4.2 Safe Torque Off (STO)
The DM2020 integrates the Safe Torque Off (STO) function according to standards EN 61800-5-2;
UNI EN ISO 13849-1:2016. SILCL 3 PL "e" (as per certificate). The function also corresponds to an
uncontrolled stop in accordance with stop category 0 of IEC/EN 60204-1 standard.
The validation of the function is based on:
l
A guarantee that a single fault does not lead to loss of the safety function
l
Some, but not all, possible faults may be identified
l
The addition of more undetected failures can lead to loss of the safety function
In case of the occurrence of two simultaneous faults in the power section, the residual risk is for the
motor to rotate by an angle dependent on the number of its pole pairs. So, for example, a 6-pole motor
can result in a maximum rotation of 60°.
PN: L-MAM2-E-201
Moog Casella DM2020 Installation and Startup Guide
4.2 Safe Torque Off (STO)
WARNING
The manufacturer of the end machine and/or equipment must carry out and provide results of a risk
analysis of the machine according to ISO12100 and ISO14121 and take all measures necessary to prevent
unforeseen movements that may harm persons or damage property. In particular the manufacturer of the
end
machine and/or equipment must ensure conformity
to relative product standards.
AVERTISSEMENT
Le fabricant de la machine et / ou de l'équipement final doit exécuter et fournir les résultats d'une analyse
de risque de la machine selon ISO12100 et ISO14121 et prendre toutes les mesures nécessaires pour
empêcher des mouvements imprévus qui peuvent nuire aux personnes ou endommager des biens. En
particulier, le fabricant de la machine et / ou de l'équipement final doit assurer la conformité à toute norme
spécifiques relatives aux produits mêmes.
Where safety functions are based on electrical/electronic devices (SCRF), the safety integrity levels (SIL) and
functional requisites must be indicated for these functions.
Based on CEI EN 62061, this specification must include all data that may affect design of the electrical/
electronic device, including, where applicable:
• Operating conditions of the machine
• The priority of functions that may be enabled concurrently and cause conflicting actions
• The operating frequency of each SCRF
• The required response time of each SCRF
• A description of each SCRF
• The interface of each SCRF with other machine functions
• A description of the reactions to failure and constraints relative to machine restart, when the reaction to
failure causes the machine to stop
• A description of the operating environment
• Tests and associated equipment (e.g. access hatches)
• The frequency of operating cycles and factor of use in operating cycles