background image

Compatibility

The safety mechanisms described in this document are based on the following software versions:

Bootloader V7.20

EOS AppLayer Software V1.00 with Modular Safety Kernel V1.70

Application Software V2.14

The following hardware restrictions apply:

PCB version ED92000108-B01

Assembly BOM version A11

External restrictions

The steering controller EHD produced by Danfoss provides load-dump protected supply voltage from
two independent power sources to the joystick. Make sure that only these power sources are used for
supplying JS1-H Steer by Wire.

For more information, please refer to 

Installation

 on page 20.

JS1-H Steer by Wire must be installed together with EHD version 1.31 or newer.

A hazard and risk analysis must be conducted before using safety functions.

The system integrator shall evaluate if the provided safety functions are suitable for reducing
potential risks.

The system integrator shall configure and validate the safety function in the final installation.

Product limitations

JS1-H Steer by Wire relies on a load-dump protected power supply by the EHD controller. Those power
supplies are completely independent and must not be interlinked.

The joystick internally connects both ground lines. This enables JS1-H Steer by Wire to stay operational if
one of the ground connections is interrupted.

C

Caution

It is strongly recommended to use only properly insulated power lines to prevent any short circuits. In
case of an electrical short on one joystick channel, the equipment will still work on the other channel with
reduced performance on system level.

Certification Z10 047358 0005

The JS1-H Steer by Wire steering joystick is certified for use in on- and off-road safety applications with an
on-road usage of less than 10% according to the following:

SIL2 - IEC 61508:2010

PL 

d

, Cat 3 - ISO 13849:2014/2015 (Cat 2 for Monitoring Force Feedback)

AgPL 

d,

 Cat 3 - ISO 25119:2018/2019 (Cat 2 for Monitoring Force Feedback)

The certificate explicitly does NOT cover safe on-road systems as per SIL 3, PL 

e,

 and AgPL 

e

 in its entirety

as it requires external circuitry, which is not in scope of the assessment.

User and Safety Manual

PLUS+1® JS1-H Steer by Wire

Functional Safety

 

©

 Danfoss | December 2022

AX436683569858en-000101 | 15

Summary of Contents for PLUS+1 JS1-H

Page 1: ...User and Safety Manual PLUS 1 JS1 H Steer by Wire www danfoss com...

Page 2: ...Revision history Table of revisions Date Changed Rev December 2022 First edition 0101 User and Safety Manual PLUS 1 JS1 H Steer by Wire 2 Danfoss December 2022 AX436683569858en 000101...

Page 3: ...14 Normal operation 14 Safe state 14 Power on self test POST 14 Out of range detection 14 Functional Safety Compatibility 15 External restrictions 15 Product limitations 15 Certification Z10 047358 0...

Page 4: ...Vehicle fault insertion and testing 22 Safety validation testing 22 Service part handling and repair instruction 22 Safety validation steps after replacing JS1 SBW with a service part or SW update 23...

Page 5: ...ct your nearest Danfoss representative Important user information Danfoss is neither responsible nor liable for indirect or consequential damages resulting from the use or application of this equipmen...

Page 6: ...19 2018 2019 Cat 2 for Monitoring Force Feedback This document covers safety functions requirements safety related parameters and application verification Additionally it provides information on insta...

Page 7: ...the opposite direction the operator moves the grip and the applied force feedback emulates the mechanical resistance to a conventional steering system The operator is notified on an error in the EHD...

Page 8: ...ors One of the joystick s finger functions is to give the machine operator control over the vehicle s direction lights Two buttons allow activating or deactivating the corresponding direction lights H...

Page 9: ...direction Operator notification The operator notification consists of a buzzer tone and a vibration feedback This is part of the redundancy concept since the joystick is designed to reliably inform th...

Page 10: ...EMS ISO 11452 2 2004 100 V m Conducted EMS ISO 11452 4 2011 200 mA Automotive transient pulses 1 2a 2b 3a 3b ISO 7637 2 2012 Automotive starting profile ISO 16750 2 2012 Note Us6 5 5V Automotive load...

Page 11: ...C power supply on page 19 CAN interface In the EHD steering system JS1 H Steer by Wire integrates dual channel CAN functionality Both CAN interfaces run simultaneously and provide steering control and...

Page 12: ...ed data page 0 Data page 0 PDU format 253 PSU specific 214 PGN supporting information Default priority 3 Parameter group number 64982 0x00FDD6 BJM1 SPN data format Start position Length Name SPN 1 1 2...

Page 13: ...2 bits Joystick 1 Button 4 Pressed Status Auto Guidance 0x00 Not pressed 0x01 Pressed 0x02 Error Indicator 0x03 Not Available 2688 6 3 2 bits Joystick 1 Button 3 Pressed Status Indicator Right 0x00 N...

Page 14: ...or affected modules are disabled but the joystick stays operational A Safe State can only be reset through a power cycle This means the one time occurrence of a single error leads to entering the Safe...

Page 15: ...y Wire relies on a load dump protected power supply by the EHD controller Those power supplies are completely independent and must not be interlinked The joystick internally connects both ground lines...

Page 16: ...functions provided by the JS1 H Steer by Wire steering joystick Approving certification and homologation of the entire system to the desired risk reduction level Installation set up safety assessment...

Page 17: ...processor interrupts the communication to the EHD controller No messages are sent to the CAN bus from the corresponding CAN Node Due to the second CAN channel the joystick functionality is still give...

Page 18: ...ring function that monitors the operator notification to ensure that the machine operator is correctly notified in case of a failures only Joystick safety perameters Safety parameter Specification Des...

Page 19: ...dback will immediately be disabled This will also send the joystick into safe state and send out Force feedback error meaning it will remain operable at limited performance until the next power down D...

Page 20: ...he two channels C1 pin Function Diagram 1 Ground common 2 Power supply A 3 Steering Bus A H 4 Steering Bus A L 5 CAN Shield A 6 FF Power 7 Horn Signal 8 Horn Power C1 pin Function Diagram 1 Ground com...

Page 21: ...ing points Calibration The joystick software uses non volatile calibration and configuration data for its steering application User and Safety Manual PLUS 1 JS1 H Steer by Wire System Set up Danfoss D...

Page 22: ...ting on the integrated system for failure modes where the system reaction to a fault cannot be predicted or simulated Please check with the EHD Safety Manual and the applicable Safety Standard which t...

Page 23: ...Service Tool can be used for checking the system status of all CAN connected Danfoss PLUS 1 Compliant devices and flashing firmware The following functions should be highlighted here Read out error c...

Page 24: ...eeds to be replaced Horn always on Hardware problem Joystick needs to be replaced GPS based Auto Drive always off Hardware problem Joystick needs to be replaced Light is always on high beam Hardware p...

Page 25: ...foss Power Solutions US Company 2800 East 13th Street Ames IA 50010 USA Phone 1 515 239 6000 Danfoss Power Solutions Trading Shanghai Co Ltd Building 22 No 1000 Jin Hai Rd Jin Qiao Pudong New District...

Reviews: