EMERGENCY SHUT DOWN SYSTEM OVERVIEW

PREPARED BY KAMDAR K J

DATE-23/06/2000

1 / 26
INDEX

1.0 INTRODUCTION

2.0 TRICON ESD SYSTEM

3.0 TRICON SYSTEM CONFIGURATION

4.0 SOFTWARE PROGRAMMING

5.0 THEORY OF OPERATION

6.0 SYSTEM DIAGNOSTICS AND SAFETY APPROVAL

7.0 SECURITY

8.0 CONTROL PROGRAM & MAINTENANCE PRACTICE

9.0 LADDER LOGIC MODEL

2 / 26
 EMERGENCY SHUTDOWN SYSTEM

1.0 INTRODUCTION

Jamnagar Refinery Complex has about 25 nos of Emergency Shutdown System used for
the controlling of different plant units like CPP,Aomatics,PP, Crude, FCC etc. Shut
down system is used for interlocking , sequence of operation startup and shutdown of
the units.
Tricon is the one which we are using as Emergency Shut Down system and is supplied
by Triconex, USA, which is part of the Invensys group Companies.

The other make PLC’s which we are using in our complex are Allen Bradley,
Siemens ,hitachi, Telemechanique.

Triconex ESD system is a Triple Modular Redundant PLC system.

1.1 What is a PLC?

Programmable Logic Controller is a digitally operating electronic system designed

for use in an industrial environment which uses programmable memory for internal
storage of instructions for implementing specific functions to control various types of
processes.

3 / 26
 PROGRAMMABLE
LOGIC
CONTROLLER

INPUTS OUTPUTS

MACHINE OR
PROCESS

1.2 PLCs are used for

CONTROLLING SEQUENCE OF OPERATIONS.

INTERLOCKING BETWEEN VARIOUS SIGNALS
STARTUP AND SHUTDOWN OF PROCESS.
CONTROLLING PROCESS PARAMETERS
SAFEGUARDING OF EQUIPMENT

4 / 26
1.3 Advantages of PLC over the conventional relay logic

PLCs being programmable devices can be easily reprogrammed for the changed
requirements with minimum efforts and time whereby the relay based systems will need
much wiring changes and new instrument additions for the same changes to be carried
out. Conventional relay logic is a hardwired circuit with electromagnetic relays, timers
etc.

PLC’s and operator terminals eliminate the requirement for multiple instruments such
as timers, counters, trip amplifiers ,indicators, pushbuttons, annunciators ,switches etc.
The integration of number of instruments reduces the space requirements.
1.4 Why Triconex PLC is used as Emergency Shut Down system?
Tripple modular redundant processor increases the reliability and hence the availability
of the system
Extensive diagnostics
TUV safety certified system

2.0 Tricon as ESD System

2.1 What is Tricon?

The Tricon is state–of-art programmable logic controller that provides a high

level of system fault tolerance.

2.2 What is fault tolerance?

Fault tolerance is the ability to detect transient and to take appropriate corrective
action on-line. With fault tolerance, there is an increase in the safety and an increase in
the availability of the controller and the process being controlled.

The Tricon provides fault tolerance through Triple Modular Redundant (TMR)
architecture. The system consists of three identical system legs. Each leg independently
executes the control program in parallel with the other two legs. Hardware voting

5 / 26
mechanism qualify and verify all the digital inputs and outputs from the field. Analog
inputs are subject to a mid value selection process.

Each leg is isolated from each other’s. Hence, no single point failure in any leg
can pass to another. If a hardware failure occurs in one leg, the other two legs override
the fault leg.

Extensive diagnostics in each leg, module and functional circuit immediately

detect and report operational fault by means of indication or alarm.

2.3 Advantage of TRICON

 TMR architecture
 Withstands harsh industrial environment
 Replacing an I/O module does not disturb field wiring
 Supports upto 118 I/O modules and optional communication modules that interfaces
with modbus masters and slaves, Foxboro and Honeywell DCS systems and other
tricons on Peer-to Peer network.
 Provides supports for remote I/O modules upto twelve kilometers from the main
chassis
 Provides integral on-line diagnostics
 Supports Hotspare I/O modules for critical applications.

