Description

I. Basic Information

Model: SS6501T01

Brand: Emerson

Series: DeltaV Safety Instrumented System (SIS)

Product Type: Redundant CHARM Smart Logic Solver (CSLS) Assembly, IEC 61508 SIL3 Certified

Compatible Systems: ESD emergency shutdown, F&G fire & gas, BMS boiler management, ETS turbine safety trip systems in petrochemical, oil & gas, power industries. Adopting 1oo2D dual controller & dual power redundant architecture, it undertakes safety interlock logic operation, distributed CHARM I/O scheduling, redundant network communication and fail-safe protection, supporting up to 96 configurable safety channels for high-risk process safety loops.

Product Positioning

As the core safety computing unit of DeltaV SIS system, SS6501T01 integrates two independent SIL3-certified CSLS processors, realizing deterministic safety control with fixed 50ms scan cycle. Equipped with dual redundant LSN safety Ethernet and dual power supply, it eliminates single-point failure risks via hardware cross-check voting mechanism. Combined with LS-CHARM electronic marshalling technology, it supports flexible on-site channel configuration without hard wiring modification, greatly reducing cabinet wiring workload and hidden wiring faults. Comprehensive hardware self-diagnosis forces the system to predefined safe state upon critical faults, ensuring personnel and equipment safety in hazardous industrial plants, widely applied in new SIS projects, safety cabinet renovation and emergency spare replacement.

Hardware Architecture

Dual SIL3 CSLS Redundant Safety Processing Unit
Two independent processors execute identical safety programs synchronously with real-time hardware cross-check voting; fixed 50ms deterministic scan guarantees fast interlock response. Non-volatile flash memory stores thousands of time-stamped fault and interlock events for safety audit and accident traceability.
Dual Redundant 24VDC Wide-range Power Supply Unit
Two mutually isolated power input circuits support hot-swap maintenance, with built-in overvoltage, undervoltage, reverse polarity and surge protection to ensure uninterrupted power supply for the whole safety assembly.
Dual Isolated LSN Safety Ethernet Communication Unit
Two 100Mbps RJ45 ports realize redundant controller synchronization and bidirectional data interaction with DeltaV DCS, equipped with CRC data verification and heartbeat fault detection to avoid communication failure caused by electromagnetic interference.
LS-CHARM Distributed I/O Expansion Scheduling Unit
Supports up to 96 flexible configurable AI/AO/DI/DO safety channels, realizing remote channel type modification without field wiring reconstruction, greatly simplifying system engineering and later technical renovation.
Full-range Hardware Self-diagnosis & Status Indication Unit
Multi-group LED indicators intuitively display power, running, network and channel fault status; all abnormal events are latched with high-precision timestamps, supporting offline log export for fault troubleshooting and safety compliance filing.
Standard DIN Rail Compact Mount Structure
Fanless passive heat dissipation design with IP30 protection grade, supporting hot-swap replacement of faulty modules under redundant configuration to avoid unplanned process shutdown.

Mounting Specifications

Operating Power Supply: Dual redundant 24VDC (19.2~28.8VDC), single channel 8W, total power ≤16W
Safety Architecture: 1oo2D dual CSLS hardware voting, TÜV SIL3 certified
Deterministic Scan Cycle: 50ms fixed
Max I/O Capacity: 96 LS-CHARM configurable safety channels
Communication: 2×100Mbps LSN safety Ethernet, CAT5e cable max 100m transmission
Event Storage: ≥5000 time-stamped safety interlock, fault and operation records
Mounting: DIN35 standard rail installation
Protection Class: IP30 (indoor closed dust-proof cabinet only)
Net Weight: 1.6kg
Supporting Equipment: LS-CHARM safety I/O modules, DeltaV redundant controller, shielded CAT5e cables, 24VDC redundant safety power supply, field safety transmitters and emergency shutdown solenoid valves
Commissioning Tools: DeltaV Safety Builder software, network cable tester, insulation resistance tester, anti-static wristband

Supporting System

Supporting Hardware

DeltaV DCS & SIS rack, LS-CHARM intelligent safety I/O terminals, redundant DC safety power supply, field safety sensors, fire and gas detectors, emergency cut-off valves, audible and visual alarm devices.

Commissioning Software

DeltaV Safety Builder, used for safety logic programming, CSLS redundant parameter configuration, LSN network setting, CHARM channel configuration, SIL functional safety verification, fault log export, firmware upgrade and safety program CRC verification.

Upper-level System

Plant DCS, SIS and SCADA platforms realize remote centralized monitoring of safety interlock events, equipment faults and process safety parameters, supporting periodic SIL audit and safety compliance document archiving.

Typical Application Industries

Refining, coal chemical, LNG terminals, offshore oil & gas platform ESD/F&G safety systems; thermal and gas power plant BMS/ETS protection systems; high-risk fine chemical SIL3 safety interlock control systems.

