HIQuad X System Benefits
• One common engineering platform
• Higher performance
• Enhanced reload functions
• Comprehensive communication options
• Safe communication between HIMA systems
• Implementation of the proven HIMA security concept
Modernization Benefits
• Shorter turnaround times for modernization
• Less modernization effort compared to new installation
• No changes of I/O modules including field wiring
Technical Highlights
• Two systems: H51X and H41X
• Common usage of the same modules for H51X and H41X
• Supports 24 existing HIQuad I/O modules
• Per H51X system up to 16 I/O extension racks with up to 256 I/O modules
• Per H41X system with up to one I/O extension rack with up to 28 I/O modules
• Flexible I/O architecture mono and redundant loops can be mixed, which reduces footprint
• Reload of application, hardware and communication
• Reduced cycle times
• Faster REAL calculation
• Freedom of interference between F-CPU 01 and I/O modules
• Cross connection between modules increases system availability
• Multitasking with up to 32 application programs
• Improved diagnosis for faster maintenance and troubleshooting
• Improved haptics
• Extended system bus
• Better EMC stability
HIQuad X is a programmable electronic safety system made by HIMA. The flexible and scalable
system family is a further development of HIQuad, which has been in use within various applications
in the process industries for over 30 years.
The modernization combines tried-and-tested HIQuad I/O technology with the high-availability and
high-performance HIMax system technology. HIQuad X is programmable with SILworX, the HIMA
engineering tool. HIQuad X safety systems are installed if restrictive safety requirements must be
fulfilled – without any compromises on system availability. The safety PLC can be used on a centralized
as well as decentralized basis. A huge variety of I/O modules can be used – including intrinsically
safe SIL 3 modules.
Typical Applications
• Safety functions for
• de-energize to trip
• energize to trip
• Continuous and batch plants
• Burner and boiler protection
• Oil and gas pipelines
• Ships and offshore platforms
• etc.
HIMatrix is a range of versatile, commercial off-the-shelf (COTS) controllers for small to mid-scale
safety-criticalapplicationsintherail industry.Thestandardsystemispre-certifiedinaccordance
with CENELEC SIL 4 and can be used in any system integrator solution. Designed to be compact,
vibration and shock resistant, and having an extended operating temperature range, HIMatrix is
ideal for demanding environments, such as passenger trains. HIMatrix is easy to install and can be
used in networked and time-critical applications.
Characteristics
• CENELEC SIL 4
• Fast,flexible,compact
• Extremely cost-effective
• Distributed applications
• Applications with just a few I/O points
Engineering Tools
HIMatrix systems can be engineered using SILworX.
• Function block diagrams (FBD)
• Sequential function charts (SFC)
• Structured text (ST)
• C code (optional)
List of Certificates
• EN 50126:1999 (SIL 4)
• EN 50128:2011 (SIL 4)
• EN 50129:2003 (SIL 4)
• EN 50159:2010
• EN 50155:2007
• EN 50125-3:2003
Developed for applications requiring a few I/O points through to several hundred I/O points, HIMatrix
features cost effectiveness and high-level system performance. Ideal for networked and time-critical
applications, the HIMatrix series of safety-related controllers and remote I/O modules delivers excellent
system performance, compactness and easy assembly. HIMatrix optionally offers features like
multitasking, SOE recording and reload capability.
HIMatrix Systems
• SIL 3. PL e, Cat. 4
• Fast, flexible, compact
• Extremely cost effective
• Distributed applications
• Applications with just a few I/O points
Engineering Tools HIMatrix systems can be engineered using SILworX.
• Function block diagrams
• Sequential function charts
• Certified function blocks
• ST (Structured Text)
• C-Code (Optional)
List of Certificates
• IEC 61508 1–7:2010 (SIL 3)
• IEC 61511:2004 (SIL 3)
• EN ISO 13849-1:2008 (PL e)
• IEC 62061:2005 (SIL CL 3)
• EN 50156-1:2004 (SIL 3)
• EN 12067-2:2004
• EN 298:2003
• EN 230:2005
• NFPA 85:2011
• NFPA 86:2011
• EN 50126:1999 (SIL 4 CENELEC)
• EN 50128:2001 (SIL 4 CENELEC)
• EN 50129:2003 (SIL 4 CENELEC)
• EN 54-2 [… 2007 ]/NFPA 72:2010
• EN 50130-4 [… 2003]
Typical Applications
Process Industry:
• Pipelines
• Pharmaceutical application
• BMS solutions for single and multiple burner systems
• Fire & Gas systems
• Turbine monitoring
• Wellhead control
• Subsea applications version
Rail Sector:
• Signaling
• Railway crossings
• Rolling stock
• Power supply
Logistics and Machine Safety:
• Conveyor systems
• Cranes, crane networks and lifting equipment in production facilities or on docks
• AGV (Automated guided vehicle)
• Stamping and presses
• Painting plants
• Robot cells
• Elevators
• Lifters and elevating platforms
• Cable cars
• High-bay warehouses
• Complete solutions for airports
Reaction in the Event of a Fault
If the device detects a fault on a digital input, the user program processes a low level in
accordance with the de-energized to trip principle.
