Archives

Safety Function

The module monitors the rotation speed of a turbine, independently of the HIMax overall system

and the user program. The module trips the turbine via the digital outputs .

Depending on the measuring input, the module determines the rotation speed and direction of a

sensor (pulse generator) with safety-related accuracy. To determine the rotation speed, one

turbine is equipped with three sensors. The rotation speed values calculated for the three

sensors are used for a 2oo3 evaluation and thus for calculating the rotation speed of the

turbine.

The module performs a 2oo3 evaluation of the digital input signals and provides the result to the

safety-related processor system and the user program.

The module ensures the outputs’ safety function using three switches connected in series for

each channel. This ensures that each output is two-fault-tolerant with respect to the switch.

Each switch of a channel can be individually switched off either via the system bus (I/O bus) or

via the second independent shutdown function (watchdog).

The safety function is performed for the inputs and outputs in accordance with SIL 3. with the

exception of the relay output, which is processed as a potential-free signaling contact

(changeover).

Reaction in the Event of a Fault

If the safety-related processor system of the module detects a module fault during operation, the

module adopts the safe state:

 0 is output for the Rotation Speed parameter and 0 (0 = unequal) for the Rotation Sense

parameter.

 All the assigned input variables transmit the initial value to the user program. The initial

values must be set to 0 to ensure that the input variables transmit the value 0 to the user

program if a fault occurs.

 All the outputs are de-energized in accordance with the de-energize to trip principle.

The module can be used to realize applications in accordance with API 670. The module

complies with the turbine requirements for rotation speed monitoring and trip routines defined in

API 670. The rotation speed monitoring and the trip routines are independent of the overall

HIMax system and the user program.

The trip function complies with the requirements specified in the Machinery Directive.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061) as well as Cat. 4 and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the module and the HIMax system.

The module is inserted in redundant connector boards to increase availability through module

redundancy. To this end, the base plate must be equipped with at least two adjacent slots.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

Product Description

X-MIO 7/6 01 is a overspeed trip module intended for use in the programmable electronic

system (PES) HIMax.

Only sensors (pulse generators) either providing pulses or pulses with a static rotation sense

may be connected to the measuring inputs. HIMA recommends using sensors of the same type

to reduce divergence among the measured values to the greatest extent possible.

The module monitors the rotation speed and, optionally, the acceleration of a turbine with

respect to configurable thresholds. It also shuts down the turbine through the trip function when

the thresholds are violated, see Chapter 4.4.2 and Chapter 4.4.3.

The trip function is implemented in the module’s operating system. It operates therefore

interference-free and independently of the HIMax overall system and the user program. The trip

function is triggered within the module cycle if the evaluation of the measuring or digital inputs

results in a trip condition, see Chapter 4.4.4.

Product Description

The X-AI 32 02 analog input module is intended for use in the programmable electronic

system (PES) HIMax.

The module can be inserted in any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

The module is used to evaluate up to 32 analog input signals.

The module is suitable for sequence of events recording (SOE). Events are recorded within

a module cycle of 2 ms, refer to Chapter 4.3 for more information.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards

used to test and certify the modules and the HIMax system.

Safety Function

The module measures the current of the connected devices with safety-related accuracy,

providing the transmitter supply with a guaranteed minimum voltage.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit

the initial value to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to

the user program if a fault occurs. If the raw value is evaluated instead of the process

value, the user must program the monitoring function and the value in the event of faults

from within the user program.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a FTA

is used, a system cable is required to connect the connector board to the FTA. Connector

boards, system cables and FTAs are not included within the scope of delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Product Description

The X-CI 24 01 counter module is intended for use in the programmable electronic system

(PES) HIMax.

The counter module can be inserted in any of the base plate slots with the exception of the

slots reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

The counter module is used to count the pulses, to measure the frequency and the

rotational speed and, if defined, to recognize the rotation direction. Two channels are

required to use the recognition of rotation direction function, see Chapter 4.6.4.

Proximity switches in accordance with EN 60947-5-6 (NAMUR) or control circuit devices of

type 3 in accordance with EN 61131-2 can be connected to the counter module. Proximity

switches and control circuit devices may not be operated simultaneously.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards

used to test and certify the modules and the HIMax system.

Safety Function

The counter module samples the switching operations of the connected sensors with

safety-related accuracy (1 % if the frequency is measured, ± 1 pulse if the pulse is

measured) .

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the counter module enters the safe state. The rotation speed is set to 0.

The user program retains its last valid process value for the counter readings.

The module activates the Error LED on the front plate.

Scope of Delivery

The counter module must be installed on a suitable connector board to be able to operate.

If a FTA is used, a system cable is required to connect the connector board to the FTA.

Connector boards, sensor selection plug, system cables and FTAs are not included within

the module’s scope of delivery.

The various connector boards are described in Chapter 3.6. the system cables in Chapter

3.7. The FTAs are described in separated manuals.

Safety Function

The module evaluates the input signals of proximity switches and contact makers and

monitors the proximity switch / contact maker circuit for open-circuits and short-circuits.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit

the initial value to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to

the user program if a fault occurs. If the raw value is evaluated instead of the process

value, the user must program the monitoring function and the value in the event of faults

from within the user program.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a FTA

is used, a system cable is required to connect the connector board to the FTA. Connector

boards, system cables and FTAs are not included within the scope of delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Product Description

The X-DI 32 02 digital input module is intended for use in the programmable electronic

system (PES) HIMax.

The module can be inserted in any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

The module is used to evaluate up to 32 safety proximity switches (e.g., P+F), proximity

switches in accordance with EN 60947-5-6 (NAMUR) or wired contacts.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards

used to test and certify the module and the HIMax system.