2.4 Design basis for the ESD Triconex System

 Standalone control system but also considerd for centralised configuration and
monitoring

 Triple Modular Redundant PLCs are used for ESD purpose

 Triconex is the nominated supplier of ESD system for the Jamnagar Refinery
complex
 Each ESD system is one of the nodes in the DCS system for the centralised
monitoring

 All the ESD systems are located in the respective PIB’s

6 / 26
 Scan time is around 100 msec

 Remote extender (RXM) Chassis/Module’s are used in some PIB’s through

Multimode / Single mode FO cables

3.0Tricon System configuration and Architecture

3.1.0 Hardware

Physically a Tricon High density system consists of Modules, the Chassis in

which modules are housed, Field wiring connection and the programmer’s workstation
(Tristation)

3.1.1 Tricon Modules

The Tricon supports Digital Input, Output, analog input/Output and Thermocouple input
cards etc. and Communication cards.
The Input/Output cards used in our Refinery complex are

3.1.2 I/O Modules

 Digital Input - Model 3503E

 Digital Output - Model 3604E
 Analog Input - Model 3700A
 Analog Output - Model 3805E

3.1.3 Communication Modules

 Advance communication Module (ACM )-Model 4609

 Network communication module (NCM) -Model 4329
 Remote extender module -RXM(Primary)-Model 4200 (multi mode)
4201(single mode)
 Remote extender module -RXM(Remote)-Model 4210 (multi mode)
4211(single mode)

3.2.0 Chassis

Three types of Chassis are used

1. Main Chassis

7 / 26
2. Expansion Chassis
3. Remote Extender chassis

A tricon can include upto 15 chassis, housing any combination of I/O modules.

3.2.1 Main Chassis

The main chassis of the Tricon houses the main processor modules and upto 6 I/O
modules within a chassis connected by means of a triplicated RS485 BI directional
communication port.

3.2.2 Expansion chassis

Expansion chassis supports up to 8 I/O slots each. Expansion chassis connected
to the main chassis by means of triplicated RS485 bi-directional communication ports.

The total standard cable length which can be used to join a set of main and expansion
chassis is 30 meters(100 feet)

3.2.3 Remote Expansion chassis

The remote Extender chassis enable the the system to extend to remote location up to
12 kilometers from the main chassis by using RXM modules which can support
Multimode as well as Single mode fiber optic cable.

3.3.0 Tricon Field wiring

External termination assemblies are available (Standard termination Panels) for

non IS inputs and MTL backplanes are used for IS input/outputs. 56-pin ELCO cable
(prefabricated) is used to connect the Standard termination Panel/MTL Motherboard
with the Tricon I/O cards.

4.0 Tricon Software Programming

4.1.0 Programming workstation

The fully expandable Version-9 (which we are using) TRICON system is

programmed with an engineering and maintenance workstation called Tristation. There
are two types of workstations are in use.

8 / 26
1. Dos based workstation called Multi system workstation, which supports ladder logic
programming language. This is the one, which we are using in our refinery complex.

2. Tristation 1131 Developers Workbench: which runs on Windows NT version 3.51 or

later and supports Function Block diagram, Ladder logic and Structured test.

4.1.1 Tristation is used for

 Develop and debug the control program

 System diagnostics
 Force points for loop checking and maintenance of field devices

5.0 Theory of operation – TRICON

Triple modular redundant architecture ensures fault tolerance and provides error
free, uninterrupted control in presence of either hardware failures of components or
transient faults from internal or external sources.

Every I/O module houses the circuitry for three independent legs. Each leg on the
input reads the process data and passes the information to its respective main processor.
The three processors communicate with each other using a proprietary high-speed bus
system called TRIBUS.

The tribus votes digital input data, compares output data and sends copies of
analog Input data to each main processor.

The main processors execute the control program and sends O/P generated by the
control program to the output modules. Output voting is done in output modules.

For each I/O module the system can support an optional hotspare module. If
present the hotspare takes control if a fault is detected on the primary module during
operation. The hotspare position is also used for on-line system repairs.

5.1 Main Processor Module

A tricon system contains three main processor modules each controls separate leg
of the system and operates in parallel with the other two main processors.

A dedicated I/O communication processor in the main processor manages the

data exchange between the main processor and the I/O modules.

