Description
Product Overview
The Triconex 3504E is a high-density, 16-point, 24V DC digital output module designed for the Tricon v9, v10, and v11 series Triple Modular Redundant (TMR) Safety Instrumented Systems (SIS), manufactured by Invensys (now part of Schneider Electric). It is a critical component in the Triconex I/O subsystem, responsible for safely and reliably driving field devices—such as solenoid valves, motor starters, alarm beacons, and relay coils—based on commands from the Tricon Main Processor. The 3504E converts the TMR-voted logic from the safety controller into robust 24V DC output signals to activate final elements in the safety loop. The «E» suffix indicates an enhanced version, typically offering improved diagnostics, performance, or compatibility with newer chassis.
The core value of the Triconex 3504E lies in its triple-channel, fault-tolerant architecture that ensures safety on de-energization. This module is designed to fail in a predetermined safe state (typically de-energized/off) in the event of an internal fault. It contains three independent output circuits per channel. The Main Processor sends commands to all three circuits, and hardware voting logic ensures that a single point failure does not cause an erroneous output. This design is paramount for Safety Instrumented Systems (SIS), where preventing a dangerous failure (e.g., failing to de-energize a valve on a shutdown command) is critical. For engineers and operators in industries like oil and gas, petrochemicals, and power generation, the 3504E is the trusted, high-integrity «muscle» that executes safety actions, meeting rigorous SIL 3 (IEC 61508/61511) requirements for output subsystems. Its 16-point density balances capacity with the need for individual channel isolation and protection.
Technical Specifications
|
Parameter Name
|
Parameter Value
|
|---|---|
|
Product Model
|
Triconex 3504E
|
|
Manufacturer
|
Invensys Triconex (now Schneider Electric)
|
|
Product Family
|
Tricon TMR Digital Output Module
|
|
Primary Function
|
16-point, 24V DC Triple Modular Redundant (TMR) Digital Output Module
|
Electrical Characteristics (Per Channel)
-
Output Type: Sourcing (Current Sourcing), 24V DC Solid-State Outputs.
-
Output Voltage: Nominal 24V DC. The module switches the «hot» side; the load is connected between the output point and DC common/ground.
-
Output Current: 0.5 Amps per point continuous (typically with a shared group maximum, e.g., 2A per 4-point group). 1.0 Amp inrush for 100ms. Suitable for driving relays, solenoid coils, and small contactors directly.
-
Voltage Range: Operational from 20V to 30V DC.
-
On-State Voltage Drop: Typically < 1.5V, ensuring sufficient voltage reaches the load.
-
Off-State Leakage Current: Very low (< 1 mA) to prevent accidental activation.
-
Response Time: Turn-on and turn-off times typically < 1 ms (fast).
-
Point Density: 16 points per module.Safety & Protection
-
Architecture: TMR (Triple Modular Redundant) per point. Each point consists of three independent solid-state switches. The outputs are voted in the module’s hardware; all three must agree to change state. A discrepancy will cause a fault.
-
Output Diagnostics: Sophisticated diagnostics monitor for Open Load (wire break), Short Circuit to Ground, and Short Circuit to Supply. These faults are reported to the Main Processor.
-
Intelligent Fusing/Protection: Each output or group of outputs includes electronic current limiting and thermal protection. In the event of a sustained overload or short, the output is latched off and a fault is reported. The module requires a power cycle or a reset command to clear a latched output.
-
Isolation:
-
Channel-to-Channel: Isolation between the three internal output circuits.
-
Output-to-System: Optical isolation between the controller logic and the output power circuitry.
-
Output-to-Output: Points are typically grouped with isolation between groups.Mechanical & Integration
-
-
Form Factor: A hot-swappable module designed for the Tricon High Density (HD) I/O Terminator Baseplate (e.g., 9563-610, 9563-810 series).
-
Termination: Field wiring for loads and the 24V DC supply connects to a removable terminal block on the associated terminator baseplate.
-
LED Indicators: Per-point status LEDs (green for ON, off for OFF) and module health LEDs (Power OK, Fault). Additional LEDs may indicate diagnostic conditions (e.g., overload).
-
Diagnostics: Comprehensive built-in diagnostics for overload, open circuit, short circuit, and internal circuit mismatch. Faults are reported to the Main Processor and can trigger system alarms.Environmental & Compliance
-
Operating Temperature: 0 to 60°C (32 to 140°F)
-
Certifications: Designed and certified for use in SIL 3 (IEC 61508) safety systems. Suitable for harsh industrial environments.
Key Features and Advantages
Intrinsic Safety via TMR and Fault Tolerance: The triple-redundant design with hardware voting ensures a single point failure cannot cause a dangerous, erroneous output. The module is designed to de-energize outputs (fail-safe) on detection of a critical internal fault.
Advanced Diagnostics for Output Integrity: Unlike simple output cards, the 3504E actively monitors the health of the output circuit and wiring. It can detect an open load (broken wire to the solenoid) and a short circuit, allowing for predictive maintenance and ensuring the safety function can be executed when demanded. This diagnostic coverage is critical for SIL certification.
Electronic Protection and Latching: The built-in current limiting and thermal protection prevent damage to the module and field wiring in the event of a short circuit or overload. The latching feature ensures a faulted output stays off until the condition is cleared, preventing repetitive cycling.
Robust and Reliable Design: Designed for industrial duty cycles, the 3504E can handle the inductive «kickback» from solenoid and relay coils, ensuring long-term reliability. Its hot-swap capability allows for maintenance without a system shutdown.
Application Areas
The Triconex 3504E is used in safety-critical shutdown systems (ESD/PSD/F&G) to activate final elements that bring a process to a safe state.
-
Emergency Shutdown (ESD) Systems: Actuating safety shutdown valves (SDVs), emergency vent valves, and emergency depressurization valves via their solenoid pilots. Triggering alarm sirens and strobes.
-
Fire & Gas (F&G) Systems: Starting deluge valves, fire pumps, and smoke evacuation fans. Activating audio/visual alarms.
-
Burner Management Systems (BMS): Operating fuel shut-off valves, igniters, and dampers.
-
Turbomachinery Control (TMC): Controlling inlet guide vanes, bleed valves, and lube oil pumps.
-
General Safety Interlocks: Starting/stopping pumps, fans, and conveyors based on safety logic.
Related Products
-
Terminator Baseplate: The HD I/O Terminator Baseplate (e.g., 9563-610 for 24V DC DO) is required. It provides the field wiring terminals, fusing/protection circuitry, and status indication. The 3504E module plugs into this baseplate.
-
Tricon Chassis & Main Processor: Such as the Tricon Chassis 3008/3009/3510/3511 and the corresponding Main Processor (MP), which houses and commands the I/O modules.
-
External 24V DC Power Supply: A high-reliability, redundant 24V DC power supply is critical to power the field loads switched by this module.
-
Protective Devices: External fuses or circuit breakers on the load power supply are recommended as an additional layer of protection.
-
Field Devices: Solenoid valves, relays, motor starter coils, alarm beacons, etc.
-
Flyback Diodes/Snubbers: For highly inductive loads (large solenoid valves), external flyback diodes or RC snubbers may be required across the load to protect the module’s output transistors from voltage spikes, even though the module has some internal protection.
-
Programming & Configuration Software: Triconex TriStation 1131 is used to configure the module and map outputs to logic variables.
Reviews
There are no reviews yet.