Description Of Active Cube Safety Function; Definitions Of The Agl Safety Functions; Specification Of The Safety Function 1 (Sf1): Sto - BONFIGLIOLI Agile Applications Manual

6 Description of ACTIVE Cube Safety Function

The frequency inverters of the AGL devices series feature the integrated safety function „Safe torque
off, STO".
With a suitable external safety control device the function „Safe Stopp 1 (SS1 c)" according to EN 61800-
5-2 can be realized together with the AGL.
Definitions according to EN 61800-5-2:
STO: The motor is supplied with no energy, which could cause a rotation (or a movement in a linear
motor). The frequency inverter supplies no energy to the motor, which could produce a torque.
SS1 c: The system safety relay + frequency converter performs the function of:
Triggering of the motor deceleration and according to an application-specific time a delayed triggering
of the STO function. This safety function corresponds to a controlled stop according to EN 60204-1,
Stop Category 1.
Definitions according to EN 60204-1:
Stop category 0: Stop by immediate disconnection of energy supply to the machine drive elements,
i.e. uncontrolled stop.
Stop category 1: Controlled stop, where energy is still being supplied to the drive elements of the
machine to perform the stopping operation. Energy supply is stopped only after the drive has come to
a standstill.
Stop functions must always have priority over start functions and must work properly in any operation
mode.
Resetting of the stop function must not cause any dangerous state.
The mechanical elements must be dimensioned properly for the stop category used. If, for example, a
mechanical brake is applied in the case of fast-rotating machines via stop category 0, this brake must
be able to stop the machine safely. Wear and tear of the mechanical elements must be considered
during projection for the operating states and indicated in the maintenance instructions.
Stop category 0 always has priority over stop category 1.

6.1 Definitions of the AGL Safety functions

SF1: Safety Function 1
SF2: Safety Function 2
DF1: Diagnosis function 1
DF2: Diagnosis function 2
Response time:
Time that elapses between the triggering of the Safety function on the user interface and reaching the
safe state.
Example for STO: On the user interface the signal level switches from above DC 15 V to less than DC 5
V. Latest when falling below DC 5 V the response time begins and ends at the moment where torque
can no longer be generated.
Fault Response time:
Time between the occurrence of a detectable fault and reaching the safe state of the frequency inverter.
Example: The Safety function STO can no longer be triggered via channel A. The device internal diag-
nosis detects the fault and initiates the necessary fault reaction functions. Overall the Fault response
time elapses until torque can no longer be generated.

6.2 Specification of the Safety Function 1 (SF1): STO

Type of Safety function SF1
According to EN 61800-5-2:
Active Principle of SF1
Demand rate
SIL-Level (IEC 61508)
18
Safe Torque Off,
STO
Disconnection of energy supply to the motor
High
2
AGL-STOV0-01SV0-06 03/18