9 / 26
 The Input data is assembled into a table in the main processor. The individual
input table in each processor is transferred to the neighboring processor over tribus.

The 32 bit main processor executes the control program in parallel with the
neighboring processor modules.

The control program generates a table of output values, which are based on the
table of input values according to the customer-defined rules built in to the application.
The I/O communication processor in the main processor manages the transmission of
output values to the output modules and the out put voting is being done in the O/P
module.

The Model 3006 main processor which we are using in the refinery complex
provides 2 MB RAM each, for fully expandable Version-9 Tricon system. The RAM is
used for the Programs, Seq. Of Event Data’s and I/O data, Diagnostics and
communication buffers.

In the event of power failure, Batteries protect the RAM.

5.2 Communication system

Tribus: Three independent serial communications operating at 4 MB. It synchronies the

processors at the beginning of scan. This does transfers analog and digital I/O and input
voting.

I/O Bus : 375 KB, triplicated I/O bus transfers data between I/O modules and the main
processor. It is an RS 485 communication.

Communication Bus 2Mb bus runs between communication modules like ACM,
EICM etc and the Main processor.

5.3 I/O Modules and Power Modules

5.3.1 Digital Input module
Tricon supports two types of modules. TMR and single. In TMR each digital
input module houses the circuitry for three identical legs. The legs are completely
isolated from each other and operate independently. Provides optical isolation between
field and the Tricon.

3503E (TMR) is the model of the digital input module used in the ESD systems

10 / 26
5.3.2 Digital Output Module
Every output module houses the circuitry for three identical legs which are
isolated like digital input card. All the output modules use special quadruplicated O/P
circuitry (2OO3 voting) which votes and gives the output.

3604E (TMR) is the model of the Digital Output module used in the entire refinery
ESD system.

5.3.3 Analog Input Modules

In the analog inputs the mid value is used by the control program. Incase of
duplex mode the average value is taken.

5.3.4 Communication module

By the use of communication modules like EICM, ACM and NCM the Tricon
can interface with modbus Masters and slaves, other Tricons in Peer-to-Peer networks
and Honeywell and Foxboro I/A series DCS systems.

The EICM supports RS232 and RS 422 serial communications.

The NCM supports 802.3 Ethernet port and the speed is 10Mb/sec
The ACM is used to interface with Foxboro I/A series DCS system.

5.3.5 Power modules

Each chassis houses two power modules arranged in a dual redundant

configuration. Each power supply can support power requirement for all the modules in
the Chassis in which it resides. A short in a leg disables the power regulator rather than
affecting the power bus.

6.0 System Diagnostics and Safety Approval & SOE functionality

6.1 System Diagnostics

Each tricon module can activate the system integrity alarm. The front panel of each
module provides indicators that show the status.
All the internal diagnostics and alarm data is available for remote logging and report
generation.

11 / 26
6.2 International approval

The tricon system is regularly evaluated by third party agencies and is certified to meet
the standards. Tricon Version-9 is TUV approved.

TUV Rheinland certificate ensures the functionality of Tricon systems for critical
process applications requiring maximum safety and uninterrupted operation. The
Version-9, which is being used in refinery, is TUV certified.

6.3 Sequence of Events

Tricon supports Sequence of events. This can be used for trip analysis. During
each scan the main processor inspect designated discrete variables for change of state
known as Events.When an event occurs, the main processor saves the variables current
state and time stamp in an area of memory called a buffer, which is part of an SOE
block. The SOE block is configured by using the Tristation.

7.0 Security

7.1 ACCESS LEVEL

The Tristation program manager directs for entering the security access level and then
the password before entering into the Program. The default function allowed at each
security levels is as follows.

Level-1 Monitoring and maintenance

Level-2 Same as above
Level-3 Program Development and modification
Level-4 Download all, Program change, Download change, Halt & Run etc.
In addition to these security levels, Program password can also be
provided

7.2 Tricon operational modes

The Tricon operational modes can be selected by the key switch, which is
Installed in the upper left corner of the main chassis.

There are four modes

1. Remote mode: which is used for Ladder monitoring, Change values, diagnostics
and external Host read write.

12 / 26
2. Program mode : In addition to the remote mode functions, SOE configuration can
be done in this mode.

