system

HIMax System 3 Product Description
Table 12 specifies how the user may intervene during the corresponding states.
State Possible user interventions
LOCKED � Changing the factory settings
� Setting the mode switch to Stop 1) to enter the STOP state
� Setting the mode switch to Run to enter the RUN state
� Using a PADT command to enter the STOP state
STOP/VALID
CONFIGURATION
� Using a PADT command to enter the RUN state
� Loading the user program
� Starting the user program
� Loading the operating system
� Taking preliminary actions for forcing variables
� Loading the user program
� Loading the operating system
STOP/INVALID
CONFIGURATION
STOP/OS_DOWNLOAD None. Once the loading process is completed, the processor
module enters the STOP state.
RUN � Stopping the user program
� Forcing variables
� Online Test
RUN/UP STOP � Using a PADT command to enter the STOP state
1)
STOP/VALID CONFIGURATION or STOP/INVALID CONFIGURATION, depending on
wether the processor module has a valid configuration
Table 12: Operating System States, Possible User Interventions
3.4.2 Behavior in the Event of Faults
If faults occur, the processor module enters the error stop state and tries to restart. It performs
a complete self-test which can also cause another error stop.
If the fault is still present, the module does not restart. Use the PADT to remove the cause
of the fault, e.g., by loading a new application.
Once the processor module has normally run for approximately one minute, an error stop is
considered again as first error stop, and the module tries to restart.
3.4.3 Noise Blanking
Noise blanking is used to improve the system availability by suppressing temporary faults
occurred within the safety time. The safety time is configured in the system
The processor module performs noise blanking for the I/O modules and blanks interference
on the channels and transmission paths between processor module and I/O module. In the
same way, the output module blanks noises on the transmission path or processor modules.
Noise blanking for each I/O module channels can be activated or deactivated.
If the processor module or the output module detected an error on this signal path, the fault
reaction is suppressed ( ), if another valid value still exists, which is not older than the
fault tolerance time. The fault reaction to an interference is suppressed until the last user
program cycle occurring within the fault tolerance time ( ). If the fault re-occurs during this
cycle, fault handling is activated. Otherwise the the valid input value is processed by the
user progra m
HI 801 001 E Rev. 3.00 Page 29 of 104