TR-Electronic CDV582 - Safety Functions of Fail-Safe Processing Unit

Safety instructions
 TR-Electronic GmbH 2019, All Rights Reserved Printed in the Federal Republic of Germany
Page 16 of 154 TR - ECE - BA - GB - 0139 - 02 11/21/2019
2.2 Safety functions of the fail-safe processing unit
The F Host, to which the measuring system is connected, must perform the following safety checks.
To ensure the appropriate measures can be taken in the event of an error, the
following applies:
If the measuring system detects an error and a safe position cannot be output, the
PROFIsafe channel is automatically put into the fail-safe state. In this state, so-
called “passivated data” are output via PROFIsafe. Also see Chapter 6.7.4 on
Page 134.
Passivated data as seen by the measuring system:
PROFIsafe data channel: All outputs are set to 0
PROFIsafe status: Error bit 2
1
Device_Fault is set
PROFIsafe-CRC: valid
TR Status1: Safe State Bit 2
4
= 0
Upon receipt of passivated data, the F Host must put the system into a safe
state. This error state can be terminated only by elimination of the error and
subsequent re-integration!
This does not necessarily affect the process data channel that can be addressed via
PROFINET IO. If the internal diagnosis in the master channel does not detect an
error, the process data are still output. However, these data are not safe in terms of
a safety standard.
2.2.1 Mandatory safety checks / measures
Measures for commissioning, changes
Error response F Host
Application-dependent parameterization or definition of the necessary
iParameters.
–
In the event of parameter changes, check whether the measure is taken as
desired.
STOP
Check by F Host
Error response F Host
Cyclic check of the current safety-oriented data for consistency with the
previous data.
STOP
Monitoring of non-safety-related and safety-related cyclic data.
Receipt of passivated
data -> STOP
Timeout: Monitoring of the measuring system – response time. To check,
e.g., for cable breakage, power failure, etc.
STOP