Siemens SINAMICS S120 Installation And Start-Up Manual page 150

SINAMICS Safety Integrated (Booksize)
General information about SINAMICS Safety Integrated
Shutdown paths
Two independent shutdown paths are available. All shutdown paths are low active,
thereby ensuring that the system is always switched to a safe status if a compo-
nent fails or in the event of cable breakage.
If an error is discovered in the shutdown paths, the "Safe standstill" function is acti-
vated and a system restart inhibited.
Two-channel monitoring structure
All the main hardware and software functions for Safety Integrated are imple-
mented in two independent monitoring channels (e.g. shutdown paths, data man-
agement, data comparison).
The two drive monitoring channels are implemented using the following compo-
nents:
S Control Unit
S The Motor Module belonging to a drive
Forced dormant error detection or test for the shutdown paths
Forced dormant error detection for the shutdown paths is used for detecting errors
in the software/hardware of the two monitoring channels as quickly as possible and
is carried out automatically when the "Safe standstill" function is activated/deacti-
vated.
To fulfill the requirements of EN 9541 regarding timely error detection, the two
shutdown paths must be tested at least once within a defined time to ensure that
they are functioning properly. For this purpose, forced dormant error detection
must be triggered manually by the user or automatically.
A timer ensures that forced dormant error detection is carried out as quickly as
possible.
S p9659
Forced dormant error detection must be carried out at least once during the time
set in this parameter.
Once this time has elapsed, an alarm is output and remains present until forced
dormant error detection is carried out.
The timer returns to the set value each time the "Safe standstill" function is deacti-
vated.
When the appropriate safety devices are implemented (e.g. protective doors), it
can be assumed that running machinery will not pose any risk to personnel. For
this reason, only an alarm is output to inform the user that a forced dormant error
detection run is due and request that this be carried out at the next available op-
portunity. This alarm does not affect machine operation.
5-150
Safety Integrated timer for forced checking procedure
SINAMICS S120 Installation and Start-Up Manual, 12/04 Edition
E Siemens AG, 2004. All rights reserved