
Safety engineering
Safety functions
Integration into the application of the controller
42
EDS94AYAF EN 1.0
1.3.2
Integration into the application of the controller
For the use of the functions, certain settings in the controller are required. Here, the
Lenze PC software »Engineer« supports and guides you.
When a safety function is required, the safety technology activates the corresponding safe
monitoring function. However, the standstill function is only directly executed with the
"safe torque off" (STO) function. Other safety functions in which a controller action is
required will need to be safely monitored.
The action of the drive (e.g. braking, braking to standstill, keeping the standstill position)
must be implemented by the user application in the standard device.
Currently the application can be parameterised and/or configured via function block
editor of the Engineer depending on the runtime software licence. For this, the system
block
LS_SafetyModuleInterface
must be integrated into the application.
The safety module is implemented in the 9400 ServoPLC via the control configuration
(SMI_SafetyModuleInterface). The control and status data of the safety module can be
evaluated via the free programming and connected to further interface signals.
The connection to a user application serves to achieve the following:
1. Activation of the safety function in the safety module, e.g. SS1.
The monitoring starts.
2. The safety module transmits the information to the basic device that the function
has been activated using the corresponding bit in the control word
SMI_dwControl
.
3. The application evaluates the control word and starts the motion sequence, e.g.
braking etc.
Internal communication
Safety module and standard device communicate via an internal interface.
If communication to the standard device is interrupted, e.g. by switching off the standard
device, the safety module responds by means of the following actions:
ƒ
Error stop with STO is activated
ƒ
"Warning" error message is transmitted
ƒ
The "ME" LED is blinking
The required fault acknowledgement (AIE) is possible via terminal or safety bus. For further
information read the "Error management" chapter.
1.3.2.1
Control information
The safety module transfers information via requested or active safety functions with the
control word SMI_dwControl. The application in the standard device must evaluate the
control word and execute the corresponding action.