Category: Emerson

With the introduction of DeltaV SIS the left one-wide

and right one-wide dual carrier extenders have two,

44-pin D- Shell connectors which supports dual cables for

a fault tolerant configuration. The A and B connectors are

in parallel so either port may be used. The new dual carrier

extenders are a pre-requisite for DeltaV SIS as these also

provide extension of the redundant safety bus used by the

Safety Logic Solvers. The VerticalPLUS mount carriers also

support dual cables and can be used with DeltaV SIS.

Refer to the new VerticalPLUS Carrier Product Data Sheet

for more details on these new carriers.

The horizontal carrier family also offers a 2-wide power carrier.

Use this carrier, along with one or two system power supplies to

provide 12 V DC local bus power connected through the carrier

extenders. There are two 12 V DC output connections powered

by either supply. For redundant power, ensure that the power

demand is within the output range of one system power supply.

Product Description

The I/O interface carrier plugs on to the power/controller

carrier. The power/controller carrier supplies the system

power and communications between the I/O interfaces and

the controller. The controller processes the I/O interface

information. An additional power/controller carrier is required

for use with redundant controllers.

Mount your interface carrier on a T-type DIN rail. The I/O

interface carrier includes the connections for the bulk 24 V DC

field instrument power, I/O interfaces, and terminal blocks.

Each I/O interface carrier is equipped with a connector that

allows an additional I/O interface carrier to be plugged on to it.

Up to 64 I/O interfaces on eight 8-wide I/O interface carriers are

supported by a single I/O subsystem. For the horizontal-mount

solution, 1-wide local bus extenders allow you to continue

the I/O bus on a different row of carriers. There are two types

of 8-wide I/O interface carriers available. They both have

connectors for field power on the top of the carrier. The original

carrier connects each set of field power terminals to two I/O

cards, and the other option have individual field power per card

slot and is ideal if separate field power is required for redundant

I/O cards.

The health and status of both SLS 1508 Logic Solvers and their channels are

available in the diagnostics explorer.

When one of a redundant pair of SLS 1508 Logic Solversis removed online there

is no disturbance to the process.

When the missing SLS 1508 Logic Solver is replaced with another SLS 1508 Logic Solver,

the new SLS 1508 Logic Solver completes its power-up self-tests before the

active Logic Solver cross-loads the current database.

In safe areas, failed SLS 1508 Logic Solvers can be replaced under power.

In hazardous areas,appropriate installation procedures must be followed.

Automatic proof testing can be selected on a redundant pairof SLS 1508 Logic Solvers.

The desired proof-test interval is set in the configuration and the SLS 1508 Logic Solvers perform

the proof test automatically. A warning is given to the operator before

the automatic proof test is started.

Redundancy

The redundant SLS 1508 Logic Solver modules are connectedto the field at the redundant

terminal block. No control strategy configuration is required to take advantage

of SLS 1508 Logic Solver redundancy, as the system’s auto-sense capability

automatically recognizes the redundant pair of Logic Solvers.

An integrity error alarm in a redundant SLS 1508 Logic Solver pair will notify

the operator of a failure. Both SLS 1508 Logic Solvers in a redundant pair

are monitored for integrity alarms at all times.

Events that can cause integrity alarms include:

• Hardware failure within a SLS 1508 Logic Solver

• Communications failure between a SLS 1508 Logic Solver and the SISNet

• Communications failure between a redundant pair of SLS 1508 Logic Solvers

• Communications failure between a SLS 1508 Logic Solver and an DeltaV Controller

• Removal of a SLS 1508 Logic Solver from the carrier

Unique Redundancy Methodology

Introduction to Redundancy

While the SLS 1508 Logic Solver is rated suitable for use in SIL 3 applications

in simplex mode, it is installed in redundant pairs for increased process availability.

Redundant SLS 1508 Logic Solvers run in parallel at all times.Both read the inputs

from the I/O terminals, both execute the logic and both drive the outputs at the I/O terminals.

There is no concept of primary and backup or master and slave,which is unlike any other SIS.

The only difference between the two is that one communicates with both the engineering

and operator workstations and the dedicated safety network (SISNet);

this is the one with the Active light on the bezel.The other (Standby) is

communicating only on the SISNet.In the event that a failure is detected in

one of the SLS 1508 Logic Solvers, it automatically goes to a failed state. 

In this condition, all its output channels are de-energized;

this has no impact on the other SLS 1508 Logic Solver or the physical

outputs because the other SLS 1508 Logic Solver continuesto read inputs

execute logic and drive outputs. The transition from redundant to simplex

mode is therefore completely bumpless.

Multiple Domains: The simplest implementation of an SLS 1508 network is to have

one SIS Network ring and one SIS Network domain, that includes all of the

logic solvers in the SIS Network ring. In larger applications, the logic solvers

can be split into multiple SIS Network domains. Another approach is to have

multiple SIS Network rings, each on a SIS Network domain.

The SISNet Repeaters can be located anywhere on a local peer bus – between

the DeltaV Controller(s) and the terminated 1-wide carrier.

Remote Peer Ring: SISNet Repeaters hosted by one DeltaV controller communicate

with SISNet Repeaters hosted by a different DeltaV controller over a fiber-optic remote peer ring.

