This check may be initiated automatically or manually. Automatically, for example, the check may be initiated by a signal generated from a control system at suitable intervals. The automatic test should be provided by preference. The decision about the type of test depends on the risk assessment and the judgement of the end user or machine builder. If no fault is detected, operation may be approved as a result of the test. If a fault is detected, an output must be generated to initiate an appropriate control action.
A second, independent shutdown route is required for this. Notes: In some cases Category 2 is not applicable because the checking of the safety function cannot be applied to all components and devices. Moreover, the cost involved in implementing Category 2 correctly may be considerable, so that it may make better economic sense to implement a different category.
In general Category 2 can be realised with electronic techniques. The system behaviour allows the occurrence of a fault to lead to the loss of the safety function between checks; the loss of the safety function is detected by the check. Category 3 Safety-related parts of control systems must be designed so that a single fault in any of these parts does not lead to the loss of the safety function.
Whenever reasonably practicable, the single fault shall be detected at or before the next demand upon the safety function. This does not mean that all faults will be detected. The accumulation of undetected faults can lead to an unintended output signal and a hazardous situation at the machine. Category 4 Safety-related parts of control systems must be designed so that a single fault in any of these parts does not lead to a loss of the safety function; the single fault must be detected at or before the next demand upon the safety functions e.
If this detection is not possible, then an accumulation of faults shall not lead to a loss of the safety function. Categories in accordance with EN Category 2 The control system requirements derived from the risk graph are specified as follows: Safety-related parts of control systems must.
If the standard is used on its own, a control system designer cannot assume that the relevant requirements of the specific European directive have been met. Risk analysis Under the terms of the machinery directive, a machine manufacturer must carry out a risk analysis in order to identify all the hazards that apply to his machine.
This analysis must then be taken into account in the design and construction of the machine. This requirement also applies to operators who act as manufacturers under the terms of the machinery directive. For example, this may occur with machines that are interlinked or for machinery that has been upgraded and substantially modified. EN contains Principles for risk assessment on machinery. These approaches can be called upon as part of a comprehensive analysis.
EN expands on EN with regard to the assessment of safety-related parts of control systems. Start Determination of the limits of the machine Hazard identification Risk analysis Risk estimation Risk evaluation Is the machinery safe?
Risk reduction Risk assessment. Lifecycles, limits application area, training level, other groups of people, etc. Extent, probability, group of people, human factors, reliability of the safety function, possibility of defeat, etc. No The hazards emanating from a machine may be many and varied.
For example, it is necessary to consider not just mechanical hazards through crushing and shearing, but also thermal and electrical hazards and hazards from radiation. Risk reduction is therefore an iterative process, i.
Page 4. The feedback circuits are interlinked. This must be recorded in the plants operating manual organisational measure.
A start-up test is therefore not required. Earth faults and shorts between contacts in the input circuit are detected. An fault on the device does not lead to the loss of the safety function.
This avoids an unwanted reset before the input circuit is closed or as a result of the reset button being overridden. Their safety contacts open and contactors K19, K20, K22 and K23 de-energise.
Set 1. When the supply voltage is switched on and when voltage is returned after a power failure, the outputs are activated automatically. Contactors KM1 and KM2 de-energise. When voltage is returned after failure of the 24 VDC supply voltage , the safety contact momentary contact on the safety timer PZW K13 switches on. The pulse time is set via the rotary switch on the safe timer PZW K Se t1. S3 must be operated at appropriate intervals to perform a function test.
This must be recorded in the machines operating manual organisational measure. Contactor K2 de-energises. S5 is operated, machine 1 Master plus machines This interrupts the input circuit on safety relays K15 and K The safety contacts on both units open and contactors K16, K17 and K20, K21 de-energise. K37 are monitored in feedback circuits Y1-Y2 of the respective safety relays and contact expander modules.
A fault on the device does not lead to the loss of the safety function. S20 is operated, machine 1 Master plus machines The delay-on de-energisation safety contact switches off contactors K2 and K3 after a delay. In this way, the drive controller A1 is isolated from the energy supply mains after a delay. The delay-on deenergisation time is set on the safety relay.
K8 are monitored in the safety relays feedback circuit SS The safety contact opens after a delay time. The contactors K7 and K8 de-energise after a delay time. The delay-on deenergisation time is set on the safety relay K1. Safety contact opens after a delay and switches off contactors K2 and K3. Safety contact opens after a delay and switches off the intermediate circuit of the master drive A1.
This guarantees safe standstill. The delay-on de-energisation time is set on the safety relay. Inputs E0. Input E0. If an error occurs, output A1. The contacts on safety switches S3 and S4 are opened as soon as the safety gate is opened. Contactor K6 deenergises. Output A1. This cyclical switch-off test must be available within the PLCs user program. In this case we recommend the use of two PSEN 1. The contacts on the safety switch S1 are opened as soon as the safety gate is opened.
