GEI-100861 Mark VIeS Functional Safety Control Systems ...

GEI-100861A

Mark* VIeS Functional Safety Control SystemsPower Distribution Modules (PDM)Application Guide for General Market

These instructions do not purport to cover all details or variations in equipment, nor to provide for every possiblecontingency to be met during installation, operation, and maintenance. The information is supplied for informationalpurposes only, and GE makes no warranty as to the accuracy of the information included herein. Changes, modifications,and/or improvements to equipment and specifications are made periodically and these changes may or may not be reflectedherein. It is understood that GE may make changes, modifications, or improvements to the equipment referenced herein or tothe document itself at any time. This document is intended for trained personnel familiar with the GE products referencedherein.

Public Information – This document contains non-sensitive information approved for public disclosure.

GE may have patents or pending patent applications covering subject matter in this document. The furnishing of thisdocument does not provide any license whatsoever to any of these patents.

GE provides the following document and the information included therein as is and without warranty of any kind,expressed or implied, including but not limited to any implied statutory warranty of merchantability or fitness forparticular purpose.

For further assistance or technical information, contact the nearest GE Sales or Service Office, or an authorized GE SalesRepresentative.

Revised: June 2019Issued: April 2018

© 2018 - 2019 General Electric Company.___________________________________* Indicates a trademark of General Electric Company and/or its subsidiaries.All other trademarks are the property of their respective owners.

We would appreciate your feedback about our documentation.Please send comments or suggestions to [email protected]

Public Information

mailto:[email protected]

Document UpdatesRevision Location Description

ARelated Documents

Added Mark VIeS Functional Safety System documentationThroughout document

Related DocumentsDoc # TitleGEH-6703 ToolboxST User Guide for Mark VIe Control PlatformsGEH-6862 ToolboxST User Guide for Mark VIeS Functional Safety SystemsGEH-6721_Vol_I Mark VIe and Mark VIeS Control Systems Volume I: System GuideGEH-6721_Vol_II Mark VIe and Mark VIeS Control Systems Volume II: System Guide for General-purpose ApplicationsGEH-6855_Vol_I Mark VIeS Functional Safety Systems for General Market Volume I: System Guide

GEH-6855_Vol_IIMark VIeS Functional Safety Systems for General Market Volume II: System Guide for General-purposeApplications

GEH-6723 Mark VIeS Control Functional Safety ManualGEH-6725 Mark VIe and Mark VIeS Control System Equipment in Hazardous Locations (HazLoc) Instruction GuideGEH-6860 Mark VIeS Control General Market Functional Safety ManualGEH-6861 Mark VIeS Functional Safety System Equipment in Hazardous Locations (HazLoc) Instruction Guide

2 GEI-100861A GEI-100861 Mark VIeS Functional Safety Control Systems PDMs for General MarketPublic Information

Safety Symbol Legend

Warning

Indicates a procedure or condition that, if not strictly observed, could result inpersonal injury or death.

Caution

Indicates a procedure or condition that, if not strictly observed, could result in damageto or destruction of equipment.

Attention

Indicates a procedure or condition that should be strictly followed to improve theseapplications.

Application Guide for General Market GEI-100861A 3Public Information

Control System Warnings

Warning

To prevent personal injury or damage to equipment, follow all equipment safetyprocedures, Lockout Tagout (LOTO), and site safety procedures as indicated byEmployee Health and Safety (EHS) guidelines.

Warning

This equipment contains a potential hazard of electric shock, burn, or death. Onlypersonnel who are adequately trained and thoroughly familiar with the equipment andthe instructions should install, operate, or maintain this equipment.

Warning

Isolation of test equipment from the equipment under test presents potential electricalhazards. If the test equipment cannot be grounded to the equipment under test, the testequipment’s case must be shielded to prevent contact by personnel. To minimize hazardof electrical shock or burn, approved grounding practices and procedures must bestrictly followed.

Warning

To prevent personal injury or equipment damage caused by equipment malfunction,only adequately trained personnel should modify any programmable machine.

Warning

Always ensure that applicable standards and regulations are followed and onlyproperly certified equipment is used as a critical component of a safety system. Neverassume that the Human-machine Interface (HMI) nor the operator will close a safetycritical control loop.


Contents1 Overview ....................................................................................................................................................62 Power Distribution Benefits ............................................................................................................................63 PDMModules..............................................................................................................................................84 Power Supplies ............................................................................................................................................95 Standard Cable Harnesses for PDMs .............................................................................................................. 136 Power Distribution Examples ........................................................................................................................ 167 Standard System with Redundant Source/Supplies ............................................................................................ 178 TMR High Availability (HA) Systems ............................................................................................................ 199 HazLoc Systems......................................................................................................................................... 2010 Appendix A JPDD Wiring Connection Details ................................................................................................ 2211 Appendix B JPDE Wiring Connection Details ................................................................................................ 2412 Appendix C JPDG Wiring Connection Details ................................................................................................ 2613 Appendix D JPDH Wiring Connection Details ................................................................................................ 2914 Appendix E JPDS Wiring Connection Details................................................................................................. 30


1 OverviewThis document provides instructions and examples to apply the product line of Power Distribution Modules (PDM) and cableswithin a Mark* VIe or Mark VIeS Safety control system for General Market applications. Examples are provided forSimplex, Dual Redundant, and Triple Modular Redundant (TMR) power supply systems, including customer cabled powerflow and I/O support.

Note For more information on system considerations and specific I/O module descriptions and ratings, refer to theMark VIeand Mark VIeS Control Systems Volume I: System Guide (GEH-6721_Vol_I), Mark VIe and Mark VIeS Control SystemsVolume II: System Guide for General-purpose Applications (GEH-6721_Vol_II), Mark VIeS Functional Safety Systems forGeneral Market Volume I: System Guide (GEH-6855_Vol_I), orMark VIeS Functional Safety Systems for General MarketVolume II: System Guide for General-purpose Applications (GEH-6855_Vol_II).

For information on applications in hazardous locations (HazLoc) and ratings in hazardous areas, refer to the Mark VIe andMark VIeS Control Systems Equipment in Hazardous Locations (HazLoc) Instruction Guide (GEH-6725) or the Mark VIeSFunctional Safety System Equipment in Hazardous Locations (HazLoc) Instruction Guide (GEH-6861).

