Woodward 9903-543 ProTech-GII Overspeed Protection System

The Woodward 9903-543, also cataloged as the 9903-543 Overspeed Protection Panel, operates as a dedicated hardware component for fail-safe speed monitoring and emergency shutdown execution within ProTech-GII safety platforms.

Hardware Specifications

High-Reliability Safety Control (SIS) Properties

The protection panel is built on a Triple Modular Redundant (TMR) 2oo3 architecture that uses three separate internal microprocessors to monitor three independent speed sensing pickups. To enforce complete fail-safe state execution without risk of false production outages, the safety circuitry processes sensor calculations using hardwired voting logic. Under this Energize-to-Trip configuration, internal trip relays stay de-energized during normal operation and require a positive power injection to execute a turbine shutdown command, preventing nuisance trips if control power drops out. Complete galvanic isolation separates each microprocessor module, maintaining data protection across backplane bus communication paths and ensuring response latencies stay under 12 ms during real-time overspeed events.

Frequently Asked Questions

Q: How does the internal self-test check the integrity of the trip relays without causing a machinery shutdown? A: The TMR 2oo3 architecture permits online testing of individual relay channels one at a time. The firmware injects a brief test signal to verify contact continuity and mechanical movement on a single relay while the remaining two channels remain armed to handle active emergency shutdown protection.

Q: What are the specific power supply constraints for the dual 18-32 VDC input terminals? A: The module contains internal diode-or'd power isolation blocks. This design enables two separate, independent VDC sources to run in parallel, ensuring that if one supply line drops out completely, the safety logic switches power feeds immediately without disturbing speed monitoring loops.

Q: Can passive and active magnetic pickups (MPUs) be combined across the three input channels? A: The input signal conditioning circuits are designed to handle both active and passive MPU signal types. However, to ensure balanced input thresholds and uniform wave-shape tracking across the 2oo3 voting engine, all three speed input slots should use identical sensor hardware configurations.

Field Installation Guidelines

• MPU Sensor Lead Routing and Shielding: Route all three magnetic pickup sensor cables through dedicated, grounded steel conduits. Use independent twisted, fully shielded wiring pairs for each input channel, and terminate the drain shields exclusively at the chassis ground block to prevent signal cross-talk from corrupting the speed calculation logs.
• Energize-to-Trip Power Loop Integrity: Because this hardware utilizes an Energize-to-Trip (ETT) layout, the shutdown circuit relies on a stable external power feed to trip the machine safety valves. Wire the trip relay circuits directly to an uninterruptible power source (UPS) to guarantee available power during a critical trip event.
• Chassis Ground Resistance Target: Bolt the ruggedized metal housing securely into the panel frame using star washers to bite through paint barriers. Confirm that the total structural grounding path resistance from the chassis grounding lug to the main master station ground bus measures 10 Ohm or less.