Page 1
O P E R A T I N G I N S T R U C T I O N S Safety Controller UE440/UE470...
Page 2
Operating Instructions UE440/470 This document is protected by copyright. The SICK AG company retains this right. Reproducing this document in whole or part is only permissible within the limits of the statutory regulations of copyright law. Modifying or abridging this document is impermissible without express written permission from the SICK AG company.
SICK protective devices in connection with a safety controller UE440/470. It also addresses people who integrate a UE440/470 into a machine, initialise its use, or who are in charge of servicing and maintaining the unit.
Planning and using SICK protective devices also require specific technical skills which are not detailed in this documentation. When operating a UE440/470, the national, local and statutory rules and regulations must be observed. General information on health and safety using opto-electronic protective devices is contained in the brochure "Safe Machines with Opto-Electronic Protective Devices".
UE440/470 On safety This chapter deals with your own safety and the safety of the equipment operators. Please read this chapter carefully before working with a UE440/470 or with the machine protected by the UE440/470. Specialist personnel The safety controller UE440/470 must be installed, commissioned and serviced only by specialist personnel.
SICK AG accepts no claims for liability if the equipment is used in any other way or if modifications are made to the device, even in the context of mounting and installation.
On safety Operating Instructions Chapter 2 UE440/470 Environmental protection The safety controller UE440/470 has been designed to minimise environmental impact. It uses only a minimum of power and natural resources. At work, always act in an environmentally responsible manner. 2.5.1 Disposal...
2 EFI connections for the attachment of corresponding SICK protective devices (e.g. C4000 Standard/Advanced or S3000) Saving of the configuration of a device connected via EFI, e.g. C4000 in the UE440/470. automatic device identification after replacement of such a device and transfer of the saved configuration to the device.
Operating principle of the device 3.2.1 Principle of the device The safety controller UE440/470 enables easy integration of several safety and standard sensors or input devices, other input devices or actuators in a safety application. With this, you can... implement individual safety applications.
– for "Reset required" Display elements 3.3.1 LEDs and 7segment display The LEDs and 7-segment display indicate the operational status of the UE440/470. They are found on the front of the safety controller. Fig. 3: Status indicators o f the UE440/470 7segment displa y...
Functions such as the restart interlock, PSDI etc. can be configured in both the UE440/470 and in a device connected via EFI. The UE440/470 does not check whether or not these functions were configured with the connected devices. You must therefore check whether the configured safety application monitors the machine or system as planned.
4.1.2 Programs and program selector switch You can configure up to five programs for your safety application(s) with the UE440/470. In each program, you can configure different links between the connected sensors and actuators and integrate the protective devices connected via EFI into the application(s).
Page 19
UE440. Program change for devices connected via EFI The status of the program selector switch of the UE440/470 can be transferred to a protective device connected via EFI. The program selector switch can be configured in such a way that the program change of the EFI device…...
UE440/470 with a new UE440/470 with active automatic reconfiguration, the configuration of a C4000 connected via EFI may be overwritten by the new UE440/470 in certain circumstances. This is the case if the configuration saved in the UE440/470 contains the same type code as the connected C4000.
You can, for example... accept the information from the protective device via the protective fields. transfer the status of a program selector switch connected to the UE440/470 to the protective device. In this case, a different operating mode/program is switched to when switching occurs, both with the UE440/470 and the connected protective device.
If the EFI Status Information is processed by the UE440/UE470, please take into account ATTENTION that the OSSDs of the UE440/470 can be active even though the EFI device is in Lockout. Make sure that the BIT information „IO-Error-Status“ is processed as well.
4.2.3 Signal output (ADO) You can configure up to eight configurable signal outputs (ADO) for the UE440/470. With the aid of the respective signal output, the safety controller can signal specific states. You can use this output for a relay or a PLC, for example. You can configure the signal outputs as inverted signal outputs too.
Using organisational measures, ensure that the emergency stop input devices are actuated once after a certain interval. This is necessary, so that the UE440/470 can identify error conditions of an emergency stop input device which have arisen up until then. The interval is to be defined to suit the specific case dependant on the application.
