Archives

HIQuad X is a programmable electronic safety system made by HIMA. The flexible and scalable

system family is a further development of HIQuad, which has been in use within various applications

in the process industries for over 30 years.

The modernization combines tried-and-tested HIQuad I/O technology with the high-availability and

high-performance HIMax system technology. HIQuad X is programmable with SILworX, the HIMA

engineering tool. HIQuad X safety systems are installed if restrictive safety requirements must be

fulfilled – without any compromises on system availability. The safety PLC can be used on a centralized

as well as decentralized basis. A huge variety of I/O modules can be used – including intrinsically

safe SIL 3 modules.

Typical Applications

• Safety functions for

•  de-energize to trip

•  energize to trip

• Continuous and batch plants

• Burner and boiler protection

• Oil and gas pipelines

• Ships and offshore platforms

• etc.

HIMatrix is a range of versatile, commercial off-the-shelf (COTS) controllers for small to mid-scale

safety-criticalapplicationsintherail industry.Thestandardsystemispre-certifiedinaccordance

with CENELEC SIL 4 and can be used in any system integrator solution. Designed to be compact,

vibration and shock resistant, and having an extended operating temperature range, HIMatrix is

ideal for demanding environments, such as passenger trains. HIMatrix is easy to install and can be

used in networked and time-critical applications.

Characteristics

• CENELEC SIL 4

• Fast,flexible,compact

• Extremely cost-effective

• Distributed applications

• Applications with just a few I/O points

Engineering Tools

HIMatrix systems can be engineered using SILworX.

• Function block diagrams (FBD)

• Sequential function charts (SFC)

• Structured text (ST)

• C code (optional)

List of Certificates

• EN 50126:1999 (SIL 4)

• EN 50128:2011 (SIL 4)

• EN 50129:2003 (SIL 4)

• EN 50159:2010

• EN 50155:2007

• EN 50125-3:2003

Developed for applications requiring a few I/O points through to several hundred I/O points, HIMatrix

features cost effectiveness and high-level system performance. Ideal for networked and time-critical

applications, the HIMatrix series of safety-related controllers and remote I/O modules delivers excellent

system performance, compactness and easy assembly. HIMatrix optionally offers features like

multitasking, SOE recording and reload capability.

HIMatrix Systems

• SIL 3. PL e, Cat. 4

• Fast, flexible, compact

• Extremely cost effective

• Distributed applications

•  Applications with just a few I/O points

Engineering Tools HIMatrix systems can be engineered using SILworX.

• Function block diagrams

• Sequential function charts

• Certified function blocks

• ST (Structured Text)

• C-Code (Optional)

List of Certificates

• IEC 61508 1–7:2010 (SIL 3)

• IEC 61511:2004 (SIL 3)

• EN ISO 13849-1:2008 (PL e)

• IEC 62061:2005 (SIL CL 3)

• EN 50156-1:2004 (SIL 3)

• EN 12067-2:2004

• EN 298:2003

• EN 230:2005

• NFPA 85:2011

• NFPA 86:2011

• EN 50126:1999 (SIL 4 CENELEC)

• EN 50128:2001 (SIL 4 CENELEC)

• EN 50129:2003 (SIL 4 CENELEC)

• EN 54-2 [… 2007 ]/NFPA 72:2010

• EN 50130-4 [… 2003]

Typical Applications

Process Industry:

• Pipelines

• Pharmaceutical application

•  BMS solutions for single and multiple burner systems

• Fire & Gas systems

• Turbine monitoring

• Wellhead control

• Subsea applications version

Rail Sector:

• Signaling

• Railway crossings

• Rolling stock

• Power supply

Logistics and Machine Safety:

• Conveyor systems

•  Cranes, crane networks and lifting equipment in production facilities or on docks

• AGV (Automated guided vehicle)

• Stamping and presses

• Painting plants

• Robot cells

• Elevators

• Lifters and elevating platforms

• Cable cars

• High-bay warehouses

• Complete solutions for airports

Reaction in the Event of a Fault

If the device detects a fault on a digital input, the user program processes a low level in

accordance with the de-energized to trip principle.

The device activates the FAULT LED.

In addition to the channel signal value, the user program must also consider the

corresponding error code.

The error code allows the user to configure additional fault reactions in the user program.

Safety-Related Digital Outputs

The controller is equipped with 8 digital outputs. The state (HIGH, LOW) of each output is

signaled by an individual LED.

At the maximum ambient temperature, each of the outputs 1…3 and 5…7 can be loaded

with 0.5 A, and outputs 4 and 8 can be loaded with 1 A or 2 A at an ambient temperature of

up to 50 °C.

Product Description

The safety-related F35 controller is a compact system located in a metal enclosure with 24

digital inputs, 8 digital outputs, 2 counters and 8 analog inputs.

