Triple Controllers (TMR) use three independent controllers, three I/O networks, and singular or fanned I/O modules to provide increased reliability over dual controller systems. The TMR architecture detects and votes on faults between controllers and state variables rather than relying on a single controller, allowing the system to continuously operate even if a controller or network component fails without requiring fault detection or failover time. All three controllers continuously receive and transmit inputs and outputs from I/O modules on their respective networks, and vote on state variables after each run cycle to determine values for the next cycle.
Triple Controllers (TMR) use three independent controllers, three I/O networks, and singular or fanned I/O modules to provide increased reliability over dual controller systems. The TMR architecture detects and votes on faults between controllers and state variables rather than relying on a single controller, allowing the system to continuously operate even if a controller or network component fails without requiring fault detection or failover time. All three controllers continuously receive and transmit inputs and outputs from I/O modules on their respective networks, and vote on state variables after each run cycle to determine values for the next cycle.
Triple Controllers (TMR) use three independent controllers, three I/O networks, and singular or fanned I/O modules to provide increased reliability over dual controller systems. The TMR architecture detects and votes on faults between controllers and state variables rather than relying on a single controller, allowing the system to continuously operate even if a controller or network component fails without requiring fault detection or failover time. All three controllers continuously receive and transmit inputs and outputs from I/O modules on their respective networks, and vote on state variables after each run cycle to determine values for the next cycle.
architecture contains three controllers, three IONets, and singular or fanned TMR I/O Modules.
The TMR control
architecture reliability/availability is much better than the dual controller due to increased fault detection capability. In addition to all of the dual redundant features, the TMR controller provides three independent outputs to all TMR I/O modules and the state variables between controllers are voted rather than jammed.
In a TMR control system
all three controllers receive inputs from the I/O modules on all networks and transmit outputs on their respective IONet continuously. If a controller or network component fails, the system does not require fault detection or fail over time to continue operating.
All controllers transmit
their copy of the state variables after the output packet has been transmitted. Each controller takes the three sets of state variables and votes the data to get the values for the next run cycle.