HIMA HIMatrix F3 DIO 20/8 02 Series Safety Related Remote I/O Modules

HIMA HIMatrix F3 DIO 20/8 02 Series Safety Related Remote I/O Modules

HIMA F3 DIO 20/8 02 is a safety related remote I/O module certified by T Ü V, belonging to the HIMatrix programmable electronic system family. This module adopts a compact metal shell design, providing 20 digital inputs and 8 digital outputs. It communicates with HIMax or HIMatrix controllers through the SafeEthernet protocol to expand the system's I/O hierarchy, but does not run user programs on its own.

This device is suitable for safety related applications up to SIL 3 level, complies with IEC 61508, IEC 61511, IEC 62061 standards, and also meets Cat. 4 and PL e (EN ISO 13849-1) requirements. For railway applications, this module has also obtained SIL 4 certification and complies with EN 50126, EN 50128, and EN 50129 standards. In addition, the device is suitable for installation in Zone 2 explosive environments.

Product Model and Selection

F3 DIO 20/8 02 offers multiple models to adapt to different environmental requirements and programming tools:

Model, working temperature, special characteristics, programming tool

F3 DIO 20/8 02 0...+60 ° C Standard ELOP II Factory

F3 DIO 20/8 021 (-20 ° C) -20...+60 ° C wide temperature type, with protective coating ELOP II Factory

F3 DIO 20/8 023-25...+70 ° C salt spray resistant (IEC 60068-2-11) ELOP II Factory

F3 DIO 20/8 024-25...+70 ° C railway application, anti vibration and anti impact ELOP II Factory

F3 DIO 20/8 02 SILworX 0...+60 ° C Standard SILworX

F3 DIO 20/8 021 SILworX -20...+60 ° C wide temperature type, with protective coating SILworX

F3 DIO 20/8 023 SILworX -25...+70 ° C salt spray resistant SILworX

F3 DIO 20/8 024 SILworX -25...+70 ° C Railway Application SILworX

Safety functions and fault response

3.1 Safety related digital inputs

The 20 digital inputs adopt a non electrically isolated design, and the status of each input is indicated by an independent LED.

Connection method:

Passive mechanical contacts: powered by a 24V power supply (LS+) with internal short-circuit protection, with every 4 contacts in a group

Active signal source: The corresponding ground terminal needs to be connected to the input terminal (L -)

Fault response:

When the device detects a digital input fault:

According to the principle of "power loss trip", the user program processes low-level signals

FAULT LED lights up

User programs need to consider both channel signal values and corresponding error codes simultaneously

Line monitoring function:

To achieve emergency stop input monitoring that complies with EN ISO 13849-1 Cat.4 and PL e, the line monitoring function can be configured to detect short circuits or open circuits. By connecting the digital outputs (DO 1-8) of the system to the digital inputs (DI) of the same system and configuring pulse outputs, it is possible to detect:

Cross short circuit between two parallel wires

Line connection error

Grounding fault (only applicable to grounding systems)

Open circuit or contact disconnection

3.2 Safety related digital outputs

The 8-channel digital output adopts a non electrically isolated design, and the status of each output is indicated by an independent LED.

Load capacity:

Channels 1-3 and 5-7: Maximum 0.5 A (up to 60 ° C)

Channels 4 and 8: Temperature related load capacity

< 50°C：2 A

50-60°C：1 A

60 ° C: 0.5 A (limited to F3 DIO 20/8 023 and 024 only)

Overload protection:

When overload occurs, one or all affected digital outputs are turned off. After the overload is eliminated, the output will automatically reconnect.

Fault response:

When the device detects a digital output fault:

The output of the affected module is set to a safe (power-off) state through a safety switch

When a device malfunction occurs, all digital outputs are turned off

FAULT LED lights up

Important precautions:

The redundant connection of two outputs must be decoupled using diodes

Single pole switching output must use the corresponding channel group's L-ground terminal (two pole connection)

For inductive loads, it is recommended to directly connect the freewheeling diode

Technical specifications

4.1 General specifications

Parameter specifications

Response time ≥ 10 ms

Ethernet interface 2 x RJ-45, 10BASE-T/100BASE-Tx, integrated switch

Working voltage 24 VDC, -15%/+20%

Maximum input current 8 A (at maximum load)

No load current of approximately 0.4 A (at 24 V)

External fuse 10A, delay type (T)

Protection level IP20

Dimensions (W x H x D) 207 mm x 114 mm x 66 mm

Weight approximately 1 kg (standard type)/1.2 kg (wide temperature type)

4.2 Digital Input Specifications

Parameter specifications

Input quantity 20 (non electrically isolated)

High level 15-30 VDC, ≥ 2 mA (at 15 V)

Low level ≤ 5 VDC, ≤ 1.5 mA

Typical switch point 7.5 V

Sensor power supply 5 x 20 V/100 mA (at 24 V), short circuit protection

4.3 Digital output specifications

Parameter specifications

Output quantity 8 (non electrically isolated)

Output voltage ≥ L+minus 2 V

Minimum load of 2 mA per channel

Maximum internal pressure drop of 2 V (at 2 A)

Maximum leakage current of 1 mA (at 2 V)

