trip solenoids from the primary side Another example the backup protection monitors communications from each controller so it can be configured to initiate a trip o...

Страница 17: ...the designated controller and a secondary controller Therefore the primary linking device is the one connected to the primary controller Less common are applications with a single controller and redun...

Страница 18: ...al Controllers Supplies Switches Simplex Non redundant Dual with Redundant I O Full Triple Redundant Dual Redundant Triple Relative Contributions to Reliability and MTBFO Adding redundancy to the elec...

Страница 19: ...Public Information...

Отзывы: