ABB DSMB-01C POWER SUPPLY BOARD 64691929

The main function of the SM810 is to act as a monitor for the HW and SW execution of PM865 and these two modules together are a SIL2 compliant system according to IEC61508, certified by TÜV. The SM810 is running a SIL3 certified operating system and have a high degree of self-diagnostic including, for example:

• Double and inverted memory

• Double over voltage protection on internal voltages

• Two independent watchdog timers

• Oscillator supervision

• CRC on firmware and data storage

An SM811 operates like an SM810 for SIL2 but can also together with the PM865 form a controller compliant with SIL3 according to IEC61508, certified by TÜV. The ModuleBus telegrams used in a High Integrity system with the S800 High Integrity modules use the concept of long frames. Long frames are ModuleBus telegrams that are extended with a safety header, comprising additional diagnostics data and CRC32. S800 ModuleBus telegrams sent to the S800 I/O High Integrity modules uses data from the PM865 and an inverted CRC32 from the SM810/SM811. The I/O module checks that the safety header is correct. Data received from the S800 I/O High Integrity modules over the ModuleBus have the safety header independently verified by both SM810/SM811 and PM865. Any CRC32 or other faults in the safety header will result in a retry transmission and, if repeated, a shutdown of the faulty S800 I/O High Integrity module.