Description

Hardware Design and Reliability Assurance

The ICS Triplex T9110 AADvance Processor Module is engineered for high-availability and safety-critical environments. Its hardware design focuses on electrical protection, communication reliability, fault tolerance, and long-term data integrity—ensuring stable operation even under harsh industrial conditions.

1. Electrical Isolation and Power Supply Protection

Full-Range Electrical Isolation

The T9110 processor module uses galvanic isolation for both external power inputs and communication signals. This isolation effectively blocks field-side electrical faults—such as short circuits, surges, or overvoltage—from propagating into the internal electronics. As a result, the core control components are protected from external disturbances, significantly reducing the risk of module damage and system downtime.

Redundant Power Supply with Voltage Protection

The module supports dual redundant 24 V DC power inputs, ensuring continuous operation even if one power source fails. The internal power circuitry includes built-in undervoltage and overvoltage protection, operating safely within a voltage range of 18 to 32 V DC.

If the input voltage moves outside this safe range, the protection mechanism is automatically activated. At the same time, a power-valid status signal is sent to the module’s diagnostic microprocessor, enabling fast fault identification and maintenance response.

2. Communication Interface Configuration

Dual Ethernet Interfaces

The T9110 is equipped with two independent and electrically isolated Ethernet ports (Ethernet 1 and Ethernet 2). Each port can be configured separately and supports multiple industrial communication protocols, including:

• Modbus RTU

• Open Modbus/TCP

• Proprietary AADvance protocol

All processor channels within the controller can share Ethernet data, allowing flexible network architectures and seamless integration into a wide range of industrial control systems.

Serial Communication Ports

Each processor module also provides two isolated serial communication ports, primarily for Modbus RTU slave communication. These ports support RS-485 communication in both 2-wire and 4-wire configurations, offering excellent compatibility with field devices.

The asynchronous communication speed is configurable from 1,200 to 115,200 baud, making the module adaptable to devices with varying communication requirements.

3. Fault Tolerance and Redundancy Capabilities

Flexible Multi-Module Redundant Architecture

The controller can be configured with one, two, or three T9110 processor modules, allowing users to select the appropriate fault-tolerant architecture based on application needs:

• 1oo2D (1-out-of-2 with downgrade) using two modules

• 2oo3D or TMR (Triple Modular Redundancy) using three modules

In the event of a processor failure, the remaining modules continue operation without interruption, maintaining system availability and safety.

Online Replacement and Automatic Synchronization

In redundant configurations, a failed processor module can be replaced while the system remains online. Once the new module is inserted, it automatically performs a self-synchronization process, learning configuration data and runtime status from the healthy modules.

This capability eliminates the need for system shutdown, minimizes maintenance time, and ensures uninterrupted production.

4. Backup Battery and Data Protection

The T9110 processor includes a built-in backup battery that activates only when the main system power is completely lost. This battery safeguards critical system data and functions, including:

Real-Time Clock (RTC) Backup

The battery powers the internal real-time clock, ensuring accurate timekeeping during power outages. When power is restored, system time synchronization is immediate, preventing errors in timestamps, alarms, and scheduled tasks.

Conserved Variable Data Retention

At the end of each application scan cycle, conserved variable data is stored in battery-backed RAM. After power restoration, this data is automatically reloaded, allowing the control application to resume operation without reinitialization.

Diagnostic Log Preservation

Critical diagnostic information—such as fault histories and status changes—is stored in battery-backed memory. This ensures that valuable troubleshooting data is retained even after a complete power loss, supporting faster root-cause analysis and maintenance.

Battery Life Expectancy

• Up to 10 years under continuous power operation

• Approximately 6 months when the module is unpowered (at 25 °C, low humidity)

Environmental factors such as high temperature, high humidity, or frequent power cycling may reduce battery life. Regular inspection and timely replacement are recommended to maintain data protection reliability.