变频器控制板 XVC769AE101 3BHE006373R0101

 变频器控制板 XVC769AE101 3BHE006373R0101
如果主单元由于错误而失败，备份单元将从
后一个回滚点，这意味着后一个执行单元部分重新执行
通过备份单元。为了重新执行执行单元的一部分
影响外围设备（CEX总线上的通信设备），外围设备
单位的引用也记录在回滚点之间。在重新执行期间
已执行的外围设备参考结果如下
而不是重新执行它们。检索读取操作的结果
从日志中，写入操作在不执行的情况下通过，因为它们已经
已被处决。因此，外围设备的状态不受重新执行的任何影响，但发生的时间延迟除外。
处理器单元中包含的RAM提供自动双反转
用于检测存储器中任意位错误的存储器功能。
•所有内存更新都写入主内存和反转内存
并行存储器。
•在每个存储器读取周期，比较两个存储器的数据。
•如果数据不匹配，则强制转换。
双反转内存处理在硬件中完成，没有任何延迟
存储器循环时间。
冗余配置中的MAC和IP地址处理
为了提供相对于控制网络的无扰动切换，
MAC和IP地址在初始主和备份之间交换
CPU。初始主CPU的地址被存储并保持为地址
由代理主CPU使用。类似地，初始备份CPU的地址
被存储以由代理备份CPU使用。这意味着
控制器将始终由相同的地址标识和识别
其中CPU模块实际上充当主模块。
AC 800M高完整性1节介绍
50 3BSE036351-510 A
MAC和IP地址处理应具有以下特征：
考虑在重复使用以前使用的CPU时避免网络问题
同一工厂内的模块：
•存储的交换地址将被记住，直到被IP配置擦除
会话（恢复出厂设置）或直到作为新的备份CPU启动
上下文（在这种情况下，将发生新的交换）。
•在独立模式下运行的CPU（安装RCU终端）将始终
使用它自己的本地地址。
AC 800M高完整性
AC 800M可轻松配置用于安全关键应用。这个
这种系统的主要组件是PM865、SM810/SM811、SS823和
S800 I/O高完整性，运行高完整性版本的控制软件。这个
与PM864相比，PM865处理器单元增加了内部诊断
PM865的新增功能包括：
•内部电压的双重过电压保护
•使用SM810/SM811数据更新的额外看门狗定时器
•增加振荡器监控
•支持S800 I/O高完整性
•支持SM810/SM811
•增加了系统诊断和在线自检。
SM810的主要功能是充当硬件和软件的监视器
PM865的执行和这两个模块一起构成符合SIL2的系统
根据IEC61508，经TÜV认证。SM810正在运行SIL3认证
并且具有高度的自诊断，包括例如：
•双重和反向存储器
•内部电压的双重过电压保护
•两个独立的看门狗定时器
以下CEX模块不能用于高完整性控制器：
CI851、CI852、CI858、CI860、CI862和CI865。

 变频器控制板 XVC769AE101 3BHE006373R0101


 变频器控制板 XVC769AE101 3BHE006373R0101
If the primary unit fails because of an error, the backup unit resumes execution from
the last rollback point, which means the last execution unit is partially re-executed
by the backup unit. In order to re-execute a portion of the execution unit without
affecting the peripheral units (communication units on the CEX-Bus), the peripheral
units' references are also logged between rollback points. During re-execution, the
results of the peripheral units' references, which have already been executed, are
used, rather than re-executing them. The results of read operations are retrieved
from the log, and write operations pass without execution, since they have already
been executed. The peripheral units' statuses, then, are not affected by the reexecution in any way, except for the time delay which occurs.
The RAM included in the processor unit provides an automatic double inverted
memory function for detection of arbitrary bit errors in the memory.
• All memory updates are written to both the primary memory and to the inverted
memory in parallel.
• At every memory read cycle, the data from tho two memories is compared.
• If there is a mismatch in the data a changeover is forced.
The double inverted memory handling is done in hardware and without any delay to
the memory cycle time.
MAC and IP Address Handling in Redundant Configuration
In order to provide for a bumpless changeover with respect to the control network,
both the MAC and IP addresses are swapped between the initial primary and backup
CPUs. The addresses of the initial primary CPU are stored and kept as the addresses
used by the acting primary CPU. Similarly the addresses of the initial backup CPU
are stored to be used by the acting backup CPU. This means that a redundant
controller will be always identified and recognized by the same addresses regardless
of which CPU module actually acting as primary.
AC 800M High Integrity Section 1 Introduction
50 3BSE036351-510 A
The following characteristics of the MAC and IP address handling should be
considered in order to avoid network problems while reusing previously used CPU
modules within the same plant:
• The stored swap addresses will be remembered until erased by an IP-config
session (Restore factory settings) or until started up as a backup CPU in new
context (in this case a new swap will take place).
• A CPU running in standalone mode (with RCU terminator fitted) will always
use its own native addresses.
AC 800M High Integrity
AC 800M can easily be configured for usage in safety critical applications. The
main components of such a system are PM865, SM810/SM811, SS823 and the
S800 I/O High Integrity, running a High Integrity version of Control Software. The
PM865 processor unit has increased internal diagnostics, compared to PM864. The
added functionality on PM865 includes:
• Double over voltage protection on internal voltages
• A additional watchdog timer updated with data from SM810/SM811
• Increased oscillator supervision
• Support for S800 I/O High Integrity
• Support for SM810/SM811
• Increased system diagnostic and online self tests.
The main function of the SM810 is to act as a monitor for the HW and SW
execution of PM865 and these two modules together are a SIL2 compliant system
according to IEC61508, certified by TÜV. The SM810 is running a SIL3 certified
operating system and have a high degree of self-diagnostic including, for example:
• Double and inverted memory
• Double over voltage protection on internal voltages
• Two independent watchdog timers
The following CEX modules cannot be used in a High Integrity controller:
CI851, CI852, CI858, CI860, CI862 and CI865.

 变频器控制板 XVC769AE101 3BHE006373R0101