Safety Integrated - Industry - Siemens

Ex. No.
4
Functionality of the function block "F_DRIVE"
Sign of life
The sign of life is generated by the block and transmitted to
the output block TD_LIVE_SIGN [To Drive Live Sign]. The input
block FD_LIVE_SIGN [From Drive Live Sign] awaits the sign of
life. The "plausibility" of the sign of life transmitted and the
one received is checked. The sign of life in the drive system
must be incremented by 15 (function containing SIMOTION
function block).
The FB300 permanently converts the signs of life received into
new signs of life using the principle of serial numbers.
If a sign of life transmitted does not correspond to the sign of
life received, the sign of life expected is transmitted again.
This is tolerated until a time parameterized at input block
F_TIME has expired. Then, an error is output and the output
ENABLE_AXIS is reset. This principle corresponds to a time expected
with acknowledgement.
Caution
The time set at input block F_TIME has to be set to the
lowest possible value to ensure that the function block
"F_DRIVE" immediately detects any errors arising during
data transmission.
Error acknowledgement / enable of safe standstill
Errors can be reset only with AREA_PROTECTED =1 through a
rising edge at ACK [Acknowledgement].
ENABLE_AXIS only possible if AREA_PROTECTED =1, if no errors
are pending and if a rising edge is applied to ACK.
Fail-safe output(s) of the fail-safe Distributed Safety system
must be controlled via the ENABLE_AXIS output. The "Safe
standstill" safety function of the SINAMICS drive system is triggered
via this output.
452 Function Example No. MC-FE-I-004-V11-EN
Protection zone closed
If the protection zone is closed (AREA_PROTECTED=1), speed
or standstill monitoring is not performed. The sign of life, CRC
and the relevant position of the control signals with respect to
each other (AREA_PROTECTED and ENABLE_MOTION) are still
monitored.
The ENABLE_MOTION signal - which constitutes, for example,
the evaluated signal transmitted from an acknowledgement
button - may only include a high signal if
AREA_PROTECTED=0, which can be connected, for example,
to the evaluated signal transmitted from protective doors of a
certain protection zone. If this is not the case, ENABLE_AXIS is
set to 0.
Safe operating stop / standstill monitoring, e.g. protection
zone open
The actual position FD_RED_ROUGH_POS [From Drive Redundant
Rough Position] is permanently stored in the block and
verified as the standstill position when axis standstill monitoring
is requested (AREA_PROTECTED =0). The standstill monitoring
function is activated when the AREA_PROTECTED signal
is changed from 1 to 0. When standstill monitoring is active,
the system tolerates position changes by the value entered in
FD_RED_ROUGH_POS +/- the value that can be parameterized
by the user DELTA_INC_STANDSTILL [Delta Increments Standstill].
This yields both a positive and a negative standstill limit.
If the encoder value does not exceed the limits specified, then
ENABLE_AXIS=1 and the drive can still be controlled even if it
has stopped.
If the position is changed and one of the above-mentioned
limits violated, the monitoring function is violated and the
safe standstill function on the drive triggered via the output
block ENABLE_AXIS = 0, thus setting a restart inhibit.
The maximum delta increments permissible during standstill
are transmitted to the output block TD_DELTA_INC_SS [To
Drive Delta Increments Standstill]. They can thus be simultaneously
monitored in SIMOTION.