HIMatrix Safety-Related Controller F31 02 Manual

HIMatrix Safety-Related Controller F31 02 Manual

1.1 Structure and use of this manualThe contents of this manual are part of the electronic system described by the hardware of HIMatrix programmable controller.This manual is divided into the following main chapters:Introduce safety, product description, start-up, operation and maintenance.HIMatrix controller can be used in programming tools SILworX and ELOP II factory.Which programming tool can be used depends on the processor operating system of.HIMatrix controller, please refer to the following table:Programming tool processor operating system communication operating system SILworX CPU operating system version and higher, COM operating system version 12 and higher ELOP II factory CPU operating system version 6.x COM operating system version 11.x Table HIMatrix controller programming tool in the manual, the differences are explained by using the following contents: independent chapters, table of differences between different versions.

2 Safety 

All safety information, notes and instructions specified in this document must be strictly observed. The product may only be used if all guidelines and safety instructions are adhered to. 

This product is operated with SELV or PELV. No imminent risk results from the product itself. 

The use in Ex-Zone is permitted if additional measures are taken. 

2.1 Intended Use 

HIMatrix components are designed for assembling safety-related controller systems. 

When using the components in the HIMatrix system, comply with the following general requirements. 

2.1.1 Environmental Requirements

3 Product Description 
The safety-related F31 02 controller is a compact system in a metal housing with 20 digital inputs and 8 digital outputs. 
The controller is available in various model variants for SILworX and ELOP II Factory, see 
Table 4. 
The device is suitable for mounting in Ex-zone 2, see Chapter 4.1.4. 
The device is TÜV-certified for safety-related applications up to SIL 3 (IEC 61508, IEC 61511 and IEC 62061), Cat. 4 and PL e (EN ISO 13849-1) and SIL 4 (EN 50126, EN50128 and EN 50129). Further safety standards, application standards and test standards are specified in the certificates available on the HIMA website. 
3.1 Safety Function 
The controller is equipped with safety-related digital inputs and outputs. 
3.1.1 Safety-Related Digital Inputs 
The controller is equipped with 20 digital inputs. The state (HIGH, LOW) of each input is signaled by an individual LED. Mechanical contacts without own power supply or signal power source can be connected to the inputs. 
Potential-free mechanical contacts without own power supply are fed via an internal shortcircuit-proof 24 V power source (LS+). Each of them supply a group of 4 mechanical contacts. 
Figure 1 shows how the connection is performed. With signal voltage sources, the corresponding ground must be connected to the input (L-), see Figure 1. DI 1 DI 2

Connection of signal power sources 
Figure 1: Connections to Safety-Related Digital Inputs For the external wiring and the connection of sensors, apply the de-energized-to-trip principle. Thus, if a fault occurs, the input signals adopt a de-energized, safe state (low level). If an external wire is not monitored, an open-circuit is considered as safe low level

3.1.1.1 Reaction in the Event of a FaultIf the device detects a fault on a digital input, the user program processes a low level inaccordance with the de-energized to trip principle. The device activates the FAULT LED.In addition to the channel signal value, the user program must also consider the correspondingerror code.The error code allows the user to configure additional fault reactions in the user program. 3.1.1.2 Line Control Line control is used to detect short-circuits or open-circuits and can be configured for the F31system, e.g., on EMERGENCY STOP inputs complying with Cat. 4 and PL e in accordance withEN ISO 13849-1.To this end, connect the digital outputs DO 1 through DO 8 of the system to the digital inputs DIof the same system as follows:The controller pulses the digital outputs to detect the line short-circuits and open-circuits on thelines connected to the digital inputs. To do so, configure the Value [BOOL] -> system variable inSILworX or the DO[01].Value system signal in ELOP II Factory. The variables for the pulsedoutputs must begin with channel 1 and reside in direct sequence, one after the other.

If the following faults occur, the FAULT LED located on the front plate of the controller blinks, the inputs are set to low level and an (evaluable) error code is created:  Cross-circuit between two parallel wires.  Invalid connections of two lines (e.g., DO 2 to DI 3),  Earth fault on one wire (with earthed ground only).  Open-circuit or open contacts, i.e., including when one of the two EMERGENCY STOPswitches mentioned above has been engaged, the FAULT LED blinks and the error code iscreated.

3.1.2 Safety-Related Digital Outputs The controller is equipped with 8 digital outputs. The state (HIGH, LOW) of each output issignaled by an individual LED (HIGH, LOW).At the maximum ambient temperature, theoutputs 1...3 and 5...7 can be loaded with 0.5 Aeach; and outputs 4 and 8 can be loaded with 1 A or with 2 A at an ambient temperature of upto 50 °C.If an overload occurs,one or all digital outputs are switched off. If the overload is removed, theoutputs are switched on again automatically, see Table 17.The external wire of an output is not monitored, however, a detected short-circuit is signaled.