Contactors K2 and K3 de-energise. An accumulation of undetected faults can lead to the loss of the safety function. With this application, therefore, it is necessary to ensure that only one safety gate is open at a time or that the status of each safety gate is checked. The contacts on one of the safety switches S S5 are opened as soon as the respective safety gate is opened. Contactors K2 and K3 deenergise. The interface A1 has 4 diagnostic outputs to display or evaluate the status of the safety switches via a PLC.
PN OZ X2. The feedback circuit on the safety relay is linked to the feedback circuit on the contact expander module PZE X4P. The 4 safety switches are connected in series. S9 are opened as soon as the respective safety gate is opened. Series connection by 4 safety gates with PSEN 1. In this case we recommend the use of two PSENcs 2. The 3 safety switches are connected in series.
The semiconductor outputs on one of the safety switches S S13 are opened as soon as the respective safety gate is opened. Contactors K9 and K10 de-energise. The coded safety switches PSEN cs2. S13 have a diagnostic output to display or evaluate the switch status via a PLC.
K12 is reactivated by pressing reset button S Guard locking on the safety switch can be released via pushbutton S The contacts on safety switch S15 are opened as soon as the safety gate is opened.
Contactors K10 and K11 de-energise. Guard locking on the safety switch can be released via pushbutton S6. The contacts on safety switch S4 are opened as soon as the safety gate is opened. Contactors K31 and K32 de-energise. Contactors K31 and K32 deenergise. If enable switch S18 is put in position 2, the contacts at S18 are closed. The input circuit at K33 is closed.
If reset button S20 is operated, the safety contacts on safety relay K33 will close. Contactors K31 and K32 energise. Anyone spending time in the danger zone with an enable switch must be able to detect hazardous conditions at an early stage and take appropriate countermeasures.
Every person who spends time in the danger zone must carry an enable switch with them. Returning the switch to position 1 from position 3 does not make the enable function operative. Description Safety gate function In Manual mode, the guard function of the safety gate is overridden after enable switch S18 is operated. The contacts on safety switches S16 and S17 are opened as soon as the safety gate is opened.
This interrupts the input circuit on the safety. Hazardous movements must not overrun or the safety distance must be an appropriate length. Description Safety gate function The opening and closing of a safety gate for technical processing purposes is signalled to the PNOZ X3.
Guard locking on safety switch S1 can be released via pushbutton S4. The technical processing purposes are not safety-related. For example, there is no safe standstill monitoring. The contacts on safety switches S1 and S2 are opened as soon as the safety gate is opened. In this case we recommend the use of two PSEN cs2. The 2 safety switches are connected in series. The semiconductor outputs on one of the safety switches S8 or S9 are opened as soon as the respective safety gate is opened.
Contactors K8 and K9 de-energise. Contactors K5 and K6 de-energise. When the simultaneity requirement of the two input channels on the standstill monitor PSWZ X1P K7 is exceeded, the unit switches to a fault condition.
K7 is reactivated by pressing reset button S6. Guard locking on safety switch S2 can be released via pushbutton S4. United Arab Emirates. United Kingdom. Vatican City. Wallis and Futuna Islands. West Sahara. Save changes. Your account. In your shopping cart. Log in to view the shopping cart. Log in. Collapse all. Show filters Hide filters. Manufacturer []. PILZ []. Type of module []. Type of control Series []. Mounting []. DIN []. Supply voltage [].
Operating temperature []. Electrical connection []. Number of outputs []. Number of inputs []. Body dimensions []. IP rating []. Safety outputs []. Application []. Auxiliary outputs []. Contact actuation delay [50]. Controlled parameter Kind of connector [1]. D-Sub 9pin [1].
Use prefixes only when it is helpful. Filtering occurs according to data that can differ from actual data displayed on the Website. All found South Georgia and the Southern Sandwich Islands. South Korea. Sri Lanka. Pierre and Miquelon. Vincent and the Grenadines. Tokelau Islands. Trinidad and Tobago. Turks and Caicos Islands. United Arab Emirates. United Kingdom. Vatican City. Wallis and Futuna Islands.
West Sahara. Save changes. Your account. In your shopping cart. Log in to view the shopping cart. Log in. Collapse all. Show filters Hide filters. Manufacturer []. PILZ []. Type of module []. Type of control Series []. Mounting []. DIN []. Supply voltage []. Operating temperature []. Electrical connection [].
Number of outputs []. Number of inputs []. Body dimensions []. IP rating []. Safety outputs []. Application [].
0コメント