Contents Safety instruction and information for use ................3 Motivations for integrated safety function ....................3 Safe torque off function description ......................3 Safety recommendations ........................4 Risk analysis and assessment ....................6 STO safety normative adherence ................... 7 Safety system description ....................... 8 Device functionality and architecture ......................
Safety instruction and information for use Motivations for integrated safety function As a result of automation, demand for increased production and reduced operator physical effort, control systems of machinery and plant items play an increasing role in the achievement of overall safety.
The mains supply switch-off function may performed only with the use of appropriate isolating switching devices. The feature of safety function are: Unexpected movements of the motor shall not be possible. Power and current to the motor are safely switched off. ...
In circumstances where external influences (with vertical loads for example) are present, additional measures (mechanical brakes for example) might be necessary to prevent any hazards. Procedures to check the safety function periodically according to the result of risk assessment and prescriptions in §6.2 must be set-up.
Risk analysis and assessment According to Machinery Directive 2006/42 EC, it is mandatory for the manufacturer of the machines to carry out risk analysis in order to identify the hazards related to the machine. Risk analysis should be developed according to Standard EN 12100 - Safety of Machinery- Risk assessment.
STO safety normative adherence “Safe Torque Off” integrated safety function meets the following standard requirements: safety integrity level SIL3 according to EN 61508 and EN61800-5-2 - Single contactor operation for Car stop EN81-1 §12.7.3 b) - Contactor-less operation for Car stop EN81-1 and EN81-20 220.127.116.11.3 d) Safe Torque Off function can be exploited specifically for Lift Market to support: In case of activation or fault detection the safety function STO avoids torque production onto the motor, which eventually could cause mechanical movements.
Safety system description Safe Torque Off safety function is integrated into the drive family ADL300, and is managed by means of two enable signals “ENABLE” and “SAFETY ENABLE”. Device functionality and architecture The system herein examined are Power Drive Systems (PDs) also called Inverter. A PDS is power device connected one side to the mains (three-phase system) and on other side to the motor power lines.
of the hardware PWM generator. Of course the onboard software sees the enable signal when asserted and stops the (software) generation. A power supply stage, providing voltages for all digital circuits and EXP-SFTY-ADV board is included on this board. Safety part: exists an isolated isle integrated onto the regulation PCB.
Torque On signal Tmotoff One/both control signals Tfbon disabled Motor Torque Ttoff Motor safely stopped Feedback relay activated Figure 2 Time event diagram for STO function. time from control signal disabled to STO function activation toff time from STO function activation to feedback signal changing state fbon time from STO function activation to motor stop: depends on motor/load inertia motoff...
Safety Enable signal Enable signal Ttoff One/both enable signals disabled Ttoff TFBK Feedback relay activated Figure 3 Dynamic view of activation of STO Safety Function. Safety Enable signal Enable signal Tton Enablle Signal Activated TFBK Feedback relay activated Figure 4 Dynamic view of deactivation of STO Safety Function. 1S9STOEN_26-5-17_ADL300_STO_STO Pag.
Safety integrity level PDS STO function provides two independent safety channels/paths. A fault on a channel should not interfere with operation on the other channel. Safety architecture has been designed to be fault tolerant with a fault tolerance of 1. This means that whatever failure occurs in the system safety is still guaranteed.
Should any of the previous checks be failed ADL300 will not start generating PWM pulses. Only qualified personnel after performing all necessary maintenance procedures are authorized to clear the alarm into the drive alarm menu. Feedback signals are designed to react to fault detection in a time no longer than 10ms. Terminal Signal name Function Description...
Installation and commissioning guidance STO integrated safety function must be regarded as a part of safety related control system of a machine. Only risk analysis and assessment of the machine as in §2 can verify adequacy of the safety control system. Risk analysis and assessment shall be developed with full knowledge of STO characteristics and limits.
Every apparatus is equipped with identification label as follows: 1S9STOEN_26-5-17_ADL300_STO_STO Pag. 15/30...
Connections and use of the “SAFE TORQUE OFF” function The “SAFE TORQUE OFF” function shall be used to prevent unexpected starting from standstill of the motor. In case motor is running, standstill condition should be achieved with controlled braking, before “SAFE TORQUE OFF” function being activated. The safety function breaks off power and current onto the drive outputs and makes motor coast.
Safety connector layout is shown in Figure 6 Figure 6 Safety Connector Layout Table 3 is a description of signals onto Safety Connector. Terminal Signal name Function Description Electrical limits and range name +24v for disabling the safety (IN) +12…+35v with respect +SAFETY ENABLE function to EN-...
