How is the redundancy of DCS configured in the chemical projects currently under implementation?

In current chemical processing projects, the redundant configuration of DCS (Distributed Control Systems) is primarily aimed at ensuring the reliability and stability of the system, thereby preventing failures of the entire system due to the malfunction of a single component. Redundant configurations typically include the following aspects: 1. CPU redundancy: By installing dual CPU modules, if the primary CPU fails, the backup CPU can immediately take over system control, ensuring the continuous and stable operation of the system. 2. Power supply module redundancy: An N+1 or 1+1 redundant power supply configuration is adopted; when one power supply module fails, another can take over automatically, ensuring uninterrupted system operation. 3. Communication module redundancy: Dual-channel, redundant link, or ring network topologies are employed to enhance the reliability of the communication links. 4. IO module redundancy: Redundant IO modules can be configured based on the system’s requirements and importance to ensure the acquisition and output of critical signals. The basis for redundant configuration mainly depends on the actual requirements of the project, security needs, and budget. For example, in scenarios with high security requirements, the system may adopt stricter redundancy configurations. Furthermore, **industry standards also set certain requirements for redundant configurations, such as those established by ISA (International Automation Society) and IEC (International Electrotechnical Commission). With the widespread use of SIS (Safety Instrumented Systems), many projects indeed have reduced requirements for DCS redundancy. SIS is a system that operates independently of DCS; it focuses on ensuring the safety of the process and reducing the risk of accidents. However, SIS is not a solution that completely replaces DCS redundancy; they need to work together. For certain critical areas, it is still necessary to configure DCS with appropriate redundancy to ensure the stability and reliability of the system. .

This post was last edited by hanhaigang128 on 2023-11-12 at 15:39. The redundancy mechanisms for DCS and SIS are separate; having a SIS does not mean that DCS no longer requires redundancy. The CPU in a SIS usually has triple redundancy, while the CPU, communication systems, and power supplies in a DCS are typically configured with a 1:1 redundancy setup. Some I/O cards also require redundant configuration. If a DCS has only one CPU, as well as single units for communication and power supply, then a failure in any of these components could lead to the entire DCS becoming unusable.