HIMax Safety Manual - Tuv-fs.com

More documents

Recommendations

Info

3 Safety Concept for Using the PES HIMax3.5 CertificationHIMA safety-related automation devices (Programmable Electronic Systems, PES) of theHIMax system have been tested and certified by TÜV for functional safety in accordancewith and the standards listed below:TÜV Rheinland Industrie Service GmbHAutomation, Software und InformationstechnologieAm Grauen Stein51105 KölnSafety-related automation devices HIMaxIntended application: Safety Related Programmable Electronic System for process control,Burner Management (BMS), emergency shut down and machinery, where the demand safestate is the de-energized state.Applications, where the demand state is the de-energized or energized state.International standards:EN / IEC 61508, Parts 1-7: 2000 SIL 3EN / IEC 61511: 2004 SIL 3EN 954-1: 1996 Category 4EN / ISO 13849-1: 2006Performance level eEN / IEC 62061: 2005EN 50156-1: 2004EN 12067-2: 2004EN 298: 2003EN 230: 2005NFPA 85: 2007NFPA 86: 2007EN / IEC 61131-2: 2003EN / IEC 61000-6-2: 2001EN 61000-6-4: 2001EN 54-2: 1997NFPA 72: 2002Chapter 'Operating Requirements' contains a detailed list of all environmental and EMCtests performed.All devices have received the mark of conformity.To program the HIMax devices, a PADT is required, that it a PC runningSILworXprogramming software. This software helps the user operate the automation devices andcreate safety-related programs using Function Block Diagrams (FBD) and SequentialFunction Charts (SFC) in accordance with IEC 61131-3. F For more details, refer to theSILworX documentation.Page 22 of 70HI 801 003 D Rev.2.0
HIMax4 Processor Modules4 Processor ModulesThe processor module's safety function is maintained by processing the user program withtwo processors that constantly compare their data. If a fault occurs, the watchdog sets themodule to the safe state and reports the CPU state.Please refer to the manual for further details about the processor modules.4.1 Self-TestsThe following section specifies the most important self-test routines of controllers' safetyrelatedprocessor modules and the coupling to the I/O level.• Prozessor test• Memory test• Comparator test• CRC test with non-volatile memories• Watchdog test4.1.1 Reactions to Faults in the Processor ModuleA hardware comparator within the processor module permanently compares the data of themicroprocessor system 1 to those of the microprocessor system 2. If they are different, or ifthe test routines detect failures in the processor module, the controller automaticallyassumes the error stop state and the watchdog signal is switched off. The processormodule does no longer process the user program and sets the outputs into the deenergized,switched-off state.4.2 Slots Permitted for Processor ModulesOnly slots 3 to 6 in base plate 0 and slots 3 to 4 in base plate 1 are permitted for processormodules. In the Hardware Editor, assign these slots according to one of the variantsdescribed in Table 10.Variant Base plate 0Processor module(s) in slot:Rack 1Processor module(s) in slot:Requiredsystembusses1 3 for mono operation 1) - A2 3 - A + B3 3, 4 - A + B4 3, 4, 5 - A + B5 3, 4, 5, 6 - A + B6 3 3 A + B7 3, 4 3, 4 A + B1) Mono operation: This project is configured in SILworX for mono operation. Thus, the system contains just one processor module in slot3, at least one system bus module in slot 1, I/O modules, and possibly communication modules. The switch for mono start-up must beset in SILworX. It is always possible (and recommended!) to configure the system bus modules redundantly. All other variants arebased on a redundant configuration.Table 10: Slot Positions Permitted for Processor ModulesiHIMA recommends using variant 2 even if variant 1 would be possible.HI 801 003 D Rev.2.0 Page 23 of 70
Page 1: SAFETYHIMax ®Safety Manual
Page 4 and 5: Table of contentsHIMax3.5 Certifica
Page 6 and 7: Table of contentsHIMax10.2.9 Accept
Page 8: 1 Safety Manual HIMax1.5 GlossaryTe
Page 12 and 13: 2 Intended Use HIMaxStandardEC/EN 6
Page 14 and 15: 2 Intended Use HIMax2.3.4 Power Sup
Page 16 and 17: 3 Safety Concept for Using the PES
Page 24 and 25: 4 Processor Modules HIMaxNOTESystem
Page 26 and 27: 5 System Bus Module HIMaxWARNINGPhy
Page 28 and 29: 6 Communication Module HIMax6 Commu
Page 30 and 31: 7 Input Modules HIMaxNOTICESystem m
Page 32 and 33: 7 Input Modules HIMax7.6 Checklists
Page 34 and 35: 7 Input Modules HIMax7.6.3 Checklis
Page 36 and 37: 7 Input Modules HIMax7.7 Safety-Rel
Page 38 and 39: 7 Input Modules HIMax7.8 Checklist
Page 40 and 41: 8 Output Modules HIMax8 Output Modu
Page 42 and 43: 8 Output Modules HIMaxIn this state
Page 44 and 45: 8 Output Modules HIMax8.7 Checklist
Page 46 and 47: 9 Software HIMax9 SoftwareThe softw
Page 48 and 49: 9 Software HIMax9.4 Resource Parame
Page 50 and 51: 9 Software HIMaxExample: A key swit
Page 52 and 53: 9 Software HIMaxThe user only need
Page 54 and 55: 10 User program HIMaxSensors (digit
Page 56 and 57: 10 User program HIMax10.2.5 Downloa
Page 58 and 59: 10 User program HIMax10.2.10 Checkl
Page 60 and 61: 11 Configuring Communication HIMaxN
Page 62 and 63: 11 Configuring Communication HIMaxF
Page 64 and 65: 11 Configuring Communication HIMaxP
Page 66 and 67: AppendixHIMaxIndex of FiguresFigure
Page 68: AppendixHIMaxIndexanalog inputsuse

HIMax Safety Manual - Tuv-fs.com

Create successful ePaper yourself

Delete template?

Save as template?