Artesyn’s ControlSafe Carborne Platform consists of two redundant CCCs, each of which delivers fail-safe operations and together provide a highly available platform. They are linked by a Direct Connect Algorithm (DCA) that monitors the health of the two CCCs and designates one of them as ‘active’ and the other as ‘standby’. The user application running on the active CCC has full control of all I/O. The same user application running on the standby CCC can monitor safety-relevant input, but by default has no ability to drive any safety-relevant output.
When the active CCC fails, its safety-relevant output is suppressed and it signals its state through the DCA, which in turn causes the standby CCC to become active and begin driving its safety-relevant output. The unhealthy CCC is taken out of operation and, once it has been repaired by service personnel, can be brought back into service. Monitoring the health state of the two CCCs and controlling fail-over operation between them provides a highly available fail-safe computing system.
CONTROLSAFE CARBORNE PLATFORM ARCHITECTURE
CERTIFICATION EVIDENCE
Artesyn’s ControlSafe Carborne Platform strictly adheres to all industry specifications and standards required to deliver a highly reliable and available platform for modern safety applications.
Artesyn provides customers with a complete Certification Evidence Package to facilitate the certification process for their integrated systems.
The Certification Evidence Package includes:
ƒƒ Safety Case
• Definition of system
• Quality management report
• Safety management report
• Technical safety report
ƒƒ Safety Assessment Report
ƒƒ Safety Manual
• Specifies user’s actions required to enable the integration of
Artesyn’s ControlSafe Carborne Platform into a safety-relevant
system
ƒƒ Safety certificate No. Z10 17 09 87324 012 issued by TÜV SÜD
(021)-62586787|(021)-62586786