Attention

Users must follow all Conditions of Safe Use as stated in theMark VIe and Mark VIeSControl Systems Equipment in Hazardous Locations (HazLoc) Instruction Guide(GEH-6725) or theMark VIeS Functional Safety System Equipment in HazardousLocations (HazLoc) Instruction Guide (GEH-6861).

The PDM product line provides a set of inter-connectable products to provide core system power for control electronics andI/O contact wetting within the control system. When using these products, panel layout and wiring becomes a standardizeddesign in new control panels instead of requiring customized designs for each panel. PDM products include:

• JPDx series of power distribution modules that are DIN-rail mountable• Power Distribution Diagnostic Feedback (PPDA) I/O pack for monitoring control and wetting power and branch fusing.

The PPDA is mounted on either the JPDG or JPDS board and communicates diagnostic feedback to the Mark VIe orMark VIeS Safety control system over IONet.

• Prefabricated power cable harnesses for use in interconnecting PDMs and system components

This document describes the PDM components within the system, as well as typical applications.

2 Power Distribution BenefitsThe benefits of PDM components are as follows:

• The control system is designed to support two or more independent sources of power. A typical setup uses two separateAC grid power feeds as primary sources. An optional secondary power source could be a plant’s 24, 48, or 125 V dcstation battery system, which is charged by the local AC grid. This keeps the control system powered during loss of ACgrid power events and supports black start operations.

• Flexible, field-proven redundancy schemes for the power sources, power supplies, and power cables to Simplex andRedundant I/O eliminates custom engineered solutions and assures proper responses to failures in power delivery. Thisalso enables the designer to choose the appropriate system reliability and fault coverage.

• The PDMs built-in coordinated circuit protection isolates faults within the system and prevents the spread of issues.Examples are in branch protection by fuses, which prevents a module short from taking down supplies upstream. Thisalso protects wire insulation and connectors from exceeding safe temperatures.

• The PDM system provides isolation between Core control power and I/O Wetting power, protecting controller and I/Oelectronics from power surges or dips received from field I/O.− Grounding within the control cabinets includes Functional Earth (FE) ground, internal power ground, and signal

grounds with the ground paths set up to provide paths for fault currents avoiding electronics.


− The Core control power common is tied to ground at each I/O pack. Each I/O pack is tied to ground through the I/Opack casing to the DIN-rail mounting base, which is mounted to an FE panel metal base and tied to Protective Earth(PE) at a single point for the panel. This keeps electrical noise and ground disturbances on PE away from the Controlelectronics. Because the PDM is based on a single connection to earth ground within the I/O cabinet, this groundingarchitecture also helps to prevent currents and noise from ground loops.

− The I/O Wetting power sources (and optional battery sources) should be floating from ground. Floating I/O Wettingpower allows for the detection of a ground fault.

− For additional details about panel grounding practices and Signal Reference Structure (SRS), refer to the Mark VIeand Mark VIeS Control Systems Volume I: System Guide (GEH-6721_Vol_I) or the Mark VIeS Functional SafetySystems for General Market Volume I: System Guide (GEH-6855_Vol_I), the section Grounding.

• The PDM system (via JPDG or JPDS) supports a PPDA I/O pack that senses Core control and I/O Wetting power fordiagnostic coverage, detecting open fuses, loss of sources, and I/O Wetting power ground faults.− Supply and distribution monitoring and annunciated status to ensure redundancy is maintained and minimize mean

time to repair.− This allows the diagnostic console (HMI) to report not just issues with loss of I/O but specific messages for the

location of the fuse. Applications can use this information to report the location as specific as the building, floor,cabinet, board, and fuse number(s).

− Real-time source monitoring is available for both incoming power to the PDM and both control and wetting powersupply output voltages for continuous diagnostic alarming.

• Pre-wired harnesses reduce manufacturing costs and increase system reliability.• The I/O terminal boards contain transient protection circuitry with the fault currents flowing directly to the DIN-rail base

and panel base and then to earth ground, improving survival of lightning strike induced surges on I/O wiring.


3 PDM ModulesThe following table lists the power distribution boards available for General Market applications. Wiring information andillustrations are provided in the Appendices of this document.

PDM Modules for Mark VIe and VIeS Safety Systems

Module Function Fed From Provides/Goes To Paths Diagnostics

IS410JPDDGxAwith JPDD boardon DIN-rail base

24/48/125 V dc I/OWetting powerbranch circuitdistribution withservice switchesand fusing

24/48 V dc fromJPDE (JSx or JFxplugs) or JPDG(JFx plugs);125 V dc customersupplied source

Wetting for I/Oterminal boards,Contact Input wetting(JE plugs), ContactOutput wetting (JFand JG plugs)

Six switched branchoutputs, fused onpositive and returnoutputs via six JDxplugs

LED indicatorson fused outputs

IS410JPDEG1Awith JPDE onDIN-rail base

24/48 V dc I/OWetting powerdistribution;Dual power supplyoption

24/48 V dc I/OWetting powersupplies(floating/redundant)to JPS1/JPS2optional battery toJD1

Wetting for I/Oterminal boards,Contact Input wetting(JE plugs), ContactOutput wetting (JFand JG plugs) JPDDfor branch distribution(J28 plug)

Three switch/fuseoutputs, three fusedoutputs

Fuse and signalmonitoring viaJPDS withPPDA

IS410JPDGH1Awith JPDG onDIN-rail base

IS420PPDAH1Boptional I/O pack

24/28 V dc controlpower and 24/48 Vdc I/O Wettingpower distribution;Dual power supplyoption

Two 24/28 V dccontrol powersupplies to JR/JSplugs;Two 24/48 V dc I/OWetting powersupplies toJPS1/JPS2

Control power toJPDH, IONet Ethernetswitches, I/O packs,Mark VIe controllers;Wetting power for I/Oterminal boards,Contact Input wetting(JE plugs), ContactOutput wetting (JFand JG plugs);JPDD for branchdistribution (J28 plug)

Dual fusing on24/28 V dc controlpower to JPDH;Self-resetting fuseson 24/28 V dc to I/Opacks, controllers,and IONet switches;Dual fuses on 24/48V dc I/O Wetting toI/O terminal boardsor JPDD

AC checking,fuse checks,signal monitorsvia PPDA

IS410JPDHG1Awith JPDH onDIN-rail base

High density 24/28V dc control powerdistribution for I/Opacks, controllers,and IONet switches

JPDG or JPDS toJ1 plug, ordaisy-chained toanother JPDH viaJ1X plug

Three sets of eight I/Opacks (R/S/Tcontrolpower groups), threeIONet switches

Eight each for R/S/Tgroups;I/O pack paths haveself-resettable fuses

Self-resettablefuses detectedby loss of I/Opackcommunications

IS410JPDSG1Awith JPDS onDIN-rail base

IS420PPDAH1Boptional I/O pack

24/28 V dc Corecontrol power;Supports TMRconfiguration ofR/S/Tcontrolsupplies

Three 24/28 V dccontrol powersupplies to JR, JS,JT plugs

Three independentR/S/Tcontrol powergroups to feed JPDHsfor branch distributionto I/O packs andIONet switches

Six control power toJPDH via J1-6plugs, six controlpower to controllers,IONet switches, orI/O packs via JAxand JCx

Fuse and signalmonitoring withPPDA


4 Power SuppliesGE power supplies provide 24 and 48 V wetting power and 24 or 28 V control power, with both AC and DC input modelsranging from 120 to 960 W. Each supply model provides power sourced from multiple connections (to allow for sharingcurrents on multiple conductors) and a contact for supply health status monitoring. The GE power supplies have an operatingtemperature range of -25 to 70°C (-13 to 158°F) (free convection, no fans required); derate 2.5%/°C above 60°C (140 °F).

GE Supplied Power Supplies for Mark VIe and VIeS Safety Systems

GE Part # OutputVolts

Amps at 40°C(104 °F)

Amps at 60°C(140 °F) Input Volts Coated HazLoc

342A3648P120W24 24 7.5 5

90–350 V dc or 85–264 V ac(auto-switch)100-240 V ac Nominal

No C1D2

342A3648P120W24C 24 7.5 5 YesC1D2, ATEX,IECEx

342A3648P120W28 28 6.4 4.2 No C1D2

342A3648P120W28C 28 6.4 4.2 YesC1D2, ATEX,IECEx

342A3648P240W24 24 15 10 No C1D2

342A3648P240W24C 24 15 10 YesC1D2, ATEX,IECEx

342A3648P240W28 28 12.8 8.5 No C1D2

342A3648P240W28C 28 12.8 8.5 YesC1D2, ATEX,IECEx

342A3648P240W48 48 7.5 5 No C1D2342A3648P480W24 24 26 20 No C1D2

342A3648P480W24C 24 26 20 YesC1D2, ATEX,IECEx

342A3648P480W28 28 22.1 17 No C1D2

342A3648P480W28C 28 22.1 17 YesC1D2, ATEX,IECEx

342A3648P480W48 48 13 10 No C1D2342A3648P400W40 40 13 10 No C1D2342A3648P960W24 24 45 40 90–300 V dc, derate output <

120 V dc: 0.5%/Vor 85–264 V ac (auto-switch),derate output < 100 Vac: 1%/V

No C1D2342A3648P960W28 28 38.3 34 No C1D2

342A3648P960W48 48 22.5 20 No C1D2


Example 480 WAC/DC Power Supply Module


The supply FET-ORing module (342A3648PFxxA28C) can be used for combining multiple supplies, allowing for acombination of up to 28 V sources with up to 40 A of flow into the diodes. This module uses FETs as diodes for low voltagedrop across the module input to output. Output voltage is 0.2 V less than input voltage. The FET-ORing modules have anoperating temperature range -25 to 70°C (-13 to 158 °F). The linear derating is 2.5% per °C above 60°C (140 °F). FET-ORoutput has varistor protection against static surge voltages greater than 32 V.

GE Supplied Power Supplies for Mark VIe and VIeS Safety Systems

GE Part # Description VoltageDC

Amps at 60°C(140 °F) Clamp V Coated HazLoc

342A3648PF20A28C FET-OR 2x10A 28 20 32 Yes C1D2, ATEX, IECEx342A3648PF40A28C FET-OR 2x20A 28 40 32 Yes C1D2, ATEX, IECEx342A3648PF80A28C FET-OR 2x40A 28 80 32 Yes C1D2, ATEX, IECEx

Example FET-ORing Module


A supply diode-ORing module (342A3647PD48A40) can be used for combining multiple supplies, allowing for acombination of up to 48 V sources with up to 20 A of flow into the diodes. This module uses FETs as diodes for low voltagedrop across the module input to output.

Note The 342A3647PD48A40 Diode-ORing module is rated -25 to 65°C (-13 to 149 °F).

Example Diode-OR Module


5 Standard Cable Harnesses for PDMsStandard GE cable harnesses are available to safely connect Mark VIe control and I/O bulk power supplies to the JPDG,JPDS, and JPDE main PDMs. Cable harnesses are also available to connect the control and I/O main PDMs to branchdistribution modules: JPDH to provide individual protected control power to each I/O pack and JPDD to provide individualprotected I/O wetting power to Contact Input and Contact Output termination modules. GE also provides harnesses that canbe used with non-GE wetting sources for Contact Input and Contact Output termination modules that require voltages notsupported by the JPDG or JPDE I/O wetting power distribution.

Note Observe all Conditions for Safe Use as stated in the Mark VIe and Mark VIeS Control Systems Equipment inHazardous Locations (HazLoc) Instruction Guide (GEH-6725) or theMark VIeS Functional Safety System Equipment inHazardous Locations (HazLoc) Instruction Guide (GEH-6861), and provide I/O wetting sources with current limitingadequate to protect the cable harnesses and I/O termination boards.

GE PDMs provide:

• Fault current protection, limiting the current from the PDMs to the capability of the system components and protectingthe wiring harnesses

• Branch circuit system feedback via optional Power Distribution Diagnostic Feedback (PPDA) I/O pack• Ground fault monitoring of floating systems I/O Wetting power supply, via optional PPDA I/O pack• Possible Simplex, Dual, and TMR power supply redundancy options

Note Systems using multiple I/O wetting voltages in the same application can create the possibility of applying the wrongcontact wetting voltage to a termination board wetting power plug. Always check wetting voltage sources and wiring beforeapplying power to I/O terminal boards and application loads.

Note Connections between PDM boards should use the pre-defined cable harnesses listed in the following tables.

In the following tables, bold letters on the cable part numbers are used to reference the correct cable to apply in the examplepower system diagrams.


Cable Harnesses for Mark VIe and Mark VIeS General Market Use (1 of 2)

Cable Part Number Usage End #1 End #2336A5026LGG015 24/28 V dc control power into JPDG JR, JS 6–pin Mate-N-Lok Open ends

336A5026JFG01524/48 V dc I/O field/wetting power to JPDG JPS1,JPS2

9–pin Mate-N-Lok Open ends

336A5026HXG015Control or I/O power supply health sensing drycontacts to JPDG P3,P4

4–pin 2.54 mm (0.1 in)Header

Open ends

336A5026JJG015115/230 V ac control and I/O AC Mains to JPDG toAC feedback – JAC1

4–pin 6.35 mm (0.250in) Mate-N-Lok femalepins

Open ends

336A5026HFG015

24/28 V dc control power and supply health contactinto JPDS JR, JS, JTand 24/48 V dc I/O fieldwetting power and supply health contact into JPDEJPS1, JPS2


336A5026LDG015Optional 24/48 V dc battery input of backup wettingpower to JPDE JD1External ORing diode required.


336A5026EGG01524/28 V dc control power from JPDG JCx, JDx orJPDH JRx, JSx, JTx to IONet switch/UCSCcontroller/YUAA Analog I/O

2–pin Mini Mate-N-Lok Open ends

336A5026EFG01524/28 V dc control power from JPDH JxS or JPDSJAx, JCx to IONet switch/UCSC controller

2–pin 6.35 mm(0.250 in) Mate-N-Lok

Open ends

336A4937EWG15FUser/application supplied UL/ATEX compliant DCvoltage for I/O field/wetting power to Contact InputJE plug or Relay Output JF plug


Open ends

336A5026EAG015User/application supplied UL/ATEX compliant ACvoltage for I/O field/wetting power to Relay OutputJF plug


Open ends

336A5026LBG015User/application supplied UL/ATEX compliant ACvoltage for I/O field/wetting power to Relay OutputJG plug


Open ends

336A5026EDG015User/application supplied UL/ATEX compliant DCvoltage for I/O field/wetting power to Relay OutputJG plug

4–pin 6.35 mm(0.250 in Mate-N-Lok

Open ends

Attention

Single length cable assemblies (4.57 m, 15 ft) should be cut to length forMark VIeS Functional Safety General Market product use.


Cable Harnesses for Mark VIe and Mark VIeS General Market Use (2 of 2)

Cable Part Number Usage End #1 End #2

336A5026JBG0xx24/28 V dc control power, JPDG J1-J4 to JPDH J1(powers JPDH columns JRx and JSx)


6–pin Mate-N-Lok

336A5026EHG0xx24/28 V dc control power, JPDS J1-J6 or JPDH J1Xto JPDH J1

6–pin Mate-N-Lok 6–pin Mate-N-Lok

336A5026RDG0xx24/28 V dc control power, JPDG JCx, JDx or JPDHJRx, JSx to I/O packs with Micro Mate-N-Lok plug


3–pin 2.997 mm(0.118 in) MicroMate-N-Lok

336A4937RDG010254 mm (10 in) control power cable for PPDA I/Opack on JPDS P4 or JPDG JD4


3–pin 2.997 mm(0.118 in) MicroMate-N-Lok

336A5026ENG0xx24/48 V dc I/O field/wetting power, JPDG JFx orJPDD JDx to I/O terminal board JE or JF wettingpower plug


3–pin 6.35 mm(0.250 in)Mate-N-Lok

336A5026JGG0xx24/48 V dc I/O field/wetting power, JPDG JFx toJPDD J28 or I/O terminal board JG plug


4–pin 6.35 mm(0.250 in)Mate-N-Lok

336A5026EYG0xx24/48 V dc I/O field/wetting power, JPDE JSx, JFxor JPDD J28X 4 pin to JPDD J28 4–pin field power

4–pin Mate-N-Lok 4–pin Mate-N-Lok

Fixed length cable harnesses are available in the following lengths in linear feet: 03,06,09,12,15,20,25 (replace xx withlinear feet, include leading zero.

Available Ribbon Cables from JPDS to JPDE (Power Diagnostics)

Cable Part Number Usage End #1 End #2PDMC10SS50P06IN,PDMC10SS50P18IN,PDMC10SS50P36IN

Power diagnostics ribbon cable, from JPDS P2 toJPDE P1 (needed if using PPDA I/O pack)(152.4, 457.2, or 914.4 mm [6, 18, or 36 in] length)

50–pin ribbon 50–pin ribbon


6 Power Distribution ExamplesThe following example power supply configurations illustrate possible power system architectures and which GE-suppliedcable harnesses to use. (Other power supply configurations are possible; these examples are provided for guidance only.)

1. Standard system for Simplex I/O packs on terminal boards with dual redundant supplies tolerating loss and hotswapreplacement (where codes allow and by trained qualified personal) of a redundant power source or a redundant powersupply using a JPDG (refer to the figure Standard System, Dual Sources into Four Power Supplies into JPDG)

2. Increase to quad supplies allowing any two power supplies to fail by use of additional diode-OR modules (refer to thefigure Standard System with Dual Sources into Redundant Power Supplies into JPDG)

3. High Availability (HA) for TMR I/O packs on terminal boards with TMR power flow, tolerating loss and hotswapreplacement of power source, power supply, diode-OR module, or I/O pack using a JPDG (refer to the figure HA PDMusing JPDS and JPDH for Control Power, JPDE for Wetting)

4. Example hazardous location (HazLoc) application where the core (24/28 V dc) control power is fed from TMR suppliesthrough the JPDS to the TMR I/O packs, tolerating loss of one power source, power supply, or I/O pack (refer to thefigure Example HazLoc Power Distribution with JPDS and Customer I/O Wetting). In this example, field wetting poweris separately provided through a HazLoc certified power supply and customer-supplied terminal block to the I/O terminalboards.

Note Letter codes shown in the previous tables in this document represent the cable part number in the following tables.


7 Standard System with Redundant Source/SuppliesThe simplest form of power distribution is for standard systems using pairs of power supplies feeding a JPDG coredistribution board providing power to simplex I/O. The Mark VIe controllers may be Simplex or Dual as needed for theapplication. The JPDG and power supply configuration in the following figure Standard System, Dual Sources into FourPower Supplies into JPDG provides separate distribution of control power and I/O wetting power, with each fed from twopower sources that are diode OR-ed for shared power and fault tolerance. The diodes may be external to the power supply orbuilt into the supply itself. The optional PPDA I/O pack mounts on the JPDG and DIN-rail base and monitors the DC corecontrol and I/O wetting power signals on the JPDG, along with inputs for AC grid power feeding the power supplies. TheJPDG can supply power to multiple JPDH boards, each JPDH fanning control power through self-resetting polymer fuses(Positive Temperature Coefficient Thermistor [PTC]) to multiple I/O packs. The JPDG can also supply I/O wetting power tomultiple JPDD I/O wetting power distribution boards fanning to fanning fused I/O wetting power to multiple I/O terminalboards.

