The Trusted TMR system overview
Built on a triplicated microprocessor with internal redundancy for all critical circuits, the Trusted TMR System delivers real-time control of complex, safety-critical
processes—executing user-defined application programs that accept external sensor signals, solve logic equations, perform continuous process control
calculations, and generate external control signals. These programs monitor and regulate real-world operations across industries including oil and gas, refining,
rail transit, and power generation, supporting a broad range of control and safety use cases (such as fire and gas detection and emergency shutdown) with
certification to IEC 61508 SIL 3 for safety-related applications. Application programs can be developed and monitored using the AADvance-Trusted SIS
Workstation Software on desktops or laptops running Windows 10, Windows 7, Windows 8, Windows Server 2008, or Windows Server 2012; alternatively, the
legacy Trusted Toolset Suite is supported on PCs via VMware emulating Microsoft Windows NT, Windows 2000, or Windows XP. The TMR architecture offers
inherent flexibility to adapt to diverse installation needs, enabling users to select different levels of I/O fault protection and choose from various I/O interfacing
and communication methods for seamless integration with other equipment and field devices. All system components used in safety-related operations are
certified to IEC 61508 SIL 3, while remaining elements meet non-interfering operation standards
Trusted TMR System: NFPA 85 Compliance Requirements and Integration Guidelines
The Trusted TMR System is certified for use in NFPA 85 compliant systems, and its integration must adhere to NFPA 85 standards—with key requirements
including: a dedicated manual switch for the operator that independently and directly actuates the safety shutdown trip relay, with at least one identified
manual switch located remotely from the boiler for emergency access; the burner management system (BMS) must feature independent logic, input/output
systems, and power supplies, functioning as a physically and functionally separate device from other logic systems (e.g., boiler or HRSG control systems); once
initiated, logic sequences or devices triggering a safety shutdown shall cause a burner or master fuel trip (as applicable) and require operator action to resume
operation of affected burners, with no permissibility for logic that allows momentary closing and inadvertent subsequent reopening of main or ignition fuel
valves; documentation must be provided to the owner and operator verifying that all safety devices and logic meet application requirements; system response
time (throughput) must be sufficiently short to prevent negative impacts on the application; and when a single transmitter input is used as an initiator of the
BMS interlock system, consideration shall be given to failure modes caused by drift of the analog input sense resistor—with a recommended solution of using
two analog input channels, where the two values are compared to indicate discrepancies resulting from drift.
ICS TRIPLEX T8403 Trusted TMR 24 Vdc Digital Input Module
The ICS TRIPLEX T8403 is a high-reliability 24 Vdc digital input module designed for integration into the Trusted TMR (Triple Modular Redundant) fault-tolerant
system, engineered to deliver robust, safety-critical signal acquisition for industrial automation and process safety applications. As a core I/O component of the
Trusted platform, it leverages triple modular redundancy and 2-out-of-3 (2oo3) voting logic to eliminate single points of failure, ensuring uninterrupted
operation even in harsh or mission-critical environments such as oil and gas processing, power generation, and chemical plants. The module supports multiple
24 Vdc digital input channels (configurable for sinking or sourcing signals, per system specifications) with fast response times, enabling real-time detection of
critical device states (e.g., valve positions, limit switch status, emergency stop triggers). It features built-in diagnostic capabilities for continuous self-monitoring
of channel health and communication integrity, with seamless integration into the Trusted system’s configuration and diagnostic software for simplified
maintenance and troubleshooting. Compliant with IEC 61508 standards and certified for SIL 3 safety integrity level, the T8403 ensures adherence to global
functional safety requirements, while its rugged design withstands extreme temperatures, voltage fluctuations, and electromagnetic interference (EMI). This
module plays a pivotal role in Safety Instrumented Systems (SIS), Emergency Shutdown Systems (ESD), and critical control loops, providing the high availability,
fault tolerance, and reliability required to protect personnel, equipment, and the environment.
ICS TRIPLEX T8800 PLC Module
The ICS TRIPLEX T8800 is a high-performance, safety-critical PLC module engineered as a core component of the Trusted TMR (Triple Modular Redundant) fault-
tolerant system, designed to deliver reliable, real-time control and monitoring for mission-critical industrial applications. Leveraging triple modular redundancy
and 2-out-of-3 (2oo3) voting logic, this module eliminates single points of failure, ensuring uninterrupted operation in harsh and high-risk environments such as
oil and gas processing, nuclear and fossil fuel power generation, chemical plants, and offshore facilities. It integrates powerful processing capabilities to execute
complex control algorithms, safety interlocks, and sequential logic, while supporting seamless communication with redundant I/O modules (including
digital/analog inputs/outputs) and third-party systems via industry-standard protocols. The T8800 is fully compliant with IEC 61508 functional safety standards
and certified for SIL 3, meeting the strict reliability requirements of Safety Instrumented Systems (SIS), Emergency Shutdown Systems (ESD), and critical process
control loops. Equipped with built-in self-diagnostic tools and status monitoring, it enables proactive maintenance and rapid fault identification, minimizing
downtime and enhancing operational safety. Its rugged design withstands extreme temperatures, voltage fluctuations, and electromagnetic interference (EMI),
while its scalable architecture supports system expansion without compromising performance—making it a cornerstone of high-availability industrial
automation solutions.
ICS TRIPLEX T9432 Analog Input Module
The ICS TRIPLEX T9432 is a high-precision analog input module designed exclusively for integration into the Trusted TMR (Triple Modular Redundant) fault-
tolerant system, engineered to deliver reliable, safety-critical signal acquisition for industrial process control and safety applications. As a key I/O component of
the Trusted platform, it leverages triple modular redundancy and 2-out-of-3 (2oo3) voting logic to eliminate single points of failure, ensuring uninterrupted
operation in mission-critical environments such as oil and gas processing, power generation (nuclear, fossil fuel, renewable), chemical plants, and offshore
facilities. The module supports multiple industrial analog input types (typically 4-20 mA, 0-10 Vdc, or thermocouple/RTD signals, per system configuration) with
high resolution and low drift, enabling accurate measurement of critical process variables including pressure, temperature, flow, and level. It features built-in
diagnostic capabilities for continuous self-monitoring of channel integrity, signal quality, and module health, with seamless integration into the Trusted
system’s configuration software for simplified setup, calibration, and troubleshooting. Compliant with IEC 61508 functional safety standards and certified for
SIL 3, the T9432 meets the strict reliability and safety requirements of Safety Instrumented Systems (SIS), Emergency Shutdown Systems (ESD), and critical
process control loops. Its rugged design withstands extreme temperatures, voltage fluctuations, and electromagnetic interference (EMI), while supporting
redundant communication with Trusted controllers to maintain data integrity—making it an indispensable component for high-availability, safety-focused
industrial automation solutions.
Contact:Cheryl Qi
Phone No: +8618150137565
Email: chen@htechplc.com
Whatsapp: +8618150137565
Recommended Model
