Tricon Controller

1
What is a Tricon controller?

 Physical
– Chassis
– I/O and communication modules
– Field termination modules
– Elco Cables

 Functional
– State of the art programmable logic controller that monitors and
controls your process
– Provides Triple Modular Redundant system (TMR)
– Used where high level of SAFETY and RELAIBILITY is needed.

2
Tricon controller applications

 Emergency shutdown (ESD)

 Turbo-Machinery control (TMC)
 Boiler management System (BMS)
 Fire & gas protection (F&G)
 Nuclear
 Any critical process

3
Tricon controller features

 Triple redundancy (no single point of failure)

 Isolated architecture
 Diagnostics (transparent to the user)
 On line repair and replacement
 Offline control application program emulation
 Direct communication to Distributed Control Systems
(DCS)
 Open communication with external Human Machine
Interfaces (HMI)

4
TMR Architecture

5
What is Triple Modular Redundancy?

Triple Modular Redundancy (TMR)

Diagnostics are Embedded in the System

Independent of User Written Application Programming!

6
What is Triconex TMR ?

 Three (3) Main Processors

– Three (3) identical, independent Channels executes the control program
independently:
 Electrically and mechanically isolated
 Do not share components

 Each MP controls a specific channel and executes the Control

Program in parallel with each other

7
What is Triconex TMR ?

 The Tricon controller provides fault tolerance through Triple Modular

Redundant (TMR) architecture.

 The controller consists of three identical system channels, except for

the Power Modules which are dual-redundant.

 Hardware voting mechanisms qualify and verify all digital inputs and
outputs from the field; analogue inputs are subject to a mid-value
selection process.

8
Fault Tolerance

 The ability to detect transient and steady-state error

conditions and to take the appropriate corrective action on-
line.
 No single point of failure in any one channel can pass to
another channel (as the three channels are isolated), if a
hardware failure occurs in one channel the faulty channel
is overridden by the other channels.
 Removing and replacing (if and when necessary) a failed
module in the faulty channel while the Tricon is on-line.