4.2.7 External device monitoring (EDM) The EDM checks whether the contactors connected to an OSSD of the UE440/470 are in the correct state when the protective device responds. If you activate external device monitoring, the UE440/470 checks the contactors cyclically after each switch-off of the assigned OSSD and before the machine is restarted.
"Release of the application with a release module" on Page 38). With the machine control's external restart interlock: A reset button connected to the UE440/470 does not influence the machine restart. When all input conditions are fulfilled, the outputs of the UE440/470 are reactivated.
Page 31
Restart interlock tab. Reset If you want to activate the restart interlock on the UE440/470 (internal) and also a restart interlock on the machine (external), then each restart interlock gets a reset button. After actuating the reset button for the internal restart interlock (providing the initial conditions are in effect)…...
Reset and Start inputs at the release module influence the start behaviour of the machine. The input conditions for the release of the outputs of the UE440/470 or for the start of the machine can be, e.g:...
The bypass function is not in effect until the test signals for the key-operated switch for bypass have been identified by the UE440/470 (For the test pulse rate for the signal outputs O1.0 and O1.1, see Page 103). 200 ms after switching off the bypass, the system is again in a safe status (latency time).
Page 36
ATTENTION This is necessary so that the UE440/470 can identify an error condition of the key- operated switch for bypass or an error condition in its connection cable which occurs up until then. The interval is to be defined to suit the specific case dependant on the application.
For the settable shutdown delay, refer to the Data sheet on Page 101. If you connect output Out2 to one of the OSSDs of the UE440/470, you can switch off a machine or system after a delay, for example. With this, you implement stop category 1 according to EN 418 for the assigned emergency stop input device (see Section 4.2.6...
Notes behaviour" setting and is defined in the release module. Take the following behaviour into account: If the connected sensors and the UE440/470 have different switch-on times after the supply voltage has been applied, an unintentional positive edge (LOW-HIGH transition) may arise at the input if the output of a sensor becomes active after the UE440/470.
A cycle start must be carried out after the end of the machine cycle if the outputs of the UE440/470 have a safe status and no application start is required (see above). The machine cycle is ended when the machine cycle contact TDC is reached.The Out1 and Out2 outputs of the function module are deactivated there.
The device-specific EFI status bits of the connected EFI devices can be evaluated or stimulated directly in the UE440/470. Thus, for example, monitoring cases in the S3000 can be changed over through the stimulation of the specific input bits of the S3000 via EFI.
UE440/470) or the C4000 (Teach-in key-operated switch is connected to the C4000). If the teach-in is initiated at the UE440/470, its OSSDs switch off during the teach-in. If the teach-in is initiated at the C4000, the OSSD of the C4000 switches off during the teach-in.
If the configured input elements effect the OSSDs, (e.g. safety switches which switch off ATTENTION the OSSDs of the UE440/470) the response time of the OSSDs increase by the set input delay (see also Chapter 11.1 "Response times of OSSDs A and B" on Page 95).
Chapter 5 UE440/470 Installation The safety controller UE440/470 is designed for installation on a 35 mm mounting rail in accordance with EN 50 022. The positioning place must at least comply with enclosure rating IP 54. The following steps are necessary after mounting and installation:...
To ensure the necessary electromagnetic compatibility (EMC), functional earthing (FE) must be connected. The control cabinet or assembly casing of the UE440/470 must at least comply with enclosure rating IP 54. You must connect the UE440/470 to the same voltage supply as the connected protective devices.
The cables are to be installed in accordance with the category to be used, (EN 954-1); ATTENTION e.g. protected installation, single sheath with shielding etc. You can connect several single channel input devices and sensors to the UE440/470. Fig. 19: Examples for the connection of single channel...
Fig. 31: Example for connection of ESPE via EFI If the OSSD status is passed on to the UE440/470 via EFI, the response time of the Note OSSDs of the safety controller increases due to the transfer time. Take this into account when planning the safety distance/protective field size of the connected ESPE (see Chapter 11.1 "Response times of OSSDs A and B"...
