Product Overview
The 3503E (3503E) is a high-reliability, Triple Modular Redundant (TMR) Digital Input Module designed for the Triconex Tricon safety system. Operating at a nominal 24 VAC/VDC, this module provides 32 input points organized in four commoned groups of eight. Engineered for safety-instrumented functions (SIF) in demanding sectors like mining, petrochemicals, and automated manufacturing, the 3503E ensures maximum process availability. By utilizing three independent internal channels and 2-out-of-3 voting logic, the module eliminates single points of failure. The integrated self-test feature continuously monitors the circuitry for "stuck-on" conditions, providing the critical diagnostic coverage required for de-energize-to-trip safety applications.
Architectural Logic & Diagnostics
The Triconex 3503E architecture prioritizes signal integrity through opto-isolation, providing 1,000 VAC minimum point isolation to protect the sensitive TMR backplane from field-side electrical noise. Each input point features an individual status indicator for rapid local troubleshooting. A key technical advantage is the module's sophisticated diagnostic suite, which includes a 20 ms typical diagnostic glitch duration to verify circuit transitions without interrupting the safety logic. With an input impedance of > 1.25 kΩ, the module maintains low power dissipation while ensuring highly accurate switching levels—typically transitioning from Off to On at 15 VAC/VDC.
3503E Digital Input Specifications
| Feature |
Specification |
| Color code |
Dark red |
| Number of input points |
32, commoned in groups of 8 |
| Input frequency range |
DC or 47-63 Hz |
| Recommended input range |
20–42.5 VDC |
| Maximum voltage |
42.5 VAC/VDC |
| Switching level: Off to On |
15 VAC/VDC typical, 18 VAC/VDC worst-case |
| Switching level: On to Off |
8 VAC/VDC typical, 6 VAC/VDC worst-case |
| Typical hysteresis |
4 VAC/VDC |
| Nominal turn-on |
6 mA to 9 mA |
| Input impedance |
> 1.25 kΩ nominal |
| Input delay: Off to On |
< 8 ms |
| Input delay: On to Off |
< 15 ms |
| Point isolation, opto-isolated |
1,000 VAC minimum, 1,500 VDC minimum |
| Status indicator: On or Off State |
1 per point |
| Status indicator: Module status |
Pass, Fault, Active |
| Logic power |
< 10 watts |
| Nominal field power load |
0.5 watts per On pointᵃ1.5 watts @ maximum field voltage |
| Leakage current to chassis @ 60 Hz |
0.25 mA maximum per On point |
| Input diagnostic fault coverage: |
|
| Maximum input toggle rateᵇ |
Every 100 ms |
| Minimum input toggle rate, On state |
Not required |
| Minimum input toggle rate, Off state |
Every 24 months (manually toggled by the user)ᶜ |
| Diagnostic glitch durationᵈ |
20 ms typical |
| Output voltage |
< 1/2 V<sub>IN</sub> |
| Output impedance |
< 1.87 kΩ |
Technical FAQs
How does the "Commoned in Groups of 8" configuration affect wiring?In the 3503E, eight input points share a single return path (common). While this simplifies wiring for high-density applications, engineers must ensure that all eight devices in a group share the same power source potential to avoid cross-talk or ground loops.
Why is the 3503E not recommended for use with shunt-diode intrinsic safety barriers?Shunt-diode barriers can interfere with the module's self-test pulse (diagnostic glitch). For intrinsic safety applications requiring such barriers, Invensys recommends the Model 3505E, which is specifically designed to handle the impedance characteristics of IS barriers.
What is the significance of the "Diagnostic Glitch"?The glitch is a momentary output voltage (< 1/2 VIN) used by the TMR controller to verify the input circuit's health. While it is essential for safety diagnostics, users should ensure that parallel-connected high-impedance equipment is not falsely energized by this 20 ms pulse.
Engineering & Installation Guide
-
Thermal Management: The 3503E dissipates approximately 0.5 watts per "On" point. In a fully loaded 32-point configuration at maximum field voltage, the thermal load can reach 1.5 watts. Ensure the cabinet has adequate airflow to prevent heat buildup, which can affect the lifespan of the opto-isolators.
-
Toggling Requirements: To maintain peak diagnostic coverage, the TMR system requires that inputs are toggled periodically. If a point is in a "normally energized" state for a prolonged period, it must be manually toggled at least once every 24 months to verify it can still transition to the "Off" (safe) state.
-
Chassis Keying: Always verify that the slot in the Tricon chassis is keyed for the "Dark Red" color code. The 3503E is mechanically keyed to prevent accidental insertion into a high-voltage slot, which could cause immediate hardware damage.
Engineering Advantages
The 3503E stands out for its high-speed response, boasting an "Off to On" delay of less than 8 ms. This makes it an excellent choice for high-speed shutdown sequences where every millisecond counts toward preventing mechanical equipment damage. Its robust mechanical build, weighing 4 kg, provides excellent vibration resistance, ensuring that the module remains seated and functional in the high-frequency environments of turbine control and heavy industrial processing.