9
05.01
9.3 Safety of machinery – safety–related parts of controls according to EN ISO 13849–1:2008
9-352
©
Siemens AG 2012 All Rights Reserved
SIMODRIVE 611 Configuration Manual (PJU) – 02/2012 Edition
9.3.6
Principle of STO in a safety function
SENSE
EVALUATE
SRP/CS
a
SRP/CS
b
RESPOND
SRP/CS
c
M
3
RF
M
–K1
Safety relay
Power module
Control module
–K2
Line contactor
Line infeed
Fig. 9-12
Principle of STO, two–channel structure
A safety function essentially comprises two subsystems:
S
SENSE
S
EVALUATE
S
RESPOND
Every safety function must be configured using suitable sensors, logic units and
actuators.
The SENSE and EVALUATE subsystems are not considered in any more depth
here. The selection and installation of the components must conform to the re-
quirements of the safety function to be implemented.
DThe RESPOND subsystem in principle has a two channel structure. The first
channel includes the safety relay –K1 of the drive. This operates according to
the pulse shutdown principle with monitoring.
Line contactor –K2 forms the second channel, which is integrated in the line
infeed. The line contactor is monitored using positively–driven NC contacts.
As an alternative to integrating the line contactor, it is also possible to use a mo-
tor contactor for each motor as the second safety–related channel. The calcula-
tion results of the following application examples can be analogously applied.
SENSE,
EVALUATE
RESPOND
9 Cabinet Design and EMC
02.12