D3DA3xx/x Safetyfunctions
ProjectengineeringmanualV1.00
77
©KEBA
Information
Thefailures"Shortcircuitoutputbrakedriver"and"Shortcircuitbetween
anycoresinthemotorsupplycable"mustbeexcludedbymeansofsuit
ablewiring.
Testoutputassignment:
● OntheSTObothchannelsmustshowunequalsignalpatterns.
● Onusageofredundantinputsdifferenttestoutputsmsutbeused.
8.4 Recommendedconnectionexamples
Thefollowingchapterdescribesrecommendedexamplesforconnecting
safetyfunctionsSTOandSBC.Inthefollowingcircuitexamplesitisapre
requisitethattheswitchingelementsusedhavesafetyrelatedapprovalor
aredesignedaspertherequiredPLinaccordancewithENISO138491or
SILinaccordancewithEN61508/EN62061.Inadditionthefollowing
pointsmustbenoted:
● ThesafetyregulationsandEMCdirectivesmustbemet
● Inrelationtothefailureexclusionsassumed,referenceismadetothe
tableinannexDofENISO138492.
Theexamplesshowninthefollowingandtheircharacteristicarchitecturede
finetheallocationtoacategoryinaccordancewithENISO138491.There
sultingmaximumpossibleperformancelevelsinaccordancewithENISO
13849continuetobedependentonthefollowingfactorsrelatedtotheexter
nalcomponents:
● Structure(singleorredundant)
● Detectionofcommoncausefailures(CCF)
● Diagnosticcoverageondemand(DC
avg
)
● Timetothedangerousfailureofachannel(MTTF
d
)
8.4.1 Example:STOandSBCcontrolviasafetycontrol
ThecontrolofsafetyfunctionSTOisdoneviacorrespondinglogicalpro
cessingofthesafetycontrol,wherebythesafetyfunctionSTOandSBCof
thesingleaxismodulesarecontrolledfromthesafetycontrolviaseparate
outputs.
Inthisexamplemultiaxis,emergencystopswitch,whichactivatesSTOand
SBConallaxisandsafetydoorarerealized.Toreleaseafterunlockingof
emergencystopswitchaswellasclosingthesafetydooraresetbutton
(starttestonswitchingmoduleisactivated)isimplemented.Intheshown
DIPswitchconfigurationitisconfigured,touseSTO1forallaxesandSBCis
releasedsimultaneouslywithSTO1.