The Thomson Technology (TTI) remote communication system with the CIM 3.0 and Modbus™ protocol provides remote monitoring and control of TTI microprocessor-based controllers as used in the power generation industry. The system consists of 2 main components as follows: •...
Some advanced features of the remote communication system with the CIM 3.0 module and Modbus™ protocol are as follows: • One CIM module can control and monitor up to 10 RTUs at a generator site using a single direct serial/phone link. •...
Standard plug-in telephone RJ45/RJ11 type jacks and DB9 computer ports provide simple interconnection to system. • The ability to callout to a THS host station or pager when an RTU fault occurs frees the user from continual monitoring. It also allows for immediate remote response to problems.
Page 10
DC Fault: This LED is illuminated whenever the CIM's internal power supply has shutdown do an internal fault or an external overvoltage condition from the DC supply input. To reset a DC fault, the DC supply voltage must be removed for 30 seconds, then re-applied.
Page 11
NOTE: CIM Port 2 cannot be used concurrently with the modem (CIM Port 1). An RS- 232 or RS-422 cable can be connected to the CIM, but cannot be active if the modem is to be used. An RS-485 connection will effectively disable the modem whether it is active or inactive.
SECTION 1 COMMUNICATION INTERFACE MODULE Telephone Port 1 Detail pin numbers and usage designations for the telephone port are as follows: Signal Type - Telephone Direction Port 1A RJ11 # No Connection No Connection No Connection No Connection Input/output Ring...
Modbus™ compliant device. CIM Configuration: The CIM stores vital information in non-volatile FLASH memory pertaining to a specific RTU site as defined by the user. Stored information includes, site name, site passwords, and auto callout phone numbers (3).
• Internal Modem 14.4 kbaud, Hayes™ AT set compatible • Communication Ports Hardware Port 1 Telephone T/R Port 2 RS-232/-422/- 485 asynch., 1200-19200 baud Port 3 RS-422, asynchronous 4800 baud • Communication Ports Software Protocol Port 1 Telephone Port 2 Modbus™...
10.1. Battery Supply Input The CIM can operate on any battery supply from 8 to 35 volts DC nominal Wiring from the system battery to the CIM should conform to the following guidelines to avoid possible communication module malfunction and/or damage.
The CIM Module is designed for mounting directly onto a control panel inner sub-panel. Considerations should be given for the following: The controller should be installed in a dirt free, dry location away from extreme heat sources. Adequate space should be provided around the CIM module for control wiring.
COMMUNICATION INTERFACE MODULE 10.6. RS-232 and RS-485422 Wiring This section describes the cabling necessary to connect a host PC to a CIM using RS-232 and to connect to an RS-485 or RS-422 network 10.6.1. Host PC Connection The host PC connection to the CIM requires a null-modem adapter, as both devices believe they are DTE.
Page 18
COMMUNICATION INTERFACE MODULE 10.6.2. RS-485/-422 Connection The following hardware configuration is required for 4 wire RS- 485/-422 from the port 2 on the CIM to an RS-232 port on a computer: The following parts are connected in order from the RS-232 side (computer) to the RS-485/-422 side (the CIM).
CAUTION!!! Before opening the enclosure to perform any service task, it is imperative to isolate the control system from any possible source of power. Failure to do so may result in serious personal injury or death due to electrical shock.
Page 20
SECTION 1 COMMUNICATION INTERFACE MODULE 20 is for the expansion port, damage may occur to the CIM if this port is connected! When direct connection is used from port 2A to a PC, ensure a null modem cable or connector is used. (see Host PC Connection).
Remove power from the CIM. b) Remove the CIM back cover. c) Connect a wire from the CIM ground terminal located next to the power connections. d) Connect the other end of the ground wire to the testpoint located on...
The THS 2000 software is designed to allow a direct connection (via RS-232, RS-422 or RS- 485) to Port 2 of the CIM or a remote connection (via a host PC modem) with the internal modem of the CIM on Port 1. The host PC modem must already be configured before attempting a remote connection.
THS2000 version 3.1 adds the ability to connect directly to an RTU, bypassing the CIM. A maximum of one RTU, MEC20 or TSC800, is allowed. The auto-answer feature of THS2000 is not supported in this mode, as it is a function of the CIM. The auto-discovery of controllers is likewise not available. See...
