Triple Controllers (TMR)

The TMR control

architecture contains
three controllers, three
IONets, and singular or
fanned TMR I/O
Modules.

The TMR control

architecture
reliability/availability is
much better than the
dual controller due to
increased fault
detection capability. In
addition to all of the
dual redundant
features, the TMR
controller provides three
independent outputs to
all TMR I/O modules and
the state variables
between controllers are
voted rather than
jammed.

In a TMR control system

all three controllers
receive inputs from the
I/O modules on all
networks and transmit
outputs on their
respective IONet
continuously. If a
controller or network
component fails, the
system does not require
fault detection or fail
over time to continue
operating.

All controllers transmit

their copy of the state
variables after the
output packet has been
transmitted. Each
controller takes the
three sets of state
variables and votes the
data to get the values
for the next run cycle.