Additional signal sequence diagrams

Dieses Thema enthält die folgenden Abschnitte:

Temporary intermediate states are not illustrated in the signal sequence diagram. Only typical input signal combinations are illustrated in the diagram. Other signal combinations are possible.

The most significant areas within the signal sequence diagram are highlighted in color.

Weitere Infos
The diagram in the overview for this function block must also be taken into account.

Hinweis
Only the material flow direction from muting sensors S_MutingSwitch11/S_MutingSwitch12 to muting sensors S_MutingSwitch21/S_MutingSwitch22 is described in the following (forward direction). This means the muting sensor pair S_MutingSwitch11/S_MutingSwitch12 is positioned before the safety-related equipment and S_MutingSwitch21/S_MutingSwitch22 is behind the safety-related equipment. This is illustrated in the graphic in the function block overview.
The function block also supports the opposite material flow direction (backwards) from muting sensors S_MutingSwitch21/S_MutingSwitch22 to muting sensors S_MutingSwitch11/S_MutingSwitch12. The functional sequence remains identical.

Person in zone of operation, muting inactive, stop request via safety-related equipment, start-up inhibit active

The signal sequence diagram shown below illustrates what happens if, for example, a person interrupts the light beam of a muting sensor of the first parallel sensor pair (see situation (1)) and then moves forward to enter the zone of operation of the protected machine, i.e., the person also interrupts the light beam of the safety-related equipment, thus triggering a stop request (see situation (2)).

MS_11, MS_12: First muting sensor pair, connected to function block inputs S_MutingSwitch11 and S_MutingSwitch12 (the "yellow light beams" symbolize the detection area)
MS_21, MS_22: Second muting sensor pair, connected to function block inputs S_MutingSwitch21 and S_MutingSwitch22

Additional assumptions:

S_StartReset = SAFEFALSE: Start-up inhibit after the function block has been activated and after the Sicherheitssteuerung has started up.
MutingEnable = TRUE (constant): No separate enable signal required for the muting operation.

0 The function block is not yet activated (Activate = FALSE).
As a result, all outputs are FALSE or SAFEFALSE.

1 After the function block has been activated by Activate = TRUE, the start-up inhibit is active at first. Therefore, the S_AOPD_Out enable output remains SAFEFALSE.

2 A positive signal edge at the Reset input resets the start-up inhibit.
The S_AOPD_Out output becomes SAFETRUE immediately because the light grid is not interrupted either (input S_AOPD_In = SAFETRUE).

3 The person in our example interrupts the light beam of the muting sensor at input S_MutingSwitch11, thus switching the signal to SAFETRUE (situation (1) in the graphic above).
This change in state at S_MutingSwitch11 initiates measurement of the discrepancy time set at DiscTime11_12 (maximum permissible time for the second muting sensor to signal SAFETRUE as well) and the time measurement for the overall muting duration set at MaxMutingTime.

4 Before muting can be activated (for which the S_MutingSwitch12 input must also switch to SAFETRUE within DiscTime11_12), the person also interrupts the light grid of the safety-related equipment (situation (2) in the graphic above), i.e., S_AOPD_In switches to SAFEFALSE.
As a result, the S_AOPD_Out enable output switches to SAFEFALSE, as an object (in this case, a person) has been detected inside the zone of operation and muting has not previously been activated. The machine is stopped.
When S_AOPD_In switches to SAFEFALSE, the muting operation is canceled.

5 The person has now left the detection area of the safety-related equipment (i.e., of the light grid). S_AOPD_In switches back to SAFETRUE (temporary situation (1) in the graphic above).
A short time later, the signal of muting sensor S_MutingSwitch11 also switches back to SAFEFALSE, as the person has left the detection area of the muting sensor too.
Although the light beams of all sensors are no longer interrupted, the S_AOPD_Out enable output remains SAFEFALSE, as a positive edge is first expected at the Reset input.
As the muting operation has already been canceled, it is of no relevance that the time set at MaxMutingTime elapses without a result. The function block does not detect an error, the Error output remains FALSE.

6 A positive signal edge at the Reset input resets the start-up inhibit. As S_AOPD_In = SAFETRUE (light beam of the safety-related equipment is not interrupted), the S_AOPD_Out output switches to SAFETRUE.

Error-free use of the override function

The signal sequence diagram shown below illustrates a muting operation with override function, using the example of an impermissible object on an assembly conveyor that ends at a zone of operation with a running machine. This is illustrated in the graphic below:

The signal sequence diagram demonstrates an error-free override operation that ends automatically after the object has been removed from the zone of operation.

Additional assumptions:

S_StartReset = SAFEFALSE: Startup inhibit after the function block has been activated and after the Safety PLC has started up.
MutingEnable = TRUE (constant): No separate enable signal required for the muting operation.

Steps 0 to 5 correspond to the signal sequence diagram for error-free muting in the function block overview.

0 The function block is not yet activated (Activate = FALSE). As a result, all outputs are FALSE.

1 After the function block has been activated by Activate = TRUE, the startup inhibit is active at first. The S_AOPD_Out output therefore first remains SAFEFALSE.

