turck 3 IMX12-FI01-1SF-1R-0/24VDC/CC, Руководство по безопасности, Страница: 7 / 24

7
V01.00 | 2020/04
4.1 Safety function
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R The measured or monitored value at input [E1] are transmitted to the output [A1D] according to
parameterization and within the local process safety time observing the permissible safety accuracy.
Local process safety time is:
■
fin > 1,124 Hz: 1 s
■
fin < 1,124 Hz: 1/f+110 ms
The power bridge is not part of safety-function.
The LED are not part of the safety-function.
The common alarm output is not part of safety function.
Two devices must not be used for the safety-function, e. g. to increase the hardware fault toler-
ance to achieve a higher SIL.
A 1oo2 architecture does not achieve a SIL3.
The safety function is executed 2 s after power-on.
The frequency limits for the inputs are:
■
NAMUR-Sensors according to EN 60947-5-6, line monitoring ,1 µHz …10 kHz, pulse pause
ratio > 50 µs
■
PNP/NPN-sensors, 1 µHz … to 10 kHz, pulse pause ratio > 50 µs
■
potential free contacts, 1 µHz … 10 kHz, pulse pause ratio > 50 µs
■
external signal source, 1 µHz … to 10 kHz, pulse pause ratio > 50 µs
ū
0-signal 0…3 V
ū
1-signal 5…30 V
The local process safety time is the periodical internal diagnostic check (900 ms) + reaction
time.
4.2 Safety accuracy
The safety accuracy Δ
total
depends on the variant and its configuration.
In order to evaluate the safety accuracy for an individual configuration the following informa-
tion is required:
■
Δ
[Ex]
is < 0.1 % of input frequency
Assignment [E] to [A] Δ
total
[E1]

[A1D] Δ
total
= Δ
[E1]
4.3 Safe state
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R The safe state is defined as the output is de-energized (A1D).
4.4 Alarm state
Internal diagnostics are provided in order to detect random hardware failures that result in
a failure of the function. If a failure is detected the device goes into the alarm state. The time
between the occurance of the failure and the time to achieve the alarm state is less than 1 s.
The device remains in alarm state as long as the failure persists, at least for 1 s.
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R The alarm state is defined as the output is de-energized (A1D).