9
05.01
9.4 Application examples
9-368
©
Siemens AG 2012 All Rights Reserved
SIMODRIVE 611 Configuration Manual (PJU) – 02/2012 Edition
Supplementary safety function, EMERGENCY STOP
If EMERGENCY STOP is actuated, then the drive should be safely stopped and
shut down.
The EMERGENCY STOP pushbutton is actuated 1x per month.
The consideration for this safety function can be basically realized correspon-
ding to the description in Chapter 9.4.2 “Protective door safety function”.
However, the EMERGENCY STOP pushbutton as well as safety relay –A1 must
also be taken into account for this safety function.
The position switches to monitor the protective door do not play a role when
considering/analyzing EMERGENCY STOP.
–S3
–A1
–K5
–K6
–K2
–K1
–A2
–A3
Fig. 9-18
Block diagram of the supplementary EMERGENCY STOP safety function
SENSE subsystem
The safety functions are initiated by the EMERGENCY STOP pushbutton,
which can be released by turning, and which is connected through two chan-
nels. This has positively opening contacts.
Fault exclusion is assumed for the positively opening contacts as well as for the
mechanical system of the EMERGENCY STOP pushbutton. An accumulation of
faults between two consecutive actuations of the EMERGENCY STOP pushbut-
ton can result in the safety function being lost. This behavior corresponds to
Category 3.
Table 9-16
Parameters for the SENSE subsystem
Parameter
Value
Comment
EMERGENCY STOP pushbutton –S3
B10 value
100.000
Manufacturer’s data
Percentage of dangerous
failures
20 %
Manufacturer’s data
B
10d
value
500.000
B10
d
=
B10
Percentage of dangerous failures
n
op
12per years
assumed actuations per year
MTTF
d
416.666 years
→
high
MTTF
d
=
B
10d
0,1 x n
op
DC
99 %
Plausibility monitoring using –A1
Result
PFH
d
4,29 x 10
-8
/h
EN ISO 13849–1:2008, AnnexK
Performance Level
PLe
with Category 3
Assumption
9 Cabinet Design and EMC
02.12