Siemens Simodrive 611 Configuration Manual page 369

9 Cabinet Design and EMC
9.4 Application examples
Supplementary safety function, EMERGENCY STOP
Assumption
9-368
If EMERGENCY STOP is actuated, then the drive should be safely stopped and
shut down.
The EMERGENCY STOP pushbutton is actuated 1x per month.
The consideration for this safety function can be basically realized correspon-
ding to the description in Chapter 9.4.2 "Protective door safety function".
However, the EMERGENCY STOP pushbutton as well as safety relay –A1 must
also be taken into account for this safety function.
The position switches to monitor the protective door do not play a role when
considering/analyzing EMERGENCY STOP.
–S3 –A1
Fig. 9-18 Block diagram of the supplementary EMERGENCY STOP safety function
SENSE subsystem
The safety functions are initiated by the EMERGENCY STOP pushbutton,
which can be released by turning, and which is connected through two chan-
nels. This has positively opening contacts.
Fault exclusion is assumed for the positively opening contacts as well as for the
mechanical system of the EMERGENCY STOP pushbutton. An accumulation of
faults between two consecutive actuations of the EMERGENCY STOP pushbut-
ton can result in the safety function being lost. This behavior corresponds to
Category 3.
Table 9-16 Parameters for the SENSE subsystem
Parameter
EMERGENCY STOP pushbutton –S3
B10 value
Percentage of dangerous
failures
B value
10d
n
op
MTTF
d
DC
Result
PFH
d
Performance Level
SIMODRIVE 611 Configuration Manual (PJU) – 02/2012 Edition
–K5
–A2 –A3
–K6
Value
100.000 Manufacturer's data
20 % Manufacturer's data
500.000
B10 =
d
Percentage of dangerous failures
12per years assumed actuations per year
416.666 years
→ high
MTTF
d
99 % Plausibility monitoring using –A1
-8
4,29 x 10 /h EN ISO 13849–1:2008, AnnexK
PLe with Category 3
© Siemens AG 2012 All Rights Reserved
02.12
05.01
–K2
–K1
Comment
B10
B
10d
=
0,1 x n
op