Product Core Brief

• Model: 3500/54-07-GCN
• Brand: Bently Nevada (Baker Hughes)
• Series: 3500 Machinery Protection System
• Core Function: Triple Modular Redundant (TMR) overspeed detection module providing SIL 3 capable hardware trip logic for critical rotating equipment.
• Product Type: Overspeed Detection / TMR Relay Module
• Key Specs: TMR Voting Logic | SIL 3 Capable | API 670 Compliant
• Condition: New Surplus / OEM Original

Key Technical Specifications

• Module Type: Overspeed Detection Monitor (TMR)
• Redundancy: Triple Modular Redundancy (TMR) with 2oo3 Voting
• Safety Integrity: SIL 3 Capable (IEC 61508)
• Compliance: API 670 Standard for Machinery Protection
• Input Sensors: Proximitor® or Magnetic Pickup (Speed & Keyphasor®)
• Trip Logic: Hardware-based 2oo3 voting for fault tolerance
• Response Time: < 10 ms (Hardware trip path)
• Self-Diagnostics: Continuous internal channel comparison and fault detection
• System Compatibility: 3500 M-Series Monitors, 3500/05 Rack
• Configuration: 3500 Rack Configuration Software
• Suffix Note: “GCN” indicates regional/compliance variant

 

Product Introduction

Engineered as the final hardware safeguard for turbines and compressors, this Bently Nevada 3500/54-07-GCN delivers Triple Modular Redundant (TMR) overspeed protection. It uses three independent processing channels with 2oo3 voting logic to ensure a safe trip on genuine overspeed while preventing nuisance trips from single-channel faults.

Unlike standard speed monitors, this module operates on a dedicated hardware protection path that bypasses the system controller. Even if the 3500/22 TDI or configuration software fails, the internal TMR logic will still execute a hardware trip if two of three channels detect an overspeed condition, meeting the most stringent SIL 3 requirements for critical assets.

 

QA & Testing SOP

Overspeed modules are the last line of defense. We verify both the redundant logic and the hardware trip path.

1. Anti-Counterfeit & Visual Audit: We inspect the Bently Nevada silkscreen, verify the GCN suffix, and check the front panel connectors and TMR status LEDs for physical damage.
2. Backplane Enumeration Test: We install the module in an OEM 3500 test rack to verify it correctly enumerates and reports healthy TMR channel status via the configuration software.
3. 2oo3 Voting Validation: We inject calibrated speed signals into all three channels, then deliberately fault one channel to verify the module still trips correctly on a 2oo3 basis without masking the fault.
4. Hardware Trip Path Test: We verify the hardware trip relay actuates independently of the communication bus, confirming the module will trip even if the backplane communication fails.
5. ESD Safe Packaging: Safety-critical ICs are sensitive to electrostatic discharge. We pack these modules in anti-static shielding bags with desiccant to prevent latent semiconductor damage.

Installation Pitfalls & Guide

❗ TMR Channel Matching: All three input channels must use identical sensor types and cable lengths. Mismatched Proximitor gaps or different magnetic pickup sensitivities will cause channel disagreement, triggering a TMR fault and potentially inhibiting protection. Always verify sensor installation tolerances before commissioning.

❗ Hardware Trip Wiring: The TMR trip output is a hardware relay that operates independently of the system controller. Wire this directly to the machine’s emergency shutdown (ESD) system or turbine control valve. Never route this trip through a PLC or DCS that could be bypassed or failed.

❗ Self-Test Bypass: The module performs continuous self-diagnostics. If a TMR fault LED illuminates, do not simply reset it. Investigate the root cause (sensor mismatch, wiring fault, or internal failure). Bypassing a TMR fault defeats the SIL 3 protection and creates a single-point failure risk.

Replacement SOP:

1. Pre-Install: Document the current TMR configuration and sensor channel assignments; place the machine in bypass/maintenance mode.
2. Removal: Power down the 3500 rack; disconnect all sensor and trip wiring (label everything); remove mounting screws and extract the module.
3. Install: Slide the 3500/54-07-GCN into the designated slot, ensure firm backplane seating, and secure mounting screws.
4. Power-On Test: Power up the rack, download the configuration, verify all three TMR channels report healthy status, and perform a simulated trip test with the machine still in bypass.

 

Technical FAQ

What does the “GCN” suffix mean, and is it compatible with my standard 3500/54?
The “GCN” suffix typically denotes a regional variant (often Greater China) or specific compliance marking. Functionally, it is identical to a standard 3500/54-07 and will work in any 3500 rack. However, always match the exact suffix when replacing a failed unit to avoid potential firmware or compliance discrepancies during an audit.

Can I use this module for SIL 2 applications?
Yes, but it’s overkill. The 3500/54 is designed for SIL 3. For SIL 2 overspeed protection, Bently Nevada typically recommends dual 3500/50 modules with 2oo2 voting or a single 3500/53. Using a TMR module for SIL 2 is acceptable but increases hardware cost and complexity unnecessarily.

Do I need three separate Keyphasor® sensors for TMR?
No. You can use a single Keyphasor® sensor and split the signal to all three channels, provided the signal is clean and properly terminated. However, for maximum fault tolerance, some critical applications use three independent Keyphasor® sensors. Verify your safety case requirements before deciding.

What happens if one TMR channel fails?
The module will continue to provide protection using the remaining two healthy channels (degraded 2oo2 mode). A TMR fault LED will illuminate, and a diagnostic alarm will be sent to the system. You should schedule maintenance to replace the module at the next opportunity, but the machine remains protected.

Why is this sold as new surplus?
This unit was pulled from sealed OEM overstock or an unfulfilled project before installation. We test it on our OEM 3500 test racks to verify TMR functionality, but we aren’t replacing internal components. You are getting unused factory silicon with original manufacturing tolerances at a fraction of the active OEM list price.