PreciseFlex_Robot
32
Appendix D2: Safety Circuits for PF3400 3kg Payload
14‐Jun‐17
SafetyCircuit
StartupTest
1
Redundant
ContinuousTe st
DiagnosticCoverage
MTTFdl, Years
PowerOffOnFailure
PL
CategorySafety
Notes(PF3400thasre du ndantEstopand48Vpowersupply enable)
Estop Yes Yes No 9 9% 100 Yes d 3 StartuptestforcesEstop,checks48Vpowerdisable, zeroampcurrent
DualEstopcircuitsturnsoff ampenableandPWM
DualEstopcircuitsturnSoff48Vpower
Stoppingrobotwithhandturnsoffampenable,PWMand48V
EncoderFeedback Yes No Yes 90% 58 Yes d 3 Startuptestchecksencoder
communication,preventsmtrpoweriffault
Serial updateat8Khzwchecksum,commcheck,accelcheck
CounterembeddedinpositionwordtoconfirmCPUreadfromFPGA
CPUMonitor Yes Yes Yes 99% 100 Yes d 3 StartuptestforcesCPUWDlow,checks48Vpowerdisabled
Independe ntdualwatchdogtimersturnoffampenable,PWMand48V
Processoronsafetyboard
monitorsmain CPU.Disables48Viffailure.
PositionEnvelopeError Yes Yes Yes 90% 57 Yes d 3 Startuptestchecksencodercommunication,preventsmtrpoweriffault
Serial updateat8Khzwchecksum,commcheck,accelcheck
SWwatchdoginservoloopturnsoff ampenable,PWMand48V
CounterembeddedinpositionwordtoconfirmCPUreadfromFPGA
Power
ampFault Yes Yes Yes 90% 100 Yes d 3 Startuptestconfirmszerocurrentwhen48Venabled
Excesscurrenttoground orphasetophasetriggersshutdownin10usec
SaturatedPIDcurrentcommandtriggersshutdownin.050sec
Shortedtransistorjustlocksupbrushless motor
CollabForceLimit Yes Yes Yes 90% SW Yes d 3 Tests2,3,4abovetestHW.Motordrivenagainstbraketotest
SWcurrentlimit.
Positionenvelopeerrortriggersfault,turnsoffpoweratampand48V
Currentsaturationtriggersseparatefault,turnsoff poweratampand48V
Moni torfunctionwithWDturnsoffpoweratampand48V
Moni torandCPUWDtestedatstartupturningoff48V
AssymetriccurrentlimitslimitZ
forceevenwi thgravityload
Veloci tyRestrict Yes Yes Yes 99% 93 Yes d 3 Startuptest,setsflagtotriggerthiserror,thenresets
Checksvel ocitylimitinFPGAinadditiontocheckinCPUservosoftware
1.Cat2andCat3requirestartuptestbeforeenablingmotorpower
PF3400