HIMax Safety Manual - Tuv-fs.com

More documents

Recommendations

Info

10 User program HIMaxSensors (digital or analog)• Signals during normal operation ('de-energize-to-trip' principle with digital sensors, 'lifezero'with analog sensors)• Signals in the event of a fault:Definition of required safety-related redundancies (1oo2, 2oo3)(see Chapter )• Discrepancy monitoring and reactionActuators• Positioning and activation during normal operation• Safe reaction/positioning at shutdown or after power lossProgramming goals for user program• Easy to understand.• Easy to trace and follow.• Easy to test.• Easy to modify.10.2.2 Functions of the User ProgramProgramming is not subject to hardware restrictions. The user program functions can befreely programmed.When programming, account for the 'de-energize-to-trip' principle for the physical inputsand outputs. Only elements complying with IEC 61131-3 together with their functionalrequirements are permitted within the logic.• The physical inputs and outputs usually operate in accordance with the 'de-energize-totrip'principle, i.e. their safe state is "0“.• The user program includes meaningful logic and/or arithmetic functions irrespective ofthe 'de-energize-to-trip' principle of the physical inputs and outputs.• The program logic should be clear and easy to understand and well documented toassist in debugging. This includes the use of functional diagrams.• To simplify the logic, the inputs and outputs of all function blocks and variables can beinverted in any given order.• The programmer must evaluate the fault signals from the inputs/outputs or from logicblocks.The "packaging" of functions in self-created function blocks and functions consisting ofstandard functions is reccommended. This ensures that a user program can be clearlystructured in modules (functions, function blocks). Each module can be viewed and testedon its own. By grouping smaller modules into larger ones and then all together into a singleuser program, the user is effectively creating a comprehensive, complex function.10.2.3 System Parameters of the User ProgramThe following user program switches and parameters can be set in the Properties dialogbox of the user program:Page 54 of 70HI 801 003 D Rev.2.0
HIMax10 User programSwitchParameterFunctionDefaultsettingSetting forsafe operationName Name of the user program ArbitrarySafety Integrity Level Safety integrity level: SIL0 ... SIL3(for documentation only)SIL3 Application-specificStartON: The PADT may be used to startthe user programOFF: The PADT may not be used toON Application-specificstart the user programProgram Main Enable It enables changes of other user programswitches:ONOnly the enable switch of the resource is-relevant!Autostart Enable Enabled type of Autostart: Cold Start,Warm Start, OffCold start Application-specificFreeze Allowed ON The test mode is permitted forthe user program.OFF The test mode is not permittedON Application-specificfor the user program.Local Forcing Allowed ON: Forcing permitted at programlevelOFF is recommendedONOFF: Forcing not permitted at programlevelReload EnableON: User program reload is permittedOFF: User program reload is not ON Application-specificpermittedUP Execution Time [µs] Maximum time in each processor modulecycle for executing the user program: 0 µs Application-specific1...4 294 967 µsLocal Force TimeoutReactionBehavior of the user program after theforcing time has expired:• Only stop forcing• Stop ProgramTable 16: System Parameters of the User ProgramStopProgram10.2.4 Code GenerationAfter entering the complete user program and the I/O assignments of the controller, thecode is generated. During these steps, the configuration CRC, i.e. the checksum for theconfiguration file, is created.This is a signature for the entire configuration that is isused as a 32-bit, hexadecimal code.This includes all of the configurable or modifiable elements such as the logic, variables orswitch parameter settings.NOTICEFaulty operation of controller possible!Before loading a user program for safety-related operation, the user program mustbe first compiled twice. Both versions generated must have the same CRC.-By compiling the user program twice and comparing the checksums of the generated code,the user can detect possible corruptions of the user program resulting from sporadic faultsin the hardware or operating system of the PC in use.HI 801 003 D Rev.2.0 Page 55 of 70
Page 1:
SAFETYHIMax ®Safety Manual
Page 4 and 5: Table of contentsHIMax3.5 Certifica
Page 6 and 7: Table of contentsHIMax10.2.9 Accept
Page 8: 1 Safety Manual HIMax1.5 GlossaryTe
Page 12 and 13: 2 Intended Use HIMaxStandardEC/EN 6
Page 14 and 15: 2 Intended Use HIMax2.3.4 Power Sup
Page 16 and 17: 3 Safety Concept for Using the PES
Page 24 and 25: 4 Processor Modules HIMaxNOTESystem
Page 26 and 27: 5 System Bus Module HIMaxWARNINGPhy
Page 28 and 29: 6 Communication Module HIMax6 Commu
Page 30 and 31: 7 Input Modules HIMaxNOTICESystem m
Page 32 and 33: 7 Input Modules HIMax7.6 Checklists
Page 34 and 35: 7 Input Modules HIMax7.6.3 Checklis
Page 36 and 37: 7 Input Modules HIMax7.7 Safety-Rel
Page 38 and 39: 7 Input Modules HIMax7.8 Checklist
Page 40 and 41: 8 Output Modules HIMax8 Output Modu
Page 42 and 43: 8 Output Modules HIMaxIn this state
Page 44 and 45: 8 Output Modules HIMax8.7 Checklist
Page 46 and 47: 9 Software HIMax9 SoftwareThe softw
Page 48 and 49: 9 Software HIMax9.4 Resource Parame
Page 50 and 51: 9 Software HIMaxExample: A key swit
Page 52 and 53: 9 Software HIMaxThe user only need
Page 56 and 57: 10 User program HIMax10.2.5 Downloa
Page 58 and 59: 10 User program HIMax10.2.10 Checkl
Page 60 and 61: 11 Configuring Communication HIMaxN
Page 62 and 63: 11 Configuring Communication HIMaxF
Page 64 and 65: 11 Configuring Communication HIMaxP
Page 66 and 67: AppendixHIMaxIndex of FiguresFigure
Page 68: AppendixHIMaxIndexanalog inputsuse
show all

HIMax Safety Manual - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?