Category: Industry Trends

Structure

The module is equipped with 12 relay outputs. Each relay output is switched by two contacts in

series. After every cycle, the module reads the status of the forcibly guided contacts and

compares it status with the output variables.

The relays in use have forcibly guided contacts (EN 50205) and can be used for safety

shutdowns. Forcibly guided contacts are connected with one another mechanically such that the

normally open and the normally closed contacts cannot be closed simultaneously.

All 12 relay outputs are electrically safely isolated from one another. Each relay output is safely

isolated from the voltage supply of the module by its own contact circuit. For safe insulation, the

air and creeping distances are designed in accordance with IEC 61131-2 for overvoltage class II

up to 300 V.

For burner management systems, the switching current must be limited to 60 % of the maximum

allowed value using an external fuse in accordance with EN 298 and EN 50256 (VDE 0116).

Reaction in the Event of a Fault

If the safety-related processor system of the module detects a module fault during operation, the

module adopts the safe state and all the outputs are de-energized in accordance with the ‘de-

energize to trip principle’. If a channel fault occurs, only the affected channel is switched off.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a Field

Termination Assembly (FTA) is used, a system cable is required to connect the connector board

to the FTA. Connector boards, system cables and FTAs are not included within the scope of

delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Product Description

The X-DO 12 01 relay module is intended for use in the programmable electronic system (PES)

HIMax.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, see System Manual (HI 801 001 E).

The module is equipped with 12 potential-free relay outputs with forcibly guided contacts. The

relay outputs are suitable for connecting ohmic and inductive loads.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061) as well as Cat. 4 and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the module and the HIMax system.

Safety Function

The module performs its safety function using two safety relays that are connected in series and

continuously monitored by the safety-related processor submodule.

The safety function is performed in accordance with SIL 3.

Structure

The module is equipped with 32 digital outputs. The outputs are not electrically isolated from

one another and from the voltage supply.

The module is equipped with a current limiting function, which limits the total current of all the

32 outputs. Additionally, the module monitors the total current for overload. If an overload is

present for longer than 100 ms, all the outputs are switched off and switched on again after ten

seconds. If the overload is still present, all the outputs are switched off again for ten seconds.

This process is repeated as long as the overload is present.

If an output overload is detected, the corresponding channel is switched off and automatically

switched on again after five seconds as soon as the overload is no longer present.

The processor system for the I/O module controls and monitors the I/O level. The data and

states of the I/O module are made available to the processor modules via the redundant system

bus. The system bus has a redundant structure for reasons of availability. Redundancy is only

ensured if both system bus modules are inserted in the base plates and configured in SILworX.

Safety Function

The module does not perform any safety-related functions.

Each switch of a channel can be individually switched off via the system bus (I/O bus).

The parameters and status for this module must not be used for safety functions.

Reaction in the Event of a Fault

If a channel fault occurs, the affected channel is switched off. If a module fault occurs,

all outputs are switched off.

If the system bus fails, the outputs are de-energized.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a Field

Termination Assembly (FTA) is used, a system cable is required to connect the connector board

to the FTA. Connector boards, system cables and FTAs are not included within the scope of

delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Product Description

X-DO 32 51 is a digital NonSIL output module intended for use in the programmable electronic

system (PES) HIMax.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, see System Manual (HI 801 001 E).

The module is equipped with 32 digital outputs that can be loaded with a nominal current of up

to 0.5 A per channel. At high level, a voltage equivalent to the supply voltage is present on the

corresponding output.

The outputs are suitable for connecting ohmic, inductive and capacitive loads and lamps.

It can be operated with safety-related modules and other NonSIL modules within one base

plate. Safety-related and NonSIL modules may not be wired redundantly.

The module is interference-free, in particular, with respect to EMC, electrical safety,

communication to the X-SB and X-CPU modules, as well as the user program.

Module and connector boards are mechanically coded, see Chapter 3.6.1. Coding avoids

installation of improper modules.

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards

used to test and certify the modules and the HIMax system.

Structure

The counter module has 24 inputs that can measure frequencies in the range of 0…20 kHz for

control circuit devices Type 3 and in the range of 0…10 kHz for proximity switches. A short-

circuit-proof supply is assigned to each input.

The 24 inputs of the counter module can either be configured for proximity switches or for

control circuit devices. Which configuration should be used is defined by plugging in the sensor

selection plug to the rear side of the connector board in use, see Chapter 4.2.2.

If proximity switches are used, the switching thresholds for open-circuits (OC) and short-circuits

(SC) are preset in accordance with EN 60947-5-6 (NAMUR). Short-circuit (SC) and open-circuit

(OC) monitoring is only allowed if the Proximity Switch setting is used.

The processor system for the I/O module controls and monitors the I/O level. The data and

states of the I/O module are made available to the processor modules via the redundant system

bus. The system bus has a redundant structure for reasons of availability. Redundancy is only

ensured if both system bus modules are inserted in the base plates and configured in SILworX.

Safety Function

The module does not perform any safety-related functions.

The parameters and status for this module must not be used for safety functions.

Reaction in the Event of a Fault

If a fault occurs, 0 is output as rotation speed and the user program retains its last valid process

value for the counter reading.

The module activates the Error LED on the front plate.

Scope of Delivery

The counter module must be installed on a suitable connector board to be able to operate. If a

field termination assembly (FTA) is used, a system cable is required to connect the connector

board to the FTA. Connector boards, sensor selection plug, system cables and FTAs are not

included within the module’s scope of delivery.

The various connector boards are described in Chapter 3.6. the system cables in Chapter 3.7.

The FTAs are described in separated manuals.

Product Description

X-CI 24 51 is a NonSIL counter module intended for use in the programmable electronic system

(PES) HIMax.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, see System Manual (HI 801 001 E).

The module is used to count the pulses, to measure the frequency and the rotational speed

and, if defined, to recognize the rotation direction. Two channels are required to use the

recognition of rotation direction function, see Chapter 4.5.4.

Proximity switches in accordance with EN 60947-5-6 (NAMUR) or control circuit devices of

type 3 in accordance with EN 61131-2 can be connected to the counter module. Proximity

switches and control circuit devices may not be operated simultaneously.

It can be operated with safety-related modules and other NonSIL modules within one base

plate. Safety-related and NonSIL modules may not be wired redundantly.

The module is interference-free, in particular, with respect to EMC, electrical safety,

communication to the X-SB and X-CPU modules, as well as the user program.

Module and connector boards are mechanically coded, see Chapter 3.6.1. Coding avoids

installation of improper I/O modules.

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the modules and the HIMax system.

Assembly

The input module has 16 safety-related digital inputs 48/120 VAC for contact makers. For

safely detecting a high level on the digital input, the voltage and current thresholds must be

exceeded, see Table 8.

The 8 short-circuit-proof supplies feed 2 supply outputs each (S1 to S8). One supply output

is assigned to each digital input.

The safety-related 1oo2 processor system for the I/O module controls and monitors the I/O

level. The data and states of the I/O module are made available to the processor modules

via the redundant system bus. The system bus has a redundant structure for reasons of

availability. Redundancy is only ensured if both system bus modules are inserted in the

base plates and configured in SILworX.