Microsoft Internet Explorer 4.01 or later is installed. Quick Start This section will get you up and running the THS 2000 quickly and easily. This chapter covers the simple tasks that are necessary to communicate with a site. More advanced topics will be covered in a later section.
SECTION 2 THS 2000 SOFTWARE PROGRAM yet. There are no passwords configured initially, so click on OK to continue if you are running for the first time. Passwords Starting And Logging 2.3. Step 3: Set Host Connection Method Select the Connect command from the Site menu (or toolbar button or press F9 ). This command will normally bring up a list of accessible sites, however, if no sites are defined, you will be required to choose a host connection method.
Once the connection method is established, you will be prompted for the site properties, such as site name, as shown below. This allows you to enter the first site in the site-list. The name and password fields correspond to the name and password already programmed into the CIM that is managing the remote site.
2.7. Step 7: View Controller Data A set of buttons at the top of the window will contain the word List and the number of each controller. This is the Controller Bar. Clicking a button on the Controller Bar selects the current view in the main part of the window.
2.9. Step 9: Save/Restore Site-list Information The current site-list can be saved by using the Save or Save As commands under the File menu or the toolbar button. A previously saved site-list file can be retrieved using the Open command from the File menu or the numbered recent file list under the File menu or the toolbar button.
SECTION 2 THS 2000 SOFTWARE PROGRAM The site passwords are normally shown as a series of asterisks (*), but can be shown in actual letters by enabling the show-site-password check box. 3.2. Site-list Management THS 2000 allows you to create, save and reopen site-lists. A site-list is a collection of one or more sites that are all accessed through the same host modem.
Note: files created by previous versions of THS 2000 can be opened, but they will only contain a single site in the site-list. If this file is modified and saved, you will no longer be able to open it from previous versions of THS 2000.
Page 31
Site) from this dialog. 3.3.1. Adding A Site Electing to add a site by clicking the Add button of the Connect To dialog box will present you with the Site Properties dialog box depicted in the following figure. This allows you to enter the name and password of the new site, which is the name and password of the CIM on that site.
Page 32
Adding A Site, but with the details of the selected site, as shown here. This dialog box can also be displayed by right-clicking on the name of the site in the site-list dialog. 3.3.4. Host Connection The host connection method can be changed from the Connect Using...
8 data bits, 1 stop bit and 9600 baud. The RTS activation is only applicable under RS-485. This defines the level of the RTS line that is used by RS-232 to RS-485 converters to signal a transmission. Unless otherwise specified, this should be active high for most converters.
Page 34
SECTION 2 THS 2000 SOFTWARE PROGRAM normal operation for the CIM is to poll the status of each controller and attempt to discover new controllers. When the status of a controller indicates an alarm condition, the CIM can be programmed to call the host and report that an alarm condition exists.
Page 35
3.4.2. CIM Version The CIM Version tab simply reads and displays the version information, including the serial number, from the CIM, as shown below. This may be useful for future compatibility issues and service. PM055 Rev 2 00/08/31...
Page 36
3.4.3. CIM Callout The CIM Callout tab configured the callout feature, which allows the CIM to call the host in case of an alarm condition. The dialog box is depicted in the next figure. Refer to section Auto-answer Operation for more information on CIM callout and THS 2000 auto-answer features.
Page 37
Also, in older CIM versions, all the phone numbers shared the same number of attempts; this is reflected in this dialog box by tying all there attempts choices together, so if one is changed they are all changed.
Page 38
SECTION 2 THS 2000 SOFTWARE PROGRAM This feature is provided as a last resort. It should not be invoked unless you know what you are doing or you are under the guidance of a qualified service person. 3.4.5. CIM Port 2 A CIM connected directly to a PC host or a Programmable Logic Controller (PLC) is connected serially to Port 2.
Page 39
The Port 3 of the CIM is used to communicate with the controllers on the site. The parameters for this port can be found under the CIM Port 3 tab in the Current Site Properties dialog box, as shown here.
Page 40
3.4.7. CIM Advanced The CIM Advanced tab of the Current Site Properties dialog box allows you to change some of the more advanced features of the CIM, such as Modbus characteristics and controller polling. The dialog box is shown in the next figure.
The top box contains properties unique to the Modbus operation of the CIM (see Section 3.). The Slave ID is the ID used by the PLC to reference the CIM; the valid range for a Modbus slave device is 1-247.
