1

MicroNet TMR/5009
Digital Control System
Fault Tolerance

December 2018

Industrial Turbomachinery Systems

 2

TMR Architecture

KCM F KCM F KCMF

EPP T EPP T EPP T
RUU RUU RUU
N / D N / D N / D
EAA I EBA I E CA I
L N O L N O L NO
A A A
P L P L P L
S O S O S O
G G G
A S B S C S

MicroNet MicroNet
TMR Power TMR Power
Supply #1 Supply #2

POWER SOURCE POWER SOURCE

24Vdc, 115Vac OR 125Vdc 24Vdc, 115Vac OR 125Vdc

Industrial Turbomachinery Systems

 3

Fault Tolerance Hardware Platform Kernels

CPU A KERNEL P.S. A
V
SIO M Dual Port
PORT
E Right
B Buffers
U
S Buffers
CPU A C
P Dual Port
I/O U Right
A

CPU B KERNEL P.S. B

V
SIO M Dual Port
PORT
E Right
B Buffers
U
S Buffers
CPU B C
P Dual Port
I/O U Right
A

CPU C KERNEL P.S. C

V
SIO M Dual Port
PORT
E Right

B Buffers
U
S Buffers
CPU C C
P Dual Port
I/O U Right
A

Industrial Turbomachinery Systems

 4

Fault Tolerance Process

INPUT Double Control Single OUTPUT

Exchange & Vote Algorithm Exchange & Vote

INPUT Double Control Single OUTPUT

Exchange & Vote Algorithm Exchange & Vote

INPUT Double Control Single OUTPUT

Exchange & Vote Algorithm Exchange & Vote

Industrial Turbomachinery Systems

 5

Fault Tolerance Double Exchange

EXCHANGE EXCHANGE VOTE

Simplex
FTM CPU A CPU A CPU A APPLICATION
INPUT

path1
path 2
path 3
Simplex
FTM CPU B CPU B CPU B APPLICATION
INPUT

path 4
path 5
path 6

Simplex
FTM CPU C CPU C CPU C APPLICATION
INPUT

Industrial Turbomachinery Systems

 6

Fault Tolerance Double Exchange

EXCHANGE EXCHANGE VOTE

CPU A CPU A CPU A APPLICATION

path1
path 2
path 3
TMR APPLICATION
FTM CPU B CPU B CPU B REDUNDANCY APPLICATION
INPUT MANAGER

path 4
path 5
path 6

CPU C CPU C CPU C APPLICATION

Industrial Turbomachinery Systems

 7

TMR Single Input

Application
Redundancy
Fault Manager
Tolerant
FTM
+
MOD A A Input
-
Input A Kernel Fail
Terminal A Module Fail OR A Fault
Block: Channel Fail
MPU
+ +
-
4 - 20mA
SH
MOD B B Input Application
Contact In -
B Kernel Fail Input
B Module Fail OR B Fault
+ Channel Fail
MOD C C Input Application
- C Kernel Fail
OR
Input Fault
C Module Fail C Fault
Channel Fail

Industrial Turbomachinery Systems

 8

Application Redundancy Manager Truth Table

A Fault B Fault C Fault Application Input

False False False Median of three values
False False True HSS of A & B
False True False HSS of A & C
False True True A Input
True False False HSS of B & C
True False True B Input
True True False C Input
True True True Application Input set to zero and Fault set TRUE

Industrial Turbomachinery Systems

 9

Simplex, Dual, Triplicated Inputs

Input Simplex
Terminal FTM
Block: + Application
+
MPU
- MOD A Double Exchange and Vote
4 - 20mA
SH - Input #1
Contact In A Kernel Fail
A Module Fail OR Double Exchange and Vote #1 Fault
Input Channel Fail
Simplex
Terminal FTM
Block: +
MPU
+
MOD B Double Exchange and Vote
Application
-
4 - 20mA
Contact In SH -
B Kernel Fail
Input #2
B Module Fail OR Double Exchange and Vote #2 Fault
Input Channel Fail
Simplex
Terminal FTM
Block: +
MPU
+
MOD C Double Exchange and Vote Application
-
4 - 20mA
SH - Input #3
Contact In C Kernel Fail
C Module Fail OR Double Exchange and Vote #3 Fault
Channel Fail

Industrial Turbomachinery Systems

 10

FT Relay Configuration Picture

F/T Relay
Modules
3 F/T Relay
DI0 Outputs
A &
6 Contact
Inputs
I/O DI0 Per Module
Modules
B

DI0
C

Industrial Turbomachinery Systems

 11

Fault Tolerant Relay Module

A B C

F F F
T T T

D D D
MicroNet TMR
I I I 5009 Control
O O O

CUSTOMER
POWER

contact pwr contact pwr contact pwr FTM relay

box, 6 relays,
A1 B2 C2
on sockets

contact in contact in contact in

B1 C1 A2
Application
contact pwr contact pwr contact pwr
Wiring

LOAD
Industrial Turbomachinery Systems
 12

Latent Fault Detection Graph

24 Volt
Relays

Industrial Turbomachinery Systems

 13

TMR Single 4 - 20mA Output

Industrial Turbomachinery Systems

 14

TMR Single Coil Actuator

Industrial Turbomachinery Systems

 15

TMR Dual Coil Actuator

Industrial Turbomachinery Systems

15
 16

Questions????

Industrial Turbomachinery Systems