HIMA HIMatrix Series

3 Safety Concept for Using the PES HIMatrix
Page 20 of 72 HI 800 023 E Rev. 1.01
 The correct implementation of the application specification must be validated and
verified. A complete test of the logic must be performed by trial.
 Repeat this procedure every time the application is changed.
 The system response to faults in the fail-safe input modules, output modules and remote
I/Os must be defined in the user program in accordance with the system-specific safety-
related conditions.
3.4.3 Communication
 When implementing safety-related communications between the various devices,
ensure that the system's overall response time does not exceed the fault tolerance time.
All calculations must be performed in accordance with the rules given in
9.2.
 The transfer of safety-relevant data through public networks like the Internet is currently
not permitted.
 If data is transferred through company-internal networks, administrative or technical
measures must be implemented to ensure sufficient protection against manipulation
(e.g., using a firewall to separate the safety-relevant components of the network from
other networks).
 At this stage, the serial interfaces may only be used for non-safety-related purposes.
 All devices to be connected to the communication interfaces must be equipped with safe
electrical isolation.
3.4.4 Maintenance Work
 Maintenance work must be performed in accordance with the current version of the
document "Maintenance Override“ document published by TÜV Rheinland and TÜV
Product Service.
 Whenever necessary, the operator must consult with the test authority responsible for
the final inspection of the system and define administrative measures appropriate for
regulating access to the systems.