17
Safety Figures
Safety Manual
MN042004EN March 2017 www.eaton.com
Safety Figures
SIL 1 Compliant Safety Functions
To provide protection to motor by opening the relay contacts thus
interrupting main power to motor by de-energizing contactor on
detection of following conditions :
1. Thermal Overload ( Trip time as defined in 60947-4-1 driven
by trip curve)
2. Over Temperature Sensed by PTC (to support EN 60947-8
3. Motor Stalling
4. Current Phase Loss
5. Residual Ground Fault
These safety functions are implemented by the modules
•
BCM (C445BX-XXXX) - V 1.00.0022, in combination with
•
MM (C445MA-XXXX) - V 1.00.0034
– Safety data for BCM and MM modules are listed below on next
two pages.
– All calculations assuming 50°C ambient temperature unless oth-
erwise specified.
SIL values (i.e. PFH or PFD) for the safety functions are to be
calculated by adding the PFH or PFD values of the selected BCM
and MM variants.
Safety Function Related to Optional Communication
Cards which are part of C445 System
C445XX-E Safety Function:
The C445XX-E Ethernet Communication Card shall detect any of
the events listed below as loss of communication with master
device (when connected in implicit communication mode on
Ethernet network) and inform BCM ( C445BX-XXXX) commu-
nication loss event by using system service “SERVICES_APP_
TRIGGER_COMM_LOSS” and raising ‘EDC_EIP_COMM_LOSS’
fault code so C445BX-XXXX can open the relay contacts, de-ener-
gizing the contactor coils thus interrupting main power to motor
List of events to be detected as loss of communication :
1. Ethernet cable unplug/cut and no communication received for
more than user configured communication timeout value*
2. Master stops sending request/response to slave for more
than user configured communication timeout value*
3. If Ethernet PHY chip takes more than user configured com
dog timeout value* to send/receive any frames to EDC
microcontroller.
*User configured timeout value range :
1 to 536870 milliseconds
C445XX-P Safety Function:
The C445XX-P Profibus Communication Card shall detect any of
the events listed below as loss of communication with master
device and inform BCM ( C445BX-XXXX) as communication
loss by invoking system service “SERVICES_APP_TRIGGER_
COMM_LOSS” and raising ‘PDC_ PROFI_COMM_LOSS’ fault
code so C445BX-XXXX can open the relay contacts, de-energiz-
ing the contactor coils thus interrupting main power to motor
List of events to be detected as loss of communication :
1. Profibus cable is unplugged/cut and no communication
received for more than user configured communication
timeout value**
2. Master stops sending request/response to slave for more
than user configured communication timeout value**
3. If Profichip ASIC takes more than 100 millisecond time to
respond.
**User configured timeout value range :
1 to 655350 milliseconds
Below is firmware version for optional communication cards
C445XX-E - V1.01.0034
C445XX-P - V1.00.0025
– Safety data for C445XX-E and C445XX-P are listed below on
next two pages.
– All calculations assuming 50°C ambient temperature unless
otherwise specified.
SIL values (i.e. PFH or PFD) for the safety functions are to be
calculated by adding the PFH or PFD values of the selected
C445XX-E and C445XX-P.
Important Safety Information :
The C445XX-E and C445XX-P are defined as slaves over the
automation system. As detailed in C445XX-E and C445XX-P
safety function the C445 system can be configured such that
on loss of communication between C445 communication mod-
ule and upstream master the C445 will open the relay contacts,
de-energizing the contactor coil thus interrupting main power to
motor.
The communication modules conformance certificates are
issued by PROFIBUS and ODVA organization for C445XX-P and
C445XX-E modules respectively. The conformance certificate
can be found on http://www.eaton.com/c445 -> Documentation
-> Technical Data. The Profibus and Ethernet/IP protocol are
not independently evaluated for SIL 1 compliant data exchange
interfaces
The external communication devices (example Master PLC,
repeater, gateway etc.) shall be SIL 1 or better if user wants to
achieve safety integrity for C445XX-E and C445XX-P offered
safety function.