Figure 7 Fixed Connector Layout for ADL300. Name Description Name Description Name Description DI F2 DI 8 Dig In 8 RO4O Dig Out 4 DI F1 DI 7 Dig In 7 RO4C Dig Out 4 DI 6 Dig In 6 RO3O Dig Out 3 DI 5...
Pin name Function Drive ENABLE signal. 24v DC should be applied TB3 9 - EN HW TB3 11 - DCOM COM for ENABLE signal. DRIVE OK feedback relay TB4 7- RO 1O COM for DRIVE OK feedback relay TB4 8- RO 1C Table 6 Connector pin-out concerning safety related function onto ADL300 Basic.
Figure 10 An example for regulation IO conFiguretion: EXP-IO-D5R3. Regulation connector description with regard to signals related to safety function for ADL300 Advanced. Pin name Function Drive ENABLE signal. 24v DC should be applied 9 - EN HW COM for ENABLE signal. 11 - 0v DRIVE OK feedback relay 56- RO 1O...
Electrical levels ENABLE and SAFETY ENABLE input signals comply with following electrical characteristics: Nominal excitation voltage Min excitation voltage Max excitation voltage Max steady state current (25°C) 30mA Open circuit Disabling condition 50mA Max in-rush peak current Table 8 ENABLE-SAFETY ENABLE electrical levels. SAFETY OK and DRIVE OK feedback relays characteristics are shown in Nominal output voltage 125v...
Operation and maintenance requirements Operations Operations must comply with electrical precautions and ranges so far claimed and explained. Following a table of the most important electrical drive precautions to comply with: Signals Electrical safety constrains Voltage shall not exceed 35v and shall not be inverted applied. SAFETY ENABLE+, SAFETY ENABLE- Voltage shall not exceed 125v.
1=+24vDC, 2=COM onto SAFETY ENABLE Drive is powered but does not work SAFETY OK does not work Check for Safety Failure Alarm. In case of assertion contact Gefran Service & Assistance Drive has not been properly Check ADL300 conFiguretion. See connected.
Lift Applications Following are some application examples specifically intended for Lift Market which show how to implement Safety functions according to EN81-1 using ADL300 safety integrated function. Lift Application Design using 2 contactors for car stop Figure 11Safety connector position on the ADL300 Advanced and Basic versions. In case of two external contactors used to disconnect motor wirings, no ADL300 safety feature is used.
+ SAFETY ENABLE +24v for disabling the safety function -SAFETY ENABLE 0v COM for disabling the safety function 1S9STOEN_26-5-17_ADL300_STO_STO Pag. 25/30...
Lift Application Design supporting car stop with one contactor Figure 12 ADL300 Lift system reference design to use a single contactor onto the motor. Figure 12 is a Lift reference design to be used to implement a Lift System according to EN81-1 12.7.3 b) using one contactor and safety integrated function instead of 2 contactors.
Figure 13 ADL300 specific reference design to use a single contactor onto the motor. Figure 13 is a more specific ADL300 design case using single contactor and AC motors. According to previous prescriptions it can be noticed that: 1. The system control unit uses both K3M contactor and ADL300 safety integrated mechanism 2.
Lift Application Design supporting contactor-less car stop Figure 14 ADL300 Lift system reference design to use onto the motor. Figure 14 is a Lift reference design to be used to implement a Lift System according to EN81-20 18.104.22.168.3 d) using no contactors and safety integrated function STO (EN61800-5-2- SIL3) instead of 2 contactors.
1. SYSTEM CONTROL UNIT (SCU) shall use ADL300 safety integrated function STO as means to stop cabin. Two separated and independent wirings shall be used to activate/deactivate ENABLE and SAFETY ENABLE signals. 2. SCU will monitor both DRIVE OK and SAFETY OK relay. 3.
With respect to above prescriptions we can notice that: 1. System Control Unit uses both ENABLE and SAFETY ENABLE signals by means of two different relays (K2M, K3M) 2. SCU monitors both feedback relays: SAFETY OK and CONTACTORLESS OK (which is configured as Digital Inp Monitor ENHW) 3.
Fax +44 (0) 8452 604556 email@example.com Ph. +91 20 6614 6500 firstname.lastname@example.org Fax +91 20 6614 6501 email@example.com SENSORMATE AG GEFRAN MIDDLE EAST ELEKTRIK VE GEFRAN INC. ELEKTRONIK SAN. VE TIC. LTD. STI Steigweg 8, 8 Lowell Avenue Yesilkoy Mah. Ataturk CH-8355 Aadorf, Switzerland WINCHESTER - MA 01890 Cad.