Danfoss VLT AutomationDrive Design Manual page 52

Introduction to FC 300
3.12 Safe Stop of FC 300
The FC 302, and also the FC 301 in A1 enclosure, can
perform the safety function Safe Torque Off (STO, as
1
defined by EN IEC 61800-5-2
2
defined in EN 60204-1 ).
Danfoss has named this functionality Safe Stop. Prior to
integration and use of Safe Stop in an installation, a
thorough risk analysis on the installation must be carried
out in order to determine whether the Safe Stop
functionality and safety levels are appropriate and
sufficient. It is designed and approved suitable for the
requirements of :
- Safety Category 3 in EN 954-1 (and EN ISO
13849-1)
- Performance Level "d" in EN ISO 13849-1:2008
- SIL 2 Capability in IEC 61508 and EN 61800-5-2
- SILCL 2 in EN 62061
1) Refer to EN IEC 61800-5-2 for details of Safe torque off
(STO) function.
2) Refer to EN IEC 60204-1 for details of stop category 0
and 1.
Activation and Termination of Safe Stop
The Safe Stop (STO) function is activated by removing the
voltage at Terminal 37 of the Safe Inverter. By connecting
the Safe Inverter to external safety devices providing a safe
delay, an installation for a safe Stop Category 1 can be
obtained. The Safe Stop function of FC 302 can be used for
asynchronous, synchronous motors and permanent
magnet motors. See examples in 3.8.1 Terminal 37 Safe Stop
Function.
NOTE
FC 301 A1 enclosure: When Safe Stop is included in the
drive, position 18 of Type Code must be either T or U. If
position 18 is B or X, Safe Stop Terminal 37 is not included!
Example:
Type Code for FC 301 A1 with Safe Stop:
FC-301PK75T4Z20H4TGCXXXSXXXXA0BXCXXXXD0
WARNING
After installation of Safe Stop (STO), a commissioning test
as specified in section Safe Stop Commissioning Test of the
Design Guide must be performed. A passed commissioning
test is mandatory after first installation and after each
change to the safety installation.
Safe Stop Technical Data
The following values are associated to the different types
of safety levels:
Reaction time for T37
- Typical reaction time: 10ms
Reaction time = delay between de-energizing the STO
input and switching off the drive output bridge.
FC 300 Design Guide
) and Stop Category 0 (as
®
MG.33.BD.02 - VLT is a registered Danfoss trademark
Data for EN ISO 13849-1
- Performance Level "d"
- MTTF (Mean Time To Dangerous Failure): 24816
d
years
- DC (Diagnstic Coverage): 99%
- Category 3
- Lifetime 20 years
Data for EN IEC 62061, EN IEC 61508, EN IEC 61800-5-2
- SIL 2 Capability, SILCL 2
- PFH (Probability of Dangerous failure per Hour) =
7e-10FIT = 7e-19/h
- SFF (Safe Failure Fraction) > 99%
- HFT (Hardware Fault Tolerance) = 0 (1oo1
architecture)
- Lifetime 20 years
Data for EN IEC 61508 low demand
- PFDavg for 1 year proof test: 3,07E-14
- PFDavg for 3 year proof test: 9,20E-14
- PFDavg for 5 year proof test: 1,53E-13
SISTEMA Data
From Danfoss Functional safety data is available via a data
library for use with the SISTEMA calculation tool from the
IFA (Institute for Occupational Safety and Health of the
German Social Accident Insurance), and data for manual
calculation. The library is permanently completed and
extended.
3 3
51