ICS TRIPLEX T8160

Description

ICS TRIPLEX T8160
Trusted TMR Processor
Product Overview
The Trusted® Processor is the main processing component in a Trusted System. It is a powerful,
user-configurable module providing overall system control and monitoring facilities and processes
input and output data received from a variety of analogue and digital Input / Output (I/O) modules
across a Trusted TMR Inter-Module Communications Bus.
The range of applications for the Trusted TMR Processor vary in integrity level and include fire and
gas control, emergency shutdown, monitoring and control, and turbine control.
Features:
• Triple Modular Redundant (TMR), fault tolerant (3-2-0) operation.
• Hardware Implemented Fault Tolerant (HIFT) architecture.
• Dedicated hardware and software test regimes which provide very fast fault recognition and
response times.
• Automatic fault handling without nuisance alarming.
• Time-stamped fault historian.
• Hot replacement (no need to re-load programs).
• Full suite of IEC 61131-3 programming languages.
• Front panel indicators that show module health and status.
• Front panel RS232 serial diagnostics port for system monitoring, configuration and
programming.
• IRIG-B002 and 122 time synchronisation signals (available on T8110B only).
• Active and Standby processor fault and failure contacts.
• Two RS422 / 485 configurable 2 or 4 wire connections (available on T8110B only).
• One RS485 2 wire connection (available on T8110B only).

Communication between the Trusted TMR Processor and modules in other chassis is via
either a Trusted Interface module, such as the Trusted TMR Interface to a Regent+Plus I/O
chassis, or an Expander Interface to an Expander chassis.
The functions of the four types of module memory are:
• EPROM – Holds module bootstrap loader
• Flash ROM – Stores module firmware and the application program
• DRAM – Working memory with scaleable capacity
• NVRAM – Holds data such as event logs and retained program data
Note: The NVRAM provides data retention for up to 10 years.
The Front Panel comprises a fault containment region (FCR D) separate from the other FCRs
and contains non-critical functions. These include:
• The diagnostics port and maintenance enable keyswitch mounted on the front panel
of the Processor.
• The serial communications drivers and the IRIG-B interface. These are accessed
through the I/O connector via adapter units at the rear of the Processor.
• Participates in all module voting operations.
• Sends Fault/Fail signals to external indicators via the adapter units at the rear of the
Processor.
Two IRIG-B input standards are available to the Processor; IRIG-B002 and IRIG-B122. The
standard used by the Processor is controlled by software setting a flag in the memory. The
IRIG-B signals are used to synchronise systems and time-stamp entries in the Sequence of
Events (SOE) log.
Three serial communication options are available from the 4-channel Universal
Asynchronous Receiver/Transmitter (UART). These are detailed as follows:
• Channel 0 Front Panel Diagnostic Port (RS232)
• Channel 1 Not configured
• Channel 2 Communications Serial Port 2 (RS422/485)
• Channel 3 Communications Serial Port 3 (RS422/485)
The Trusted operating system (Trusted OS) is used in support of the Motorola Power PC
series processor architecture. The real time kernel is a high speed, high functionality kernel
made for fault tolerant distributed systems. The distributed communication is made
transparent over all processors.
The kernel provides basic services (such as basic memory management), and interference
free software environments which allow software of various integrity levels to reside and
co-operate in a single processing environment.