3. Run mode: only for monitoring purpose. No Program change is allowed in this
mode.

4. Halt mode: to halt the processor from executing the program. This can be
overridden by the software disable option and it is disabled in Jamnagar refinery.

The External write functionality is configurable. Since Maintenance and Start-up

overrides are being done through DCS this option is enabled.

8.0 Control Program

The control program consists of

 A logical description of the Tricons hardware configuration which is done using the
Tristation
 Data types for the I/O points and memory values which is done using the dictionary
editor of tristation
 The control algorithm for achieving a desired control action using the Tristation
Ladder editor.

8.1 Maintenance
8.1.1 Procedure for downloading Changes

Down load change function is a convenient facility for making simple

modification to an on-line system and it should be done with extreme caution.

After down loading a control program to a tricon one should save the program
file. If one cannot find an exact copy on the harddisk of Tristation PC (may be due to
harddisk failure or file corruption) you can use the backup.

If no such back-up copies are available, doing Download All is the only option to
get connected with tricon.

Before start making any change to the control program, check the free memory.

Addition and Deletion of Chassis or changing of chassis type is not possible using
Download change. It requires Download all.

13 / 26
8.1.2 Procedure for controlling and changing existing program
Whenever a control program is changed even in minor way, all changes should
be controlled by a safety change control committee

Procedure

 Generate a change request, defining all changes and reasons

 Develop a specification for the changes
 Make appropriate changes to the control program including all documents related to
design, operation and maintenance.
 Take print of all the changes to be done and review and audit all changes
 Save the down load program in tristation and take back-up in diskettes

8.2 Numbering of The Program Version

There are two types of versions which represents the control program

Major and the other is Minor and it is represented like

Major.minor revision number Ex. Ver 2.1

Here the number 2 is the major version and 1 is the minor version.
To communicate with the tricon using tristation, both the versions should match.
Tristation automatically update the version number if there is a change to the program.
Download change will increase minor version while download all will increase the
major version.
The version number of a control program provides feedback as to what type of
downloading is needed during on line changes.

Ladder Logic Model

Mostly we are using two types of input processing.

1. Two out of Three logic
2. Two out of Two logic

14 / 26
Example

MOS AND 2OO2 LOGIC MODEL ( ONLY FOR REF)

LOGIC DESCRIPTION :

CASE #1 : NORMAL CONDN. – NO MAINTENANCE OVER RIDE APPLIED

WHEN ANY ONE OF THE TX’S OR BOTH THE TX’S ARE HEALTHY (NOT IN TRIP
CONDN)
THEN THE TRIP BIT WILL BE HEALTHY( 1- STATE ). F416015 COIL FOR THIS EX.
LOGIC.

CASE #2 : WHEN ONE OF THE TX IS TAKEN IN MAINTENANCE MODE

AT THIS CONDN. THE LOGIC WILL EXECUTE AS 1OO2 LOGIC ( WHEN THE 2ND TX
GOES
TO TRIP CONDN. THE TRIP BIT(F416015 ) WILL GO TO TRIP CONDITION ( 0 STATE ).
THERE IS AN OPTIONAL DELAY TIMER GIVEN FOR THIS CONDN PRESENTLY SET
AT 30 SECS.
( T160114 TIMER FOR 416FT015A TX).

DATA04- IS THE TRIP VALUE REGISTER WHERE

THE SET POINT IS FED IN ENGG UNIT.

Y16015A- IS A REGISTER WHICH HOLDS

THE ACTUAL SCALED VALUE IN ENGG UNITS
OF 416FT015A TX.

F16015A - TRICON TAG FOR ANALOG I/P

POINT FOR 416FT015A TX WHERE THE I/O
ASSIGNMENT IS GIVEN.

