SDS-9110
AADvance Industrial Control System
9110 Processor Module
Introduction
The 9110 Processor Module is the
central processing unit of the AAD-
vance Safety Controller. It is de-
signed and certified to IEC 61508
standard and carries out the follow-
ing main safety controller tasks:
Executes the AADvance
Safety Kernel to solve applica-
tion logic.
Interfaces with the I/O mod-
ules, reading and processing
input data and writing output
data.
Communicates with the exter-
nal control network and inter-
faces with other processor
modules in the network.
nd
Issue 2: 2 June 2008
Initiates periodic diagnostics
for I/O modules and internal
testing.
A single processor arrangement
can support simplex SIL 2 safety
controller applications; when em-
ployed in a dual or triple arrange-
ment, the processors can support
SIL 3 fault tolerant safety related
applications.
Technical Overview
The Processor Module is galvani-
cally isolated from external power
supplies and data links so that any
faults developed in the field do not
cause a Processor Module failure.
The module will continue to operate
in the event of failure of one of its
dual redundant 24Vdc power sup-
plies. Under- and over-voltage pro-
tection is provided for the internal
power supplies and a Power Valid
signal is monitored by the module
diagnostics microprocessor.
Each processor has two Ethernet
ports that are independent and are
arranged to ensure that there are
no common mode failures when
used as redundant pairs. Each port
has a unique IP address and sup-
ports services such as Modbus
RTU, Open Modbus/TCP and Van-
tage protocols
The two serial communications
ports are electrically and function-
ally isolated from each other and
are typically used for Modbus RTU
Master/Slave communications. The
ports support RS232, RS485
(5 wire) and RS485 (3 wire) and
can be configured to support asyn-
chronous data rates of between
1200 and 115200 baud.
An application processor incorpo-
rates a communications co-
processor and a maths co-
processor. Together they provide
the processing power for application
logic solving, and the message en-
capsulation and verification for se-
cure channel communication to
other nodes.
In dual and triple configurations,
Processor Modules are automati-
cally synchronized with each other
when they are inserted into the
Processor Base Unit. The pres-
ence of other processors is deter-
mined by a module inserted sen-
sor. Fault detection and fail-over in
redundant processor configurations
is automatic and has no impact on
controller operation.
FEATURES:
Flexible, modular con-
struction for a user con-
figurable system
Rated for applications
up to SIL 3
IEC 61508 Certified
Handles full range of
IEC 1131-3 languages
Two Ethernet and two
Serial ports per proces-
sor
Black channel external
communication proc-
essing
Application processor,
communications
co-processor and
maths co-processor
Built in periodic diag-
nostic testing and inde-
pendent Watchdog
Removal and replace-
ment without system in-
terruption in Duplex or
Triplex configurations
System self-discovery
at start-up
SDS-9110
AADvance Industrial Control System
9110 Processor Module
The processor periodically initiates Electrical Specification: EMI (IEC 801):
internal diagnostic tests which, to- The processor meets the electrical Conforms to European Standard:
gether with a watchdog circuit, safety requirements detailed in IEC EN50081/50082
monitor the processor performance. 61131-2 part 2: 2003 En55011/55022
Should a fault be detected the Voltage Range:
Processor Module is automatically 24Vdc nominal
shut down. 20Vdc to 32Vdc range
Power Requirement:
A visual display of the module < 10W at 24Vdc
status and external communication Use with Backplane:
links is provided by an array of front T9100
panel LEDs. Also on the front panel Processor clock:
is a Fault Reset button, which the 400MHz
operator uses to restart an output Memory Type and size:
module after a trip or module re- Boot Flash 512KB
placement. SRAM 4MB
Bulk Flash 64MB
All the communication between the NVRAM 1280B
processors and the I/O modules SDRAM 128MB
(IOMs) is clock-less serial data, en- I/O Interface:
capsulated in a CRC error detection Two Independent Inter-Module Bus-
packet structure. The commands ses:
from the processors are multi-drop Command Bus
bussed to the I/O Modules. Each Response Bus
I/O Module has a unique Response
bus to the processors. This tech-
nique provides an unambiguous Mechanical Specification
identification of the source of the I/O Dimensions (H x W x D):
data and also assists with fault con- 166 x 42 x 113 mm
tainment. Weight:
420g
The Response busses provide an Casing:
individual and unique response line Plastic Flame Retardant
from each I/O Module back to the Intrinsic Safety: External Barrier
processor. An Inter Processor Link Environmental Specification
(IPL) distributes data between dif- Operating Temperature:
ferent Processor Modules. It also -20C to 70C.
provides inter-processor synchroni- Storage and Transport (in original
zation that gives coherent and syn- packaging): -40 to 70
chronized processing between all Operating Humidity:
the application processors in the 10% to 95%
system. Storage and Transport (in original
packaging): 10% to 95%
Vibration:
Functional Stress: 5Hz to 9Hz
Continuous: 1.7mm amplitude
Occasional: 3.5mm amplitude
Withstand: 10Hz to 150Hz ICS Triplex Technology 2008
Acceleration: 0.1g
Endurance: 10Hz to 150 Hz ICS Triplex Technology Ltd.
Acceleration: 0.5g ICS House
Shock: Hall Road,
15g peak, 11ms duration, sine Maldon
Altitude: Essex
Up to 2000m CM9 4LA

+44 1621 854444

www.icstriplex.com

nd
Issue 2: 2 June 2008