Details of the application example

This section describes a possible application where the safety-related SF_MutingSeq function block can be used to implement sequential muting with four sensors and override function.

The function block must only be used in an actual application once a risk analysis has been conducted.

Details of the risk category/SIL/PL have not been included here, as classification is always based on the application in which the function block is used.

Hinweis
The use of the function block alone is not sufficient to execute the safety-related function according to the Cat./SIL/PL determined by the risk analysis. In conjunction with the safety-related I/O device used, additional measures must be taken to meet the requirements of the safety-related function. These include, for example, the appropriate wiring and parameterization of the inputs and outputs as well as measures to exclude (design out) errors that cannot be detected. For additional information, please refer to the documentation provided with the safety-related I/O device used.

Hinweis
Please refer to the notes in the User Manual on proper electrical connection of the Sicherheitssteuerung and the extension modules (e.g., connecting the muting sensors and the safety-related equipment).

Sequential muting with four sensors, with override function and startup inhibit

This example describes the connection of four muting sensors (B2, B3, B4, and B5) to the safety-related SF_MutingSeq function block. The muting sensors are arranged as two sequential sensor pairs with all sensors aligned identically and installed on the same side of the conveyor.
The material flow direction of the conveyor is from left to right, i.e., the muting sensor pair S_MutingSwitch11/S_MutingSwitch12 is positioned before the safety-related equipment and S_MutingSwitch21/S_MutingSwitch22 behind the safety-related equipment. This is illustrated in the graphic in the function block overview.

The sensors/actuators are connected to the input/output devices and the function block as follows:

Receiver B1E of the safety-related equipment (two-channel light grid) is connected to input terminals 1.1 and 2.1 of the safety-related input device PSDI 1.

Two-channel evaluation of the signal from the light grid for equivalence occurs in the safety-related input device, which has been parameterized accordingly. The resulting signal is assigned to the global I/O variable OS_MutSeq_In, which in turn is connected to the S_AOPD_In input of the function block. It is SAFETRUE if both inputs of the safety-related input device PSDI 1 are SAFETRUE at the same time (light grid not interrupted) and the input device does not report any errors as regards exceeding the discrepancy time. For more detailed information, please refer to the descriptions of the input parameters of the safety-related input device.

Hinweis
Cross-circuit monitoring is not performed by the function block. It is your responsibility to perform this monitoring function outside of this function block in the safety-related control system.

The two single-channel muting sensors arranged sequentially and positioned before the light grid, which start the muting operation, are connected to input terminals 1.1 and 2.1 of the safety-related input device PSDI 2. The global I/O variables B2_MS11_In or B3_MS12_In, which are assigned to terminals 1.1 and 2.1, are connected to the function block inputs S_MutingSwitch11 or S_MutingSwitch12.
The two single-channel muting sensors arranged sequentially and positioned behind the light grid, which complete the muting operation, are connected to input terminals 3.1 and 4.1 of the safety-related input device PSDI 2. The global I/O variables B4_MS21_In or B5_MS22_In, which are assigned to terminals 3.1 and 4.1, are connected to the function block inputs S_MutingSwitch21 or S_MutingSwitch22.
S_StartReset = SAFEFALSE specifies a start-up inhibit after the Sicherheitssteuerung has been started up or the function block has been activated. The start-up inhibit is only removed if there is a positive signal edge at the Reset input. To this end, the S1 reset button is connected to input 1.1 of the standard input device DI 1. The assigned global I/O variable S1_Reset is connected to the Reset input.
If required, the request of the override function is performed by switching the S_StartStopOverride input to SAFETRUE. To this end, the S2 override key switch is connected to input 6.1 of the safety-related input device PSDI 1 and assigned to the I/O variable S_StartStopOverride_InVar.
The S_MutingActive output of the function block controls muting lamp P1 in order to signal the state "muting active". This muting lamp is connected to output terminal 1.1 of the safety-related output device PSDO. The assigned global I/O variable MutActOut_P1_MSeq1 is connected to the S_MutingActive function block input.
The output signals OverridePossible, OverrideActive, SafetyDemand and ResetRequest of the function block are assigned to output variables which can be used for signaling purposes (see note below).

The function block is perpetually activated by the TRUE constant at the Activate input. A TRUE constant is also applied to the MutingEnable input (permanent enable signal for the muting operation by means of MutingEnable = TRUE).

Hinweis
The S_AOPD_Out enable output of the SF_MutingSeq function block is connected to an output terminal of the application via a global I/O variable or via other safety-related functions/function blocks.
Connect the S_AOPD_Out enable output of the SF_MutingSeq function block to the S_OutControl input of the SF_EDM function block, for example, thus implementing a two-channel output connection.

Hinweis
Monitoring signals:
The following function block outputs are connected to output variables which can be assigned to output terminals for signaling purposes.

OverridePossible signals whether an override operation can be started. Connect the OverridePossible output to a signal lamp, for example.

OverrideActive displays whether an override operation is active. Connect the OverrideActive output to an acoustic signaling device, for example.

SafetyDemand signals the status "safety function requested". Connect the SafetyDemand output to an output terminal of your application, either directly or via other standard functions/function blocks.

ResetRequired signals whether a reset request by the operator is required to continue. Connect the ResetRequired output to a signal lamp, for example.

B1 Two-channel light grid (B1S = optoelectronic transmitter, B1E = optoelectronic receiver)

B2, B3 Optoelectronic muting sensors (first sequential sensor pair), each single-channel, positioned before the light grid

B4, B5 Optoelectronic muting sensors (second sequential sensor pair), each single-channel, positioned behind the light grid

P1 Muting lamp indicating the active muting process

S1 Reset button (single-channel) to reset function block errors and to remove the start-up inhibit

S2 Override key switch

See note above the illustration

B1	Two-channel light grid (B1S = optoelectronic transmitter, B1E = optoelectronic receiver)
B2, B3	Optoelectronic muting sensors (first sequential sensor pair), each single-channel, positioned before the light grid
B4, B5	Optoelectronic muting sensors (second sequential sensor pair), each single-channel, positioned behind the light grid
P1	Muting lamp indicating the active muting process
S1	Reset button (single-channel) to reset function block errors and to remove the start-up inhibit
S2	Override key switch
	See note above the illustration