Q16015A- IS THE MOS SET BIT FOR 416FT015A TX

15 / 26
SCALING OF 416FT015A & B TRANSMITTER (120.0- HISCALE AND 0.0- LOW SCALE)
+---------------------------------------------------------------------------+
-|Y16015A=AIN(F16015A,120.0,0.0); |
|Y16015B=AIN(F16015B,120.0,0.0); |
|DATA04=30; |
+---------------------------------------------------------------------------+

+===========================================================================+
| 416FT015A MOS LOGIC |
+===========================================================================+

416FT015A MAIN MOS 416FT015A ONE MOS

MOS SET BIT ENABLD FROM MOS SET FBK ENABLED IN
FROM DCS CONSOLE GRP

S16015A H400005 Q16015A W16015A T160113

---] [-------] [-------]/[-------]/[-------------------------------------(TDD)
20000

Network # 228: Size: 92 bytes

416FT015A 416FT015A
MOS CNFM MOS SET FBK
BIT FROM
DCS

C16015A T160113 Q16015A

---] [-------] [---------------------------------------------------------(LCH)

416FT015A 416FT015A
MOS SET BIT MOS SET FBK
FROM DCS

S16015A Q16015A
---] [---+---------------------------------------------------------------(RST)

MAIN MOS
ENABLD FROM
CONSOLE

H400005
---]/[---+

16 / 26
 +===========================================================================+
| 416FT015B MOS LOGIC |
+===========================================================================+

416FT015B MAIN MOS 416FT015B ONE MOS

MOS SET BIT ENABLD MOS SET FBK ENABLED IN
GRP

S16015B H400005 Q16015B W16015A T160115

---] [-------] [-------]/[-------]/[-------------------------------------(TDD)
20000
Network # 231: Size: 92 bytes

416FT015B 416FT015B
MOS CNFM MOS SET FBK
BIT

C16015B T160115 Q16015B

---] [-------] [---------------------------------------------------------(LCH)

416FT015B 416FT015B
MOS SET BIT MOS SET FBK

S16015B Q16015B
---] [---+---------------------------------------------------------------(RST)

MAIN MOS
ENABLD

H400005
---]/[---+

17 / 26
 +===========================================================================+
| TRIP BIT GENERATION LOGIC FOR 416FT015A & 416FT015B TX'S |
+===========================================================================+

FL LL IN 416FT015A
GASLINE FD MOS SET FBK
TO REACTR

Y16015A Q16015A T160101

---]<=[------]/[---------------------------------------------------------(TDE)
DATA04 0

FL LL IN 416FT015B
GASLINE FD MOS SET FBK
TO REACTR

Y16015B Q16015B T160102

---]<=[------]/[---------------------------------------------------------(TDE)
DATA04 0

416FT015A
MOS SET FBK

Q16015A T160102 T160114

---] [-------] [---------------------------------------------------------(TDE)
30000

416FT015B
MOS SET FBK

Q16015B T160101 T160116

---] [-------] [---------------------------------------------------------(TDE)
30000

18 / 26
 +===========================================================================+
| FINAL TRIP BIT GENERATION |
+===========================================================================+

T160101 T160102 M160101

---] [-------] [---+-----------------------------------------------------( )
|
T160114 |
---] [-------------+
|
T160116 |
---] [-------------+

/B TRIP BIT

M160101 F416015
---]/[-------------------------------------------------------------------( )

+===========================================================================+
| TRANSMITTER DISCREPANCY FOR 416FT015A & 416FT015B |
+===========================================================================+

416FT015B 416FT015A/B
MOS SET FBK DISCRPNCY

T160101 T160102 Q16015B A416015

---] [-------]/[-------]/[---+-------------------------------------------(NOT)

416FT015A |
MOS SET FBK
|
T160101 T160102 Q16015A |
---]/[-------] [-------]/[---+
|
416FT015A
MOS SET FBK
|
Q16015A
---] [-----------------------+
|
416FT015B
MOS SET FBK
|
Q16015B
---] [-----------------------+

19 / 26
 START-UP-OVERRIDE LOGIC GENERATION AND IMPLEMENTATION.
STRIP RBLR PULSE TIMER
HTR F.G
STARTUP
O.RIDE

H221079 T210510
---] [-------------------------------------------------------------------(PLS)
20000

PULSE TIMER STR RBLR

T210510 HTR F.G
CONTACT STARTUP
O.RIDE ON

T210510 XL21079
---] [-------------------------------------------------------------------( )

20 / 26
2oo3 LOGIC MODEL ( REF ONLY )

LOGIC DESCRIPTION :

CASE #1 : NORMAL CONDN. – NO MAINTENANCE OVER RIDE APPLIED

WHEN ANY TWO OF THE TX’S OR ALL THE THREE TX’S ARE HEALTHY (NOT IN TRIP CONDN)
THEN THE TRIP BIT WILL BE HEALTHY( 1- STATE ). P415115 COIL FOR THIS EX. LOGIC.