Standard System, Dual Sources into Four Power Supplies into JPDG

In some systems, additional power supplies can be combined to allow three or four power sources, each fed from separatesources. Examples would be for AC grid power as a primary source and DC battery power as a secondary source, eachfeeding two power supplies with output diodes for a total of four power supplies on each power bus. This provides protectionagainst a failed power source and a failed power supply and allows additional time for ordering the power supply to bereplaced while the system continues to operate.


Optional FET-based diode-ORing modules may be used to combine the power supply outputs when multiple supplies (up toeight from different power sources) feed into the power inputs (JR and JS or JPS1 and JPS2 on JPDG as shown in the figureStandard System with Dual Sources into Redundant Power Supplies into JPDG). The number of supplies depends on thenumber of sources and the appropriate system reliability in the event of multiple failures (MTBF with any one power supplyfailing versus two of any supply). Note that the diode module uses terminal blocks with separate customer supplied wires.

Caution

When applying multiple power supplies, be careful not to exceed the input powerrating of the JPDx power distribution boards. In large power supply systems, usersupplied fusing may be required to protect PDMs and cables. Do not exceed JPDxmaximum input current rating. Follow all local codes.

ControlPower Supply

ControlPower Supply

Diode-OR Module

ControlPower Supply

ControlPower Supply

WettingPower Supply

WettingPower Supply

WettingPower Supply

WettingPower Supply

Diode-OR Module

Diode-OR Module

Diode-OR Module

PRIMARY POWER IN

SECONDARY POWER IN

JPDG

PPDAPower

Diagnostics Module

JR JS

JD1 JD2 JD3 JD4 JD5

RD

JA1

JPS1

LG

JPS2

JC1 JC2 JC3 JC4

JFA

JFB

JFC

JFD

JFE

JFF

JFGJ1 J2 J3 J4

CONTROL POWER40 A / 36 A

WETTING POWER40 A / 36 A

LG JF JF

(Customer Wiring)

P4

HY

P3

HX

Standard System with Dual Sources into Redundant Power Supplies into JPDG

This increase in quantity of power supplies protects against separate occurrences of loss of grid power, loss of battery power,and loss of a power supply. These faults are detected by sensing on internal circuits fed to inputs on the optional PPDA I/Opack mounted on the JPDG, with alarms sent over IONet to the controllers, as well as driving LED status indicators on thefront of the PPDA. This allows for fault diagnosis, which can speed up repair or recovery of full functions by the customer’smaintenance team. This is especially important considering the large number of fuses (22) and connectors (26) on the JPDG,where the PPDA can isolate which fuses or cable connections are suspect.

A third variation on standard Simplex I/O power uses the JPDS, which is normally intended for triple separate power suppliesfor control power. When jumpers are used on the terminal block to tie R, S, and/or T power together, all the outputs serve as acommon bus. Use of power supplies with internal diodes allows the three supply inputs to be diode-ORed for a fault tolerantsource to Simplex I/O pack power.


8 TMR High Availability (HA) SystemsTriple redundancy in controls and I/O packs greatly increases running reliability of the control electronics. This also increasesthe number of PDM circuits, as there are now three separately routed power paths for control and I/O packs (R, S, and T). Inthe following figure, HA PDM using JPDS and JPDH for Control Power, JPDE for Wetting, the JPDS provides TMR controlpower and JPDE provides redundantly sourced I/O wetting power for an HA power system. The JPDS distribution of controlpower by JPDH is supported, where there are three power circuits now separately fed by JPDS (R, S, T) through to the JPDHfor fanning to I/O packs via JR1-8, JS1-8, and JT1-8 plugs. A JPDD can also be used with JPDE to fan fused I/O wettingpower to Contact Input and Relay Output terminal boards (TBs). The JPDD provides local switching and fusing of I/OWetting power (Note that the JPDD fuses are not sensed by the Power Distribution Diagnostic Feedback (PPDA) I/O pack buthave indicator LEDs). Additionally, the wetting distribution offered by JPDE provides diagnostic signals to the optionalPPDA I/O pack mounted on the JPDS module, via the P2/P1 ribbon cable.

Note The JPDS power distribution board can directly support up to six JPDH via J1-J6 control power outputs. If additionalpaths are needed (more than 48 I/O packs), a second JPDS may be connected through five-screw terminal blocks.Alternatively, JPDHs can be daisy-chained by connecting the J1X output to the J1 input of the next JPDH; just do not exceedthe rated input current of the first JPDH J1 plug.

JPDS

OptionalPPDA

I/O Module

JR JS

J1 J2 J3 J4 J5 J6

I/O Module

I/O Module

J1

JR1-JR8 JS1-JS8 JT1-JT8

RD RDRD

EH EH

P4RD

JA1 JAR

JAS

JAT

EF

EF

EF

EH EH

Ethernet Sw.

JT

I/O Module

EH

JEJF

TB (TMR)Wetting

Power Supply

JPDE

EH

OptionalFET ORing

Module

JPS1

JPS2

HF

JPDDJD1

JD2

JD3

JD4

JD5

JD6

J28

EN

JS1

JS2

JS3

JFA

JFB

JFC

P1

P2

JPDH

WettingPower Supply

WettingPower Supply

OptionalFET ORing

Module

WettingPower Supply

HF

ControlPower Supply

ControlPower Supply

OptionalFET ORing

Module

HF

ControlPower Supply

ControlPower Supply

OptionalFET ORing

Module

HF

ControlPower Supply

ControlPower Supply

OptionalFET ORing

Module

CONTROL POWER 25 A

CONTROL POWER 25 A

CONTROL POWER 25 A

HF

WETTING POWER

30 A

EN

EY

JCR EF Controller

JCT

Ethernet Sw.

Controller

Ethernet Sw.