The device activates the FAULT LED.
In addition to the channel signal value, the user program must also consider the
corresponding error code.
The error code allows the user to configure additional fault reactions in the user program.
Safety-Related Digital Outputs
The controller is equipped with 8 digital outputs. The state (HIGH, LOW) of each output is
signaled by an individual LED.
At the maximum ambient temperature, each of the outputs 1…3 and 5…7 can be loaded
with 0.5 A, and outputs 4 and 8 can be loaded with 1 A or 2 A at an ambient temperature of
up to 50 °C.
Product Description
The safety-related F35 controller is a compact system located in a metal enclosure with 24
digital inputs, 8 digital outputs, 2 counters and 8 analog inputs.
The controller is available in 3 model variants for SILworX and 3 model variants for
ELOP II Factory, see Chapter 3.2. All variants are described in this manual.
The device is suitable for mounting in Ex-zone 2. see Chapter 4.1.5.
The device has been certified by the TÜV for safety-related applications up to SIL 3
(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).
Further safety standards, application standards and test standards are specified in the
certificate available on the HIMA website.
Safety Function
The controller is equipped with safety-related digital inputs and outputs, safety-related
counters and safety-related analog inputs.
Safety-Related Digital Inputs
The controller is equipped with 24 digital inputs. The state (HIGH, LOW) of each input is
signaled by an individual LED.
The input signals are captured as analog measurements and provided to the program as a
range of INT values from 0…3000 (0…30 V). Configurable thresholds are used to generate
BOOL values, see Table 26
The default setting is:
Low level: < 7 V
High level: > 13 V
The thresholds are set using system parameters taking the safety-related accuracy into
account, see Table 43 and Table 44.
Highlights
• XMR architecture and integrated redundancy management deliver “availability for life”
• Unique common-cause protection
• All changes, additions and maintenance procedures are possible without stopping
a HIMax system
• CPU self-educates when processor module is replaced
• Proof tests can be conducted online
• Stores up to 2.500 diagnostic entries in the processor module and 500 entries per
I/O module automatically
• Multitasking – run up to 32 user programs simultaneously
• Sequence of event (SOE), storage for 5.000 events, 1 ms resolution quality
• Redundant integrated and protected power distribution
• Two or three wiring inputs/outputs per channel to help eliminate additional wiring
• Remote rack functionality enables star topology
• HIMax – HIMatrix PES, redundant link via SafeEthernet
• Optimize process simulation and operator training with the HIMax Safety Simulator X-OTS
HIMax is a flexible platform for critical production processes that you can never afford
to have go down.
HIMax adapts to all I/O-count, response-time and fault-tolerance requirements as well
as centralized and distributed applications. HIMax delivers availability for life by enabling
uninterrupted system operation throughout your plant’s life cycle. Hardware and software
changes can be performed without system interruption. Alternative CPU modules make
HIMax suitable for meeting high performance and critical control requirements as well
as for use in small and mid-sized safety applications.
HIMax systems
• SIL 3. PL e
• SIL 4 CENELEC
• Nonstop operation
• Maximum performance
• Maximum configuration flexibility for life
• Different mechanical concepts
• Small, mid-sized and large applications
Safety Function
No safety function is performed by the communication module.
Reaction in the Event of a Fault
If fault occur, the module enters the temporary ERROR STOP. The module is then rebooted
and restarted from the INIT state.
No process data is exchanged with external communication partners in the ERROR STOP
state. No process data is transferred to process module.
HIMax COM Module Part Number
Each COM module forms a functional unit with the X-CB 001 02 connector board. Note that the
connector board must be separately purchased.
The fieldbus submodules are optional and must be mounted by the manufacturer. The fieldbus
submodule is selected when ordering the controller using the part number. Additionally, the
protocols used must be activated.
Processor System
The processor system uses self tests to control and monitor the communication.
Data is exchanged between the communication module and the processor module
is carried out via redundant system bus. The system bus has a redundant structure
for reasons of availability. Redundancy is only ensured if both system bus modules
are inserted in the base plates and configured accordingly.
Operating system and error code history are stored in a non-volatile memory and
can be read in SILworX via the diagnosis.