TRICONEX 3704E 隔离模拟输入 容错是TRICON系统的为重要的能力

容错是TRICON系统的为重要的能力，它是指对瞬态的和稳态的出错情况的探查发现的能力以及采取适当的相应的在线措施的能力。具有容错能力时，控制器及其控制的过程的安全性得以增强，利用率得以提高。TRICON通过三重组合式冗余结构(TMR)而给出其容错能力。此系统由三个完全相同的系统支路组成(电源模件除外，该模件是双重冗余的)。每个系统支路独立地执行控制程序，并与其它两个支路并行工作。硬件表决机制则对所有来自区域场的数字式输入和输出进行考核和验定。模拟输入则经受中值选择处理过程。因为每一个支路都是和其它两个隔离的，任-支路内的任何一个单点失效都不会传递给其它两支。如果在一支内有硬件故障发生， 该失效的一支就能被其它两支所补偿。所以修理工作，包括拆卸和更换失效的支路内的失效模件都可以在TRICON在线情况下进行，不使过程中断。系统能自行重新配置而进行充分的TMR运作。

Fault tolerance is the most important capability of a TRICON system, which refers to the ability to detect transient and steady-state error situations and take appropriate online measures. When equipped with fault tolerance, the safety of the controller and its controlled processes is enhanced, and the utilization rate is improved. TRICON provides its fault tolerance capability through the Triple Modular Redundant Structure (TMR). This system consists of three identical system branches (except for the power module, which is double redundant). Each system branch independently executes control programs and works in parallel with the other two branches. The hardware voting mechanism evaluates and verifies all digital inputs and outputs from the regional field. The analog input undergoes the median selection process. Because each branch is isolated from the other two, any single point of failure within any branch will not be transmitted to the other two branches. If a hardware failure occurs within one branch, the failed branch can be compensated by the other two branches. So repair work, including dismantling and replacing failed modules in the failed branch, can be carried out online with TRICON without interrupting the process. The system can reconfigure itself for full TMR operation