Page 42
THS 2000 SOFTWARE PROGRAM The controller address can be between 1 and 255, with no duplicates allowed. The controller type can be a MEC 20 or a TSC 800. The description can be any descriptive text you wish. 3.5.3. Removing A Controller...
Page 43
After the desired controller is selected and the OK button clicked one of two dialog boxes is presented: one for the MEC 20 and one for the TSC 800. The MEC 20 properties dialog box is shown in the following figure. From this window, the description can be modified and other properties, such as the controller address and the fault-labels, can be viewed.
3.6. Auto-answer Configuration An important feature of remote modem sites is the ability to dial the host and report an alarm condition. The host side can be configured from the Auto-answer Settings command of the Site menu, as shown below.
Page 45
4.1.2. The Interface The main THS 2000 interface is shown in the next diagram. It is a relatively standard Windows-based application with a title bar, main menu, toolbar and status bar, as well as a controller bar and a special viewing area.
Page 46
4.1.5. Toolbar The toolbar provides instant access to many important menu commands. When the mouse pointer is floated over the tool item, a tool tip is displayed in the status line portion of the status bar. 4.1.6. Controller Bar The controller bar contains a button called List and a button for each controller on the site.
A site is made up of a single CIM connected to one or more controllers. Connecting to a site is the same as connecting to a CIM. From the user’s point of view, the CIM is the site. This section describes how sites are connected and disconnected as well as various properties of the CIM and the host connection.
Controllers can be added, removed and examined from menu commands. 4.3.1. Controller Views The bulk of the THS 2000 window is the view area. This area can be a simple list of the controllers or a more detailed representation of a single controller. The...
Page 49
The figure below shows the view of a TSC 800 connected to a remote CIM. Just as the MEC 20, the black part of the view is a direct emulation of the TSC 800 front panel. The faults and values are displayed and updated frequently.
4.5. Auto-answer Operation When a remote CIM senses that a controller desires a Callout, it will start the calling out sequence. The CIM will dial its stored phone numbers some amount of times until it makes a connection (see Callout).
Configuration). When a site has connected, it will remain connected for two minutes just as if connected by the operator. During this time, the operator can view the controllers and determine the cause of the alarm. The status bar will also display a countdown of the remaining connection time in seconds.
Page 52
SECTION 2 THS 2000 SOFTWARE PROGRAM An RS-232 to RS-422 converter is required to convert the signal from the computer or modem. The required wiring from the RS-422 side of the convert to the RJ-45 connection on the controller is as shown:...
SECTION 2 THS 2000 SOFTWARE PROGRAM All RS-232 to RS-422 converters and modems are not created equal. Thomson Technology has tested many converter and modem combinations and the recommended parts are: 3Com USRobotics V.90 56K Faxmodem and B&B Electronics RS-232/RS-485 Converter Model 485PTBR (also an RS-422 converter).
Port 2 (DB-9 or RJ-45) which is configurable to RS-232/-485/-422 and up to 19200 baud. The MEC 20s or TSC 800s connect to the CIM (Host) through an RS-422 interface via an RJ-45 connector to CIM port 3b. Up to 10 remotes can be connected to a single CIM (Host), as shown below:...
The CIM acts like a local host (master) to the MEC 20's connected. The CIM takes care of gathering data from the individual MEC 20's and storing it in a local database. The communication format describes an interface with the CIM database.
Unfortunately due to processing limitations response packets from the CIM to the host can have up to 25ms gaps in the data. The CIM response data is shifted out in 16 character increments, in some cases it can take up to 25 ms to shift out the next 16 character buffer.
The response to this packet is shown below. ss 10 aaaa pppp cccc MEC 20 ID (00 to FF) aaaa Starting register (4aaaa, same number as the write packet) pppp Register count (same number as the write packet) cccc CRC-16 (see Calculation) 4.2.
SECTION 3 CIM PROTOCOL It is also recommended to follow up with a Display Valid Flag read to insure the operation was successful before proceeding. The CIM does attempt multiple operations in the case of a bad packet. However, if the Display Valid Flag is not valid after 900ms a retry should be performed.
CIM communication is done with the same Modbus packet using the CIM ID instead of the MEC 20 ID. In the case of the same ID the CIM is smart enough to look at the registers requested to figure out whether it is meant for a CIM or MEC 20.