The controller is available in 3 model variants for SILworX and 3 model variants for

ELOP II Factory, see Chapter 3.2. All variants are described in this manual.

The device is suitable for mounting in Ex-zone 2. see Chapter 4.1.5.

The device has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Further safety standards, application standards and test standards are specified in the

certificate available on the HIMA website.

Safety Function

The controller is equipped with safety-related digital inputs and outputs, safety-related

counters and safety-related analog inputs.

Safety-Related Digital Inputs

The controller is equipped with 24 digital inputs. The state (HIGH, LOW) of each input is

signaled by an individual LED.

The input signals are captured as analog measurements and provided to the program as a

range of INT values from 0…3000 (0…30 V). Configurable thresholds are used to generate

BOOL values, see Table 26

The default setting is:

Low level:  < 7 V

High level:  > 13 V

The thresholds are set using system parameters taking the safety-related accuracy into

account, see Table 43 and Table 44.

Highlights

• XMR architecture and integrated redundancy management deliver “availability for life”

• Unique common-cause protection

• All changes, additions and maintenance procedures are possible without stopping

a HIMax system

• CPU self-educates when processor module is replaced

• Proof tests can be conducted online

• Stores up to 2.500 diagnostic entries in the processor module and 500 entries per

I/O module automatically

• Multitasking – run up to 32 user programs simultaneously

• Sequence of event (SOE), storage for 5.000 events, 1 ms resolution quality

• Redundant integrated and protected power distribution

• Two or three wiring inputs/outputs per channel to help eliminate additional wiring

• Remote rack functionality enables star topology

• HIMax – HIMatrix PES, redundant link via SafeEthernet

• Optimize process simulation and operator training with the HIMax Safety Simulator X-OTS

HIMax is a flexible platform for critical production processes that you can never afford

to have go down.

HIMax adapts to all I/O-count, response-time and fault-tolerance requirements as well

as centralized and distributed applications. HIMax delivers availability for life by enabling

uninterrupted system operation throughout your plant’s life cycle. Hardware and software

changes can be performed without system interruption. Alternative CPU modules make

HIMax suitable for meeting high performance and critical control requirements as well

as for use in small and mid-sized safety applications.

HIMax systems

• SIL 3. PL e

• SIL 4 CENELEC

• Nonstop operation

• Maximum performance

• Maximum configuration flexibility for life

• Different mechanical concepts

• Small, mid-sized and large applications

Safety Function

No safety function is performed by the communication module.

Reaction in the Event of a Fault

If fault occur, the module enters the temporary ERROR STOP. The module is then rebooted

and restarted from the INIT state.

No process data is exchanged with external communication partners in the ERROR STOP

state. No process data is transferred to process module.

HIMax COM Module Part Number

Each COM module forms a functional unit with the X-CB 001 02 connector board. Note that the

connector board must be separately purchased.

The fieldbus submodules are optional and must be mounted by the manufacturer. The fieldbus

submodule is selected when ordering the controller using the part number. Additionally, the

protocols used must be activated.

Processor System

The processor system uses self tests to control and monitor the communication.

Data is exchanged between the communication module and the processor module

is carried out via redundant system bus. The system bus has a redundant structure

for reasons of availability. Redundancy is only ensured if both system bus modules

are inserted in the base plates and configured accordingly.

Operating system and error code history are stored in a non-volatile memory and

can be read in SILworX via the diagnosis.

Product Description

The X-COM 01 communication module is intended for use in the programmable electronic

system (PES) HIMax.

The module is inserted into any of the base plate slots with the exception of the slots reserved

for system bus modules. For more information, refer to the System Manual (HI 801 001 E).

The module is approved for use in the safety-related HIMax system and can be used to

transport safety-related protocols.

The module ensures communication with systems via Ethernet and fieldbus interfaces with

safeethernet and different standard protocols.

Processor System

The processor system uses self tests to control and monitor the communication.

Data is exchanged between the communication module and the processor module

is carried out via redundant system bus. The system bus has a redundant structure

for reasons of availability. Redundancy is only ensured if both system bus modules

are inserted in the base plates and configured accordingly.

Operating system and error code history are stored in a non-volatile memory and

can be read in SILworX via the diagnosis.

Ethernet Switch

Integrated Ethernet switch to configure different networks.

Ethernet interface

The communication module is equipped with four Ethernet switch ports connected to the

Ethernet interface of the processor system via an integrated Ethernet switch.

Safety Function

The module evaluates the digital input signals and provides them to the user program.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit

the initial value (default value = 0) to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to

the user program if a fault occurs.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a FTA

is used, a system cable is required to connect the connector board to the FTA. Connector

boards, system cables and FTAs are not included within the scope of delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.