2 A positive signal edge at the Reset input resets the startup inhibit.
The S_AOPD_Out output switches immediately to SAFETRUE (normal operation) because the light grid does not detect an object (input S_AOPD_In = SAFETRUE).

3 The first muting sensor of the first sensor pair (before the safety-related equipment) at the S_MutingSwitch11 input detects an object and switches to SAFETRUE.
The time measurement for the overall muting duration starts after this state change at S_MutingSwitch11. The maximum permissible duration is specified using the MaxMutingTime parameter.

4 The second muting sensor of the first sensor pair also detects the object (the S_MutingSwitch12 input switches to SAFETRUE).
This meets the requirements for a valid muting sequence, i.e, that the object is identified as permissible and the S_MutingActive output switches to SAFETRUE as a result: Muting is active.

5 The object reaches the light grid: the S_AOPD_In input switches to SAFEFALSE ("light grid interrupted").
As muting is active (S_MutingSwitch11 and S_MutingSwitch12 are still SAFETRUE), the machine may continue to run in the zone of operation: the S_AOPD_Out output remains SAFETRUE.

6 The S_MutingSwitch11 muting sensor detects no object anymore and switches to SAFEFALSE before one of the two muting sensors S_MutingSwitch21 or S_MutingSwitch22 switches to SAFETRUE (the light grid is still interrupted, i.e., S_AOPD_In = SAFEFALSE).
This means a muting error occurs and the Error output switches to TRUE.
Muting is immediately deactivated (the S_MutingActive output switches to SAFEFALSE and the MaxMutingTime timer is stopped) and the machine must not continue to run in the zone of operation. The S_AOPD_Out output switches to SAFEFALSE.
The requirements for an override operation are given. The OverridePossible output thus switches to TRUE.

7 The operating personnel requests the override operation via a control device (S_StartStopOverride input switches to SAFETRUE). The OverrideActive output switches to TRUE.
The override time measuring starts. The maximum permissible duration is specified using the MaxOverrideTime input. As a result of the active override operation, the Error output switches to FALSE.
The S_AOPD_Out output switches to SAFETRUE, as the override operation is active.
Now, the object can be removed from the zone of operation.

8 The override operation is exited automatically, as the object has been removed (all muting sensors are SAFEFALSE) and the light grid detects no object anymore (input S_AOPD_In = SAFETRUE).
As a result, the outputs OverridePossible and OverrideActive switch to FALSE and the override timer (MaxOverrideTime input) is reset.
After the successful override operation the Error output switches to TRUE again because the previous muting error must first be confirmed (reset request). The S_AOPD_Out output thus switches to SAFEFALSE.

9 The operator releases the control device for the override function (S_StartStopOverride input = SAFEFALSE). However, this has no more effect, as the override operation has already been completed automatically.
As long as there is no reset request by the operator, the Error output remains TRUE and the S_AOPD_Out output SAFEFALSE. A positive signal edge at the Reset input initiates the reset.

Errors during the override operation, e.g., override timer has elapsed

The signal sequence diagram shown below illustrates a muting operation with override function, using the example of an object on an assembly conveyor that ends at a zone of operation with a running machine. It demonstrates the behavior when the override timer (MaxOverrideTime input) elapses during the override operation. This is illustrated in the graphic below.

Additional assumptions:

S_StartReset = SAFEFALSE: Startup inhibit after the function block has been activated and after the Safety PLC has started up.
MutingEnable = TRUE (constant): No separate enable signal required for the muting operation.

0 The function block is not yet activated (Activate = FALSE). As a result, all outputs are FALSE.

1 After the function block has been activated by Activate = TRUE, the startup inhibit is active at first. ResetRequest = TRUE indicates that you need a Reset to reset the startup inhibit.

2 A positive signal edge at the Reset input resets the startup inhibit.
The S_AOPD_Out output switches immediately to SAFETRUE (normal operation) because the light grid does not detect an object (input S_AOPD_In = SAFETRUE).

3 The first muting sensor of the first sensor pair (before the safety-related equipment) at the S_MutingSwitch11 input detects an object and switches to SAFETRUE.
The time measurement for the overall muting duration starts after this state change at S_MutingSwitch11. The maximum permissible duration is specified using the MaxMutingTime parameter.

4 The second muting sensor of the first sensor pair also detects the object (the S_MutingSwitch12 input switches to SAFETRUE).
This meets the requirements for a valid muting sequence, i.e, that the object is identified as permissible and the S_MutingActive output switches to SAFETRUE as a result: Muting is active.

5 The object reaches the light grid: the S_AOPD_In input switches to SAFEFALSE ("light grid interrupted").
As muting is active (S_MutingSwitch11 and S_MutingSwitch12 are still SAFETRUE), the machine may continue to run in the zone of operation: the S_AOPD_Out output remains SAFETRUE.

