Description
The ICS Triplex T8800C is a triple modular redundant (TMR) main system controller that serves as the central processing unit for high-integrity safety instrumented systems within the Trusted platform. This controller functions as the core decision-making component, executing safety logic and managing input/output operations across three completely independent processing channels. The module implements a robust architecture where three separate microprocessor systems operate in parallel, with continuous voting logic that compares results across all channels to detect and compensate for potential failures in real-time.
Installed as the main processor in a Trusted system chassis, the controller features three independent 68040 microprocessors, each operating on its own dedicated memory and I/O subsystems. The three channels execute identical application logic simultaneously, with a hardware-based voter comparing the outputs of all three processors every scan cycle. This TMR architecture ensures that a single component failure in any part of the processing system does not cause a system failure or generate an incorrect control action. The voting logic uses a two-out-of-three voting scheme, allowing the system to continue normal operation even with a complete failure in one processing channel while maintaining full diagnostic awareness of the fault condition.
As the central component of the Trusted safety platform, this controller supports the high availability and safety integrity levels required in critical process safety applications. The design includes comprehensive self-diagnostics that monitor processor health, memory integrity, and voting logic functionality. The controller manages all I/O module communications and executes the application safety logic with deterministic scan times. This combination of hardware redundancy, continuous voting, and advanced diagnostics provides the necessary features to achieve Safety Integrity Level (SIL) 3 certification according to IEC 61508 standards.
T8800C: Technical Specifications
- •
- •
Manufacturer: ICS Triplex
- •
Product Type: TMR System Controller
- •
Processor: Triple 68040 microprocessors
- •
Processor Speed: 25 MHz per channel
- •
Memory: 16 MB total (triplicated)
- •
Architecture: Triple modular redundant (TMR)
- •
Voting Method: Hardware-based 2-out-of-3 voting
- •
Scan Time: Configurable, typically 1-100 ms
- •
I/O Capacity: Supports full chassis complement of I/O modules
- •
Communication Ports: RS-232, RS-485, Ethernet
- •
Watchdog Timers: Triple redundant with independent timing
- •
Diagnostics: Continuous processor, memory, and I/O diagnostics
- •
Safety Integrity: SIL 3 capable per IEC 61508
- •
- •
Operating Temperature: 0°C to 60°C
- •
Power Supply: 5V DC from backplane
- •
Hot Swap: Supported with proper procedures
Core Features & Customer Value
Triple Modular Redundant Processing: The triple 68040 processor architecture provides fault-tolerant operation through hardware redundancy, with three independent systems executing identical application logic simultaneously. The hardware-based voter compares results every scan cycle, ensuring that any single processor failure cannot cause an incorrect control action. This architecture provides the high availability necessary for critical safety systems while maintaining continuous operation during maintenance or repair activities.
Continuous Online Diagnostics: The controller performs comprehensive self-diagnostics during normal operation, monitoring processor functionality, memory integrity, and I/O communications. The diagnostic coverage extends to the voting logic itself, ensuring that the safety integrity is maintained even during multiple fault scenarios. This capability enables predictive maintenance strategies and provides early warning of developing issues before they affect system operation.
Deterministic Scan Performance: The controller executes safety logic with consistent, predictable scan times, ensuring that safety functions are processed within required time constraints. The deterministic behavior is essential for applications requiring guaranteed response times to process demands. The configurable scan time allows optimization for different application requirements, from fast-acting safety functions to complex regulatory control.
In emergency shutdown systems for hydrocarbon processing facilities, the controller executes safety logic that monitors critical process parameters and initiates shutdown sequences when pre-defined setpoints are exceeded. The TMR architecture ensures that shutdown commands are issued correctly even during internal component failures, maintaining process safety while avoiding spurious trips.
For fire and gas protection systems, the controller processes signals from detection devices and executes appropriate response logic, including alarm annunciation and suppression system activation. The deterministic scan time ensures rapid response to developing hazardous conditions, while the fault-tolerant design guarantees system availability when needed.
In turbine control and protection systems, the controller manages speed acceleration, temperature monitoring, and vibration protection functions. The triple redundant processing ensures continuous operation even during hardware failures, providing the reliability required for critical machinery protection applications.
Continue Searching
We're here when you need us
What happens next?
- 1. Email confirmation
You will get an email confirming that we have received your enquiry.
- 2. Dedicated Account Manager
One of our team will be in touch to confirm your part(s) specification and condition.
- 3. Your quote
You will receive a comprehensive quote tailored to your specific needs.
Full 12-month warranty
Available for dispatch immediately
We deliver worldwide
Full 12-month warranty on all components
Full 12-month warranty on all components
