HIMatrix F3 DIO 8/8 01 Safety-Related Controller

HIMatrix F3 DIO 8/8 01  Safety-Related Controller

Product clarification

The safety-related F3 DIO 8/8 01 long-distance I/O is a compact system in a metal shell, with 8 digital inputs, 8 digital DO+ outputs (L- grounding), 2 digital DO- outputs (S+ grounding) and 2 pulse outputs. Digital outputs DO4+, DO8+, DO4- and DO8- can also be connected as two poles. Long-distance I/O can be used for the type variant of SILworX and the type variant factory of ELOP II, see Chapter 3.2. All variants are described in this manual. Long-distance I/O is used to extend the I/O level of HIMax and HIMatrix controllers, and is connected to them through secure Ethernet. Long-distance I/O itself cannot run user programs. HIMatrix long-distance I/o does not support multi-hosts. Long-distance I/O is suitable for installation in Ex-zone 2. See Chapter 4.1.4. The equipment has passed tü' safety-related use certification and reached SIL 3 (IEC 61508, IEC 61511 and IEC 62061). 4 (EN 954-1) and 1(ISO 13849-1). Further, the safety specifications, use specifications and test specifications stipulated in the certificate can be consulted on the HIMA website. 3.1 Safety Function Long-distance I/O is equipped with safety-related digital input and output. Input Value Input is securely transmitted to the connected controller via secure Ethernet. This connected controller securely assigns values to the output via secure Ethernet. 3.1.1 Safety-related digital input Long-distance I/O is equipped with 20 digital inputs. The state (high, low) of each input is signaled by a single led. Can be connected with mechanical contact input without its own power supply or signal power supply. Potential-free mechanical contacts without their own power supply pass through internal short-circuit prevention 24 V power supply (LS+). Each of them provides a set of four mechanical touches.

For the external wiring and the connection of sensors, apply the de-energized-to-tripprinciple. Thus, if a fault occurs, the input signals adopt a de-energized, safe state (lowlevel).If an external wire is not monitored, an open-circuit is considered as safe low level.

3.1.1.1 Reaction in the Event of a FaultIf the device detects a fault on a digital input, the user program processes a low level inaccordance with the de-energized to trip principle.

The device activates the FAULT LED.In addition to the channel signal value, the user program must also consider thecorresponding error code.

The error code allows the user to configure additional fault reactions in the user program.

3.1.1.2 Line Control

Line control is used to detect short-circuits or open-circuits and can be configured for theF3 DIO 8/8 01 system, e.g., on EMERGENCY STOP inputs complying with Cat. 4 inaccordance with EN 954-1.To this end, connect the digital outputs TO 1 through TO 2 of the system to the digitalinputs DI of the same system as follows:

 EMERGENCY STOP 1

 EMERGENCY STOP 2

 EMERGENCY STOP devices in

accordance with EN 60947-5-1 and

EN 60947-5-5

Figure 2: Line Control

The remote I/O pulses the pulsed outputs to detect the short-circuits and open-circuits onthe digital inputs. To do so, configure the Value [BOOL] -> system variable in SILworX orthe DO[01].Value system signal in ELOP II Factory. The variables for the pulsed outputsmust begin with channel 1 and reside in direct sequence, one after the other. 

If the following faults occur, the FAULT LED located on the front plate of the device blinks,the inputs are set to low level and an (evaluable) error code is created:

Cross-circuit between two parallel lines,Improper connections of two lines (e.g., TO 2 to DI 3),Earth fault of a line (with earthed ground only),Open-circuit or open contacts, i.e., including when one of the two EMERGENCY STOP

switches mentioned above has been engaged, the FAULT LED blinks and the errorcode is created.

For more information on how to configure line control in the user program, refer to theHIMatrix Engineering Manual (HI 800 101 E).

3.1.2 Safety-Related Digital Outputs

The remote I/O is equipped with 8 digital outputs DO+ (ground L-) und 2 digital outputs DO-(ground S+). The state (HIGH, LOW) of each output is signaled by an individual LEDAt the maximum ambient temperature, the DO+ outputs 1...3 and 5...7 can beloaded with0.5 A each, and DO+ outputs 4 and 8 can be loaded with 1 A or with 2 A at an ambienttemperature of up to 40 °C.At the maximum ambient temperature, the DO- outputs 4- and 8- can be loaded with 1 Aeach or with 2 A at an ambient temperature of up to 40 °C.

The digital outputs DO4+, DO8+, DO4- and DO8- can be connected as one-pole or twopole switching connections. The remaining outputs are only set up for one-pole switching

connections.With one-pole switching outputs, ensure that the system's L- ground from thecorresponding channel group is used for the DO+ outputs and the system's S+ ground isused for the DO- outputs, see Table 17. The S+ ground is limited by the system to amaximum current of 8 A and obtained from the 24 V voltage connection.

The external wire of an output is not monitored, however, a detected short-circuit issignaled.With two-pole switching outputs, the L+ switching output DO4+ must be connected to the Lswitching output DO4- and the L+ switching output DO8+ to the L- switching output DO8-.

This type of connection must be set via the DO2[xx].Two-Pole system parameter. 

During two-pole-pole operation, a line diagnosis is performed to detect potential external short-circuits to L+ and L-. Time on delay is required to detect external short-circuits with an inductive or capacitive load or a lamp load. This delay can be configured using the Time on delay system parameter. In the range of 0...30 ms, the value can be set in steps of 1 ms.