Description
Product Description
The ICS TRIPLEX T9310-02 is a high-integrity, triple modular redundant (TMR) communication gateway module from the Trusted® safety and critical control system family. This module serves as a secure and fault-tolerant bridge between the core TMR controllers (like the T8800) and external subsystems or a plant’s Distributed Control System (DCS). The T9310-02 provides multiple, independent communication channels that are voted upon internally to ensure data integrity, translating the system’s internal protocol to standard industrial networks such as Modbus TCP/IP or Ethernet/IP. Its primary function is to enable seamless and reliable data exchange for monitoring and supervisory control while maintaining the system’s stringent safety integrity level (SIL 3). The robust design of the ICS TRIPLEX T9310-02 ensures that communication failures or errors do not compromise the safety functions of the critical control system, making it a vital component for integrated safety and process control architectures.
Product Parameters
-
Module Type: TMR Communication Gateway / Network Interface Module
-
Compatible System: ICS Triplex Trusted TMR System (e.g., with T8800 controllers)
-
Architecture: Triple Modular Redundant (TMR) – contains three independent channels.
-
Primary Function: Provides fault-tolerant, voted communication between the TMR system and external hosts/networks.
-
Internal Communication: Connects to the Trusted backplane (TDB) to communicate with TMR controllers.
-
External Communication Interfaces: Typically features multiple Ethernet ports for connections to plant networks (e.g., for Modbus TCP, Ethernet/IP, OPC).
-
Protocols Supported: Modbus TCP (Client/Server), Ethernet/IP, and often proprietary protocols for interfacing with major DCS vendors.
-
Power Supply: Powered via the system backplane.
-
Status Indicators: Comprehensive LEDs for power, channel status, network activity, and faults for each of the three channels.
-
Mounting: Installs into a slot in a Trusted system chassis.
-
Safety Certification: Designed to meet SIL 3 requirements according to IEC 61508 / IEC 61511.
Advantages and Features
-
Fault-Tolerant Communication: The TMR architecture of the ICS TRIPLEX T9310-02 ensures that a failure in a single communication channel or processor is masked and corrected by the other two, preventing erroneous data from being sent or received.
-
High Data Integrity: Internal voting logic on all data packets guarantees that only valid, agreed-upon data is passed between the safety system and external networks.
-
Seamless Integration: Simplifies the integration of the high-integrity Trusted system with a plant’s broader control and information network, enabling operators to view critical safety parameters within the DCS/SCADA.
-
Enhanced Diagnostics: Provides detailed diagnostic information about the health of each of its three channels and the communication links, enabling predictive maintenance and quick fault isolation.
-
Maintains Safety Integrity: By isolating the safety-critical controller backplane from the plant network and rigorously checking all data, it acts as a protective barrier, helping the overall system maintain its SIL 3 rating.
Application Cases in Various Fields
-
Oil & Gas (FPSO Topside, Refinery): The ICS TRIPLEX T9310-02 acts as the gateway for a Fire & Gas (F&G) or Emergency Shutdown (ESD) system, sending voted alarm and status data to the plant DCS for operator display while receiving safe reset commands.
-
Power Generation (Turbine Control): Used in integrated turbine control/protection systems to communicate critical turbine parameters (speed, temperature, valve positions) to the plant’s main control room over a Modbus TCP network.
-
Chemical/Petrochemical Processes: Interfaces a SIL 3 burner management system (BMS) or process shutdown system with the supervisory process control system, allowing for coordinated operation.
-
Railway Signaling: Could be used in vital control systems to communicate track section statuses to a central traffic management system.
Comparisons with Competing Products
-
Vs. Standard Industrial Gateways: Standard single-channel communication modules lack the fault tolerance and voting mechanisms. A failure in such a gateway could lead to a complete loss of communication or, worse, the transmission of corrupt data to the safety system.
-
Vs. Other Safety System Vendors: Competitors like HIMA or Emerson (DeltaV SIS) have their own safety-rated communication solutions. The T9310-02 is optimized for the Trusted TMR architecture, offering deep integration and a proven track record in the highest-demand applications. Its three-channel design is a hallmark of the ICS Triplex approach compared to others that may use diverse redundancy (1oo2D).
-
Vs. Direct Controller Networking: Some systems allow controllers to connect directly to a network. The ICS TRIPLEX T9310-02 provides a dedicated, hardened layer of separation and protocol conversion, which is often preferred for security, network load management, and system segmentation.
Selection Suggestions and Precautions
-
System Compatibility: Verify that the T9310-02 module is compatible with your specific Trusted chassis and controller generation. Compatibility with the backplane (TDB) and controller firmware is essential.
-
Protocol and Network Planning: Clearly define the required external protocol (e.g., Modbus TCP Server) and plan the network topology, including IP addressing and firewall rules, before configuration.
-
Configuration Expertise: Configuring the ICS TRIPLEX T9310-02 requires specialized software (Trusted Toolset) and a deep understanding of both the Trusted system and the target network protocol. This is not a standard IT task.
-
Cybersecurity: As a network-connected device in a safety system, it must be configured and deployed with cybersecurity best practices. This includes disabling unused services, using strong authentication, and segmenting it within a dedicated control network zone.
-
Firmware Management: Ensure the gateway’s firmware is up-to-date and compatible with the rest of the system. Firmware updates should be planned and tested carefully during maintenance windows.
-
Redundancy at the Network Level: For ultimate availability, consider implementing redundant network switches and dual-homing the T9310-02 (if supported) to eliminate single points of failure in the physical network infrastructure.

IS200TREGH1B PLC
IS200EXAMG1A PLC GE
IS200TRLYH1B GE PLC
IS200EGPAG1B GE PLC
IS200TSVOH1B GE PLC


Reviews
There are no reviews yet.