|
This is the web edition of the original ⮫ AC500-S safety user manual, version 1.3.2. This web edition is provided for quick reference only. The original safety user manual must be used to meet functional safety application requirements. |
|
Standards |
Requirements |
|---|---|
|
ISO 14120:2015 |
3.5 Interlocking guard
3.5.1 Interlocking guard with a start function control guard special form of interlocking guard which, once it has reached its closed position, gives a command to initiate the hazardous machine function(s) without the use of a separate start control 3.5.2 Interlocking guard with guard locking guard associated with an interlocking device and a guard locking device so that, together with the control system of the machine, the following functions are performed: … - the guard remains closed and locked until the risk due to the hazardous machine functions “covered” by the guard has disappeared; |
|
ISO 14119:2013 |
Interlocking devices associated with guards – principles for design and selection |
|
ISO 13849-1:2015 |
5.2.2 Manual reset function Note: A positive edge evaluation has the same quality as a negative edge evaluation. |
|
ISO 12100:2010 |
6.2.11.4 Restart after power interruption If a hazard could be generated, the spontaneous restart of a machine when it is re-energized after power interruption shall be prevented (e.g., by use of a self-maintained relay, contactor or valve). |
This FB controls an entrance to a hazardous area via an interlocking guard with guard locking ("four state interlocking"). The used switch does not distinguish between if the safety door is unlocked but closed or unlocked and opened. Therefore, we only have the S_Guard input compared to FB SF_GuardLocking_2.
This function controls the guard lock and monitors the position of the combination of guard and lock. This function block can be used with a mechanical locked switch.
The operator requests to get access to the hazardous area. The guard can only be unlocked when the hazardous area is in a safe state. The guard can be locked if the guard is closed. The machine can be started when the guard is closed and the guard is locked. An unlocked guard will be detected to initiate a safety reaction.
The S_StartReset and S_AutoReset inputs shall only be activated if it is ensured that no hazardous situation can occur when the PES is started.
|
Name |
Data type |
Initial value |
Description, parameter values |
|---|---|---|---|
|
VAR_INPUT |
|||
|
Activate |
BOOL |
FALSE |
|
|
S_Guard |
BOOL |
FALSE |
Variable. Monitors the guard interlocking. Can be connected to the S_GuardOut of the SF_Guard FB. FALSE: Guard open. TRUE: Guard closed and guarded area safe. |
|
S_SafetyActive |
BOOL |
FALSE |
Variable. Status of the hazardous area (EDM), e.g., based on speed monitoring or safe time off delay. FALSE: Machine in non-safe state. TRUE: Machine in safe state. |
|
UnlockRequest |
BOOL |
FALSE |
Variable. Operator intervention – request to unlock the guard. FALSE: No request. TRUE: Request made. |
|
S_StartReset |
BOOL |
FALSE |
|
|
S_AutoReset |
BOOL |
FALSE |
|
|
Reset |
BOOL |
FALSE |
⮫ Table 995 “General input parameters” Also used to request the guard to be locked again. The quality of the signal must conform to a manual reset device. |
|
VAR_OUTPUT |
|||
|
Ready |
BOOL |
FALSE |
|
|
S_GuardLocked |
BOOL |
FALSE |
Interface to hazardous area which must be stopped. FALSE: No safe state. TRUE: Safe state. |
|
S_UnlockGuard |
BOOL |
FALSE |
Signal to unlock the guard. FALSE: Close guard. TRUE: Unlock guard. |
|
SafetyDemand |
BOOL |
FALSE |
Optional. |
|
ResetRequest |
BOOL |
FALSE |
Optional. |
|
Error |
BOOL |
FALSE |
|
|
DiagCode |
WORD |
16#0000 |
|
Error detection
Static signals are detected at Reset. Errors are detected at the Guard switches.
Error behavior
In the event of an error the S_GuardLocked and S_UnlockGuard outputs are set to FALSE, the DiagCode output indicates the relevant error code, and the Error output is set to TRUE. An error must be acknowledged by a rising trigger at the Reset input.
Function block-specific error and status codes
|
DiagCode |
State name |
State description and output setting |
|---|---|---|
|
C001 |
Reset Error 0 |
Static Reset detected in state 8x01. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
C010 |
Guard Error |
S_Guard is not TRUE although the door was not requested to be opened. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
C011 |
Reset Error 1 |
Static Reset detected in state C410. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
C410 |
Guard Return |
S_Guard becomes TRUE again after being lost (C010). Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE |
|
Cx50 |
Safety Lost |
Lost safety acknowledge signal. IF S_Guard = TRUE THEN x = 4 ELSE x = 0 |
|
Output signals for x = 4 (C450): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE |
||
|
Output signals for x = 0 (C050): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
||
|
C021 |
Reset Error 2 |
Static Reset detected in state C420. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
C420 |
Safety Return |
Safety acknowledge signal becomes TRUE again after being lost (Cx50). Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE |
|
C031 |
Reset Error 3 |
Static Reset detected in state 8430. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
Cx40 |
Unlock Request Error |
Waiting time to Unlock exceeded. IF S_Guard = TRUE THEN x = 4 ELSE x = 0 |
|
Output signals for x = 4 (C440): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE |
||
|
Output signals for x = 0 (C040): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
||
|
C041 |
Reset Error 4 |
Static Reset detected in state Cx40. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE |
|
DiagCode |
State name |
State description and output setting |
|---|---|---|
|
0000 |
Idle |
The function block is not active (initial state). Ready = FALSE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = FALSE |
|
8000 |
Guard Closed and Locked |
Guard is closed and locked. Ready = TRUE S_GuardLocked = TRUE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = FALSE |
|
8x01 |
Init |
Function block was activated and initiated. IF S_Guard = TRUE THEN x = 4 ELSE x = 8 |
|
Output signals for x = 4 (8401): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = FALSE |
||
|
Output signals for x = 8 (8801): Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = TRUE ResetRequest = FALSE Error = FALSE |
||
|
8430 |
Wait for Reset |
Door is closed and locked, now waiting for operator reset. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = FALSE |
|
8812 |
Wait for Operator |
Waiting for operator to request to open the door (unlock request). Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = FALSE SafetyDemand = TRUE ResetRequest = FALSE Error = FALSE |
|
8822 |
Guard Open and/or Unlocked |
Guard is unlocked. Door can be closed or open. Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = TRUE ResetRequest = FALSE Error = FALSE |
|
8410 |
Wait for Unlocked |
S_UnlockGuard is TRUE, however the acknowledge signal S_GuardLocked is still TRUE (waiting for acknowledge FALSE). Ready = TRUE S_GuardLocked = FALSE S_UnlockGuard = TRUE SafetyDemand = FALSE ResetRequest = TRUE Error = FALSE |

