Key Features

• TMR triple‑modular redundant design, avoiding single‑point failure of safety protection

• High‑speed sampling for magnetic pickup speed signals, realizing 2‑out‑of‑3 voting overspeed protection

• Independent safety logic operation, physically isolated from main control CPU to prevent common‑mode faults

• Galvanic isolation for all input/output channels, strong anti‑interference against EMI/RFI noise

• Built‑in self‑diagnosis, watchdog monitoring and LED status indicators for rapid fault location

• Hot‑swappable for online maintenance without system shutdown

• Operating temperature: −40 °C ~ +85 °C, suitable for power and petrochemical harsh environments

• SIL2/SIL3, CE, UL, ATEX II 3G, IECEx safety certified

Technical Specifications

• Model: Woodward 5463‑873

• Type: TMR Redundant Overspeed & Safety Trip Protection Module

• Core Functions: Speed acquisition, 2‑out‑of‑3 voting logic, emergency trip, safety interlock

• Input: Tachometer pulse/frequency signals

• Redundancy: Triple‑Modular Redundancy (TMR)

• Communication: Dual redundant Ethernet backplane bus

• Operating Temperature: −40 °C ~ +85 °C

• Certifications: SIL2/SIL3, CE, UL, ATEX II 3G, IECEx

Applications

• Independent triple‑redundant overspeed protection for gas and steam turbines

• Hard‑wired emergency shutdown control for compressors and high‑speed rotating machinery

• High‑reliability safety protection for power plant generator units

• Core safety protection unit for NetCon 5000 turbomachinery control racks