Product Features

1oo2D Full-link Redundant SIL3 Safety Architecture
Dual controller, dual power and dual communication independent redundant design prevents safety loop false trip or fail-to-trip caused by single-point fault, fully compliant with IEC 61508 functional safety regulatory requirements.
CHARM Electronic Marshalling Flexible I/O Technology
Remote online channel type configuration avoids field cable reconstruction, significantly reducing engineering workload and hidden wiring faults during capacity expansion and technical renovation.
Fixed Deterministic Scan Cycle Ensures Stable Interlock Response
50ms fixed scan period eliminates action delay caused by program load fluctuation, guaranteeing reliable execution of critical safety interlocks such as emergency shutdown and furnace explosion protection.
Dual Redundant Secure Ethernet Fault-tolerant Networking
Independent safety network links realize controller synchronization and upper system data uploading, with CRC and heartbeat security mechanisms to prevent communication interruption induced safety system failure.
Wide-temperature Anti-corrosion Rugged Industrial Design
Stable operation from -40℃ to +70℃ under G3 corrosive atmosphere, compliant with IEC EMC standards, high MTBF value supporting 24/7 unattended safety operation in harsh field environments.
DeltaV SIS Compatible Plug-and-play Spare Replacement
Unified DIN rail installation size and communication protocol enable rapid commissioning only by replicating original safety program, network IP and channel parameters after module replacement without cabinet wiring renovation.

II. Technical Specifications

2.1 Electrical Parameters

Model: SS6501T01
Power Supply: Dual redundant 24VDC, single channel 8W, total power ≤16W
Safety Grade: TÜV IEC 61508 SIL3, 1oo2D hardware voting
Scan Cycle: Fixed 50ms deterministic
I/O Capacity: Max 96 configurable LS-CHARM safety channels
Communication: 2×100Mbps LSN Ethernet, 1500VAC 1min isolation withstand
Programming Standard: IEC 61131-3 with dedicated SIL safety function library
Event Storage: ≥5000 timestamped safety event records, non-volatile storage
Built-in Protection: Dual power reverse polarity/overvoltage/overcurrent protection, ESD, port short-circuit current limiting, dual-core mismatch fail-safe protection, hardware watchdog safety trip
Core Functions: Safety interlock logic calculation, distributed CHARM I/O scheduling, bumpless redundant switch, dual secure Ethernet communication, full-loop fault self-diagnosis, safety event archiving, online safety program verification & download, predefined fail-safe forced output protection.

2.2 Mechanical Parameters

Mounting Mode: DIN35 standard rail snap installation
Housing: Flame-retardant plastic shell with metal electromagnetic shielding lining
Indicators: LED status array for power, running, fault and communication
Interfaces: Dual RJ45 LSN ports, dual 24VDC power terminals, CHARM expansion bus interface
Net Weight: 1.6kg

2.3 Environmental Specifications

Operating Temperature: -40℃ ~ +70℃
Storage Temperature: -40℃ ~ +80℃
Humidity: 5%~90%RH, non-condensing, G3 corrosive atmosphere applicable

III. Key Features

Dual-redundancy Hardware Fail-safe Safety Logic Execution
Synchronous dual-processor operation and real-time voting force the system to predefined safe state upon hardware abnormality, fundamentally eliminating safety loop fail-dangerous and fail-safe faults for high-risk process facilities.
Distributed Flexible CHARM I/O Remote Configuration Management
Centralized scheduling of all remote intelligent safety terminals supports one-click channel type switching, minimizing on-site construction and wiring fault risks during plant technical upgrading.
Dual Independent Secure Network Redundant Fault Tolerance
Separate network links for controller hot synchronization and upper system data transmission ensure uninterrupted safety control even under single communication link failure.
Full-range Precision Fault Diagnosis & Safety Accident Forensic Recording
Fault location accurate to each channel and port, permanent timestamped event logs provide complete evidence for periodic functional safety audit and process accident investigation.
Deterministic Safety Control + Permission Lock Program Management
Fixed scan cycle guarantees consistent interlock action timing; multi-level authority management prevents unauthorized safety parameter modification, supporting bumpless incremental program download without safety system interruption.
Standard Core Safety Hardware for DeltaV Electronic Marshalling SIS Platform
Widely adopted in new safety plant construction, old cabinet technical renovation, preventive spare reserve and periodic SIL compliance verification across petrochemical, oil & gas and power industries.

IV. Working Principle

After dual redundant 24VDC power-on, the two CSLS controllers complete synchronous hardware self-test for memory, LSN network and CHARM bus. Only when cross-check verification passes will the assembly load user safety programs, redundant and channel configuration parameters from local flash memory.

The system collects field safety signals via CHARM bus every 50ms, executes identical interlock logic on both controllers and votes operation results mutually. Dual LSN ports realize real-time data synchronization between master and standby controllers and bidirectional safety data exchange with DeltaV upper system.

Once dual-core data mismatch, power failure, network disconnection or I/O loop fault is detected, the assembly activates fail-safe protection to set all safety outputs to predefined safe state, latches fault timestamps and triggers local & remote alarm. Under redundant configuration, the standby controller takes over safety control seamlessly; normal operation can be restored after fault elimination, hardware reset and safety program integrity verification.

V. Application Scenarios

New construction of SIL3 ESD/F&G safety systems for refineries, coal chemical plants and LNG terminals, optimizing cabinet layout and improving system fault tolerance via electronic marshalling technology.
Safety control system deployment for offshore oil & gas platforms and long-distance pipeline compressor stations, adapting to wide-temperature, high-corrosion and strong electromagnetic field operating environments.
Technical renovation of power plant BMS/ETS safety protection systems, upgrading traditional hard-wired safety control to flexible CHARM distributed architecture for convenient channel expansion and rapid fault location.
Preventive spare reserve for high-risk chemical safety interlock systems, used for emergency on-site replacement of faulty controllers and power loops to reduce unplanned shutdown duration.
Periodic SIL safety compliance audit and safety interlock transmission test for industrial installations, relying on built-in fault diagnosis and event recording functions to complete safety document filing and regulatory acceptance.

Emerson SS6501T01 CHARM Intelligent Safety Logic Solver