Siemens SIMOTICS S-1FL6, Руководство по эксплуатации

Страница: 311 / 432

Safety Integrated function
8.4 Safety Integrated basic functions
SINAMICS V90, SIMOTICS S-1FL6
Operating Instructions, 04/2019, A5E36037884-007
309
8.3.5 Response time
Response time means the time from the control via terminals until the response actually
occurs. For 200 V variant servo drives, the STO response time in the worst case is 15 ms.
For 400 V variant servo drives, the STO response time in the worst case is 5 ms. The
response time of fault reaction functions is 2 s.
8.3.6 Residual risk
The fault analysis enables the machine manufacturer to determine the residual risk at this
machine with regard to the drive unit. The following residual risks are known:
WARNING
Personal injury or device damage deu to the intrinsic potential of hardware faults
Due to the intrinsic potential of hardware faults, electrical systems are subject to additional
residual risk, which can be expressed by means of the PFH value.
• Take into account the these residual risks when designing your machine and where
necessary apply suitable countermeasures.
WARNING
Personal injury or device damage resulting from the simultaneous failure of two power
transistors in the inverter
Simultaneous failure of two power transistors (one in the upper and the other offset in the
lower inverter bridge) in the drive may cause brief movement of the drive which can result
in a personal injury or device damage. The movement depends on the number of poles of
the motor. For a synchronous rotary motor, the maximum movement is 180 °/No. of pole
pairs
•
Take suitable measures to prevent unexpected drive movement, for example, by using a
brake equipped with safety monitoring.
8.4 Safety Integrated basic functions
8.4.1 Safe Torque Off (STO)
In conjunction with a machine function or in the event of a fault, the "Safe Torque Off" (STO)
function is used to safely disconnect and de-energize the torque-generating energy feed to
the motor.
When the function is selected, the drive unit is in a "safe status". The switching on inhibited
function prevents the drive unit from being restarted.
The two-channel pulse suppression function integrated in the Motor Modules/power units is a
basis for this function.