CASE #2 : WHEN ONE OF THE TX IS TAKEN IN MAINTENANCE MODE

AT THIS CONDN. THE LOGIC WILL EXECUTE AS 2OO2 LOGIC ( ie OTHER TWO TX’S SHOULD GO
TO TRIP CONDN. TO CAUSE THE TRIP ACTION THEN ONLY THE TRIP BIT(P415115 ) WILL GO TO
TRIP CONDITION ( 0 – STATE ).

 IF THE TRIP IS ON HIGH HIGH THEN THE TX FAULT(E15015A FOR 415PT115A TX) WILL MAKE
THE TX TO TRIP CONDITION WHEN THE PARTICULAR TX FAILS/ CABLE CUT.

 DESCREPANCY ALARM FOR INDIVIDUAL TX HAS BEEN TAKEN BY COMPARING THE

MIDSELECTED VALUE TO THE OTHER TWO VALUE. IF THE DEVIATION IS MORE THAN 5% OF
THE RANGE THEN THE ALARM BIT (A415115- FOR 415PT115A TX) GOES TO ‘0’ STATE
( ALARM STATE)

DATA08- IS THE TRIP VALUE REGISTER WHERE

THE SET POINT IS FED IN ENGG UNIT. FOR THIS EX. THE TRIP VALUE IS 34

Y15115A- IS A REGISTER WHICH HOLDS

THE ACTUAL SCALED VALUE IN ENGG UNITS
OF 415 PT 015A TX.

P15115A - TRICON TAG FOR ANALOG I/P

POINT FOR 415 PT 115A TX WHERE THE I/O
ASSIGNMENT IS GIVEN.

Q15115A- IS THE MOS SET BIT FOR 415PT115A TX

21 / 26
SCALING OF 415 PT 115 A/ B / C

+---------------------------------------------------------------------------+
-|Y15115A=AIN(P15115A,60.0,0.0); |
|Y15115B=AIN(P15115B,60.0,0.0); |
|Y15115C=AIN(P15115C,60.0,0.0); |
|DATA08=34; |
+---------------------------------------------------------------------------+

+===========================================================================+
| 415PT115A MOS LOGIC |
+===========================================================================+

415PT115A MAIN MOS 415PT115A ONE MOS

MOS SET BIT ENABLD MOS SET FBK ENABLED IN
GRP

S15115A H400005 Q15115A W15115A T150112

---] [-------] [-------]/[-------]/[-------------------------------------(TDD)
20000

415PT115A 415PT115A
MOS CNFM MOS SET FBK
BIT

C15115A T150112 Q15115A

---] [-------] [---------------------------------------------------------(LCH)

415PT115A 415PT115A
MOS SET BIT MOS SET FBK

S15115A Q15115A
---] [---+---------------------------------------------------------------(RST)

MAIN MOS
ENABLD

H400005
---]/[---+

+===========================================================================+
| 415PT115B MOS LOGIC |
+===========================================================================+

415PT115B MAIN MOS 415PT115B ONE MOS

MOS SET BIT ENABLD MOS SET FBK ENABLED IN
GRP

S15115B H400005 Q15115B W15115A T150114

---] [-------] [-------]/[-------]/[-------------------------------------(TDD)
20000

22 / 26
 415PT115B 415PT115B
MOS CNFM MOS SET FBK
BIT

C15115B T150114 Q15115B

---] [-------] [---------------------------------------------------------(LCH)

415PT115B 415PT115B
MOS SET BIT MOS SET FBK

S15115B Q15115B
---] [---+---------------------------------------------------------------(RST)

MAIN MOS
ENABLD

H400005
---]/[---+

+===========================================================================+
| 415PT115C MOS LOGIC |
+===========================================================================+

415PT115C MAIN MOS 415PT115C ONE MOS

MOS ENABLD MOS SET FBK ENABLED IN
SET/CLEAR GRP
BIT

S15115C H400005 Q15115C W15115A T150116

---] [-------] [-------]/[-------]/[-------------------------------------(TDD)
20000
415PT115C 415PT115C
MOS CNFM MOS SET FBK
BIT

