Fuji Electric ALPHA7, User Manual

Page: 157 / 662

CHAPTER 2 WIRING
2-110
Safety Function
2
2.7 Safety Function
2.7.1 Overview
With the ALPHA7 Series, the servo amplifier output transistor is stopped by hardware circuit, and the
motor is slowly stopped (free-run stop) by opening (turning OFF) safety device connection connector
CN6 [EN1+] and [EN2+] inputs. This is the Cat.0 (uncontrolled stoppage) safety stop function (STO)
regulated by EN60204-1, and complies with functional safety standards.
If constructing a safety system, a safety shutoff device was required outside the servo amplifier,
however, this is no longer required by using the safety stop function (STO).
Table 2.7.1-1 Functional safety performance
EN ISO 13849-1: 2015
Category 3
Performance level e
Average diagnostic coverage 90% or higher (DCave medium)
Response time / Fault reaction time 50 ms or less (response time)
Mean time to dangerous failure for each
channel 62 years or longer (MTTFd)
EN 61508-1 to -7
EN 61800-5-2
Safety function Output torque OFF function (STO)
Safety level SIL3
Hardware fault tolerance 1 (HFT)
Safe failure fraction 90% or higher (SFF)
Probability of failure per hour Less than 1.5 x 10
-8
(PFH)
Probability of failure on demand average [h
-1
] Less than 1.5 x 10
-4
(PFDavg)
Proof test interval 10 years
WARNING

The servo amplifier output cutoff function uses the safety stop function (STO) regulated by
IEC61800-5-2, however, this is not designed to completely cut off the power supply and motor
electrically. Consequently, depending on the servo system application, it will be necessary to
employ such mechanisms as a brake for mechanical locking, or motor terminal protection to prevent
electric shock in order to ensure the safety of end users.

The servo amplifier output cutoff function does not completely cut off the power supply and motor
electrically, and therefore the servo amplifier power supply should be completely cut off, and wiring
and maintenance work carried out after 5 minutes or longer have elapsed.

Voltage occurs at the servomotor terminals during free-run triggered by the output cutoff function,
and therefore maintenance, inspection, and wiring work should be carried out after ensuring that the
servomotor has come to a complete stop.
Failure to observe this could result in electric shock.