ControllerEF

EFJCS

Ribbon

PRIMARY POWER IN

SECONDARY POWER IN

EY to other JPDD to TB

Customer supplied wiring

Customer supplied wiring

JD1

Battery

LD

JF/JG

Customer-supplied SourceED, LB

EA, EW

HA PDM using JPDS and JPDH for Control Power, JPDE for Wetting


9 HazLoc SystemsGE’s product line of power distribution modules (PDMs) (JPDG, JPDS, JPDE, JPDD, JPDH) can be applied in somehazardous locations (HazLoc). Classifications include Class 1 Division 2, Class 1 Zone 2, and ATEX. When applying MarkVIe products in hazardous locations, the user must follow appropriate country regulations and HazLoc guidelines. HazLocsystems can be subject to intrinsic safety requirements. Cabling flowing outside of the protected zone into the hazardous areamust have power limiting in accordance with IEC60079-11. This often requires protective barriers on each signal, with thebarriers containing combinations of series resistance, fuses, and Zener clamps. The following figure illustrates a possibleHazLoc configuration using a JPDS control power PDM and customer-supplied wetting sources.

Note For information on the Mark VIe product’s HazLoc capability, ratings in a hazardous area, and Conditions of Safe Usethat must be met by the user and application, refer to theMark VIe and Mark VIeS Control Systems Equipment in HazardousLocations (HazLoc) Instruction Guide (GEH-6725) or theMark VIeS Functional Safety System Equipment in HazardousLocations (HazLoc) Instruction Guide (GEH-6861).

Attention

Users must follow all UL/ATEX HazLoc requirements for wiring and maintenance ina classified hazardous location.


Hazardous

Zone

I/O wiring

I/O Module

JE/JFMkVIeS TBWetting

Power Supply24 V dc, 5 A

EW

J1

JR1-JR8 JS1-JS8 JT1-JT8

RDRD

JPDH

RD

EH

ControlPower Supply28 V dc, 20 A

JPDS

OptionalPPDA

I/O Module

JR JS

J1 J2 J3 J4 J5 J6



HF HF HF

P4RD

JA1

JT

P2

Customer-supplied HazLoc Certified Terminal Block

EW

I/O Module

JE/JFMkVIeS TB

I/O Module

JE/JFMkVIeS TB

EW

I/O wiring

I/O wiring

JAR

JAS

JAT

EF

EF

EF

Ethernet Sw.

JCR EF Controller

Ethernet Sw.

Controller

Ethernet Sw.

EF

EFJCS

ControllerJCT

20 A

20 A

20 A

ED

JG

Example HazLoc Power Distribution with JPDS and Customer I/O Wetting


10 Appendix A JPDD Wiring Connection DetailsThe following tables summarizes wiring connections to the IS410JPDDG2A or IS410JPDDG3A. JPDDGxA is intended fordistributing I/O Wetting power and providing service disconnects and fusing on individual power feeds to I/O terminalboards. The two modules differ only in the fuse holder sizes, with fusing provided on both positive and negative paths tosupport floating I/O Wetting supplies:

• IS410JPDDG2A has empty fuse holders with black caps accepting 5 x 20 mm (0.20 x 0.79 in) fuses• IS410JPDDG3A has empty fuse holders with grey caps accepting 31.75 x 6.35 mm (1.25 x 0.25 in) fuses

Traces on the board support up to 15 A fuses for power to Relay Output boards, 7 A continuous max. Contact Input boardstypically are fused at 0.5 A. LED indicators adjacent to the output connectors are lit if the switch is on and both fuses are notopened.

Note For application details, refer to the Mark VIe and Mark VIeS Control Systems Volume II: System Guide forGeneral-purpose Applications (GEH-6721_Vol_II) or theMark VIeS Functional Safety Systems for General Market VolumeII: System Guide for General-purpose Applications (GEH-6855_Vol_II)., the chapter PDM Power Distribution Modules, thesection JPDD DC Power Distribution.

Caution

There are two sizes of input connectors to the JPDD: 2-pin and 4-pin. The 4-pin J28and J28X are for 24/48 V dc I/O Wetting power only. The 2-pin J125 and J125X arefor 125 V dc I/O Wetting power only. Do not mix different I/O Wetting voltages on thesame JPPD module. Only use the J28 or J125 input; do not use both.

JPDD DC Power Distribution Board


Module Connector(s) Pin Out Description Part Number

JPDD I/O Wetting power input,24 or 48 V dc from JPDG orJPDE, 15 A

J28 input,J28X daisy chainoutput

PWR – pins 1, 2RET – pins 3, 4

4-pin, 6.35 mm (0.25in) Mate-N-Lok

PWATE Connectivity© 350826-4Plug TE Connectivity 350779-1Crimp Insert TE Connectivity 350536-1Use 14 AWG wire

JPDD I/O Wetting power input,125 V dc from user supplied UL /ATEX compliant current limitedpower source


PWR – pin 1RET – pin 2


PWATE Connectivity 350824-4Plug TE Connectivity 350777-1Crimp Insert TE Connectivity 350536-1Use 14 AWG wire

JPDD I/O Wetting poweroutputs,up to 15 A fused and switchedoutputs, total branch current notto exceed the max input currentas stated in the Cautionstatement on the previous page

JD1, JD2, JD3, JD4,JD5, JD6 branchoutputs, 7 Acontinuous

PWR – pin 1RET – pin 2


PWATE Connectivity 350824-4Plug TE Connectivity 350777-1Crimp Insert TE Connectivity 350536-1Use 14 AWG wire

Common GE cables used with the JPDD are:

• 336A5026ENG0xx for JPDD JDx outputs to JE or JF 3-pin connectors on Relay Output and Contact Input terminationboards

• 336A5026EYG0xx for JPDD J28X daisy chain output to power another JPDD J28 input; also JPDD J28 input fromJPDE JS1-3 or JF1-3

• 336A5026JGG0xx for input I/O Wetting power from the JPDG JFA, JFB, or JFC connectors to JPDD J28


11 Appendix B JPDE Wiring Connection DetailsThe IS410JPDEG1A core supply board provides switching and fusing for the floating dc I/O Wetting supply within a MarkVIeS system. The supply may be 24 or 48 V dc.

JPDE DC I/O Wetting Distribution Board

Jumper JP1 is used to connect the floating I/O Wetting supply to a diagnostic bias and reference to the chassis ground fordetection of unbalanced voltages on the supply with respect to ground. If a ground fault occurs, this is detected by thevoltages from either side of the wetting supply to ground being unequal in magnitude.

