3
Safety concept
Drive safety functions
Manual – MOVISAFE
®
CS..A Safety Card
17
•
The MOVISAFE
®
CS..A safety card can release or safely deactivate the output
stage of the inverter. The switching state of the internal output F-DO_STO, and
thus the STO drive safety function, must be stable once within 60 seconds for at
least 2 seconds (2.5 seconds with extended diagnostics).
•
The safety concept of the MOVISAFE
®
CS..A safety card is based on a safe state
existing for all safe process values. For the MOVISAFE
®
CS..A, this value is "0" for
all F-DI inputs and F-DO outputs.
•
The system was designed pursuant to IEC 61508 for SIL3 and EN ISO 13849-1 for
Performance Level e.
•
The MOVISAFE
®
CSS21A and CSS31A safety cards can reliably monitor motion
functions in conjunction with the following safety encoders:
– ES7S/EG7S
– AS7W/AG7W
– AK0H/AK1H
– EI7C FS
The MOVISAFE
®
CS..A safety card switches off the output stage of the inverter
when a limit value of an active drive safety function is exceeded.
3.7
Drive safety functions
This chapter describes the drive safety functions pursuant to EN 61800-5-2. The fol-
lowing table shows the availability of the drive safety functions described below, de-
pending on the respective MOVISAFE
®
CS..A safety card used.
MOVISAFE
®
safety card
Drive safety functions
Idle state
Motion
STO SBC SS1(c) SS1(b) SS2(c) SS2(b) SOS SLS SSM SSR SDI SLI SLA
Only with FS encoder
CSB21A
x
x
CSS21A
x
x
x
x
x
x
x
x
x
x
x
x
x
CSB31A
1)
x
x
x
CSS31A
1)
x
x
x
x
x
x
x
x
x
x
x
x
x
1) has a second encoder connection (not used for functional safety)
24842532/EN – 04/2018
