HIMax Safety Manual - Tuv-fs.com

HIMax3 Safety Concept for Using the PES• Compiling the program twice in SILworX and comparing both of the created filesensures that the program was properly compiled.• The correct implementation of the application specifications must be validated, verifiedand documented. A complete test of the logic must be performed by trial.• In case of a change of the user program, at minimum test all the parts of the logicconcerned by the changes.• The system response to faults in the safe input and output modules must be defined inthe user program in accordance with the system-specific safety-related conditions.3.4.4 Communication• When implementing safety-related communications between the various devices,ensure that the system's overall response time does not exceed the fault tolerancetime.All calculations must be performed in accordance with the rules given in 11.2.• The transfer of safety-relevant data through public networks like the Internet is notpermitted unless additional security measures have been implemented such as: VPNtunnel.• If data are transferred through company-internal networks, administrative or technicalmeasures must be implemented to ensure sufficient protection against manipulation (e.g. using a firewall to separate the safety-relevant components of the network from othernetworks).• Never use the standard protocols to transfer safety-related data.• All devices to be connected to the communication interfaces must be equipped with safeelectrical isolation.3.4.5 Maintenance Work• Maintenance work must be performed in accordance with the current version of thedocument "Maintenance Override“ document published by TÜV Rheinland and TÜVProduct Service.• Whenever necessary, the operator must consult with the test authority responsible forthe final inspection of the system and define administrative measures appropriate forregulating access to the systems.HI 801 003 D Rev.2.0 Page 21 of 70