The maximum total output current is 7 A

Communication and Diagnosis

5.1 SafeEthernet Communication

The module communicates with the associated controller through the SafeEthernet protocol, providing:

RJ-45 Ethernet ports for two integrated switches

Supports 10BASE-T/100BASE-Tx, half duplex and full duplex

Automatic negotiation and automatic crossover functions

Free configuration of IP address and subnet mask

Network port used:

UDP 8000: Programming and Debugging

UDP 8001/8004: PES configuration

UDP 6010：safeethernet

UDP 123: SNTP time synchronization

5.2 LED Status Indication

LED color status description

24 VDC green on/off working voltage present/absent

RUN green on/flashing/off RUN/STOP/non running

ERROR red light on/flashing/extinguishing error stop/start loading/no fault

FAULT yellow light on/flashing/extinguishing configuration invalid/loading fault/no fault

DI 1-20 yellow light on/off input activated/inactive

DO 1-8 yellow light on/off output activated/inactive

5.3 Reset button function

Some models are equipped with a reset button, which can be accessed through a pin made of insulating material. Pressing and holding the reset button for at least 20 seconds during restart can:

Restore the connection parameters (IP address and system ID) to their default values

All accounts are disabled except for the administrator's default account (empty password)

Installation and wiring

6.1 Mechanical Installation

Installed on a 35 mm DIN rail

Appropriate measures should be taken to avoid interference during wiring, such as separating signal lines from power lines

6.2 Zone 2 Installation Requirements (ATEX)

Special conditions must be met when installing in Zone 2:

Installed in a casing that meets the requirements of EN 60079-15, with a minimum protection level of IP54

The casing needs to be labeled as' only allowed to operate in power-off state '

The casing must be able to safely dissipate heat (power consumption 9-25 W)

Use 10A delay type fuse protection

Only PELV or SELV power supplies can be used

6.3 Terminal Wiring

Digital input terminal:

13-18: Input 1-4, LS+sensor power supply, L-ground

19-24: Input 5-8, LS+sensor power supply, L-ground

25-30: Input 9-12, LS+sensor power supply, L-ground

31-36: Input 13-16, LS+sensor power supply, L-ground

37-42: Input 17-20, LS+sensor power supply, L-ground

Digital output terminal:

1-6: Output 1-4 (DO+), L-Ground (Channel Group 1)

7-12: Output 5-8 (DO+), L-Ground (Channel Group 2)

6.4 Cable plug specifications

Power connection:

4-pole screw terminal

Wire cross-sectional area: 0.2-2.5 mm ²

Stripping length: 10mm

Tightening torque: 0.4-0.5 Nm

On site side connection:

7 6-pole screw terminals

Wire cross-sectional area: 0.2-1.5 mm ²

Stripping length: 6mm

Tightening torque: 0.2-0.25 Nm

Configuration and Parameters

F3 DIO 20/8 02 can be configured using SILworX (CPU OS V7 and above) or ELOP II Factory (CPU OS V6. x and below).

7.1 SILworX Configuration Parameters

Digital input module parameters:

DI Number of Pulsed Channels: The number of pulse output channels (used for line monitoring)

DI Pulse Slot: Pulse Module Slot

DI Pulse Delay [μ s]: Line monitoring waiting time

DI. Error Code: The error code for all numerical inputs

Module Error Code: Module Error Code

Digital input channel parameters:

->Error Code [BYTE]: Channel Error Code

->Value [BOOL]: Input value

Pulsed Output [USINT]: Pulse Source Channel

Digital output module parameters:

DO. Error Code: The error code for all numerical outputs

Module Error Code: Module Error Code

Digital output channel parameters:

->Error Code [BYTE]: Channel Error Code

Value [BOOL]: Output value

7.2 Error Code Interpretation

Number input error code:

0x01: Digital input module malfunction

0x10: Channel short circuit

0x80: Open circuit between pulse output DO and digital input DI (such as open circuit, contact disconnection, L+undervoltage)

Digital output error code:

0x01: Digital output module malfunction

0x02: Channel shut down due to overload

0x04: Digital output read back error

0x40: External short circuit or EMC protection short circuit

0x80: Channel shut down due to corresponding channel failure

Module error code:

0x0000: I/O processing is normal

0x0001: No I/O processing (CPU not running)

0x0010: Invalid configuration

0x0020: Failure rate exceeds the limit

0x0040/0x0080: The configured module is not inserted

Maintenance and operation

8.1 Normal operation

Remote I/O must operate in conjunction with the controller without the need for specific monitoring

The first diagnosis can be made through LED evaluation

8.2 Maintenance Measures

Operating system loading: Utilize system downtime to load the latest version

Regular testing: Conduct validation testing every 10 years (refer to safety manual HI 800 023 E)

8.3 Fault Handling

Digital input/output fault response, see Chapter 3

If a safety critical fault is detected in the testing hardware, the module enters the STOP_INVALID state, the input signal is no longer processed, and the output switches to a safe power-off state

8.4 Discontinuation and Disposal

Deactivation: Disconnect the power, unplug the pluggable terminal block and Ethernet cable

Transportation: Original packaging must be used

Disposal: Industrial customers are responsible for the proper disposal of retired hardware and may sign disposal agreements with HIMA as needed