Note For application details, refer to the Mark VIe and Mark VIeS Control Systems Volume II: System Guide forGeneral-purpose Applications (GEH-6721_Vol_II) or theMark VIeS Functional Safety Systems for General Market VolumeII: System Guide for General-purpose Applications (GEH-6855_Vol_II), the chapter PDM Power Distribution Modules, thesection JPDE DC Battery Power Distribution.



JPDE 15 A fused outputs,10 A continuous

JFA, JFB, JFC+24/48V – pins 1, 2RET – pins 3, 4

4-pin, 6.35 mm (0.25 in)Mate-N-Lok

PWATE Connectivity 350826-4Plug TE Connectivity 350779-1Crimp Insert TE Connectivity350536-1Use 14 AWG wire

JPDE 7 A fused andswitched outputs, 5 Acontinuous

JS1, JS2, JS3+24/48V – pins 1, 2RET – pins 3, 4



JPDE I/O Wetting powerinput from UL / ATEXcompliant current limitedsupply or battery, 30 A maxinput

JD1+24/48V – pins 1, 2, 3RET – pins 4, 5, 6


PWATE Connectivity 643424-3Plug TE Connectivity 1-480704-0Crimp Insert TE Connectivity350536-1Use 14 AWG wire

JPDE I/O Wetting powersupply inputs, 24 A maxinput, with power supplyhealth contact sensing

JPS1, JPS2

+24/48V – pins 8, 9Return – pins 1,2,3+10V – pin 4Contact – pin 5



JPDE diagnostic path toPPDA on JPDS

P1, P2 Direct path on all 50 pins 50-pin ribbon connectorPWATE Connectivity 1-5499206-0Plug TE Connectivity 1-1658621-0

Common GE cables used to connect to the JPDE are:

• 336A5026EYG0xx used to connect JFA, JFB, JFC, JS1, JS2, or JS3 to a JPDD switch/fuse board via J28• 336A5026HFG0xx used to connect I/O Wetting power and supply health status contact to JPS1 or JPS2• PDM10SS50PxxIN (06, 18, 36) used to connect power diagnostics from JPDE P2 to JPDS P1 (PPDA)• 336A5026LDG0xx used to connect battery supply to the JPDE JD1 input

Note JD1, JPS1, and JPS2 are connected internally on the JPDE, so if multiple connections are made the supplies mustinclude diodes in their paths to JPDE.


12 Appendix C JPDGWiring Connection DetailsThe IS410JPDGH1A provides Mark VIe control Core and I/O Wetting power distribution from redundant bulk powersupplies, and provides current limited branch output connections that protect downstream electronics and wiring. An optionalIS420PPDAH1B Power Distribution Diagnostic Feedback I/O pack can be added to monitor circuit and fuse status. ThePPDA can report diagnostics, such as loss of branch power, back to the main Mark VIe controller via IONet.

JPDG Core Power Distribution Board with PPDA



JPDG 24/28 V dc control supplyinputs, 36 A max

JR, JS+28V – pins 1, 2, 3RET – pins 4, 5, 6



JPDG control supply healthcontact status

P3

10V_1 – pin 110V_2 – pin 2Contact1 – pin 3Contact2 – pin

Shrouded header, 4-pin,2.54 mm (0.100 in)

PWA 3-644897-4Plug 1375820-4Crimp Insert TE Connectivity1375819-2 for 26 to 22 AWG

JPDG control power output toJPDH board(separate dual 10 A fuse for R,S), 7 A continuous

J1, J2, J3, J4+28V_R – pin 3+28V_S - pin 4RET – pins 1, 2



JPDG control power to controlleror network switch through 3.75 APTC, 1.5 A continuous

JC1, JC2, JC3,JC4

+28V – pin 1RET – pin 2

4.140 mm (0.163 in)Mini-universal Mate-N-Lok

PWATE Connectivity 770166-1Plug TE Connectivity 172165-1Crimp Insert 171639-1 for 20 to 16AWG wire

JPDG control power to I/O packand controller supply through 1.8A PTC, 0.5 A continuous at 70°C(158 °F); 0.9 A continuous at 55°C (131 °F)

JD1, JD2, JD3,JD4, JD5

+28V – pin 1RET – pin 2

4.140 mm (0.163 in)Mini-universal Mate-N-Lok


JPDG I/O Wetting input (24/48 Vdc floating), 40 A continuous

JPS1, JPS2POS – pins 1,2,3,4NEG – pins 6,7,8,9

9–position, 6.35 mm (0.25in) Mate-N-Lok

PWATE Connectivity 643426-3Plug TE Connectivity 1-480706-0Crimp insert 350550-1 for 20 to 14AWG wire

JPDG I/O Wetting power supplyhealth contact status

P4

10V_1 – pin 110V_2 – pin 2Contact1 – pin 3Contact2 – pin 4

Header 4–position 2.54 mm(0.100 in)

PWATE Connectivity 3-641215-4Plug TE Connectivity 1375820-4Crimp insert 1375819-1 for 26 to 22AWG wire

JPDG I/O Wetting outputsthrough 15 A fuses, 10 Acontinuous

JFA, JFB, JFC,JFD, JFE, JFF,JFG

POS – pin 1NEG – pin 2


PWATE Connectivity 350824-4Plug TE Connectivity 350777-1Crimp Insert TE Connectivity350536-1 for 20 to 14 AWG wire

JPDG diagnostic path input P2Direct path on all 50pins

50-pin ribbon connectorPWATE Connectivity 1-5499206-0Plug TE Connectivity 1-1658621-0

JPDG AC line sensing inputs forbulk control orI/O Wetting AC inputs

JAC1

ACPH1 – pin 1ACRET1 – pin 2ACPH2 – pin 3ACRET2 – pin 4


PWATE Connectivity 350792-3Plug TE Connectivity 1-480702-0Crimp insert TE Connectivity350536-1 for 20 to 14 AWG wire


Common GE cables used to connect to the JPDG are:

• 336A5026RDG0xx for I/O pack power fed by JD1-JD5• 336A4937RDG010 for 254 mm (10 in) control power cable for PPDA I/O pack from JD4• 336A5026EGG0xx for JCx, JDx outputs to power either IONet Ethernet switches or Mark VIe UCSC controllers• 336A5026ENG0xx for JFx I/O Wetting outputs to I/O terminal boards JE and JF plugs, such as on STCI, TRLY, or

WROB• 336A5026HXG0xx for control and I/O Wetting power supply health contact sensing to P3 and P4• 336A5026JFG0xx for I/O Wetting power inputs to JPS1 and JPS2• 336A5026JGG0xx for I/O Wetting power outputs from JFA-JFG to JPDD fuse/switch boards, J28 plug• 336A5026JJG0xx for control and I/O Wetting bulk power supplies AC inputs feedback, two AC sources to JAC1• 336A5026LGG0xx for 24/28 V dc control power supply inputs into JPDG to JR or JS plugs• 336A5026JBG0xx to power JPDH Control Power High Density Fanout board from one JPDG J1-J4 plug to power the

JPDH R and S control power buses

Note JPDH JTx connectors are not powered.


