| | | Outstanding Characteristics • At no point does safety depend on only a single element, and the machine cannot be tripped by an individual error. Thereby enhanced safety and protection against a false trip. Reduces costs and increases machine availability. • Fast reaction within 15 milliseconds to an overspeed situation, including the safety relay response. • The ready wired 2of3 voted system output provides 2 parallel and isolated trip circuits by safety relay contacts. • The safety relays actuate two isolated trip alarm contacts plus another contact for a true response check by the system. • Each channel provides an extra input accepting an external signal for an alternative condition (temperature, pressure, flame), for possible inclusion into the voted trip. • Sensor monitoring, channel comparison, and plausibility check for the measurements detect a failure in its early stage, releasing a separate warning. • Alarms memory: An overspeed alarm, and a detected failure can be programmed to remain memorized for a later identification. • Our test routine as designed under IEC 61508 SIL3 exempts the user from the otherwise required periodic checks and the associated documentation. • One extra alarm as standard with each channel, freely programmable for speed setpoint and response. • Input repeating isolated pulse output to other device, powered to a 24 volts push-pull level. | | Structure of the E16 Systems providing true Triple Modular Redundancy • 3 monitoring channels. Each realized by a plug-in Monitor Module encompassing the full channel function from sensor input and signal process, up to and including the safety trip relay outputs. Also includes all the other standard or optional functions. • Every monitor operates independently, but in constant comparison to both its neighbours. • Every monitorwithin the system is placed in a plug-in socket, allowing its replacement under full operation. • The safety trip relay contacts of the 3 Monitors are ready hard wired on the back plane of the system to terminals, providing 2 isolated breaking trip circuits with a 2of3 voting, or separately from each monitor, as option. Optional Test Module The three channels can be augmented by an independent Test Generator Module. This enables under load response checks by sequentially applying its speed simulating frequency signal to each channel. This can be carried out manually by push buttons at the system, or optionally as an automatic test routine follow ing a programmed test cycle, under full operation of the turbine. Each channel's reaction to the test is observed, and a failure signal released if the response is not as expected. More functions as option To meet further demands, additional functions are available, to each of the 3 channels (alarms then with an additional 2of3 voter on request): • up to 8 setpoint alarms, • up to 3 analog outputs, • PROFIBUS data interface, • detector for the direction of rotation, • acceleration monitor • monitor for speed and difference of an additional drive (turn gear, for instance) • Isolating barriers to intrinsically safety sensors, located in a hazardous (Ex-)area. | | |