E16x342 (SIL3)0 pages

E16

High Safety TMR Protection Systems
for Rotating Equipment with SIL3 requirements
Series E16x342 / E16x352
KEY FEATURES
t SIL3 / IEC 61508:2010 certified
t API 670 Ed.5 compliant
t API 612 Ed.7 compliant
t Total Response Time to Trip < 15 ms
t Useful Lifetime and Proof Test
t Interval = 20 years
t Triple speed measurement and
t monitoring by each Monitor
t Variable Overspeed setpoint
t depending on acceleration
t Direction detection
t Evaluation of external Trip Criteria
t signals by up to 6 voters per Monitor
t All Trip Outputs formed with safety
t relay contacts in 2oo3 technique
t Trip Output Monitoring to solenoid
t with Trip-Lock
E16A352 System Front View

E16 – The most secure TMR Protection System worldwide
The BRAUN High Safety Protection System Series E16x342 / E16x352 is TÜV certified
for SIL3 / IEC 61508:2010 and is API 670 Ed.5 and API 612 Ed.7 compliant. It provides

t Up to 5 additional speed setpoints
t in 2oo3 technique
t Sensor signal repeater outputs,
t free floating and push/pull
t Remote test of solenoid trip block
t by test signals from DCS possible
t The only protection system worldwide t
t where all relays or other active compo-t
t nents are located on the Monitors

protection against overspeed and detects reverse direction. In addition up to six other
trip criteria such as emergency stop, boiler protection etc. can be included in the trip string.
Due to its globally unique and true 2oo3 architecture, the system will tolerate one faulty

BENEFITS

signal within each trip criterion without trip being released.

t Maintenance-free during Lifetime,
t therefore minimized TCO

The TMR (Triple Modular Redundancy) design ensures highest safety and availability
for the monitored machine, i.e. the system will bring the machine into a safe state once
it has reached a critical condition.
The E16 Protection System consists of three Monitors (E1667 respective E1668) for
the evaluation of speed and external trip signals, one Test Interface (E1691) and a
system backplane, all mounted into a 19” rack.
The E16 Protection System permanently monitors the speed sensors for their correct
function. During its complete lifetime cycle the system does not require any external

t Highest safety at maximum availability t
t due to true 2oo3 architecture for each t
t trip criterion within each Monitor
t Very low PFD value (Probability of
t Failure on Demand), less than 8 %
t of allowable value for a SIL3 loop
t Replacement of all active components
t during operation possible (hot swop
t and highest availability)

proof tests. It is completely maintenance-free and therefore has minimized TCO (Total
Cost of Ownership).
All active components (including the trip relays) are directly located on the Monitors
and thus can be replaced during operation. The protection system offers in total six
2oo3 Trip Outputs, thereof three for a solenoid trip block and three for other purposes.
www.braun-tacho.