C15115C T150116 Q15115C

---] [-------] [---------------------------------------------------------(LCH)

415PT115C 415PT115C
MOS MOS SET FBK
SET/CLEAR
BIT

S15115C Q15115C
---] [---+---------------------------------------------------------------(RST)

MAIN MOS
ENABLD

H400005
---]/[---+

23 / 26
 +===========================================================================+
| TRIP BIT GENERATION FOR 415PT115A,415PT115B & 415PT115C TX'S |
+===========================================================================+

LPG HEADR
PR HH

Y15115A T150111
---]>=[------------------------------------------------------------------(TDE)
DATA08 0

LPG HEADR
PR HH

Y15115B T150113
---]>=[------------------------------------------------------------------(TDE)
DATA08 0

LPG HEADR
PR HH

Y15115C T150115
---]>=[------------------------------------------------------------------(TDE)
DATA08 0

TRIP DELAY 415PT115A

TIMER FOR TX FAULT
415PT115A
TX

T150111 E15115A M150112

---]/[-------]/[---+-----------------------------------------------------( )
|
415PT115A
MOS SET FBK
|
Q15115A
---] [-------------+

TRIP DELAY 415PT115B

TIMER FOR TX FAULT
415PT115B
TX

T150113 E15115B M150113

---]/[-------]/[---+-----------------------------------------------------( )
|
415PT115B
MOS SET FBK
|
Q15115B
---] [-------------+

TRIP DELAY 415PT115C

TIMER FOR TX FAULT
415PT115C
TX

T150115 E15115C M150114

---]/[-------]/[---+-----------------------------------------------------( )
|
415PT115C
MOS SET FBK
|
Q15115C
---] [-------------+

24 / 26
 +===========================================================================+
| FINAL TRIP BIT GENERATION BY ( 2OO3 VOTING) |
+===========================================================================+

415PT115A/B
/C TRIP BIT

M150112 M150113 P415115

---] [-------] [---+-----------------------------------------------------( )
|
M150113 M150114 |
---] [-------] [---+
|
M150114 M150112 |
---] [-------] [---+

+===========================================================================+
| TRANSMITTER FAULT 415 PT115 A / B / C |
+===========================================================================+

LPG HEADR 415PT115A

PR HH TX FAULT

P15115A E15115A
---]<[-------------------------------------------------------------------( )
650

LPG HEADR 415PT115B

PR HH TX FAULT

P15115B E15115B
---]<[-------------------------------------------------------------------( )
650

LPG HEADR 415PT115C

PR HH TX FAULT

P15115C E15115C
---]<[-------------------------------------------------------------------( )
650

25 / 26
 +===========================================================================+
| TRANSMITTER DISCREPANCY LOGIC |
+===========================================================================+
+===========================================================================+
| SELECTION OF MID VALUE OF 415PT115A/B/C |
+===========================================================================+

+---------------------------------------------------------------------------+
-|M150111=MEDSEL(Y15115A,Y15115B,Y15115C); |
+---------------------------------------------------------------------------+

+-----------------------------------------------------------------+
-----------|MAX1=60;MIN1=0.0;SPAN= MAX1 - MIN1; |
+-----------------------------------------------------------------+

+---------------------------------------------------------------------------+
-|M15115A = PERDEV(M150111,Y15115A,SPAN,0.05); |
+---------------------------------------------------------------------------+

+---------------------------------------------------------------------------+
-|M15115B = PERDEV(M150111,Y15115B,SPAN,0.05); |
+---------------------------------------------------------------------------+

+---------------------------------------------------------------------------+
-|M15115C = PERDEV(M150111,Y15115C,SPAN,0.05); |
+---------------------------------------------------------------------------+

415PT115A/B
/C
DISCRPNCY

M15115A A415115
---] [-------------------------------------------------------------------( )

415PT115A/B
/C
DISCRPNCY

M15115B B415115
---] [-------------------------------------------------------------------( )

415PT115A/B
/C
DISCRPNCY

M15115C C415115
---] [-------------------------------------------------------------------( )

26 / 26