ABB AC500-S Application note page 17

Application Note for "Usage of AC500 digital standard I/Os in functional safety applications up to PL c (ISO 13849-1)", V1.0.0
DANGER
NOTICE
NOTICE
4. Continuously read C0 channel value on SM560-S safety application program
(the implementation depends on which method was selected in Step 3) and su-
pervise the pattern availability using safety application logic, for example, using
safety TON FBs [1]. Another option is to use two SF_Antivalent FB instances
[1]:
a. For LOW (0 V) phase supervision: Selected SF_Antivalent inputs are,
for example, S_ChannelNC := FALSE, S_ChannelNO:= IS_DC523_S1,
DiscrepancyTime := T#35ms;
b. For HIGH (+24 V) phase supervision: Selected SF_Antivalent inputs
are, for example, S_ChannelNC := IS_DC523_S1, S_ChannelNO:=
TRUE, DiscrepancyTime := T#400ms
Where IS_DC523_S1 is the variable name of the transferred C0 channel value
on SM560-S Safety CPU application program. "Error" outputs of SF_Antivalent
FB shall be used as a result of safety pattern supervision on DC523 input chan-
nel C0 and shall be further used in SF_EmergencyStop and SF_SafetyRequest
FBs (see [1] for more details) to properly implement emergency stop function-
ality.
We reserve all rights in this document. Reproduction, use or disclosure to third parties without express authority is strictly forbidden. Ó 2015 ABB Ltd.
You have to keep in mind that data transfer from PM573 to SM560-
S (both using
SF_DPRAM_PM5XX_S_SEND and Cyclic Non-safe Data Ex-
change) and backwards is a non-safe function. The usage of this
communication is suitable for PL c (ISO 13849-1) only as applica-
tion specific implementation with the usage of described test pulsing
and test pattern supervision on SM560-S Safety CPU.
The implementation, verification and validation of the approach in
practice according to ISO 13849-1 and/or IEC 62061 will remain al-
ways application specific because standard (non-safety) AC500
modules become involved in the execution of functional safety func-
tions. Thus, the responsibility for correct implementation, verifica-
tion and validation of the proposed approach is fully within the end-
customer responsibility.
Make sure that proper "Min Update Time" setting is selected for
SM560-S Safety CPU in Automation Builder. 2 or 3 ms are recom-
mended for the proposed example.
Make sure that proper cycle time value is used in SM560-S Safety
CPU application program, e.g., the maximum cycle time of 3 ms for
SM560-S Safety CPU is acceptable for the given application exam-
ple.
FBs SF_DPRAM_PM5XX_S_REC and
Page 17/24