F3503SILWORX HIMatrix 安全控制器

安全相关的F35控制器是一个紧凑的系统，位于金属外壳内，具有24个数字输入，8个数字输出，2个计数器和8个模拟输入。
控制器有3种型号的SILworX和3种型号的ELOP II工厂，见第3.2章。本手册中描述了所有的变体。
本设备适合安装在Ex-zone 2，参见4.1.5章。
该设备已通过TÜV安全相关应用的认证，最高可达SIL 3 (IEC 61508, IEC 61511和IEC 62061)， Cat. 4 (EN 954-1)和PL e (EN ISO 13849-1)。
进一步的安全标准、应用标准和测试标准在HIMA网站上的证书中有详细说明。

安全功能
控制器配有与安全相关的数字输入输出、与安全相关的计数器和与安全相关的模拟输入。
3.1.1与安全相关的数字输入
控制器配有24个数字输入。每个输入的状态(HIGH, LOW)由单个LED发出信号。
输入信号作为模拟测量捕获，并作为INT值范围从0…3000提供给程序(30 0…V).使用可配置的阈值生成
BOOL值，见表26
默认设置为:
低电平:< 7v高电平:> 13v
阈值是使用系统参数设置的，同时考虑了与安全相关的准确性，见表43和表44。

输入端可连接无自备电源或信号电源的机械触点。无自身电源的无电位机械触点通过内部防短路24v电源(LS+)供电。它们每个提供一组8个机械触点。图1显示了如何执行连接。
使用信号电压源时，相应的地必须连接到输入端(L-)，见图1。

故障时的反应
如果设备检测到数字输入故障，用户程序根据断电跳闸原理处理低电平。
设备激活FAULT LED。
除了信道信号值外，用户程序还必须考虑相应的错误码。
错误代码允许用户在用户程序中配置额外的故障反应。

F35

The safety-related F35 controller is a compact system located in a metal enclosure with 24 digital inputs, 8 digital outputs, 2 counters and 8 analog inputs.
The controller is available in 3 model variants for SILworX and 3 model variants for ELOP II Factory, see Chapter 3.2. All variants are described in this manual.
The device is suitable for mounting in Ex-zone 2, see Chapter 4.1.5.
The device has been certified by the TÜV for safety-related applications up to SIL 3 (IEC 61508, IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).
Further safety standards, application standards and test standards are specified in the certificate available on the HIMA website.

Safety Function
The controller is equipped with safety-related digital inputs and outputs, safety-related counters and safety-related analog inputs.
3.1.1 Safety-Related Digital Inputs
The controller is equipped with 24 digital inputs. The state (HIGH, LOW) of each input is signaled by an individual LED.
The input signals are captured as analog measurements and provided to the program as a range of INT values from 0…3000 (0…30 V). Configurable thresholds are used to generate
BOOL values, see Table 26
The default setting is:
Low level: < 7 V High level: > 13 V
The thresholds are set using system parameters taking the safety-related accuracy into account, see Table 43 and Table 44.

Mechanical contacts without own power supply or signal power source can be connected to the inputs. Potential-free mechanical contacts without own power supply are fed via an internal short-circuit-proof 24 V power source (LS+). Each of them supply a group of 8 mechanical contacts. Figure 1 shows how the connection is performed.
With signal voltage sources, the corresponding ground must be connected to the input (L-), see Figure 1.

Reaction in the Event of a Fault
If the device detects a fault on a digital input, the user program processes a low level in accordance with the de-energized to trip principle.
The device activates the FAULT LED.
In addition to the channel signal value, the user program must also consider the corresponding error code.
The error code allows the user to configure additional fault reactions in the user program.