FC-QPP-0002 V1.0

• Dual-Processor with High Diagnostic Coverage (>99%)
• Continuous SIL3 Compliance with a Single Module
• Flexible Redundant Architecture (2oo4D)

A non-redundant Controller contains one QPP-0002 module, a redundant Controller contains two QPP 0002 modules. The slot of the Quad Processor Packs within the Controller chassis is pre-determined (see Location of Control Processor modules). The Quad Processor Pack (QPP-0002) is the heart of Safety Manager. It controls all system operations. The QPP-0002 module reads the IO input signals and executes the Controller File as created by the user in graphical Functional Logic Diagrams (FLDs). The results of the Controller File are then transmitted to the output interfaces.

In Safety Manager configurations with a redundant Controller, the two QPP-0002 modules synchronize their operation through a dedicated redundant communication link between the two Control Processors. Continuous testing of the Safety Manager hardware by the QPP-0002 module ensures safe control of the process as well as extensive system and process equipment diagnostics.

The QPP-0002 module has two processors and two memory sets. Hardware data-comparators compare every read and write action of the processors, and trip the watchdog if any difference in the data is detected. Additional test hardware enables full testing of the QPP-0002 module to achieve diagnostic coverage higher than 99%. This allows one QPP-0002 module to run applications up to and including SIL3 without time limitation. Redundant Controller configurations result in a 2oo4D voting architecture.