Remote shutdown via fiber
A system and method provide vital shutdown of a remote slave unit linked by a fiber optic connection to a local, checked redundant master unit with two paired computers. Each computer sends a life signal to an associated local vital supervision card (VSC) and copper to fiber converter (C/F converter) for transmission via fiber to a corresponding fiber to copper converter (F/C converter) on the slave unit, then to a corresponding remote VSC. Each local VSC controls power to a corresponding second local VSC-associated C/F converter, and each remote VSC controls power to a corresponding second remote VSC F/C converter. A VSC detecting an incorrect life signal signature removes power to the corresponding controlled converter and, optionally, to a respective local or remote I/O rack, thereby shutting down the slave unit.
1. A system for remote shutdown of a slave unit, the system comprising:
a master unit comprising a first computing device, a second computing device, a first vital supervision card (VSC), a second VSC, a first copper to fiber (C/F) converter, and a second C/F converter, wherein the first computing device is configured to send a first life signal to the first VSC and the first C/F converter, and the second computing device is configured to send a second life signal to the second VSC and the second C/F converter;
a slave unit comprising a third VSC, a fourth VSC, a first fiber to copper (F/C) converter, and a second F/C converter, wherein the first F/C converter is configured to forward the first life signal to the third VSC, and the second F/C converter is configured to forward the second life signal to the fourth VSC; and
at least one fiber coupled between the master unit and the slave unit, configured to forward the first life signal from the first C/F converter to the first F/C converter and the second life signal from the second C/F converter to the second F/C converter,
wherein:
the first C/F converter is configured to be powered down in response to the second VSC failing to verify the second life signal;
the second C/F converter is configured to be powered down in response to the first VSC failing to verify the first life signal;
the first F/C converter is configured to be powered down in response to the fourth VSC failing to verify the second life signal; and
the second F/C converter is configured to be powered down in response to the third VSC failing to verify the first life signal.
2. The system of claim 1 , wherein at least one of the first C/F converter, the second C/F converter, the first F/C converter, and the second F/C converter is configured to be powered down by a shutoff relay.
3. The system of claim 1 , wherein at least one of the master unit and the slave unit further comprises an I/O rack, wherein the I/O rack is configured to be powered down in response to either unit VSC failing to verify an associated life signal.
4. The system of claim 1 , wherein at least one of the first life signal and the second life signal comprises a test algorithm.
5. The system of claim 4 , wherein the test algorithm comprises temporary modification of at least one of a life signal period and a life signal frequency.
6. The system of claim 1 , wherein at least one of the first C/F converter and the second C/F converter is configured to be powered down in response to a control signal from its respective computing device.
7. The system of claim 6 , wherein at least one of the first C/F converter and the second C/F converter is further configured to be powered down in response to an output of an AND control gate.
8. A master unit comprising a first computing device, a second computing device, a first vital supervision card (VSC), a second VSC, a first copper to fiber (C/F) converter, and a second C/F converter, wherein:
the first computing device is configured to send a first life signal to the first VSC and the first C/F converter;
the second computing device is configured to send a second life signal to the second VSC and the second C/F converter;
the first C/F converter is configured to be powered down in response to the second VSC failing to verify the second life signal; and
the second C/F converter is configured to be powered down in response to the first VSC failing to verify the first life signal.
9. The master unit of claim 8 , wherein at least one of the first C/F converter and the second C/F converter is configured to be powered down in response to a control signal from its respective computing device.
10. The master unit of claim 8 , further comprising an I/O rack, wherein the I/O rack is configured to be powered down in response to at least one of the first VSC or the second VSC failing to verify an associated life signal.
11. A slave unit comprising a first VSC, a second VSC, a first fiber to copper (F/C) converter, and a second F/C converter, wherein:
the first F/C converter is configured to forward a first life signal to the first VSC;
the second F/C converter is configured to forward a second life signal to the second VSC;
the first F/C converter is configured to be powered down in response to the second VSC failing to verify the second life signal; and
the second F/C converter is configured to be powered down in response to the first VSC failing to verify the first life signal.
12. The slave unit of claim 11 , further comprising an I/O rack, wherein the I/O rack is configured to be powered down in response to at least one of the first VSC or the second VSC failing to verify an associated life signal.
13. A method of remotely shutting down a slave unit, the method comprising:
sending, on a master unit, a first life signal from a first computing device to a first vital supervision card (VSC) and a first copper to fiber (C/F) converter, and a second life signal from a second computing device to a second VSC and a second C/F converter;
forwarding, on at least one fiber coupled between the master unit and a slave unit, the first life signal from the first C/F converter to a first fiber to copper (F/C) converter on the slave unit, and the second life signal from the second C/F converter to a second F/C converter on the slave unit;
forwarding, on the slave unit, the first life signal from the first F/C converter to a third VSC, and the second life signal from the second F/C converter to a fourth VSC;
powering down the first C/F converter in response to the second VSC failing to verify the second life signal;
powering down the second C/F converter in response to the first VSC failing to verify the first life signal;
powering down the first F/C converter in response to the fourth VSC failing to verify the second life signal; and
powering down the second F/C converter in response to the third VSC failing to verify the first life signal.
14. The method of claim 13 , wherein powering down at least one of the first C/F converter, the second C/F converter, the first F/C converter, and the second F/C converter is achieved by a shutoff relay.
15. The method of claim 13 , further comprising powering down at least one of a master unit I/O rack and a slave unit I/O rack in response to either unit VSC failing to verify an associated life signal.
16. The method of claim 13 , further comprising applying a test algorithm comprising modification of at least one life signal.
17. The method of claim 16 , wherein the test algorithm further comprises verifying at least one VSC outputting a power down control signal in response to a life signal modification.
18. The method of claim 16 , wherein the modification of at least one life signal comprises temporary modification of at least one of a life signal period or a life signal frequency.
19. The method of claim 13 , further comprising at least one of powering down the first C/F converter in response to a control signal from the first computing device and powering down the second C/F converter in response to a control signal from the second computing device.
20. The method of claim 19 , further comprising simultaneously maintaining power to an I/O rack on the master unit.