5-13 Safety Function
5-13 Safety Function
Overview of Safety Function
The safety function is designed so that the safety stop function of category 0 (uncontrolled stop) specified in IEC 60204-1 is used to meet the safety standard of Stop PLd under ISO
13849-1.
The safety input function allows inverter output when current is flowing to both the GS1 and
GS2 terminals. When the safety input function actuates, the Inverter's output transistor operation is stopped while ensuring the level of safety conforming to the above standard, and the electric power to the motor stops (the motor executes a free-run stop).
It takes less than 10 ms after the safety input is received until the output is stopped.
An Emergency Shutoff (E37) message is displayed and a trip occurs. In the case of a competitive
External Trip (E12) setting, the Emergency Shutoff (E37) setting is given priority unless at poweron.
Note. If the EDM function is not used, PLc under ISO13849-1 applies.
Safety Function Setting
Turn ON the safety function selector switch while the Inverter power is turned OFF. The GS1 input and GS2 input are allocated to multi-function input terminals S3/GS1 and S4/GS2 automatically.
If the EDM output (safety monitor output) is used, turn ON the EDM function selector switch.
The EDM output is allocated to multi-function output terminal P11/EDM automatically.
Safety function selector switch
OFF ON
EDM function selector switch
OFF
(normal)
ON
(EDM)
5
Take note that when the safety function selector switch or EDM function selector switch is turned
ON and then OFF, the input/output terminals previously allocated to the GS1/GS2 inputs and
EDM output are reset to "no," meaning no allocation and the I/O contact selection remains NC contact.
SYSDRIVE MX2 Series USER'S MANUAL (3G3MX2-A@@@@)
5-170
5-13 Safety Function
5
How to Wire for/Use Safety Function
Observe the above safety standard and follow the wiring example. Be sure to use both the GS1 input and GS2 input to design a system where both GS1 input and GS2 input are turned OFF upon actuation of the safety function.
Upon detecting an OFF state of the GS1 input or GS2 input, the Inverter actuates the safety function and stops the output.
Reference
The safety monitor (62: EDM) turns ON when the output is cut off upon detection of an OFF state of both the GS1 input and GS2 input signals. If the output stopped due to the safety function but the EDM output did not turn ON, check the GS1 and GS2 input circuits and EDM detection circuit.
Parameter
No.
C003
C004
C013
Function name
Multi-function
Input Selection
Data
77: GS1 input (safety input 1)
78: GS2 input (safety input 2)
*1
*1
Default setting
18
12
Unit
−
C014
C021
C031 b145
Multi-function
Input Operation
Selection
Multi-function
Output Terminal
P1/EDM Selection
Multi-function
Output Terminal
P1/EDM Contact
Selection
GS Input
Operation
Selection
01: NC (NC contact)
00: Not tripped (Cut off by hardware)
01: Tripped
*3 , *4
*1
62: EDM (Safety device monitor)
00: NO (NO contact)
*2
*2
00
00
00
00
−
−
−
−
*1.When the safety function selector switch is turned ON, this setting is applied forcibly and the selection can no longer be changed.
*2.When the EDM function selector switch is turned ON, this setting is applied forcibly and the selection can no longer be changed.
*3. An E37 trip occurs. In the case of a competitive External Trip (E12) setting, "E37" setting is given priority unless at power-on.
*4.If either the GS1 or GS2 input terminal turns ON while an E37 trip is still present, safety cannot be ensured by the safety function.
5-171
SYSDRIVE MX2 Series USER'S MANUAL (3G3MX2-A@@@@)
5-13 Safety Function
Wiring Example
Wiring Example
Wiring Example When EDM is Used (Conforming to PLd under ISO13849-1)
Safety switch
Reset switch
EDM
(feedback) input
+24 V
Safety input
T11
T12
T31 T32
T33
A1
+24 V
(The figure shows an emergency-stop pushbutton switch.)
PC
T21
T22
A2
S14
S24
G9SX-GS226-T15-RC
Safety output
EDM
GS1
GS2
PSC
SC
Safety Unit
* Certified under the applicable safety
standards IEC61508, ISO13849.
3G3MX2
KM1
M
When the emergency stop button is pressed, the current flowing through GS1 and GS2 is cut off and the Inverter output is cut off. As a result, the motor enters a free-run status. This operation corresponds to stop category 0 under IEC60204-1.
Note 1. Shown above are wirings that apply when the multi-function input terminals are used based on the source logic. If they are used based on the sink logic, the wiring must be changed. For details,
refer to "Connection to Programmable Controller (PLC)" on page 2-22.
Note 2. The safety relay and emergency shutoff input signal line must use a shielded coaxial cable such as RG174/U (by LAPP) per MIL-C17 or KX3B per NF C 93-550 with an outer diameter of 2.8 mm and length of 20 m or less. Ground the shield.
Note 3. All inductor parts such as relays and contactors must have an overvoltage protection circuit.
5
Example of System Components
Shown below is an example of peripherals conforming to the applicable safety standards which are recommended as system components.
Series name
G9SA
G9SX
NE1A
Model
G9SA-301
NE1A-SCPU01-V1
Manufacturer
OMRON Corporation ISO13849-2 cat4, SIL3
G9SX-GS226-T15-RC OMRON Corporation
OMRON Corporation
Applicable standard
IEC61508 SIL1-3
IEC61508 SIL3
Date of certification
06.06.2007
04.11.2004
27.09.2006
The Inverter meets the PLd safety requirement only when combined with PLd-compliant equipment.
SYSDRIVE MX2 Series USER'S MANUAL (3G3MX2-A@@@@)
5-172
5
5-13 Safety Function
Periodic Inspection
If the current stops flowing to either the GS1 or GS2 terminal while the safety function is operating, the Inverter cuts off output. Accordingly, absence of defect in GS1 and GS2 wirings must be inspected periodically. Be sure to conduct a periodic inspection once a year.
The wiring inspection method for GS1/GS2/EDM is shown below.
Terminal
GS1
GS2
EDM
Inverter output
Current OFF
Current OFF
ON
Output cut off
Current ON
Current OFF
OFF
Output cut off
Status
Current OFF
Current ON
OFF
Output cut off
Current ON
Current ON
OFF
Output available
Precautions
To make sure the safety function operates normally, evaluate the overall safety system against all risk factors.
The safety function does not mean the input is cut off or output is electrically insulated. Before installation or maintenance work, turn off the Inverter input power supply.
The wires used for the safety function must be 30 m or shorter.
If common GS1 and GS2 are used for two or more Inverters, be sure to install a diode according
to "Note on Use of Multiple Inverters" on page 2-24. GS1 and GS2 may turn ON, thus causing the
Inverter to produce output even in the safety mode.
5-173
SYSDRIVE MX2 Series USER'S MANUAL (3G3MX2-A@@@@)
