Terminal 37 Safe Stop Function - Danfoss VLT CDS302 Operating Instructions Manual

Safety Instructions and Gen...
Data for EN ISO 13849-1
- Performance Level "d"
2 2
- MTTF
years
- DC (Diagnostic Coverage): 99%
- Category 3
- Lifetime 20 years
Data for EN IEC 62061, EN IEC 61508, EN IEC 61800-5-2
- SIL 2 Capability, SILCL 2
- PFH (Probability of Dangerous failure per
Hour)=7e-10FIT=7e-19/h
- SFF (Safe Failure Fraction) >99%
- HFT (Hardware Fault Tolerance)=0 (1001
architecture)
- Lifetime 20 years
Data for EN IEC 61508 low demand
- PFDavg for one year proof test: 3, 07E-14
- PFDavg for three year proof test: 9, 20E-14
- PFDavg for five year proof test: 1, 53E-13
SISTEMA Data
Functional safety data is available via a data library for use
with the SISTEMA calculation tool from the IFA (Institute
for Occupational Safety and Health of the German Social
Accident Insurance), and data for manual calculation. The
library is permanently completed and extended.
Abbrev. Ref.
Cat. EN 954-1
FIT
HFT IEC 61508
MTTFd EN ISO
13849-1
PFH IEC 61508
PL EN ISO
13849-1
SFF IEC 61508
SIL IEC 61508
8
(Mean Time To Dangerous Failure): 24816
d
Description
Category, level "B, 1-4"
Failure In Time: 1E-9 hours
Hardware Fault Tolerance: HFT = n
means, that n+1 faults could cause a
loss of the safety function
Mean Time To Failure - dangerous. Unit:
years
Probability of Dangerous Failures per
Hour. Consider the PFH value when the
safety device is operated in high
demand (more often than once per
year); or operated in continuous mode,
where the frequency of demands for
operation made on a safety-related
system is greater than one per year.
Discrete level used to specify the ability
of safety-related parts of control systems
to perform a safety function under
foreseeable conditions. Levels a-e.
Safe Failure Fraction [%]; Percentage
part of safe failures and dangerous
detected failures of a safety function or
a subsystem related to all failures.
Safety Integrity Level
MG34M302 - VLT
®
Operating Instructions VLT CDS302 and CDS303
Abbrev. Ref.
STO
SS1
Table 2.3 Abbreviations Related to Functional Safety
The PFD
Failure probability in the event of a request of the safety
function.

2.2.1 Terminal 37 Safe Stop Function

The frequency converter is available with safe stop
functionality via control terminal 37. Safe stop disables the
control voltage of the power semiconductors of the
frequency converter output stage. This in turn prevents
generating the voltage required to rotate the motor. When
the Safe Stop (T37) is activated, the frequency converter
issues an alarm, trips the unit, and coasts the motor to a
stop. Manual restart is required. The safe stop function can
be used as an emergency stop for the frequency converter.
In normal operating mode when safe stop is not required,
use the regular stop function instead. When automatic
restart is used, ensure the requirements of ISO 12100-2
paragraph 5.3.2.5 are fulfilled.
Liability Conditions
It is the responsibility of the user to ensure that qualified
personnel installs and operates the safe stop function:
•
•
•
User is defined as: integrator, operator, service technician,
maintenance technician.
Standards
Use of safe stop on terminal 37 requires that the user
satisfies all provisions for safety including relevant laws,
regulations and guidelines. The optional safe stop function
complies with the following standards.
•
•
•
•
•
®
is a registered Danfoss trademark/Commercial Compressor
Description
EN Safe Torque Off
61800-5-2
EN 61800 Safe Stop 1
-5-2
value (Probability of Failure on Demand)
avg
Read and understand the safety regulations
concerning health and safety/accident prevention
Understand the generic and safety guidelines
given in this description and the extended
description in the Design Guide
Have a good knowledge of the generic and safety
standards applicable to the specific application
EN 954-1: 1996 Category 3
IEC 60204-1: 2005 category 0 – uncontrolled stop
IEC 61508: 1998 SIL2
IEC 61800-5-2: 2007 – safe torque off (STO)
function
IEC 62061: 2005 SIL CL2