Schneider Tricon ™ V9-v11 Systems High Fault Tolerant Programmable Logic and Process Controllers

Schneider Tricon ™  V9-v11 Systems High Fault Tolerant Programmable Logic and Process Controllers

Overview of System Core

Product positioning: Tricon v9-v11 is a high tolerance error controller under Schneider Electric, designed specifically for safety critical applications. Its core advantage is fault tolerance, which can maintain error free control in the event of component hard or transient faults.

Core architecture: Triple Modular Redundancy (TMR) is adopted, with three independent channels executing control programs in parallel. Digital inputs and outputs are subject to majority voting through hardware/software mechanisms, while analog inputs are selected using median selection to ensure data integrity.

Key features: Supports online installation and maintenance, remote I/O expansion (up to 12 kilometers through SRXM module), enhanced diagnostic monitoring, and multi protocol communication interconnection.

International certification: Passed multiple certifications such as CSA in Canada, FM in the United States, T Ü V Rheinland in Germany, and the Nuclear Regulatory Commission (NRC) in the United States, and meets standards such as IEC 61508 (SIL 1-3) and ATEX Zone 2.

Hardware Components and Configuration

Component type, key models/parameters, core functions

The main chassis 8110 (supporting 6 sets of I/O modules) and 8120E (enhanced, supporting UCM modules) accommodate the main processor, power module, and provide I/O expansion bus

Expansion chassis 8111 (8 sets of I/O modules), 8121 (low density, supporting HART modules) to expand I/O capacity, with a distance of ≤ 30 meters from the main chassis

Remote chassis RXM 8112 supports remote I/O expansion, up to 12 kilometers away

Main processors (MP) 3006/3007 (v9.0-9.5), 3008 (v9.6-10. x), 3009 (v11. x) execute control programs, manage I/O and communication, TriBus speed up to 1000 Mbps

The power module 8310 (120 VAC/DC), 8311 (24 VDC), and 8312 (230 VAC) are designed with dual redundancy. A single module can support the entire chassis load and output 6.5 VDC

The I/O module supports analog input (3700A/3703E), digital output (3604E/3625), thermocouple input (3708E), and supports analog input (0-10 VDC/4-20 mA), digital input (24-115 VAC/DC), pulse signal acquisition and output

Communication modules TCM (supporting Ethernet/Modbus), UCM (compatible with Foxboro Evo), and HART modules (2770H/2870H) enable communication with DCS systems and external devices, and support OPC and GPS time synchronization

Working principle and fault-tolerant mechanism

Redundant workflow: Three main processor channels independently execute control programs, synchronize data through TriBus, perform "2/3 voting" on digital input and output, and take the median of analog input to ensure that faulty channel data does not affect the final result.

Fault tolerance: When a single channel hardware fails, the other two channels automatically take over the function, and the faulty module can be replaced online without interrupting the controlled process; The power module and communication link both support redundant configuration.

Data processing: The input module microprocessor filters signals and diagnoses faults, the output module verifies output status and diagnoses wiring issues, and the main processor achieves data synchronization and error correction through TriBus.

Core functions and technical specifications

Hardware scalability

Chassis extension: up to 15, main chassis+extension chassis+remote chassis combination

I/O Capacity: Analog input/output up to 1024/512 points, digital input/output up to 2048 points, pulse input up to 80 points

Remote Expansion: Supports remote I/O connections up to 12 kilometers through RXM/SRXM modules

Communication and Interconnection

Supported protocols: Modbus (RTU/ASCII), TSAA, HART, TCP/IP, SNTP, etc

Interconnected systems: Foxboro I/A Series/Evo, Honeywell TDC-3000/UCN and other DCS

Communication speed: TriBus (4-1000 Mbps), I/O bus (375 Kbps), Ethernet (10/100 Mbps)

Diagnosis and maintenance

Diagnostic tool: EnDM software integration, real-time monitoring of hardware status, communication links, and program operation

Status indication: Each module is equipped with PASS/AULT/CTIVE indicator lights, supporting fault location

Online maintenance: The module is hot swappable and can be replaced without interrupting the on-site I/O signal

environmental adaptability

Working temperature: 0-60 ℃, storage temperature: -40-75 ℃

Humidity: 5% -95% (without condensation)

Corrosion grade: Class G3 (compliant with ISA S71.04 standard)

Vibration shock: 1 G (8.4-150 Hz), 15 G (6-11 ms)

Applicable scenarios and authentication

Typical Applications

Safety Instrumented System (SIS): Emergency Shutdown Interlock for Chemical and Petroleum Refining

Nuclear power applications: 1E level nuclear safety related controls

Marine environment: Ship automation certified by BV classification society

Other: Fire gas detection, semiconductor manufacturing safety control

Key certification

Electrical safety: CSA C22.2 No. 61010-1, UL 61010-1

Functional safety: T Ü V Rheinland IEC 61508 (SIL 1-3)

Hazardous environment: ATEX Zone 2, Class I Division 2

Nuclear Power Certification: NRC 1E Application Certification

Key issue

Question 1: What is the core redundancy mechanism of the Tricon v9-v11 system? How to ensure fault tolerance?

Answer: The core adopts a Triple Modular Redundancy (TMR) architecture, with three independent channels executing control programs in parallel. Input and output are processed through a hardware voting mechanism - digital quantities use "2/3 majority voting", and analog quantities use "median selection"; When a single channel fails, the other two channels automatically take over the function, and the faulty module can be replaced online without interrupting the controlled process. The power module and communication link support redundant configuration to ensure that the system has no single point of failure.

Question 2: What key hardware extensions does the Tricon v9-v11 system support? What is the maximum configuration limit?

Answer: Hardware expansion includes chassis expansion (main chassis/expansion chassis/RXM remote chassis), I/O module expansion (analog/digital/pulse/thermocouple, etc.), communication module expansion (TCM/UCM/ACM, etc.), and remote I/O expansion (up to 12 kilometers through SRXM module); The maximum configuration limit is 15 chassis and 118 I/O modules, supporting up to 2048 digital input/output points, 1024 analog input points, and 512 analog output points.

Question 3: What are the applicable scenarios and core certifications for the Tricon v9-v11 system?

Answer: Suitable for safety critical scenarios such as chemical safety instrumented systems (SIS), petroleum refining process control, nuclear power 1E level applications, marine automation, and fire gas detection; Core certifications include electrical safety (CSA, UL), functional safety (T Ü V Rheinland IEC 61508 SIL 1-3), hazardous environments (ATEX Zone 2), nuclear power certification (NRC), marine certification (BV), etc., meeting compliance requirements for industrial applications in multiple global locations.