Key Features

• Independent safety logic core, separated from main control CPU to avoid common‑cause failures

• High‑speed overspeed monitoring and hard‑wired trip output for emergency shutdown

• Hot‑standby redundant design with bumpless switchover

• Galvanic isolation for all I/O channels, strong anti‑interference against EMI/RFI

• Integrated self‑diagnosis, watchdog monitoring and fault indication

• Hot‑swappable for online maintenance without system outage

• Operating temperature: −40 °C ~ +85 °C

• SIL2, CE, UL, ATEX II 3G, IECEx certified for safety‑critical applications

Technical Specifications

• Model: Woodward 5463‑870

• Type: Redundant Safety Trip & Overspeed Protection Module

• Core Functions: Overspeed protection, emergency trip, safety interlock logic

• Redundancy: Hot‑standby redundancy

• Communication: Dual redundant Ethernet backplane bus

• Operating Temperature: −40 °C ~ +85 °C

• Certifications: SIL2, CE, UL, ATEX II 3G, IECEx

Applications

• Independent overspeed and emergency shutdown protection for gas/steam turbines

• Safety interlock and hard‑trip control for compressors and rotating machinery

• Safety protection backup for power plant generator unit control systems

• Fail‑safe protection unit for NetCon 5000 turbomachinery control racks