A local SISNet Repeater collects locally generated messages that have

been designated as global variables into a singlemessage and sends it to

the next SISNet Repeater in the ring.

Upon receipt of a message, the receiving SISNet Repeater broadcasts it on its local

peer bus (SISNet) and forwards the message to the next SISNet Repeater in the ring.

A global message is forwarded around the ring once. The primary SISNet Repeaters

form one fiber-optic ring and the secondary form a separate, independent ring.

Carrier extender cables and local peer bus extender cablesconnecting a DeltaV

controller and 8-wide carrier with standard DeltaV I/O and SLS 1508 Logic Solver

to a second 8-wide carrier (hosted by the same controller) are installed with

SLS 1508 Logic Solvers, SISNet Repeaters, and a terminated 1-wide carrier.

Communication

Control Network: The DeltaV Control Network provides communication between

the nodes in the DeltaV network.Refer to the Installing Your DeltaV Digital

Automation Systemmanual for complete information on the Control Network.

Local Bus: The Local Bus provides communication between DeltaV controllers

and SLS 1508 Logic Solvers and between DeltaV controllers and SISnet Repeaters.

Local Peer Bus (SISNet): SLS 1508 Logic Solvers communicatewith other SLS 1508

Logic Solvers and with local SISNet Repeaters through the carriers over

a 2 channel local peer bus.

The same message is broadcasted over both channels. The localpeer bus must

be terminated at both ends. The local peer bus is terminated at the left

end through the 2-wide power/controller carrier and at the right end

through a terminated 1-wide carrier.

The SISNet Repeaters can be located anywhere on a local peer bus – between

the DeltaV Controller(s) and the terminated 1-wide carrier.

Remote Peer Ring: SISNet Repeaters hosted by one DeltaV controller communicate

with SISNet Repeaters hosted by a different DeltaV controller over a fiber-optic remote peer ring.

Product Description

This section provides general information on DeltaV SIS hardware. Refer to the Installing

Your DeltaV Distributed Control System manual for more information on DeltaV system hardware.

DeltaV SIS Hardware

The DeltaV SIS process safety system consists of the following hardware:

• Redundant Logic Solvers (SLS 1508) and termination blocks

• SISNet Repeaters (see separate product data sheet)

• Carrier extender cables

• Local peer bus extender cables

• Right 1-wide carrier with termination

Logic Solvers (SLS 1508) contain the logic-solving capability and provide an interface

to 16 I/O channels that can be configured as Discrete Input, Discrete Output, Analog Input

(HART) and HART two-state output channels. Logic Solversand termination blocks

install on the 8-wide carrier.

Logic Solvers communicate with each other through thecarriers over a two-channel,

local peer bus (SISnet) and remotepeer ring. Local Logic Solvers are hosted by the same DeltaV

controller and remote Logic Solvers are hosted by a different DeltaV controller.

Logic Solvers are powered by a 24 V DC power supply that is separate from the

power supply that drives the DeltaV controller and I/O. Logic Solvers install

in odd-numbered slots (1.3.5.7) on the 8-wide carrier.

Easy Compliance with IEC 61511. IEC 61511 demands rigorous user

management and the DeltaV SIS process safety system provides it.

IEC 61511 requires that any changes made from an HMI (e.g. to a trip limit)

be extensively vetted to ensure that the right data is written to the right Logic Solver.

The DeltaV SIS process safety system automatically provides this data verification.

Scales to fit any size application. Whether you have anisolated wellhead

or a large ESD/fire and gas application, the DeltaV SIS process safety system

scales to provide you with the safety coverage you need for your SIL 1. 2 and 3 safety

functions. Each SLS 1508 Logic Solver has dual CPUs and sixteen channels

of I/O built into it. This means that no additional processors will ever be required

to expand the system, since each Logic Solver contains its own CPUs.

Scan rate and memory usage are constant and independent of system size.

SIL 3-rated. DeltaV SLS 1508 Logic Solvers are installed inredundant pairs for

increased process availability of your SIS loops.

Redundant architecture includes:

• Dedicated redundancy link

• Separate power supply to each Logic Solver

• I/O published locally every scan on redundant peer-to-peer link

• Same input data for each Logic Solver

Cybersecurity readiness. In an increasingly connected world,cybersecurity rapidly

became an integral part of every process safety project. Building a defendable

architecture is the basisfor achieving a defendable safety system.

DeltaV SIS when deployed with DeltaV DCS was the first process safety system

to be certified according to ISA System Security Assurance (SSA) Level 1. based on IEC 62443.

Benefits

The World’s first smart SIS. Research shows that over 85% of all faults in SIS

applications occur in field instruments and final control elements.

The DeltaV SIS process safety system has the first smart logic solver.

It communicates with intelligent field devices using the HART protocol

to diagnose faults before they cause spurious trips. This approach increases

process availability and reduces lifecycle costs.

Flexible deployment. Traditionally, process safety systems have been deployed

either separate from the control system or interfaced to control systems via

engineered interfaces based on open protocols (e.g. Modbus).

However, most end users require a higher integration for configuration,

maintenance, and operations environment. DeltaV SIS can be deployed

either as interfaced to any DCS or integrated with DeltaV DCS.

Integration is accomplished without scarifying functional separation as safety

functions are implemented in separate hardware, software, and networks

while being seamlessly integrated at the workstations.