Fail-Safe Circuits - Omron CQM1H - 08-2005 Operation Manual

Fail-safe Circuits

4-1

Fail-safe Circuits

!WARNING
Supply Power to the PC
before Outputs
Managing PC Errors
Managing Output
Malfunctions
Emergency Stop Circuit
102
You must set up safety circuits outside of the PC to prevent dangerous condi-
tions in the event of errors in the PC or external power supply.
Take any safety measures necessary outside of the PC to ensure the safety of
the system in the event of an error due to PC malfunction or external factors.
Observe the following precautions. Failure to do so could lead to serious or
possibly fatal injury.
• Provide interlock circuits, limit circuits, emergency stop circuits, and simi-
lar safety measures in external circuits (i.e., not only in the Programmable
Controller).
• Operation will stop and all outputs will turn OFF when the PC detects an
error or when a FALS(07) (fatal error) instruction is executed. You must
take any safety measures necessary outside of the PC to ensure the
safety of the system in the event that all outputs turn OFF.
• It is possible for an output to remain ON or OFF due to a malfunction in
the internal circuits of an Output Unit, such as a relay or transistor mal-
function. Provide any circuits necessary outside of the PC to ensure the
safety of the system in the event that an output fails to turn OFF or ON.
• If there is an overload or a short-circuit in the PC's 24-V DC service power
supply, the voltage may drop and the outputs may turn OFF. Take any
safety measures necessary outside of the PC to ensure the safety of the
system in the event that outputs turn OFF.
If the PC's power supply is turned ON after the controlled system's power sup-
ply, outputs in Units such as DC Output Units may malfunction momentarily.
To prevent any malfunction, add an external circuit that prevents the power
supply to the controlled system from going ON before the power supply to the
PC itself.
When any of the following errors occurs, PC operation will stop and all outputs
from Output Units will be turned OFF.
• Operation of the Power Supply Unit's overcurrent protection circuit
• A CPU error (watchdog timer error)
• A fatal error* (memory error, no END(01) instruction error, I/O bus er-
ror, too many I/O points error, or FALS fatal system error)
Be sure to add any circuits necessary outside of the PC to ensure the safety
of the system in the event of an error that stops PC operation.
Note *When a fatal error occurs, all outputs from Output Units will be turned OFF
even if the IOM Hold Bit has been turned ON to protect the contents of I/O
memory. (When the IOM Hold Bit is ON, the outputs will retain their previous
status after the PC has been switched from RUN/MONITOR mode to PRO-
GRAM mode.)
It is possible for an output to remain ON due to a malfunction in the internal
circuitry of the Output Unit, such as a relay or transistor malfunction. Be sure
to add any circuits necessary outside of the PC to ensure the safety of the
system in the event that an output fails to go OFF.
The following example emergency stop circuit controls the power supply to
the controlled system so that power is supplied to the controlled system only
when the PC is operating. Program the Always ON Flag (SR 25313) as the
execution condition for an output point from an Output Unit and use this point
Section 4-1