Competence - ABB ACS880-37 Hardware Manual

232 The Safe torque off function

Competence


The maintenance and proof test activities of the safety function must be carried out by a
competent person with adequate expertise and knowledge of the safety function as well as
functional safety, as required by IEC 61508-1 clause 6.
Fault tracing
The indications given during the normal operation of the Safe torque off function are
selected by inverter control program parameter 31.22.
The diagnostics of the Safe torque off function cross-compare the status of the two STO
channels. In case the channels are not in the same state, a fault reaction function is
performed and the inverter trips on an "STO hardware failure" fault. An attempt to use the
STO in a non-redundant manner, for example activating only one channel, will trigger the
same reaction.
See the firmware manual of the inverter control program for the indications generated by
the inverter, and for details on directing fault and warning indications to an output on the
control unit for external diagnostics.
Any failures of the Safe torque off function must be reported to ABB.
Safety data
The safety data for the Safe torque off function is given below.
Note: The safety data is calculated for redundant use, and does not apply if both STO
channels are not used.
SIL/
Frame size SC
SILCL
R8i 3 3
2×R8i 3 3
3×R8i 3 3
4×R8i 3 3
5×R8i 3 3
6×R8i 3 3
•
The following temperature profile is used in safety value calculations:
•
670 on/off cycles per year with T = 71.66 °C
•
1340 on/off cycles per year with T = 61.66 °C
•
30 on/off cycles per year with T = 10.0 °C
•
32 °C board temperature at 2.0% of time
•
60 °C board temperature at 1.5% of time
•
85 °C board temperature at 2.3% of time.
•
The STO is a type B safety component as defined in IEC 61508-2.
•
Relevant failure modes:
•
The STO trips spuriously (safe failure)
•
The STO does not activate when requested
A fault exclusion on the failure mode "short circuit on printed circuit board" has been
made (EN 13849-2, table D.5). The analysis is based on an assumption that one
failure occurs at one time. No accumulated failures have been analyzed.
•
STO reaction time (shortest detectable break): 1 ms
PFH
D
SFF
(T = 20 a)
PL
1
(%) (1/h)
e >99 4.74E-11
e >99 5.57E-11
e >99 6.39E-11
e >99 7.22E-11
e >99 8.05E-11
e >99 8.87E-11
MTTF DC
PFD
d
(T = 2 a)
1
(a) (%)
> 90
4.23E-07 27325
> 90
4.98E-07 19607
> 90
5.74E-07 15295
> 90
6.49E-07 12540
> 90
7.24E-07 10626
> 90
7.99E-07 9220
Lifetime
Cat. HFT CCF
(a)
3 1 80 20
3 1 80 20
3 1 80 20
3 1 80 20
3 1 80 20
3 1 80 20