DE-ENERGIZE-TO-TRIP (DTT): When Loss of Energy Initiates the Trip! 
In a De-Energize-to-Trip (DTT) philosophy, the trip action occurs when the trip circuit or final element is de-energized.
In simple terms:
This philosophy is widely used in ESD/SIS applications, especially where loss of electrical power or control energy is intended to place the process in a safe state.
How Does DTT Work?
Consider an ESD output controlling a shutdown solenoid:
ESD Logic → Output → Solenoid → Shutdown Valve
During a healthy condition:
Solenoid energized
Shutdown valve remains in its normal operating condition
When a trip occurs:
Trip condition detected
Solenoid de-energizes
Shutdown valve moves to its defined fail-safe position
Process moves toward the safe state
Example: Emergency Shutdown
Suppose a gas supply valve must close during an ESD.
Normal operation:
ESD healthy → Solenoid energized → Valve open
Emergency:
ESD trip → Solenoid de-energized → Valve closes
The valve may be designed Fail Close (FC) so that loss of actuator energy causes it to close.
Why Is DTT Used?
One major advantage is the fail-safe response to loss of energy.
Consider:
Power supply fails
Solenoid de-energizes
Shutdown valve moves to its designed safe position
Similarly, depending on the circuit design:
Broken wire
Circuit de-energizes
Trip may occur
This can make certain circuit failures fail-safe or detectable, depending on the complete architecture.
DTT vs ETT
| DTT |
ETT |
|---|---|
| De-energization causes trip | Energization causes trip |
| Healthy state commonly requires energized trip circuit | Trip requires energy to be applied |
| Loss of power can initiate trip | Loss of power may prevent trip |
| Can provide fail-safe response to loss of energy | Can have different failure behavior |
| Common in many ESD/SIS applications | Used where the safety analysis/design justifies it |
Easy Memory Trick
DTT
De-energize = Trip
ETT
Energize = Trip
Important Functional-Safety Point
DTT is not automatically safer in every application.
The selected philosophy must consider:
Hazard analysis
Required safe state
Final element behavior
Failure modes
Diagnostic coverage
Spurious-trip consequences
Power and utility availability
SIS architecture
Applicable functional-safety requirements
For example, frequent power interruptions could cause unwanted trips in a DTT system, so spurious-trip behavior and availability must also be considered.
Interview Question
What is De-Energize-to-Trip?
De-Energize-to-Trip is a safety-system philosophy in which the specified trip action is initiated by removing energy from the trip circuit or final element.
Remember:
The important design question is not simply which philosophy is used, but whether the selected philosophy provides the required safety integrity, appropriate failure response, and acceptable availability for the specific application.
#DeEnergizeToTrip #DTT #EnergizeToTrip #ETT #ESD #SIS #FunctionalSafety #IEC61511 #SafetyPLC #ProcessSafety #Instrumentation #IndustrialAutomation #ControlSystems #OilAndGas #InstrumentationEngineer 