The following table describes the possible return data types and formats for Modbus registers defined in the CIM. A register data value consists of two bytes: the most significant (MSB) and the least significant (LSB). Data values are arranged with the MSB first (called big-endian).
CIM unit. This is used in multiple CIM configurations. The CIM's are slaves to any device connected to Port 2. However the CIM acts like a Master to anything connected to Port 3. Communication to the individual MEC 20's will be done by communicating to the CIM.
SECTION 3 CIM PROTOCOL THS software 40425 uint16 0 to 65535 version (upper) THS software 40426 uint16 0 to 65535 version (lower) THS protocol 40427 uint16 0 to 65535 version (upper) THS protocol 40428 uint16 0 to 65535 version (lower)
Slave 10 address 41291 struct see below and type The slave address and type are encoded in the following 2-byte structure: byte0 = slave type (0=none, 1=MEC 20, 2=TSC 800), byte1 = slave address (0 to 255). CIM Callout Register...
20's to respond to the request. This is usually reserved for communication with a single MEC 20 with an unknown address. Otherwise MEC 20 addresses range from 1 - 255 however only 10 RTU's (MEC 20 or TSC 800) can be connected to an individual CIM. Register...
MEC 20 Fault Details MEC 20 Messages (Version 1.0) The following sections describe in detail the data registers mentioned in the above tables, for single byte data the actual byte location in the registers is included in the above mentioned tables. 16.1.
The Data/Display Valid byte is used to determine the following. If bit 0 is set (1) then the Current Data in the registers is valid. If bit 1 is set (1) then the Display Data is valid (i.e. the last Keypress command has executed successfully).
This field contains the minor software version number. 16.4. MEC 20 Get Summary This message is used to get the summary information from a MEC 20. The request message does not have any data bytes. The response message has the following data...
This field contains the fault state bitmap. Each bit contains TRUE if the associated fault is active. The bits are defined as follows: Bits 31-29 are unused. Bit 28 is digital fault 12 (Fault name is programmable).
Page 71
SECTION 3 CIM PROTOCOL is in degrees Fahrenheit. Bit 14 contains TRUE if the oil pressure is in KPA, and FALSE if the oil pressure is in PSI. Bit 13 contains TRUE if 3 phase mode, and FALSE if 1 phase mode.
MEC 20 Get Summary, bytes 6 to 9 for fault descriptions), the fault name register can be read or written to any value up to 16 characters long. This must be done locally on the MEC 20's. Fault Detail Registers are described in more detail below:...
800's to respond to the request. This is usually reserved for communication with a single TSC 800 with an unknown address. Otherwise TSC 800 addresses range from 1 - 255 however only 10 RTU's (TSC 800 or MEC 20) can be connected to an individual CIM. [table 41025 to 41065]...
The Data/Display Valid byte (byte1, LSB) is used to determine the following. If bit 0 is set (1) then the Current Data in the registers is valid. If bit 1 is set (1) then the Display Data is valid (i.e. the last Keypress command has executed successfully). 18.3.
This field contains the minor software version number. 18.4. TSC 800 Get Summary This message is used to get the summary information from a TSC 800. The request message does not have any data bytes. The response message has the following data bytes:...
Page 77
This field contains the system status timer value (in seconds). byte5 This field contains the fault state bitmap. Each bit contains TRUE if the associated fault is active. The bits are defined as follows: Bits 15-8 are unused. Bit 7 is Src2 over frequency.
This field contains the second of the system time. Valid values are 0-59. 18.5. TSC 800 Get Analog Values This message is used to get the analog values from a TSC 800. The request message does not have any data bytes. The response message has the following data bytes: Field...
The Display details are broken into 2 groups. Group 0 contains the 16 ASCII characters from the top line of the TSC 800 display. Group 1 contains the 16 ASCII characters from the bottom line of the display. There are to many individual display messages to list all of them here, however some basic messages should be described.
The Cyclical Redundancy Check (CRC) calculation used by Modbus is commonly called the CRC-16 algorithm. Refer to A Painless Guide To CRC Error Detection Algorithms Ross N. Williams for more detailed information; using the terminology of that paper, the CRC algorithm used by the CIM is: Name : "CRC-16"...