Fault-Tolerant Output Termination Board for Safety Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current safety control systems for industrial processes face challenges in maintaining operational reliability and cost-effectiveness, particularly in monitoring and replacing failed output modules without additional complexity or expense, while meeting Safety Integrity Level (SIL) requirements.
Innovation Solution
A termination board for connecting remote devices to digital output signals from a programmable logic controller, featuring a circuit board with switches to selectively supply DC voltage to redundant output modules, allowing for modular connection and fault-tolerant operation, and a program to monitor and test output channels, reducing the need for custom software and additional input modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If redundancy is incorporated by wiring two output modules in series to prevent single module failure, then safety reliability is improved, but system complexity and cost increase due to requiring both modules to remain functioning
Solution Approach 1:
A termination board is introduced as an intermediary device between the output modules and remote devices. The termination board includes switching circuitry that can selectively connect to either a first output module or a second output module, allowing automatic failover without requiring complex reconfiguration of the entire system. This intermediary device manages the complexity of redundancy while maintaining simplicity in the overall system architecture.
Solution Approach 2:
The system employs dynamic switching capability where the termination board can automatically transition connections from a failed output module to a redundant output module. This dynamic reconfiguration allows the system to adapt to failure conditions in real-time, maintaining operational reliability without requiring manual intervention or fixed complex wiring arrangements.
2Reliability
If custom software is developed to monitor additional signals and test output channels, then monitoring capability is improved, but development cost and complexity increase
Solution Approach 1:
The termination board incorporates self-testing functionality through dedicated test circuitry that automatically monitors the health of output modules and detects failure conditions. The system performs self-diagnostics without requiring external custom software, as the termination board's internal circuitry continuously monitors signal integrity and module status, generating fault indications that can be read by the control system.
Solution Approach 2:
The system implements feedback mechanisms where the termination board continuously monitors output module status and provides real-time feedback signals to the control system. Test circuitry generates feedback about the operational state of output channels, enabling automatic detection of failures and triggering appropriate failover actions without requiring complex custom monitoring software.
3Measurement precision
If additional input modules are added to monitor output module state, then monitoring precision is improved, but device complexity and cost increase
Solution Approach 1:
The termination board performs multiple functions including signal termination, module monitoring, fault detection, and automatic switching control within a single device. This multi-functional approach eliminates the need for separate dedicated input modules solely for monitoring purposes, as the termination board's monitoring capabilities are integrated into its core functionality, reducing overall system complexity.
Solution Approach 2:
The monitoring function is merged with the termination board's existing circuitry rather than being implemented as a separate input module. The termination board combines signal routing, fault detection, and module monitoring functions in a single integrated device, eliminating the need for additional standalone input modules and reducing system complexity while maintaining monitoring precision.
Data Source
AI summary
An output termination board for a safety system is disclosed herein. The termination board provides simplified wiring between the output modules and the remote devices operated by the controller in the system. Redundant output signals are generated within each pair of output modules and combined such that one control signal is sent to each remote device. In addition, a program executing on the controller of the safety system performs a test to determine if each output module is operating normally. If the program detects a fault in either output module, the safety system may alternately shut down according to a fail-safe procedure or continue operating under a fault-tolerant mode of operation.