C4000 ( ). Both C4000s are connected via EFI. Two safety applications (application A and B) were configured in the UE440. The OSSD of the respective safety application is switched off due to the interruption of a protective field. The side access doors to the robot cells are monitored by safety switches ( ).
An internal restart interlock is configured for the safety application. A signal lamp ( ) indicates that a reset is required after switch-off of the OSSD. The OSSD of the UE440 is reactivated by actuating the connected reset button ( ).
Fig. 44: Simultaneous hazardous area protection The dangerous areas of two robot cells are protected via a UE440 with a safety laser scanner S3000 ( ). Two safety applications are configured in the UE440 for this. The S3000 monitors both hazardous areas with two simultaneous protective fields. The OSSD of the respective safety application is switched off due to an object in one of the protective fields.
Page 72
) indicate that a reset is required after one of the OSSDs is switched off. The respective OSSD of the UE440 is reactivated by actuating the connected reset button ( Three emergency stop input devices are connected ( ) and switch off both safety applications (robot cells) simultaneously.
A restart interlock is configured for the safety applications. A signal lamp ( ) indicates that a reset is required after switch-off of the OSSD. The OSSD of the UE440 is reactivated by actuating the connected reset button ( ).
Page 78
The connection cables of the reset button are installed in separate sheathing lines or protected. Result The UE440 reaches a value of 17 % PFD at SIL 3 in application A with the specified marginal conditions after 10 years. Fig. 52: Connection of the...
In the example, two separate protected applications are implemented with only one UE440. The hazardous point at the turntable of a robot cell is protected via a safety light curtain C4000 ( ). The hazardous area at the following robot cell is protected via a safety laser scanner S3000 ( ).
Operating Instructions UE440/470 8.1.2 Switch-on sequence After switch-on, the UE440/470 runs through the switch-on cycle. During the switch-on cycle, the 7-segment display indicates the device status. When commissioning a UE440/470, the following display values are possible: Tab. 25: 7-segment display...
Check the devices connected to the safety controller in accordance with the test notes from the accompanying operating instructions. For this purpose, the operating instructions of the ESPE from SICK AG contain the Note chapter "Tests before the first commissioning", and a "Manufacturer’s checklist" is found in the "Annex"...
7-segment display. The initial configuration of the UE440/470 must first be performed offline to set the type of connections of the safety controller. Only then can you perform the electrical installation and transfer the configuration to the safety controller.
Page 17). Please also read the user manual for the CDS and use the online help of the program. If desired, configure the connected ESPE from SICK AG in the CDS as well. Please read the corresponding operating instructions of the ESPE and the user manual for the CDS and use the online help of the program for this purpose.
"Test notes" on Page 85. ATTENTION The Lock-out operating status With certain malfunctions or a faulty configuration, the UE440/470 enters the safe Lock- out status. The 7-segment display of the safety controller shows the corresponding error. To place the device back in operation: Rectify the cause of the malfunction as per Tab.
10.4 Displays of the 7-segment display This section explains the meaning of the 7-segment display. A description of the positions and symbols used at the UE440/470 is found in Section 3.3 "Display elements" on Page 15. Tab. 28: Error displays of the...
Technical data 11.1 Response times of OSSDs A and B The response time of the UE440/470 is not to be set the same as the overall response time of the safety application. When considering the response time, you must calculate the response times for the individual signal paths (e.g.
Page 100
131 ms Special case: Combination of UE440/470 with C4000 If the operating mode switch-over is transferred from the UE440/470 via EFI to a C4000, the input filter time of the C4000 is to be observed (see operating instructions "C4000 Standard/Advanced").
System plug Operating instructions and CDS (Configuration & Diagnostic Software) on CD You will require the release code for the UE440/470 for CDS (see Section 12.3.2 "CDS Note and connection cable" on Page 106), which is not included with the delivery.
Need help?
Do you have a question about the UE440 and is the answer not in the manual?
Questions and answers