System Description Of Safe I/O Modules; Sample Design - Weidmuller UR20-4DI-4DO-PN-FSOE Manual

3

System description of safe I/O modules

This chapter contains product-specific informa-
tion and notes about the use of safe I/O mod-
ules. Please also observe the system description
in the u-remote manual (document number
1432790000).
The u-remote system provides safe I/O modules for both
safety protocols Safety over EtherCAT
EtherCAT, FSOE) and PROFIsafe. Attached to a safety control
they enable the selective switching off of plant devices.
The 4DI-4DO type as well as the 8DI type is available for
each safety protocol. Each type is also available as type 2
variant (V2):
UR20-4DI-4DO-PN-FSOE, UR20-4DI-4DO-PN-FSOE-V2
UR20-8DI-PN-FSOE, UR20-8DI-PN-FSOE-V2
UR20-4DI-4DO-PN-FSPS, UR20-4DI-4DO-PN-FSPS-V2
UR20-8DI-PN-FSPS, UR20-8DI-PN-FSPS-V2
Both variants are identical in design, they only differ in the
firmware and therefore in the parameters (see module de-
scriptions in Chapter 5). The V2 modules enable to connect
antivalent switching safety devices.
The V1 modules cannot be upgraded using the
V2 firmware!
Single channel architectures (1oo1) as well as dual channel
architectures (1oo2) can be realised with the safe inputs and
outputs, also mixed operation is possible. In case of failure of
the safety control the modules change into the safe status.
Example set-up of safe I/O modules (FS * ) in a u-remote station
1) Safety over EtherCAT is a registered trademark and patented technology, licensed by
®
Beckhoff Automation GmbH, Germany
1484600000/04/06.2017
(Fail safe over
1)
Safety control
DI DO
X1
X2
u-remote IP20 modules for functional safety manual
3 System description of safe I/O modules | Sample design
Safety function
The information on the inputs are transferred to the safety
control via a black channel according to EN 61508-2). A safe
input will send the input information "false" to the safety con-
trol if a signal is within the inactive range or a fault has been
detected.
Vice versa the information from the safety control are trans-
ferred to the outputs. The safe outputs will be deactivated if
the output information "false" is sent from the safety control
or a fault has been detected (safe status see technical data).
3.1

Sample design

Safe I/O modules can be placed at any position in the
u-remote station. The only exceptions are safety segments
built up from safe power feed modules (s. section 4.1). No
safe I/O module with outputs (UR20-4DI-4DO-PN-FSOE or
UR20-4DI-4DO-PN-FSPS ) may be placed within a safety
segment.
The following picture exemplifies how to design a u-remote
station with safe I/O modules.
FS * FS *
DO AO DO DI DO
M
DO DO DI
9