13 Appendix D JPDH Wiring Connection DetailsPower routing for up to three sets of eight I/O packs and IONet Ethernet switches is provided by the IS410JPDHG1A.

JPDH High Density Power Distribution Board

Note The JPDH may be used for one Simplex or TMR (three) independent control power buses (R, S, T) fed power, basedon the cable harness feeding supply to J1. For Simplex systems such as those fed by JPDG (or JPDS with external jumpers onthe TB1 or TB2 terminal block), the R and S rails are fed by separate fuses from the same Core control supply, leaving the Tconnectors disabled. For TMR systems, R, S, and T are fed from separate supplies via the JPDS TMR Control PowerDistribution board.


JPDH control powerIN/OUT, 13 A max


RET – pins 1, 2, 3PWR_R for R pin 4PWR_S for S pin 5PWR_T for T pin 6



JPDH to IONet Ethernetswitches (no fuses)

JRS for R,JSS for S,JTS for T

Power pin 1RET pin 2



JPDH to I/O packs through1.6 A PTC, 08 A continuous

JR1-JR8 for R,JS1-JS8 for S,JT1-JT8 for T

Power pin 1RET pin 2

4.140 mm (0.163 in)Mini-universalMate-N-Lok



Common GE cables used to connect to the JPDH are:

• 336A5026RDG0yy for I/O pack power fed by JR1-8, JS1-8, or JT1-8• 336A5026EFG0yy used to connect JRS, JS, or JTS to IONet Ethernet switches (R, S, T)• 336A5026EHG0yy used to connect JPDH to JPDH for daisy chaining (J1X to J1) or JPDS outputs J1-J6 to JPDH J1

input• 336A5026JBG0yy for control power supply to JPDH J1 from a JPDG J1-J4 control power output

14 Appendix E JPDS Wiring Connection DetailsThe IS410JPDSG1A provides Simplex or TMR control power distribution power to Mark VIe controllers and I/O packelectronics. JPDS accepts inputs from three independent 24/28 V control power supplies for TMR power distribution (R, S, T)to the Mark VIe system. When JPDS is applied to Simplex systems with a common control power bus, the terminal block(TB1, TB2) allows a #6 AWG jumper to tie PWR_R to PWR_S to PWR_T at the JPDS to tie up to three power suppliestogether for a redundant common control power feed down to the JPDH boards. (Power supplies must have a built-in ORingfeature or the user must add external ORing diodes to prevent a single power supply fault from taking down the commoncontrol power bus.)

JPDS with PPDA for TMR 28 V DC Core Distribution



JPDS 24/28 V dc power supply inputsand Heath status contacts for R, S, Tsupplies (24 A max input)

JR, JS, JT

RET pins 1, 2, 310V pin 4Status pin 5Power pins 8, 9

9–position 6.35 mm (0.25in) Mate-N-Lok

PWATE Connectivity 643426-3Plug TE Connectivity1-480706-0Crimp insert 350550-1Use 14 AWG wire

JPDS control power bus terminal board(used to combine power rails for Simplexapplications with redundant supplysources)

TB1, TB2

PWR_R pin 1PWR_S pin 2PWR_T pin 3RET – pins 4, 5

Terminal block, 5-position,tri-barrier

PWA Molex 3896900005Use 6 AWG wire

JPDS control power outputs for Mark VIecontrollers and I/O packs (no fusingprovided on JPDS)

JCR, JCS, JCTPower pin 1RET pin 2

2–pin 6.35 mm (0.25 in)Mate-N-Lok


JPDS control power outputs for Mark VIecontroller or IONet switches, through 1.6A PTC, 0.8 A continuous

JAR, JAS, JATPower pin 1RET pin 2


PWATE Connectivity 350824-4Plug TE Connectivity 350777-1Crimp Insert TE Connectivity350536-1 for 20 to 14 AWGwire

Control power for PPDA I/O mounted onJPDS

P4Power pin 1RET pin 2

4.140 mm (0.163 in)Mini-universalMate-N-Lok

PWATE Connectivity1-770166-1Plug TE Connectivity 172165-1Crimp Insert 171639-1 for 20 to16 AWG wire

JPDS power diagnostics bus input toPPDA,ribbon cable to optional JPDE

P1, P2Direct path on all50 pins

50-pin ribbon connector

PWATE Connectivity1-5499206-0Plug TE Connectivity 1–1658621–0

JPDS control power outputs to JPDHcontrol power distribution boards(no fusing provided on JPDS, mustprovide upstream fusing if total sourcecurrent available can exceed 24 A, 20 Amax if HazLoc)

J1, J2, J3, J4, J5,J6

RET pins 1, 2, 3PWR_R pin 4PWR_S pin 5PWR_T pin 6


PWATE Connectivity 643424-3Plug TE Connectivity1-480704-0Crimp Insert TE Connectivity350536-1Use 14 AWG wire

Common GE cables used to connect to the JPDS are:

• 336A5026EFG0yy to power IONet Ethernet switches or UCSC controllers by JAR, JAS, JAT, JCR, JCS, and JCT• 336A5026EHG0yy to supply Common Simplex or TMR power to JPDH from JPDS J1, J2, J3, J4, J5, or J6• PDM10SS50PxxIN (06, 18, 36) used to connect diagnostics from JPDE to JPDS P1 or P2• 336A5026HFG0yy for 24/28 Vdc control power supply inputs to JR, JS, or JT; also includes power supply health contact

sensing• 336A4937RDG010 for 254 mm (10 in) control power cable feed for JPDS mounted PPDA I/O pack, via JPDS P4

Public Information

GEI-100861 Mark VIeS Functional Safety Control Systems ...

Documents

Transcript of GEI-100861 Mark VIeS Functional Safety Control Systems ...