Table 92: Hidden Interface of FB instances towards drives (Vendor specific).
Name Description
SF_SafeStop1_1 Connection to Drive 1
Table 93: Local variable
Name Data type Description
S_EStopOut BOOL Emergency stop request
InputDevice1_active BOOL Status of the relevant input device as provided by the system
InputDevice2_active BOOL Status of the relevant input device as provided by the system
7.2.4 Program example
Activate
S_StopIn
Ready
S_Stopp ed
SF_SafeStop1
Ax isID
MonitoringTime
Error
DiagCode
Reset
SF_SafeStop1_1
Activate
S_EStopIn
Ready
S_EStopOut
SF_Emerge ncyStop
SF_Emergen cyStop_1
S_StartR eset
S_AutoRes et
Error
DiagCode
Reset
T#10m s
S 0_Reset
FALSE
FALSE
S1 _S_ EStopIn_1
Activate
S _C hannelA
Ready
S_ EquivalentOut
SF_Equivalent
SF_Equivalen t_1
S _C hannelB
S _D iscrepan cyTim e
Error
DiagC ode
S1 _S_ EStopIn_2
Ax isID_1
T#100ms
S 3_Drive_Reset
S _Stopped
Error_EStop1
Error_SafeStop1
Diag _SafeStop1
Diag_EStop1
Error _Equiv 1
Diag _Equiv1
Tw o channe l line m onitoring:
This FB produces a single SAFEBOOL
signal out of t he t w o sepa rated signals from
the em ergency s top channe ls. The
Disc repanc y Tim e is set c onstantly t o 10 ms
Em ergency Stop with restart inhibit:
This FB handles t he em ergency stop
condition . After t he emergency stop request
as w ell as after power up t he safety output
is only releas ed aft er manu al restart. T his
beha vior is enabled by setting t he
S_ StartReset and S_Au toReset inputs to
FALSE .
Safe Stop 1 R equest Handling:
This FB handles t he Safe Stop 1 R equest
for AxisID_1 and m onitors t hat the axis
follows t he request within the predefined
monitoring time of 100 ms . Any error
condition within the axis has to be
ack nowledg ed by a manual drive reset
signal.
InputD evice1_ac tive
Ac tivate
S_ ESPE_ In
Ready
S_ESPE _Out
SF_ESP E
SF_ESPE _1
S_ StartReset
S_ AutoReset
Error
DiagCode
Reset
S2_S _ESPE _In
FALSE
FALSE
S0_R eset
InputD evice2_ac tive
AND
AND
S_EStopOut
S_EStopOut
ESPE : This F B han dles the light curtain
interface. After intrusion in t he protected
field, as w ell as aft er pow er up the s afety
output is only releas ed after manual restart.
This beha vior is enabled by setting t he
S_StartR eset and S_AutoR eset inputs to
FALSE.
Error_ESPE 1
Diag_ESPE 1
Fig. 135: Program example – Emergency stop with safe stop & equivalent monitoring
7.2.5 Additional notes
This example uses different reset signals to acknowledge the emergency stop situation and to acknowledge
the monitoring violation situation of the drive. If the safety requirement specification of the application allows
the acknowledgement of both situations with the same signalling device, the identical signal from the func-
tional application may be used to reset the FB SF_EmergencyStop_1 as well as to reset the FB SF_Safe-
Stop1_1.
Safety application examples
Example 1: Diagnostics concept > Additional notes
30.03.2017AC500-S428