Safe stop
Instruction handbook
b maXX
BM4400, BM4600, BM4700
Document No.: 5.12008.07
333
E
C.2.2 Function principle STO
1)
Applications that require a minimizing risk according to performance level d (EN ISO 13849-
1) or SIL 2 (EN 62061) according to chapter
C.2.1 Safety classifications and safety notes
from page 330 must have 2 independent shutdown paths, which are used to shut down the
commutation in the power section of the inverter.
For this risk minimization the two-channel shutdown via 1 safety relay with feedback on the
basic unit and the pulse enable circuit of the BM4000 controller LC3 are implemented.
The following Baumüller inverters BM4XXX-XXY-XXXXX[Ryy]-
S01
-XX in combination with
the Baumüller BM4000 controller LC3 of the accordant device model have these shutdown
paths:
BM4XXX-XXY-XXXXX[Ryy]-
S01
-XX with Y = 1, 3, 5:
device model with one safety relay and a discrete pulse enable circuit (size 1-7)
2)
Applications for a minimizing risk according to performance level e (EN ISO 13849-1) or
SIL 3 (EN62061) therefore need 2 independent shutdown paths, too.
The difference to
1)
is that the two-channel shutdown must be implemented via two safety
relays in order to achieve a minimizing risk.
The Baumüller inverters of the b maXX of the device model
BM4XXX-XXY-XXXXX[Ryy]-
S01
-XX in combination with the Baumüller BM4000 controller
LC3 of the accordant device model are provided with these shutdown paths:
BM4XXX-XXY-XXXXX[Ryy]-
S01
-XX with Y= 2, 4, 6:
device model with two safety relays (size 3-7)
These device models provide an additional functional shutdown via the pulse enable circuit
of the BM4000 controller LC3, besides the shutdown via both safety relays.
As the two-channel shutdown reaches performance level e and SIL3 using both safety relays,
the third shutdown path will not be responded to regarding the safety requirements.
The connection diagrams
Safety classifications and safety notes
must be complied with.
Summary of Contents for b maxx BM4400
Page 359: ......