6 The S_MutingSwitch11 muting sensor detects no object anymore and switches to SAFEFALSE before one of the two muting sensors S_MutingSwitch21 or S_MutingSwitch22 switches to SAFETRUE (the light grid is still interrupted, i.e., S_AOPD_In = SAFEFALSE).
This means a muting error occurs and the Error output switches to TRUE.
Muting is immediately deactivated (the S_MutingActive output switches to SAFEFALSE and the MaxMutingTime timer is stopped) and the machine must not continue to run in the zone of operation. The S_AOPD_Out output switches to SAFEFALSE.
The requirements for an override operation are given. The OverridePossible output thus switches to TRUE.

7 The operating personnel requests the override operation via a control device (S_StartStopOverride input switches to SAFETRUE). The OverrideActive output switches to TRUE.
The override time measuring starts. The maximum permissible duration is specified using the MaxOverrideTime input. As a result of the active override operation, the Error output switches to FALSE.
The S_AOPD_Out output switches to SAFETRUE, as the override operation is active.
Now, the object can be removed from the zone of operation.

8 An override error has occured because the override timer (MaxOverrideTime input) has elapsed before the object could be removed completely from the zone of operation.
As a result, the Error output switches to TRUE and output S_AOPD_Out switches to SAFEFALSE. The outputs OverridePossible and OverrideActive switch to FALSE. A reset is required because of the override error and this is signaled at the ResetRequest output (ResetRequest = TRUE).
The operator releases the key switch (input S_StartStopOverride = SAFEFALSE), but there is no further effect.

9 A positive signal edge at the Reset input initiates the reset.
With the reset the requirements for the override function are given again because at least one of the muting sensors still detects an object (S_MutingSwitch12 = SAFETRUE) and the error state still remains (Error = TRUE). The OverridePossible output thus switches to TRUE.

10 Now, the operator can start an override operation again (input S_StartStopOverride = SAFETRUE). The override timer (MaxOverrideTime input) starts again.
The output OverrideActive switches to TRUE and S_AOPD_Out to SAFETRUE, the Error output switches to FALSE again.
The removal of the object from the zone of operation can be continued.

11 With the switch of S_MutingSwitch11 to SAFEFALSE (all the other sensors are already SAFEFALSE) the requirements for the automatic exit of the override operation are met:

The light beams of all muting sensors are not (anymore) interrupted (S_MutingSwitch11, S_MutingSwitch12, S_MutingSwitch21, and S_MutingSwitch22 = SAFEFALSE) and

the light grid does not detect an object (input S_AOPD_In = SAFETRUE).

The override operation is thus completed. The override timer (MaxOverrideTime input) is reset and the outputs OverridePossible and OverrideActive switch to FALSE.
After the successful override operation, the Error output switches to TRUE again because the previous muting error must first be confirmed by a reset request (the ResetRequest output switches to TRUE). The S_AOPD_Out output thus switches to SAFEFALSE.

0	The function block is not yet activated (Activate = FALSE). As a result, all outputs are FALSE or SAFEFALSE.
1	After the function block has been activated by Activate = TRUE, the start-up inhibit is active at first. Therefore, the S_AOPD_Out enable output remains SAFEFALSE.
2	A positive signal edge at the Reset input resets the start-up inhibit. The S_AOPD_Out output becomes SAFETRUE immediately because the light grid is not interrupted either (input S_AOPD_In = SAFETRUE).
3	The person in our example interrupts the light beam of the muting sensor at input S_MutingSwitch11, thus switching the signal to SAFETRUE (situation (1) in the graphic above). This change in state at S_MutingSwitch11 initiates measurement of the discrepancy time set at DiscTime11_12 (maximum permissible time for the second muting sensor to signal SAFETRUE as well) and the time measurement for the overall muting duration set at MaxMutingTime.
4	Before muting can be activated (for which the S_MutingSwitch12 input must also switch to SAFETRUE within DiscTime11_12), the person also interrupts the light grid of the safety-related equipment (situation (2) in the graphic above), i.e., S_AOPD_In switches to SAFEFALSE. As a result, the S_AOPD_Out enable output switches to SAFEFALSE, as an object (in this case, a person) has been detected inside the zone of operation and muting has not previously been activated. The machine is stopped. When S_AOPD_In switches to SAFEFALSE, the muting operation is canceled.
5	The person has now left the detection area of the safety-related equipment (i.e., of the light grid). S_AOPD_In switches back to SAFETRUE (temporary situation (1) in the graphic above). A short time later, the signal of muting sensor S_MutingSwitch11 also switches back to SAFEFALSE, as the person has left the detection area of the muting sensor too. Although the light beams of all sensors are no longer interrupted, the S_AOPD_Out enable output remains SAFEFALSE, as a positive edge is first expected at the Reset input. As the muting operation has already been canceled, it is of no relevance that the time set at MaxMutingTime elapses without a result. The function block does not detect an error, the Error output remains FALSE.
6	A positive signal edge at the Reset input resets the start-up inhibit. As S_AOPD_In = SAFETRUE (light beam of the safety-related equipment is not interrupted), the S_AOPD_Out output switches to SAFETRUE.