I. Basic Information

Product Positioning

Hardware Architecture

1. Triple Independent Redundant Speed Measurement Unit (Module A/B/C)
   Each channel is equipped with an independent high-speed processor, with speed measurement accuracy of ±0.1% and protection response time ≤10ms. The 2oo3 voting logic avoids false tripping caused by single-channel faults, and allows offline maintenance of any single channel while the other two channels maintain safety protection operation.
2. Local Independent HMI Operation Unit
   Each module is equipped with an LCD display and 15-key operation panel for on-site protection parameter setting, real-time speed viewing, fault record query and on-line loop test, with multi-level password authority to prevent unauthorized parameter modification.
3. Triple Isolated Industrial Communication Unit
   Three independent Modbus-RTU ports and three 4~20mA speed analog outputs realize redundant data uploading of unit speed, channel faults and trip events to upper monitoring systems, ensuring reliable remote safety monitoring.
4. Multi-channel Safety Trip & Alarm Output Unit
   Three groups of independent safety trip relays and multi-channel passive alarm contacts adopt normally-closed fail-safe design, which can trigger unit ETS shutdown under power loss, line breakage or equipment fault conditions, complying with power industry safety loop specifications.
5. Dual Redundant Wide-range Power Supply & EMC Protection Unit
   Supports dual AC/DC redundant power input, equipped with reverse polarity, surge, ESD and short-circuit protection. The fully sealed aluminum housing with IP56 protection and conformal coated PCB adapts to harsh industrial control room environments.
6. Bulkhead Wall-mounted Reinforced Structure
   Integrated cast aluminum sealed enclosure with passive natural cooling design, shock and vibration resistant, suitable for long-term 24/7 unattended safety operation in industrial sites.

Mounting Specifications

• Operating Power Supply: Dual redundant input, 115/240VAC, 125VDC or 24VDC optional
• Speed Input: Compatible with MPU magnetic speed sensors, frequency range 0~20kHz, accuracy ±0.1%
• Trip Response Time: ≤10ms
• Communication: 3 isolated Modbus-RTU ports, 3-channel 4~20mA analog speed output
• Relay Contact Rating: AC250V/5A, DC250V/5A, fail-safe normally-closed design
• Mounting: Cabinet bulkhead wall-mounted installation
• Dimension: 330mm × 483mm × 152mm
• Net Weight: 11.8kg
• Protection Class: IP56
• Supporting Equipment: MPU speed sensors, dual redundant control power supply, shielded communication cables, ETS trip loop, audible and visual alarm device
• Commissioning Tools: Woodward ProTech configuration software, speed signal simulator, insulation resistance tester, anti-static wristband

Supporting System

Supporting Hardware

Commissioning Software

Upper-level System

Typical Application Industries

Product Features

1. 2oo3 Triple Redundant SIL3 Safety Architecture
   Fully independent power, acquisition, operation and output channels eliminate single-point failure risks, only triggering local alarm instead of unit shutdown upon one or two channel faults, ensuring maximum continuous operation reliability of key turbine units.
2. On-line Single-channel Maintenance Without Unit Shutdown
   Any single module can be isolated from the voting logic for loop calibration, sensor testing and parameter commissioning, while the remaining two channels keep the safety protection function running, greatly shortening equipment maintenance downtime.
3. Three Independent Local Operation Panels With Permission Lock
   Two-level password authority management prevents mis-modification of overspeed protection setpoints, supporting on-site safety commissioning, fault diagnosis and parameter backup without external commissioning laptops.
4. Triple Redundant Data Uploading For High System Reliability
   Three independent analog and communication channels realize multi-set monitoring system signal redundancy, avoiding complete speed monitoring failure caused by single communication line fault.
5. IP56 Wide-temperature Rugged Industrial Design
   Stable operation from -20℃ to +60℃, compliant with IEC EMC and IEC 61508 SIL3 safety standards, high MTBF value for long-term unattended safety duty.
6. Plug-and-play Compatible Replacement
   Standard bulkhead installation size, terminal definition and communication protocol enable rapid on-site spare replacement only by replicating original protection parameters and trip logic without field cabinet and wiring renovation.

