3.9.2 Safety functions
Test pulses
The inputs are self-monitored by test pulses. Pulses of 450 to 500 µs are generat-
ed every 15 ms. The output is switched off for this brief period.
It must be insured that the downstream actuators cannot be affected by the test
pulse.
Channel monitoring
The correct switching of the output stage is monitored crosswise. This means that
processor A/B monitors the switching process of processor B/A. In the case of
semi-conductor outputs the power supply to the actuators can be interrupted in the
case of error using a shut-down relay. Output modules with relay outputs also
check the switching function of the positively driven internal relay.
Voltage monitoring
Every output module has an internal monitoring system of the connected power
supply of the actuators and reads out an error message in the case of an error.
Error messages
If errors occur during the above described measures or other internal/external
errors, these are read out by error messages. Every error message can be
generated by the processor A/B. The prefix (A/B) shows the processor from which
the message comes. The table below provides an excerpt from the possible error
messages of the input modules. A complete list of all error messages is provided in
Chapter 7.3.3.