Working Principle; Saf-001-000-Xxx; Saf-001-001-Xxx - Baumuller BM5-O-SAF-000 Operating Instructions Manual

8.4

Working principle

WARNING!
If a module with STO function is reset (such as SAF 001-001-000) by a module with
SS1 function (such as SAF-001-001-001) the user must consider the SS1 time. Not
before the SS1 time has expired after the module was activated, the module changes
into the safe state STO (safe torque off).
8.4 Working principle
8.4.1

SAF-001-000-xxx

The Safety Module (SAF-001-000-xxx) provides the power for the power stage of the
converter. The voltage applied on the input side of the Safety Module (SAF-001-000-xxx)
is converted to an alternating signal and transferred to the secondary side by the DC/DC
converter of the module. Power can only be transferred to the secondary side of the DC/
DC converter, if the Safety Module (SAF-001-000-xxx) is supplied on the input side via
an emergency stop device, an electromagnetic safety sensor (for example safety light
curtain) or another safety device (for example output of a safety control).
In case of a failure or on request (by activating an emergency stop device, interrupting a
safety light curtain), the Safety Module (SAF-001-000-xxx) ensures that the power supply
of the converter in the power stage is shut down safely and the pulse inhibitor is activated.
Thus, the motor can no longer generate a rotating field. The mains supply is not
disconnected from the motor when the shut down function is activated.
8.4.2

SAF-001-001-xxx

The Safety Module (SAF-001-001-xxx) provides the supply for the driver of the converter.
The voltage applied on the input side of the Safety Module (SAF-001-001-xxx) is
evaluated by two microcontrollers monitoring each other. They enable the driver of the
converter if the Safety Module (SAF-001-001-xxx) provides an emergency device, an
electric safety sensor (such as a safety light array) or another safety device (such as a
safety control output).
An internal short circuit detection is provided by the device: If the STO requirement is
made by a single channel, only (STO_A or STO_B) then the device remains in the STO
status and cannot be enabled anymore. If voltage is on both channels simultaneously
then the axis can be enabled again after re-applying 24 V to both channels.
In case of a failure or on request (by activating an emergency stop device, interrupting a
safety light curtain), the Safety Module (SAF-001-001-xxx) ensures that the power supply
of the converter in the power stage is shut down safely and the pulse inhibitor is activated.
Thus, the motor can no longer generate a rotating field. The mains supply is not
disconnected from the motor when the shut down function is activated.
After activating the module SAF-001-001-001 the SS1 time runs for the full period before
it changes into the STO state even though 24 V are applied to both of the input channels
of the module again while the SS1 is running. The drive enable is only possible if there
was no voltage at both channels at the same time after reaching STO and the 24 V are
applied again.
40 Operation Manual Safety Module for b maXX 5000 BM5-O-SAF-000/-001
Document no.: 5.09013.07
of 114
Baumüller Nürnberg GmbH