II. Technical Specifications

2.1 Electrical Parameters

• Model: 8237-1245 (ProTech-GII Bulkhead High-voltage Triple Redundant Type)
• Power Supply: Dual redundant 115/240VAC, 125VDC or 24VDC
• Speed Measurement Range: 0~20kHz, Accuracy: ±0.1%, Trip Response ≤10ms
• Analog Output: 3×4~20mA, Load ≤500Ω
• Communication: 3 Isolated Modbus-RTU, Dielectric Withstand Voltage: 1500VAC/1min
• Relay Contact Capacity: AC250V/5A, DC250V/5A, Fail-safe Normally Closed
• Built-in Protection: Dual power redundancy protection, overvoltage/overcurrent, surge, ESD, short-circuit, watchdog fail-safe trip protection
• Core Functions: Triple redundant speed acquisition, 2oo3 overspeed/acceleration trip, on-line single-channel maintenance, local parameter setting, fault event storage, redundant data remote uploading, ETS safety loop driving, permission-based protection lock.

2.2 Mechanical Parameters

• Mounting Mode: Cabinet bulkhead wall-mounted sealed installation
• Housing: Integrated cast aluminum anti-corrosion sealed enclosure
• Operation Unit: 3 independent LCD screens + 15-key membrane panels
• Interfaces: Dual power terminals, 3 MPU speed inputs, 3 Modbus ports, 3 analog outputs, trip & alarm relay terminals
• Net Weight: 11.8kg

2.3 Environmental Specifications

• Operating Temperature: -20℃ ~ +60℃
• Storage Temperature: -20℃ ~ +65℃
• Humidity: 5%~95%RH, non-condensing, no corrosive or conductive dust

III. Key Features

1. 2oo3 Voting Overspeed Emergency Trip Protection
   The unit triggers ETS shutdown only when two or three channels simultaneously detect overspeed or over-acceleration faults; single-channel abnormality only generates local and remote alarms to avoid unplanned unit outage accidents.
2. Isolated On-line Calibration & Maintenance Function
   Supports offline operation of any single channel for safety loop commissioning and sensor calibration, realizing preventive maintenance without unit shutdown.
3. Permission-managed Parameter Configuration & Local Fault Storage
   Two-level password prevents unauthorized modification of safety setpoints; cyclic storage of time-stamped trip, fault and operation records supports offline accident analysis and safety file archiving.
4. Triple Redundant Speed Signal Remote Monitoring
   Multi-channel analog and bus redundant uploading ensures continuous speed data collection for multiple upper control systems, eliminating single-point monitoring failure hidden dangers.
5. Fail-safe Power-loss & Line-break Trip Circuit Design
   The normally-closed series safety loop complies with power industry ETS design specifications, ensuring effective unit emergency shutdown under equipment power failure and wiring faults.
6. Standard Independent Safety Barrier For Turbine Units
   Widely used in new power plant safety system deployment, old protection equipment technical renovation and preventive spare reserve for all types of turbine and compressor generating units.

IV. Working Principle

V. Application Scenarios

1. Safety system upgrading of thermal and hydropower turbine units, replacing single-channel overspeed protection with SIL3 triple redundant equipment to eliminate unit runaway safety risks.
2. Safety protection technical renovation of drive turbines for petrochemical and natural gas pipeline compressor stations to guarantee equipment and personal safety under overspeed faults.
3. Preventive spare reserve for waste heat power plants and self-owned power stations to realize emergency replacement of faulty overspeed protection channels, operation panels and communication modules.
4. Supporting safety equipment deployment for offshore oil & gas platform power units, adapting to harsh field environments via wide-temperature, IP56 anti-corrosion and shock-resistant design.
5. Annual preventive safety test of generating units, realizing ETS loop transmission and speed circuit calibration without unit shutdown to shorten maintenance cycle.